last executing test programs: 18.619641069s ago: executing program 3 (id=1733): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000002580)={0x1d, @empty, 0x4e24, 0x4, 'ovf\x00', 0x25, 0x7, 0x3}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000007000000080000000b"], 0x50) pselect6(0x40, &(0x7f0000000380)={0x1, 0x78, 0x9, 0x80, 0x4, 0x4, 0x1, 0x8}, 0x0, 0x0, &(0x7f0000000500), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000280), 0x0}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="852000000100000018120000275228202fd7a70e3604ea4cc8d8ea86c8bedafac011f559609b4f29498df3d4e489d8a9db8416fa03024b9384cdd5c483546310623f4ade648156975213857b7ed022e8446eb2a39877c944cee716467c5ea4c1be4aa6b06fa6a4f885421d8ae418b4374e36947e206eb35f68545c26f50ce2e6744da45192ac3db6", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000004000000a700feff080000001851000001000000000000000000000054b5000103000000"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x52, &(0x7f0000000180)=""/82, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r3]}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xa4fffffc, @loopback}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='qgroup_num_dirty_extents\x00', r4, 0x0, 0xeb}, 0x18) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r6, &(0x7f00000007c0), &(0x7f0000000840)=0x60) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@remote, @loopback, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'wg2\x00', {}, {}, 0x89, 0x0, 0x24}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x1, 0x2, 0x3], 0x2, 0x2}, {0xffffffffffffffff, [0x1, 0x1, 0x5, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@private=0xa010101, @empty, 0xffffff00, 0xffffffff, 'vlan0\x00', 'syzkaller0\x00', {}, {}, 0x16, 0x3, 0x10}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x4, 0x0, 0x1, 0x4], 0x0, 0x5}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x4, 0x6, 0x8729, 'netbios-ns\x00', 'syz0\x00', {0x1241}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 18.551849869s ago: executing program 3 (id=1734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x2c020680) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x0, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x4e24, 0x7ffe, 0xa, 0x20, 0xa0, 0xd}, {@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000, 0xfffffffffffffffd, 0x800000000000000}, {0x0, 0x9, 0x0, 0x400000000000}, {}, 0x70bd29, 0x3505, 0xa, 0x4}}, 0xf0}}, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xff7ffffffffffffd) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r3 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000040)) 18.452533113s ago: executing program 0 (id=1736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff7, 0x3, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xc81, 0x9, 0x1, 0xfffffffa, 0x38f, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x5, 0x3, 0xffff23ba, 0x7, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.230602117s ago: executing program 0 (id=1738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYRESOCT=r3, @ANYBLOB="29e5ba352bc832aee2560501e2950cc8875147cd24e6da7a729a5c97227c4fe7707bf494f1be78d4ab675e3b2da722e7fd4ab98330a31e87e75eca61e1dfc311345d1542d7b97509401a257d36333d02c308abe41c7293c762bae72baa94366697d3de097488bf856c2f18051556aa003af97c88a258", @ANYRESDEC=0x0], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'ip6erspan0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r6, &(0x7f0000000380)={0x22, 0x80, 0xf5, 0x5, 0x2f}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r2}) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.947694621s ago: executing program 0 (id=1741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='pim6reg\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffbfb000067"], 0x1eb) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x800, 0x8, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="826bb66f03ee9a90", 0x8, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x24048044}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r6, {0xffe0}, {0x9, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r6, 0x3, {0x2, 0x1}, 0xff}, 0x18) 17.728208717s ago: executing program 2 (id=1743): r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x28, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x28, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r3, 0x0, 0x0, 0x12162, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x12, {{0x29, 0x0, 0x37000000, @local}}}, 0x88) 17.659920879s ago: executing program 1 (id=1744): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000200)='rdma.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-1'], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9f223785b5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x72}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x54}}, 0x24000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xffffffff}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 17.484729661s ago: executing program 3 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x40, 0x0, 0x4, 0xff, 0x5, 0x2a00}}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x004'], 0x28}}], 0x1, 0x40000000) 17.483741118s ago: executing program 0 (id=1746): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x700, 0x8120}}}}}}]}, 0x48}}, 0x0) 17.417010586s ago: executing program 1 (id=1747): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe6, 0x3}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x94, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan1\x00'}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffc36}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x40}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x2}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xe}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x3}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x8cb8}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000040}, 0x4801) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000ffffff0a00000008000300", @ANYRES32=r5, @ANYBLOB="2c005080050002"], 0x48}}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000700000000000000bb020000840600000000000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0xf9, &(0x7f00000019c0)=""/249, 0x41100, 0xc}, 0x94) bind(r0, &(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010102}, 0x80) 17.399224011s ago: executing program 2 (id=1748): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x38, 0x1411, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000014) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000010000"], 0x40}, 0x20000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099006d910000"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000036000000040000000200000000000000", @ANYRES32, @ANYBLOB="0900800000000100000000000000f6fa9e200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f00000001c0), 0x0}, 0x20) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88"], 0x72) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r9) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x30, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003020000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) 17.145102802s ago: executing program 0 (id=1750): r0 = socket(0x10, 0x803, 0xb) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYBLOB="1de27b930978d4dc5cd818bf8927a6ef0390e12087437a4e7bef6c8b02b673f77474909baad7e27501d1a8386557f79c496799b880cd9fd62f9cea3f9f7e0125856f301f28202c0137a695d1698beaaae25f02a424537175b06018e711ebb797a3c6ccb3656911ddccabfb2945951faec51dda8c764bb913d63e47a1297bed4227a79d5fec49e9d763699491ee859bcc9a43080f934134150d5029ce9934b8bf230cfdda34b1af1538c5d4388890c3bcf24b11c570ca6b6a48a09955672c601fcc"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17.143371053s ago: executing program 3 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40041, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000240)=0x101) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000340)={'dvmrp0\x00', @random}) 17.138793193s ago: executing program 1 (id=1752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4c, 0x0, "726dd1846145e62011da22061f542026c5c2da414f22111ada33cf59a48dea993c7bd673fa5ba2d17fee42912e2bb33b89f335f4448f27b2896567af7d57421ad0672ae6f6fdd82e36766ec877b02636"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "56bfab0b84d00e6e", "6f88c835074326d029e1f15af2a81582", "f4a093eb", "c017c050d393faed"}, 0x28) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000700)={0x17b, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8], 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) 17.033057012s ago: executing program 1 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newchain={0x24, 0x1e, 0x1, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r2, {0xffff, 0xffff}, {0xe, 0xf}, {0xe, 0xb}}}, 0x24}}, 0x44004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000680)={@loopback, 0x0}, &(0x7f00000006c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), 0xffffffffffffffff) clock_gettime(0x2, &(0x7f0000000540)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x26048091}, 0x80c1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) getsockopt$inet6_buf(r10, 0x29, 0xd, &(0x7f0000000380)=""/120, &(0x7f0000000400)=0x78) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100000000642615fa1b619d302c8d900000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000400000000000000000000ff000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073795a30000000000800054000000021480000000c0a010300000080000000000700000009000200734fbfede6fb3a6a5c3ebd3c45b03b797a310000000900010073797a30000000001c0003801800008008000340000000020c0004400000000000001000140000001000"], 0xcc}}, 0x0) 16.974152035s ago: executing program 4 (id=1754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000700090000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x8880) 16.97341644s ago: executing program 2 (id=1755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5002145a9a90000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000000000007040000f0ffffffb702002008000000182300005469c09b3f46be44bd5c92e2b0583ef0ed0346c334ee9228e27cb1974ed0737a1f66279c00854106a22ee827ff00"/145, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000974301000800000075a90900020000008510000001000000b7080000000000007b8af8ff00000000b7080000000080027b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x82300, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r4, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000029000000040000005e0000000000ebff170000000000000029"], 0x30}, 0xc4) 16.904427622s ago: executing program 3 (id=1756): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @empty, @void, {@generic={0x890d, "30f8ac8546280cc86b5c550d12ce11491808d23aac63d9519ecf6da2"}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc80c0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfdfffc80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 16.904003121s ago: executing program 1 (id=1757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='pim6reg\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffbfb000067"], 0x1eb) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x800, 0x8, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="826bb66f03ee9a90", 0x8, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x24048044}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r6, {0xffe0}, {0x9, 0xb}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r6, 0x3, {0x2, 0x1}, 0xff}, 0x18) 16.902694152s ago: executing program 0 (id=1758): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xb2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000a400000000000190780a014102ac1414aa0304907801000000420000000000000000110000ac1e010100000000a4bdcb5867a62151bc4861154144440fd3ac1e0001000001016401010100010000ffffffff00088000e00000010000000c640101000000000064010101000004000a01010200000000e000000100000006440400018212ecfddbe0c1eecdafbd4dfe9fa050258283177a0000000064010100ac141435ac1414aaacc33bda9f0000"], 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000400)=@generic={0x1, 0x8000000000000000, 0x9}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)}, 0x8000}, {{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000280)}], 0x3, &(0x7f00000004c0)=""/243, 0xf3}, 0x8000}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000c40)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f0000001e80)=""/169, 0xa9}, 0x9a77}], 0x4, 0x10002, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xfef5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x20002}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfdffffff}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40014) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 16.75785656s ago: executing program 4 (id=1759): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x0, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc32", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)="b9", 0x1}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @none, 0x4}, 0xa) 16.737337048s ago: executing program 2 (id=1760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000083000007000000324900007f0000000100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=@udp, 0x2}, 0x20) unshare(0x400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7fff, 0xa1, &(0x7f0000000240)=""/161, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x4, 0x0, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r0, r0, r0, r0]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x94bd08a5d76558a9, 0x1, 0x3a91, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r4, 0x0, 0x0, 0x4000000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r0, r2, 0x31, 0x201c, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000600)={0x1000, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x349, @any, 0x0, 0x2}, 0xe) socketpair(0x1e, 0x0, 0x1000, &(0x7f0000000000)) 16.669317545s ago: executing program 4 (id=1761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="001900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="00214717a707", 0x6485d43c25aa1609}], 0x1, 0x295e, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x8000042, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x10000042, 0x2, 0x3}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x4000b}]}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000700)="00a10800d8705da6b248a8756ebcd3a1dcc2854365ab4d1ed588f3915b28ff1142c5d99b7647262584d8e896532813f9056f850254def380ca198c1f45abe9453ae96ff6bec4e252f7514bb54628c7ca7a8ae5ce76a49579b7f75ae151ebc742f342c8e5489ca64dc3393c52b762cbfd3e7a576cbcfb158e34233b1ae06fcba5cc1c54f355b9bd", 0x87}], 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, &(0x7f0000000000)=0xffffffff, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="02002abd7000fddbff25820000000882245a719350c024a3e9687b6a000300", @ANYRES32=r11, @ANYBLOB="0c0099000800000027000000"], 0x28}}, 0x41000) splice(r8, 0x0, r8, &(0x7f00000002c0)=0x87ffffe, 0xa, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000500040009000000e700000004200000", @ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="04000000000000000400"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000000), 0x0}, 0x20) 16.624151258s ago: executing program 2 (id=1762): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') tee(r0, r1, 0x8, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/4096, 0x1000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1e}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0)=0x8001, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@bridge_getlink={0x80, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x9106, 0x816c}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x10}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x80000000}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_CARRIER={0x5}]}, 0x80}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty}}}], 0x20}}], 0x1, 0x80) 16.620936161s ago: executing program 1 (id=1763): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0a0006e92554130008021100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x1, 0x3, {0x77359400}, {r12, r13/1000+60000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r8], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="150700d8", @ANYRES16=r15, @ANYBLOB="00042cbd7000fcdbdf254c0000000e00a80066697273746e616d650000000c00a7000080000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x8000) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af8fff8ffffff71a4f2ff000000000f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0a30ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 16.553093608s ago: executing program 3 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700f021e3770e89c42ad533e9c784ea110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000c80)={'veth0_macvtap\x00', 0x2}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000008ffdbdf2509000a00"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x58, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "859f94c5efedc12fd3bae3aa6a99f0ad821d04695896c2f3e4080eb70f1467c1"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x40084) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff85000000a400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.622298045s ago: executing program 2 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff7, 0x3, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xc81, 0x9, 0x1, 0xfffffffa, 0x38f, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x5, 0x3, 0xffff23ba, 0x7, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.558591638s ago: executing program 4 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000006c020014001280090001007665746800000000000008000440f24f000027baef4bded8e28c25782994901ae7bfa16096dc867aa548828dccbb66146d1d404d6f8b0d7df3a1ff2b00"/90], 0x48}}, 0x0) 15.39700683s ago: executing program 4 (id=1767): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e22, 0xfffffffe, @empty, 0x9d}}, 0x0, 0x8002}, 0x90) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000180)=0x28) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7f, @loopback, 0xffff}, 0x1c) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001600010000000000000000000a000000040000000c000a"], 0x24}}, 0x0) (async) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f0000000000000001701000002000000d60000002217a6d5db045a545f24b4f1c77d323356970000a967b77b5c326379cc6e9e85d295b987f08babed796db169ad9ac3a0fc34ed4d5229f90a375dd3a5421b963a7fffe21c4e10312f66746d4e0a3a5573bcda3e96fdc26edaf50ee639cd85e69cc72c23fa5cddb7029d7d914a833ac9304c4f2708c34958b82c3009c0d49a4319175fd78715021c58978599abedbe1324b3802b4cc4833eceae3ccd6b4e1305000000000000002bde169b548420b094c52d9949d0145b7854c646158a343d659e9b71a9598891b45d3b9f146911fc00"/241, @ANYRESDEC=r2], 0xf0, 0x4040887}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000840)={@mcast1, 0x0}, &(0x7f0000000880)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex=r9, 0x26, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0]}, 0x40) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000180)=0x5, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmsg$unix(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) (async) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 15.378676898s ago: executing program 4 (id=1768): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.68936279s ago: executing program 32 (id=1758): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xb2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000a400000000000190780a014102ac1414aa0304907801000000420000000000000000110000ac1e010100000000a4bdcb5867a62151bc4861154144440fd3ac1e0001000001016401010100010000ffffffff00088000e00000010000000c640101000000000064010101000004000a01010200000000e000000100000006440400018212ecfddbe0c1eecdafbd4dfe9fa050258283177a0000000064010100ac141435ac1414aaacc33bda9f0000"], 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000400)=@generic={0x1, 0x8000000000000000, 0x9}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)}, 0x8000}, {{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000280)}], 0x3, &(0x7f00000004c0)=""/243, 0xf3}, 0x8000}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000c40)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f0000001e80)=""/169, 0xa9}, 0x9a77}], 0x4, 0x10002, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xfef5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x20002}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfdffffff}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40014) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.175106422s ago: executing program 33 (id=1763): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf6512000000080003aeeb71f99e87611cff7bc26b0afa1468ee6e485000be782001d7e5288da3acb03919ccfc26d1ddfa61d8275e78f1f9ed72b4bea57b5fa4c060e60a1d35bf1cd530f2c87d275afea2ce214ea73fb50e2633dd334e1f338ed906ec5704f8ba608ee0202a4d0cdab6134989cda724ad8ce85d7c53a79125f388d97430fcec56fb2756b0b0090bc8a535dc430bd3e7cd3cc8900134a6070b925efde9b9dd18a8de4560501e50a11903b159135e41c2ee126b9efd30d4223c5eef52942ae98bb7752c8c445f3c4b91472faaa599f35063c620e8b8ee4e9e6929605c124292a94cc0438fc819d39bd5c868823dbaa22ad7f6f404d7dc36f7c2a7c670917b913c038b2b53f93af035f42397c207ac7ca7", @ANYRES32=r6, @ANYBLOB="0a0006e92554130008021100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x1, 0x3, {0x77359400}, {r12, r13/1000+60000}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r8], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r14, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="150700d8", @ANYRES16=r15, @ANYBLOB="00042cbd7000fcdbdf254c0000000e00a80066697273746e616d650000000c00a7000080000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20080}, 0x8000) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.132270842s ago: executing program 34 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700f021e3770e89c42ad533e9c784ea110000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000c80)={'veth0_macvtap\x00', 0x2}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000008ffdbdf2509000a00"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x58, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "859f94c5efedc12fd3bae3aa6a99f0ad821d04695896c2f3e4080eb70f1467c1"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x40084) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff85000000a400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20008004) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 69.492774ms ago: executing program 35 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff7, 0x3, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xc81, 0x9, 0x1, 0xfffffffa, 0x38f, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x5, 0x3, 0xffff23ba, 0x7, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 36 (id=1768): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r0, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): tting bearer [ 142.131191][ T8422] tipc: Disabling bearer [ 142.251390][ T8429] tipc: Enabled bearer , priority 0 [ 142.276482][ T8429] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 142.303773][ T8429] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 142.315679][ T8432] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 142.378201][ T8439] !: renamed from dummy0 [ 142.699044][ T8453] lo speed is unknown, defaulting to 1000 [ 142.720545][ T8453] lo speed is unknown, defaulting to 1000 [ 143.026801][ T8479] tipc: Enabling of bearer rejected, already enabled [ 143.165541][ T8479] tipc: Resetting bearer [ 143.308762][ T7207] tipc: Node number set to 1686055179 [ 143.472475][ T8501] lo speed is unknown, defaulting to 1000 [ 143.521754][ T8501] lo speed is unknown, defaulting to 1000 [ 143.978675][ T8512] __nla_validate_parse: 5 callbacks suppressed [ 143.978693][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 144.029972][ T8513] netlink: 244 bytes leftover after parsing attributes in process `syz.4.638'. [ 144.210176][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.639'. [ 144.240497][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 144.242766][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 144.265146][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.639'. [ 144.294286][ T8521] bridge0: port 3(batadv0) entered disabled state [ 144.311495][ T8521] bridge_slave_1: left allmulticast mode [ 144.343859][ T8521] bridge_slave_1: left promiscuous mode [ 144.377253][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.426907][ T8521] bridge_slave_0: left promiscuous mode [ 144.438431][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.655790][ T8537] tipc: Enabled bearer , priority 0 [ 144.699297][ T8525] tipc: Resetting bearer [ 144.823913][ T8524] tipc: Disabling bearer [ 145.262908][ T8564] lo speed is unknown, defaulting to 1000 [ 145.309600][ T8570] netlink: 240 bytes leftover after parsing attributes in process `syz.3.650'. [ 145.338998][ T8564] lo speed is unknown, defaulting to 1000 [ 145.367481][ T8574] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 145.444771][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 145.467466][ T8581] netlink: 96 bytes leftover after parsing attributes in process `syz.4.655'. [ 145.587186][ T8591] validate_nla: 7 callbacks suppressed [ 145.587204][ T8591] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 145.603639][ T8591] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 145.670366][ T8603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.656'. [ 145.842922][ T8608] lo speed is unknown, defaulting to 1000 [ 145.877814][ T8608] lo speed is unknown, defaulting to 1000 [ 146.090269][ T8625] netlink: 'syz.0.661': attribute type 3 has an invalid length. [ 146.098481][ T8625] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 146.117149][ T8623] bond0: (slave bond_slave_0): Releasing backup interface [ 146.129147][ T8623] bond0: (slave bond_slave_1): Releasing backup interface [ 146.141344][ T8623] team0: Port device team_slave_0 removed [ 146.158134][ T8623] team0: Port device team_slave_1 removed [ 146.172194][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.198285][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.244738][ T8623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.324569][ T8623] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 146.349847][ T8623] bond0: (slave wlan1): refused to change device type [ 146.556765][ T8638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.610038][ T8638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.617967][ T8638] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 146.630005][ T8638] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 147.224376][ T8658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.381231][ T8680] netlink: 'syz.2.673': attribute type 3 has an invalid length. [ 147.400667][ T8680] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 148.017119][ T8705] netlink: 'syz.2.684': attribute type 12 has an invalid length. [ 148.095225][ T8701] lo speed is unknown, defaulting to 1000 [ 148.102579][ T8704] netlink: 'syz.2.684': attribute type 12 has an invalid length. [ 148.119184][ T8696] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925) [ 148.130050][ T8696] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 148.141603][ T8701] lo speed is unknown, defaulting to 1000 [ 148.482428][ T8714] bond0: (slave wlan1): Releasing backup interface [ 149.788825][ T8752] geneve2: entered promiscuous mode [ 149.848420][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.859994][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.089775][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.114970][ T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.134271][ T8764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.495905][ T8788] lo speed is unknown, defaulting to 1000 [ 150.531208][ T8788] lo speed is unknown, defaulting to 1000 [ 150.576644][ T8784] lo speed is unknown, defaulting to 1000 [ 150.621275][ T8797] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 150.887187][ T8784] lo speed is unknown, defaulting to 1000 [ 150.934948][ T8804] tipc: Enabling of bearer rejected, already enabled [ 150.993430][ T8804] __nla_validate_parse: 7 callbacks suppressed [ 150.993448][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 151.009184][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 151.062917][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 151.235306][ T8807] netlink: 92 bytes leftover after parsing attributes in process `syz.0.709'. [ 151.439397][ T8817] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.547837][ T8821] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 151.799739][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.808071][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.831094][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.841264][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.849242][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.857299][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.873574][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.891442][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.907796][ T8824] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 151.970563][ T8834] sctp: [Deprecated]: syz.0.717 (pid 8834) Use of int in maxseg socket option. [ 151.970563][ T8834] Use struct sctp_assoc_value instead [ 152.204022][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 152.597146][ T6523] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 152.637155][ T8859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.725'. [ 152.834980][ T8866] lo speed is unknown, defaulting to 1000 [ 152.845639][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 152.858878][ T8866] lo speed is unknown, defaulting to 1000 [ 152.973423][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 153.277756][ T6523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.292615][ T6523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.386560][ T8894] xfrm0: entered promiscuous mode [ 153.424778][ T8894] xfrm0: entered allmulticast mode [ 153.990522][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 154.002275][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 154.190731][ T8939] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 154.299727][ T8943] syzkaller0: entered promiscuous mode [ 154.305778][ T8943] syzkaller0: entered allmulticast mode [ 154.685524][ T8962] lo speed is unknown, defaulting to 1000 [ 154.763198][ T8962] lo speed is unknown, defaulting to 1000 [ 154.850750][ T8975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.981247][ T8981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.994855][ T8981] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 155.006932][ T8981] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 155.700034][ T9022] ..0·: renamed from hsr0 [ 155.717309][ T9022] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.728287][ T9022] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.741807][ T9022] ..0·: entered allmulticast mode [ 155.748329][ T9022] hsr_slave_0: entered allmulticast mode [ 155.754084][ T9019] nbd1: detected capacity change from 0 to 127 [ 155.760851][ T9022] hsr_slave_1: entered allmulticast mode [ 155.769221][ T9022] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 155.806875][ T9019] syz_tun: entered allmulticast mode [ 155.842456][ T9019] dvmrp1: entered allmulticast mode [ 155.863746][ T9017] lo speed is unknown, defaulting to 1000 [ 155.882626][ T9018] syz_tun: left allmulticast mode [ 155.909857][ T9017] lo speed is unknown, defaulting to 1000 [ 155.918870][ T5183] block nbd1: Receive control failed (result -104) [ 156.170748][ T9033] __nla_validate_parse: 8 callbacks suppressed [ 156.170768][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 156.488353][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 156.514919][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 156.580903][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 156.589936][ T3528] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.601020][ T3528] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.630378][ T3528] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.639869][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 156.647550][ T9058] validate_nla: 62 callbacks suppressed [ 156.647567][ T9058] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 156.659426][ T3528] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.670917][ T9058] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 156.692040][ T9058] netlink: 108 bytes leftover after parsing attributes in process `syz.2.780'. [ 157.071291][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'. [ 157.806831][ T9108] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 157.887053][ T9108] bond2: entered promiscuous mode [ 157.892534][ T9108] bond2: entered allmulticast mode [ 157.922299][ T9110] bridge2: entered promiscuous mode [ 157.934429][ T9110] bridge2: entered allmulticast mode [ 157.948228][ T9110] bond2: (slave bridge2): making interface the new active one [ 157.958356][ T9110] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 158.069278][ T9112] netlink: 'syz.1.794': attribute type 13 has an invalid length. [ 158.077290][ T9112] netlink: 'syz.1.794': attribute type 17 has an invalid length. [ 158.124583][ T9112] lo speed is unknown, defaulting to 1000 [ 158.132165][ T9112] lo speed is unknown, defaulting to 1000 [ 158.250120][ T9125] openvswitch: netlink: IP tunnel dst address not specified [ 158.261500][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'. [ 158.342939][ T9125] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 158.413471][ T9125] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 158.528436][ T9137] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 158.557647][ T9133] lo speed is unknown, defaulting to 1000 [ 158.584266][ T9137] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 158.657143][ T9145] netlink: 'syz.2.804': attribute type 3 has an invalid length. [ 158.668797][ T9145] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 158.695919][ T7209] lo speed is unknown, defaulting to 1000 [ 158.711273][ T7209] syz0: Port: 1 Link ACTIVE [ 158.750512][ T9133] lo speed is unknown, defaulting to 1000 [ 158.776643][ T7205] lo speed is unknown, defaulting to 1000 [ 159.043455][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 159.100749][ T9169] netlink: 112 bytes leftover after parsing attributes in process `syz.0.806'. [ 159.280582][ T9167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.394074][ T9179] tipc: Enabled bearer , priority 0 [ 159.422218][ T9179] tipc: Resetting bearer [ 159.454196][ T9178] tipc: Disabling bearer [ 159.582095][ T9188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.589413][ T9188] IPv6: NLM_F_CREATE should be set when creating new route [ 159.596690][ T9188] IPv6: NLM_F_CREATE should be set when creating new route [ 159.650168][ T9191] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 159.888312][ T9191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.086196][ T9193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.095953][ T9193] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.111558][ T9193] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 160.149641][ T9198] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 160.154567][ T9215] siw: device registration error -23 [ 160.176956][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 160.198041][ T9208] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 160.350564][ T9215] tc_dump_action: action bad kind [ 160.558335][ T9227] batadv_slave_1: entered promiscuous mode [ 160.627811][ T9229] batadv_slave_1: left promiscuous mode [ 161.235578][ T9255] syzkaller1: entered promiscuous mode [ 161.243866][ T9255] syzkaller1: entered allmulticast mode [ 161.402911][ T9260] __nla_validate_parse: 7 callbacks suppressed [ 161.402926][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 162.340139][ T9277] : entered promiscuous mode [ 162.350646][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 162.359547][ T9277] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.694126][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 162.742760][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.764721][ T9291] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.776509][ T9291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.820220][ T9291] validate_nla: 2 callbacks suppressed [ 162.820239][ T9291] netlink: 'syz.0.843': attribute type 10 has an invalid length. [ 163.004654][ T9308] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 163.048096][ T9308] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 163.058209][ T9308] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 163.116388][ T9317] tipc: Enabled bearer , priority 0 [ 163.203186][ T9317] tipc: Resetting bearer [ 163.223543][ T9316] tipc: Disabling bearer [ 163.301380][ T9326] tipc: Enabling of bearer rejected, failed to enable media [ 164.338603][ T9375] tipc: Enabling of bearer rejected, already enabled [ 164.749401][ T9384] lo speed is unknown, defaulting to 1000 [ 164.838566][ T9378] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 165.259559][ T9401] netlink: 'syz.2.875': attribute type 13 has an invalid length. [ 165.272673][ T9408] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 165.273453][ T9400] netlink: 'syz.2.875': attribute type 13 has an invalid length. [ 165.280439][ T9408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.298183][ T9404] bond0: (slave team0): Releasing backup interface [ 165.329531][ T9401] netlink: 'syz.2.875': attribute type 17 has an invalid length. [ 165.350213][ T9400] netlink: 'syz.2.875': attribute type 17 has an invalid length. [ 165.384633][ T9404] bond0: (slave bond_slave_0): Releasing backup interface [ 165.441194][ T9404] bond0: (slave bond_slave_1): Releasing backup interface [ 165.453878][ T9404] team0: Port device team_slave_1 removed [ 165.460506][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.471686][ T9404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.480118][ T9404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.598603][ T9400] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.618696][ T9400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.639728][ T9401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.666509][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 165.679561][ T9415] erspan0: entered promiscuous mode [ 165.687208][ T9415] erspan0: left promiscuous mode [ 165.739315][ T9418] tipc: Enabled bearer , priority 0 [ 165.782857][ T9418] tipc: Resetting bearer [ 165.861692][ T9417] tipc: Disabling bearer [ 166.066162][ T9431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.174221][ T9436] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 166.183070][ T9436] netlink: 72 bytes leftover after parsing attributes in process `syz.0.885'. [ 166.199696][ T9436] netlink: 97 bytes leftover after parsing attributes in process `syz.0.885'. [ 166.520182][ T9447] netlink: 'syz.1.888': attribute type 13 has an invalid length. [ 166.537588][ T9447] netlink: 'syz.1.888': attribute type 17 has an invalid length. [ 166.698102][ T9447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.710545][ T9447] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.736296][ T9447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.780643][ T9453] netlink: 96 bytes leftover after parsing attributes in process `syz.0.890'. [ 166.855004][ T9449] lo speed is unknown, defaulting to 1000 [ 166.916488][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.195452][ T9463] netlink: 76 bytes leftover after parsing attributes in process `syz.2.891'. [ 167.223181][ T9464] netlink: 'syz.1.892': attribute type 2 has an invalid length. [ 167.268898][ T7207] IPVS: starting estimator thread 0... [ 167.282761][ T9455] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.388712][ T9466] IPVS: using max 26 ests per chain, 62400 per kthread [ 167.635721][ T9451] lo speed is unknown, defaulting to 1000 [ 167.789968][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 167.967692][ T9462] lo speed is unknown, defaulting to 1000 [ 168.026650][ T9482] netlink: 164 bytes leftover after parsing attributes in process `syz.4.897'. [ 168.037410][ T9482] netlink: 164 bytes leftover after parsing attributes in process `syz.4.897'. [ 168.047594][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.897'. [ 168.200975][ T9461] lo speed is unknown, defaulting to 1000 [ 168.640023][ T9456] lo speed is unknown, defaulting to 1000 [ 168.920755][ T9507] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.905'. [ 169.109967][ T9512] netlink: 'syz.4.906': attribute type 3 has an invalid length. [ 169.196678][ T9500] lo speed is unknown, defaulting to 1000 [ 169.851530][ T9535] openvswitch: netlink: Missing valid actions attribute. [ 169.858741][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.977319][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 169.989935][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 170.483951][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 171.013556][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 171.126634][ T9570] IPVS: persistence engine module ip_vs_pe_ not found [ 171.146684][ T9567] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 171.166123][ T9580] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 172.949899][ T9605] netlink: 'syz.0.931': attribute type 13 has an invalid length. [ 173.062591][ T9613] __nla_validate_parse: 8 callbacks suppressed [ 173.062608][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 173.090725][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 173.108325][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 173.158509][ T7207] IPVS: starting estimator thread 0... [ 173.254195][ T9620] IPVS: using max 27 ests per chain, 64800 per kthread [ 173.308338][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.935'. [ 173.541542][ T9634] netlink: 'syz.4.940': attribute type 4 has an invalid length. [ 173.551866][ T9637] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 173.561018][ T9638] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 173.594633][ T9644] netlink: 'syz.4.940': attribute type 4 has an invalid length. [ 173.606560][ T9646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.943'. [ 173.616537][ T7212] lo speed is unknown, defaulting to 1000 [ 173.626828][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 173.645002][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 173.648463][ T7212] lo speed is unknown, defaulting to 1000 [ 173.718429][ T7194] lo speed is unknown, defaulting to 1000 [ 173.735783][ T9652] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 173.743933][ T9652] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 173.802797][ T9648] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 173.814439][ T9648] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 173.855385][ T9648] bond0: (slave wlan1): refused to change device type [ 174.378209][ T9678] netlink: 7 bytes leftover after parsing attributes in process `syz.1.950'. [ 174.392077][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 174.566567][ T9682] lo speed is unknown, defaulting to 1000 [ 174.758471][ T9699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.958'. [ 175.081063][ T9711] lo speed is unknown, defaulting to 1000 [ 175.197495][ T9724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.209872][ T9724] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 175.231263][ T9708] bond1: entered promiscuous mode [ 175.271350][ T9724] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 175.335432][ T9708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.937078][ T9754] tipc: Enabled bearer , priority 0 [ 176.078855][ T9754] tipc: Disabling bearer [ 176.516889][ T9769] rdma_rxe: rxe_newlink: failed to add lo [ 176.523098][ T9771] bridge_slave_0: left allmulticast mode [ 176.544716][ T9771] bridge_slave_0: left promiscuous mode [ 176.570502][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.610556][ T9771] bridge_slave_1: left allmulticast mode [ 176.670712][ T9771] bridge_slave_1: left promiscuous mode [ 176.678021][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.699900][ T9771] bond0: (slave bond_slave_0): Releasing backup interface [ 176.723061][ T9771] bond0: (slave bond_slave_1): Releasing backup interface [ 176.734683][ T9771] team0: Port device team_slave_0 removed [ 176.744914][ T9771] team0: Port device team_slave_1 removed [ 176.751714][ T9771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.760454][ T9771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.771789][ T9771] bond0: (slave wlan1): Releasing backup interface [ 176.783626][ T9771] bond2: (slave bridge2): Releasing backup interface [ 176.797024][ T9771] bond3: (slave bridge3): Releasing backup interface [ 176.853371][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 176.887966][ T9769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.946897][ T9778] netlink: 'syz.0.979': attribute type 11 has an invalid length. [ 176.999117][ T8595] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.005726][ T9778] netlink: 'syz.0.979': attribute type 11 has an invalid length. [ 177.019069][ T8595] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.028783][ T8595] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.044640][ T8595] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.274915][ T9796] tipc: Enabling of bearer rejected, already enabled [ 177.595459][ T9815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.293457][ T9831] Bluetooth: MGMT ver 1.23 [ 178.502154][ T9840] __nla_validate_parse: 13 callbacks suppressed [ 178.502175][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 178.563434][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 178.731593][ T9844] lo speed is unknown, defaulting to 1000 [ 179.023711][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.269626][ T9866] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 179.288799][ T9866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.517950][ T9875] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1001'. [ 179.529613][ T9875] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1001'. [ 179.727591][ T9880] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 179.889989][ T9870] lo speed is unknown, defaulting to 1000 [ 179.899728][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 180.144464][ T9888] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1006'. [ 180.182204][ T9888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1006'. [ 180.267707][ T9888] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.1006'. [ 180.764419][ T9903] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1009'. [ 180.820155][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 180.829413][ T9902] bond0: ARP target 170.170.170.170 is already present [ 180.848828][ T9902] bond0: option arp_ip_target: invalid value (2863311530) [ 180.897741][ T9903] batadv1: entered promiscuous mode [ 180.933710][ T9903] batadv1: entered allmulticast mode [ 181.059345][ T9913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.078202][ T9914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.130488][ T9911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.193809][ T9915] netlink: 'syz.0.1012': attribute type 12 has an invalid length. [ 181.202388][ T9914] netlink: 'syz.0.1012': attribute type 12 has an invalid length. [ 181.207810][ T9917] netlink: 'syz.4.1014': attribute type 11 has an invalid length. [ 181.315441][ T9919] sit2: entered promiscuous mode [ 181.392125][ T9921] sctp: [Deprecated]: syz.2.1015 (pid 9921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.392125][ T9921] Use struct sctp_sack_info instead [ 181.749260][ T9930] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 181.884732][ T9930] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 181.917038][ T9930] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 182.255096][ T9942] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.476815][ T9962] ..0·: left allmulticast mode [ 183.481635][ T9962] hsr_slave_0: left allmulticast mode [ 183.495823][ T9962] hsr_slave_1: left allmulticast mode [ 183.545618][ T9962] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 183.552889][ T9962] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 183.626644][ T9962] sit2: left promiscuous mode [ 183.684316][ T9985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.693091][ T9985] bond0: (slave bond5): Enslaving as an active interface with an up link [ 183.713507][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.725349][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.738494][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.752217][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.843030][ T9995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.899363][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.917092][ T5233] udevd[5233]: worker [6307] terminated by signal 33 (Unknown signal 33) [ 183.927261][T10001] __nla_validate_parse: 10 callbacks suppressed [ 183.927279][T10001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 183.928083][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.959702][ T5233] udevd[5233]: worker [6307] failed while handling '/devices/virtual/block/loop1' [ 183.976601][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.986048][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.022049][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'. [ 184.338165][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 184.365936][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.744028][T10037] batadv_slave_1: entered promiscuous mode [ 184.750834][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 184.786477][T10037] batadv_slave_1 (unregistering): left promiscuous mode [ 184.794023][T10037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.206980][T10054] tap0: tun_chr_ioctl cmd 1074025677 [ 185.212710][T10054] tap0: linktype set to 819 [ 185.220003][T10055] tap0: tun_chr_ioctl cmd 1074025673 [ 185.226770][T10056] tap0: tun_chr_ioctl cmd 1074025677 [ 185.232427][T10056] tap0: linktype set to 819 [ 185.526340][T10077] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 185.574184][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 185.587178][T10077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.614605][T10080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.638837][T10081] bond4: (slave veth5): Enslaving as an active interface with a down link [ 185.674623][T10080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.685807][T10080] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 185.697738][T10080] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 185.738112][T10088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1059'. [ 185.841946][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 185.907077][T10094] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 186.055388][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 30 seconds [ 186.066618][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 30 seconds [ 186.078435][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 30 seconds [ 186.089412][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 30 seconds [ 186.208162][T10110] nbd2: detected capacity change from 0 to 127 [ 186.223524][ T5183] block nbd2: Receive control failed (result -32) [ 186.234073][ T9732] block nbd2: Dead connection, failed to find a fallback [ 186.253414][ T9732] block nbd2: shutting down sockets [ 186.259659][ T9732] blk_print_req_error: 136 callbacks suppressed [ 186.259674][ T9732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.286579][ T9732] buffer_io_error: 138 callbacks suppressed [ 186.286596][ T9732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 186.324625][ T9732] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.337885][T10123] netlink: 'syz.1.1069': attribute type 5 has an invalid length. [ 186.345782][ T9732] Buffer I/O error on dev nbd2, logical block 1, async page read [ 186.358245][ T9732] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.371462][ T9732] Buffer I/O error on dev nbd2, logical block 2, async page read [ 186.380251][ T9732] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.412180][ T9732] Buffer I/O error on dev nbd2, logical block 3, async page read [ 186.431593][ T9732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.451417][ T9732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 186.468654][ T9732] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.478004][ T9732] Buffer I/O error on dev nbd2, logical block 1, async page read [ 186.491351][ T9732] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.532313][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 186.542460][ T9732] Buffer I/O error on dev nbd2, logical block 2, async page read [ 186.568386][ T9732] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.587993][ T9732] Buffer I/O error on dev nbd2, logical block 3, async page read [ 186.601121][ T9732] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.611243][ T9732] Buffer I/O error on dev nbd2, logical block 0, async page read [ 186.620399][ T9732] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.630125][ T9732] Buffer I/O error on dev nbd2, logical block 1, async page read [ 186.641844][ T9732] ldm_validate_partition_table(): Disk read failed. [ 186.656841][ T9732] Dev nbd2: unable to read RDB block 0 [ 186.668475][ T9732] nbd2: unable to read partition table [ 186.681774][ T9732] ldm_validate_partition_table(): Disk read failed. [ 186.692612][ T9732] Dev nbd2: unable to read RDB block 0 [ 186.706505][ T9732] nbd2: unable to read partition table [ 186.881076][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 187.042328][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 187.282374][T10169] syz_tun: entered allmulticast mode [ 187.326139][T10169] dvmrp8: entered allmulticast mode [ 187.368507][T10169] lo speed is unknown, defaulting to 1000 [ 187.408122][T10174] netlink: 'syz.0.1089': attribute type 23 has an invalid length. [ 187.755532][T10168] syz_tun: left allmulticast mode [ 187.766218][T10168] dvmrp8: left allmulticast mode [ 188.310927][ T5183] block nbd4: Receive control failed (result -107) [ 188.324405][T10199] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.366296][T10195] nbd4: detected capacity change from 0 to 32 [ 188.404144][T10201] netlink: 'syz.4.1098': attribute type 10 has an invalid length. [ 188.415097][ T9732] block nbd4: Dead connection, failed to find a fallback [ 188.422161][ T9732] block nbd4: shutting down sockets [ 188.465655][ T9732] ldm_validate_partition_table(): Disk read failed. [ 188.479392][T10201] batman_adv: batadv0: Adding interface: virt_wifi0 [ 188.483222][ T9732] Dev nbd4: unable to read RDB block 0 [ 188.488005][T10201] batman_adv: batadv0: Interface activated: virt_wifi0 [ 188.521167][ T9732] nbd4: unable to read partition table [ 188.529094][ T5183] block nbd5: Receive control failed (result -107) [ 188.553566][T10196] lo speed is unknown, defaulting to 1000 [ 188.563733][T10197] nbd5: detected capacity change from 0 to 32 [ 188.612842][ T6309] block nbd5: Dead connection, failed to find a fallback [ 188.621977][ T9732] ldm_validate_partition_table(): Disk read failed. [ 188.623168][ T6309] block nbd5: shutting down sockets [ 188.635332][ T6309] ldm_validate_partition_table(): Disk read failed. [ 188.642468][ T6309] Dev nbd5: unable to read RDB block 0 [ 188.648771][ T6309] nbd5: unable to read partition table [ 188.671035][ T9732] Dev nbd4: unable to read RDB block 0 [ 188.695534][ T9732] nbd4: unable to read partition table [ 188.707195][ T6309] ldm_validate_partition_table(): Disk read failed. [ 188.754210][ T6309] Dev nbd5: unable to read RDB block 0 [ 188.763815][ T6309] nbd5: unable to read partition table [ 188.823517][T10219] tipc: Enabling of bearer rejected, already enabled [ 188.838153][T10220] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 188.846230][T10220] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 189.221307][T10237] __nla_validate_parse: 1 callbacks suppressed [ 189.221324][T10237] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1109'. [ 189.334356][T10242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.486718][T10247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1112'. [ 189.659208][T10256] bridge2: entered allmulticast mode [ 189.684344][T10257] tipc: Invalid UDP bearer configuration [ 189.684396][T10257] tipc: Enabling of bearer rejected, failed to enable media [ 189.890616][T10268] lo speed is unknown, defaulting to 1000 [ 190.485731][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 191.167987][T10322] vlan2: entered promiscuous mode [ 191.213825][T10322] hsr_slave_1: entered promiscuous mode [ 191.220280][T10319] netlink: 'syz.0.1129': attribute type 9 has an invalid length. [ 191.232144][T10319] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.1129'. [ 191.233507][T10322] vlan2: entered allmulticast mode [ 191.264754][T10319] openvswitch: netlink: Message has 5 unknown bytes. [ 191.289144][T10322] hsr_slave_1: entered allmulticast mode [ 191.292550][T10323] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1130'. [ 191.333598][T10325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1131'. [ 191.385858][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 191.416791][T10327] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 191.708643][T10331] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1132'. [ 191.743133][T10327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.761812][T10325] bond2: (slave gretap1): making interface the new active one [ 191.772012][T10325] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 191.882555][T10331] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1132'. [ 192.040179][T10345] tipc: Enabled bearer , priority 0 [ 192.133019][T10346] syzkaller0: entered promiscuous mode [ 192.150067][T10346] syzkaller0: entered allmulticast mode [ 192.164329][T10356] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 192.218797][T10345] tipc: Resetting bearer [ 192.324100][T10345] tipc: Disabling bearer [ 192.359424][T10356] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 192.384496][T10356] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 192.890968][T10389] netlink: 'syz.4.1145': attribute type 13 has an invalid length. [ 192.923659][T10389] netlink: 'syz.4.1145': attribute type 17 has an invalid length. [ 193.013832][ T7194] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 193.038670][ T7194] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 193.062448][ T7194] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 193.294106][T10398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.322250][T10389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.369527][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1150'. [ 193.433224][T10393] lo speed is unknown, defaulting to 1000 [ 193.434185][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.561228][T10388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.719647][T10415] netlink: 'syz.3.1152': attribute type 64 has an invalid length. [ 193.880477][T10424] Bluetooth: MGMT ver 1.23 [ 193.924466][T10424] geneve2: entered promiscuous mode [ 193.958133][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.983522][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.012934][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.027155][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.066990][T10429] netlink: 'syz.1.1155': attribute type 2 has an invalid length. [ 194.380928][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539210][T10449] netlink: 'syz.3.1161': attribute type 13 has an invalid length. [ 194.779690][T10456] __nla_validate_parse: 2 callbacks suppressed [ 194.779708][T10456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1163'. [ 194.816120][T10449] lo speed is unknown, defaulting to 1000 [ 195.023727][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.058997][T10462] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 195.320091][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'. [ 195.414924][T10476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1169'. [ 195.658975][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 195.711110][T10493] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1173'. [ 196.215075][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1180'. [ 196.454443][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 196.460574][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.460686][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 196.760800][T10552] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 196.870193][T10562] netlink: 'syz.4.1188': attribute type 10 has an invalid length. [ 197.372420][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 197.405632][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.070285][T10614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 198.106423][T10618] netlink: 'syz.4.1208': attribute type 1 has an invalid length. [ 198.115250][T10619] netlink: 'syz.3.1207': attribute type 1 has an invalid length. [ 198.123499][T10618] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1208'. [ 198.563834][T10644] lo speed is unknown, defaulting to 1000 [ 198.924550][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 199.428820][T10675] netlink: 'syz.2.1224': attribute type 10 has an invalid length. [ 199.678621][T10679] syzkaller0: entered promiscuous mode [ 199.684639][T10679] syzkaller0: entered allmulticast mode [ 199.838789][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1229'. [ 201.408957][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 201.500715][T10707] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.545977][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 201.562293][T10712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1232'. [ 201.648700][T10707] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.727207][T10707] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.780399][T10707] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.850585][T10729] tipc: Enabling of bearer rejected, already enabled [ 201.860778][T10727] tipc: Enabling of bearer rejected, already enabled [ 201.880201][T10729] netlink: 'syz.2.1239': attribute type 3 has an invalid length. [ 201.890089][T10727] netlink: 'syz.2.1239': attribute type 3 has an invalid length. [ 202.090982][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 202.101014][T10737] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 202.111625][T10737] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 202.332384][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.390172][ T8595] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.432647][ T8595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.462604][T10741] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.467285][ T8595] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.610054][T10743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.680105][T10747] lo speed is unknown, defaulting to 1000 [ 202.701104][T10743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.833853][T10743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.968863][T10743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.176196][T10758] vlan2: entered promiscuous mode [ 203.192440][T10758] bond0: entered promiscuous mode [ 203.195570][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 203.199147][T10758] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 203.222225][T10758] bond5: entered promiscuous mode [ 203.234093][T10758] vlan2: entered allmulticast mode [ 203.252747][T10758] bond0: entered allmulticast mode [ 203.258465][T10758] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 203.265771][T10758] bond5: entered allmulticast mode [ 203.283558][T10770] netlink: 'syz.2.1252': attribute type 12 has an invalid length. [ 203.405875][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.498516][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 203.508625][T10774] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 203.528624][ T3528] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.539437][T10773] lo speed is unknown, defaulting to 1000 [ 203.567909][ T3528] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.593670][ T3528] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.675618][T10780] tipc: Enabled bearer , priority 0 [ 203.684010][T10780] syzkaller0: entered promiscuous mode [ 203.689678][T10780] syzkaller0: entered allmulticast mode [ 203.712551][T10780] tipc: Resetting bearer [ 203.721484][T10779] tipc: Resetting bearer [ 203.746934][T10779] tipc: Disabling bearer [ 203.908483][T10785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.151156][T10793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.191741][T10797] netlink: 'syz.3.1261': attribute type 7 has an invalid length. [ 204.199695][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 204.740971][T10819] lo speed is unknown, defaulting to 1000 [ 204.985605][T10841] netlink: 'syz.2.1273': attribute type 5 has an invalid length. [ 205.016949][T10841] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 205.187565][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 205.432179][T10820] lo speed is unknown, defaulting to 1000 [ 205.720542][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 205.742680][T10857] sit0: entered promiscuous mode [ 205.753037][T10857] netlink: 'syz.1.1277': attribute type 2 has an invalid length. [ 205.760898][T10857] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 205.769092][T10838] lo speed is unknown, defaulting to 1000 [ 205.862809][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 206.041698][T10863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.147196][T10867] netlink: 211576 bytes leftover after parsing attributes in process `syz.0.1280'. [ 206.187513][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 206.741749][T10879] tipc: Enabled bearer , priority 0 [ 206.753023][T10879] tipc: Resetting bearer [ 206.767938][T10878] tipc: Disabling bearer [ 206.879570][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 206.893992][T10881] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1283'. [ 206.960370][T10885] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1286'. [ 206.978534][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1284'. [ 206.981942][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 207.216044][T10904] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 207.299849][T10909] lo speed is unknown, defaulting to 1000 [ 207.694778][T10926] syzkaller0: entered promiscuous mode [ 207.700403][T10926] syzkaller0: entered allmulticast mode [ 207.728615][T10914] rdma_rxe: rxe_newlink: failed to add lo [ 207.948616][T10928] lo speed is unknown, defaulting to 1000 [ 208.246671][T10937] macvlan0: entered promiscuous mode [ 208.259508][T10937] macvlan0: entered allmulticast mode [ 208.293578][T10937] veth1_vlan: entered allmulticast mode [ 208.708253][T10954] netlink: 'syz.0.1300': attribute type 12 has an invalid length. [ 209.206942][T10962] netlink: 'syz.1.1303': attribute type 11 has an invalid length. [ 209.717917][T10988] netlink: 'syz.1.1309': attribute type 21 has an invalid length. [ 209.725976][T10988] netlink: 'syz.1.1309': attribute type 6 has an invalid length. [ 209.820765][T10990] netlink: 'syz.2.1311': attribute type 29 has an invalid length. [ 210.149753][T11003] netlink: 'syz.0.1314': attribute type 21 has an invalid length. [ 210.162446][ T6521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.171217][ T6521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.189077][T11003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.706194][T11020] lo speed is unknown, defaulting to 1000 [ 210.979330][T11024] syzkaller0: entered promiscuous mode [ 210.985037][T11024] syzkaller0: entered allmulticast mode [ 211.570444][T11043] __nla_validate_parse: 4 callbacks suppressed [ 211.570463][T11043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1324'. [ 211.630274][T11039] lo speed is unknown, defaulting to 1000 [ 211.636438][T11043] vlan0: entered promiscuous mode [ 211.767960][T11052] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1330'. [ 211.785157][T11052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'. [ 211.798956][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1330'. [ 211.826347][T11055] netlink: 'syz.0.1330': attribute type 1 has an invalid length. [ 211.950738][T11055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.048698][T11052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.067825][T11052] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 212.090262][T11052] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 212.120833][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 212.250315][ T7194] hid-generic 0005:0007:0008.0003: unknown main item tag 0x0 [ 212.273362][ T7194] hid-generic 0005:0007:0008.0003: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 212.444821][T11076] netlink: 'syz.2.1337': attribute type 12 has an invalid length. [ 212.486390][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1338'. [ 212.525420][T11072] fido_id[11072]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 212.644032][T11086] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1340'. [ 212.685767][T11086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 213.028590][T11092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1341'. [ 213.057333][T11092] netlink: 'syz.2.1341': attribute type 10 has an invalid length. [ 213.069033][T11092] veth0_macvtap: left promiscuous mode [ 213.076594][T11092] team0: Device veth0_macvtap failed to register rx_handler [ 213.818003][T11128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.792549][T11141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1356'. [ 215.085204][T11170] ipvlan2: entered promiscuous mode [ 215.183543][T11173] gretap0: entered allmulticast mode [ 216.140503][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 60 seconds [ 216.151641][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 60 seconds [ 216.162919][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 60 seconds [ 216.173953][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 60 seconds [ 216.213697][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 216.303122][ T13] tipc: Resetting bearer [ 216.318748][T11225] netlink: 'syz.4.1382': attribute type 5 has an invalid length. [ 216.377293][T11227] tipc: Enabled bearer , priority 0 [ 216.387469][T11227] syzkaller0: entered promiscuous mode [ 216.392966][T11227] syzkaller0: entered allmulticast mode [ 216.420055][T11227] tipc: Resetting bearer [ 216.443236][T11226] tipc: Resetting bearer [ 216.481201][T11226] tipc: Disabling bearer [ 216.588024][T11229] lo speed is unknown, defaulting to 1000 [ 216.688550][T11252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1389'. [ 216.688787][T11247] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 216.717095][T11245] syzkaller0: entered promiscuous mode [ 216.731743][T11245] syzkaller0: entered allmulticast mode [ 216.998961][ T30] audit: type=1800 audit(1758166289.527:3): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1391" name="memory.events" dev="tmpfs" ino=1575 res=0 errno=0 [ 217.095755][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.096811][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 217.106933][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.127054][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.138317][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.148970][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.159729][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.170791][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.187124][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 217.202588][T11260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.211997][T11260] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.222830][T11260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.257333][T11268] tipc: Enabling of bearer rejected, already enabled [ 217.292944][T11264] lo speed is unknown, defaulting to 1000 [ 217.443542][T11278] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 217.463814][ T30] audit: type=1800 audit(1758166289.977:4): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1393" name="memory.events" dev="tmpfs" ino=1429 res=0 errno=0 [ 217.527206][T11278] bridge0: entered promiscuous mode [ 217.544024][T11278] bridge0: entered allmulticast mode [ 217.551735][T11278] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.802316][T11289] netlink: 'syz.2.1399': attribute type 29 has an invalid length. [ 217.821326][ C0] vcan0: j1939_session_tx_dat: 0xffff888029a2ec00: queue data error: -100 [ 218.133780][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 218.219005][T11320] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0 [ 218.578611][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.783890][T11336] IPVS: persistence engine module ip_vs_pe_ not found [ 218.899515][ T9732] udevd[9732]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 219.663525][T11378] lo speed is unknown, defaulting to 1000 [ 219.810990][T11387] dummy0: entered promiscuous mode [ 219.823508][T11387] macsec0: entered promiscuous mode [ 219.829448][T11387] macsec0: entered allmulticast mode [ 219.834976][T11387] dummy0: entered allmulticast mode [ 219.865585][T11387] dummy0: left allmulticast mode [ 219.886830][T11387] dummy0: left promiscuous mode [ 220.212619][T11395] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 220.537835][T11395] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 220.959143][T11408] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 222.145453][T11452] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 222.186705][T11381] netlink: 'syz.4.1420': attribute type 4 has an invalid length. [ 222.275795][T11446] lo speed is unknown, defaulting to 1000 [ 222.313798][T11451] gretap1: entered allmulticast mode [ 222.363568][T11451] bond3: (slave gretap1): making interface the new active one [ 222.398316][T11451] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 222.440066][ T7207] lo speed is unknown, defaulting to 1000 [ 222.446520][ T7207] syz0: Port: 1 Link DOWN [ 222.513415][ T7207] lo speed is unknown, defaulting to 1000 [ 223.153729][T11485] syzkaller0: entered promiscuous mode [ 223.159248][T11485] syzkaller0: entered allmulticast mode [ 223.684858][T11494] __nla_validate_parse: 18 callbacks suppressed [ 223.684878][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 223.846647][T11509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1452'. [ 223.924062][T11508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1453'. [ 223.988837][T11512] netlink: 'syz.0.1452': attribute type 10 has an invalid length. [ 224.338469][T11533] sch_tbf: peakrate 4096 is lower than or equals to rate 185707055559232049 ! [ 224.447035][T11539] tipc: Enabling of bearer rejected, failed to enable media [ 224.644817][T11542] batadv_slave_0: left promiscuous mode [ 224.652076][T11542] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 224.664486][T11542] veth1_vlan: left allmulticast mode [ 224.670253][T11542] macvlan0: left promiscuous mode [ 224.677333][T11542] macvlan0: left allmulticast mode [ 224.687064][T11542] veth1_macvtap: left allmulticast mode [ 224.705368][T11542] ip6gre1: left allmulticast mode [ 224.714259][T11542] veth3: left promiscuous mode [ 224.733896][T11545] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1464'. [ 224.749059][T11548] tipc: Cannot configure node identity twice [ 224.755727][ T60] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.771581][ T60] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.794373][ T60] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.802860][ T60] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.128322][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 225.173749][T11585] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 225.256520][T11581] syzkaller0: entered promiscuous mode [ 225.262031][T11581] syzkaller0: entered allmulticast mode [ 225.290831][T11593] syzkaller0: entered promiscuous mode [ 225.296929][T11593] syzkaller0: entered allmulticast mode [ 225.411023][T11600] netlink: 'syz.0.1479': attribute type 2 has an invalid length. [ 225.420698][T11600] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1479'. [ 225.537720][T11603] lo speed is unknown, defaulting to 1000 [ 225.621529][T11611] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1483'. [ 225.654686][T11611] : entered promiscuous mode [ 226.035339][T11624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.393629][T11631] dvmrp1: entered allmulticast mode [ 226.812872][T11640] lo speed is unknown, defaulting to 1000 [ 227.418406][T11670] netlink: 'syz.1.1495': attribute type 11 has an invalid length. [ 227.437058][T11671] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 227.556885][T11673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1495'. [ 227.653636][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.313756][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 228.325990][T11710] netlink: 'syz.4.1506': attribute type 12 has an invalid length. [ 228.337693][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 228.347554][T11710] netlink: 'syz.4.1506': attribute type 12 has an invalid length. [ 228.520496][T11726] can: request_module (can-proto-0) failed. [ 228.670278][T11732] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 228.712599][T11734] lo speed is unknown, defaulting to 1000 [ 228.795640][T11738] __nla_validate_parse: 2 callbacks suppressed [ 228.795658][T11738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'. [ 228.889377][T11737] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1512'. [ 228.900244][T11747] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 229.227156][T11735] lo speed is unknown, defaulting to 1000 [ 229.540305][T11774] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1521'. [ 229.611732][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 230.400782][T11790] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 230.409239][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 230.438559][T11786] lo speed is unknown, defaulting to 1000 [ 230.458682][T11790] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 230.473336][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 230.493915][T11783] rose12: Master is either lo or non-ether device [ 231.127565][T11816] vlan2: entered promiscuous mode [ 231.132758][T11816] bond0: entered promiscuous mode [ 231.147511][T11794] lo speed is unknown, defaulting to 1000 [ 231.307362][T11822] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 231.461597][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 231.599256][T11830] netlink: 'syz.3.1533': attribute type 10 has an invalid length. [ 231.623341][T11830] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 231.720040][T11830] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 231.944272][T11825] lo speed is unknown, defaulting to 1000 [ 232.209961][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'. [ 233.105579][T11869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1542'. [ 233.240416][T11878] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 233.252963][T11873] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.1543'. [ 233.377319][T11877] netlink: 'syz.4.1543': attribute type 10 has an invalid length. [ 233.479825][T11877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.845747][T11905] pimreg: entered allmulticast mode [ 233.892891][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'. [ 233.912745][T11908] batadv1: entered promiscuous mode [ 233.922288][T11908] batadv1: entered allmulticast mode [ 233.974502][T11905] pimreg: left allmulticast mode [ 234.050294][T11917] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1556'. [ 234.059931][T11917] netlink: zone id is out of range [ 234.065731][T11917] netlink: zone id is out of range [ 234.071278][T11917] netlink: get zone limit has 8 unknown bytes [ 234.425689][T11938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1564'. [ 234.732827][ T7207] hid-generic 0005:0007:0008.0004: unknown main item tag 0x0 [ 234.766242][ T7207] hid-generic 0005:0007:0008.0004: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 234.793899][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 234.832896][T11950] fido_id[11950]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 235.060877][T11955] nbd: must specify a size in bytes for the device [ 235.771605][T11967] openvswitch: netlink: Missing valid actions attribute. [ 235.803471][T11967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.829084][T11965] syzkaller0: entered promiscuous mode [ 235.848827][T11965] syzkaller0: entered allmulticast mode [ 235.901704][T11971] IPVS: length: 247 != 8 [ 236.281432][T11977] lo speed is unknown, defaulting to 1000 [ 236.298536][T11985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.356007][T11988] syzkaller1: entered promiscuous mode [ 236.361655][T11988] syzkaller1: entered allmulticast mode [ 236.377910][T11988] sctp: [Deprecated]: syz.1.1581 (pid 11988) Use of int in max_burst socket option deprecated. [ 236.377910][T11988] Use struct sctp_assoc_value instead [ 236.937795][T11998] ip6gre1: entered promiscuous mode [ 237.337521][T12011] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 237.454902][T12016] syzkaller0: entered promiscuous mode [ 237.460417][T12016] syzkaller0: entered allmulticast mode [ 237.607293][T12012] delete_channel: no stack [ 237.647796][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1592'. [ 237.780596][T12025] smc: net device bond0 applied user defined pnetid SYZ2 [ 238.021148][T12040] RDS: rds_bind could not find a transport for fe80::12, load rds_tcp or rds_rdma? [ 238.493977][T12058] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.667588][T12058] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.718844][T12066] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 238.733891][T12058] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.816390][T12058] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.973109][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.990088][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.010373][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.030103][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.052316][T12069] bond0: (slave rose0): Releasing backup interface [ 239.167469][T12072] syzkaller0: entered promiscuous mode [ 239.173056][T12072] syzkaller0: entered allmulticast mode [ 239.584124][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 239.601999][T12088] macvtap1: entered promiscuous mode [ 239.607566][T12088] team0: entered promiscuous mode [ 239.612612][T12088] geneve0: entered promiscuous mode [ 239.620063][T12088] macvtap1: entered allmulticast mode [ 239.650521][T12088] team0: entered allmulticast mode [ 239.663456][T12088] geneve0: entered allmulticast mode [ 239.680091][T12088] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 239.707461][T12091] team0: left allmulticast mode [ 239.712447][T12091] geneve0: left allmulticast mode [ 239.726649][T12091] team0: left promiscuous mode [ 239.731652][T12091] geneve0: left promiscuous mode [ 239.855779][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1611'. [ 239.883434][T12095] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1611'. [ 239.892520][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1611'. [ 240.003223][T12104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1614'. [ 240.039138][T12103] netlink: 'syz.4.1614': attribute type 29 has an invalid length. [ 240.078619][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 240.090954][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'. [ 240.114987][T12111] tipc: Invalid UDP bearer configuration [ 240.115052][T12111] tipc: Enabling of bearer rejected, failed to enable media [ 240.217684][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 243.310155][ T5233] udevd[5233]: worker [6310] /devices/virtual/block/nbd1 is taking a long time [ 243.625833][T12127] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1619'. [ 243.958176][T12148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 243.978530][T12158] rdma_rxe: rxe_newlink: failed to add lo [ 243.991587][T12158] sit0: left promiscuous mode [ 244.017414][T12158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.110085][T12163] macsec1: entered promiscuous mode [ 244.178521][T12163] ip6gretap0: entered promiscuous mode [ 244.217186][T12163] macsec1: entered allmulticast mode [ 244.228249][T12163] ip6gretap0: entered allmulticast mode [ 244.402027][T12178] syzkaller0: entered promiscuous mode [ 244.423405][T12178] syzkaller0: entered allmulticast mode [ 244.482964][T12176] lo speed is unknown, defaulting to 1000 [ 244.714440][T12192] syzkaller0: entered promiscuous mode [ 244.720739][T12192] syzkaller0: entered allmulticast mode [ 244.860717][ T8595] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.880307][ T8595] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.888511][ T7212] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.653547][ T7212] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.735485][ T7212] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.108898][T12259] __nla_validate_parse: 1 callbacks suppressed [ 246.108916][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 246.124228][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 246.134748][T12259] tipc: Enabling of bearer rejected, failed to enable media [ 246.224142][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 90 seconds [ 246.234973][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 90 seconds [ 246.246404][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 90 seconds [ 246.257786][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 90 seconds [ 246.468477][T12266] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1656'. [ 246.934588][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 246.941990][T12285] syzkaller0: entered promiscuous mode [ 246.949409][T12285] syzkaller0: entered allmulticast mode [ 247.228950][T12312] xt_limit: Overflow, try lower: 604147548/4200216962 [ 247.319586][T12315] netlink: 'syz.2.1666': attribute type 1 has an invalid length. [ 247.343421][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 247.381267][T12317] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1668'. [ 247.413604][T12317] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 247.814664][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1673'. [ 248.080700][T12347] tipc: Enabling of bearer rejected, failed to enable media [ 248.105802][T12347] syzkaller0: entered promiscuous mode [ 248.119244][T12347] syzkaller0: entered allmulticast mode [ 248.242720][T12355] lo speed is unknown, defaulting to 1000 [ 248.246726][T12358] netlink: 'syz.0.1680': attribute type 21 has an invalid length. [ 248.257402][T12358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1680'. [ 248.356940][T12364] tipc: Resetting bearer [ 248.693544][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.758274][T12389] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 248.912379][T12393] bond6: (slave gretap1): making interface the new active one [ 248.939086][T12393] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 248.972848][T12397] bond0: option xmit_hash_policy: invalid value (255) [ 249.225186][T12403] tipc: Enabling of bearer rejected, failed to enable media [ 249.245639][T12410] syzkaller0: entered promiscuous mode [ 249.251153][T12410] syzkaller0: entered allmulticast mode [ 249.387730][ T7214] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 249.729283][T12427] dvmrp0: left allmulticast mode [ 249.742013][T12427] dvmrp1: left allmulticast mode [ 249.850186][ T7212] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.032496][T12448] tipc: Enabling of bearer rejected, failed to enable media [ 250.041851][T12448] syzkaller0: entered promiscuous mode [ 250.047532][T12448] syzkaller0: entered allmulticast mode [ 250.077523][T12446] netlink: 'syz.4.1707': attribute type 30 has an invalid length. [ 250.110416][T12446] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1707'. [ 250.155599][T12446] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.163570][T12446] team0: Port device bond7 added [ 250.266647][T12463] netlink: 'syz.4.1713': attribute type 11 has an invalid length. [ 250.271405][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1712'. [ 250.293973][T12465] netlink: 'syz.0.1711': attribute type 21 has an invalid length. [ 250.301880][T12465] netlink: 'syz.0.1711': attribute type 4 has an invalid length. [ 250.316270][T12462] netlink: 'syz.3.1712': attribute type 23 has an invalid length. [ 250.695734][T12476] vlan2: entered promiscuous mode [ 250.701170][T12476] erspan0: entered promiscuous mode [ 250.715023][T12478] lo speed is unknown, defaulting to 1000 [ 250.949725][T12490] tipc: Enabled bearer , priority 0 [ 250.969483][T12490] tipc: Resetting bearer [ 250.995357][T12489] tipc: Disabling bearer [ 251.032666][T12497] tipc: Enabling of bearer rejected, failed to enable media [ 251.207501][T12499] batadv0: left allmulticast mode [ 251.235465][T12499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.411864][T12513] __nla_validate_parse: 6 callbacks suppressed [ 251.411882][T12513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1730'. [ 251.439649][T12510] lo speed is unknown, defaulting to 1000 [ 251.668054][T12526] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 251.883025][T12533] tipc: Enabling of bearer rejected, failed to enable media [ 251.893980][T12533] syzkaller0: entered promiscuous mode [ 251.899648][T12533] syzkaller0: entered allmulticast mode [ 252.087115][T12539] ip6erspan0: entered promiscuous mode [ 252.092825][T12539] ip6erspan0: entered allmulticast mode [ 252.539431][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 252.608901][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 252.669718][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 252.730182][T12550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1740'. [ 252.933121][T12576] veth2: entered promiscuous mode [ 252.982514][T12579] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1748'. [ 253.039238][T12584] tipc: Enabling of bearer rejected, failed to enable media [ 253.048917][T12584] syzkaller0: entered promiscuous mode [ 253.059250][T12584] syzkaller0: entered allmulticast mode [ 253.136575][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 253.459684][T12609] nbd: nbd0 already in use [ 253.464854][T12609] block nbd0: NBD_DISCONNECT [ 253.469481][T12609] block nbd0: Send disconnect failed -107 [ 253.476383][T12609] block nbd0: Disconnected due to user request. [ 253.488464][T12608] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 253.491320][T12609] block nbd0: shutting down sockets [ 253.504224][T12608] netlink: 'syz.3.1756': attribute type 4 has an invalid length. [ 253.527281][T12608] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1756'. [ 253.568779][T12608] : renamed from bond0 [ 253.716318][T12625] netlink: 'syz.3.1764': attribute type 10 has an invalid length. [ 253.746458][T12623] lo speed is unknown, defaulting to 1000 [ 253.984998][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 254.730725][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1766'. [ 256.453662][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.733139][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.741897][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.751061][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.760040][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.769847][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.802655][T12651] lo speed is unknown, defaulting to 1000 [ 269.009466][T12651] chnl_net:caif_netlink_parms(): no params data found [ 269.125203][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.133543][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.140824][T12651] bridge_slave_0: entered allmulticast mode [ 269.157103][T12651] bridge_slave_0: entered promiscuous mode [ 269.176199][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.193455][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.200714][T12651] bridge_slave_1: entered allmulticast mode [ 269.225209][T12651] bridge_slave_1: entered promiscuous mode [ 269.324859][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.350687][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.449229][T12651] team0: Port device team_slave_0 added [ 269.469032][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.479196][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.479569][T12651] team0: Port device team_slave_1 added [ 269.488891][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.500720][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.508715][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.561425][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.569191][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.573571][ T5870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.596151][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.612205][ T5870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.621688][ T5870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.630114][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.630365][ T5870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.644293][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.645407][ T5870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.671567][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.743561][T12651] hsr_slave_0: entered promiscuous mode [ 269.749862][T12651] hsr_slave_1: entered promiscuous mode [ 269.757239][T12661] lo speed is unknown, defaulting to 1000 [ 269.998841][T12663] lo speed is unknown, defaulting to 1000 [ 270.221256][T12661] chnl_net:caif_netlink_parms(): no params data found [ 270.472065][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.493493][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.500771][T12661] bridge_slave_0: entered allmulticast mode [ 270.525901][T12661] bridge_slave_0: entered promiscuous mode [ 270.566837][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.575010][ T5870] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 270.590169][ T5870] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 270.598440][ T5870] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 270.607261][ T5870] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 270.619625][ T5870] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 270.630499][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.644111][T12661] bridge_slave_1: entered allmulticast mode [ 270.652353][T12661] bridge_slave_1: entered promiscuous mode [ 270.733149][ T5870] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 270.746180][ T5870] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 270.754983][ T5870] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 270.759629][T12661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.763514][ T5870] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 270.779780][ T5870] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 270.780422][T12673] lo speed is unknown, defaulting to 1000 [ 270.812363][T12661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.853424][ T5870] Bluetooth: hci5: command tx timeout [ 270.937127][T12661] team0: Port device team_slave_0 added [ 270.956447][T12661] team0: Port device team_slave_1 added [ 271.022823][T12661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.032574][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.059680][T12661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.076258][T12663] chnl_net:caif_netlink_parms(): no params data found [ 271.098082][T12676] lo speed is unknown, defaulting to 1000 [ 271.098810][T12661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.111044][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.137531][T12661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.273033][T12661] hsr_slave_0: entered promiscuous mode [ 271.280833][T12661] hsr_slave_1: entered promiscuous mode [ 271.288279][T12661] debugfs: 'hsr0' already exists in 'hsr' [ 271.294538][T12661] Cannot create hsr debugfs directory [ 271.370980][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.378246][T12663] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.386017][T12663] bridge_slave_0: entered allmulticast mode [ 271.393127][T12663] bridge_slave_0: entered promiscuous mode [ 271.432055][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.439390][T12663] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.446833][T12663] bridge_slave_1: entered allmulticast mode [ 271.454118][T12663] bridge_slave_1: entered promiscuous mode [ 271.531196][T12663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.568536][T12663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.583500][ T5870] Bluetooth: hci6: command tx timeout [ 271.652250][T12663] team0: Port device team_slave_0 added [ 271.661689][T12663] team0: Port device team_slave_1 added [ 271.733472][ T5870] Bluetooth: hci7: command tx timeout [ 271.757595][T12663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.765859][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.792255][T12663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.813498][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 271.868968][T12663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.876103][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.902361][T12663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.969172][T12673] chnl_net:caif_netlink_parms(): no params data found [ 272.025590][T12663] hsr_slave_0: entered promiscuous mode [ 272.031913][T12663] hsr_slave_1: entered promiscuous mode [ 272.038479][T12663] debugfs: 'hsr0' already exists in 'hsr' [ 272.044775][T12663] Cannot create hsr debugfs directory [ 272.050631][T12676] chnl_net:caif_netlink_parms(): no params data found [ 272.236928][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.244349][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.251542][T12673] bridge_slave_0: entered allmulticast mode [ 272.258954][T12673] bridge_slave_0: entered promiscuous mode [ 272.283737][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.291021][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.298491][T12673] bridge_slave_1: entered allmulticast mode [ 272.305567][T12673] bridge_slave_1: entered promiscuous mode [ 272.312134][T12676] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.319470][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.327053][T12676] bridge_slave_0: entered allmulticast mode [ 272.334326][T12676] bridge_slave_0: entered promiscuous mode [ 272.358630][T12676] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.366194][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.374242][T12676] bridge_slave_1: entered allmulticast mode [ 272.381335][T12676] bridge_slave_1: entered promiscuous mode [ 272.432912][T12673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.466750][T12673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.479333][T12676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.509254][T12676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.573094][T12673] team0: Port device team_slave_0 added [ 272.582734][T12673] team0: Port device team_slave_1 added [ 272.590383][T12676] team0: Port device team_slave_0 added [ 272.599677][T12676] team0: Port device team_slave_1 added [ 272.678208][T12673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.685346][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.712778][T12673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.718835][ T5870] Bluetooth: hci8: command tx timeout [ 272.735359][T12676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.742412][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.770219][T12676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.782032][T12673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.789272][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.815475][T12673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.836788][T12676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.843828][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.870151][ T5870] Bluetooth: hci9: command tx timeout [ 272.870377][T12676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.933587][ T5870] Bluetooth: hci5: command tx timeout [ 272.956834][T12676] hsr_slave_0: entered promiscuous mode [ 272.963373][T12676] hsr_slave_1: entered promiscuous mode [ 272.969545][T12676] debugfs: 'hsr0' already exists in 'hsr' [ 272.975481][T12676] Cannot create hsr debugfs directory [ 272.986090][T12673] hsr_slave_0: entered promiscuous mode [ 272.992469][T12673] hsr_slave_1: entered promiscuous mode [ 272.999199][T12673] debugfs: 'hsr0' already exists in 'hsr' [ 273.005123][T12673] Cannot create hsr debugfs directory [ 273.653712][ T5870] Bluetooth: hci6: command tx timeout [ 273.813602][ T5870] Bluetooth: hci7: command tx timeout [ 274.773524][ T5870] Bluetooth: hci8: command tx timeout [ 274.933879][ T5870] Bluetooth: hci9: command tx timeout [ 275.013574][ T5873] Bluetooth: hci5: command tx timeout [ 275.733792][ T5873] Bluetooth: hci6: command tx timeout [ 275.893685][ T5873] Bluetooth: hci7: command tx timeout [ 276.293900][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 120 seconds [ 276.304734][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 120 seconds [ 276.315834][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 120 seconds [ 276.327989][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 120 seconds [ 276.853545][ T5873] Bluetooth: hci8: command tx timeout [ 277.013615][ T5873] Bluetooth: hci9: command tx timeout [ 277.093479][ T5873] Bluetooth: hci5: command tx timeout [ 277.813953][ T5873] Bluetooth: hci6: command tx timeout [ 277.973562][ T5873] Bluetooth: hci7: command tx timeout [ 278.933505][ T5873] Bluetooth: hci8: command tx timeout [ 279.093699][ T5873] Bluetooth: hci9: command tx timeout [ 302.533679][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.374657][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 150 seconds [ 306.385795][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 150 seconds [ 306.397023][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 150 seconds [ 306.408252][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 150 seconds [ 328.796481][ T5870] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 328.804979][ T5870] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 328.813380][ T5870] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 328.821480][ T5870] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 328.830447][ T5870] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 328.866951][T12696] lo speed is unknown, defaulting to 1000 [ 329.083733][T12696] chnl_net:caif_netlink_parms(): no params data found [ 329.175878][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.183112][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.191572][T12696] bridge_slave_0: entered allmulticast mode [ 329.200496][T12696] bridge_slave_0: entered promiscuous mode [ 329.210538][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.218596][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.226279][T12696] bridge_slave_1: entered allmulticast mode [ 329.234626][T12696] bridge_slave_1: entered promiscuous mode [ 329.281169][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.294852][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.342950][T12696] team0: Port device team_slave_0 added [ 329.353087][T12696] team0: Port device team_slave_1 added [ 329.395733][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.402716][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.429506][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.431121][ T5870] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 329.451106][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.451165][ T5870] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 329.458903][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.469176][ T5870] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 329.492272][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.501754][ T5870] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 329.517924][ T5870] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 329.563994][T12696] hsr_slave_0: entered promiscuous mode [ 329.570412][T12696] hsr_slave_1: entered promiscuous mode [ 329.577522][T12696] debugfs: 'hsr0' already exists in 'hsr' [ 329.583353][T12696] Cannot create hsr debugfs directory [ 329.662482][T12705] lo speed is unknown, defaulting to 1000 [ 330.011979][ T5870] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 330.021784][ T5870] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 330.031981][ T5870] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 330.040227][ T5870] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 330.050986][ T5870] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 330.147276][T12709] lo speed is unknown, defaulting to 1000 [ 330.242657][T12705] chnl_net:caif_netlink_parms(): no params data found [ 330.392329][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.399889][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.407333][T12705] bridge_slave_0: entered allmulticast mode [ 330.414984][T12705] bridge_slave_0: entered promiscuous mode [ 330.427988][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.435563][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.442778][T12705] bridge_slave_1: entered allmulticast mode [ 330.450217][T12705] bridge_slave_1: entered promiscuous mode [ 330.495719][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.514138][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.556193][T12705] team0: Port device team_slave_0 added [ 330.564761][T12705] team0: Port device team_slave_1 added [ 330.608335][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.615883][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.642375][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.659974][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.667001][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.693558][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.787665][T12705] hsr_slave_0: entered promiscuous mode [ 330.794249][T12705] hsr_slave_1: entered promiscuous mode [ 330.800326][T12705] debugfs: 'hsr0' already exists in 'hsr' [ 330.806694][T12705] Cannot create hsr debugfs directory [ 330.817840][T12709] chnl_net:caif_netlink_parms(): no params data found [ 330.853711][ T5870] Bluetooth: hci10: command tx timeout [ 330.959467][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.966842][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.974369][T12709] bridge_slave_0: entered allmulticast mode [ 330.981507][T12709] bridge_slave_0: entered promiscuous mode [ 330.995916][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.003057][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.010882][T12709] bridge_slave_1: entered allmulticast mode [ 331.019076][T12709] bridge_slave_1: entered promiscuous mode [ 331.079801][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.092835][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.156603][T12709] team0: Port device team_slave_0 added [ 331.208211][T12709] team0: Port device team_slave_1 added [ 331.306818][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.320409][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.363943][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.419798][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.433549][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.493522][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.555865][ T5873] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 331.565534][ T5873] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 331.573927][ T5183] Bluetooth: hci11: command tx timeout [ 331.580579][ T5873] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 331.590252][ T5873] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 331.605156][ T5873] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 331.612940][ T5880] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 331.624368][ T5880] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 331.633490][ T5880] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 331.644634][ T5880] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 331.653229][ T5880] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 331.670390][T12709] hsr_slave_0: entered promiscuous mode [ 331.694443][T12709] hsr_slave_1: entered promiscuous mode [ 331.700616][T12709] debugfs: 'hsr0' already exists in 'hsr' [ 331.706431][T12709] Cannot create hsr debugfs directory [ 331.775241][T12726] lo speed is unknown, defaulting to 1000 [ 332.008042][T12724] lo speed is unknown, defaulting to 1000 [ 332.134681][ T5880] Bluetooth: hci12: command tx timeout [ 332.300821][T12726] chnl_net:caif_netlink_parms(): no params data found [ 332.460440][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.467701][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.475872][T12726] bridge_slave_0: entered allmulticast mode [ 332.483153][T12726] bridge_slave_0: entered promiscuous mode [ 332.503442][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.510556][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.518124][T12726] bridge_slave_1: entered allmulticast mode [ 332.525535][T12726] bridge_slave_1: entered promiscuous mode [ 332.585883][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.599731][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.629940][T12724] chnl_net:caif_netlink_parms(): no params data found [ 332.658677][T12726] team0: Port device team_slave_0 added [ 332.675452][T12726] team0: Port device team_slave_1 added [ 332.726615][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.733883][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.760625][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.778615][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.785740][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.812158][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.852527][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.860193][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.867846][T12724] bridge_slave_0: entered allmulticast mode [ 332.875344][T12724] bridge_slave_0: entered promiscuous mode [ 332.884157][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.891338][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.899126][T12724] bridge_slave_1: entered allmulticast mode [ 332.906543][T12724] bridge_slave_1: entered promiscuous mode [ 332.933826][ T5880] Bluetooth: hci10: command tx timeout [ 332.956496][T12726] hsr_slave_0: entered promiscuous mode [ 332.962986][T12726] hsr_slave_1: entered promiscuous mode [ 332.969435][T12726] debugfs: 'hsr0' already exists in 'hsr' [ 332.975567][T12726] Cannot create hsr debugfs directory [ 332.996251][T12724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.009037][T12724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.059364][T12724] team0: Port device team_slave_0 added [ 333.074323][T12724] team0: Port device team_slave_1 added [ 333.127358][T12724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.134541][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.161115][T12724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.181078][T12724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.188103][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.214187][T12724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.311299][T12724] hsr_slave_0: entered promiscuous mode [ 333.318576][T12724] hsr_slave_1: entered promiscuous mode [ 333.326822][T12724] debugfs: 'hsr0' already exists in 'hsr' [ 333.332643][T12724] Cannot create hsr debugfs directory [ 333.653561][ T5880] Bluetooth: hci11: command tx timeout [ 333.653600][ T5183] Bluetooth: hci13: command tx timeout [ 333.733479][ T5183] Bluetooth: hci14: command tx timeout [ 334.213617][ T5183] Bluetooth: hci12: command tx timeout [ 335.013911][ T5183] Bluetooth: hci10: command tx timeout [ 335.733721][ T5183] Bluetooth: hci13: command tx timeout [ 335.736198][ T5880] Bluetooth: hci11: command tx timeout [ 335.813481][ T5880] Bluetooth: hci14: command tx timeout [ 336.293593][ T5880] Bluetooth: hci12: command tx timeout [ 336.463736][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 180 seconds [ 336.474587][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 180 seconds [ 336.485710][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 180 seconds [ 336.496891][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 180 seconds [ 336.861170][ T5233] udevd[5233]: worker [6310] /devices/virtual/block/nbd1 timeout; kill it [ 336.869956][ T5233] udevd[5233]: seq 15028 '/devices/virtual/block/nbd1' killed [ 337.103650][ T5880] Bluetooth: hci10: command tx timeout [ 337.813499][ T5880] Bluetooth: hci11: command tx timeout [ 337.823627][ T5880] Bluetooth: hci13: command tx timeout [ 337.893470][ T5880] Bluetooth: hci14: command tx timeout [ 338.373679][ T5880] Bluetooth: hci12: command tx timeout [ 339.893524][ T5880] Bluetooth: hci13: command tx timeout [ 339.973535][ T5880] Bluetooth: hci14: command tx timeout [ 360.293560][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 366.534483][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 210 seconds [ 366.545258][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 210 seconds [ 366.556444][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 210 seconds [ 366.567714][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 210 seconds [ 368.453492][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 388.865852][ T5183] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 388.874727][ T5183] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 388.882776][ T5183] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 388.893133][ T5183] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 388.900999][ T5183] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 388.933508][T12741] lo speed is unknown, defaulting to 1000 [ 389.301070][T12741] chnl_net:caif_netlink_parms(): no params data found [ 389.368060][T12741] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.375505][T12741] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.382749][T12741] bridge_slave_0: entered allmulticast mode [ 389.390350][T12741] bridge_slave_0: entered promiscuous mode [ 389.398243][T12741] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.405667][T12741] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.414987][T12741] bridge_slave_1: entered allmulticast mode [ 389.422830][T12741] bridge_slave_1: entered promiscuous mode [ 389.452652][T12741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.464744][T12741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.495663][T12741] team0: Port device team_slave_0 added [ 389.503542][T12741] team0: Port device team_slave_1 added [ 389.531010][T12741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.538448][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.564797][T12741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.578518][T12741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.586155][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.612513][T12741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.654030][T12741] hsr_slave_0: entered promiscuous mode [ 389.661246][T12741] hsr_slave_1: entered promiscuous mode [ 389.668012][T12741] debugfs: 'hsr0' already exists in 'hsr' [ 389.674520][T12741] Cannot create hsr debugfs directory [ 390.064167][ T5873] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 390.074586][ T5873] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 390.084340][ T5873] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 390.092601][ T5873] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 390.104972][ T5873] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 390.151227][ T5873] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 390.162567][ T5873] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 390.169132][T12751] lo speed is unknown, defaulting to 1000 [ 390.177681][ T5873] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 390.195441][ T5873] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 390.216078][ T5870] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 390.394355][T12753] lo speed is unknown, defaulting to 1000 [ 390.618430][T12751] chnl_net:caif_netlink_parms(): no params data found [ 390.731014][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.738340][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.745969][T12751] bridge_slave_0: entered allmulticast mode [ 390.753525][T12751] bridge_slave_0: entered promiscuous mode [ 390.766263][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.773835][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.781233][T12751] bridge_slave_1: entered allmulticast mode [ 390.788713][T12751] bridge_slave_1: entered promiscuous mode [ 390.836856][T12751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.854122][T12751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.921425][T12751] team0: Port device team_slave_0 added [ 390.931469][T12751] team0: Port device team_slave_1 added [ 390.937789][ T5870] Bluetooth: hci15: command tx timeout [ 390.978451][T12751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.985568][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.011708][T12751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.022727][ T5870] Bluetooth: hci5: command 0x0406 tx timeout [ 391.026565][T12751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.036040][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.062289][T12751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.073965][T12753] chnl_net:caif_netlink_parms(): no params data found [ 391.165128][T12751] hsr_slave_0: entered promiscuous mode [ 391.171698][T12751] hsr_slave_1: entered promiscuous mode [ 391.178823][T12751] debugfs: 'hsr0' already exists in 'hsr' [ 391.184685][T12751] Cannot create hsr debugfs directory [ 391.216041][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.223816][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.231054][T12753] bridge_slave_0: entered allmulticast mode [ 391.239146][T12753] bridge_slave_0: entered promiscuous mode [ 391.260815][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.267989][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.275498][T12753] bridge_slave_1: entered allmulticast mode [ 391.282670][T12753] bridge_slave_1: entered promiscuous mode [ 391.341013][T12753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.354765][T12753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.412905][T12753] team0: Port device team_slave_0 added [ 391.422987][T12753] team0: Port device team_slave_1 added [ 391.472481][T12753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.479633][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.505946][T12753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.524828][T12753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.531792][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.558039][T12753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.635454][T12753] hsr_slave_0: entered promiscuous mode [ 391.641914][T12753] hsr_slave_1: entered promiscuous mode [ 391.648323][T12753] debugfs: 'hsr0' already exists in 'hsr' [ 391.654168][T12753] Cannot create hsr debugfs directory [ 392.104842][ T5870] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 392.117005][ T5870] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 392.127543][ T5870] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 392.136238][ T5183] Bluetooth: hci16: command tx timeout [ 392.147280][ T5870] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 392.156524][ T5870] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 392.216269][T12769] lo speed is unknown, defaulting to 1000 [ 392.228647][ T5870] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 392.239371][ T5870] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 392.248637][ T5870] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 392.266720][ T5870] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 392.277841][ T5870] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 392.295721][ T5880] Bluetooth: hci17: command tx timeout [ 392.471639][T12771] lo speed is unknown, defaulting to 1000 [ 392.670157][T12769] chnl_net:caif_netlink_parms(): no params data found [ 392.799937][T12769] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.807444][T12769] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.815306][T12769] bridge_slave_0: entered allmulticast mode [ 392.822473][T12769] bridge_slave_0: entered promiscuous mode [ 392.835155][T12769] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.842356][T12769] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.849981][T12769] bridge_slave_1: entered allmulticast mode [ 392.857862][T12769] bridge_slave_1: entered promiscuous mode [ 392.895976][T12769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.911366][T12769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.956599][T12769] team0: Port device team_slave_0 added [ 392.970969][T12769] team0: Port device team_slave_1 added [ 393.013582][ T5880] Bluetooth: hci15: command tx timeout [ 393.034049][T12769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.041002][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.067304][T12769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.086117][T12769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.097507][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.123971][T12769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.148211][T12771] chnl_net:caif_netlink_parms(): no params data found [ 393.224193][T12769] hsr_slave_0: entered promiscuous mode [ 393.230725][T12769] hsr_slave_1: entered promiscuous mode [ 393.237498][T12769] debugfs: 'hsr0' already exists in 'hsr' [ 393.243626][T12769] Cannot create hsr debugfs directory [ 393.319564][T12771] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.326829][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.334733][T12771] bridge_slave_0: entered allmulticast mode [ 393.342042][T12771] bridge_slave_0: entered promiscuous mode [ 393.351348][T12771] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.358806][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.366521][T12771] bridge_slave_1: entered allmulticast mode [ 393.374035][T12771] bridge_slave_1: entered promiscuous mode [ 393.434288][T12771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.452289][T12771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.499776][T12771] team0: Port device team_slave_0 added [ 393.521787][T12771] team0: Port device team_slave_1 added [ 393.571996][T12771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.579654][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.605981][T12771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.624615][T12771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.631588][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.659425][T12771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.717618][T12771] hsr_slave_0: entered promiscuous mode [ 393.724558][T12771] hsr_slave_1: entered promiscuous mode [ 393.732044][T12771] debugfs: 'hsr0' already exists in 'hsr' [ 393.739586][T12771] Cannot create hsr debugfs directory [ 394.223864][ T51] Bluetooth: hci18: command tx timeout [ 394.235025][ T51] Bluetooth: hci16: command tx timeout [ 394.293701][T12785] Bluetooth: hci19: command tx timeout [ 394.373490][T12785] Bluetooth: hci17: command tx timeout [ 395.093472][T12785] Bluetooth: hci15: command tx timeout [ 396.135771][T12785] Bluetooth: hci9: command 0x0406 tx timeout [ 396.136205][ T5870] Bluetooth: hci8: command 0x0406 tx timeout [ 396.142151][T12785] Bluetooth: hci6: command 0x0406 tx timeout [ 396.149961][ T5870] Bluetooth: hci7: command 0x0406 tx timeout [ 396.293595][ T5864] Bluetooth: hci16: command tx timeout [ 396.293787][ T5183] Bluetooth: hci18: command tx timeout [ 396.373572][ T5183] Bluetooth: hci19: command tx timeout [ 396.453578][ T5183] Bluetooth: hci17: command tx timeout [ 396.617393][ T56] block nbd1: Possible stuck request ffff8880251b5080: control (read@0,1024B). Runtime 240 seconds [ 396.628277][ T56] block nbd1: Possible stuck request ffff8880251b5240: control (read@1024,1024B). Runtime 240 seconds [ 396.639575][ T56] block nbd1: Possible stuck request ffff8880251b5400: control (read@2048,1024B). Runtime 240 seconds [ 396.650843][ T56] block nbd1: Possible stuck request ffff8880251b55c0: control (read@3072,1024B). Runtime 240 seconds [ 397.173478][ T5183] Bluetooth: hci15: command tx timeout [ 398.373721][ T5864] Bluetooth: hci16: command tx timeout [ 398.379286][ T5183] Bluetooth: hci18: command tx timeout [ 398.453492][ T5183] Bluetooth: hci19: command tx timeout [ 398.533543][ T5183] Bluetooth: hci17: command tx timeout [ 400.453523][ T5183] Bluetooth: hci18: command tx timeout [ 400.533781][ T5183] Bluetooth: hci19: command tx timeout [ 417.093950][ T31] INFO: task syz.0.1758:12609 blocked for more than 143 seconds. [ 417.101705][ T31] Not tainted syzkaller #0 [ 417.107115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.116200][ T31] task:syz.0.1758 state:D stack:24808 pid:12609 tgid:12606 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 417.128450][ T31] Call Trace: [ 417.131739][ T31] [ 417.134782][ T31] __schedule+0x1798/0x4cc0 [ 417.139388][ T31] ? validate_chain+0x897/0x2140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 417.144463][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.149448][ T31] ? __pfx___schedule+0x10/0x10 [ 417.154535][ T31] ? schedule+0x91/0x360 [ 417.158846][ T31] schedule+0x165/0x360 [ 417.163222][ T31] schedule_timeout+0x9a/0x270 [ 417.168197][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 417.174566][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.179799][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.185274][ T31] ? wait_for_completion+0x267/0x5d0 [ 417.190595][ T31] wait_for_completion+0x2bf/0x5d0 [ 417.196000][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 417.201657][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 417.207761][ T31] ? check_flush_dependency+0x88/0x400 [ 417.213619][ T31] __flush_workqueue+0x6f7/0x14b0 [ 417.233365][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 417.239340][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.271321][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 417.278535][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 417.285027][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 417.290699][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 417.296527][ T31] nbd_genl_disconnect+0x485/0x570 [ 417.301686][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 417.307817][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 417.314292][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 417.319868][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 417.326258][ T31] ? stack_trace_save+0x9c/0xe0 [ 417.331128][ T31] genl_rcv_msg+0x60e/0x790 [ 417.336042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.341091][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 417.346799][ T31] netlink_rcv_skb+0x208/0x470 [ 417.351571][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.356470][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.361613][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.366970][ T31] ? down_read+0x1ad/0x2e0 [ 417.371401][ T31] genl_rcv+0x28/0x40 [ 417.375501][ T31] netlink_unicast+0x82c/0x9e0 [ 417.380289][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 417.385648][ T31] ? netlink_sendmsg+0x642/0xb30 [ 417.390601][ T31] ? skb_put+0x11b/0x210 [ 417.394931][ T31] netlink_sendmsg+0x805/0xb30 [ 417.399720][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.405350][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 417.410305][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.415833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.421132][ T31] __sock_sendmsg+0x219/0x270 [ 417.425883][ T31] ____sys_sendmsg+0x505/0x830 [ 417.430667][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.436005][ T31] ? import_iovec+0x74/0xa0 [ 417.440517][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 417.445264][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.450506][ T31] ? __fget_files+0x2a/0x420 [ 417.455134][ T31] ? __fget_files+0x3a0/0x420 [ 417.459915][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 417.464950][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.470438][ T31] ? rcu_is_watching+0x15/0xb0 [ 417.475235][ T31] ? do_syscall_64+0xbe/0x3b0 [ 417.479920][ T31] do_syscall_64+0xfa/0x3b0 [ 417.484450][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.489651][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.496012][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.500713][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.506686][ T31] RIP: 0033:0x7f632058eba9 [ 417.511119][ T31] RSP: 002b:00007f6321406038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.519687][ T31] RAX: ffffffffffffffda RBX: 00007f63207d5fa0 RCX: 00007f632058eba9 [ 417.527886][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 000000000000000b [ 417.535914][ T31] RBP: 00007f6320611e19 R08: 0000000000000000 R09: 0000000000000000 [ 417.543935][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.552080][ T31] R13: 00007f63207d6038 R14: 00007f63207d5fa0 R15: 00007ffcd0de76e8 [ 417.560142][ T31] [ 417.563177][ T31] INFO: task syz.0.1758:12616 blocked for more than 143 seconds. [ 417.570982][ T31] Not tainted syzkaller #0 [ 417.575960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.584678][ T31] task:syz.0.1758 state:D stack:28360 pid:12616 tgid:12606 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 417.596736][ T31] Call Trace: [ 417.600010][ T31] [ 417.602953][ T31] __schedule+0x1798/0x4cc0 [ 417.607540][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.612410][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.617320][ T31] ? __pfx___schedule+0x10/0x10 [ 417.622205][ T31] ? schedule+0x91/0x360 [ 417.626672][ T31] schedule+0x165/0x360 [ 417.630863][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.636408][ T31] __mutex_lock+0x7e6/0x1350 [ 417.641006][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.645964][ T31] ? genl_rcv_msg+0x10d/0x790 [ 417.650677][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.657248][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 417.662415][ T31] ? radix_tree_lookup+0x240/0x290 [ 417.667625][ T31] genl_rcv_msg+0x10d/0x790 [ 417.672146][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.677284][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 417.682321][ T31] ? __asan_memcpy+0x40/0x70 [ 417.686991][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 417.692368][ T31] netlink_rcv_skb+0x208/0x470 [ 417.697479][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.702342][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.707420][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.712731][ T31] ? down_read+0x1ad/0x2e0 [ 417.717195][ T31] genl_rcv+0x28/0x40 [ 417.721194][ T31] netlink_unicast+0x82c/0x9e0 [ 417.726083][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 417.731384][ T31] ? netlink_sendmsg+0x642/0xb30 [ 417.736628][ T31] ? skb_put+0x11b/0x210 [ 417.740899][ T31] netlink_sendmsg+0x805/0xb30 [ 417.745758][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.751057][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 417.756123][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.761421][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.766744][ T31] __sock_sendmsg+0x219/0x270 [ 417.771429][ T31] __sys_sendto+0x3bd/0x520 [ 417.775970][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 417.781040][ T31] ? fd_install+0x97/0x540 [ 417.785506][ T31] ? fd_install+0x30d/0x540 [ 417.790022][ T31] __x64_sys_sendto+0xde/0x100 [ 417.794886][ T31] do_syscall_64+0xfa/0x3b0 [ 417.799393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.804651][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.810721][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.815588][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.821500][ T31] RIP: 0033:0x7f6320590a3c [ 417.825957][ T31] RSP: 002b:00007f63213c2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 417.834442][ T31] RAX: ffffffffffffffda RBX: 00007f63213c2fc0 RCX: 00007f6320590a3c [ 417.842405][ T31] RDX: 0000000000000020 RSI: 00007f63213c3010 RDI: 000000000000000d [ 417.850795][ T31] RBP: 0000000000000000 R08: 00007f63213c2f14 R09: 000000000000000c [ 417.858858][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 417.866897][ T31] R13: 00007f63213c2f68 R14: 00007f63213c3010 R15: 0000000000000000 [ 417.874926][ T31] [ 417.877987][ T31] INFO: task syz.1.1763:12622 blocked for more than 144 seconds. [ 417.885791][ T31] Not tainted syzkaller #0 [ 417.890728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.899608][ T31] task:syz.1.1763 state:D stack:28328 pid:12622 tgid:12620 ppid:5872 task_flags:0x400140 flags:0x00004004 [ 417.911575][ T31] Call Trace: [ 417.914891][ T31] [ 417.917835][ T31] __schedule+0x1798/0x4cc0 [ 417.922353][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.927259][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.932141][ T31] ? __pfx___schedule+0x10/0x10 [ 417.937056][ T31] ? schedule+0x91/0x360 [ 417.941311][ T31] schedule+0x165/0x360 [ 417.945553][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.951197][ T31] __mutex_lock+0x7e6/0x1350 [ 417.955944][ T31] ? __mutex_lock+0x5bb/0x1350 [ 417.960723][ T31] ? genl_rcv_msg+0x10d/0x790 [ 417.965448][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.970585][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 417.975982][ T31] ? radix_tree_lookup+0x240/0x290 [ 417.981137][ T31] genl_rcv_msg+0x10d/0x790 [ 417.986092][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.991152][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 417.996487][ T31] ? __asan_memcpy+0x40/0x70 [ 418.001096][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 418.006722][ T31] netlink_rcv_skb+0x208/0x470 [ 418.011589][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.016616][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.021664][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.027064][ T31] ? down_read+0x1ad/0x2e0 [ 418.031498][ T31] genl_rcv+0x28/0x40 [ 418.035650][ T31] netlink_unicast+0x82c/0x9e0 [ 418.040465][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.045859][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.050813][ T31] ? skb_put+0x11b/0x210 [ 418.055510][ T31] netlink_sendmsg+0x805/0xb30 [ 418.060398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.065992][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.071329][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.077039][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.082341][ T31] __sock_sendmsg+0x219/0x270 [ 418.087262][ T31] __sys_sendto+0x3bd/0x520 [ 418.091785][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 418.097036][ T31] ? count_memcg_event_mm+0x21/0x260 [ 418.102351][ T31] ? exc_page_fault+0x76/0xf0 [ 418.107679][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 418.113035][ T31] __x64_sys_sendto+0xde/0x100 [ 418.118117][ T31] do_syscall_64+0xfa/0x3b0 [ 418.122636][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.127976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.134397][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.139076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.145364][ T31] RIP: 0033:0x7ff250d90a3c [ 418.149811][ T31] RSP: 002b:00007ff251cb5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 418.158462][ T31] RAX: ffffffffffffffda RBX: 00007ff251cb5fc0 RCX: 00007ff250d90a3c [ 418.166636][ T31] RDX: 0000000000000020 RSI: 00007ff251cb6010 RDI: 0000000000000005 [ 418.174750][ T31] RBP: 0000000000000000 R08: 00007ff251cb5f14 R09: 000000000000000c [ 418.182739][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 418.190957][ T31] R13: 00007ff251cb5f68 R14: 00007ff251cb6010 R15: 0000000000000000 [ 418.199050][ T31] [ 418.202093][ T31] INFO: task syz.1.1763:12627 blocked for more than 144 seconds. [ 418.209918][ T31] Not tainted syzkaller #0 [ 418.215906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.224738][ T31] task:syz.1.1763 state:D stack:23048 pid:12627 tgid:12620 ppid:5872 task_flags:0x400140 flags:0x00004004 [ 418.236811][ T31] Call Trace: [ 418.240102][ T31] [ 418.243040][ T31] __schedule+0x1798/0x4cc0 [ 418.247653][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.252519][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.257488][ T31] ? __pfx___schedule+0x10/0x10 [ 418.262455][ T31] ? schedule+0x91/0x360 [ 418.267139][ T31] schedule+0x165/0x360 [ 418.271346][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.276886][ T31] __mutex_lock+0x7e6/0x1350 [ 418.281573][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.286463][ T31] ? genl_rcv_msg+0x10d/0x790 [ 418.291158][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.296447][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 418.301594][ T31] ? radix_tree_lookup+0x240/0x290 [ 418.306851][ T31] genl_rcv_msg+0x10d/0x790 [ 418.311462][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.316579][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 418.321623][ T31] ? __asan_memcpy+0x40/0x70 [ 418.326508][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 418.331908][ T31] netlink_rcv_skb+0x208/0x470 [ 418.337083][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.341961][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.347069][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.352378][ T31] ? down_read+0x1ad/0x2e0 [ 418.356973][ T31] genl_rcv+0x28/0x40 [ 418.360970][ T31] netlink_unicast+0x82c/0x9e0 [ 418.365830][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.371130][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.376437][ T31] ? skb_put+0x11b/0x210 [ 418.380713][ T31] netlink_sendmsg+0x805/0xb30 [ 418.385596][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.391042][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.396281][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.401796][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.407360][ T31] __sock_sendmsg+0x219/0x270 [ 418.412061][ T31] __sys_sendto+0x3bd/0x520 [ 418.416721][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 418.421767][ T31] ? fd_install+0x97/0x540 [ 418.426375][ T31] ? fd_install+0x30d/0x540 [ 418.430905][ T31] __x64_sys_sendto+0xde/0x100 [ 418.436012][ T31] do_syscall_64+0xfa/0x3b0 [ 418.440546][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.446164][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.452269][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.457303][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.463389][ T31] RIP: 0033:0x7ff250d90a3c [ 418.467899][ T31] RSP: 002b:00007ff251c94ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 418.476388][ T31] RAX: ffffffffffffffda RBX: 00007ff251c94fc0 RCX: 00007ff250d90a3c [ 418.484572][ T31] RDX: 0000000000000020 RSI: 00007ff251c95010 RDI: 000000000000000d [ 418.492613][ T31] RBP: 0000000000000000 R08: 00007ff251c94f14 R09: 000000000000000c [ 418.501044][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 418.509305][ T31] R13: 00007ff251c94f68 R14: 00007ff251c95010 R15: 0000000000000000 [ 418.517454][ T31] [ 418.520549][ T31] INFO: task syz.3.1764:12625 blocked for more than 144 seconds. [ 418.528390][ T31] Not tainted syzkaller #0 [ 418.533687][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.542386][ T31] task:syz.3.1764 state:D stack:25320 pid:12625 tgid:12624 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 418.554698][ T31] Call Trace: [ 418.558014][ T31] [ 418.560946][ T31] __schedule+0x1798/0x4cc0 [ 418.565563][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.570452][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.575391][ T31] ? __pfx___schedule+0x10/0x10 [ 418.580357][ T31] ? schedule+0x91/0x360 [ 418.584673][ T31] schedule+0x165/0x360 [ 418.588845][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.594470][ T31] __mutex_lock+0x7e6/0x1350 [ 418.599082][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.604241][ T31] ? genl_rcv_msg+0x10d/0x790 [ 418.608939][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.614317][ T31] ? stack_trace_save+0x9c/0xe0 [ 418.619287][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 418.624735][ T31] ? radix_tree_lookup+0x240/0x290 [ 418.629858][ T31] genl_rcv_msg+0x10d/0x790 [ 418.634462][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.639341][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.644516][ T31] netlink_rcv_skb+0x208/0x470 [ 418.649298][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.654248][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.659415][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.665051][ T31] ? down_read+0x1ad/0x2e0 [ 418.669481][ T31] genl_rcv+0x28/0x40 [ 418.674076][ T31] netlink_unicast+0x82c/0x9e0 [ 418.679056][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.685634][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.690680][ T31] ? skb_put+0x11b/0x210 [ 418.695126][ T31] netlink_sendmsg+0x805/0xb30 [ 418.699970][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.705311][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.710253][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.715830][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.721149][ T31] __sock_sendmsg+0x219/0x270 [ 418.726130][ T31] __sys_sendto+0x3bd/0x520 [ 418.730657][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 418.735924][ T31] ? count_memcg_event_mm+0x21/0x260 [ 418.741256][ T31] ? exc_page_fault+0x76/0xf0 [ 418.746026][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 418.751354][ T31] __x64_sys_sendto+0xde/0x100 [ 418.756264][ T31] do_syscall_64+0xfa/0x3b0 [ 418.760776][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.766070][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.772147][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.777047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.782951][ T31] RIP: 0033:0x7faf6b390a3c [ 418.787641][ T31] RSP: 002b:00007faf6c12eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 418.796207][ T31] RAX: ffffffffffffffda RBX: 00007faf6c12efc0 RCX: 00007faf6b390a3c [ 418.804318][ T31] RDX: 0000000000000024 RSI: 00007faf6c12f010 RDI: 0000000000000007 [ 418.812305][ T31] RBP: 0000000000000000 R08: 00007faf6c12ef14 R09: 000000000000000c [ 418.820447][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 418.828558][ T31] R13: 00007faf6c12ef68 R14: 00007faf6c12f010 R15: 0000000000000000 [ 418.836621][ T31] [ 418.839658][ T31] INFO: task syz.2.1765:12638 blocked for more than 145 seconds. [ 418.848264][ T31] Not tainted syzkaller #0 [ 418.853289][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.862066][ T31] task:syz.2.1765 state:D stack:28328 pid:12638 tgid:12637 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 418.874195][ T31] Call Trace: [ 418.877480][ T31] [ 418.880419][ T31] __schedule+0x1798/0x4cc0 [ 418.885015][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.889895][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.894837][ T31] ? __pfx___schedule+0x10/0x10 [ 418.899711][ T31] ? schedule+0x91/0x360 [ 418.904010][ T31] schedule+0x165/0x360 [ 418.908178][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.913671][ T31] __mutex_lock+0x7e6/0x1350 [ 418.918279][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.923058][ T31] ? genl_rcv_msg+0x10d/0x790 [ 418.927777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.932904][ T31] ? stack_trace_save+0x9c/0xe0 [ 418.937988][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 418.943518][ T31] ? radix_tree_lookup+0x240/0x290 [ 418.948661][ T31] genl_rcv_msg+0x10d/0x790 [ 418.953196][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.958152][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.963494][ T31] netlink_rcv_skb+0x208/0x470 [ 418.968277][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.973225][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.978419][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.983799][ T31] ? down_read+0x1ad/0x2e0 [ 418.988233][ T31] genl_rcv+0x28/0x40 [ 418.992210][ T31] netlink_unicast+0x82c/0x9e0 [ 418.997058][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.002543][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.007546][ T31] ? skb_put+0x11b/0x210 [ 419.011809][ T31] netlink_sendmsg+0x805/0xb30 [ 419.016886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.022207][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.027185][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.032487][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.037918][ T31] __sock_sendmsg+0x219/0x270 [ 419.042653][ T31] __sys_sendto+0x3bd/0x520 [ 419.047378][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 419.052423][ T31] ? count_memcg_event_mm+0x21/0x260 [ 419.058073][ T31] ? exc_page_fault+0x76/0xf0 [ 419.062769][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 419.068119][ T31] __x64_sys_sendto+0xde/0x100 [ 419.072948][ T31] do_syscall_64+0xfa/0x3b0 [ 419.077716][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.082936][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.089180][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.094001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.099991][ T31] RIP: 0033:0x7f2a26990a3c [ 419.104768][ T31] RSP: 002b:00007f2a277f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.113196][ T31] RAX: ffffffffffffffda RBX: 00007f2a277f4fc0 RCX: 00007f2a26990a3c [ 419.121577][ T31] RDX: 0000000000000020 RSI: 00007f2a277f5010 RDI: 0000000000000004 [ 419.129717][ T31] RBP: 0000000000000000 R08: 00007f2a277f4f14 R09: 000000000000000c [ 419.137801][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 419.145865][ T31] R13: 00007f2a277f4f68 R14: 00007f2a277f5010 R15: 0000000000000000 [ 419.153959][ T31] [ 419.157022][ T31] INFO: task syz.4.1768:12648 blocked for more than 145 seconds. [ 419.164990][ T31] Not tainted syzkaller #0 [ 419.169933][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.179048][ T31] task:syz.4.1768 state:D stack:28616 pid:12648 tgid:12647 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 419.191068][ T31] Call Trace: [ 419.194430][ T31] [ 419.197367][ T31] __schedule+0x1798/0x4cc0 [ 419.201896][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.207028][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.211898][ T31] ? __pfx___schedule+0x10/0x10 [ 419.217117][ T31] ? schedule+0x91/0x360 [ 419.221439][ T31] schedule+0x165/0x360 [ 419.225697][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.231163][ T31] __mutex_lock+0x7e6/0x1350 [ 419.235859][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.240646][ T31] ? genl_rcv_msg+0x10d/0x790 [ 419.245642][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.250696][ T31] ? stack_trace_save+0x9c/0xe0 [ 419.256102][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 419.261603][ T31] ? radix_tree_lookup+0x240/0x290 [ 419.267253][ T31] genl_rcv_msg+0x10d/0x790 [ 419.272239][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.277206][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.282258][ T31] netlink_rcv_skb+0x208/0x470 [ 419.287237][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.292235][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.297346][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.302672][ T31] ? down_read+0x1ad/0x2e0 [ 419.307226][ T31] genl_rcv+0x28/0x40 [ 419.311226][ T31] netlink_unicast+0x82c/0x9e0 [ 419.316081][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.321392][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.326748][ T31] ? skb_put+0x11b/0x210 [ 419.331015][ T31] netlink_sendmsg+0x805/0xb30 [ 419.336203][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.341519][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.346566][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.351862][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.357227][ T31] __sock_sendmsg+0x219/0x270 [ 419.361911][ T31] __sys_sendto+0x3bd/0x520 [ 419.366594][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 419.371650][ T31] ? count_memcg_event_mm+0x21/0x260 [ 419.377054][ T31] ? exc_page_fault+0x76/0xf0 [ 419.381774][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 419.387265][ T31] __x64_sys_sendto+0xde/0x100 [ 419.392077][ T31] do_syscall_64+0xfa/0x3b0 [ 419.396735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.402078][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.408429][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.413720][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.419864][ T31] RIP: 0033:0x7fcfadb90a3c [ 419.424412][ T31] RSP: 002b:00007fcfae9f3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.432851][ T31] RAX: ffffffffffffffda RBX: 00007fcfae9f3fc0 RCX: 00007fcfadb90a3c [ 419.441308][ T31] RDX: 0000000000000020 RSI: 00007fcfae9f4010 RDI: 0000000000000003 [ 419.449532][ T31] RBP: 0000000000000000 R08: 00007fcfae9f3f14 R09: 000000000000000c [ 419.457868][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 419.465945][ T31] R13: 00007fcfae9f3f68 R14: 00007fcfae9f4010 R15: 0000000000000000 [ 419.474093][ T31] [ 419.477117][ T31] INFO: task syz-executor:12651 blocked for more than 145 seconds. [ 419.485296][ T31] Not tainted syzkaller #0 [ 419.490235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.499069][ T31] task:syz-executor state:D stack:22312 pid:12651 tgid:12651 ppid:1 task_flags:0x400140 flags:0x00004004 [ 419.511207][ T31] Call Trace: [ 419.514612][ T31] [ 419.517642][ T31] __schedule+0x1798/0x4cc0 [ 419.522187][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.527195][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.532051][ T31] ? __pfx___schedule+0x10/0x10 [ 419.537113][ T31] ? schedule+0x91/0x360 [ 419.541389][ T31] schedule+0x165/0x360 [ 419.545806][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.551292][ T31] __mutex_lock+0x7e6/0x1350 [ 419.556228][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.561277][ T31] ? genl_rcv_msg+0x10d/0x790 [ 419.566245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.571294][ T31] ? stack_trace_save+0x9c/0xe0 [ 419.576376][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 419.581764][ T31] ? radix_tree_lookup+0x240/0x290 [ 419.586954][ T31] genl_rcv_msg+0x10d/0x790 [ 419.591485][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.596423][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.601473][ T31] netlink_rcv_skb+0x208/0x470 [ 419.606514][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.611407][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.616558][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.621881][ T31] ? down_read+0x1ad/0x2e0 [ 419.626409][ T31] genl_rcv+0x28/0x40 [ 419.630526][ T31] netlink_unicast+0x82c/0x9e0 [ 419.635602][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.640942][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.646023][ T31] ? skb_put+0x11b/0x210 [ 419.650290][ T31] netlink_sendmsg+0x805/0xb30 [ 419.656294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.661734][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.668465][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.673881][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.679209][ T31] __sock_sendmsg+0x219/0x270 [ 419.684019][ T31] __sys_sendto+0x3bd/0x520 [ 419.688558][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 419.693686][ T31] ? fd_install+0x97/0x540 [ 419.698165][ T31] ? fd_install+0x30d/0x540 [ 419.702704][ T31] __x64_sys_sendto+0xde/0x100 [ 419.707539][ T31] do_syscall_64+0xfa/0x3b0 [ 419.712046][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.717344][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.723512][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.728190][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.734388][ T31] RIP: 0033:0x7fa46f190a3c [ 419.738830][ T31] RSP: 002b:00007ffec525e090 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.747332][ T31] RAX: ffffffffffffffda RBX: 00007fa46ff04620 RCX: 00007fa46f190a3c [ 419.755483][ T31] RDX: 0000000000000020 RSI: 00007fa46ff04670 RDI: 0000000000000005 [ 419.763542][ T31] RBP: 0000000000000000 R08: 00007ffec525e0e4 R09: 000000000000000c [ 419.771529][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 419.779835][ T31] R13: 00007ffec525e138 R14: 00007fa46ff04670 R15: 0000000000000000 [ 419.787921][ T31] [ 419.790973][ T31] INFO: task syz-executor:12661 blocked for more than 146 seconds. [ 419.798997][ T31] Not tainted syzkaller #0 [ 419.803981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.812643][ T31] task:syz-executor state:D stack:22632 pid:12661 tgid:12661 ppid:1 task_flags:0x400140 flags:0x00004004 [ 419.825018][ T31] Call Trace: [ 419.828325][ T31] [ 419.831334][ T31] __schedule+0x1798/0x4cc0 [ 419.835955][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.840838][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.845795][ T31] ? __pfx___schedule+0x10/0x10 [ 419.850674][ T31] ? schedule+0x91/0x360 [ 419.855030][ T31] schedule+0x165/0x360 [ 419.859203][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.864867][ T31] __mutex_lock+0x7e6/0x1350 [ 419.869497][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.874403][ T31] ? genl_rcv_msg+0x10d/0x790 [ 419.879135][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.884482][ T31] ? stack_trace_save+0x9c/0xe0 [ 419.889358][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 419.895145][ T31] ? radix_tree_lookup+0x240/0x290 [ 419.900293][ T31] genl_rcv_msg+0x10d/0x790 [ 419.904893][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.909760][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.914906][ T31] netlink_rcv_skb+0x208/0x470 [ 419.919687][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.924700][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.929780][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.935219][ T31] ? down_read+0x1ad/0x2e0 [ 419.939652][ T31] genl_rcv+0x28/0x40 [ 419.943918][ T31] netlink_unicast+0x82c/0x9e0 [ 419.948726][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.954540][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.959508][ T31] ? skb_put+0x11b/0x210 [ 419.964012][ T31] netlink_sendmsg+0x805/0xb30 [ 419.968817][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.974579][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.979544][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.984893][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.990192][ T31] __sock_sendmsg+0x219/0x270 [ 419.994999][ T31] __sys_sendto+0x3bd/0x520 [ 419.999527][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 420.004738][ T31] ? fd_install+0x97/0x540 [ 420.009171][ T31] ? fd_install+0x30d/0x540 [ 420.013861][ T31] __x64_sys_sendto+0xde/0x100 [ 420.018647][ T31] do_syscall_64+0xfa/0x3b0 [ 420.023161][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.028400][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.034578][ T31] ? clear_bhb_loop+0x60/0xb0 [ 420.039281][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.045335][ T31] RIP: 0033:0x7f1f12f90a3c [ 420.049763][ T31] RSP: 002b:00007ffd0f6866e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 420.058482][ T31] RAX: ffffffffffffffda RBX: 00007f1f13d04620 RCX: 00007f1f12f90a3c [ 420.066738][ T31] RDX: 0000000000000020 RSI: 00007f1f13d04670 RDI: 0000000000000005 [ 420.075062][ T31] RBP: 0000000000000000 R08: 00007ffd0f686734 R09: 000000000000000c [ 420.083315][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 420.091344][ T31] R13: 00007ffd0f686788 R14: 00007f1f13d04670 R15: 0000000000000000 [ 420.099635][ T31] [ 420.102684][ T31] INFO: task syz-executor:12663 blocked for more than 146 seconds. [ 420.110939][ T31] Not tainted syzkaller #0 [ 420.116219][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.125153][ T31] task:syz-executor state:D stack:22632 pid:12663 tgid:12663 ppid:1 task_flags:0x400140 flags:0x00004004 [ 420.137463][ T31] Call Trace: [ 420.140847][ T31] [ 420.144010][ T31] __schedule+0x1798/0x4cc0 [ 420.148559][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.153509][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.158472][ T31] ? __pfx___schedule+0x10/0x10 [ 420.163467][ T31] ? schedule+0x91/0x360 [ 420.167747][ T31] schedule+0x165/0x360 [ 420.171928][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.177596][ T31] __mutex_lock+0x7e6/0x1350 [ 420.182297][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.187219][ T31] ? genl_rcv_msg+0x10d/0x790 [ 420.191938][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.197170][ T31] ? stack_trace_save+0x9c/0xe0 [ 420.202037][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 420.207524][ T31] ? radix_tree_lookup+0x240/0x290 [ 420.212686][ T31] genl_rcv_msg+0x10d/0x790 [ 420.217456][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.222331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.227527][ T31] netlink_rcv_skb+0x208/0x470 [ 420.232330][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.237372][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.242439][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.247929][ T31] ? down_read+0x1ad/0x2e0 [ 420.252378][ T31] genl_rcv+0x28/0x40 [ 420.256453][ T31] netlink_unicast+0x82c/0x9e0 [ 420.261243][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 420.266588][ T31] ? netlink_sendmsg+0x642/0xb30 [ 420.271540][ T31] ? skb_put+0x11b/0x210 [ 420.275946][ T31] netlink_sendmsg+0x805/0xb30 [ 420.280768][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.286299][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.291251][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.296736][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.302039][ T31] __sock_sendmsg+0x219/0x270 [ 420.306880][ T31] __sys_sendto+0x3bd/0x520 [ 420.311404][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 420.316732][ T31] ? fd_install+0x97/0x540 [ 420.321149][ T31] ? fd_install+0x30d/0x540 [ 420.325948][ T31] __x64_sys_sendto+0xde/0x100 [ 420.330734][ T31] do_syscall_64+0xfa/0x3b0 [ 420.335585][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.340803][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.347055][ T31] ? clear_bhb_loop+0x60/0xb0 [ 420.351836][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.357813][ T31] RIP: 0033:0x7f4cbcb90a3c [ 420.362231][ T31] RSP: 002b:00007ffc70e518a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 420.370770][ T31] RAX: ffffffffffffffda RBX: 00007f4cbd904620 RCX: 00007f4cbcb90a3c [ 420.380124][ T31] RDX: 0000000000000020 RSI: 00007f4cbd904670 RDI: 0000000000000005 [ 420.388624][ T31] RBP: 0000000000000000 R08: 00007ffc70e518f4 R09: 000000000000000c [ 420.396799][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 420.405067][ T31] R13: 00007ffc70e51948 R14: 00007f4cbd904670 R15: 0000000000000000 [ 420.413051][ T31] [ 420.416190][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 420.425334][ T31] INFO: task syz-executor:12673 blocked for more than 146 seconds. [ 420.433288][ T31] Not tainted syzkaller #0 [ 420.438227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.447092][ T31] task:syz-executor state:D stack:22264 pid:12673 tgid:12673 ppid:1 task_flags:0x400140 flags:0x00004004 [ 420.459249][ T31] Call Trace: [ 420.462544][ T31] [ 420.465542][ T31] __schedule+0x1798/0x4cc0 [ 420.470074][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.475030][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.479986][ T31] ? __pfx___schedule+0x10/0x10 [ 420.484940][ T31] ? schedule+0x91/0x360 [ 420.489233][ T31] schedule+0x165/0x360 [ 420.493564][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.499024][ T31] __mutex_lock+0x7e6/0x1350 [ 420.503764][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.508542][ T31] ? genl_rcv_msg+0x10d/0x790 [ 420.513393][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.518446][ T31] ? stack_trace_save+0x9c/0xe0 [ 420.523474][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 420.528862][ T31] ? radix_tree_lookup+0x240/0x290 [ 420.534549][ T31] genl_rcv_msg+0x10d/0x790 [ 420.539079][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.543970][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.549050][ T31] netlink_rcv_skb+0x208/0x470 [ 420.553911][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.558787][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.563912][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.569216][ T31] ? down_read+0x1ad/0x2e0 [ 420.573745][ T31] genl_rcv+0x28/0x40 [ 420.577740][ T31] netlink_unicast+0x82c/0x9e0 [ 420.582508][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 420.587812][ T31] ? netlink_sendmsg+0x642/0xb30 [ 420.592754][ T31] ? skb_put+0x11b/0x210 [ 420.597087][ T31] netlink_sendmsg+0x805/0xb30 [ 420.601881][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.607260][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.612217][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.617952][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.623290][ T31] __sock_sendmsg+0x219/0x270 [ 420.627982][ T31] __sys_sendto+0x3bd/0x520 [ 420.632579][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 420.637739][ T31] ? fd_install+0x97/0x540 [ 420.642174][ T31] ? fd_install+0x30d/0x540 [ 420.646777][ T31] __x64_sys_sendto+0xde/0x100 [ 420.651568][ T31] do_syscall_64+0xfa/0x3b0 [ 420.656167][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.661382][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.667508][ T31] ? clear_bhb_loop+0x60/0xb0 [ 420.672212][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.678507][ T31] RIP: 0033:0x7f604a790a3c [ 420.683444][ T31] RSP: 002b:00007fff7f6e53d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 420.691895][ T31] RAX: ffffffffffffffda RBX: 00007f604b504620 RCX: 00007f604a790a3c [ 420.699958][ T31] RDX: 0000000000000020 RSI: 00007f604b504670 RDI: 0000000000000005 [ 420.707993][ T31] RBP: 0000000000000000 R08: 00007fff7f6e5424 R09: 000000000000000c [ 420.716137][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 420.724251][ T31] R13: 00007fff7f6e5478 R14: 00007f604b504670 R15: 0000000000000000 [ 420.732249][ T31] [ 420.735455][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 420.744798][ T31] INFO: task syz-executor:12676 blocked for more than 147 seconds. [ 420.752870][ T31] Not tainted syzkaller #0 [ 420.758208][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.766931][ T31] task:syz-executor state:D stack:22632 pid:12676 tgid:12676 ppid:1 task_flags:0x400140 flags:0x00004004 [ 420.779131][ T31] Call Trace: [ 420.782423][ T31] [ 420.785432][ T31] __schedule+0x1798/0x4cc0 [ 420.789960][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.794908][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.799777][ T31] ? __pfx___schedule+0x10/0x10 [ 420.804701][ T31] ? schedule+0x91/0x360 [ 420.808958][ T31] schedule+0x165/0x360 [ 420.813135][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.818701][ T31] __mutex_lock+0x7e6/0x1350 [ 420.823334][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.828115][ T31] ? genl_rcv_msg+0x10d/0x790 [ 420.832805][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.838103][ T31] ? stack_trace_save+0x9c/0xe0 [ 420.842968][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 420.848492][ T31] ? radix_tree_lookup+0x240/0x290 [ 420.853910][ T31] genl_rcv_msg+0x10d/0x790 [ 420.858564][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.863470][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.868546][ T31] netlink_rcv_skb+0x208/0x470 [ 420.873422][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.878296][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.883645][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.888969][ T31] ? down_read+0x1ad/0x2e0 [ 420.893473][ T31] genl_rcv+0x28/0x40 [ 420.897466][ T31] netlink_unicast+0x82c/0x9e0 [ 420.902222][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 420.907596][ T31] ? netlink_sendmsg+0x642/0xb30 [ 420.912545][ T31] ? skb_put+0x11b/0x210 [ 420.916889][ T31] netlink_sendmsg+0x805/0xb30 [ 420.921676][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.927030][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.932077][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.937585][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.942888][ T31] __sock_sendmsg+0x219/0x270 [ 420.947699][ T31] __sys_sendto+0x3bd/0x520 [ 420.952295][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 420.957424][ T31] ? fd_install+0x97/0x540 [ 420.961854][ T31] ? fd_install+0x30d/0x540 [ 420.966458][ T31] __x64_sys_sendto+0xde/0x100 [ 420.971257][ T31] do_syscall_64+0xfa/0x3b0 [ 420.975855][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.981086][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.987193][ T31] ? clear_bhb_loop+0x60/0xb0 [ 420.991875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.997870][ T31] RIP: 0033:0x7fc7c7d90a3c [ 421.002303][ T31] RSP: 002b:00007ffe8301c900 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 421.010847][ T31] RAX: ffffffffffffffda RBX: 00007fc7c8b04620 RCX: 00007fc7c7d90a3c [ 421.019316][ T31] RDX: 0000000000000020 RSI: 00007fc7c8b04670 RDI: 0000000000000005 [ 421.027337][ T31] RBP: 0000000000000000 R08: 00007ffe8301c954 R09: 000000000000000c [ 421.035437][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 421.043752][ T31] R13: 00007ffe8301c9a8 R14: 00007fc7c8b04670 R15: 0000000000000000 [ 421.051926][ T31] [ 421.055142][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 421.064269][ T31] [ 421.064269][ T31] Showing all locks held in the system: [ 421.072078][ T31] 1 lock held by khungtaskd/31: [ 421.078090][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 421.088036][ T31] 2 locks held by getty/5624: [ 421.092711][ T31] #0: ffff8880300ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 421.102695][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 421.113014][ T31] 2 locks held by kworker/u9:8/5881: [ 421.118348][ T31] #0: ffff8880250fb148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 421.129841][ T31] #1: ffffc90004e6fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 421.141720][ T31] 1 lock held by udevd/6310: [ 421.146554][ T31] #0: ffff8880250b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 421.155852][ T31] 2 locks held by kworker/u8:14/6521: [ 421.161235][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 421.171329][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 421.180507][ T31] 2 locks held by kworker/0:9/7194: [ 421.185852][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 421.195966][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 421.205079][ T31] 3 locks held by syz.0.1758/12609: [ 421.210296][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.218986][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.228105][ T31] #2: ffff8880250d7230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 421.238579][ T31] 2 locks held by syz.0.1758/12616: [ 421.243923][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.252263][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.261369][ T31] 2 locks held by syz.1.1763/12622: [ 421.266813][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.275163][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.284259][ T31] 2 locks held by syz.1.1763/12627: [ 421.289558][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.297862][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.306966][ T31] 2 locks held by syz.3.1764/12625: [ 421.312158][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.320586][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.329830][ T31] 2 locks held by syz.2.1765/12638: [ 421.335205][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.343467][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.352525][ T31] 2 locks held by syz.4.1768/12648: [ 421.357823][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.366119][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.375269][ T31] 2 locks held by syz-executor/12651: [ 421.380720][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.389052][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.398229][ T31] 2 locks held by syz-executor/12661: [ 421.403650][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.411951][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.423387][ T31] 2 locks held by syz-executor/12663: [ 421.428777][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.437641][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.446720][ T31] 2 locks held by syz-executor/12673: [ 421.452094][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.460383][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.469449][ T31] 2 locks held by syz-executor/12676: [ 421.474897][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.483125][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.492223][ T31] 2 locks held by syz-executor/12696: [ 421.497712][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.506147][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.515336][ T31] 2 locks held by syz-executor/12705: [ 421.520749][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.529022][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.538138][ T31] 2 locks held by syz-executor/12709: [ 421.543708][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.551989][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.561366][ T31] 2 locks held by syz-executor/12724: [ 421.566905][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.575776][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.584897][ T31] 2 locks held by syz-executor/12726: [ 421.590277][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.598737][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.607922][ T31] 2 locks held by syz-executor/12741: [ 421.613399][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.621611][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.630815][ T31] 2 locks held by syz-executor/12751: [ 421.636267][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.644582][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.654365][ T31] 2 locks held by syz-executor/12753: [ 421.659783][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.668139][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.677196][ T31] 2 locks held by syz-executor/12769: [ 421.682551][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.690851][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.699911][ T31] 2 locks held by syz-executor/12771: [ 421.705421][ T31] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.713755][ T31] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.722743][ T31] [ 421.725168][ T31] ============================================= [ 421.725168][ T31] [ 421.733751][ T31] NMI backtrace for cpu 1 [ 421.733779][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 421.733801][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.733813][ T31] Call Trace: [ 421.733820][ T31] [ 421.733828][ T31] dump_stack_lvl+0x189/0x250 [ 421.733858][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.733882][ T31] ? __pfx__printk+0x10/0x10 [ 421.733923][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 421.733954][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 421.733985][ T31] ? __pfx__printk+0x10/0x10 [ 421.734016][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 421.734057][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 421.734086][ T31] watchdog+0xf93/0xfe0 [ 421.734115][ T31] ? watchdog+0x1de/0xfe0 [ 421.734146][ T31] kthread+0x70e/0x8a0 [ 421.734174][ T31] ? __pfx_watchdog+0x10/0x10 [ 421.734199][ T31] ? __pfx_kthread+0x10/0x10 [ 421.734226][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.734255][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.734273][ T31] ? __pfx_kthread+0x10/0x10 [ 421.734297][ T31] ret_from_fork+0x436/0x7d0 [ 421.734320][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 421.734347][ T31] ? __switch_to_asm+0x39/0x70 [ 421.734370][ T31] ? __switch_to_asm+0x33/0x70 [ 421.734392][ T31] ? __pfx_kthread+0x10/0x10 [ 421.734418][ T31] ret_from_fork_asm+0x1a/0x30 [ 421.734459][ T31] [ 421.734466][ T31] Sending NMI from CPU 1 to CPUs 0: [ 421.880130][ C0] NMI backtrace for cpu 0 [ 421.880149][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 421.880169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.880180][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 421.880201][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 421.880217][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 421.880233][ C0] RAX: 7bdb0440a6625600 RBX: ffffffff819693f8 RCX: 7bdb0440a6625600 [ 421.880247][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9849 RDI: ffffffff8be33c00 [ 421.880259][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 421.880272][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38930 [ 421.880292][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 421.880304][ C0] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 421.880319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.880331][ C0] CR2: 00007ffc219b2ffc CR3: 000000000df36000 CR4: 00000000003526f0 [ 421.880346][ C0] Call Trace: [ 421.880352][ C0] [ 421.880359][ C0] default_idle+0x13/0x20 [ 421.880380][ C0] default_idle_call+0x74/0xb0 [ 421.880402][ C0] do_idle+0x1e8/0x510 [ 421.880429][ C0] ? __pfx_do_idle+0x10/0x10 [ 421.880455][ C0] cpu_startup_entry+0x44/0x60 [ 421.880472][ C0] rest_init+0x2de/0x300 [ 421.880494][ C0] start_kernel+0x3a9/0x410 [ 421.880516][ C0] x86_64_start_reservations+0x24/0x30 [ 421.880540][ C0] x86_64_start_kernel+0x143/0x1c0 [ 421.880562][ C0] common_startup_64+0x13e/0x147 [ 421.880594][ C0] [ 421.881192][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 422.061901][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 422.071091][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.081172][ T31] Call Trace: [ 422.084445][ T31] [ 422.087369][ T31] dump_stack_lvl+0x99/0x250 [ 422.091979][ T31] ? __asan_memcpy+0x40/0x70 [ 422.096562][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.101771][ T31] ? __pfx__printk+0x10/0x10 [ 422.106377][ T31] vpanic+0x281/0x750 [ 422.110356][ T31] ? __pfx_vpanic+0x10/0x10 [ 422.114849][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 422.120398][ T31] ? preempt_schedule+0xae/0xc0 [ 422.125244][ T31] ? preempt_schedule_common+0x83/0xd0 [ 422.130886][ T31] panic+0xb9/0xc0 [ 422.134603][ T31] ? __pfx_panic+0x10/0x10 [ 422.139115][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 422.144514][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 422.150794][ T31] watchdog+0xfd2/0xfe0 [ 422.155035][ T31] ? watchdog+0x1de/0xfe0 [ 422.159469][ T31] kthread+0x70e/0x8a0 [ 422.163552][ T31] ? __pfx_watchdog+0x10/0x10 [ 422.168237][ T31] ? __pfx_kthread+0x10/0x10 [ 422.172835][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.178032][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.183216][ T31] ? __pfx_kthread+0x10/0x10 [ 422.187808][ T31] ret_from_fork+0x436/0x7d0 [ 422.192392][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.197506][ T31] ? __switch_to_asm+0x39/0x70 [ 422.202268][ T31] ? __switch_to_asm+0x33/0x70 [ 422.207026][ T31] ? __pfx_kthread+0x10/0x10 [ 422.211624][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.216428][ T31] [ 422.219845][ T31] Kernel Offset: disabled [ 422.224221][ T31] Rebooting in 86400 seconds..