last executing test programs: 24.327500377s ago: executing program 2 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x10) 24.05666346s ago: executing program 2 (id=1069): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52004507000010000000d60600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b996b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) unshare(0x480) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 23.942069048s ago: executing program 2 (id=1073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f0000000840), &(0x7f0000004880)=@udp=r1}, 0x20) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2009, @private2, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004a80)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x8848, @empty, 0xfd4}, 0x1c, &(0x7f0000000340)}}], 0x1, 0x24088040) 22.986198825s ago: executing program 2 (id=1093): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 22.898183323s ago: executing program 2 (id=1095): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000100)={@remote, @private=0xa010100}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xf87e8161e98cb73e) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002900010000000100fcdbdf25030100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5ead3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734351dc076eb43d9621dc08c02"], 0x114}], 0x1, 0x0, 0x0, 0x891}, 0x0) 22.490962982s ago: executing program 2 (id=1100): r0 = socket(0x5, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xda0, 0x0, 0x1, 0x767d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0xffffffffffffffff, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r5, 0x20, &(0x7f0000000900)={&(0x7f0000000880)=""/24, 0x18, 0x0, &(0x7f00000008c0)=""/36, 0x24}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0xf, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @generic={0x4, 0x4, 0x9, 0x4, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @generic={0xa, 0x2, 0x2, 0x80, 0x5}]}, &(0x7f0000000800)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x26, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xa, 0x2, 0x8}, 0x10, r8, 0xffffffffffffffff, 0xa, &(0x7f0000000980)=[r4, r6, r6, r6, r6, r2, r4, r2], &(0x7f00000009c0)=[{0x3, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x10, 0x6}, {0x4, 0x4, 0x3, 0x4}, {0x0, 0x3, 0x6}, {0x5, 0x5, 0x8}, {0x4, 0x2, 0x8, 0xb}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x4, 0xc, 0xc}, {0x3, 0x4, 0x7, 0x1}, {0x3, 0x3, 0x2, 0x8}], 0x10, 0x19c2}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r10, 0x0, 0x0}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x0) (async) getsockname$packet(r11, 0x0, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r15, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x2e, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc42}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @ldst={0x1, 0x1, 0x6, 0x1, 0xa, 0x8, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x4, 0xbf, 0x8000}, 0x10, r9, r10, 0x6, &(0x7f0000000500)=[r11, r12, r13, r14, r15, r16], &(0x7f0000000540)=[{0x2, 0x3, 0xa, 0x4}, {0x1, 0x3, 0xd, 0xc}, {0x1, 0x2, 0x3, 0x6}, {0x2, 0x4, 0xb, 0x5}, {0x5, 0x5, 0x4, 0x2}, {0x0, 0x4, 0x5, 0x9}], 0x10, 0x81}, 0x94) 22.212965066s ago: executing program 32 (id=1100): r0 = socket(0x5, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xda0, 0x0, 0x1, 0x767d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0xffffffffffffffff, 0x26, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r5, 0x20, &(0x7f0000000900)={&(0x7f0000000880)=""/24, 0x18, 0x0, &(0x7f00000008c0)=""/36, 0x24}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0xf, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @generic={0x4, 0x4, 0x9, 0x4, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @generic={0xa, 0x2, 0x2, 0x80, 0x5}]}, &(0x7f0000000800)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x26, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xa, 0x2, 0x8}, 0x10, r8, 0xffffffffffffffff, 0xa, &(0x7f0000000980)=[r4, r6, r6, r6, r6, r2, r4, r2], &(0x7f00000009c0)=[{0x3, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x10, 0x6}, {0x4, 0x4, 0x3, 0x4}, {0x0, 0x3, 0x6}, {0x5, 0x5, 0x8}, {0x4, 0x2, 0x8, 0xb}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x4, 0xc, 0xc}, {0x3, 0x4, 0x7, 0x1}, {0x3, 0x3, 0x2, 0x8}], 0x10, 0x19c2}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r10, 0x0, 0x0}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x0) (async) getsockname$packet(r11, 0x0, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r15, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x2e, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc42}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @ldst={0x1, 0x1, 0x6, 0x1, 0xa, 0x8, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x4, 0xbf, 0x8000}, 0x10, r9, r10, 0x6, &(0x7f0000000500)=[r11, r12, r13, r14, r15, r16], &(0x7f0000000540)=[{0x2, 0x3, 0xa, 0x4}, {0x1, 0x3, 0xd, 0xc}, {0x1, 0x2, 0x3, 0x6}, {0x2, 0x4, 0xb, 0x5}, {0x5, 0x5, 0x4, 0x2}, {0x0, 0x4, 0x5, 0x9}], 0x10, 0x81}, 0x94) 17.079308544s ago: executing program 0 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0xfffffe83) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600010000000000000000000a00c3"], 0x18}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x24008810) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000000)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) read(r1, &(0x7f0000000140)=""/4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000009c0)={0x2d4, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x270a}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "2d981fa81eca1574070dfed8aaa5bd1d16af1e215e333f1c52bba95398e86b014e4d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "6231a25c273db51dc5cb6830e073ec831a67a08d8c2518351cfd0ea1455fe8ad322f74974b41347953328f17da4992394793509060ba949f5f437163f55ab23e998ad8b5779c549a4fbd38cbff08ff76f408baab1e18e232e2ec70a9a8fa0dc36eff83c4d5dd672d7b57ff45f52816febce2d3f7499d88f66fd968882da43f2f419d1279e24920456448a1dabcd669dc26d23a165558758405c3c695e42307a4c84459782cd01eba692792515738d8b05804a1f39ab4b560cd56ee3e45760a3e595dd2f4da06f8069f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x722}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb1e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49d}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}, 0xb0}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @remote, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}]}, 0x2d4}}, 0x1) 16.726972455s ago: executing program 1 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00'}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001001100fe88a4"], 0xfdef) 16.660679416s ago: executing program 3 (id=1156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r4, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r6) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="00001000"/14], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xb, 0xfff1}, {0x2, 0x9}, {0x1, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x20004800) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xdb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000340)=""/69, 0x3000, 0x0, 0xc, 0x6}, 0x20) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r11 = socket$kcm(0x10, 0x2, 0x4) (async) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf063eb8eedd589ebe79b30d4aff6505acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x20000050) (async) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r9, &(0x7f0000000300)={0x2c, 0x2, r12}, 0x10) socket$netlink(0x10, 0x3, 0x0) 16.289935636s ago: executing program 3 (id=1157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000080)) (async) sendmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 16.227677827s ago: executing program 1 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x38, r1, 0x5, 0xffffffff, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0x1, 0x4, 0x7, 0x6d3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0x488c0) 16.160663877s ago: executing program 3 (id=1159): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x807, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000100000000000001010"}}}]}, 0x48}}, 0x0) 16.148942569s ago: executing program 0 (id=1160): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x20400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r5, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 16.039054881s ago: executing program 4 (id=1161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf251800000008000300", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x40800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) r9 = socket(0x1d, 0x4, 0x1) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r12, 0x0, 0x48004) getsockname$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xd5#'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '%^'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x34}}, 0x1) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="00012dbd7001fddbdf255700000000000000024100000014001369623a766d7f68315f766c616e590000"], 0x30}, 0x1, 0x0, 0x0, 0x20051}, 0x810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r16, @ANYBLOB="000004000a0002"], 0x28}}, 0x40000) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r14, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.038534719s ago: executing program 1 (id=1162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000398c00000003000000000000000101008000005e1affd5020900010073797a300000000008000240000000032c000000030e01030000e6ff00000000020000000900010073797a30000000000900030073797a32000081b846950000110001e52499180ecd2758760344864ecba576e5000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x80) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x7, @private0, 0xfff}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 16.006121486s ago: executing program 3 (id=1163): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) 15.916138751s ago: executing program 0 (id=1164): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000faff00000000000000000000186000000000000000000000ff070000"], 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) 15.783300184s ago: executing program 4 (id=1165): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="59d4c3a599059ab6cd933680f9105dfe17a518e190da6d20ea88d8bae3d7f22a55825a5a75c3433adfac99c8a7804ee2f3bf730e464e2dc481676c8bdbad281228364af421da20026cedcc862b7b773b7b9cf1d3ee0a546c6e3ad688a4fdda7fda1d04137d22d4a4dd81cb9cbd97d9b0a9021ed35f59a743b1c0dbce1007049f2e078145500702d771b7d73c152bfea77e026601539dcb21de77ecb76034f5f59fbcb4ea3f41961dd1d09c852d483662132dbab75a", 0xb5) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x101, @any, 0xfff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="61a000fe00000000691a72000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 15.782704623s ago: executing program 1 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x8, 0x0, 0x7, 0x10420, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000102666c6f775f6f66666c6f616400000000100002800900010073797a31000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x1, 0x8000, 0x5c, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 15.77766962s ago: executing program 3 (id=1167): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="7d2371115107f171844664966c7b4091f4a0ea10dc11cde5ca83a343f041cbcc0e38bab9d8eca40f33212671f6ea152d8ab7477fd9c725a3553553f4010a0b57334934bf1d4f05dd307d859e38f3e3e9676a45a79b01", 0x56}], 0x1) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000440), 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001f40)={'dummy0\x00', &(0x7f0000001f00)=@ethtool_sfeatures={0x3b, 0x2, [{0xa, 0x4}, {0x0, 0x2}]}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r6 = socket(0x1e, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000001f80)={0x120c, 0x14, 0x800, 0x70bd2c, 0x25dfdbfb, {0x11, 0xf7}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "569795c4249e119c7e10c0c0e62d6346121c3222ed9ac8896df3112a01256cdf3c45aeda1f84e0f313cb49ec13d405a0593125b18184ad1ae1806d267e4cfe2fb8c17d9b267ff3416d7a3fd8ee60ff6b4f09b369a4f53ead552970542ef71d540f24b03e0e63ebc8d1d924e6010d1599a067d9b86d2b1f5b324d38c99ec964e05b3c22a538ca6cb3e851a28f6ead4cb0613a47fbfdbd950e25cc7aca3f81740a3ecea23793b090fb7ce8b040534e819aaadaabd977cec6c18ba6cda1c068d1deb76ed1e0f697f99ac3f5426e9fb6b44e45ef5c02a8f56b5b39eae853aabe016c9b3e8b703d32e9eea0eebbe2ba596b4283da2fd41386f35e99"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "5d88b0a7ff5f230c66cce28c69278542650b3a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "ad2a351bb2da16baaae479026fe6beb1ee1e7cea0638fa07e16c02aa81a3efa227c15faacad54a80da0c55a06f563eb45da2654af47ebc3fdb9d97f87a14f61fd6d74569a8f5a816b5b762b640c7c40ef1761dd3444620356984e7db7e2517ca972a1e1c30fe234ac421daca0764e50e4213d1652f231a4fefb0edc41b74c5b84f8b6adabda11c18577794a52b8e89bdb0503abbadb48b8a82dac021e9c34e2bd62f2afa438cd02bda2981580dc8452e687d845e27f9d8912d56bc3cdca0e7873d2c4c79923f241cad635fdc87"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "191d9a63"}]}, 0x120c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 15.777112599s ago: executing program 0 (id=1168): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44800) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000440)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00010000000000000000090000008008007e00", @ANYRES32=0x0, @ANYBLOB], 0x1c}], 0x1}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delsa={0x40, 0x11, 0x200, 0x70bd2b, 0x25dfdbfc, {@in=@local, 0x4d3, 0xa, 0x5f}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2c, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_open_procfs$namespace(r1, &(0x7f0000000700)='ns/time\x00') r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xb8, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40081}, 0x40040) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, 0x0, 0x0) 15.660213671s ago: executing program 4 (id=1169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f00000001c0)=0x61) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2c, r1, 0x1, 0x70bd25, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 15.637626178s ago: executing program 3 (id=1170): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x20000000, @remote, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000380)="5bf26fda", 0x4}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4089, 0xff9}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) 15.447446099s ago: executing program 1 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@udp6=r1}, 0x20) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r2}, 0x94) (async) recvmsg$qrtr(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001340)=[{0x1010, 0x0, 0x0, ""/4096}, {0xa8, 0x0, 0x0, ""/148}, {0x80, 0x0, 0x0, ""/111}, {0xd0, 0x0, 0x0, ""/190}, {0x78, 0x0, 0x0, ""/102}, {0x1010, 0x0, 0x0, ""/4096}, {0x1010, 0x0, 0x0, ""/4096}], 0x32a0, 0x22}, 0x38, 0x10002) 15.44701113s ago: executing program 0 (id=1172): ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x400, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0xfffc, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0xa, 0x2, {{0x17, 0x4, 0x3, 0x14, 0x5c, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x82, 0x2}, @noop, @lsrr={0x83, 0x17, 0xb9, [@local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @noop, @lsrr={0x83, 0x7, 0xe, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0xc5, [@dev={0xac, 0x14, 0x14, 0x26}, @empty, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}, @generic={0x86, 0xc, "71b230b603d7d19a8dee"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r5], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x34}, 0x21) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) 15.386431187s ago: executing program 4 (id=1173): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="7f5a80648c2594", 0x7}, {&(0x7f0000000580)="6b092725e7", 0x5}], 0x2}, 0x0) 15.385063501s ago: executing program 0 (id=1174): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x7ff, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @broadcast}}]}, 0x410) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x5, 0x1, [0x1]}, &(0x7f0000000480)=0xa) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000004c0)={r2, 0x18, "f2cde778919d127464198d6b0c8ee3d5e9547c113d428a0c"}, &(0x7f0000000500)=0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x2400c000}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000740)={r2, @in6={{0xa, 0x4e23, 0xd, @mcast1, 0x7}}, [0x1, 0xa, 0x0, 0x6, 0x200000, 0x9, 0x7, 0x1c2b, 0xfffffffffffffffa, 0x8000, 0x8, 0xfff, 0x8, 0xe, 0xfffffffffffffff4]}, &(0x7f0000000840)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000880)={r6, 0x1, 0x1ff, 0x3}, &(0x7f00000008c0)=0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc14}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000a40)={r2, @in6={{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, &(0x7f0000000b00)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000b40)=@assoc_id=r9, &(0x7f0000000b80)=0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000bc0)={0x7f}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000c00)={0x0, 0x2}, 0x4) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f0000000c40)=@ethernet, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)=""/131, 0x83}, {&(0x7f0000000d80)=""/49, 0x31}, {&(0x7f0000000dc0)=""/75, 0x4b}, {&(0x7f0000000e40)=""/132, 0x84}, {&(0x7f0000000f00)=""/169, 0xa9}], 0x5, &(0x7f0000001040)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002040)=@hci, 0x80, &(0x7f0000003280)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/25, 0x19}, {&(0x7f0000003100)=""/83, 0x53}, {&(0x7f0000003180)=""/105, 0x69}, {&(0x7f0000003200)=""/104, 0x68}], 0x5, &(0x7f0000003300)=""/4096, 0x1000}}], 0x2, 0x120, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000004380)={r7, 0xaa11}, 0x8) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004400), r5) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x3c, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000004500)='}\x00', 0x2) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000004540)={0xffffffa6, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000004680)={r10, 0xfff, 0x28, 0x6, 0x1, 0x9}, &(0x7f00000046c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005840)={r11, 0x0, 0x7d, 0x13, &(0x7f0000004700)="43ed956722d15add70db932150768009f2538595094f63c482271d433baf4d23b436e0a798e22990abb4ae357da5c8adca088c97a78b8baaaecf91818b7fe6eb8b03e3909815423ce008cb48f3100e102a808a43a8b1d26ae8594c9752e4625dd0194e5d02362572d2c96d312d641a84302ea56af87a889db83e0b2109", &(0x7f0000004780)=""/19, 0x9, 0x0, 0x1000, 0x77, &(0x7f00000047c0)="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", &(0x7f00000057c0)="de8834e2a6d162812f7ab5079fb6670ea802ab64bf40107ff25b3676aa952f963e35f25fb76aed116d2b2aa800b9382f80aa59fb3ad11e9d6d37c873e0fcbced9a8096ac93c23ee1578281342def551ab5f31b113cdf0bdd131095e9bced463728496c5fa80294cc6b90f9f1aec6adb7f9dcea03c085f6", 0x3, 0x0, 0xffff2108}, 0x50) accept4$vsock_stream(r5, &(0x7f00000058c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000005900)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) 15.321847838s ago: executing program 1 (id=1175): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x3, 0xffffffff}}, 0x2e) sendmmsg(r0, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000018000000020000000180100002020642500000000002020f8ff00000000bfa1000068c0793471ea02128300000007010000f8ffffffb702000008000000b7030000000000008500000017000066888c9406350ea993009500"/113], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)=0xffd2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='ext4_request_inode\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xa0}}, 0x20000840) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x31, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getnexthop={0x54, 0x6a, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r10}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r7}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040004}, 0x8050) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f0000000640)={0x3}, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket(0x28, 0xa, 0x38c4) socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15.223367892s ago: executing program 4 (id=1176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r1, 0x0, 0x0, 0x0}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 15.196882648s ago: executing program 4 (id=1177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x10e0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = accept4(r1, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r1, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x1, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e0}, 0x4008000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) 161.798563ms ago: executing program 33 (id=1174): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x7ff, {{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @broadcast}}]}, 0x410) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x5, 0x1, [0x1]}, &(0x7f0000000480)=0xa) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000004c0)={r2, 0x18, "f2cde778919d127464198d6b0c8ee3d5e9547c113d428a0c"}, &(0x7f0000000500)=0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x2400c000}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000740)={r2, @in6={{0xa, 0x4e23, 0xd, @mcast1, 0x7}}, [0x1, 0xa, 0x0, 0x6, 0x200000, 0x9, 0x7, 0x1c2b, 0xfffffffffffffffa, 0x8000, 0x8, 0xfff, 0x8, 0xe, 0xfffffffffffffff4]}, &(0x7f0000000840)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000880)={r6, 0x1, 0x1ff, 0x3}, &(0x7f00000008c0)=0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc14}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000a40)={r2, @in6={{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, &(0x7f0000000b00)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000b40)=@assoc_id=r9, &(0x7f0000000b80)=0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000bc0)={0x7f}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000c00)={0x0, 0x2}, 0x4) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f0000000c40)=@ethernet, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)=""/131, 0x83}, {&(0x7f0000000d80)=""/49, 0x31}, {&(0x7f0000000dc0)=""/75, 0x4b}, {&(0x7f0000000e40)=""/132, 0x84}, {&(0x7f0000000f00)=""/169, 0xa9}], 0x5, &(0x7f0000001040)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002040)=@hci, 0x80, &(0x7f0000003280)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/25, 0x19}, {&(0x7f0000003100)=""/83, 0x53}, {&(0x7f0000003180)=""/105, 0x69}, {&(0x7f0000003200)=""/104, 0x68}], 0x5, &(0x7f0000003300)=""/4096, 0x1000}}], 0x2, 0x120, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000004380)={r7, 0xaa11}, 0x8) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004400), r5) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x3c, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000004500)='}\x00', 0x2) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000004540)={0xffffffa6, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000004680)={r10, 0xfff, 0x28, 0x6, 0x1, 0x9}, &(0x7f00000046c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005840)={r11, 0x0, 0x7d, 0x13, &(0x7f0000004700)="43ed956722d15add70db932150768009f2538595094f63c482271d433baf4d23b436e0a798e22990abb4ae357da5c8adca088c97a78b8baaaecf91818b7fe6eb8b03e3909815423ce008cb48f3100e102a808a43a8b1d26ae8594c9752e4625dd0194e5d02362572d2c96d312d641a84302ea56af87a889db83e0b2109", &(0x7f0000004780)=""/19, 0x9, 0x0, 0x1000, 0x77, &(0x7f00000047c0)="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", &(0x7f00000057c0)="de8834e2a6d162812f7ab5079fb6670ea802ab64bf40107ff25b3676aa952f963e35f25fb76aed116d2b2aa800b9382f80aa59fb3ad11e9d6d37c873e0fcbced9a8096ac93c23ee1578281342def551ab5f31b113cdf0bdd131095e9bced463728496c5fa80294cc6b90f9f1aec6adb7f9dcea03c085f6", 0x3, 0x0, 0xffff2108}, 0x50) accept4$vsock_stream(r5, &(0x7f00000058c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000005900)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) 129.543281ms ago: executing program 34 (id=1175): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3, 0x3, 0xffffffff}}, 0x2e) sendmmsg(r0, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000018000000020000000180100002020642500000000002020f8ff00000000bfa1000068c0793471ea02128300000007010000f8ffffffb702000008000000b7030000000000008500000017000066888c9406350ea993009500"/113], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)=0xffd2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='ext4_request_inode\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xa0}}, 0x20000840) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x31, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getnexthop={0x54, 0x6a, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r10}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r7}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040004}, 0x8050) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f0000000640)={0x3}, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket(0x28, 0xa, 0x38c4) socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 84.317425ms ago: executing program 35 (id=1170): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x20000000, @remote, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000380)="5bf26fda", 0x4}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4089, 0xff9}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) 0s ago: executing program 36 (id=1177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x10e0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = accept4(r1, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r1, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x1, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0e0}, 0x4008000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) kernel console output (not intermixed with test programs): 3] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.572911][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.669691][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.682846][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.707292][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.718114][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.729156][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.776299][ T5184] Bluetooth: hci4: command tx timeout [ 81.776849][ T5881] Bluetooth: hci0: command tx timeout [ 81.799388][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.856216][ T5881] Bluetooth: hci2: command tx timeout [ 81.856533][ T5184] Bluetooth: hci1: command tx timeout [ 81.861659][ T5881] Bluetooth: hci3: command tx timeout [ 81.883445][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.905116][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.912389][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.940013][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.947195][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.961512][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.992172][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.999350][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.043541][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.050747][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.069905][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.149774][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.176353][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.189802][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.196933][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.227219][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.234359][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.293055][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.314171][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.334083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.341316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.402261][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.431514][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.438729][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.474657][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.481868][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.493940][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.501135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.661449][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.872131][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.929624][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.119944][ T5877] veth0_vlan: entered promiscuous mode [ 83.163450][ T5862] veth0_vlan: entered promiscuous mode [ 83.177009][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.228702][ T5877] veth1_vlan: entered promiscuous mode [ 83.260733][ T5862] veth1_vlan: entered promiscuous mode [ 83.274098][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.330077][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.339955][ T5863] veth0_vlan: entered promiscuous mode [ 83.398534][ T5863] veth1_vlan: entered promiscuous mode [ 83.433838][ T5862] veth0_macvtap: entered promiscuous mode [ 83.464757][ T5862] veth1_macvtap: entered promiscuous mode [ 83.498666][ T5872] veth0_vlan: entered promiscuous mode [ 83.515899][ T5877] veth0_macvtap: entered promiscuous mode [ 83.554513][ T5877] veth1_macvtap: entered promiscuous mode [ 83.566419][ T5872] veth1_vlan: entered promiscuous mode [ 83.591601][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.655368][ T5863] veth0_macvtap: entered promiscuous mode [ 83.693649][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.719750][ T5863] veth1_macvtap: entered promiscuous mode [ 83.730054][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.759654][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.767924][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.779532][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.808059][ T5964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.817454][ T5964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.855330][ T5872] veth0_macvtap: entered promiscuous mode [ 83.861415][ T5881] Bluetooth: hci4: command tx timeout [ 83.868273][ T5184] Bluetooth: hci0: command tx timeout [ 83.878495][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.885849][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.920363][ T5872] veth1_macvtap: entered promiscuous mode [ 83.927389][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.936560][ T5184] Bluetooth: hci1: command tx timeout [ 83.936691][ T5881] Bluetooth: hci2: command tx timeout [ 83.943470][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.948375][ T5881] Bluetooth: hci3: command tx timeout [ 83.962499][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.015206][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.047209][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.064551][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.105238][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.113063][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.122598][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162722][ T1157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.183628][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.183628][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.183680][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.211545][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.226638][ T5869] veth0_vlan: entered promiscuous mode [ 84.238770][ T5964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.251808][ T5964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.278069][ T5964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.290671][ T5964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.350889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.352302][ T5869] veth1_vlan: entered promiscuous mode [ 84.369331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.371706][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.390261][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.508501][ T5869] veth0_macvtap: entered promiscuous mode [ 84.557497][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.567393][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.593249][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.602165][ T5869] veth1_macvtap: entered promiscuous mode [ 84.663833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.707176][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.818705][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.826495][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.834219][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.855900][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.949145][ T5964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.975238][ T5964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.988227][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.034950][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.057338][ T5964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.087450][ T5964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.170576][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.216047][ T5996] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 85.250432][ T6001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 85.360001][ T5997] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 85.385727][ T5997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.398776][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.434943][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.473902][ T5997] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.622567][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.679144][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.823091][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11'. [ 85.935770][ T5881] Bluetooth: hci0: command tx timeout [ 85.945787][ T5881] Bluetooth: hci4: command tx timeout [ 86.016021][ T5881] Bluetooth: hci3: command tx timeout [ 86.016136][ T5184] Bluetooth: hci2: command tx timeout [ 86.022869][ T5881] Bluetooth: hci1: command tx timeout [ 86.387716][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 86.691784][ T6057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.18'. [ 87.869329][ T6099] netlink: 'syz.1.31': attribute type 3 has an invalid length. [ 88.091299][ T6109] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.192353][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.35'. [ 88.586064][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 88.905453][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.973926][ T6152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.042324][ T6159] netlink: 'syz.4.48': attribute type 11 has an invalid length. [ 89.065953][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.4.48'. [ 89.190214][ T6168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.49'. [ 89.463383][ T6171] tipc: Started in network mode [ 89.480158][ T6171] tipc: Node identity aee0eeb62d38, cluster identity 4711 [ 89.507236][ T6171] tipc: Enabled bearer , priority 0 [ 89.559185][ T6180] tipc: Enabling of bearer rejected, failed to enable media [ 89.652174][ T6171] tipc: Disabling bearer [ 89.737902][ T6187] sctp: [Deprecated]: syz.1.55 (pid 6187) Use of int in maxseg socket option. [ 89.737902][ T6187] Use struct sctp_assoc_value instead [ 89.786388][ T6186] sctp: [Deprecated]: syz.1.55 (pid 6186) Use of int in maxseg socket option. [ 89.786388][ T6186] Use struct sctp_assoc_value instead [ 89.930334][ T6196] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.58'. [ 89.984652][ T6196] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 90.040604][ T6196] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 90.451066][ T6223] __nla_validate_parse: 1 callbacks suppressed [ 90.451084][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 90.539005][ T6228] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 91.134083][ T6253] team0: Device gtp0 is of different type [ 91.210748][ T6256] netlink: 9 bytes leftover after parsing attributes in process `syz.2.73'. [ 91.231707][ T6256] gretap0: entered promiscuous mode [ 91.285324][ T6250] netlink: 5 bytes leftover after parsing attributes in process `syz.2.73'. [ 91.342047][ T6250] 0ªî{X¹¦: renamed from gretap0 [ 91.351818][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.77'. [ 91.374441][ T6250] 0ªî{X¹¦: left promiscuous mode [ 91.398195][ T6250] 0ªî{X¹¦: entered allmulticast mode [ 91.411446][ T6250] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 91.528775][ T6268] nbd: must specify a device to reconfigure [ 91.699666][ T6274] 8021q: VLANs not supported on lo [ 91.728684][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 91.743708][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 91.759647][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 91.925937][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 91.967292][ T6283] veth2: entered allmulticast mode [ 91.982505][ T6283] veth3: entered promiscuous mode [ 91.992071][ T6283] veth3: entered allmulticast mode [ 92.120961][ T9] cfg80211: failed to load regulatory.db [ 92.163125][ T6295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.89'. [ 92.192511][ T6294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.89'. [ 92.435230][ T6315] netlink: 'syz.2.93': attribute type 29 has an invalid length. [ 92.484171][ T6316] netlink: 'syz.2.93': attribute type 29 has an invalid length. [ 92.666863][ T6322] tipc: Enabled bearer , priority 0 [ 92.674572][ T6323] unsupported nlmsg_type 40 [ 92.685292][ T6322] syzkaller0: entered promiscuous mode [ 92.698836][ T6322] syzkaller0: entered allmulticast mode [ 92.732781][ T6322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 92.796620][ T6322] tipc: Resetting bearer [ 92.837290][ T6321] tipc: Resetting bearer [ 92.884202][ T6321] tipc: Disabling bearer [ 92.917297][ T6330] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 93.504341][ T6366] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 93.704314][ T6380] Zero length message leads to an empty skb [ 93.854213][ T6385] netlink: 'syz.2.116': attribute type 10 has an invalid length. [ 93.895339][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.924739][ T6385] bridge_slave_1: left allmulticast mode [ 93.965881][ T6385] bridge_slave_1: left promiscuous mode [ 93.971836][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.038884][ T6385] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 94.746259][ T6434] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 95.009589][ T6442] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 95.111288][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.152833][ T6442] bond0: (slave team0): Enslaving as an active interface with an up link [ 95.182341][ T6453] : renamed from hsr0 (while UP) [ 95.654188][ T6471] __nla_validate_parse: 10 callbacks suppressed [ 95.654210][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 95.670785][ T6471] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 95.679892][ T6471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.118684][ T6493] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.150'. [ 96.211783][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.151'. [ 96.472636][ T6516] netlink: 44 bytes leftover after parsing attributes in process `syz.1.153'. [ 96.525278][ T6516] netlink: 21 bytes leftover after parsing attributes in process `syz.1.153'. [ 96.538396][ T6516] netlink: 21 bytes leftover after parsing attributes in process `syz.1.153'. [ 96.680367][ T6526] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 96.832383][ T6526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.326733][ T6532] bond1: (slave veth3): Enslaving as an active interface with a down link [ 97.420048][ T6526] veth5: entered promiscuous mode [ 97.431362][ T6526] bond1: (slave veth5): Enslaving as an active interface with a down link [ 97.508557][ T6538] vlan2: entered allmulticast mode [ 97.524002][ T6538] bond1: entered allmulticast mode [ 97.545205][ T6538] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 97.769442][ T6582] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 97.805633][ T6582] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 97.854304][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.879620][ T6581] vcan0: entered allmulticast mode [ 97.991303][ T6593] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 98.011473][ T5922] IPVS: starting estimator thread 0... [ 98.070419][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 98.115796][ T6594] IPVS: using max 31 ests per chain, 74400 per kthread [ 98.288210][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 98.298988][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 98.393218][ T6609] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 98.603196][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 98.751113][ T6592] syz_tun: entered allmulticast mode [ 98.901193][ T6591] syz_tun: left allmulticast mode [ 99.385317][ T6627] ip6gretap0: entered promiscuous mode [ 99.467655][ T6627] netlink: 'syz.4.178': attribute type 2 has an invalid length. [ 99.727095][ T6644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.848707][ T6651] macvtap1: entered promiscuous mode [ 99.854060][ T6651] macvtap1: entered allmulticast mode [ 99.873491][ T6651] bond_slave_0: entered promiscuous mode [ 99.879629][ T6651] bond_slave_1: entered promiscuous mode [ 99.885373][ T6651] bridge_slave_1: entered promiscuous mode [ 99.904469][ T6651] bond0: entered allmulticast mode [ 99.913984][ T6651] bond_slave_0: entered allmulticast mode [ 99.923391][ T6651] bond_slave_1: entered allmulticast mode [ 99.934961][ T6651] bridge_slave_1: entered allmulticast mode [ 99.943300][ T6651] bond0: entered promiscuous mode [ 99.989871][ T6651] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.009095][ T6651] team0: Device macvtap1 failed to register rx_handler [ 100.051921][ T6651] bond0: left allmulticast mode [ 100.059632][ T6651] bond_slave_0: left allmulticast mode [ 100.065208][ T6651] bond_slave_1: left allmulticast mode [ 100.074758][ T6651] bridge_slave_1: left allmulticast mode [ 100.081484][ T6651] bond0: left promiscuous mode [ 100.095399][ T6651] bond_slave_0: left promiscuous mode [ 100.100940][ T6651] bond_slave_1: left promiscuous mode [ 100.106454][ T6651] bridge_slave_1: left promiscuous mode [ 100.156346][ T6656] tc_dump_action: action bad kind [ 100.163400][ T6665] block nbd0: Unsupported socket: shutdown callout must be supported. [ 100.389091][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.463780][ T6672] bridge_slave_1 (unregistering): left allmulticast mode [ 100.468608][ T6675] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 100.482457][ T6672] bridge_slave_1 (unregistering): left promiscuous mode [ 100.497424][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.627660][ T6675] team0: Port device geneve0 added [ 100.852263][ T6701] tipc: Started in network mode [ 100.867625][ T6701] tipc: Node identity 7a1eb66359fb, cluster identity 4711 [ 100.892124][ T6701] tipc: Enabled bearer , priority 0 [ 100.907244][ T6700] tipc: Enabling of bearer rejected, already enabled [ 100.921355][ T6707] tipc: Resetting bearer [ 100.934908][ T6699] tipc: Disabling bearer [ 101.439497][ T6735] netlink: 'syz.0.209': attribute type 83 has an invalid length. [ 101.784298][ T6752] __nla_validate_parse: 7 callbacks suppressed [ 101.784315][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 101.908174][ T6752] bridge0: entered promiscuous mode [ 101.913745][ T6752] macsec1: entered promiscuous mode [ 101.946052][ T6752] macsec1: entered allmulticast mode [ 101.964312][ T6752] bridge0: entered allmulticast mode [ 101.995280][ T6752] bridge0: port 3(macsec1) entered blocking state [ 102.016695][ T6752] bridge0: port 3(macsec1) entered disabled state [ 102.033698][ T6752] bridge0: left allmulticast mode [ 102.043680][ T6752] bridge0: left promiscuous mode [ 102.348454][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 102.990707][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 103.566459][ T6824] Unknown options in mask b7f2 [ 103.923614][ T6844] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 103.949627][ T6844] netlink: 'syz.4.245': attribute type 2 has an invalid length. [ 104.026627][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 104.390711][ T6860] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 104.629582][ T6879] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 104.637854][ T6874] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.661570][ T6879] sctp: [Deprecated]: syz.1.257 (pid 6879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.661570][ T6879] Use struct sctp_sack_info instead [ 104.725090][ T6881] syzkaller1: entered promiscuous mode [ 104.746270][ T6881] syzkaller1: entered allmulticast mode [ 104.766229][ T6879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.257'. [ 104.810451][ T6887] netlink: 'syz.2.259': attribute type 4 has an invalid length. [ 105.171101][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 105.331592][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 105.360322][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 105.411818][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 105.655144][ T6935] tipc: Failed to obtain node identity [ 105.665040][ T6935] tipc: Enabling of bearer rejected, failed to enable media [ 105.690477][ T6929] netlink: 44 bytes leftover after parsing attributes in process `syz.1.271'. [ 105.997732][ T6948] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 106.456761][ T6979] openvswitch: netlink: Unknown key attributes 2 [ 106.498717][ T6980] openvswitch: netlink: Unknown key attributes 2 [ 106.671726][ T6984] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 106.834817][ T6997] __nla_validate_parse: 3 callbacks suppressed [ 106.834836][ T6997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.292'. [ 106.964786][ T7002] lo: entered promiscuous mode [ 106.981838][ T7002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.747120][ T7035] netlink: 'syz.2.303': attribute type 18 has an invalid length. [ 107.760620][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 107.782858][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 107.811770][ T1102] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.821069][ T1102] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.840711][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 107.850917][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 107.870703][ T1102] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.885394][ T1102] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.902984][ T1102] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.912820][ T1102] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.925160][ T1102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.954662][ T1102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.001666][ T7041] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.307'. [ 108.023296][ T7044] openvswitch: netlink: IP tunnel TTL not specified. [ 108.040328][ T7041] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.307'. [ 108.043828][ T7043] netlink: 'syz.3.309': attribute type 16 has an invalid length. [ 108.237993][ T7055] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 108.259708][ T7054] netlink: 500 bytes leftover after parsing attributes in process `syz.1.311'. [ 108.506358][ T7073] 8021q: VLANs not supported on gre0 [ 108.634171][ T7078] netlink: 64 bytes leftover after parsing attributes in process `syz.1.318'. [ 108.767481][ T7083] netem: change failed [ 108.793474][ T7085] netem: change failed [ 108.817898][ T7086] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 108.836611][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 109.215764][ T7102] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 109.474339][ T7120] IPVS: Unknown mcast interface: [ 109.667300][ T7132] veth7: entered allmulticast mode [ 109.798709][ T7137] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 109.820516][ T7137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 109.895330][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.920804][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.560913][ T7176] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.786675][ T7186] netlink: 'syz.1.354': attribute type 5 has an invalid length. [ 110.804018][ T7186] netlink: 'syz.1.354': attribute type 6 has an invalid length. [ 110.851851][ T7191] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 110.865814][ T7187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.019568][ T7187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.953281][ T7233] __nla_validate_parse: 16 callbacks suppressed [ 112.953301][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 113.314630][ T7242] netlink: 'syz.2.375': attribute type 11 has an invalid length. [ 113.334611][ T7242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.375'. [ 113.348529][ T7243] syzkaller1: entered promiscuous mode [ 113.354310][ T7243] syzkaller1: entered allmulticast mode [ 113.382885][ T7248] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.438381][ T7242] tap0: tun_chr_ioctl cmd 1074025677 [ 113.445479][ T7242] tap0: linktype set to 65534 [ 113.557950][ T7250] bond0: entered promiscuous mode [ 113.563613][ T7250] bond_slave_0: entered promiscuous mode [ 113.571962][ T7250] bond_slave_1: entered promiscuous mode [ 113.582909][ T7250] batadv0: entered promiscuous mode [ 113.590645][ T7250] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 113.611369][ T7250] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 113.646599][ T7250] hsr1: entered allmulticast mode [ 113.662866][ T7250] bond0: entered allmulticast mode [ 113.678812][ T7250] bond_slave_0: entered allmulticast mode [ 113.687810][ T7250] bond_slave_1: entered allmulticast mode [ 113.693748][ T7250] batadv0: entered allmulticast mode [ 113.704766][ T7250] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 113.705904][ T5881] Bluetooth: hci4: command tx timeout [ 113.720038][ T7250] bond0: left promiscuous mode [ 113.726846][ T7250] bond_slave_0: left promiscuous mode [ 113.732772][ T7250] bond_slave_1: left promiscuous mode [ 113.741815][ T7250] batadv0: left promiscuous mode [ 113.899011][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 113.992880][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'. [ 114.289299][ T7289] netlink: 'syz.2.391': attribute type 3 has an invalid length. [ 114.732932][ T7314] netlink: 'syz.3.399': attribute type 32 has an invalid length. [ 114.828320][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 114.993491][ T7317] syzkaller1: entered promiscuous mode [ 115.005045][ T7317] syzkaller1: entered allmulticast mode [ 115.091065][ T7330] IPVS: Scheduler module ip_vs_sip not found [ 115.181520][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.405'. [ 115.397911][ T7344] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 115.428879][ T7344] netlink: 119 bytes leftover after parsing attributes in process `syz.2.408'. [ 116.029495][ T7373] tipc: Started in network mode [ 116.045801][ T7373] tipc: Node identity ca86bfa99c09, cluster identity 4711 [ 116.069862][ T7373] tipc: Enabled bearer , priority 0 [ 116.100334][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 116.130342][ T7380] syzkaller0: entered promiscuous mode [ 116.148511][ T7380] syzkaller0: entered allmulticast mode [ 116.173288][ T7379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.190851][ T7373] tipc: Resetting bearer [ 116.200629][ T7369] tipc: Resetting bearer [ 116.217362][ T7369] tipc: Disabling bearer [ 116.240686][ T7379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.311685][ T7379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.493962][ T7396] tap0: tun_chr_ioctl cmd 1074025678 [ 116.507104][ T7396] tap0: group set to 0 [ 116.592870][ T7408] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 116.918620][ T7427] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 116.974099][ T7430] netlink: 'syz.2.434': attribute type 11 has an invalid length. [ 117.149832][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 117.289572][ T7427] veth3: entered promiscuous mode [ 117.302994][ T7427] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 117.363532][ T7440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.439012][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 117.713927][ T7467] netlink: 'syz.0.443': attribute type 39 has an invalid length. [ 117.980415][ T7477] tipc: Enabled bearer , priority 0 [ 118.023905][ T7477] syzkaller0: entered promiscuous mode [ 118.048975][ T7477] syzkaller0: entered allmulticast mode [ 118.094244][ T7477] tipc: Resetting bearer [ 118.130224][ T7476] tipc: Resetting bearer [ 118.171503][ T7476] tipc: Disabling bearer [ 118.637745][ T7507] __nla_validate_parse: 3 callbacks suppressed [ 118.637764][ T7507] netlink: 404 bytes leftover after parsing attributes in process `syz.1.457'. [ 118.663675][ T7508] netlink: 'syz.2.455': attribute type 4 has an invalid length. [ 118.713157][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 118.759454][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 118.795787][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 119.013289][ T7526] netem: incorrect ge model size [ 119.033688][ T7526] netem: change failed [ 119.184949][ T7536] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 119.234788][ T7536] netlink: 244 bytes leftover after parsing attributes in process `syz.4.464'. [ 119.302269][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 119.317429][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 119.514307][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'. [ 119.528070][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'. [ 119.570466][ T7561] sctp: [Deprecated]: syz.4.470 (pid 7561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.570466][ T7561] Use struct sctp_sack_info instead [ 119.614690][ T7562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 119.681124][ T7555] sctp: [Deprecated]: syz.0.472 (pid 7555) Use of int in maxseg socket option. [ 119.681124][ T7555] Use struct sctp_assoc_value instead [ 119.886525][ T7572] pim6reg1: entered promiscuous mode [ 119.891958][ T7572] pim6reg1: entered allmulticast mode [ 119.908535][ T7574] syz.2.478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.932792][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 119.932818][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.932840][ T7574] Call Trace: [ 119.932848][ T7574] [ 119.932856][ T7574] dump_stack_lvl+0x189/0x250 [ 119.932892][ T7574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.932913][ T7574] ? __pfx__printk+0x10/0x10 [ 119.932935][ T7574] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.932956][ T7574] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.932977][ T7574] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 119.933000][ T7574] warn_alloc+0x214/0x310 [ 119.933027][ T7574] ? stack_depot_save_flags+0x41b/0x860 [ 119.933058][ T7574] ? __pfx_warn_alloc+0x10/0x10 [ 119.933085][ T7574] ? kasan_save_track+0x4f/0x80 [ 119.933109][ T7574] ? xskq_create+0x56/0x170 [ 119.933124][ T7574] ? xsk_init_queue+0xb0/0x110 [ 119.933150][ T7574] ? xsk_setsockopt+0x4dc/0x8d0 [ 119.933182][ T7574] ? do_sock_setsockopt+0x179/0x1b0 [ 119.933203][ T7574] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 119.933224][ T7574] ? do_syscall_64+0xfa/0x3b0 [ 119.933242][ T7574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.933268][ T7574] __vmalloc_node_range_noprof+0x125/0x12f0 [ 119.933322][ T7574] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.933355][ T7574] ? __kasan_kmalloc+0x93/0xb0 [ 119.933383][ T7574] vmalloc_user_noprof+0xad/0xf0 [ 119.933410][ T7574] ? xskq_create+0xbf/0x170 [ 119.933433][ T7574] xskq_create+0xbf/0x170 [ 119.933454][ T7574] xsk_init_queue+0xb0/0x110 [ 119.933484][ T7574] xsk_setsockopt+0x4dc/0x8d0 [ 119.933514][ T7574] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.933541][ T7574] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.933571][ T7574] ? aa_sock_opt_perm+0xff/0x1b0 [ 119.933592][ T7574] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 119.933611][ T7574] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.933639][ T7574] do_sock_setsockopt+0x179/0x1b0 [ 119.933665][ T7574] __x64_sys_setsockopt+0x13f/0x1b0 [ 119.933693][ T7574] do_syscall_64+0xfa/0x3b0 [ 119.933710][ T7574] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.933728][ T7574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.933746][ T7574] ? clear_bhb_loop+0x60/0xb0 [ 119.933767][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.933785][ T7574] RIP: 0033:0x7f89a398eba9 [ 119.933811][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.933826][ T7574] RSP: 002b:00007f89a47c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.933846][ T7574] RAX: ffffffffffffffda RBX: 00007f89a3bd5fa0 RCX: 00007f89a398eba9 [ 119.933860][ T7574] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 119.933871][ T7574] RBP: 00007f89a3a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 119.933883][ T7574] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.933895][ T7574] R13: 00007f89a3bd6038 R14: 00007f89a3bd5fa0 R15: 00007ffdfcc79618 [ 119.933926][ T7574] [ 119.934502][ T7574] Mem-Info: [ 120.239495][ T7574] active_anon:5812 inactive_anon:0 isolated_anon:0 [ 120.239495][ T7574] active_file:2441 inactive_file:39869 isolated_file:0 [ 120.239495][ T7574] unevictable:769 dirty:46 writeback:0 [ 120.239495][ T7574] slab_reclaimable:10611 slab_unreclaimable:97111 [ 120.239495][ T7574] mapped:29115 shmem:1341 pagetables:1173 [ 120.239495][ T7574] sec_pagetables:0 bounce:0 [ 120.239495][ T7574] kernel_misc_reclaimable:0 [ 120.239495][ T7574] free:1329803 free_pcp:15298 free_cma:0 [ 120.286456][ T7574] Node 0 active_anon:23164kB inactive_anon:0kB active_file:9764kB inactive_file:159280kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:116540kB dirty:184kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12336kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.318111][ T7586] bond2: entered promiscuous mode [ 120.324559][ T7586] bond2: entered allmulticast mode [ 120.334492][ T7586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.346697][ T7574] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.377084][ T7574] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.406492][ T7574] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 120.412282][ T7574] Node 0 DMA32 free:1416056kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22916kB inactive_anon:0kB active_file:9764kB inactive_file:157704kB unevictable:1540kB writepending:184kB present:3129332kB managed:2557416kB mlocked:4kB bounce:0kB free_pcp:41544kB local_pcp:20264kB free_cma:0kB [ 120.445378][ T7574] lowmem_reserve[]: 0 0 1 1 1 [ 120.450196][ T7574] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 120.479314][ T7574] lowmem_reserve[]: 0 0 0 0 0 [ 120.484069][ T7574] Node 1 Normal free:3887720kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20356kB local_pcp:10148kB free_cma:0kB [ 120.527421][ T7584] nbd0: detected capacity change from 0 to 127 [ 120.541919][ T7574] lowmem_reserve[]: 0 0 0 0 0 [ 120.548942][ T7574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.565324][ T7574] Node 0 DMA32: 638*4kB (ME) 560*8kB (UME) 300*16kB (UME) 240*32kB (UME) 77*64kB (UME) 56*128kB (UM) 26*256kB (UME) 7*512kB (UM) 10*1024kB (UME) 6*2048kB (M) 330*4096kB (M) = 1416056kB [ 120.589087][ T7574] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 120.606440][ T7583] nbd1: detected capacity change from 0 to 127 [ 120.614704][ T5881] block nbd0: Receive control failed (result -104) [ 120.623278][ T5184] block nbd1: Receive control failed (result -32) [ 120.636704][ T5884] block nbd1: Dead connection, failed to find a fallback [ 120.644140][ T5884] block nbd1: shutting down sockets [ 120.652263][ T7574] Node 1 Normal: 196*4kB (UE) 47*8kB (UME) 48*16kB (UME) 75*32kB (UME) 32*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3887720kB [ 120.672996][ T7574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.686285][ T7574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.695753][ T7574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.705310][ T7574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.714708][ T7574] 43664 total pagecache pages [ 120.719431][ T7574] 0 pages in swap cache [ 120.723591][ T7574] Free swap = 124996kB [ 120.762300][ T5884] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.783824][ T7574] Total swap = 124996kB [ 120.804499][ T7574] 2097051 pages RAM [ 120.810130][ T5884] Buffer I/O error on dev nbd1, logical block 0, async page read [ 120.830059][ T7574] 0 pages HighMem/MovableOnly [ 120.834775][ T7574] 425671 pages reserved [ 120.843403][ T5884] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.863363][ T7595] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 120.871257][ T5884] Buffer I/O error on dev nbd1, logical block 1, async page read [ 120.871462][ T5884] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.871485][ T5884] Buffer I/O error on dev nbd1, logical block 2, async page read [ 120.886147][ T7574] 0 pages cma reserved [ 120.921487][ T5884] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.950744][ T5884] Buffer I/O error on dev nbd1, logical block 3, async page read [ 120.968488][ T7595] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 120.998316][ T5884] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.030741][ T5884] Buffer I/O error on dev nbd1, logical block 0, async page read [ 121.065847][ T5884] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.091230][ T5884] Buffer I/O error on dev nbd1, logical block 1, async page read [ 121.146208][ T5884] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.165470][ T5884] Buffer I/O error on dev nbd1, logical block 2, async page read [ 121.188931][ T5884] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.224251][ T5884] Buffer I/O error on dev nbd1, logical block 3, async page read [ 121.252300][ T5884] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.286212][ T5884] Buffer I/O error on dev nbd1, logical block 0, async page read [ 121.290011][ T7611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.294146][ T5884] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.353048][ T5884] Buffer I/O error on dev nbd1, logical block 1, async page read [ 121.389193][ T5884] ldm_validate_partition_table(): Disk read failed. [ 121.418175][ T5884] Dev nbd1: unable to read RDB block 0 [ 121.436109][ T5884] nbd1: unable to read partition table [ 121.463355][ T5884] ldm_validate_partition_table(): Disk read failed. [ 121.482233][ T5884] Dev nbd1: unable to read RDB block 0 [ 121.490881][ T5884] nbd1: unable to read partition table [ 122.463730][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.498333][ T6560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.520806][ T6560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.528936][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.806219][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.832819][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.862207][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.905385][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.168398][ T7709] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 123.296423][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.350297][ T7709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.456604][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.456839][ T7716] bond2: (slave gretap1): making interface the new active one [ 123.503723][ T7716] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 123.538207][ T7726] bridge_slave_0: left allmulticast mode [ 123.557343][ T7726] bridge_slave_0: left promiscuous mode [ 123.569078][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.611364][ T7726] bridge_slave_1: left allmulticast mode [ 123.625194][ T7726] bridge_slave_1: left promiscuous mode [ 123.640036][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.683774][ T7736] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 123.699603][ T7726] bond0: (slave bond_slave_0): Releasing backup interface [ 123.717862][ T7726] bond0: (slave bond_slave_1): Releasing backup interface [ 123.749814][ T7726] team0: Port device team_slave_0 removed [ 123.768771][ T7726] team0: Port device team_slave_1 removed [ 123.778409][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.787474][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.802213][ T7742] __nla_validate_parse: 8 callbacks suppressed [ 123.802232][ T7742] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.525'. [ 123.836414][ T7726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.844021][ T7726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.009316][ T7744] geneve2: entered promiscuous mode [ 124.019553][ T7744] geneve2: entered allmulticast mode [ 124.054043][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.066792][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.093041][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 124.132996][ T7755] netlink: 'syz.2.529': attribute type 7 has an invalid length. [ 124.182554][ T7746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.229450][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 124.240781][ T7761] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.248933][ T7760] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.273495][ T7755] : entered promiscuous mode [ 124.663029][ T7778] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.537'. [ 124.848727][ T7794] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.044826][ T7807] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 125.239197][ T7812] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 125.298448][ T7812] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.873175][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 125.916311][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 125.968014][ T7746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.988805][ T7746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.026391][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 126.073406][ T7841] netlink: 'syz.4.553': attribute type 29 has an invalid length. [ 126.082677][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 126.160966][ T7746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.219794][ T7746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.272866][ T7849] veth0: entered promiscuous mode [ 126.285130][ T7849] veth0: left promiscuous mode [ 126.372367][ T7746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.383868][ T7746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 126.403785][ T7855] netlink: 'syz.2.561': attribute type 4 has an invalid length. [ 126.495712][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.621712][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 126.638968][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.678735][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 126.687735][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.744777][ T6560] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 126.772924][ T6560] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 126.840462][ T6554] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 126.877623][ T6554] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.000188][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 127.043438][ T7879] netlink: 7 bytes leftover after parsing attributes in process `syz.0.566'. [ 127.465039][ T7908] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 127.556399][ T7908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.899599][ T7931] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 127.911781][ T7931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.240152][ T7942] team0: Device ip6gre1 is of different type [ 128.622794][ T7968] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 128.779918][ T7972] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 128.803485][ T7972] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 128.872998][ T7977] __nla_validate_parse: 5 callbacks suppressed [ 128.873017][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.598'. [ 128.900666][ T7978] netlink: 'syz.3.599': attribute type 21 has an invalid length. [ 128.925452][ T7978] netlink: 'syz.3.599': attribute type 22 has an invalid length. [ 128.926047][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 128.956137][ T7978] netlink: 'syz.3.599': attribute type 23 has an invalid length. [ 128.965426][ T7978] netlink: 'syz.3.599': attribute type 25 has an invalid length. [ 129.003404][ T7978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.599'. [ 129.039371][ T7983] hsr_slave_0 (unregistering): left promiscuous mode [ 129.133617][ T7992] netlink: 'syz.0.602': attribute type 8 has an invalid length. [ 129.288020][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.604'. [ 129.351031][ T8002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.698000][ T8019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.612'. [ 130.263058][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 130.333779][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 130.522408][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 130.530472][ T8066] syzkaller0: entered promiscuous mode [ 130.537407][ T8066] syzkaller0: entered allmulticast mode [ 130.560973][ T8065] team_slave_0: entered promiscuous mode [ 130.567113][ T8065] team_slave_1: entered promiscuous mode [ 130.573651][ T8065] geneve0: entered promiscuous mode [ 130.745402][ T8070] syz.4.628 (8070) used greatest stack depth: 17864 bytes left [ 130.814713][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'. [ 130.826235][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 131.049071][ T8089] netlink: 'syz.2.635': attribute type 11 has an invalid length. [ 131.075848][ T8089] netlink: 'syz.2.635': attribute type 11 has an invalid length. [ 131.113052][ T8097] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 131.160784][ T8097] bond3: entered promiscuous mode [ 131.166410][ T8097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.224922][ T8104] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 131.278637][ T8111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.464071][ T8122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.698916][ T8137] C: renamed from team_slave_0 (while UP) [ 131.711047][ T8137] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 131.721779][ T8137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 131.819852][ T8141] ipvlan0: entered promiscuous mode [ 131.825103][ T8141] ipvlan0: entered allmulticast mode [ 131.853092][ T8141] veth0_vlan: entered allmulticast mode [ 132.150743][ T8161] netlink: 'syz.2.662': attribute type 13 has an invalid length. [ 133.061210][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.363019][ T8157] kthread_run failed with err -4 [ 133.379108][ T8161] veth0_macvtap: left promiscuous mode [ 133.384792][ T8161] macvtap0: entered allmulticast mode [ 133.399665][ T8161] macvtap0: refused to change device tx_queue_len [ 133.619582][ T8183] syzkaller1: entered promiscuous mode [ 133.625105][ T8183] syzkaller1: entered allmulticast mode [ 133.813230][ T8197] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 133.938860][ T8204] __nla_validate_parse: 5 callbacks suppressed [ 133.938886][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.672'. [ 134.335707][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.336138][ T8235] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 134.586353][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'. [ 134.779504][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.688'. [ 134.945125][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 134.945192][ T8274] netlink: 248 bytes leftover after parsing attributes in process `syz.4.690'. [ 135.178428][ T8287] netlink: 'syz.0.696': attribute type 21 has an invalid length. [ 135.197046][ T8290] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 135.207822][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 135.308847][ T1102] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.382411][ T1102] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.529394][ T8302] netlink: 'syz.1.699': attribute type 2 has an invalid length. [ 135.532209][ T1102] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.580923][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 135.604640][ T1102] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.634150][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 135.650084][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 135.658561][ T8310] netlink: 92 bytes leftover after parsing attributes in process `syz.0.701'. [ 135.709004][ T8315] netlink: 596 bytes leftover after parsing attributes in process `syz.3.704'. [ 135.905188][ T8321] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 135.919634][ T8321] netlink: 'syz.3.707': attribute type 2 has an invalid length. [ 135.934667][ T8321] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 135.949680][ T8321] netlink: 'syz.3.707': attribute type 2 has an invalid length. [ 135.978687][ T8302] infiniband syz2: set active [ 135.984277][ T8302] infiniband syz2: added vxcan1 [ 136.028006][ T43] vxcan1 speed is unknown, defaulting to 1000 [ 136.056416][ T8302] RDS/IB: syz2: added [ 136.061069][ T8302] smc: adding ib device syz2 with port count 1 [ 136.067692][ T8302] smc: ib device syz2 port 1 has pnetid [ 136.127672][ T43] vxcan1 speed is unknown, defaulting to 1000 [ 136.153676][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 136.305388][ T8335] netlink: 192 bytes leftover after parsing attributes in process `syz.3.710'. [ 136.494664][ T8341] can: request_module (can-proto-0) failed. [ 136.572222][ T8348] vlan2: entered promiscuous mode [ 136.593216][ T8348] bridge0: entered promiscuous mode [ 136.712250][ T8357] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.812240][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 136.841878][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 137.080265][ T8376] bridge_slave_0: left allmulticast mode [ 137.095580][ T8376] bridge_slave_0: left promiscuous mode [ 137.111406][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.210432][ T8376] bridge_slave_1: left allmulticast mode [ 137.225580][ T8376] bridge_slave_1: left promiscuous mode [ 137.242224][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.293008][ T8376] bond0: (slave bond_slave_0): Releasing backup interface [ 137.334541][ T8376] bond0: (slave bond_slave_1): Releasing backup interface [ 137.383093][ T8376] team_slave_0: left promiscuous mode [ 137.414546][ T8376] team0: Port device team_slave_0 removed [ 137.423485][ T8376] team_slave_1: left promiscuous mode [ 137.450580][ T8376] team0: Port device team_slave_1 removed [ 137.458066][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.466140][ T8376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.475103][ T8376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.483002][ T8376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.502650][ T8376] geneve0: left promiscuous mode [ 137.538177][ T8376] team0: Port device geneve0 removed [ 137.552542][ T8376] bond0: (slave wlan1): Releasing backup interface [ 137.598867][ T8376] bond1: (slave veth3): Releasing backup interface [ 137.682778][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 138.172584][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 138.262090][ T8414] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 138.304416][ T8414] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 138.546713][ T8302] vxcan1 speed is unknown, defaulting to 1000 [ 139.090324][ T8445] team0: Device wireguard0 is of different type [ 139.165159][ T9] IPVS: starting estimator thread 0... [ 139.265639][ T8459] IPVS: using max 27 ests per chain, 64800 per kthread [ 139.434852][ T8473] __nla_validate_parse: 6 callbacks suppressed [ 139.434870][ T8473] netlink: 256 bytes leftover after parsing attributes in process `syz.3.758'. [ 139.571431][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.602178][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.613923][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.629567][ T8489] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.763'. [ 139.657693][ T8485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.672473][ T8489] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.763'. [ 139.701033][ T8485] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.784378][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.803334][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.829769][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.851445][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 139.877635][ T8485] hsr0 speed is unknown, defaulting to 1000 [ 140.037848][ T8522] dvmrp1: entered allmulticast mode [ 140.144805][ T8520] syzkaller0: entered promiscuous mode [ 140.155762][ T8520] syzkaller0: entered allmulticast mode [ 140.189458][ T8527] netlink: 45 bytes leftover after parsing attributes in process `syz.1.775'. [ 140.409940][ T8534] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 141.467173][ T8529] veth5: entered allmulticast mode [ 141.670887][ T8558] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.782'. [ 141.850352][ T8575] Bluetooth: MGMT ver 1.23 [ 141.965079][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 141.995200][ T43] IPVS: starting estimator thread 0... [ 142.065477][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 142.088204][ T8586] IPVS: using max 25 ests per chain, 60000 per kthread [ 142.329989][ T8607] netlink: 'syz.0.796': attribute type 21 has an invalid length. [ 142.360744][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 142.369837][ T8607] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 142.414533][ T8613] netlink: 44 bytes leftover after parsing attributes in process `syz.2.798'. [ 142.612540][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.621848][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.634818][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 142.635604][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.654784][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.998651][ T8635] netlink: 'syz.1.808': attribute type 21 has an invalid length. [ 143.035745][ T8635] netlink: 'syz.1.808': attribute type 4 has an invalid length. [ 143.043915][ T8635] netlink: 'syz.1.808': attribute type 5 has an invalid length. [ 143.063696][ T8635] netlink: 'syz.1.808': attribute type 21 has an invalid length. [ 143.085651][ T8635] netlink: 'syz.1.808': attribute type 4 has an invalid length. [ 143.103593][ T8635] netlink: 'syz.1.808': attribute type 5 has an invalid length. [ 143.337013][ T8653] netlink: 'syz.0.815': attribute type 4 has an invalid length. [ 143.822896][ T8693] : left promiscuous mode [ 143.954994][ T8694] bond0: entered promiscuous mode [ 144.175292][ T8718] sock: sock_set_timeout: `syz.1.830' (pid 8718) tries to set negative timeout [ 144.532985][ T8749] __nla_validate_parse: 12 callbacks suppressed [ 144.533001][ T8749] netlink: 180 bytes leftover after parsing attributes in process `syz.3.838'. [ 144.556429][ T8748] netlink: 180 bytes leftover after parsing attributes in process `syz.3.838'. [ 144.563153][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 144.620504][ T8752] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.829893][ T8755] tipc: Started in network mode [ 144.835272][ T8755] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 144.843106][ T8755] tipc: Enabled bearer , priority 12 [ 144.953748][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.846'. [ 145.116906][ T1102] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.136681][ T1102] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.156323][ T1102] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.165268][ T1102] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.191375][ T1102] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.200816][ T1102] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.224586][ T1102] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.234671][ T1102] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.314071][ T8788] netlink: 500 bytes leftover after parsing attributes in process `syz.4.849'. [ 145.639021][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 145.846414][ T9] tipc: Node number set to 10070698 [ 145.989039][ T8813] validate_nla: 4 callbacks suppressed [ 145.989057][ T8813] netlink: 'syz.4.856': attribute type 8 has an invalid length. [ 146.029469][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 146.034819][ T8817] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 146.450831][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.863'. [ 146.717392][ T8822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.721793][ T8832] IPVS: starting estimator thread 0... [ 146.845665][ T8872] IPVS: using max 29 ests per chain, 69600 per kthread [ 147.242895][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 147.334969][ T8903] macvlan0: entered allmulticast mode [ 147.341753][ T8903] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 147.361867][ T8905] RDS: rds_bind could not find a transport for ::ffff:172.30.2.1, load rds_tcp or rds_rdma? [ 147.503943][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 148.094927][ T8953] netlink: 'syz.1.895': attribute type 21 has an invalid length. [ 148.122723][ T8953] netlink: 'syz.1.895': attribute type 4 has an invalid length. [ 148.139424][ T8953] netlink: 'syz.1.895': attribute type 5 has an invalid length. [ 148.168922][ T8959] IPVS: Error connecting to the multicast addr [ 148.193352][ T8961] netlink: 'syz.1.895': attribute type 21 has an invalid length. [ 148.201876][ T8961] netlink: 'syz.1.895': attribute type 4 has an invalid length. [ 148.226042][ T8961] netlink: 'syz.1.895': attribute type 5 has an invalid length. [ 148.384462][ T8974] netlink: 'syz.0.900': attribute type 6 has an invalid length. [ 148.595789][ T8983] Bluetooth: MGMT ver 1.23 [ 148.669070][ T8993] netlink: 'syz.2.908': attribute type 16 has an invalid length. [ 148.721701][ T8996] netlink: 'syz.2.908': attribute type 5 has an invalid length. [ 148.727555][ T8993] lo: left promiscuous mode [ 148.768224][ T8993] 0ªî{X¹¦: left allmulticast mode [ 149.000814][ T8993] veth0_macvtap: entered promiscuous mode [ 149.012884][ T8993] veth0_macvtap: entered allmulticast mode [ 149.021286][ T8993] macvtap0: left allmulticast mode [ 149.031188][ T8993] veth0_macvtap: left allmulticast mode [ 149.092072][ T8993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.110126][ T8993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.122999][ T8993] veth5: left allmulticast mode [ 149.132888][ T8993] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 149.157962][ T9015] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 149.428146][ T9032] tipc: Enabled bearer , priority 0 [ 149.437687][ T9033] tipc: Enabling of bearer rejected, already enabled [ 149.484220][ T9032] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 149.494005][ T9032] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 149.511522][ T9032] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.545813][ T9032] tipc: Resetting bearer [ 149.777620][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.786078][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.806015][ T8832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.829214][ T9049] __nla_validate_parse: 16 callbacks suppressed [ 149.829233][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 149.981986][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 150.125749][ T9064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.928'. [ 150.158934][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'. [ 150.169913][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 150.235957][ T8831] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.335783][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.437894][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 150.496000][ T8832] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.526576][ T5922] tipc: Node number set to 2212032182 [ 150.572067][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 150.666635][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 150.824298][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 150.865131][ T9099] netlink: 22 bytes leftover after parsing attributes in process `syz.0.941'. [ 150.979388][ T1074] block nbd0: Possible stuck request ffff888024eb0000: control (read@0,1024B). Runtime 30 seconds [ 150.991543][ T1074] block nbd0: Possible stuck request ffff888024eb01c0: control (read@1024,1024B). Runtime 30 seconds [ 151.003100][ T1074] block nbd0: Possible stuck request ffff888024eb0380: control (read@2048,1024B). Runtime 30 seconds [ 151.019555][ T1074] block nbd0: Possible stuck request ffff888024eb0540: control (read@3072,1024B). Runtime 30 seconds [ 151.634402][ T9143] nftables ruleset with unbound set [ 151.863334][ T9154] xfrm1: entered promiscuous mode [ 151.891536][ T9154] xfrm1: entered allmulticast mode [ 153.661843][ T9256] syzkaller0: entered allmulticast mode [ 153.695822][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.252859][ T6560] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 154.271156][ T9283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.280606][ T9296] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 154.374265][ T9304] validate_nla: 2 callbacks suppressed [ 154.374287][ T9304] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 154.461250][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.483659][ T9304] batadv0: entered promiscuous mode [ 154.498406][ T9304] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.042619][ T9338] openvswitch: netlink: Missing key (keys=40, expected=100) [ 155.300621][ T9347] __nla_validate_parse: 15 callbacks suppressed [ 155.300640][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 155.502784][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1022'. [ 155.558570][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1024'. [ 155.662167][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 155.722284][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 155.796042][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 155.830693][ T9371] gtp0: entered promiscuous mode [ 155.850923][ T9371] gtp0: entered allmulticast mode [ 155.863045][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 155.884419][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 155.885382][ T9376] tipc: Enabled bearer , priority 0 [ 155.902388][ T9374] syzkaller0: entered promiscuous mode [ 155.911136][ T9374] syzkaller0: entered allmulticast mode [ 155.942894][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 155.954924][ T9373] tipc: Resetting bearer [ 155.973753][ T9373] tipc: Disabling bearer [ 156.243059][ T9403] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 156.243065][ T9402] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 156.305071][ T9403] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 156.535268][ T9415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.700010][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 156.859930][ T9443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.202160][ T9464] ipvlan0: entered promiscuous mode [ 157.212103][ T9467] veth1_to_bond: entered allmulticast mode [ 157.328694][ T9467] bond0: (slave bond_slave_1): Releasing backup interface [ 157.372480][ T9467] veth1_to_bond (unregistering): left allmulticast mode [ 159.005202][ T9549] netlink: 'syz.4.1082': attribute type 25 has an invalid length. [ 159.013226][ T9548] pim6reg1: entered promiscuous mode [ 159.013248][ T9548] pim6reg1: entered allmulticast mode [ 159.027540][ T9548] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 159.035717][ T9548] nbd: error processing sock list [ 159.040875][ T9548] block nbd2: shutting down sockets [ 159.358430][ T9576] netlink: 'syz.1.1089': attribute type 13 has an invalid length. [ 159.379548][ T9576] veth0_macvtap: left promiscuous mode [ 159.395746][ T9576] macvtap0: entered allmulticast mode [ 159.422551][ T9576] macvtap0: refused to change device tx_queue_len [ 159.531441][ T9591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 159.685154][ T9605] veth0_to_bridge: entered promiscuous mode [ 159.831170][ T9610] bond5 (unregistering): Released all slaves [ 159.978996][ T9603] veth0_to_bridge: left promiscuous mode [ 160.083261][ T6565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.118696][ T6565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.277095][ T6565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.292376][ T6565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.440662][ T6565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.464946][ T6565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.511805][ T9638] netlink: 'syz.3.1106': attribute type 15 has an invalid length. [ 160.537365][ T9638] __nla_validate_parse: 6 callbacks suppressed [ 160.537384][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 160.603514][ T6565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.648365][ T6565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.704224][ T6560] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 160.707161][ T9638] netlink: 'syz.3.1106': attribute type 15 has an invalid length. [ 160.721376][ T6560] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 160.752457][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 160.769095][ T6560] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 160.789461][ T6560] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 160.848747][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 161.046691][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 161.067306][ T6565] bridge_slave_0: left allmulticast mode [ 161.083244][ T6565] bridge_slave_0: left promiscuous mode [ 161.094926][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.107228][ T9666] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 161.115418][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.124518][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.140312][ T9668] netlink: 'syz.0.1114': attribute type 7 has an invalid length. [ 161.142908][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.157540][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.165190][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.450064][ T6565] dvmrp1 (unregistering): left allmulticast mode [ 161.709948][ T6565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.721403][ T6565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.732444][ T6565] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 161.743891][ T6565] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 161.767080][ T6565] bond0 (unregistering): Released all slaves [ 161.858536][ T6565] bond1 (unregistering): Released all slaves [ 161.950052][ T6565] bond2 (unregistering): Released all slaves [ 162.043180][ T6565] bond3 (unregistering): Released all slaves [ 162.081703][ T9668] : entered promiscuous mode [ 162.121835][ T9677] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 162.162172][ T6565] tipc: Disabling bearer [ 162.253518][ T6565] tipc: Left network mode [ 162.268122][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 162.311488][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 162.346190][ T9688] netlink: 'syz.1.1121': attribute type 12 has an invalid length. [ 162.362950][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 162.363443][ T9682] !€ÿ: renamed from bond_slave_0 (while UP) [ 162.405906][ T9689] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 162.429384][ T9664] vxcan1 speed is unknown, defaulting to 1000 [ 162.770538][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 162.793683][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1124'. [ 162.817079][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1124'. [ 163.015652][ T9664] hsr0 speed is unknown, defaulting to 1000 [ 163.055206][ T9720] nbd: nbd1 already in use [ 163.214622][ T9719] team0: Device vti0 is up. Set it down before adding it as a team port [ 163.216429][ T5184] Bluetooth: hci1: command tx timeout [ 163.556186][ T6565] hsr_slave_0: left promiscuous mode [ 163.571607][ T6565] hsr_slave_1: left promiscuous mode [ 163.589988][ T6565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.603451][ T6565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.659783][ T6565] veth1_macvtap: left promiscuous mode [ 163.676212][ T6565] veth0_macvtap: left promiscuous mode [ 163.688118][ T6565] veth1_vlan: left promiscuous mode [ 163.709409][ T6565] veth0_vlan: left promiscuous mode [ 164.306840][ T6565] team0 (unregistering): Port device team_slave_1 removed [ 164.348962][ T6565] team0 (unregistering): Port device team_slave_0 removed [ 164.883142][ T6565] vcan0 (unregistering): left allmulticast mode [ 165.295733][ T5184] Bluetooth: hci1: command tx timeout [ 165.343541][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 165.508962][ T9804] team0: Device wireguard0 is of different type [ 165.571948][ T9807] __nla_validate_parse: 4 callbacks suppressed [ 165.571967][ T9807] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1149'. [ 165.590696][ T9806] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1149'. [ 165.762623][ T6565] IPVS: stop unused estimator thread 0... [ 165.903359][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.914112][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.921973][ T9664] bridge_slave_0: entered allmulticast mode [ 165.930306][ T9664] bridge_slave_0: entered promiscuous mode [ 165.940200][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.948015][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.955370][ T9664] bridge_slave_1: entered allmulticast mode [ 165.963952][ T9664] bridge_slave_1: entered promiscuous mode [ 165.986852][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.131782][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.144932][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.223224][ T9664] team0: Port device team_slave_0 added [ 166.243803][ T9664] team0: Port device team_slave_1 added [ 166.396957][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.404084][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.459671][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.475301][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1161'. [ 166.486757][ T9847] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 166.503537][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.518901][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.550301][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.600280][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 166.720263][ T9664] hsr_slave_0: entered promiscuous mode [ 166.738130][ T9664] hsr_slave_1: entered promiscuous mode [ 166.749203][ T9664] debugfs: 'hsr0' already exists in 'hsr' [ 166.756481][ T9664] Cannot create hsr debugfs directory [ 166.765269][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 167.015739][ T9872] nbd: must specify a size in bytes for the device [ 167.291034][ T9889] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1175'. [ 167.375837][ T5184] Bluetooth: hci1: command tx timeout [ 169.455671][ T5184] Bluetooth: hci1: command tx timeout [ 180.415811][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.065713][ T1074] block nbd0: Possible stuck request ffff888024eb0000: control (read@0,1024B). Runtime 60 seconds [ 181.076391][ T1074] block nbd0: Possible stuck request ffff888024eb01c0: control (read@1024,1024B). Runtime 60 seconds [ 181.087935][ T1074] block nbd0: Possible stuck request ffff888024eb0380: control (read@2048,1024B). Runtime 60 seconds [ 181.098952][ T1074] block nbd0: Possible stuck request ffff888024eb0540: control (read@3072,1024B). Runtime 60 seconds [ 182.903128][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.915794][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.925852][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.934342][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.945719][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.996367][ T5184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.006440][ T5184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.019806][ T9911] vxcan1 speed is unknown, defaulting to 1000 [ 183.032394][ T5184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.041314][ T5864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.050477][ T5184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.059045][ T5184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.059751][ T5864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.075115][ T5864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.083182][ T5864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.107686][ T5864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.147217][ T5864] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 183.157169][ T5864] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 183.176793][ T5864] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 183.197265][ T5864] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 183.209665][ T5864] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 183.290434][ T9911] hsr0 speed is unknown, defaulting to 1000 [ 183.290459][ T9915] vxcan1 speed is unknown, defaulting to 1000 [ 183.507243][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 183.540577][ T9913] vxcan1 speed is unknown, defaulting to 1000 [ 183.556291][ T9915] hsr0 speed is unknown, defaulting to 1000 [ 183.675396][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.682742][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.690463][ T9911] bridge_slave_0: entered allmulticast mode [ 183.698822][ T9911] bridge_slave_0: entered promiscuous mode [ 183.712239][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.719575][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.726863][ T9911] bridge_slave_1: entered allmulticast mode [ 183.735044][ T9911] bridge_slave_1: entered promiscuous mode [ 183.805373][ T9913] hsr0 speed is unknown, defaulting to 1000 [ 183.810774][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.826982][ T9917] vxcan1 speed is unknown, defaulting to 1000 [ 183.840940][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.913863][ T9911] team0: Port device team_slave_0 added [ 183.947162][ T9911] team0: Port device team_slave_1 added [ 184.033368][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.044086][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.070719][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.100888][ T9917] hsr0 speed is unknown, defaulting to 1000 [ 184.119740][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.127069][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.153309][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.270517][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 184.307922][ T9911] hsr_slave_0: entered promiscuous mode [ 184.314275][ T9911] hsr_slave_1: entered promiscuous mode [ 184.320634][ T9911] debugfs: 'hsr0' already exists in 'hsr' [ 184.326769][ T9911] Cannot create hsr debugfs directory [ 184.524322][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.532075][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.539813][ T9915] bridge_slave_0: entered allmulticast mode [ 184.548387][ T9915] bridge_slave_0: entered promiscuous mode [ 184.556548][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.563684][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.571195][ T9915] bridge_slave_1: entered allmulticast mode [ 184.580047][ T9915] bridge_slave_1: entered promiscuous mode [ 184.701516][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.736508][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.771555][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 184.871469][ T9915] team0: Port device team_slave_0 added [ 184.880854][ T9915] team0: Port device team_slave_1 added [ 184.924155][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 184.975723][ T5864] Bluetooth: hci5: command tx timeout [ 184.986161][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.993138][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.023570][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.060866][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.067981][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.094263][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.135808][ T5881] Bluetooth: hci6: command tx timeout [ 185.142173][ T5864] Bluetooth: hci7: command tx timeout [ 185.244870][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.252600][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.260898][ T9917] bridge_slave_0: entered allmulticast mode [ 185.268949][ T9917] bridge_slave_0: entered promiscuous mode [ 185.281400][ T9915] hsr_slave_0: entered promiscuous mode [ 185.288674][ T9915] hsr_slave_1: entered promiscuous mode [ 185.294786][ T9915] debugfs: 'hsr0' already exists in 'hsr' [ 185.301033][ T5864] Bluetooth: hci8: command tx timeout [ 185.301484][ T9915] Cannot create hsr debugfs directory [ 185.314486][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.321760][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.329631][ T9913] bridge_slave_0: entered allmulticast mode [ 185.336802][ T9913] bridge_slave_0: entered promiscuous mode [ 185.345192][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.353312][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.360694][ T9917] bridge_slave_1: entered allmulticast mode [ 185.368306][ T9917] bridge_slave_1: entered promiscuous mode [ 185.391477][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.398974][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.406644][ T9913] bridge_slave_1: entered allmulticast mode [ 185.413670][ T9913] bridge_slave_1: entered promiscuous mode [ 185.482804][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.496420][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.513548][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.537920][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.623137][ T9917] team0: Port device team_slave_0 added [ 185.631795][ T9913] team0: Port device team_slave_0 added [ 185.641859][ T9913] team0: Port device team_slave_1 added [ 185.656684][ T9917] team0: Port device team_slave_1 added [ 185.727079][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.734073][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.760741][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.780682][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.788076][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.814628][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.828409][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.835379][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.861841][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.877543][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.884498][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.910966][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.032398][ T9913] hsr_slave_0: entered promiscuous mode [ 186.039789][ T9913] hsr_slave_1: entered promiscuous mode [ 186.046107][ T9913] debugfs: 'hsr0' already exists in 'hsr' [ 186.051869][ T9913] Cannot create hsr debugfs directory [ 186.091400][ T9917] hsr_slave_0: entered promiscuous mode [ 186.098549][ T9917] hsr_slave_1: entered promiscuous mode [ 186.104687][ T9917] debugfs: 'hsr0' already exists in 'hsr' [ 186.110562][ T9917] Cannot create hsr debugfs directory [ 187.055649][ T5864] Bluetooth: hci5: command tx timeout [ 187.215720][ T5881] Bluetooth: hci6: command tx timeout [ 187.216846][ T5864] Bluetooth: hci7: command tx timeout [ 187.375784][ T5864] Bluetooth: hci8: command tx timeout [ 189.136825][ T5864] Bluetooth: hci5: command tx timeout [ 189.295755][ T5864] Bluetooth: hci6: command tx timeout [ 189.301212][ T5864] Bluetooth: hci7: command tx timeout [ 189.455870][ T5864] Bluetooth: hci8: command tx timeout [ 191.215706][ T5864] Bluetooth: hci5: command tx timeout [ 191.375755][ T5864] Bluetooth: hci7: command tx timeout [ 191.375911][ T5881] Bluetooth: hci6: command tx timeout [ 191.535867][ T5881] Bluetooth: hci8: command tx timeout [ 194.499141][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.505764][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.695773][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 201.700984][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 211.135873][ T1074] block nbd0: Possible stuck request ffff888024eb0000: control (read@0,1024B). Runtime 90 seconds [ 211.146840][ T1074] block nbd0: Possible stuck request ffff888024eb01c0: control (read@1024,1024B). Runtime 90 seconds [ 211.160123][ T1074] block nbd0: Possible stuck request ffff888024eb0380: control (read@2048,1024B). Runtime 90 seconds [ 211.171143][ T1074] block nbd0: Possible stuck request ffff888024eb0540: control (read@3072,1024B). Runtime 90 seconds [ 221.287163][ T5882] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 221.296551][ T5882] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 221.304683][ T5882] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 221.314046][ T5882] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 221.323156][ T5882] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 221.357268][ T9944] vxcan1 speed is unknown, defaulting to 1000 [ 221.480406][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 221.611402][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 221.683839][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.691124][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.699054][ T9944] bridge_slave_0: entered allmulticast mode [ 221.706924][ T9944] bridge_slave_0: entered promiscuous mode [ 221.715270][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.722852][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.730569][ T9944] bridge_slave_1: entered allmulticast mode [ 221.738531][ T9944] bridge_slave_1: entered promiscuous mode [ 221.773202][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.785051][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.819703][ T9944] team0: Port device team_slave_0 added [ 221.828082][ T9944] team0: Port device team_slave_1 added [ 221.859564][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.866967][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.894014][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.906633][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.913586][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.939850][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.984827][ T9944] hsr_slave_0: entered promiscuous mode [ 221.991757][ T9944] hsr_slave_1: entered promiscuous mode [ 221.998656][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 222.004482][ T9944] Cannot create hsr debugfs directory [ 223.376294][ T5864] Bluetooth: hci9: command tx timeout [ 225.455743][ T5864] Bluetooth: hci9: command tx timeout [ 227.535678][ T5864] Bluetooth: hci9: command tx timeout [ 229.615713][ T5864] Bluetooth: hci9: command tx timeout [ 237.535929][ T5882] Bluetooth: hci4: command 0x0406 tx timeout [ 240.575679][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.220300][ T1074] block nbd0: Possible stuck request ffff888024eb0000: control (read@0,1024B). Runtime 120 seconds [ 241.231164][ T1074] block nbd0: Possible stuck request ffff888024eb01c0: control (read@1024,1024B). Runtime 120 seconds [ 241.242514][ T1074] block nbd0: Possible stuck request ffff888024eb0380: control (read@2048,1024B). Runtime 120 seconds [ 241.253579][ T1074] block nbd0: Possible stuck request ffff888024eb0540: control (read@3072,1024B). Runtime 120 seconds [ 243.784039][ T5882] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 243.794218][ T5882] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 243.808484][ T5882] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 243.816195][ T5184] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 243.825577][ T5882] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 243.833921][ T5882] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 243.842765][ T5882] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 243.845779][ T5184] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 243.860288][ T5184] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 243.860411][ T5882] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 243.966783][ T5864] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 243.979832][ T5864] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 243.980262][ T5882] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 243.997214][ T9961] vxcan1 speed is unknown, defaulting to 1000 [ 243.998829][ T5882] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 244.015748][ T5882] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 244.023890][ T5864] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 244.024026][ T5882] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 244.032884][ T5864] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 244.048205][ T5882] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 244.062032][ T5881] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 244.229708][ T9959] vxcan1 speed is unknown, defaulting to 1000 [ 244.229737][ T9961] hsr0 speed is unknown, defaulting to 1000 [ 244.456964][ T9963] vxcan1 speed is unknown, defaulting to 1000 [ 244.468511][ T9959] hsr0 speed is unknown, defaulting to 1000 [ 244.553635][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 244.736836][ T9965] vxcan1 speed is unknown, defaulting to 1000 [ 244.739926][ T9963] hsr0 speed is unknown, defaulting to 1000 [ 244.920865][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.930350][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.943435][ T9961] bridge_slave_0: entered allmulticast mode [ 244.962680][ T9961] bridge_slave_0: entered promiscuous mode [ 245.001546][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.009036][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.017485][ T9961] bridge_slave_1: entered allmulticast mode [ 245.024551][ T9961] bridge_slave_1: entered promiscuous mode [ 245.031757][ T9965] hsr0 speed is unknown, defaulting to 1000 [ 245.069549][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 245.107007][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.170791][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.303105][ T9961] team0: Port device team_slave_0 added [ 245.312553][ T9961] team0: Port device team_slave_1 added [ 245.321439][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.329135][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.336504][ T9959] bridge_slave_0: entered allmulticast mode [ 245.343601][ T9959] bridge_slave_0: entered promiscuous mode [ 245.378763][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.386289][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.393472][ T9959] bridge_slave_1: entered allmulticast mode [ 245.401002][ T9959] bridge_slave_1: entered promiscuous mode [ 245.472750][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.489263][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.496305][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.522561][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.556015][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.588065][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.595037][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.621856][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.706180][ T9959] team0: Port device team_slave_0 added [ 245.737525][ T9959] team0: Port device team_slave_1 added [ 245.778600][ T9961] hsr_slave_0: entered promiscuous mode [ 245.784992][ T9961] hsr_slave_1: entered promiscuous mode [ 245.791441][ T9961] debugfs: 'hsr0' already exists in 'hsr' [ 245.797322][ T9961] Cannot create hsr debugfs directory [ 245.867436][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.874418][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.901037][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.920944][ T9963] chnl_net:caif_netlink_parms(): no params data found [ 245.935775][ T5881] Bluetooth: hci10: command tx timeout [ 245.941988][ T5881] Bluetooth: hci11: command tx timeout [ 245.971882][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.979382][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.006000][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.096114][ T5184] Bluetooth: hci13: command tx timeout [ 246.102392][ T5881] Bluetooth: hci12: command tx timeout [ 246.120462][ T9965] chnl_net:caif_netlink_parms(): no params data found [ 246.176149][ T9959] hsr_slave_0: entered promiscuous mode [ 246.183357][ T9959] hsr_slave_1: entered promiscuous mode [ 246.190077][ T9959] debugfs: 'hsr0' already exists in 'hsr' [ 246.196476][ T9959] Cannot create hsr debugfs directory [ 246.326952][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.334153][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.341811][ T9963] bridge_slave_0: entered allmulticast mode [ 246.349946][ T9963] bridge_slave_0: entered promiscuous mode [ 246.397883][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.405099][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.412928][ T9963] bridge_slave_1: entered allmulticast mode [ 246.420279][ T9963] bridge_slave_1: entered promiscuous mode [ 246.514378][ T9963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.539436][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.547514][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.554801][ T9965] bridge_slave_0: entered allmulticast mode [ 246.562250][ T9965] bridge_slave_0: entered promiscuous mode [ 246.578596][ T9963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.593792][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.601629][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.609311][ T9965] bridge_slave_1: entered allmulticast mode [ 246.617467][ T9965] bridge_slave_1: entered promiscuous mode [ 246.741998][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.756124][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.767734][ T9963] team0: Port device team_slave_0 added [ 246.803893][ T9963] team0: Port device team_slave_1 added [ 246.893793][ T9965] team0: Port device team_slave_0 added [ 246.903268][ T9965] team0: Port device team_slave_1 added [ 246.919037][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.927831][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.955564][ T9963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.969468][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.977601][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.004624][ T9963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.064561][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.072035][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.099210][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.112730][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.120312][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.148091][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.205205][ T9963] hsr_slave_0: entered promiscuous mode [ 247.217151][ T9963] hsr_slave_1: entered promiscuous mode [ 247.223436][ T9963] debugfs: 'hsr0' already exists in 'hsr' [ 247.230213][ T9963] Cannot create hsr debugfs directory [ 247.280944][ T9965] hsr_slave_0: entered promiscuous mode [ 247.290351][ T9965] hsr_slave_1: entered promiscuous mode [ 247.297455][ T9965] debugfs: 'hsr0' already exists in 'hsr' [ 247.303362][ T9965] Cannot create hsr debugfs directory [ 248.015688][ T5184] Bluetooth: hci10: command tx timeout [ 248.022016][ T5881] Bluetooth: hci11: command tx timeout [ 248.177227][ T5184] Bluetooth: hci13: command tx timeout [ 248.183140][ T5881] Bluetooth: hci12: command tx timeout [ 250.095689][ T5184] Bluetooth: hci10: command tx timeout [ 250.098480][ T5881] Bluetooth: hci11: command tx timeout [ 250.255677][ T5881] Bluetooth: hci12: command tx timeout [ 250.255696][ T5184] Bluetooth: hci13: command tx timeout [ 252.176010][ T5184] Bluetooth: hci11: command tx timeout [ 252.181551][ T5184] Bluetooth: hci10: command tx timeout [ 252.335730][ T5184] Bluetooth: hci13: command tx timeout [ 252.336045][ T5881] Bluetooth: hci12: command tx timeout [ 255.938777][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945126][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.315601][ T1074] block nbd0: Possible stuck request ffff888024eb0000: control (read@0,1024B). Runtime 150 seconds [ 271.326750][ T1074] block nbd0: Possible stuck request ffff888024eb01c0: control (read@1024,1024B). Runtime 150 seconds [ 271.338127][ T1074] block nbd0: Possible stuck request ffff888024eb0380: control (read@2048,1024B). Runtime 150 seconds [ 271.349303][ T1074] block nbd0: Possible stuck request ffff888024eb0540: control (read@3072,1024B). Runtime 150 seconds [ 281.377947][ T5184] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 281.392678][ T5184] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 281.401499][ T5184] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 281.410279][ T5184] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 281.418872][ T5184] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 281.452313][ T9995] vxcan1 speed is unknown, defaulting to 1000 [ 281.596077][ T9995] hsr0 speed is unknown, defaulting to 1000 [ 281.739159][ T9995] chnl_net:caif_netlink_parms(): no params data found [ 281.819684][ T9995] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.826974][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.834501][ T9995] bridge_slave_0: entered allmulticast mode [ 281.842524][ T9995] bridge_slave_0: entered promiscuous mode [ 281.851577][ T9995] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.859354][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.866938][ T9995] bridge_slave_1: entered allmulticast mode [ 281.874782][ T9995] bridge_slave_1: entered promiscuous mode [ 281.908993][ T9995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.920896][ T9995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.958461][ T9995] team0: Port device team_slave_0 added [ 281.967376][ T9995] team0: Port device team_slave_1 added [ 282.000592][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.007962][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.034493][ T9995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.048178][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.055286][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.081455][ T9995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.132631][ T9995] hsr_slave_0: entered promiscuous mode [ 282.139922][ T9995] hsr_slave_1: entered promiscuous mode [ 282.146473][ T9995] debugfs: 'hsr0' already exists in 'hsr' [ 282.152215][ T9995] Cannot create hsr debugfs directory [ 283.456206][ T5881] Bluetooth: hci14: command tx timeout [ 283.615674][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 285.535885][ T5184] Bluetooth: hci14: command tx timeout [ 287.615776][ T5184] Bluetooth: hci14: command tx timeout [ 289.695709][ T5184] Bluetooth: hci14: command tx timeout [ 301.379055][ T1074] block nbd0: Possible stuck request ffff888024eb0000: control (read@0,1024B). Runtime 180 seconds [ 301.389840][ T1074] block nbd0: Possible stuck request ffff888024eb01c0: control (read@1024,1024B). Runtime 180 seconds [ 301.401375][ T1074] block nbd0: Possible stuck request ffff888024eb0380: control (read@2048,1024B). Runtime 180 seconds [ 301.413469][ T1074] block nbd0: Possible stuck request ffff888024eb0540: control (read@3072,1024B). Runtime 180 seconds [ 303.404187][ T5881] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 303.412736][ T5881] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 303.422724][ T5881] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 303.431567][ T5881] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 303.441418][ T5881] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 303.482445][T10004] vxcan1 speed is unknown, defaulting to 1000 [ 303.624199][T10004] hsr0 speed is unknown, defaulting to 1000 [ 303.771146][T10004] chnl_net:caif_netlink_parms(): no params data found [ 303.853125][T10004] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.860891][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.868679][T10004] bridge_slave_0: entered allmulticast mode [ 303.876001][T10004] bridge_slave_0: entered promiscuous mode [ 303.885911][T10004] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.893076][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.900871][T10004] bridge_slave_1: entered allmulticast mode [ 303.908813][T10004] bridge_slave_1: entered promiscuous mode [ 303.946364][T10004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.959307][T10004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.999763][T10004] team0: Port device team_slave_0 added [ 304.009499][T10004] team0: Port device team_slave_1 added [ 304.041825][T10004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.048905][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.075364][T10004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.088810][T10004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.096092][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.122280][T10004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.174081][T10004] hsr_slave_0: entered promiscuous mode [ 304.181252][T10004] hsr_slave_1: entered promiscuous mode [ 304.187679][T10004] debugfs: 'hsr0' already exists in 'hsr' [ 304.193403][T10004] Cannot create hsr debugfs directory [ 304.905513][ T5184] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 304.915107][ T5184] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 304.930079][ T5184] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 304.952353][ T5184] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 304.966427][ T5882] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 304.986585][ T5864] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 304.996882][ T5882] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 305.008590][ T5882] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 305.017743][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 305.021216][ T5868] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 305.034019][ T5868] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 305.047869][ T5868] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 305.056428][ T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 305.064830][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 305.066282][ T5868] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 305.107691][T10015] vxcan1 speed is unknown, defaulting to 1000 [ 305.343044][T10019] vxcan1 speed is unknown, defaulting to 1000 [ 305.343396][T10015] hsr0 speed is unknown, defaulting to 1000 [ 305.536023][ T5184] Bluetooth: hci15: command tx timeout [ 305.629172][T10017] vxcan1 speed is unknown, defaulting to 1000 [ 305.629897][T10019] hsr0 speed is unknown, defaulting to 1000 [ 305.644198][T10015] chnl_net:caif_netlink_parms(): no params data found [ 305.857108][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.864367][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.889437][T10015] bridge_slave_0: entered allmulticast mode [ 305.907634][T10015] bridge_slave_0: entered promiscuous mode [ 305.921774][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.929950][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.939297][T10015] bridge_slave_1: entered allmulticast mode [ 305.947744][T10015] bridge_slave_1: entered promiscuous mode [ 305.987915][T10017] hsr0 speed is unknown, defaulting to 1000 [ 306.010009][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.042197][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.154739][T10015] team0: Port device team_slave_0 added [ 306.203552][T10015] team0: Port device team_slave_1 added [ 306.271401][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.278714][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.304933][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.317416][T10019] chnl_net:caif_netlink_parms(): no params data found [ 306.330538][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.338331][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.364928][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.481571][T10015] hsr_slave_0: entered promiscuous mode [ 306.489614][T10015] hsr_slave_1: entered promiscuous mode [ 306.498848][T10015] debugfs: 'hsr0' already exists in 'hsr' [ 306.504598][T10015] Cannot create hsr debugfs directory [ 306.641152][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.656269][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.663598][T10019] bridge_slave_0: entered allmulticast mode [ 306.672449][T10019] bridge_slave_0: entered promiscuous mode [ 306.701640][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.709464][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.717476][T10019] bridge_slave_1: entered allmulticast mode [ 306.732650][T10019] bridge_slave_1: entered promiscuous mode [ 306.749798][T10017] chnl_net:caif_netlink_parms(): no params data found [ 306.814542][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.851955][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.924583][T10019] team0: Port device team_slave_0 added [ 306.964509][T10019] team0: Port device team_slave_1 added [ 307.048388][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.055359][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.081493][ T5184] Bluetooth: hci16: command tx timeout [ 307.089392][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.101574][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.108967][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.135253][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.150283][ T5864] Bluetooth: hci17: command tx timeout [ 307.150289][ T5184] Bluetooth: hci18: command tx timeout [ 307.199261][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.207302][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.214548][T10017] bridge_slave_0: entered allmulticast mode [ 307.222833][T10017] bridge_slave_0: entered promiscuous mode [ 307.258814][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.267500][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.274784][T10017] bridge_slave_1: entered allmulticast mode [ 307.283326][T10017] bridge_slave_1: entered promiscuous mode [ 307.355104][T10019] hsr_slave_0: entered promiscuous mode [ 307.362044][T10019] hsr_slave_1: entered promiscuous mode [ 307.369527][T10019] debugfs: 'hsr0' already exists in 'hsr' [ 307.375283][T10019] Cannot create hsr debugfs directory [ 307.387682][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.400761][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.491317][T10017] team0: Port device team_slave_0 added [ 307.501225][T10017] team0: Port device team_slave_1 added [ 307.590122][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.602379][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.631918][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.636314][ T5881] Bluetooth: hci15: command tx timeout [ 307.645277][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.655154][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.681257][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.818430][T10017] hsr_slave_0: entered promiscuous mode [ 307.826578][T10017] hsr_slave_1: entered promiscuous mode [ 307.833074][T10017] debugfs: 'hsr0' already exists in 'hsr' [ 307.839789][T10017] Cannot create hsr debugfs directory [ 309.135971][ T5881] Bluetooth: hci16: command tx timeout [ 309.218818][ T5881] Bluetooth: hci6: command 0x0406 tx timeout [ 309.225195][ T5184] Bluetooth: hci18: command tx timeout [ 309.225793][ T5875] Bluetooth: hci5: command 0x0406 tx timeout [ 309.235639][ T5874] Bluetooth: hci7: command 0x0406 tx timeout [ 309.237318][ T5876] Bluetooth: hci8: command 0x0406 tx timeout [ 309.242655][ T5874] Bluetooth: hci17: command tx timeout [ 309.696265][ T5882] Bluetooth: hci15: command tx timeout [ 311.215727][ T5882] Bluetooth: hci16: command tx timeout [ 311.295718][ T51] Bluetooth: hci18: command tx timeout [ 311.297282][ T5882] Bluetooth: hci17: command tx timeout [ 311.775666][ T5882] Bluetooth: hci15: command tx timeout [ 313.306060][ T5882] Bluetooth: hci16: command tx timeout [ 313.375650][ T51] Bluetooth: hci17: command tx timeout [ 313.377134][ T5882] Bluetooth: hci18: command tx timeout [ 317.388356][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.394732][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.295875][ T31] INFO: task syz-executor:9664 blocked for more than 143 seconds. [ 319.303745][ T31] Not tainted syzkaller #0 [ 319.309811][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.318895][ T31] task:syz-executor state:D stack:22632 pid:9664 tgid:9664 ppid:1 task_flags:0x400140 flags:0x00004004 [ 319.331218][ T31] Call Trace: [ 319.334503][ T31] [ 319.337846][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.342366][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.347719][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.352600][ T31] ? __pfx___schedule+0x10/0x10 [ 319.358478][ T31] ? schedule+0x91/0x360 [ 319.363035][ T31] schedule+0x165/0x360 [ 319.367645][ T31] schedule_preempt_disabled+0x13/0x30 [ 319.373120][ T31] __mutex_lock+0x7e6/0x1350 [ 319.378284][ T31] ? __mutex_lock+0x5bb/0x1350 [ 319.383068][ T31] ? genl_rcv_msg+0x10d/0x790 [ 319.388249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 319.435536][ T31] ? stack_trace_save+0x9c/0xe0 [ 319.440464][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 319.466386][ T31] ? radix_tree_lookup+0x240/0x290 [ 319.471567][ T31] genl_rcv_msg+0x10d/0x790 [ 319.476549][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.481428][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.486984][ T31] netlink_rcv_skb+0x208/0x470 [ 319.491766][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.497170][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.503185][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.508896][ T31] ? down_read+0x1ad/0x2e0 [ 319.513338][ T31] genl_rcv+0x28/0x40 [ 319.517775][ T31] netlink_unicast+0x82f/0x9e0 [ 319.522583][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 319.528931][ T31] ? netlink_sendmsg+0x642/0xb30 [ 319.533898][ T31] ? skb_put+0x11b/0x210 [ 319.538589][ T31] netlink_sendmsg+0x805/0xb30 [ 319.543386][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.549379][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 319.554356][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.560195][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.565708][ T31] __sock_sendmsg+0x21c/0x270 [ 319.570421][ T31] __sys_sendto+0x3bd/0x520 [ 319.574971][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 319.580163][ T31] ? fd_install+0x97/0x540 [ 319.584596][ T31] ? fd_install+0x30d/0x540 [ 319.589205][ T31] __x64_sys_sendto+0xde/0x100 [ 319.593977][ T31] do_syscall_64+0xfa/0x3b0 [ 319.598676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.603909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.610186][ T31] ? clear_bhb_loop+0x60/0xb0 [ 319.615047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.621141][ T31] RIP: 0033:0x7f8067390a3c [ 319.625666][ T31] RSP: 002b:00007ffcd296f480 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 319.634142][ T31] RAX: ffffffffffffffda RBX: 00007f8068104620 RCX: 00007f8067390a3c [ 319.642248][ T31] RDX: 0000000000000020 RSI: 00007f8068104670 RDI: 0000000000000005 [ 319.650333][ T31] RBP: 0000000000000000 R08: 00007ffcd296f4d4 R09: 000000000000000c [ 319.658365][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 319.666455][ T31] R13: 00007ffcd296f528 R14: 00007f8068104670 R15: 0000000000000000 [ 319.674460][ T31] [ 319.677649][ T31] INFO: task syz.3.1170:9869 blocked for more than 143 seconds. [ 319.685368][ T31] Not tainted syzkaller #0 [ 319.690399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.699445][ T31] task:syz.3.1170 state:D stack:24552 pid:9869 tgid:9869 ppid:5872 task_flags:0x400040 flags:0x00004006 [ 319.715279][ T31] Call Trace: [ 319.718946][ T31] [ 319.721904][ T31] __schedule+0x1798/0x4cc0 [ 319.726802][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.731733][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.736929][ T31] ? __pfx___schedule+0x10/0x10 [ 319.741846][ T31] ? schedule+0x91/0x360 [ 319.746382][ T31] schedule+0x165/0x360 [ 319.750556][ T31] schedule_preempt_disabled+0x13/0x30 [ 319.756305][ T31] __mutex_lock+0x7e6/0x1350 [ 319.760920][ T31] ? __mutex_lock+0x5bb/0x1350 [ 319.766003][ T31] ? genl_done+0x10b/0x220 [ 319.770441][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 319.775620][ T31] ? __up_read+0x280/0x680 [ 319.780064][ T31] ? __pfx___up_read+0x10/0x10 [ 319.784841][ T31] ? blocking_notifier_call_chain+0x74/0x90 [ 319.790901][ T31] genl_done+0x10b/0x220 [ 319.795172][ T31] ? __pfx_genl_done+0x10/0x10 [ 319.800162][ T31] netlink_release+0x12fd/0x1b40 [ 319.805128][ T31] ? netlink_release+0x108/0x1b40 [ 319.810286][ T31] ? __pfx_netlink_release+0x10/0x10 [ 319.815637][ T31] ? down_write+0x162/0x1f0 [ 319.820148][ T31] ? __pfx_down_write+0x10/0x10 [ 319.824987][ T31] sock_close+0xc3/0x240 [ 319.829307][ T31] ? __pfx_sock_close+0x10/0x10 [ 319.834170][ T31] __fput+0x449/0xa70 [ 319.838268][ T31] task_work_run+0x1d1/0x260 [ 319.842874][ T31] ? __pfx_task_work_run+0x10/0x10 [ 319.848131][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 319.853619][ T31] exit_to_user_mode_loop+0xec/0x110 [ 319.859117][ T31] do_syscall_64+0x2bd/0x3b0 [ 319.863727][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.870006][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.876274][ T31] ? clear_bhb_loop+0x60/0xb0 [ 319.880963][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.886946][ T31] RIP: 0033:0x7efe4518eba9 [ 319.891370][ T31] RSP: 002b:00007ffd316b1838 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 319.899954][ T31] RAX: 0000000000000000 RBX: 00007efe453d7da0 RCX: 00007efe4518eba9 [ 319.908231][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 319.916323][ T31] RBP: 00007efe453d7da0 R08: 0000000000000100 R09: 0000000f316b1b2f [ 319.924391][ T31] R10: 00007efe453d7cb0 R11: 0000000000000246 R12: 0000000000028efc [ 319.932474][ T31] R13: 00007efe453d6090 R14: ffffffffffffffff R15: 00007ffd316b1950 [ 319.940739][ T31] [ 319.943802][ T31] INFO: task syz.0.1174:9881 blocked for more than 144 seconds. [ 319.952031][ T31] Not tainted syzkaller #0 [ 319.957073][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.965954][ T31] task:syz.0.1174 state:D stack:26024 pid:9881 tgid:9880 ppid:5862 task_flags:0x480140 flags:0x00004004 [ 319.977937][ T31] Call Trace: [ 319.981223][ T31] [ 319.984160][ T31] __schedule+0x1798/0x4cc0 [ 319.988766][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.993673][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.998605][ T31] ? __pfx___schedule+0x10/0x10 [ 320.003484][ T31] ? schedule+0x91/0x360 [ 320.007999][ T31] schedule+0x165/0x360 [ 320.012159][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 320.017802][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 320.023890][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.030087][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 320.036100][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 320.042372][ T31] nbd_set_size+0x47e/0x6a0 [ 320.047391][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 320.052457][ T31] ? nla_memcpy+0x5b/0xc0 [ 320.057243][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 320.062552][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 320.068100][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 320.074089][ T31] ? bpf_lsm_capable+0x9/0x20 [ 320.079812][ T31] ? security_capable+0x7e/0x2e0 [ 320.084798][ T31] ? radix_tree_lookup+0x240/0x290 [ 320.090858][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 320.096447][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 320.102314][ T31] ? __nla_parse+0x40/0x60 [ 320.106820][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 320.113296][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 320.119042][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 320.125134][ T31] ? stack_trace_save+0x9c/0xe0 [ 320.130081][ T31] genl_rcv_msg+0x60e/0x790 [ 320.134635][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.139793][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 320.145668][ T31] netlink_rcv_skb+0x208/0x470 [ 320.150449][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.155398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.161268][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.167062][ T31] ? down_read+0x1ad/0x2e0 [ 320.171500][ T31] genl_rcv+0x28/0x40 [ 320.175876][ T31] netlink_unicast+0x82f/0x9e0 [ 320.180665][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 320.187169][ T31] ? netlink_sendmsg+0x642/0xb30 [ 320.192183][ T31] netlink_sendmsg+0x805/0xb30 [ 320.197106][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.202407][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.207349][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.212407][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.217810][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.223106][ T31] __sock_sendmsg+0x21c/0x270 [ 320.227954][ T31] ____sys_sendmsg+0x505/0x830 [ 320.232762][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.238187][ T31] ? import_iovec+0x74/0xa0 [ 320.242703][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 320.247632][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.252878][ T31] ? __fget_files+0x2a/0x420 [ 320.257821][ T31] ? __fget_files+0x3a0/0x420 [ 320.262528][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 320.267615][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.273117][ T31] ? rcu_is_watching+0x15/0xb0 [ 320.278064][ T31] ? do_syscall_64+0xbe/0x3b0 [ 320.282756][ T31] do_syscall_64+0xfa/0x3b0 [ 320.287332][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.292548][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.299181][ T31] ? clear_bhb_loop+0x60/0xb0 [ 320.303890][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.309888][ T31] RIP: 0033:0x7f52d3b8eba9 [ 320.314426][ T31] RSP: 002b:00007f52d49d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.322997][ T31] RAX: ffffffffffffffda RBX: 00007f52d3dd5fa0 RCX: 00007f52d3b8eba9 [ 320.331031][ T31] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000007 [ 320.339377][ T31] RBP: 00007f52d3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 320.347456][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.355591][ T31] R13: 00007f52d3dd6038 R14: 00007f52d3dd5fa0 R15: 00007fff28e21518 [ 320.363628][ T31] [ 320.366813][ T31] INFO: task syz.0.1174:9887 blocked for more than 144 seconds. [ 320.374538][ T31] Not tainted syzkaller #0 [ 320.379617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.388618][ T31] task:syz.0.1174 state:D stack:28616 pid:9887 tgid:9880 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 320.400766][ T31] Call Trace: [ 320.404059][ T31] [ 320.407468][ T31] __schedule+0x1798/0x4cc0 [ 320.411998][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.418152][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.423042][ T31] ? __pfx___schedule+0x10/0x10 [ 320.429004][ T31] ? schedule+0x91/0x360 [ 320.433267][ T31] schedule+0x165/0x360 [ 320.437507][ T31] schedule_preempt_disabled+0x13/0x30 [ 320.442969][ T31] __mutex_lock+0x7e6/0x1350 [ 320.447854][ T31] ? __mutex_lock+0x5bb/0x1350 [ 320.452651][ T31] ? genl_rcv_msg+0x10d/0x790 [ 320.457415][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 320.462451][ T31] ? stack_trace_save+0x9c/0xe0 [ 320.467611][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 320.472996][ T31] ? radix_tree_lookup+0x240/0x290 [ 320.478206][ T31] genl_rcv_msg+0x10d/0x790 [ 320.482719][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.487709][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.492758][ T31] netlink_rcv_skb+0x208/0x470 [ 320.497986][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.502866][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.507983][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.513283][ T31] ? down_read+0x1ad/0x2e0 [ 320.518002][ T31] genl_rcv+0x28/0x40 [ 320.522042][ T31] netlink_unicast+0x82f/0x9e0 [ 320.527836][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 320.533157][ T31] ? netlink_sendmsg+0x642/0xb30 [ 320.538421][ T31] ? skb_put+0x11b/0x210 [ 320.542697][ T31] netlink_sendmsg+0x805/0xb30 [ 320.547599][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.552923][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.558013][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.563306][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.568679][ T31] __sock_sendmsg+0x21c/0x270 [ 320.573370][ T31] __sys_sendto+0x3bd/0x520 [ 320.578322][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 320.583379][ T31] ? fd_install+0x97/0x540 [ 320.587905][ T31] ? fd_install+0x30d/0x540 [ 320.592456][ T31] __x64_sys_sendto+0xde/0x100 [ 320.597390][ T31] do_syscall_64+0xfa/0x3b0 [ 320.601909][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.607182][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.613251][ T31] ? clear_bhb_loop+0x60/0xb0 [ 320.618069][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.624115][ T31] RIP: 0033:0x7f52d3b90a3c [ 320.628998][ T31] RSP: 002b:00007f52d49adec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 320.637859][ T31] RAX: ffffffffffffffda RBX: 00007f52d49adfc0 RCX: 00007f52d3b90a3c [ 320.645947][ T31] RDX: 0000000000000020 RSI: 00007f52d49ae010 RDI: 0000000000000006 [ 320.653933][ T31] RBP: 0000000000000000 R08: 00007f52d49adf14 R09: 000000000000000c [ 320.662219][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 320.670249][ T31] R13: 00007f52d49adf68 R14: 00007f52d49ae010 R15: 0000000000000000 [ 320.678380][ T31] [ 320.681456][ T31] INFO: task syz.0.1174:9890 blocked for more than 144 seconds. [ 320.689170][ T31] Not tainted syzkaller #0 [ 320.694102][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.703064][ T31] task:syz.0.1174 state:D stack:28616 pid:9890 tgid:9880 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 320.715657][ T31] Call Trace: [ 320.718960][ T31] [ 320.722002][ T31] __schedule+0x1798/0x4cc0 [ 320.726669][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.731546][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.736724][ T31] ? __pfx___schedule+0x10/0x10 [ 320.741607][ T31] ? schedule+0x91/0x360 [ 320.745944][ T31] schedule+0x165/0x360 [ 320.750106][ T31] schedule_preempt_disabled+0x13/0x30 [ 320.755779][ T31] __mutex_lock+0x7e6/0x1350 [ 320.760405][ T31] ? __mutex_lock+0x5bb/0x1350 [ 320.765184][ T31] ? genl_rcv_msg+0x10d/0x790 [ 320.770171][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 320.775220][ T31] ? stack_trace_save+0x9c/0xe0 [ 320.780359][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 320.785798][ T31] ? radix_tree_lookup+0x240/0x290 [ 320.790936][ T31] genl_rcv_msg+0x10d/0x790 [ 320.795731][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.800608][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.805748][ T31] netlink_rcv_skb+0x208/0x470 [ 320.810538][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.815450][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.820482][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.826023][ T31] ? down_read+0x1ad/0x2e0 [ 320.830458][ T31] genl_rcv+0x28/0x40 [ 320.834455][ T31] netlink_unicast+0x82f/0x9e0 [ 320.839344][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 320.844653][ T31] ? netlink_sendmsg+0x642/0xb30 [ 320.849700][ T31] ? skb_put+0x11b/0x210 [ 320.853963][ T31] netlink_sendmsg+0x805/0xb30 [ 320.858799][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.864089][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.869137][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.874440][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.879798][ T31] __sock_sendmsg+0x21c/0x270 [ 320.884493][ T31] __sys_sendto+0x3bd/0x520 [ 320.889201][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 320.894281][ T31] ? rcu_is_watching+0x15/0xb0 [ 320.899178][ T31] __x64_sys_sendto+0xde/0x100 [ 320.904041][ T31] do_syscall_64+0xfa/0x3b0 [ 320.908642][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.913853][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.919996][ T31] ? clear_bhb_loop+0x60/0xb0 [ 320.924690][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.930846][ T31] RIP: 0033:0x7f52d3b90a3c [ 320.935268][ T31] RSP: 002b:00007f52d498cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 320.943723][ T31] RAX: ffffffffffffffda RBX: 00007f52d498cfc0 RCX: 00007f52d3b90a3c [ 320.951773][ T31] RDX: 0000000000000020 RSI: 00007f52d498d010 RDI: 0000000000000009 [ 320.959825][ T31] RBP: 0000000000000000 R08: 00007f52d498cf14 R09: 000000000000000c [ 320.967884][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 320.975942][ T31] R13: 00007f52d498cf68 R14: 00007f52d498d010 R15: 0000000000000000 [ 320.983946][ T31] [ 320.987170][ T31] INFO: task syz.1.1175:9885 blocked for more than 145 seconds. [ 320.994811][ T31] Not tainted syzkaller #0 [ 320.999997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.008750][ T31] task:syz.1.1175 state:D stack:25864 pid:9885 tgid:9884 ppid:5877 task_flags:0x400140 flags:0x00004004 [ 321.020791][ T31] Call Trace: [ 321.024068][ T31] [ 321.027064][ T31] __schedule+0x1798/0x4cc0 [ 321.031810][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.036786][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.041664][ T31] ? __pfx___schedule+0x10/0x10 [ 321.046628][ T31] ? schedule+0x91/0x360 [ 321.051040][ T31] schedule+0x165/0x360 [ 321.055185][ T31] schedule_preempt_disabled+0x13/0x30 [ 321.060854][ T31] __mutex_lock+0x7e6/0x1350 [ 321.065493][ T31] ? __mutex_lock+0x5bb/0x1350 [ 321.070270][ T31] ? genl_rcv_msg+0x10d/0x790 [ 321.074960][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 321.080058][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 321.085182][ T31] ? radix_tree_lookup+0x240/0x290 [ 321.090386][ T31] genl_rcv_msg+0x10d/0x790 [ 321.094987][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.100087][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 321.105121][ T31] ? __asan_memcpy+0x40/0x70 [ 321.109923][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 321.115308][ T31] netlink_rcv_skb+0x208/0x470 [ 321.120147][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.125012][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.130140][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.135773][ T31] ? down_read+0x1ad/0x2e0 [ 321.140224][ T31] genl_rcv+0x28/0x40 [ 321.144220][ T31] netlink_unicast+0x82f/0x9e0 [ 321.149223][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 321.154626][ T31] ? netlink_sendmsg+0x642/0xb30 [ 321.159608][ T31] ? skb_put+0x11b/0x210 [ 321.163876][ T31] netlink_sendmsg+0x805/0xb30 [ 321.168818][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.174125][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.179123][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.184417][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.189755][ T31] __sock_sendmsg+0x21c/0x270 [ 321.194449][ T31] __sys_sendto+0x3bd/0x520 [ 321.199060][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 321.204096][ T31] ? count_memcg_event_mm+0x21/0x260 [ 321.209505][ T31] ? exc_page_fault+0x76/0xf0 [ 321.214206][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 321.219884][ T31] __x64_sys_sendto+0xde/0x100 [ 321.224708][ T31] do_syscall_64+0xfa/0x3b0 [ 321.229421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.234699][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.240840][ T31] ? clear_bhb_loop+0x60/0xb0 [ 321.245610][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.251601][ T31] RIP: 0033:0x7f3b9a590a3c [ 321.256313][ T31] RSP: 002b:00007f3b9b4cdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 321.264744][ T31] RAX: ffffffffffffffda RBX: 00007f3b9b4cdfc0 RCX: 00007f3b9a590a3c [ 321.273046][ T31] RDX: 0000000000000024 RSI: 00007f3b9b4ce010 RDI: 000000000000000a [ 321.281286][ T31] RBP: 0000000000000000 R08: 00007f3b9b4cdf14 R09: 000000000000000c [ 321.289592][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 321.297940][ T31] R13: 00007f3b9b4cdf68 R14: 00007f3b9b4ce010 R15: 0000000000000000 [ 321.306144][ T31] [ 321.309205][ T31] INFO: task syz.4.1177:9892 blocked for more than 145 seconds. [ 321.317104][ T31] Not tainted syzkaller #0 [ 321.322053][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.330926][ T31] task:syz.4.1177 state:D stack:25928 pid:9892 tgid:9891 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 321.343066][ T31] Call Trace: [ 321.346757][ T31] [ 321.349713][ T31] __schedule+0x1798/0x4cc0 [ 321.354236][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.359167][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.364039][ T31] ? __pfx___schedule+0x10/0x10 [ 321.369002][ T31] ? schedule+0x91/0x360 [ 321.373262][ T31] schedule+0x165/0x360 [ 321.377574][ T31] schedule_preempt_disabled+0x13/0x30 [ 321.383052][ T31] __mutex_lock+0x7e6/0x1350 [ 321.387747][ T31] ? __mutex_lock+0x5bb/0x1350 [ 321.392521][ T31] ? genl_rcv_msg+0x10d/0x790 [ 321.397255][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 321.402304][ T31] ? stack_trace_save+0x9c/0xe0 [ 321.407278][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 321.412685][ T31] ? radix_tree_lookup+0x240/0x290 [ 321.417867][ T31] genl_rcv_msg+0x10d/0x790 [ 321.422392][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.427331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.432390][ T31] netlink_rcv_skb+0x208/0x470 [ 321.437582][ T31] ? __lock_acquire+0xab9/0xd20 [ 321.442763][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.448377][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.453686][ T31] ? down_read+0x1ad/0x2e0 [ 321.458734][ T31] genl_rcv+0x28/0x40 [ 321.462764][ T31] netlink_unicast+0x82f/0x9e0 [ 321.467681][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 321.472996][ T31] ? netlink_sendmsg+0x642/0xb30 [ 321.478103][ T31] ? skb_put+0x11b/0x210 [ 321.482365][ T31] netlink_sendmsg+0x805/0xb30 [ 321.487253][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.492568][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.497578][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.502872][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.508583][ T31] __sock_sendmsg+0x21c/0x270 [ 321.513281][ T31] __sys_sendto+0x3bd/0x520 [ 321.518204][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 321.523266][ T31] ? count_memcg_event_mm+0x21/0x260 [ 321.528702][ T31] ? exc_page_fault+0x76/0xf0 [ 321.533387][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 321.539093][ T31] __x64_sys_sendto+0xde/0x100 [ 321.544004][ T31] do_syscall_64+0xfa/0x3b0 [ 321.548672][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.553894][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.560022][ T31] ? clear_bhb_loop+0x60/0xb0 [ 321.564716][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.570801][ T31] RIP: 0033:0x7fbcaa190a3c [ 321.575824][ T31] RSP: 002b:00007fbcab02aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 321.584258][ T31] RAX: ffffffffffffffda RBX: 00007fbcab02afc0 RCX: 00007fbcaa190a3c [ 321.592372][ T31] RDX: 000000000000001c RSI: 00007fbcab02b010 RDI: 0000000000000006 [ 321.600448][ T31] RBP: 0000000000000000 R08: 00007fbcab02af14 R09: 000000000000000c [ 321.608578][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 321.616880][ T31] R13: 00007fbcab02af68 R14: 00007fbcab02b010 R15: 0000000000000000 [ 321.624974][ T31] [ 321.628178][ T31] [ 321.628178][ T31] Showing all locks held in the system: [ 321.635988][ T31] 1 lock held by khungtaskd/31: [ 321.640843][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 321.650914][ T31] 2 locks held by kworker/u8:2/36: [ 321.656170][ T31] 2 locks held by getty/5628: [ 321.660849][ T31] #0: ffff88814d70f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 321.670706][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 321.680909][ T31] 1 lock held by udevd/6634: [ 321.685613][ T31] #0: ffff888024d3e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 321.694883][ T31] 2 locks held by syz-executor/9664: [ 321.700278][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.708547][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.717626][ T31] 2 locks held by syz.3.1170/9869: [ 321.722738][ T31] #0: ffff8880577fe208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 321.733064][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_done+0x10b/0x220 [ 321.741855][ T31] 6 locks held by syz.0.1174/9881: [ 321.747099][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.755313][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.764323][ T31] #2: ffff888024e60a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 321.774835][ T31] #3: ffff888024d41aa8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 321.784570][ T31] #4: ffff888024d41448 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 321.796777][ T31] #5: ffff888024d41480 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 321.809243][ T31] 2 locks held by syz.0.1174/9887: [ 321.814346][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.822573][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.831599][ T31] 2 locks held by syz.0.1174/9890: [ 321.836954][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.845175][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.854305][ T31] 2 locks held by syz.1.1175/9885: [ 321.859513][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.867792][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.876919][ T31] 2 locks held by syz.4.1177/9892: [ 321.882031][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.890259][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.899291][ T31] 2 locks held by syz-executor/9911: [ 321.904573][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.912790][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.921900][ T31] 2 locks held by syz-executor/9913: [ 321.927213][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.935523][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.944524][ T31] 2 locks held by syz-executor/9915: [ 321.950067][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.958474][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.967539][ T31] 2 locks held by syz-executor/9917: [ 321.972819][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.981071][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.990204][ T31] 2 locks held by syz-executor/9944: [ 321.995559][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.003767][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.012776][ T31] 2 locks held by syz-executor/9959: [ 322.018196][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.026476][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.035513][ T31] 2 locks held by syz-executor/9961: [ 322.040795][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.049253][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.058409][ T31] 2 locks held by syz-executor/9963: [ 322.063703][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.072048][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.081178][ T31] 2 locks held by syz-executor/9965: [ 322.086518][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.094740][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.104060][ T31] 2 locks held by syz-executor/9995: [ 322.109399][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.117660][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.126780][ T31] 2 locks held by syz-executor/10004: [ 322.132152][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.140442][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.149499][ T31] 2 locks held by syz-executor/10015: [ 322.154888][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.163233][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.172269][ T31] 2 locks held by syz-executor/10017: [ 322.177722][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.185989][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.194993][ T31] 2 locks held by syz-executor/10019: [ 322.200413][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 322.208760][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 322.217869][ T31] [ 322.220195][ T31] ============================================= [ 322.220195][ T31] [ 322.228660][ T31] NMI backtrace for cpu 0 [ 322.228681][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 322.228701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.228712][ T31] Call Trace: [ 322.228720][ T31] [ 322.228729][ T31] dump_stack_lvl+0x189/0x250 [ 322.228760][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.228783][ T31] ? __pfx__printk+0x10/0x10 [ 322.228822][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 322.228853][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 322.228883][ T31] ? __pfx__printk+0x10/0x10 [ 322.228914][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 322.228946][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 322.228977][ T31] watchdog+0xf93/0xfe0 [ 322.229009][ T31] ? watchdog+0x1de/0xfe0 [ 322.229041][ T31] kthread+0x70e/0x8a0 [ 322.229068][ T31] ? __pfx_watchdog+0x10/0x10 [ 322.229093][ T31] ? __pfx_kthread+0x10/0x10 [ 322.229119][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.229149][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.229167][ T31] ? __pfx_kthread+0x10/0x10 [ 322.229192][ T31] ret_from_fork+0x436/0x7d0 [ 322.229215][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 322.229241][ T31] ? __switch_to_asm+0x39/0x70 [ 322.229265][ T31] ? __switch_to_asm+0x33/0x70 [ 322.229288][ T31] ? __pfx_kthread+0x10/0x10 [ 322.229313][ T31] ret_from_fork_asm+0x1a/0x30 [ 322.229354][ T31] [ 322.229362][ T31] Sending NMI from CPU 0 to CPUs 1: [ 322.374743][ C1] NMI backtrace for cpu 1 [ 322.374761][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 322.374781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.374792][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 322.374814][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 322.374830][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 322.374846][ C1] RAX: 972ed4e29e0d4000 RBX: ffffffff819693f8 RCX: 972ed4e29e0d4000 [ 322.374860][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b9ce8 RDI: ffffffff8be33c00 [ 322.374872][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 322.374886][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a730 [ 322.374899][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 322.374910][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 322.374925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.374937][ C1] CR2: 000055b37290e000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 322.374953][ C1] Call Trace: [ 322.374960][ C1] [ 322.374966][ C1] default_idle+0x13/0x20 [ 322.374986][ C1] default_idle_call+0x74/0xb0 [ 322.375008][ C1] do_idle+0x1e8/0x510 [ 322.375024][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 322.375044][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.375061][ C1] ? __pfx_do_idle+0x10/0x10 [ 322.375082][ C1] ? do_idle+0xe/0x510 [ 322.375099][ C1] cpu_startup_entry+0x44/0x60 [ 322.375115][ C1] start_secondary+0x101/0x110 [ 322.375141][ C1] common_startup_64+0x13e/0x147 [ 322.375171][ C1] [ 322.375791][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 322.375807][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 322.375829][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.375841][ T31] Call Trace: [ 322.375849][ T31] [ 322.375858][ T31] dump_stack_lvl+0x99/0x250 [ 322.375884][ T31] ? __asan_memcpy+0x40/0x70 [ 322.375908][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.375931][ T31] ? __pfx__printk+0x10/0x10 [ 322.375969][ T31] vpanic+0x281/0x750 [ 322.375994][ T31] ? __pfx_vpanic+0x10/0x10 [ 322.376015][ T31] ? preempt_schedule+0xae/0xc0 [ 322.376036][ T31] ? preempt_schedule_common+0x83/0xd0 [ 322.376061][ T31] panic+0xb9/0xc0 [ 322.376082][ T31] ? __pfx_panic+0x10/0x10 [ 322.376105][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 322.376140][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 322.376170][ T31] watchdog+0xfd2/0xfe0 [ 322.376202][ T31] ? watchdog+0x1de/0xfe0 [ 322.376233][ T31] kthread+0x70e/0x8a0 [ 322.376261][ T31] ? __pfx_watchdog+0x10/0x10 [ 322.376287][ T31] ? __pfx_kthread+0x10/0x10 [ 322.376313][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.376341][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.376359][ T31] ? __pfx_kthread+0x10/0x10 [ 322.376393][ T31] ret_from_fork+0x436/0x7d0 [ 322.376416][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 322.376441][ T31] ? __switch_to_asm+0x39/0x70 [ 322.376465][ T31] ? __switch_to_asm+0x33/0x70 [ 322.376488][ T31] ? __pfx_kthread+0x10/0x10 [ 322.376512][ T31] ret_from_fork_asm+0x1a/0x30 [ 322.376552][ T31] [ 322.707201][ T31] Kernel Offset: disabled [ 322.711510][ T31] Rebooting in 86400 seconds..