last executing test programs: 2m4.753784678s ago: executing program 1 (id=2648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r9, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10, @ANYBLOB="14000300766574e8305f766972745f776966"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 2m4.428232152s ago: executing program 1 (id=2649): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m4.109755597s ago: executing program 1 (id=2654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='syzkaller\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380), 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r13, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r14, 0xffffffffffffffff, 0x4}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r12, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r12, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m3.826468199s ago: executing program 1 (id=2660): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x8, 0x3a, 0xff, @remote, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x2}}}}}}, 0x0) unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m2.008165889s ago: executing program 1 (id=2668): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2m1.545935479s ago: executing program 1 (id=2670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) rt_sigpending(0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x3c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x20, &(0x7f0000000100)=[{&(0x7f0000000440)="2d967a2c12731371fdfa1aead2f1bd018586e001ed6c49735cc6f95b654f923053e012908d8738f17cff91bab0e55788c0e2a79147aa693af39e93240f0d0744276e609e9775384f08ed2a856a3d41587f6744e1336068ffe2c5417cf7f2363b0884ddf1790cbe4dec8fc12cdd6044598a87f96504cbf370a5f89997e322641d9eb75210182d91cd15", 0x89}], 0x1}}], 0x1, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r9, 0x1, 0x72bd28, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 1m46.292542565s ago: executing program 32 (id=2670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) rt_sigpending(0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x3c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x20, &(0x7f0000000100)=[{&(0x7f0000000440)="2d967a2c12731371fdfa1aead2f1bd018586e001ed6c49735cc6f95b654f923053e012908d8738f17cff91bab0e55788c0e2a79147aa693af39e93240f0d0744276e609e9775384f08ed2a856a3d41587f6744e1336068ffe2c5417cf7f2363b0884ddf1790cbe4dec8fc12cdd6044598a87f96504cbf370a5f89997e322641d9eb75210182d91cd15", 0x89}], 0x1}}], 0x1, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, r9, 0x1, 0x72bd28, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 10.018118663s ago: executing program 3 (id=3051): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x8, 0x3a, 0xff, @remote, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x2}}}}}}, 0x0) unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.793148373s ago: executing program 4 (id=3052): syz_emit_ethernet(0xffffffffffffffbb, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa07bb14eb86208136000c040000e044b7f6a386c8110981ef40bf0000000000"], &(0x7f0000000140)={0x0, 0x1, [0x52e, 0x68b, 0x15e, 0x664]}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'team0\x00', {0x4}, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chmod(&(0x7f0000000240)='./file0\x00', 0x10) r4 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc25c4110, &(0x7f0000000280)={0xd, [[0x1, 0x0, 0x7ffe], [0x2, 0x0, 0x9], [0x2, 0x0, 0x0, 0x4, 0x9b, 0x0, 0xfffffffc]], '\x00', [{}, {0x0, 0xfffffffc}, {0x6, 0x8}, {}, {0x0, 0x1}, {0x2ea}, {}, {0x3ff}, {}, {0x8, 0xfffffffc}, {0x2, 0xffffffff}, {0x0, 0x3}], '\x00', 0x88, 0x0, 0x0, 0x2}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000280)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e1c, @rand_addr=0x64010100}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7ba41989bcf847c7f351173d609a0a1d19b38a7800"/36}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, &(0x7f0000000a00)="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"}) 9.330292182s ago: executing program 4 (id=3054): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000808403df256d24010000000000000001000000fbff"]) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 8.278701338s ago: executing program 4 (id=3056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 8.000221511s ago: executing program 2 (id=3059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.847279657s ago: executing program 0 (id=3060): pipe2$9p(&(0x7f00000003c0), 0x84000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf8e14000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 7.55593874s ago: executing program 4 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7.283874552s ago: executing program 2 (id=3062): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}, {&(0x7f0000000280)}], 0x2}], 0x1, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x14, 0x1e, 0x109}, 0x14}}, 0x44090) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) pipe(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdn']) write$UHID_INPUT(r0, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x1, 0x4}, 'syz0\x00', 0x10}) ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r10, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 7.239040484s ago: executing program 4 (id=3063): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRES8=r0], 0x138}, 0x1, 0x0, 0x0, 0x20040004}, 0x200000b0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000540)=0x2) lseek(r3, 0xa, 0x4) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "0300", "0a3ea9fcffffffffffffff62581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) recvfrom(r5, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) 4.268403413s ago: executing program 4 (id=3064): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000808403df256d24010000000000000001000000fbff"]) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 3.778085445s ago: executing program 2 (id=3065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.632380012s ago: executing program 3 (id=3066): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.453883009s ago: executing program 3 (id=3067): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000500)={0x0, 0x0, {0xffffffffffffffff, 0x3}}) 3.179250631s ago: executing program 0 (id=3068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0xfdfffffa, 0x7, 0x6361, 0x5, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7ff, 0x9, 0x9, 0xc12, 0x26a0000}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.169672392s ago: executing program 3 (id=3069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2.738150421s ago: executing program 2 (id=3070): r0 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c85, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) 2.725637611s ago: executing program 3 (id=3071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.600772607s ago: executing program 0 (id=3072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) 2.514066131s ago: executing program 2 (id=3073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.159814506s ago: executing program 3 (id=3074): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x8, 0x3a, 0xff, @remote, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x2}}}}}}, 0x0) unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 901.256041ms ago: executing program 0 (id=3075): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 374.057194ms ago: executing program 2 (id=3076): pipe2$9p(&(0x7f00000003c0), 0x84000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf8e14000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) 332.650136ms ago: executing program 0 (id=3077): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000500)={0x0, 0x0, {0xffffffffffffffff, 0x3}}) 0s ago: executing program 0 (id=3078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) kernel console output (not intermixed with test programs): yzkaller0: entered promiscuous mode [ 257.185219][T10451] syzkaller0: entered allmulticast mode [ 257.349111][T10454] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 257.602124][T10456] syzkaller0: entered promiscuous mode [ 257.628667][T10456] syzkaller0: entered allmulticast mode [ 257.668655][T10458] syz_tun: entered allmulticast mode [ 257.742431][T10459] syz_tun: left allmulticast mode [ 257.976579][T10463] syzkaller1: entered promiscuous mode [ 257.982137][T10463] syzkaller1: entered allmulticast mode [ 259.034553][T10478] netlink: 'syz.3.1836': attribute type 10 has an invalid length. [ 259.116467][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 259.156224][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 259.256037][T10482] warning: `syz.1.1837' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 259.414477][T10488] netlink: 'syz.0.1839': attribute type 10 has an invalid length. [ 259.495967][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.523401][T10488] team0: entered promiscuous mode [ 259.544947][T10488] team_slave_0: entered promiscuous mode [ 259.553959][T10488] team_slave_1: entered promiscuous mode [ 259.575369][T10488] team0: entered allmulticast mode [ 259.580738][T10488] team_slave_0: entered allmulticast mode [ 259.594745][T10488] team_slave_1: entered allmulticast mode [ 259.614955][T10488] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.626971][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1840'. [ 259.782032][T10495] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 259.933888][T10501] syzkaller1: entered promiscuous mode [ 259.944820][T10501] syzkaller1: entered allmulticast mode [ 260.539461][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 260.581628][T10528] ip6_vti0 speed is unknown, defaulting to 1000 [ 261.113179][T10549] syzkaller1: entered promiscuous mode [ 261.129480][T10549] syzkaller1: entered allmulticast mode [ 261.539893][T10559] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 261.612326][T10528] wg1 speed is unknown, defaulting to 1000 [ 262.335535][T10589] tipc: Enabled bearer , priority 0 [ 262.387403][T10589] tipc: Resetting bearer [ 262.421063][T10587] tipc: Disabling bearer [ 262.552613][T10597] syzkaller1: entered promiscuous mode [ 262.562065][T10597] syzkaller1: entered allmulticast mode [ 262.891632][T10603] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 263.336652][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'. [ 263.572678][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 263.684197][T10622] syzkaller1: entered promiscuous mode [ 263.693055][T10622] syzkaller1: entered allmulticast mode [ 263.774388][T10624] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 263.796163][T10624] bond0: (slave wlan1): Opening slave failed [ 263.865576][T10626] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 264.228449][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1889'. [ 264.433077][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 264.514683][T10650] syzkaller1: entered promiscuous mode [ 264.520251][T10650] syzkaller1: entered allmulticast mode [ 264.796636][T10657] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 264.825980][T10657] bond0: (slave wlan1): Opening slave failed [ 265.315975][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 265.525575][T10677] syzkaller1: entered promiscuous mode [ 265.531126][T10677] syzkaller1: entered allmulticast mode [ 265.682929][T10682] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1906'. [ 266.036273][T10692] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 266.216273][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 266.379236][T10701] tipc: Enabled bearer , priority 0 [ 266.416180][T10702] syzkaller1: entered promiscuous mode [ 266.421736][T10702] syzkaller1: entered allmulticast mode [ 266.453525][T10701] tipc: Resetting bearer [ 266.725657][T10699] tipc: Disabling bearer [ 267.502780][T10729] netlink: 'syz.2.1924': attribute type 3 has an invalid length. [ 267.520311][T10729] siw: device registration error -23 [ 267.552601][T10729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.629902][T10729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.883134][T10735] syzkaller1: entered promiscuous mode [ 267.904637][T10735] syzkaller1: entered allmulticast mode [ 268.012108][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 268.479728][T10759] tipc: Enabling of bearer rejected, failed to enable media [ 268.499294][T10759] syzkaller0: entered promiscuous mode [ 268.507551][T10759] syzkaller0: entered allmulticast mode [ 268.557857][T10763] netlink: 'syz.2.1938': attribute type 3 has an invalid length. [ 268.595354][T10763] netlink: 'syz.2.1938': attribute type 2 has an invalid length. [ 268.650087][T10763] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1938'. [ 268.664351][T10763] netlink: 'syz.2.1938': attribute type 9 has an invalid length. [ 268.682591][T10763] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1938'. [ 268.705077][T10763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1938'. [ 268.793172][T10763] bond1: entered promiscuous mode [ 268.798538][T10763] bond1: entered allmulticast mode [ 268.804245][T10763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.044513][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1942'. [ 269.309439][T10778] __nla_validate_parse: 1 callbacks suppressed [ 269.309459][T10778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'. [ 269.354814][T10778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'. [ 269.385261][T10778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'. [ 269.423298][T10778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1944'. [ 269.455168][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 269.746854][T10792] syzkaller0: entered promiscuous mode [ 269.752404][T10792] syzkaller0: entered allmulticast mode [ 270.126257][T10798] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1952'. [ 270.717155][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 270.856297][T10812] netlink: 'syz.0.1958': attribute type 3 has an invalid length. [ 270.897306][T10812] siw: device registration error -23 [ 271.016921][T10812] bridge0: port 3(bond0) entered blocking state [ 271.023753][T10812] bridge0: port 3(bond0) entered forwarding state [ 271.052655][T10812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.083247][T10812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.170017][T10817] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 271.399756][T10819] tipc: Enabling of bearer rejected, failed to enable media [ 271.434941][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1963'. [ 271.465028][T10819] syzkaller0: entered promiscuous mode [ 271.470594][T10819] syzkaller0: entered allmulticast mode [ 271.599496][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 272.295921][T10840] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 272.355991][T10840] siw: device registration error -23 [ 272.420073][T10840] infiniband syz2: set active [ 272.476068][T10840] infiniband syz2: set active [ 272.514417][T10840] infiniband syz2: set active [ 272.553557][T10840] bridge0: port 3(bond0) entered blocking state [ 272.560086][T10840] bridge0: port 3(bond0) entered forwarding state [ 272.577717][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.599051][T10840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.635957][ T787] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.646132][ T7689] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.653000][ T5871] ip6_vti0 speed is unknown, defaulting to 1000 [ 272.673309][ T787] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.021565][T10853] tipc: Enabling of bearer rejected, failed to enable media [ 273.042525][T10853] syzkaller0: entered promiscuous mode [ 273.056699][T10853] syzkaller0: entered allmulticast mode [ 273.533374][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1981'. [ 273.559671][T10863] team0: No ports can be present during mode change [ 274.058123][T10877] syzkaller0: entered promiscuous mode [ 274.075538][T10877] syzkaller0: entered allmulticast mode [ 274.426585][T10885] __nla_validate_parse: 1 callbacks suppressed [ 274.426604][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1991'. [ 274.935719][T10900] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1995'. [ 275.240114][T10908] tipc: Enabling of bearer rejected, failed to enable media [ 275.250020][T10908] syzkaller0: entered promiscuous mode [ 275.258220][T10908] syzkaller0: entered allmulticast mode [ 275.388101][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 275.743662][T10920] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.022357][T10920] wg1 speed is unknown, defaulting to 1000 [ 276.143931][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2012'. [ 276.341727][T10938] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2013'. [ 276.351734][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2014'. [ 276.494387][T10940] tipc: Enabling of bearer rejected, failed to enable media [ 276.514153][T10940] syzkaller0: entered promiscuous mode [ 276.524830][T10940] syzkaller0: entered allmulticast mode [ 276.916846][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2021'. [ 276.945604][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 277.212996][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2023'. [ 277.375579][T10965] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2024'. [ 277.587483][T10971] tipc: Enabling of bearer rejected, failed to enable media [ 277.621529][T10971] syzkaller0: entered promiscuous mode [ 277.634672][T10971] syzkaller0: entered allmulticast mode [ 277.924168][T10981] bridge0: port 3(bond0) entered disabled state [ 279.651600][T11036] __nla_validate_parse: 6 callbacks suppressed [ 279.651619][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 279.814905][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 279.892095][T11042] syzkaller0: entered promiscuous mode [ 279.934736][T11042] syzkaller0: entered allmulticast mode [ 280.015320][T11046] tipc: Enabling of bearer rejected, failed to enable media [ 280.156100][T11051] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 280.297819][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 180 seconds [ 280.310225][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 180 seconds [ 280.321696][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 180 seconds [ 280.333335][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 180 seconds [ 280.595109][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 280.648209][T11067] syzkaller0: entered promiscuous mode [ 280.665266][T11067] syzkaller0: entered allmulticast mode [ 280.688313][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'. [ 280.802305][T11073] syzkaller0: entered promiscuous mode [ 280.808197][T11073] syzkaller0: entered allmulticast mode [ 281.322590][T11091] tipc: Enabling of bearer rejected, failed to enable media [ 281.830374][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 281.855946][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2077'. [ 281.997075][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 282.122585][T11117] netlink: 'syz.1.2081': attribute type 4 has an invalid length. [ 282.130812][T11117] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2081'. [ 282.233569][ T96] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 180 seconds [ 282.291964][T11123] tipc: Enabling of bearer rejected, failed to enable media [ 282.788178][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 282.808747][T11136] syzkaller0: entered promiscuous mode [ 282.814795][T11136] syzkaller0: entered allmulticast mode [ 283.007944][T11141] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2089'. [ 283.017993][T11141] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2089'. [ 283.305575][T11151] tipc: Enabling of bearer rejected, failed to enable media [ 283.635641][T11164] syzkaller0: entered promiscuous mode [ 283.665401][T11164] syzkaller0: entered allmulticast mode [ 284.933374][T11194] __nla_validate_parse: 1 callbacks suppressed [ 284.933393][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 285.056478][T11198] tipc: Enabling of bearer rejected, failed to enable media [ 285.156341][T11202] siw: device registration error -23 [ 285.271121][T11207] syzkaller0: entered promiscuous mode [ 285.294795][T11207] syzkaller0: entered allmulticast mode [ 285.644733][T11224] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 285.933172][T11237] tipc: Invalid UDP bearer configuration [ 285.933244][T11237] tipc: Enabling of bearer rejected, failed to enable media [ 286.758805][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2122'. [ 286.784852][T11249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2122'. [ 286.956279][T11252] tipc: Enabling of bearer rejected, failed to enable media [ 286.998479][T11253] syzkaller0: entered promiscuous mode [ 287.005718][T11253] syzkaller0: entered allmulticast mode [ 287.336939][T11271] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 287.625752][T11280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2131'. [ 287.712160][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 287.892748][T11292] tipc: Enabling of bearer rejected, failed to enable media [ 288.127188][T11302] syzkaller0: entered promiscuous mode [ 288.132762][T11302] syzkaller0: entered allmulticast mode [ 288.511150][T11314] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2144'. [ 288.516180][T11312] syzkaller0: entered promiscuous mode [ 288.535448][T11312] syzkaller0: entered allmulticast mode [ 288.722158][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 288.977273][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 289.026997][T11333] tipc: Enabling of bearer rejected, failed to enable media [ 289.270095][T11346] syzkaller0: entered promiscuous mode [ 289.290427][T11346] syzkaller0: entered allmulticast mode [ 289.570743][T11357] syzkaller0: entered promiscuous mode [ 289.586229][T11357] syzkaller0: entered allmulticast mode [ 289.736590][T11361] syzkaller1: entered promiscuous mode [ 289.742384][T11361] syzkaller1: entered allmulticast mode [ 289.874038][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 290.182483][T11379] tipc: Enabling of bearer rejected, failed to enable media [ 290.393572][T11386] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 290.696653][T11399] syzkaller0: entered promiscuous mode [ 290.702213][T11399] syzkaller0: entered allmulticast mode [ 290.828629][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 290.926265][T11405] syzkaller1: entered promiscuous mode [ 290.932519][T11405] syzkaller1: entered allmulticast mode [ 291.549280][T11424] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 291.832486][T11434] syzkaller0: entered promiscuous mode [ 291.854893][T11434] syzkaller0: entered allmulticast mode [ 291.915922][T11436] syzkaller1: entered promiscuous mode [ 291.934683][T11436] syzkaller1: entered allmulticast mode [ 292.419533][T11451] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 292.940051][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.953931][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.962986][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.971548][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.986650][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.994176][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.079116][T11458] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.186095][T11468] syzkaller0: entered promiscuous mode [ 293.191666][T11468] syzkaller0: entered allmulticast mode [ 293.404547][T11458] wg1 speed is unknown, defaulting to 1000 [ 293.758830][T11482] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 293.818006][T11458] chnl_net:caif_netlink_parms(): no params data found [ 294.066770][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2205'. [ 294.095484][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.109504][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.131167][T11458] bridge_slave_0: entered allmulticast mode [ 294.147766][T11458] bridge_slave_0: entered promiscuous mode [ 294.169224][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.184830][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.199424][T11458] bridge_slave_1: entered allmulticast mode [ 294.221034][T11458] bridge_slave_1: entered promiscuous mode [ 294.332446][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.373710][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.502936][T11458] team0: Port device team_slave_0 added [ 294.522174][T11502] tipc: Enabling of bearer rejected, failed to enable media [ 294.533338][T11458] team0: Port device team_slave_1 added [ 294.668227][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.694881][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.796687][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.858496][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.866572][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.924800][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.014993][ T5792] Bluetooth: hci0: command tx timeout [ 295.047774][T11458] hsr_slave_0: entered promiscuous mode [ 295.065092][T11458] hsr_slave_1: entered promiscuous mode [ 295.071935][T11458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.090134][T11458] Cannot create hsr debugfs directory [ 295.172480][T11518] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 295.549432][T11458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.563732][T11458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.741870][T11458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.764938][T11458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.818431][T11528] syzkaller0: entered promiscuous mode [ 295.830243][T11528] syzkaller0: entered allmulticast mode [ 295.917530][T11458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.938280][T11458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.113340][T11458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.134656][T11458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.560799][T11458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.599598][T11458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.631053][T11458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.685925][T11458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.862352][T11547] syzkaller0: entered promiscuous mode [ 296.875036][T11547] syzkaller0: entered allmulticast mode [ 297.072936][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 297.094949][ T5792] Bluetooth: hci0: command tx timeout [ 297.238565][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.330684][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.361406][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.368656][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.438761][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.446147][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.684342][T11562] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 298.130685][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.178738][T11572] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.346508][T11573] infiniband syz2: set active [ 298.465488][T11573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.543390][ T787] ip6_vti0 speed is unknown, defaulting to 1000 [ 298.615636][T11458] veth0_vlan: entered promiscuous mode [ 298.651605][T11458] veth1_vlan: entered promiscuous mode [ 298.729841][T11572] wg1 speed is unknown, defaulting to 1000 [ 298.788204][T11458] veth0_macvtap: entered promiscuous mode [ 298.826320][T11578] syzkaller0: entered promiscuous mode [ 298.831872][T11578] syzkaller0: entered allmulticast mode [ 298.981199][T11458] veth1_macvtap: entered promiscuous mode [ 299.055744][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.075457][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.104850][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.134721][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.154623][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.175049][ T5792] Bluetooth: hci0: command tx timeout [ 299.175159][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.216029][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.261653][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.304948][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.325117][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.345012][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.364924][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.384734][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.406840][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.460321][T11458] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.484684][T11458] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.513887][T11458] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.524843][T11458] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.611679][T11585] syzkaller0: entered promiscuous mode [ 299.617918][T11585] syzkaller0: entered allmulticast mode [ 299.887628][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.899741][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.975104][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.984445][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.856707][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2237'. [ 300.919028][ T7689] IPVS: starting estimator thread 0... [ 301.016051][T11614] IPVS: using max 17 ests per chain, 40800 per kthread [ 301.128211][T11619] syzkaller0: entered promiscuous mode [ 301.144969][T11619] syzkaller0: entered allmulticast mode [ 301.255235][ T5792] Bluetooth: hci0: command tx timeout [ 301.397677][T11626] syzkaller0: entered promiscuous mode [ 301.424875][T11626] syzkaller0: entered allmulticast mode [ 301.825640][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2249'. [ 301.869238][ T7689] IPVS: starting estimator thread 0... [ 301.965764][T11649] IPVS: using max 16 ests per chain, 38400 per kthread [ 302.113336][T11655] ip6_vti0 speed is unknown, defaulting to 1000 [ 303.103457][T11670] syzkaller0: entered promiscuous mode [ 303.109186][T11670] syzkaller0: entered allmulticast mode [ 303.124723][T11655] wg1 speed is unknown, defaulting to 1000 [ 303.217692][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 303.946730][T11709] syzkaller0: entered promiscuous mode [ 303.952283][T11709] syzkaller0: entered allmulticast mode [ 304.170305][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2271'. [ 304.327281][T11717] syzkaller0: entered promiscuous mode [ 304.332839][T11717] syzkaller0: entered allmulticast mode [ 305.237767][T11738] syzkaller0: entered promiscuous mode [ 305.243370][T11738] syzkaller0: entered allmulticast mode [ 305.493187][T11756] tipc: Enabled bearer , priority 0 [ 305.516869][T11756] tipc: Resetting bearer [ 305.546649][T11755] tipc: Disabling bearer [ 305.843204][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2285'. [ 306.142164][T11770] syzkaller0: entered promiscuous mode [ 306.154966][T11770] syzkaller0: entered allmulticast mode [ 306.287626][T11773] syzkaller0: entered promiscuous mode [ 306.293177][T11773] syzkaller0: entered allmulticast mode [ 306.506786][T11779] tipc: Enabled bearer , priority 0 [ 306.527146][T11779] syzkaller0: entered promiscuous mode [ 306.532700][T11779] syzkaller0: entered allmulticast mode [ 306.629833][T11778] tipc: Resetting bearer [ 306.761238][T11778] tipc: Disabling bearer [ 306.887682][T11789] syzkaller1: entered promiscuous mode [ 306.893457][T11789] syzkaller1: entered allmulticast mode [ 306.978004][T11800] netlink: 'syz.3.2301': attribute type 3 has an invalid length. [ 306.995119][T11800] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2301'. [ 307.057802][T11803] syzkaller0: entered promiscuous mode [ 307.063877][T11803] syzkaller0: entered allmulticast mode [ 307.307263][T11809] syzkaller0: entered promiscuous mode [ 307.312822][T11809] syzkaller0: entered allmulticast mode [ 307.725844][T11820] tipc: Enabled bearer , priority 0 [ 307.749262][T11820] syzkaller0: entered promiscuous mode [ 307.763974][T11820] syzkaller0: entered allmulticast mode [ 307.848825][T11819] tipc: Resetting bearer [ 307.929189][T11819] tipc: Disabling bearer [ 308.115589][T11826] syzkaller1: entered promiscuous mode [ 308.121228][T11826] syzkaller1: entered allmulticast mode [ 308.460372][T11838] erspan0: entered promiscuous mode [ 308.500583][T11837] syzkaller0: entered promiscuous mode [ 308.515116][T11837] syzkaller0: entered allmulticast mode [ 308.762959][T11841] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 309.270630][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.283116][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.315135][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.333126][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.350734][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.358415][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.537345][T11854] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.614141][T11862] syzkaller1: entered promiscuous mode [ 309.636624][T11862] syzkaller1: entered allmulticast mode [ 309.995812][T11854] wg1 speed is unknown, defaulting to 1000 [ 310.066323][T11870] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 310.303170][T11877] tipc: Started in network mode [ 310.308344][T11877] tipc: Node identity caa5855eb596, cluster identity 4711 [ 310.316586][T11877] tipc: Enabled bearer , priority 0 [ 310.345940][T11877] syzkaller0: entered promiscuous mode [ 310.351488][T11877] syzkaller0: entered allmulticast mode [ 310.387134][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 210 seconds [ 310.391463][T11877] tipc: Resetting bearer [ 310.398184][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 210 seconds [ 310.398256][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 210 seconds [ 310.398286][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 210 seconds [ 310.451483][T11876] tipc: Resetting bearer [ 310.496103][T11876] tipc: Disabling bearer [ 310.511569][T11854] chnl_net:caif_netlink_parms(): no params data found [ 310.535194][ T5800] Bluetooth: hci0: command tx timeout [ 310.707872][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.728201][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.753850][T11854] bridge_slave_0: entered allmulticast mode [ 310.779236][T11854] bridge_slave_0: entered promiscuous mode [ 310.808534][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.828898][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.845186][T11854] bridge_slave_1: entered allmulticast mode [ 310.863000][T11854] bridge_slave_1: entered promiscuous mode [ 311.425153][ T5800] Bluetooth: hci3: command tx timeout [ 311.601153][T11884] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.601295][T11894] syzkaller1: entered promiscuous mode [ 311.619068][T11894] syzkaller1: entered allmulticast mode [ 311.712809][T11854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.753024][T11854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.901903][T11854] team0: Port device team_slave_0 added [ 311.937825][T11854] team0: Port device team_slave_1 added [ 312.100660][T11912] tipc: Enabled bearer , priority 0 [ 312.110815][T11884] wg1 speed is unknown, defaulting to 1000 [ 312.118799][T11854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.136988][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.188613][T11854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.236659][T11912] syzkaller0: entered promiscuous mode [ 312.242231][T11912] syzkaller0: entered allmulticast mode [ 312.251877][T11854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.260256][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.287708][T11854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.302912][ T96] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 210 seconds [ 312.335435][T11912] tipc: Resetting bearer [ 312.417528][T11911] tipc: Resetting bearer [ 312.476970][T11911] tipc: Disabling bearer [ 312.505873][T11854] hsr_slave_0: entered promiscuous mode [ 312.513485][T11854] hsr_slave_1: entered promiscuous mode [ 312.522365][T11854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.534964][T11854] Cannot create hsr debugfs directory [ 312.715032][T11925] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2345'. [ 313.167097][ T787] hid-generic 0005:4C45:1012.0001: unknown main item tag 0x1 [ 313.184792][ T787] hid-generic 0005:4C45:1012.0001: ignoring exceeding usage max [ 313.204236][ T787] hid-generic 0005:4C45:1012.0001: unknown main item tag 0x4 [ 313.224793][ T787] hid-generic 0005:4C45:1012.0001: unknown main item tag 0x5 [ 313.314344][ T787] hid-generic 0005:4C45:1012.0001: hidraw0: BLUETOOTH HID v0.83 Device [syz0] on aa:aa:aa:aa:aa:aa [ 313.495156][ T5800] Bluetooth: hci3: command tx timeout [ 313.777393][T11854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.825323][T11854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.872565][T11854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.877469][T11944] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 313.910394][T11854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.925065][T11948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2354'. [ 313.976158][T11946] syzkaller0: entered promiscuous mode [ 313.987691][T11946] syzkaller0: entered allmulticast mode [ 314.346078][T11854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.380604][T11854] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.413012][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.420259][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.450826][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.458072][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.796899][T11972] tipc: Enabled bearer , priority 0 [ 314.807312][T11972] syzkaller0: entered promiscuous mode [ 314.812849][T11972] syzkaller0: entered allmulticast mode [ 314.885867][T11972] tipc: Resetting bearer [ 314.915298][T11971] tipc: Resetting bearer [ 315.016658][T11976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2364'. [ 315.035695][T11971] tipc: Disabling bearer [ 315.120378][T11979] syzkaller0: entered promiscuous mode [ 315.135430][T11979] syzkaller0: entered allmulticast mode [ 315.238023][T11854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.431231][T11854] veth0_vlan: entered promiscuous mode [ 315.477647][T11854] veth1_vlan: entered promiscuous mode [ 315.575144][ T5800] Bluetooth: hci3: command tx timeout [ 315.646884][T11854] veth0_macvtap: entered promiscuous mode [ 315.699158][T11854] veth1_macvtap: entered promiscuous mode [ 315.775557][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.814704][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.842709][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.875035][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.895032][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.927752][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.956732][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.974493][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.027535][T11854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.080589][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.109414][T12001] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 316.115960][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.156706][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.184611][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.194504][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.254722][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.284744][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.315083][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.343663][T11854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.531130][T11854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.552315][T11854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.584884][T11854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.603904][T11854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.842969][T12027] netlink: 'syz.0.2381': attribute type 13 has an invalid length. [ 316.900410][T12029] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20000 [ 317.180573][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.188635][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.419148][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.425941][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.656673][ T5800] Bluetooth: hci3: command tx timeout [ 317.780052][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.841968][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.422900][T12027] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.431691][T12027] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.441209][T12027] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.450848][T12027] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.510621][T12031] syzkaller0: entered promiscuous mode [ 318.520829][T12031] syzkaller0: entered allmulticast mode [ 318.642242][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.672243][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.752359][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.776667][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.999557][T12047] syzkaller0: entered promiscuous mode [ 319.024763][T12047] syzkaller0: entered allmulticast mode [ 319.129657][T12049] tipc: Enabled bearer , priority 0 [ 319.214154][T12049] syzkaller0: entered promiscuous mode [ 319.235103][T12049] syzkaller0: entered allmulticast mode [ 319.280670][T12057] tipc: Resetting bearer [ 319.295732][T12048] tipc: Resetting bearer [ 319.365547][T12048] tipc: Disabling bearer [ 319.529321][T12063] syzkaller0: entered promiscuous mode [ 319.555311][T12063] syzkaller0: entered allmulticast mode [ 319.696589][T12065] syzkaller0: entered promiscuous mode [ 319.714859][T12065] syzkaller0: entered allmulticast mode [ 320.016258][T12077] syzkaller1: entered promiscuous mode [ 320.021826][T12077] syzkaller1: entered allmulticast mode [ 320.200437][T12088] syzkaller0: entered promiscuous mode [ 320.209545][T12088] syzkaller0: entered allmulticast mode [ 320.239098][T12084] tipc: Started in network mode [ 320.244844][T12084] tipc: Node identity 8e4c730c9ac9, cluster identity 4711 [ 320.252352][T12084] tipc: Enabled bearer , priority 0 [ 320.271537][T12089] syzkaller0: entered promiscuous mode [ 320.298896][T12089] syzkaller0: entered allmulticast mode [ 320.366586][T12084] tipc: Resetting bearer [ 320.400699][T12094] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 320.470248][T12083] tipc: Resetting bearer [ 320.546104][T12083] tipc: Disabling bearer [ 320.612186][T12101] syzkaller0: entered promiscuous mode [ 320.618313][T12101] syzkaller0: entered allmulticast mode [ 321.101649][T12113] syzkaller1: entered promiscuous mode [ 321.110461][T12113] syzkaller1: entered allmulticast mode [ 321.128490][T12114] bridge0: port 3(gretap0) entered blocking state [ 321.164976][T12114] bridge0: port 3(gretap0) entered disabled state [ 321.186204][T12114] gretap0: entered allmulticast mode [ 321.224783][T12114] gretap0: entered promiscuous mode [ 321.238624][T12114] bridge0: port 3(gretap0) entered blocking state [ 321.245438][T12114] bridge0: port 3(gretap0) entered forwarding state [ 321.716357][T12123] syzkaller0: entered promiscuous mode [ 321.732243][T12123] syzkaller0: entered allmulticast mode [ 321.816079][T12127] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 322.071020][T12132] syzkaller0: entered promiscuous mode [ 322.095867][T12132] syzkaller0: entered allmulticast mode [ 322.297468][T12140] syzkaller1: entered promiscuous mode [ 322.313829][T12140] syzkaller1: entered allmulticast mode [ 322.345299][T12143] Bluetooth: MGMT ver 1.22 [ 322.495718][T12148] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 322.542993][ T7687] IPVS: starting estimator thread 0... [ 322.654922][T12152] IPVS: using max 16 ests per chain, 38400 per kthread [ 322.818337][T12156] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 323.361726][T12173] syzkaller1: entered promiscuous mode [ 323.384797][T12173] syzkaller1: entered allmulticast mode [ 323.415307][T12175] Bluetooth: MGMT ver 1.22 [ 323.668588][T12179] tipc: Enabled bearer , priority 0 [ 323.690116][T12180] syzkaller0: entered promiscuous mode [ 323.704681][T12180] syzkaller0: entered allmulticast mode [ 323.726310][T12177] tipc: Resetting bearer [ 323.778177][T12176] tipc: Resetting bearer [ 323.870805][T12176] tipc: Disabling bearer [ 324.114487][T12191] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2448'. [ 324.468341][T12202] syzkaller1: entered promiscuous mode [ 324.483388][T12202] syzkaller1: entered allmulticast mode [ 324.701296][T12205] syzkaller0: entered promiscuous mode [ 324.714705][T12205] syzkaller0: entered allmulticast mode [ 325.177406][T12210] tipc: Enabled bearer , priority 0 [ 325.215044][T12210] syzkaller0: entered promiscuous mode [ 325.220622][T12210] syzkaller0: entered allmulticast mode [ 325.244862][ T5161] udevd[5161]: worker [5791] /devices/virtual/block/nbd0 timeout; kill it [ 325.255008][ T5161] udevd[5161]: seq 10984 '/devices/virtual/block/nbd0' killed [ 325.262672][ T5161] udevd[5161]: worker [5803] /devices/virtual/block/nbd1 timeout; kill it [ 325.314434][ T5161] udevd[5161]: seq 11040 '/devices/virtual/block/nbd1' killed [ 325.335635][T12210] tipc: Resetting bearer [ 325.386246][T12209] tipc: Resetting bearer [ 325.464349][T12209] tipc: Disabling bearer [ 325.501381][T12213] ip6_vti0 speed is unknown, defaulting to 1000 [ 325.768981][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.779309][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.788333][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.808700][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.825450][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.832957][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.014966][T12220] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2460'. [ 326.055361][T12213] wg1 speed is unknown, defaulting to 1000 [ 326.055590][T12215] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.507550][T12227] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.517587][T12215] wg1 speed is unknown, defaulting to 1000 [ 327.710046][T12215] chnl_net:caif_netlink_parms(): no params data found [ 327.895054][ T5800] Bluetooth: hci2: command tx timeout [ 327.943215][T12251] syzkaller1: entered promiscuous mode [ 327.964695][T12251] syzkaller1: entered allmulticast mode [ 328.880522][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.887886][T12254] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.899641][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.914918][T12215] bridge_slave_0: entered allmulticast mode [ 328.932913][T12215] bridge_slave_0: entered promiscuous mode [ 328.975210][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.998438][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.034958][T12215] bridge_slave_1: entered allmulticast mode [ 329.042474][T12215] bridge_slave_1: entered promiscuous mode [ 329.141997][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.203616][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.285149][T12254] wg1 speed is unknown, defaulting to 1000 [ 329.330152][T12215] team0: Port device team_slave_0 added [ 329.355721][T12215] team0: Port device team_slave_1 added [ 329.446540][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.453573][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.494928][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.525560][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.532602][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.562663][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.696214][T12215] hsr_slave_0: entered promiscuous mode [ 329.713857][T12215] hsr_slave_1: entered promiscuous mode [ 329.734143][T12215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.745608][T12215] Cannot create hsr debugfs directory [ 329.978071][ T5800] Bluetooth: hci2: command tx timeout [ 330.027516][T12281] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2479'. [ 330.368042][T12215] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.473405][T12285] syzkaller1: entered promiscuous mode [ 330.481147][T12285] syzkaller1: entered allmulticast mode [ 330.498985][T12215] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.586894][T12215] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.698300][T12215] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.061760][T12295] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 331.079248][T12295] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 331.147542][T12215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.170480][T12215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.200795][T12215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.220731][T12215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.374155][T12306] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 331.547685][T12215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.607621][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.634593][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.641837][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.648117][T12310] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2487'. [ 331.707844][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.715114][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.890894][T12312] syzkaller1: entered promiscuous mode [ 331.923420][T12312] syzkaller1: entered allmulticast mode [ 332.055766][ T5800] Bluetooth: hci2: command tx timeout [ 333.102551][T12328] syzkaller0: entered promiscuous mode [ 333.110532][T12328] syzkaller0: entered allmulticast mode [ 333.122495][T12328] 0: reclassify loop, rule prio 0, protocol 700 [ 333.212049][T12333] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 333.245742][T12333] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 333.332373][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.404176][T12336] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 333.524056][T12215] veth0_vlan: entered promiscuous mode [ 333.557977][T12215] veth1_vlan: entered promiscuous mode [ 333.633207][T12215] veth0_macvtap: entered promiscuous mode [ 333.660981][T12215] veth1_macvtap: entered promiscuous mode [ 333.738507][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.750619][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.760874][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.779985][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.795605][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.806360][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.816967][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.827769][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.840530][T12215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.867611][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.889991][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.914080][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.940577][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.983966][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.008035][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.018319][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.029287][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.042035][T12215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.104411][T12215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.135101][ T5800] Bluetooth: hci2: command tx timeout [ 334.142969][T12215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.162254][T12215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.199078][T12215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.290588][T12350] syzkaller1: entered promiscuous mode [ 334.297549][T12350] syzkaller1: entered allmulticast mode [ 334.549730][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.575219][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.661242][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.699330][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.861475][T12365] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2505'. [ 335.131985][T12367] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.635245][T12370] tipc: Enabling of bearer rejected, failed to enable media [ 335.743329][T12374] netlink: 'syz.2.2507': attribute type 1 has an invalid length. [ 335.777723][T12374] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 335.877701][T12378] syzkaller1: entered promiscuous mode [ 335.883253][T12378] syzkaller1: entered allmulticast mode [ 335.951330][T12381] tipc: Enabled bearer , priority 0 [ 335.971842][T12376] syzkaller0: entered promiscuous mode [ 335.978638][T12376] syzkaller0: entered allmulticast mode [ 336.005615][T12376] tipc: Resetting bearer [ 336.015077][T12375] tipc: Resetting bearer [ 336.071956][T12375] tipc: Disabling bearer [ 336.214801][T12386] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2513'. [ 336.245989][T12386] nbd: socks must be embedded in a SOCK_ITEM attr [ 337.199039][T12399] syzkaller0: entered promiscuous mode [ 337.245045][T12399] syzkaller0: entered allmulticast mode [ 337.440977][T12412] syzkaller1: entered promiscuous mode [ 337.446707][T12412] syzkaller1: entered allmulticast mode [ 337.632709][T12417] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 337.649646][T12417] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 337.804531][T12420] tipc: Started in network mode [ 337.812697][T12420] tipc: Node identity b6b37ff1db1f, cluster identity 4711 [ 337.821708][T12420] tipc: Enabled bearer , priority 0 [ 337.835736][T12420] syzkaller0: entered promiscuous mode [ 337.841458][T12420] syzkaller0: entered allmulticast mode [ 337.892718][T12420] tipc: Resetting bearer [ 337.922837][T12418] tipc: Resetting bearer [ 338.000613][T12418] tipc: Disabling bearer [ 338.508445][T12439] syzkaller0: entered promiscuous mode [ 338.524261][T12439] syzkaller0: entered allmulticast mode [ 338.776736][T12450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2533'. [ 338.797724][T12450] nbd: socks must be embedded in a SOCK_ITEM attr [ 338.877233][T12449] syzkaller1: entered promiscuous mode [ 338.882830][T12449] syzkaller1: entered allmulticast mode [ 339.121774][T12458] tipc: Enabled bearer , priority 0 [ 339.156573][T12458] syzkaller0: entered promiscuous mode [ 339.162176][T12458] syzkaller0: entered allmulticast mode [ 339.260462][T12458] tipc: Resetting bearer [ 339.326113][T12456] tipc: Resetting bearer [ 339.389694][T12456] tipc: Disabling bearer [ 339.821262][T12473] syzkaller0: entered promiscuous mode [ 339.834915][T12476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2545'. [ 339.844838][T12473] syzkaller0: entered allmulticast mode [ 339.857270][T12476] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.100196][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.110041][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.124993][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.134423][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.156733][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.164336][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.264628][T12482] syzkaller1: entered promiscuous mode [ 340.270375][T12482] syzkaller1: entered allmulticast mode [ 340.383621][T12479] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.455972][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 240 seconds [ 340.468416][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 240 seconds [ 340.480628][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 240 seconds [ 340.491792][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 240 seconds [ 340.770506][T12492] tipc: Enabled bearer , priority 0 [ 340.817542][T12492] syzkaller0: entered promiscuous mode [ 340.874636][T12492] syzkaller0: entered allmulticast mode [ 340.909888][T12498] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 340.934238][T12501] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2554'. [ 340.954438][T12501] nbd: socks must be embedded in a SOCK_ITEM attr [ 341.478099][T12491] tipc: Resetting bearer [ 341.478204][T12489] ip6_vti0 speed is unknown, defaulting to 1000 [ 341.527670][T12491] tipc: Disabling bearer [ 341.538286][T12479] wg1 speed is unknown, defaulting to 1000 [ 341.791891][T12489] wg1 speed is unknown, defaulting to 1000 [ 341.946806][T12515] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 342.071908][T12479] chnl_net:caif_netlink_parms(): no params data found [ 342.215006][ T5800] Bluetooth: hci1: command tx timeout [ 342.318572][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.338873][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.354851][T12479] bridge_slave_0: entered allmulticast mode [ 342.366665][T12479] bridge_slave_0: entered promiscuous mode [ 342.380157][ T96] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 240 seconds [ 342.400425][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.413815][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.431543][T12479] bridge_slave_1: entered allmulticast mode [ 342.454986][T12479] bridge_slave_1: entered promiscuous mode [ 342.762372][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.822943][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.947183][T12479] team0: Port device team_slave_0 added [ 342.968174][T12479] team0: Port device team_slave_1 added [ 343.049307][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.064640][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.114647][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.146544][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.153958][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.181015][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.193223][T12525] syzkaller1: entered promiscuous mode [ 343.206216][T12525] syzkaller1: entered allmulticast mode [ 343.381632][T12479] hsr_slave_0: entered promiscuous mode [ 343.415607][T12479] hsr_slave_1: entered promiscuous mode [ 343.427078][T12479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.445045][T12479] Cannot create hsr debugfs directory [ 343.657322][T12530] netlink: 'syz.3.2561': attribute type 4 has an invalid length. [ 343.841829][T12534] tipc: Enabled bearer , priority 0 [ 343.879756][T12534] syzkaller0: entered promiscuous mode [ 343.889312][T12534] syzkaller0: entered allmulticast mode [ 343.958939][T12536] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 343.990888][T12534] tipc: Resetting bearer [ 344.056916][T12533] tipc: Resetting bearer [ 344.135594][T12533] tipc: Disabling bearer [ 344.265272][T12540] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 344.296835][ T5800] Bluetooth: hci1: command tx timeout [ 344.426161][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'. [ 344.465201][T12542] netlink: set zone limit has 8 unknown bytes [ 344.482009][T12479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.512967][T12479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.528621][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2566'. [ 344.548446][T12479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.569520][T12479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.676499][T12544] syzkaller1: entered promiscuous mode [ 344.682065][T12544] syzkaller1: entered allmulticast mode [ 345.101930][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.196196][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.309988][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.317285][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.368549][T12557] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.376416][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.383642][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.046389][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.074997][T12557] wg1 speed is unknown, defaulting to 1000 [ 346.136606][T12573] tipc: Enabled bearer , priority 0 [ 346.160668][T12573] syzkaller0: entered promiscuous mode [ 346.167664][T12573] syzkaller0: entered allmulticast mode [ 346.213816][T12573] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 346.282617][T12573] tipc: Resetting bearer [ 346.358132][T12572] tipc: Resetting bearer [ 346.375465][ T5800] Bluetooth: hci1: command tx timeout [ 346.422485][T12572] tipc: Disabling bearer [ 346.440626][T12479] veth0_vlan: entered promiscuous mode [ 346.473749][T12479] veth1_vlan: entered promiscuous mode [ 346.577352][T12479] veth0_macvtap: entered promiscuous mode [ 346.616889][T12479] veth1_macvtap: entered promiscuous mode [ 346.679091][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.694053][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.706373][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.717521][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.728013][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.739114][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.750571][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.762146][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.772627][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.783970][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.798665][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.874419][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.898127][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.911387][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.922380][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.932582][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.945615][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.957633][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.968741][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.978885][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.989872][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.002816][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.087704][T12479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.116123][T12479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.137173][T12479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.156213][T12479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.503003][T12587] netlink: 'syz.1.2578': attribute type 4 has an invalid length. [ 347.511674][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.530379][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.631003][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.653602][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.827128][T12596] syzkaller0: entered promiscuous mode [ 347.832748][T12596] syzkaller0: entered allmulticast mode [ 348.103696][T12606] tipc: Enabled bearer , priority 0 [ 348.111812][T12606] syzkaller0: entered promiscuous mode [ 348.118105][T12606] syzkaller0: entered allmulticast mode [ 348.153963][T12606] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 348.205715][T12606] tipc: Resetting bearer [ 348.247517][T12605] tipc: Resetting bearer [ 348.323184][T12605] tipc: Disabling bearer [ 348.454958][ T5800] Bluetooth: hci1: command tx timeout [ 349.291446][T12616] netlink: 'syz.2.2588': attribute type 4 has an invalid length. [ 349.393537][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 349.403923][T12618] netlink: set zone limit has 8 unknown bytes [ 349.413983][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 349.925125][T12625] IPVS: Scheduler module ip_vs_sip not found [ 350.014839][T12632] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 350.141449][T12634] syzkaller0: entered promiscuous mode [ 350.156755][T12634] syzkaller0: entered allmulticast mode [ 350.525245][T12642] netlink: 'syz.3.2597': attribute type 4 has an invalid length. [ 350.890906][T12645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.259354][T12645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.395414][T12658] batadv1: entered promiscuous mode [ 351.562189][T12645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.630835][T12662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2600'. [ 351.846339][T12645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.903399][T12681] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 351.931418][T12663] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.258949][T12645] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.306602][T12645] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.341941][T12645] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.371764][T12663] wg1 speed is unknown, defaulting to 1000 [ 352.387726][T12645] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.458589][T12686] tipc: Enabled bearer , priority 0 [ 352.487885][T12686] syzkaller0: entered promiscuous mode [ 352.493430][T12686] syzkaller0: entered allmulticast mode [ 352.520280][T12686] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 352.555558][T12686] tipc: Resetting bearer [ 352.574370][T12685] tipc: Resetting bearer [ 352.605718][T12685] tipc: Disabling bearer [ 352.640404][T12690] tipc: Enabling of bearer rejected, failed to enable media [ 352.667160][T12690] syzkaller0: entered promiscuous mode [ 352.672751][T12690] syzkaller0: entered allmulticast mode [ 353.075107][T12694] syzkaller1: entered promiscuous mode [ 353.080670][T12694] syzkaller1: entered allmulticast mode [ 353.348130][T12704] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.561876][T12709] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 354.202768][T12704] wg1 speed is unknown, defaulting to 1000 [ 354.762306][T12732] syzkaller0: entered promiscuous mode [ 354.788508][T12732] syzkaller0: entered allmulticast mode [ 354.801760][T12735] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2622'. [ 354.831789][T12735] nbd: couldn't find a device at index 262144 [ 355.176372][T12740] syzkaller1: entered promiscuous mode [ 355.183540][T12740] syzkaller1: entered allmulticast mode [ 355.244197][T12748] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.398741][T12755] tipc: Enabled bearer , priority 0 [ 355.408324][T12755] syzkaller0: entered promiscuous mode [ 355.413862][T12755] syzkaller0: entered allmulticast mode [ 355.444245][T12755] tipc: Resetting bearer [ 355.456966][T12754] tipc: Resetting bearer [ 355.495017][T12754] tipc: Disabling bearer [ 355.715415][T12760] netlink: 'syz.2.2630': attribute type 6 has an invalid length. [ 355.883376][T12758] ip6_vti0 speed is unknown, defaulting to 1000 [ 355.910656][T12764] tipc: Enabling of bearer rejected, failed to enable media [ 355.955008][T12764] syzkaller0: entered promiscuous mode [ 355.975172][T12764] syzkaller0: entered allmulticast mode [ 356.549506][T12758] wg1 speed is unknown, defaulting to 1000 [ 357.317163][T12813] tipc: Enabling of bearer rejected, failed to enable media [ 357.362259][T12813] syzkaller0: entered promiscuous mode [ 357.384776][T12813] syzkaller0: entered allmulticast mode [ 358.462307][T12844] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 358.886549][T12863] tipc: Enabled bearer , priority 0 [ 358.903505][T12863] syzkaller0: entered promiscuous mode [ 358.925698][T12863] syzkaller0: entered allmulticast mode [ 359.768001][T12864] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.785830][T12863] tipc: Resetting bearer [ 359.853558][T12870] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2661'. [ 359.855159][T12859] tipc: Resetting bearer [ 359.991552][T12859] tipc: Disabling bearer [ 360.077544][ T5854] tipc: Node number set to 2134082910 [ 360.219577][T12864] wg1 speed is unknown, defaulting to 1000 [ 361.015862][T12896] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 361.035060][T12897] ip6gre1: entered promiscuous mode [ 361.042133][T12897] ip6gre1: entered allmulticast mode [ 361.072422][T12897] team0: Device ip6gre1 is of different type [ 361.319195][T12896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 361.924638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 361.975237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 362.064801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 362.089394][T12916] tipc: Enabled bearer , priority 0 [ 362.104691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 362.127327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 362.140016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 362.158725][T12918] syzkaller0: entered promiscuous mode [ 362.227461][T12918] syzkaller0: entered allmulticast mode [ 362.273873][T12916] tipc: Resetting bearer [ 362.293490][T12915] tipc: Resetting bearer [ 362.338675][T12915] tipc: Disabling bearer [ 362.480442][T12924] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.901050][T12924] wg1 speed is unknown, defaulting to 1000 [ 363.305473][T12935] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2681'. [ 363.857570][T12947] tipc: Enabled bearer , priority 0 [ 363.877385][T12947] syzkaller0: entered promiscuous mode [ 363.884889][T12947] syzkaller0: entered allmulticast mode [ 363.995514][T12947] tipc: Resetting bearer [ 364.095159][T12944] tipc: Resetting bearer [ 364.191281][T12944] tipc: Disabling bearer [ 364.318708][T12953] kvm: user requested TSC rate below hardware speed [ 364.436413][T12956] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.648107][T12962] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2692'. [ 364.963747][T12956] wg1 speed is unknown, defaulting to 1000 [ 367.015123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 367.075071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 367.114840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 367.123171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.506125][T12992] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2702'. [ 369.611662][T12995] hub 8-0:1.0: USB hub found [ 369.726550][T12995] hub 8-0:1.0: 1 port detected [ 370.544721][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 270 seconds [ 370.564663][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 270 seconds [ 370.576004][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 270 seconds [ 370.587530][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 270 seconds [ 370.836747][T13004] binder_alloc: 13003: binder_alloc_buf size 216172782113783808 failed, no address space [ 370.865999][T13004] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 370.897614][T13006] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.050686][T13011] tipc: Enabled bearer , priority 0 [ 371.079453][T13011] syzkaller0: entered promiscuous mode [ 371.096562][T13011] syzkaller0: entered allmulticast mode [ 371.351919][T13014] tipc: Resetting bearer [ 371.389102][T13010] tipc: Resetting bearer [ 371.476355][T13010] tipc: Disabling bearer [ 371.490855][T13006] wg1 speed is unknown, defaulting to 1000 [ 371.531141][T13018] tipc: Enabling of bearer rejected, failed to enable media [ 371.572109][T13018] syzkaller0: entered promiscuous mode [ 371.584645][T13018] syzkaller0: entered allmulticast mode [ 372.490244][T12980] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 270 seconds [ 374.815930][T13046] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.007071][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.011899][T13064] tipc: Enabling of bearer rejected, failed to enable media [ 377.022822][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.032983][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.037514][T13067] syzkaller0: entered promiscuous mode [ 377.044608][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.053929][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.059436][T13067] syzkaller0: entered allmulticast mode [ 377.061895][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.108332][T13058] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.500801][T13072] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.521770][T13058] wg1 speed is unknown, defaulting to 1000 [ 377.759663][T13072] wg1 speed is unknown, defaulting to 1000 [ 378.010409][T13088] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 379.095099][ T5800] Bluetooth: hci4: command tx timeout [ 379.119961][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.174991][ T5800] Bluetooth: hci4: command tx timeout [ 381.367326][T13072] chnl_net:caif_netlink_parms(): no params data found [ 382.175644][T13108] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.194206][T13117] syzkaller0: entered promiscuous mode [ 382.210484][T13117] syzkaller0: entered allmulticast mode [ 382.411996][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.440776][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.473109][T13072] bridge_slave_0: entered allmulticast mode [ 382.495339][T13072] bridge_slave_0: entered promiscuous mode [ 382.524444][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.554972][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.562312][T13072] bridge_slave_1: entered allmulticast mode [ 382.580197][T13072] bridge_slave_1: entered promiscuous mode [ 382.686187][T13108] wg1 speed is unknown, defaulting to 1000 [ 382.711160][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.751300][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.878435][T13072] team0: Port device team_slave_0 added [ 382.885613][T13134] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2739'. [ 382.900683][T13072] team0: Port device team_slave_1 added [ 382.968996][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.976199][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.002216][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.008710][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.039143][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.046394][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.072307][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.082515][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.197228][T13072] hsr_slave_0: entered promiscuous mode [ 383.229333][T13072] hsr_slave_1: entered promiscuous mode [ 383.247204][T13072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.257312][ T5800] Bluetooth: hci4: command tx timeout [ 383.294289][T13072] Cannot create hsr debugfs directory [ 383.665574][T13136] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 383.836255][T13072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.858624][T13072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.882841][T13072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.900172][T13072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.010678][T13072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.038853][T13072] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.057165][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.064342][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.086330][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.093517][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.378098][T13072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.693539][T13072] veth0_vlan: entered promiscuous mode [ 384.712539][T13072] veth1_vlan: entered promiscuous mode [ 384.755694][T13072] veth0_macvtap: entered promiscuous mode [ 384.769239][T13072] veth1_macvtap: entered promiscuous mode [ 384.792055][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.802952][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.814246][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.825093][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.835133][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.846919][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.859146][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.869731][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.880086][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.890885][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.902361][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.913577][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.926289][T13072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.948231][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.959248][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.969908][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.980745][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.991068][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.002849][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.013258][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.024966][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.035546][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.046448][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.056623][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.067976][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.080037][T13072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.100247][T13072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.109301][T13072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.119326][T13072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.128934][T13072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.246401][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.254287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.314142][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.322421][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.335309][ T5800] Bluetooth: hci4: command tx timeout [ 385.562250][T13162] tipc: Started in network mode [ 385.570585][T13162] tipc: Node identity ceff2d29ede6, cluster identity 4711 [ 385.588619][T13162] tipc: Enabled bearer , priority 0 [ 385.599061][T13162] syzkaller0: entered promiscuous mode [ 385.604990][T13162] syzkaller0: entered allmulticast mode [ 385.622681][T13159] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.951655][T13167] tipc: Resetting bearer [ 385.966477][T13159] wg1 speed is unknown, defaulting to 1000 [ 385.993199][T13158] tipc: Resetting bearer [ 386.069975][T13158] tipc: Disabling bearer [ 387.451276][T13180] syzkaller0: entered promiscuous mode [ 387.613658][T13180] syzkaller0: entered allmulticast mode [ 391.023268][T13210] tipc: Enabled bearer , priority 0 [ 392.557360][T13201] sched: RT throttling activated [ 392.965545][T13204] syzkaller0: entered promiscuous mode [ 392.971104][T13204] syzkaller0: entered allmulticast mode [ 393.147903][T13203] tipc: Resetting bearer [ 393.231647][T13203] tipc: Disabling bearer [ 393.287834][T13221] syzkaller0: entered promiscuous mode [ 393.300940][T13221] syzkaller0: entered allmulticast mode [ 393.309131][T13217] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.218122][T13224] ======================================================= [ 394.218122][T13224] WARNING: The mand mount option has been deprecated and [ 394.218122][T13224] and is ignored by this kernel. Remove the mand [ 394.218122][T13224] option from the mount to silence this warning. [ 394.218122][T13224] ======================================================= [ 394.398714][T13217] wg1 speed is unknown, defaulting to 1000 [ 394.632198][T13237] syz.4.2764[13237]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 395.004473][T13235] syzkaller0: entered promiscuous mode [ 395.111703][T13235] syzkaller0: entered allmulticast mode [ 396.687677][T13250] tipc: Started in network mode [ 396.692631][T13250] tipc: Node identity 324826831e39, cluster identity 4711 [ 396.704873][T13250] tipc: Enabled bearer , priority 0 [ 396.815418][T13250] syzkaller0: entered promiscuous mode [ 396.824423][T13250] syzkaller0: entered allmulticast mode [ 396.912458][T13250] tipc: Resetting bearer [ 396.936349][T13249] tipc: Resetting bearer [ 396.986008][T13249] tipc: Disabling bearer [ 397.058679][T13258] syzkaller0: entered promiscuous mode [ 397.064227][T13258] syzkaller0: entered allmulticast mode [ 397.571400][T13273] syzkaller0: entered promiscuous mode [ 397.604798][T13273] syzkaller0: entered allmulticast mode [ 397.788086][T13277] syzkaller0: entered promiscuous mode [ 397.793786][T13277] syzkaller0: entered allmulticast mode [ 397.948131][T13279] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 398.192245][T13287] tipc: Enabled bearer , priority 0 [ 398.236287][T13287] syzkaller0: entered promiscuous mode [ 398.241848][T13287] syzkaller0: entered allmulticast mode [ 398.351631][T13290] bond1: entered promiscuous mode [ 398.385307][T13287] tipc: Resetting bearer [ 398.394233][T13286] tipc: Resetting bearer [ 398.435892][T13286] tipc: Disabling bearer [ 398.479996][T13290] bond_slave_0: entered promiscuous mode [ 398.486363][T13290] bond_slave_1: entered promiscuous mode [ 398.493380][T13290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 398.504011][T13290] bond1: (slave macvlan2): making interface the new active one [ 398.514119][T13290] macvlan2: entered promiscuous mode [ 398.524233][T13290] bond0: entered promiscuous mode [ 398.555598][T13290] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 398.572190][T13292] bridge0: port 3(syz_tun) entered blocking state [ 398.600680][T13292] bridge0: port 3(syz_tun) entered disabled state [ 398.642219][T13292] syz_tun: entered allmulticast mode [ 398.655027][T13303] (null): rxe_set_mtu: Set mtu to 1024 [ 398.660614][T13292] syz_tun: entered promiscuous mode [ 398.675462][T13292] bridge0: port 3(syz_tun) entered blocking state [ 398.682107][T13292] bridge0: port 3(syz_tun) entered forwarding state [ 398.728675][T13298] netlink: 'syz.0.2782': attribute type 10 has an invalid length. [ 398.767247][T13298] bridge0: port 3(syz_tun) entered disabled state [ 398.774033][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.782232][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.830482][T13298] bridge0: port 3(syz_tun) entered blocking state [ 398.837219][T13298] bridge0: port 3(syz_tun) entered forwarding state [ 398.844186][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.851453][T13298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.859049][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.866336][T13298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.923000][T13298] bridge0: entered promiscuous mode [ 398.936341][T13298] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 399.007618][T13299] syzkaller0: entered promiscuous mode [ 399.013160][T13299] syzkaller0: entered allmulticast mode [ 399.203356][T13303] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 399.253161][T13303] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:4c1e:12ff:fe09:900f error=-28 [ 399.757568][T13314] syzkaller0: entered promiscuous mode [ 399.763156][T13314] syzkaller0: entered allmulticast mode [ 399.909084][T13319] syzkaller0: entered promiscuous mode [ 399.924657][T13319] syzkaller0: entered allmulticast mode [ 400.057424][T13321] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.154176][T13324] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 400.417143][T13321] wg1 speed is unknown, defaulting to 1000 [ 400.434690][T13303] infiniband syz1: set active [ 400.439817][T13303] infiniband syz1: added syz_tun [ 400.454098][T13303] syz1: rxe_create_cq: returned err = -12 [ 400.469792][T13303] infiniband syz1: Couldn't create ib_mad CQ [ 400.483784][T13303] infiniband syz1: Couldn't open port 1 [ 400.572234][T13303] RDS/IB: syz1: added [ 400.582464][T13303] smc: adding ib device syz1 with port count 1 [ 400.589301][T13303] smc: ib device syz1 port 1 has pnetid [ 400.620222][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 300 seconds [ 400.631233][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 300 seconds [ 400.642890][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 300 seconds [ 400.664658][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 300 seconds [ 401.280748][T13345] syzkaller0: entered promiscuous mode [ 401.367654][T13345] syzkaller0: entered allmulticast mode [ 402.027576][T13353] syzkaller0: entered promiscuous mode [ 402.043497][T13353] syzkaller0: entered allmulticast mode [ 402.217263][T13356] syzkaller0: entered promiscuous mode [ 402.222823][T13356] syzkaller0: entered allmulticast mode [ 402.545101][ T96] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 300 seconds [ 403.039978][T13379] syzkaller0: entered promiscuous mode [ 403.045862][T13379] syzkaller0: entered allmulticast mode [ 403.749197][T13391] syzkaller0: entered promiscuous mode [ 403.762336][T13391] syzkaller0: entered allmulticast mode [ 403.966594][T13393] syzkaller0: entered promiscuous mode [ 403.972142][T13393] syzkaller0: entered allmulticast mode [ 404.459825][T13404] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 404.657546][T13408] syzkaller0: entered promiscuous mode [ 404.663087][T13408] syzkaller0: entered allmulticast mode [ 404.756456][T13409] tipc: Enabled bearer , priority 0 [ 404.765837][T13410] syzkaller0: entered promiscuous mode [ 404.771367][T13410] syzkaller0: entered allmulticast mode [ 404.828524][T13409] tipc: Resetting bearer [ 404.855593][T13407] tipc: Resetting bearer [ 404.906273][T13407] tipc: Disabling bearer [ 405.616799][T13369] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.639310][T13426] syzkaller0: entered promiscuous mode [ 405.655066][T13426] syzkaller0: entered allmulticast mode [ 407.032069][T13439] syzkaller0: entered promiscuous mode [ 407.037960][T13439] syzkaller0: entered allmulticast mode [ 407.223812][T13444] tipc: Enabled bearer , priority 0 [ 407.231873][T13444] syzkaller0: entered promiscuous mode [ 407.237988][T13444] syzkaller0: entered allmulticast mode [ 407.415693][T13444] tipc: Resetting bearer [ 407.441916][T13369] wg1 speed is unknown, defaulting to 1000 [ 407.465912][T13443] tipc: Resetting bearer [ 407.536137][T13443] tipc: Disabling bearer [ 407.823171][T13461] Bluetooth: MGMT ver 1.22 [ 411.178721][T13461] input: syz1 as /devices/virtual/input/input5 [ 412.333552][T13481] syzkaller0: entered promiscuous mode [ 412.364727][T13481] syzkaller0: entered allmulticast mode [ 412.837803][T13477] random: crng reseeded on system resumption [ 413.087715][T13477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2836'. [ 413.368595][T13477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2836'. [ 413.692036][T13501] loop2: detected capacity change from 0 to 7 [ 413.721677][ T6219] Dev loop2: unable to read RDB block 7 [ 413.737742][ T6219] loop2: unable to read partition table [ 413.758488][ T6219] loop2: partition table beyond EOD, truncated [ 413.805675][T13501] Dev loop2: unable to read RDB block 7 [ 413.811342][T13501] loop2: unable to read partition table [ 413.835059][T13501] loop2: partition table beyond EOD, truncated [ 413.844424][T13501] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.131025][T13507] random: crng reseeded on system resumption [ 414.204746][ T28] audit: type=1326 audit(1764119261.593:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.263516][ T28] audit: type=1326 audit(1764119261.613:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.308329][ T28] audit: type=1326 audit(1764119261.633:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.420655][ T28] audit: type=1326 audit(1764119261.633:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.474928][ T28] audit: type=1326 audit(1764119261.633:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.474986][ T28] audit: type=1326 audit(1764119261.633:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.475032][ T28] audit: type=1326 audit(1764119261.633:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.475082][ T28] audit: type=1326 audit(1764119261.633:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.475126][ T28] audit: type=1326 audit(1764119261.633:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 414.475172][ T28] audit: type=1326 audit(1764119261.633:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 415.235315][T13529] syzkaller0: entered promiscuous mode [ 415.251245][T13529] syzkaller0: entered allmulticast mode [ 415.269122][T13526] tipc: Enabled bearer , priority 0 [ 415.315804][T13530] syzkaller0: entered promiscuous mode [ 415.321362][T13530] syzkaller0: entered allmulticast mode [ 415.555192][T13531] tipc: Resetting bearer [ 415.591628][T13525] tipc: Resetting bearer [ 415.686170][T13525] tipc: Disabling bearer [ 415.722030][T13533] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.563700][T13546] syzkaller0: entered promiscuous mode [ 416.569696][T13546] syzkaller0: entered allmulticast mode [ 416.686703][T13533] wg1 speed is unknown, defaulting to 1000 [ 416.774880][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 416.849905][T13552] syzkaller0: entered promiscuous mode [ 416.856531][T13552] syzkaller0: entered allmulticast mode [ 417.253095][T13559] syzkaller0: entered promiscuous mode [ 417.260993][T13559] syzkaller0: entered allmulticast mode [ 418.111254][T13563] bridge1: entered promiscuous mode [ 418.415449][T13570] tipc: Enabled bearer , priority 0 [ 418.424377][T13570] syzkaller0: entered promiscuous mode [ 418.430593][T13570] syzkaller0: entered allmulticast mode [ 418.471058][T13569] tipc: Resetting bearer [ 418.513542][T13569] tipc: Disabling bearer [ 418.669175][T12034] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 418.758338][T13576] syzkaller0: entered promiscuous mode [ 418.764012][T13576] syzkaller0: entered allmulticast mode [ 418.895002][T12034] usb 4-1: Using ep0 maxpacket: 8 [ 418.922521][T12034] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 418.956241][T12034] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.975514][T12034] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.014643][T12034] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.046048][T12034] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.104861][T12034] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.114068][T12034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.419169][T13584] syzkaller0: entered promiscuous mode [ 419.424987][T13584] syzkaller0: entered allmulticast mode [ 419.799635][T13593] syzkaller0: entered promiscuous mode [ 419.806485][T13593] syzkaller0: entered allmulticast mode [ 420.065768][T13597] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 420.122753][T13599] tipc: Enabled bearer , priority 0 [ 420.131557][T13599] syzkaller0: entered promiscuous mode [ 420.138329][T13599] syzkaller0: entered allmulticast mode [ 420.177064][T13598] tipc: Resetting bearer [ 420.235150][T13598] tipc: Disabling bearer [ 420.272673][ T5854] usb 4-1: USB disconnect, device number 2 [ 420.437792][T13603] tipc: Enabled bearer , priority 0 [ 420.476005][T13603] syzkaller0: entered promiscuous mode [ 420.511235][T13603] syzkaller0: entered allmulticast mode [ 421.270493][T13601] tipc: Resetting bearer [ 421.446927][T13601] tipc: Disabling bearer [ 421.485504][ T7687] tipc: Node number set to 745612931 [ 421.495660][T13609] syzkaller0: entered promiscuous mode [ 421.501815][T13609] syzkaller0: entered allmulticast mode [ 421.782027][T13618] syzkaller0: entered promiscuous mode [ 421.813301][T13618] syzkaller0: entered allmulticast mode [ 422.200476][T13632] syzkaller0: entered promiscuous mode [ 422.206511][T13632] syzkaller0: entered allmulticast mode [ 422.585862][T13636] syzkaller0: entered promiscuous mode [ 422.595157][T13636] syzkaller0: entered allmulticast mode [ 423.016981][T13644] : renamed from bridge_slave_0 (while UP) [ 423.322911][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 423.428520][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 423.768971][T12034] libceph: connect (1)[c::]:6789 error -101 [ 423.783330][ T96] blk_print_req_error: 116 callbacks suppressed [ 423.783385][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.802330][ T96] buffer_io_error: 138 callbacks suppressed [ 423.802384][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.841159][ T96] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.850490][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 423.864989][T12034] libceph: mon0 (1)[c::]:6789 connect error [ 423.881182][ T96] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 423.893064][ T96] Buffer I/O error on dev nbd2, logical block 2, async page read [ 423.904637][ T96] Buffer I/O error on dev nbd2, logical block 3, async page read [ 423.921669][T13646] ceph: No mds server is up or the cluster is laggy [ 423.937464][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 423.954916][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 423.962806][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 423.971414][ T96] Buffer I/O error on dev nbd2, logical block 2, async page read [ 423.981016][ T96] Buffer I/O error on dev nbd2, logical block 3, async page read [ 423.991245][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 424.000778][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 424.014016][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 424.167344][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 424.177693][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 424.196641][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 424.206111][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.216437][ T96] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 424.226530][T13650] ldm_validate_partition_table(): Disk read failed. [ 424.236579][T13650] Dev nbd2: unable to read RDB block 0 [ 424.244906][T13650] nbd2: unable to read partition table [ 424.605528][T13655] syzkaller0: entered promiscuous mode [ 424.611074][T13655] syzkaller0: entered allmulticast mode [ 425.053504][T13662] syzkaller0: entered promiscuous mode [ 425.064591][T13662] syzkaller0: entered allmulticast mode [ 426.640044][T13670] 9pnet_virtio: no channels available for device syz [ 427.575096][T13674] tipc: Enabled bearer , priority 0 [ 427.611395][T13674] tipc: Resetting bearer [ 427.698511][T13678] comedi comedi3: aio_iiro_16: I/O port conflict (0xff,8) [ 427.746038][T13673] tipc: Disabling bearer [ 428.021976][T13684] syzkaller0: entered promiscuous mode [ 428.027844][T13684] syzkaller0: entered allmulticast mode [ 428.395697][T13689] syzkaller0: entered promiscuous mode [ 428.404633][T13689] syzkaller0: entered allmulticast mode [ 428.599373][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.607286][T13692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.633139][T13692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.641139][T13692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.443342][ T28] audit: type=1326 audit(1764119277.643:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 430.508107][ T28] audit: type=1326 audit(1764119277.673:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 430.725357][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 330 seconds [ 430.736339][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 330 seconds [ 430.747928][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 330 seconds [ 430.759226][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 330 seconds [ 431.314927][ T7691] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 431.506119][ T7691] usb 1-1: Using ep0 maxpacket: 8 [ 431.553048][ T7691] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 431.576949][ T7691] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.603439][ T7691] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.613745][ T7691] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.624104][ T7691] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.643937][ T7691] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.644386][T13709] tipc: Enabled bearer , priority 0 [ 431.653320][ T7691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.777075][T13709] tipc: Resetting bearer [ 431.836107][T13708] tipc: Disabling bearer [ 431.900894][ T7691] usb 1-1: GET_CAPABILITIES returned 0 [ 431.944713][ T7691] usbtmc 1-1:16.0: can't read capabilities [ 432.027619][T13712] syzkaller0: entered promiscuous mode [ 432.033370][T13712] syzkaller0: entered allmulticast mode [ 432.107087][ T7689] usb 1-1: USB disconnect, device number 2 [ 432.269213][T13619] Set syz1 is full, maxelem 65536 reached [ 432.618901][ T96] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 330 seconds [ 432.683394][T13722] syzkaller0: entered promiscuous mode [ 432.689895][T13722] syzkaller0: entered allmulticast mode [ 432.786328][T13727] random: crng reseeded on system resumption [ 432.844782][ T28] audit: type=1326 audit(1764119280.243:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 432.908112][ T28] audit: type=1326 audit(1764119280.243:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 432.962516][ T28] audit: type=1326 audit(1764119280.263:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 433.036250][ T28] audit: type=1326 audit(1764119280.263:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 433.084121][ T28] audit: type=1326 audit(1764119280.263:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 433.125351][ T28] audit: type=1326 audit(1764119280.263:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 433.152625][ T28] audit: type=1326 audit(1764119280.263:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 433.178861][ T28] audit: type=1326 audit(1764119280.263:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13726 comm="syz.0.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 433.541363][T13735] syzkaller0: entered promiscuous mode [ 433.549146][T13735] syzkaller0: entered allmulticast mode [ 434.412394][T13751] capability: warning: `syz.3.2923' uses deprecated v2 capabilities in a way that may be insecure [ 436.563958][T13768] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.055188][T13768] wg1 speed is unknown, defaulting to 1000 [ 437.228693][T13778] syzkaller0: entered promiscuous mode [ 437.264813][T13778] syzkaller0: entered allmulticast mode [ 437.638704][T13781] syzkaller0: entered promiscuous mode [ 437.644378][T13781] syzkaller0: entered allmulticast mode [ 440.162335][T13811] syzkaller0: entered promiscuous mode [ 440.168119][T13811] syzkaller0: entered allmulticast mode [ 440.301793][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.640026][T13818] syzkaller0: entered promiscuous mode [ 440.660377][T13818] syzkaller0: entered allmulticast mode [ 443.794816][T13834] bond1: entered promiscuous mode [ 443.827809][T13836] bond_slave_0: entered promiscuous mode [ 443.833553][T13836] bond_slave_1: entered promiscuous mode [ 443.910754][T13836] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.951918][T13836] bond1: (slave macvlan2): making interface the new active one [ 443.981364][T13836] macvlan2: entered promiscuous mode [ 443.994699][T13836] bond0: entered promiscuous mode [ 444.023526][T13836] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 444.454894][T13841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.462658][T13841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.473240][T13841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.482566][T13841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.471968][T13840] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.650119][T13847] syzkaller0: entered promiscuous mode [ 445.664743][T13847] syzkaller0: entered allmulticast mode [ 446.892796][T13759] Set syz1 is full, maxelem 65536 reached [ 447.498843][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 449.142039][T13852] tipc: Enabling of bearer rejected, failed to enable media [ 449.151362][T13840] wg1 speed is unknown, defaulting to 1000 [ 451.685553][T13898] syzkaller0: entered promiscuous mode [ 451.697812][T13898] syzkaller0: entered allmulticast mode [ 451.888258][T13901] tipc: Enabled bearer , priority 0 [ 451.897190][T13901] syzkaller0: entered promiscuous mode [ 451.902735][T13901] syzkaller0: entered allmulticast mode [ 451.951389][T13900] tipc: Resetting bearer [ 452.062177][T13900] tipc: Disabling bearer [ 452.221917][T13907] random: crng reseeded on system resumption [ 452.289119][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 452.289136][ T28] audit: type=1326 audit(1764119299.693:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.344625][ T7691] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 452.359831][ T28] audit: type=1326 audit(1764119299.693:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.420849][ T28] audit: type=1326 audit(1764119299.763:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.456751][ T28] audit: type=1326 audit(1764119299.763:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.513746][ T28] audit: type=1326 audit(1764119299.763:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.564698][ T28] audit: type=1326 audit(1764119299.763:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.579851][ T7691] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 452.618997][ T28] audit: type=1326 audit(1764119299.763:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.622051][ T7691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 452.650130][ T7691] usb 4-1: Product: syz [ 452.653571][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 452.654387][ T7691] usb 4-1: Manufacturer: syz [ 452.688084][ T28] audit: type=1326 audit(1764119299.763:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13906 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 452.714954][ T7691] usb 4-1: SerialNumber: syz [ 452.735572][ T7691] usb 4-1: config 0 descriptor?? [ 452.752508][ T7691] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 452.775437][ T7691] dvb-usb: bulk message failed: -22 (2/0) [ 452.799808][ T7691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.826475][ T7691] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 452.847890][ T7691] usb 4-1: media controller created [ 452.907953][ T7691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.965890][ T7691] cxusb: set interface failed [ 452.990088][ T7691] dvb-usb: bulk message failed: -22 (1/0) [ 453.124884][ T7691] DVB: Unable to find symbol mt352_attach() [ 453.134952][ T7691] dvb-usb: bulk message failed: -22 (5/0) [ 453.164812][ T7691] zl10353_read_register: readreg error (reg=127, ret==-121) [ 453.172244][ T7691] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 453.266297][T13924] syzkaller0: entered promiscuous mode [ 453.271938][T13924] syzkaller0: entered allmulticast mode [ 453.304880][ T7691] rc_core: IR keymap rc-dvico-mce not found [ 453.310858][ T7691] Registered IR keymap rc-empty [ 453.332201][ T7691] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 453.348748][ T7691] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 453.368996][T13927] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.407819][ T7691] dvb-usb: schedule remote query interval to 100 msecs. [ 453.425233][ T7691] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 453.459278][ T7691] usb 4-1: USB disconnect, device number 3 [ 453.641026][T13932] tipc: Enabled bearer , priority 0 [ 453.703357][T13930] syzkaller0: entered promiscuous mode [ 453.714724][ T7691] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 453.734258][T13930] syzkaller0: entered allmulticast mode [ 453.929792][T13929] tipc: Resetting bearer [ 454.008863][T13929] tipc: Disabling bearer [ 454.022180][T13927] wg1 speed is unknown, defaulting to 1000 [ 454.238572][T13944] random: crng reseeded on system resumption [ 454.291190][ T28] audit: type=1326 audit(1764119301.693:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 454.518122][ T28] audit: type=1326 audit(1764119301.723:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13943 comm="syz.3.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1c18f749 code=0x7ffc0000 [ 455.565026][T13955] bond1: entered promiscuous mode [ 456.311795][T13965] syzkaller0: entered promiscuous mode [ 456.320933][T13965] syzkaller0: entered allmulticast mode [ 456.571153][T13969] tipc: Enabled bearer , priority 0 [ 456.595358][T13969] syzkaller0: entered promiscuous mode [ 456.600902][T13969] syzkaller0: entered allmulticast mode [ 456.635432][T13969] tipc: Resetting bearer [ 456.665369][T13968] tipc: Resetting bearer [ 456.736895][T13968] tipc: Disabling bearer [ 456.769439][T13979] random: crng reseeded on system resumption [ 456.977409][T13986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2990'. [ 457.028101][T13986] bond2: entered promiscuous mode [ 457.033660][T13986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.778373][T13993] bond1: option mode: unable to set because the bond device has slaves [ 458.316912][T13999] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.932935][T14007] syzkaller0: entered promiscuous mode [ 458.954580][T14007] syzkaller0: entered allmulticast mode [ 458.972769][T13999] wg1 speed is unknown, defaulting to 1000 [ 459.447980][T14012] tipc: Enabled bearer , priority 0 [ 459.477838][T14012] syzkaller0: entered promiscuous mode [ 459.487503][T14012] syzkaller0: entered allmulticast mode [ 459.545427][T14012] tipc: Resetting bearer [ 459.590334][T14011] tipc: Resetting bearer [ 459.590497][T14014] random: crng reseeded on system resumption [ 459.646735][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 459.646752][ T28] audit: type=1326 audit(1764119307.053:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 459.676687][T14011] tipc: Disabling bearer [ 459.692214][ T28] audit: type=1326 audit(1764119307.083:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 459.734693][ T28] audit: type=1326 audit(1764119307.083:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 459.761266][ T28] audit: type=1326 audit(1764119307.083:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 459.791564][ T28] audit: type=1326 audit(1764119307.083:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 459.815512][ T28] audit: type=1326 audit(1764119307.083:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 459.862643][ T28] audit: type=1326 audit(1764119307.083:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8cf8f749 code=0x7ffc0000 [ 460.762530][T14038] syzkaller0: entered promiscuous mode [ 460.774285][T14038] syzkaller0: entered allmulticast mode [ 460.787969][ T96] block nbd0: Possible stuck request ffff888021df8000: control (read@0,1024B). Runtime 360 seconds [ 460.799427][ T96] block nbd0: Possible stuck request ffff888021df8200: control (read@1024,1024B). Runtime 360 seconds [ 460.810982][ T96] block nbd0: Possible stuck request ffff888021df8400: control (read@2048,1024B). Runtime 360 seconds [ 460.823747][ T96] block nbd0: Possible stuck request ffff888021df8600: control (read@3072,1024B). Runtime 360 seconds [ 461.146663][T14050] random: crng reseeded on system resumption [ 461.208632][ T28] audit: type=1326 audit(1764119308.613:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 461.251099][T14052] tipc: Enabled bearer , priority 0 [ 461.256895][ T28] audit: type=1326 audit(1764119308.633:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 461.308044][ T28] audit: type=1326 audit(1764119308.633:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.0.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5deb98f749 code=0x7ffc0000 [ 461.454461][T14047] tipc: Disabling bearer [ 461.721074][T14059] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.176496][T14067] bond1: option mode: unable to set because the bond device has slaves [ 462.218343][T14059] wg1 speed is unknown, defaulting to 1000 [ 462.398129][T14073] random: crng reseeded on system resumption [ 462.517709][T14079] tipc: Enabling of bearer rejected, failed to enable media [ 462.707435][ T96] block nbd1: Possible stuck request ffff888021e28000: control (read@0,4096B). Runtime 360 seconds [ 462.864651][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 467.829565][T14112] syzkaller0: entered promiscuous mode [ 467.854681][T14112] syzkaller0: entered allmulticast mode [ 468.084347][T14114] tipc: Enabled bearer , priority 0 [ 468.105642][T14119] syzkaller0: entered promiscuous mode [ 468.111234][T14119] syzkaller0: entered allmulticast mode [ 468.135370][T14120] ip6_vti0 speed is unknown, defaulting to 1000 [ 468.175766][T14114] tipc: Resetting bearer [ 468.203575][T14113] tipc: Resetting bearer [ 468.266149][T14113] tipc: Disabling bearer [ 468.317571][T14124] syzkaller0: entered promiscuous mode [ 468.323124][T14124] syzkaller0: entered allmulticast mode [ 468.543415][T14120] wg1 speed is unknown, defaulting to 1000 [ 469.980799][T14148] syzkaller0: entered promiscuous mode [ 470.164802][T14148] syzkaller0: entered allmulticast mode [ 471.153011][T14157] syzkaller0: entered promiscuous mode [ 471.158927][T14157] syzkaller0: entered allmulticast mode [ 471.441494][T14163] tipc: Enabled bearer , priority 0 [ 471.459706][T14160] syzkaller0: entered promiscuous mode [ 471.484680][T14160] syzkaller0: entered allmulticast mode [ 471.587270][T14160] tipc: Resetting bearer [ 471.642415][T14159] tipc: Resetting bearer [ 471.749436][T14159] tipc: Disabling bearer [ 472.541320][T14176] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 472.747653][T14178] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.226258][T14178] wg1 speed is unknown, defaulting to 1000 [ 474.368981][T14192] syzkaller0: entered promiscuous mode [ 474.384702][T14192] syzkaller0: entered allmulticast mode [ 474.468073][T14194] syzkaller0: entered promiscuous mode [ 474.484724][T14194] syzkaller0: entered allmulticast mode [ 474.737777][T14200] tipc: Enabled bearer , priority 0 [ 474.757402][T14198] syzkaller0: entered promiscuous mode [ 474.762938][T14198] syzkaller0: entered allmulticast mode [ 474.969864][T14198] tipc: Resetting bearer [ 474.993839][T14197] tipc: Resetting bearer [ 475.058383][T14197] tipc: Disabling bearer [ 475.350238][T14209] binder: 14208:14209 ioctl c0306201 0 returned -14 [ 478.170397][T14216] input: syz0 as /devices/virtual/input/input7 [ 479.467113][T14229] syzkaller0: entered promiscuous mode [ 479.477045][T14229] syzkaller0: entered allmulticast mode [ 479.486004][T14231] syzkaller0: entered promiscuous mode [ 479.493888][T14231] syzkaller0: entered allmulticast mode [ 479.966185][T14235] tipc: Enabled bearer , priority 0 [ 480.005827][T14235] syzkaller0: entered promiscuous mode [ 480.011374][T14235] syzkaller0: entered allmulticast mode [ 480.075303][T14235] tipc: Resetting bearer [ 480.097200][T14234] tipc: Resetting bearer [ 480.197604][T14234] tipc: Disabling bearer [ 480.595510][T14242] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.081041][T14242] wg1 speed is unknown, defaulting to 1000 [ 482.534947][ T29] INFO: task udevd:5791 blocked for more than 143 seconds. [ 482.542373][ T29] Not tainted syzkaller #0 [ 482.619682][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.714719][ T29] task:udevd state:D stack:24808 pid:5791 ppid:5161 flags:0x00004006 [ 482.758318][ T29] Call Trace: [ 482.772037][ T29] [ 482.782084][ T29] __schedule+0x14d2/0x44d0 [ 482.803248][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 482.844087][ T29] ? asan.module_dtor+0x20/0x20 [ 482.864595][ T29] ? mark_lock+0x94/0x320 [ 482.892554][ T29] ? lock_chain_count+0x20/0x20 [ 482.912037][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 482.936481][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 482.948752][ T29] schedule+0xbd/0x170 [ 482.960880][ T29] io_schedule+0x80/0xd0 [ 483.006279][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 483.024628][ T29] ? folio_wait_bit+0x30/0x30 [ 483.039623][ T29] ? _compound_head+0x120/0x120 [ 483.131775][ T29] ? filemap_add_folio+0x192/0x3c0 [ 483.137339][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 483.142728][ T29] ? blkdev_writepage+0x30/0x30 [ 483.148090][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 483.153257][ T29] ? blkdev_writepage+0x30/0x30 [ 483.158665][ T29] read_part_sector+0xd2/0x350 [ 483.164194][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 483.170684][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 483.176650][ T29] ? put_partition+0x350/0x350 [ 483.181574][ T29] ? alloc_pages+0x4dc/0x740 [ 483.186618][ T29] bdev_disk_changed+0x73a/0x1410 [ 483.191798][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 483.198851][ T29] ? iput+0x347/0x920 [ 483.224007][ T29] blkdev_get_whole+0x30d/0x390 [ 483.274641][ T29] blkdev_get_by_dev+0x279/0x600 [ 483.284779][ T29] blkdev_open+0x152/0x360 [ 483.289456][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 483.294187][ T29] do_dentry_open+0x8c6/0x1500 [ 483.307114][ T29] path_openat+0x274b/0x3190 [ 483.314723][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 483.324365][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.341008][ T29] ? verify_lock_unused+0x140/0x140 [ 483.353190][ T29] ? do_filp_open+0x3d0/0x3d0 [ 483.362802][ T29] ? __virt_addr_valid+0x18c/0x540 [ 483.372825][ T29] do_filp_open+0x1c5/0x3d0 [ 483.382046][ T29] ? vfs_tmpfile+0x490/0x490 [ 483.392470][ T29] ? _raw_spin_unlock+0x28/0x40 [ 483.504994][ T29] ? alloc_fd+0x58f/0x630 [ 483.509440][ T29] do_sys_openat2+0x12c/0x1c0 [ 483.514180][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 483.520738][ T29] ? do_sys_open+0xe0/0xe0 [ 483.526420][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 483.533074][ T29] ? lock_chain_count+0x20/0x20 [ 483.538463][ T29] __x64_sys_openat+0x139/0x160 [ 483.544212][ T29] do_syscall_64+0x55/0xb0 [ 483.549351][ T29] ? clear_bhb_loop+0x40/0x90 [ 483.554094][ T29] ? clear_bhb_loop+0x40/0x90 [ 483.559860][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.567705][ T29] RIP: 0033:0x7f772cea7407 [ 483.572291][ T29] RSP: 002b:00007ffccc2b4fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 483.581767][ T29] RAX: ffffffffffffffda RBX: 00007f772d571880 RCX: 00007f772cea7407 [ 483.590328][ T29] RDX: 00000000000a0800 RSI: 0000562c2dcca6d0 RDI: ffffffffffffff9c [ 483.598672][ T29] RBP: 0000562c2dcca910 R08: 0000000000000000 R09: 0000000000000000 [ 483.608270][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562c2dcdde20 [ 483.623925][ T29] R13: 0000562c2dce2410 R14: 0000000000000000 R15: 0000562c2dcdde20 [ 483.649608][ T29] [ 483.678613][ T29] INFO: task udevd:5803 blocked for more than 144 seconds. [ 483.714620][ T29] Not tainted syzkaller #0 [ 483.725589][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.744889][ T29] task:udevd state:D stack:25736 pid:5803 ppid:5161 flags:0x00004006 [ 483.764343][ T29] Call Trace: [ 483.771315][ T29] [ 483.777772][ T29] __schedule+0x14d2/0x44d0 [ 483.786232][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 483.792391][ T29] ? asan.module_dtor+0x20/0x20 [ 483.799184][ T29] ? mark_lock+0x94/0x320 [ 483.803679][ T29] ? lock_chain_count+0x20/0x20 [ 483.828142][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 483.833442][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 483.839351][ T29] schedule+0xbd/0x170 [ 483.843565][ T29] io_schedule+0x80/0xd0 [ 483.848448][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 483.853919][ T29] ? folio_wait_bit+0x30/0x30 [ 483.859178][ T29] ? _compound_head+0x120/0x120 [ 483.864259][ T29] ? filemap_add_folio+0x192/0x3c0 [ 483.869976][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 483.875632][ T29] ? blkdev_writepage+0x30/0x30 [ 483.880628][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 483.886244][ T29] ? blkdev_writepage+0x30/0x30 [ 483.891242][ T29] read_part_sector+0xd2/0x350 [ 483.897880][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 483.903426][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 483.915200][ T29] ? put_partition+0x350/0x350 [ 483.920222][ T29] ? alloc_pages+0x4dc/0x740 [ 483.925452][ T29] bdev_disk_changed+0x73a/0x1410 [ 483.930644][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 483.936463][ T29] ? iput+0x347/0x920 [ 483.940580][ T29] blkdev_get_whole+0x30d/0x390 [ 483.946798][ T29] blkdev_get_by_dev+0x279/0x600 [ 483.951976][ T29] blkdev_open+0x152/0x360 [ 483.956980][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 483.961709][ T29] do_dentry_open+0x8c6/0x1500 [ 483.974607][ T29] path_openat+0x274b/0x3190 [ 483.982840][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 483.995895][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.011284][ T29] ? verify_lock_unused+0x140/0x140 [ 484.028269][ T29] ? do_filp_open+0x3d0/0x3d0 [ 484.038771][ T29] ? __virt_addr_valid+0x18c/0x540 [ 484.049590][ T29] do_filp_open+0x1c5/0x3d0 [ 484.060010][ T29] ? vfs_tmpfile+0x490/0x490 [ 484.074951][ T29] ? _raw_spin_unlock+0x28/0x40 [ 484.079892][ T29] ? alloc_fd+0x58f/0x630 [ 484.084291][ T29] do_sys_openat2+0x12c/0x1c0 [ 484.104654][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 484.110568][ T29] ? do_sys_open+0xe0/0xe0 [ 484.124746][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 484.134388][ T29] ? lock_chain_count+0x20/0x20 [ 484.145209][ T29] __x64_sys_openat+0x139/0x160 [ 484.156293][ T29] do_syscall_64+0x55/0xb0 [ 484.166567][ T29] ? clear_bhb_loop+0x40/0x90 [ 484.176037][ T29] ? clear_bhb_loop+0x40/0x90 [ 484.186791][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.200002][ T29] RIP: 0033:0x7f772cea7407 [ 484.209222][ T29] RSP: 002b:00007ffccc2b4fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 484.218487][ T29] RAX: ffffffffffffffda RBX: 00007f772d571880 RCX: 00007f772cea7407 [ 484.245219][ T29] RDX: 00000000000a0800 RSI: 0000562c2dcdbaa0 RDI: ffffffffffffff9c [ 484.253286][ T29] RBP: 0000562c2dcca910 R08: 0000000000000000 R09: 0000000000000000 [ 484.284762][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562c2dcca500 [ 484.292840][ T29] R13: 0000562c2dce2410 R14: 0000000000000000 R15: 0000562c2dcca500 [ 484.316349][ T29] [ 484.335099][ T29] [ 484.335099][ T29] Showing all locks held in the system: [ 484.375033][ T29] 1 lock held by khungtaskd/29: [ 484.382516][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 484.401021][ T29] 2 locks held by kworker/u4:3/49: [ 484.406540][ T29] 2 locks held by kworker/u4:11/3452: [ 484.412049][ T29] #0: ffff888018753538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 484.423484][ T29] #1: ffffc9000cd57d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 484.437164][ T29] 2 locks held by getty/5554: [ 484.441988][ T29] #0: ffff88802d1730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 484.452153][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 484.463008][ T29] 1 lock held by udevd/5791: [ 484.469093][ T29] #0: ffff888021cad4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 484.479918][ T29] 1 lock held by udevd/5803: [ 484.505051][ T29] #0: ffff8880218d74c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 484.524792][ T29] 2 locks held by kworker/0:10/7687: [ 484.537278][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 484.563325][ T29] #1: ffffc9000bb3fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 484.589105][ T29] 1 lock held by syz.1.2670/12905: [ 484.602600][ T29] #0: ffff8880218d74c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 484.624723][ T29] 2 locks held by syz.4.3064/14219: [ 484.638450][ T29] 3 locks held by syz.3.3074/14242: [ 484.645460][ T29] #0: ffffffff8dfaf790 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x351/0x5e0 [ 484.670680][ T29] #1: ffffffff8dfbc5c8 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0xc3/0x490 [ 484.680567][ T29] #2: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 484.707256][ T29] [ 484.709703][ T29] ============================================= [ 484.709703][ T29] [ 484.754599][ T29] NMI backtrace for cpu 1 [ 484.759218][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 484.766459][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.776562][ T29] Call Trace: [ 484.779875][ T29] [ 484.782839][ T29] dump_stack_lvl+0x16c/0x230 [ 484.787572][ T29] ? show_regs_print_info+0x20/0x20 [ 484.792883][ T29] ? load_image+0x3b0/0x3b0 [ 484.797442][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 484.802430][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 484.808630][ T29] ? _printk+0xd0/0x110 [ 484.812823][ T29] ? load_image+0x3b0/0x3b0 [ 484.817347][ T29] ? load_image+0x3b0/0x3b0 [ 484.821871][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 484.827965][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 484.834065][ T29] watchdog+0xf41/0xf80 [ 484.838246][ T29] ? watchdog+0x1e1/0xf80 [ 484.842604][ T29] kthread+0x2fa/0x390 [ 484.846696][ T29] ? hungtask_pm_notify+0x90/0x90 [ 484.851754][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.856371][ T29] ret_from_fork+0x48/0x80 [ 484.860829][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.865435][ T29] ret_from_fork_asm+0x11/0x20 [ 484.870252][ T29] [ 484.874287][ T29] Sending NMI from CPU 1 to CPUs 0: [ 484.879765][ C0] NMI backtrace for cpu 0 [ 484.879776][ C0] CPU: 0 PID: 14219 Comm: syz.4.3064 Not tainted syzkaller #0 [ 484.879794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.879805][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x45/0x60 [ 484.879832][ C0] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 484.879847][ C0] RSP: 0018:ffffc9000fade480 EFLAGS: 00000246 [ 484.879862][ C0] RAX: ffffffff813ae979 RBX: ffffc9000fadf880 RCX: ffff888023900000 [ 484.879876][ C0] RDX: ffffc900114d5000 RSI: 000000000007ffff RDI: ffffc9000fadf880 [ 484.879888][ C0] RBP: ffffc9000fadf880 R08: ffff888023900000 R09: 0000000000000003 [ 484.879900][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc9000fae0000 [ 484.879917][ C0] R13: 1ffff92001f5bcbb R14: ffffc9000fad8000 R15: dffffc0000000000 [ 484.879930][ C0] FS: 00007f1d5014f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 484.879945][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.879957][ C0] CR2: 00005555800605c8 CR3: 0000000057520000 CR4: 00000000003506f0 [ 484.879972][ C0] Call Trace: [ 484.879978][ C0] [ 484.879984][ C0] __read_once_word_nocheck+0x9/0x10 [ 484.880012][ C0] deref_stack_reg+0x1bd/0x240 [ 484.880041][ C0] unwind_next_frame+0x1789/0x2970 [ 484.880073][ C0] ? nfnetlink_rcv+0x274/0x2180 [ 484.880097][ C0] ? nfnetlink_rcv+0x274/0x2180 [ 484.880118][ C0] ? stack_trace_save+0xe0/0xe0 [ 484.880137][ C0] arch_stack_walk+0x144/0x190 [ 484.880156][ C0] ? netlink_unicast+0x751/0x8d0 [ 484.880180][ C0] stack_trace_save+0x9c/0xe0 [ 484.880199][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 484.880225][ C0] kasan_set_track+0x4e/0x70 [ 484.880243][ C0] ? kasan_set_track+0x4e/0x70 [ 484.880259][ C0] ? kasan_save_free_info+0x2e/0x50 [ 484.880279][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 484.880296][ C0] ? slab_free_freelist_hook+0x130/0x1b0 [ 484.880322][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 484.880345][ C0] ? hash_net4_resize+0xc60/0x1b40 [ 484.880362][ C0] ? call_ad+0x43f/0xae0 [ 484.880376][ C0] ? ip_set_ad+0x787/0x930 [ 484.880390][ C0] ? nfnetlink_rcv_msg+0xb49/0x1130 [ 484.880411][ C0] ? netlink_rcv_skb+0x216/0x480 [ 484.880433][ C0] ? nfnetlink_rcv+0x274/0x2180 [ 484.880476][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 484.880499][ C0] kasan_save_free_info+0x2e/0x50 [ 484.880520][ C0] ____kasan_slab_free+0x126/0x1e0 [ 484.880540][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 484.880567][ C0] ? hash_net4_resize+0xb51/0x1b40 [ 484.880585][ C0] ? hash_net4_resize+0xc60/0x1b40 [ 484.880602][ C0] __kmem_cache_free+0xba/0x1f0 [ 484.880628][ C0] hash_net4_resize+0xc60/0x1b40 [ 484.880650][ C0] ? hash_net4_resize+0x5f9/0x1b40 [ 484.880682][ C0] call_ad+0x43f/0xae0 [ 484.880702][ C0] ? ip_set_ad+0x930/0x930 [ 484.880724][ C0] ? __nla_parse+0x40/0x50 [ 484.880751][ C0] ip_set_ad+0x787/0x930 [ 484.880768][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 484.880797][ C0] ? ip_set_dump_done+0x1e0/0x1e0 [ 484.880812][ C0] ? rcu_is_watching+0x15/0xb0 [ 484.880853][ C0] nfnetlink_rcv_msg+0xb49/0x1130 [ 484.880874][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.880894][ C0] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 484.880931][ C0] ? nfnetlink_unbind+0x160/0x160 [ 484.880965][ C0] ? __dev_queue_xmit+0x1a64/0x35a0 [ 484.880986][ C0] ? __netlink_deliver_tap+0x5ab/0x830 [ 484.881008][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 484.881030][ C0] ? netlink_unicast+0x72c/0x8d0 [ 484.881050][ C0] ? netlink_sendmsg+0x8c1/0xbe0 [ 484.881072][ C0] ? ____sys_sendmsg+0x5bf/0x950 [ 484.881096][ C0] ? ___sys_sendmsg+0x220/0x290 [ 484.881120][ C0] ? __se_sys_sendmsg+0x1a5/0x270 [ 484.881144][ C0] ? do_syscall_64+0x55/0xb0 [ 484.881175][ C0] netlink_rcv_skb+0x216/0x480 [ 484.881198][ C0] ? nfnetlink_unbind+0x160/0x160 [ 484.881221][ C0] ? netlink_ack+0x1110/0x1110 [ 484.881250][ C0] ? apparmor_capable+0x137/0x1a0 [ 484.881267][ C0] ? bpf_lsm_capable+0x9/0x10 [ 484.881290][ C0] ? security_capable+0x89/0xb0 [ 484.881315][ C0] nfnetlink_rcv+0x274/0x2180 [ 484.881340][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 484.881357][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 484.881374][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 484.881390][ C0] ? _local_bh_enable+0xa0/0xa0 [ 484.881410][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 484.881431][ C0] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 484.881458][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 484.881483][ C0] ? ref_tracker_free+0x634/0x7d0 [ 484.881499][ C0] ? __copy_skb_header+0xa7/0x550 [ 484.881526][ C0] ? refcount_inc+0x70/0x70 [ 484.881542][ C0] ? __skb_clone+0x63/0x790 [ 484.881570][ C0] ? __skb_clone+0x480/0x790 [ 484.881602][ C0] ? __netlink_deliver_tap+0x7e8/0x830 [ 484.881625][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.881648][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 484.881671][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.881697][ C0] netlink_unicast+0x751/0x8d0 [ 484.881725][ C0] netlink_sendmsg+0x8c1/0xbe0 [ 484.881753][ C0] ? netlink_getsockopt+0x580/0x580 [ 484.881778][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 484.881798][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 484.881818][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 484.881837][ C0] ? netlink_getsockopt+0x580/0x580 [ 484.881860][ C0] ____sys_sendmsg+0x5bf/0x950 [ 484.881889][ C0] ? __asan_memset+0x22/0x40 [ 484.881916][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 484.881940][ C0] ? __import_iovec+0x5f2/0x860 [ 484.881970][ C0] ? import_iovec+0x73/0xa0 [ 484.881995][ C0] ___sys_sendmsg+0x220/0x290 [ 484.882023][ C0] ? __sys_sendmsg+0x270/0x270 [ 484.882074][ C0] __se_sys_sendmsg+0x1a5/0x270 [ 484.882102][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 484.882136][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 484.882154][ C0] do_syscall_64+0x55/0xb0 [ 484.882176][ C0] ? clear_bhb_loop+0x40/0x90 [ 484.882195][ C0] ? clear_bhb_loop+0x40/0x90 [ 484.882214][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.882233][ C0] RIP: 0033:0x7f1d4f38f749 [ 484.882247][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.882261][ C0] RSP: 002b:00007f1d5014f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.882278][ C0] RAX: ffffffffffffffda RBX: 00007f1d4f5e5fa0 RCX: 00007f1d4f38f749 [ 484.882290][ C0] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 484.882301][ C0] RBP: 00007f1d4f413f91 R08: 0000000000000000 R09: 0000000000000000 [ 484.882312][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.882322][ C0] R13: 00007f1d4f5e6038 R14: 00007f1d4f5e5fa0 R15: 00007ffdf70f89b8 [ 484.882342][ C0] [ 484.909161][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 484.909181][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 484.909205][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.909220][ T29] Call Trace: [ 484.909229][ T29] [ 484.909238][ T29] dump_stack_lvl+0x16c/0x230 [ 484.909282][ T29] ? show_regs_print_info+0x20/0x20 [ 484.909313][ T29] ? load_image+0x3b0/0x3b0 [ 484.909355][ T29] panic+0x2c0/0x710 [ 484.909379][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 484.909417][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 484.909444][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 484.909475][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 484.909519][ T29] watchdog+0xf80/0xf80 [ 484.909551][ T29] ? watchdog+0x1e1/0xf80 [ 484.909589][ T29] kthread+0x2fa/0x390 [ 484.909611][ T29] ? hungtask_pm_notify+0x90/0x90 [ 484.909641][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.909660][ T29] ret_from_fork+0x48/0x80 [ 484.909687][ T29] ? kthread_blkcg+0xd0/0xd0 [ 484.909709][ T29] ret_from_fork_asm+0x11/0x20 [ 484.909756][ T29] [ 484.913089][ T29] Kernel Offset: disabled [ 485.668603][ T29] Rebooting in 86400 seconds..