last executing test programs: 1m16.45362724s ago: executing program 4 (id=2089): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7961fdffffff000000007e00000999ac46eb9330a97ae4dd000c0099006d910000150000000000570001000000000018012900ff0f0000a1000100000000002201510000000000270002000000000019010600000000002600f41500000000180102000000000027000200000000009f0001000000000019010d000000000019010400000000002600251700000000a100060000000000570009000000"], 0xfffffffffffffdd4}, 0x1, 0x0, 0x0, 0x50}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfa, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x24}}, 0x800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x2b, 0x6, "3924ccd3136643371d477edcaa1e92ff342f9d8ec4a17bfc07c9b5c112d77d4e2f7084f4b6f528"}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20520321}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58010000", @ANYRES16=r12, @ANYBLOB="00042ca67000fcdbdf25040000008000019d080001ad", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002006d6163767461703000000000000000001400020076657468315f766c616e000000000000080003000200000014000200766972745f77696669300000000000001400020076657468315f766972745f77696669001400020076657468305f746f5f687372000000000c000180080003000000000048000180140002006d6163766c616e30000000000000000008000300000000001400020076657468305f6d616376746170000000140002006272696467655f736c6176655f3100002000018008000100", @ANYRES32=r5, @ANYBLOB="14000200736974300000000000000000000000000c00018008000300040000001400018008000100", @ANYRES32=r4, @ANYBLOB="08000300030000003000018008000100", @ANYRES32=r4, @ANYBLOB="140002006272696467655f736c6176655f310000080003000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x158}, 0x1, 0x0, 0x0, 0x4000880}, 0x24040080) (async) socket$nl_route(0x10, 0x3, 0x0) 1m16.233677121s ago: executing program 4 (id=2094): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socketpair(0x11, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r3, 0x29, 0x2b, 0x0, 0xfff3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000400), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = getpid() sendmsg$unix(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000010"], 0x30}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x64}}, 0x0) r9 = socket(0x2a, 0x2, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000140)={0x8}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000406c6d0ac9045cff38481d8bcc0f94e617c880078728681740bfefb9fc7f712e501891ae0a53d163c8cc5e3e3de44e462629bdf9652b6d1fecfb59eeef04ef112d7656f09fa1f04757b9293e1168f482b8c9e5544824a01001294034bbf99827968375491cde2f3fb1c2d9afef6a70079167b15b09c8c8afe6f8cd3", @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c009900f40000002f000000080026007f17000008009f0006000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r15, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r15, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r16, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 17.275579042s ago: executing program 4 (id=2120): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001705000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r1, 0x1, 0x7fffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x0, 0xa4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040850) 17.178009547s ago: executing program 4 (id=2122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x1, 0xb7, 0x7, 0x3}, {0x6, 0xb, 0x6, 0xffffffff}]}, 0x10) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) syz_emit_ethernet(0x87, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, "a5", "c4b74a", 0x19, "f4b30fdd7674d0345794245a0bc8c46960e8cdefc72c43219e4a44529a3707897d18236b8b93d560859bd7bf16c333dfbca83c4b69af814ffd229ec7bd2be02c1b27e5dd11c05192ce492396b88d083e09a2428294bc454ed9dd4f7548cc4d3f552b86c088c936fa2acd6d6ea44b06cf72"}}}}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x20, 0x117, 0x2, "f375c76056006f287bf244caa8f2b59c"}], 0x20}, 0x20000001) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, 0x0, 0x0) close(r9) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xca, 0x0, 0x1a00}}, 0x1c}}, 0x0) 16.803499118s ago: executing program 2 (id=2135): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) (async) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) (async) 16.651463583s ago: executing program 0 (id=2139): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/200, 0xc8}, {0x0}, {&(0x7f00000006c0)=""/57, 0x39}], 0x4}, 0x40000042) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 16.588404835s ago: executing program 2 (id=2142): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth0\x00', 0x1}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 16.583513568s ago: executing program 0 (id=2143): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) 16.508398265s ago: executing program 1 (id=2145): syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c20000001704b45adbde8100000008004500005c0000000000019078ac1e0001ac1414aa05009086ac1414aa400000000000000200880000ac14140000000000441c00000000000000000000000000000000000000000000000000008600000000074289b015b1000000"], 0x0) r0 = socket(0x1a, 0xd, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvlan0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x9, 0x8, "b3bbd6d79c35"}}) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @remote, @remote, [@srh]}}}}}}}, 0x0) 16.507981474s ago: executing program 3 (id=2146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) connect$unix(r0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x30, "da3fb71162887cd7116c73e9a3d2eb3c4ce1b1a89c2991d89b3504067ba113f12b6446ba21be518670a296df9b46789f"}, &(0x7f0000000100)=0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.496083882s ago: executing program 1 (id=2147): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x841, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 16.495290483s ago: executing program 0 (id=2148): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x20, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x7, 0xd99d}}]}]}}}]}, 0x68}}, 0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000006bc0), 0x0, 0x4040001) connect$inet6(r4, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x870, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/223, 0xdf, 0x1, &(0x7f0000001580)=""/4096, 0x1000}, &(0x7f0000000180)=0x40) 16.4601255s ago: executing program 3 (id=2149): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="42c3a6a34ab0", 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x20000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xc9a3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x4004044) 16.4124232s ago: executing program 2 (id=2150): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 16.408677634s ago: executing program 1 (id=2151): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r2, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) 16.400935163s ago: executing program 1 (id=2152): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 16.388329946s ago: executing program 0 (id=2153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/200, 0xc8}, {0x0}, {&(0x7f00000006c0)=""/57, 0x39}], 0x4}, 0x40000042) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 16.314017936s ago: executing program 2 (id=2154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000600)={0xfffffffffffffffe, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="080000002b1fbbafca6fc8b8031d8783ecf783638da5354496f1becbd2b6", @ANYRES16=r3, @ANYBLOB="300a27bd7000fedbdf250e0000000a00090023c419b0179f00000800340001000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20040004) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0x0, 0x9, @local}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xd0}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0040001d0000000000000000000000340000006a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r6, r4}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711084000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) 16.31338808s ago: executing program 3 (id=2155): r0 = socket(0x1, 0x4, 0x20) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x38, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.302614043s ago: executing program 0 (id=2156): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000a018001280b5f07a7e168808000100707070003900", @ANYRES32, @ANYBLOB="08001f0000000000"], 0x40}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (rerun: 64) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) close(r0) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000010201010000000000000000c8f40000"], 0x14}}, 0x0) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) (async) close(r3) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) close(r5) 16.282541436s ago: executing program 1 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c000000002e000000000000", @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x24008810) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 16.221653386s ago: executing program 4 (id=2158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000f00)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) write$tun(r2, &(0x7f0000000700)={@val={0x0, 0x92ee}, @void, @ipv6=@icmpv6={0x0, 0x6, "94163a", 0x200, 0x3a, 0x0, @private2, @empty, {[@dstopts={0xe6, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim]}, @routing={0x2b, 0x6, 0x0, 0x8, 0x0, [@private2, @local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x32, 0x0, 0x40, 0x0, 0x0, 0x9, 0x66}, @routing={0x5c, 0x6, 0x0, 0x0, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}]}, @routing={0x6, 0x12, 0x2, 0x5, 0x0, [@private1, @mcast2, @loopback, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2]}, @dstopts={0x33, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @generic={0x7, 0x38, "112cf08d3a1cb843474bf630118b4dc10685bc00d5998f0c64da04892672d234e4d92ff14f51c864d358429374fee3692b9cf7408ed639ca"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x0, [0x2, 0x2]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x3f, [0xe8, 0x7fff, 0x3, 0x10000, 0x3]}}, @enc_lim={0x4, 0x1, 0x8}]}], @mld={0x82, 0x0, 0x0, 0x3, 0x3, @private1}}}}, 0x22c) 16.217419021s ago: executing program 3 (id=2159): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xda6118dfbc15f4d) 16.165278814s ago: executing program 3 (id=2160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "533c932673ee643155b135ee1ca69bad2f359532e6adad82796de6a52de7def06851a079016acac8614e1deb172adb020db2679b8e170af0e4f7ba3fd1ff56eecb9370bd4e8d66125070c326d073999f27fda68adaf117a5b103f261deb490cb97e246e4e0d702ccefcd44d21d5de5e44c24ecfaadf810a1929df9977ae4e09718"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xdc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x1c, r5, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x6, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'bridge_slave_1\x00', 0x4}, 0x18) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000000)="b86b", 0x2) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "b8ded7c1103f2d5f", "c2113149ccd27767ded1a63dad6a21bf", "130cfa30", "1a1a6920eece7b92"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) 16.15431559s ago: executing program 2 (id=2161): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x81}, 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) close(r3) 16.152632476s ago: executing program 4 (id=2162): r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @empty, 0x8}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x0, @local}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) 16.068169068s ago: executing program 2 (id=2163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2d}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x240008c0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000090001007309"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r7, 0x0, 0xfffffffffffffff9}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r8}, 0x10) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000200)={0x336800, 0x8, 0xab52, 0x6, 0x493, 0x2}) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x2e67, 0x80000000, 0x3, 0xfffd, 0xe1a, 0xd5cd, 0x8001, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0x6, 0x5, 0x1c9d, 0x6, 0x10001}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f00000005c0)={r11, 0xffffffff}, &(0x7f0000000640)=0x8) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0xab, 0xfffffffa, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000060000000100000000000000", @ANYBLOB="16c616000000000000000000001ccc000000005bf400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000002a00)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008"], 0x4c}}, 0x20000011) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 16.060833777s ago: executing program 1 (id=2164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r2, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000030504000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c00", @ANYRES32, @ANYBLOB="0d2b00f1565d6b0ad89ae23995857877a1311c73b3d095b1e92676e8172e33e6806e584b25fbe872f4d76c958470b1ee287a60d939a0ea63040311855fdb5b86a31db2b9c893d5f53f21ff14f47ff25dec39748204c1ec8063b8c16f059d8a3f73393cbbb650a7cbbec3727667df01f6c87169d03e7e2b533d5b0e6d815132d262d38652baaa96b0727c205319bcca9118ca41970239f25c3a0b06f2a2a464cc463e1b2dda3e7d7532ed9883349ba0c655"], 0x30}}, 0x0) 16.038133255s ago: executing program 3 (id=2165): r0 = socket(0x2c, 0x3, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1c00}}}}]}, 0x40}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_hsr\x00', {0x54}, 0x13}) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) 16.037636534s ago: executing program 0 (id=2166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/200, 0xc8}, {0x0}, {&(0x7f00000006c0)=""/57, 0x39}], 0x4}, 0x40000042) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 160.97064ms ago: executing program 32 (id=2166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0xffffffffffffff8a, &(0x7f0000000000)="e6", 0x9, 0x1, 0xd45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24004044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acd", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000007c0)=""/200, 0xc8}, {0x0}, {&(0x7f00000006c0)=""/57, 0x39}], 0x4}, 0x40000042) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) 139.009047ms ago: executing program 33 (id=2164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r2, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000030504000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c00", @ANYRES32, @ANYBLOB="0d2b00f1565d6b0ad89ae23995857877a1311c73b3d095b1e92676e8172e33e6806e584b25fbe872f4d76c958470b1ee287a60d939a0ea63040311855fdb5b86a31db2b9c893d5f53f21ff14f47ff25dec39748204c1ec8063b8c16f059d8a3f73393cbbb650a7cbbec3727667df01f6c87169d03e7e2b533d5b0e6d815132d262d38652baaa96b0727c205319bcca9118ca41970239f25c3a0b06f2a2a464cc463e1b2dda3e7d7532ed9883349ba0c655"], 0x30}}, 0x0) 107.814732ms ago: executing program 34 (id=2163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2d}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x240008c0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000090001007309"], 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r7, 0x0, 0xfffffffffffffff9}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r8}, 0x10) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000200)={0x336800, 0x8, 0xab52, 0x6, 0x493, 0x2}) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x2e67, 0x80000000, 0x3, 0xfffd, 0xe1a, 0xd5cd, 0x8001, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0x6, 0x5, 0x1c9d, 0x6, 0x10001}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f00000005c0)={r11, 0xffffffff}, &(0x7f0000000640)=0x8) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0xab, 0xfffffffa, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000060000000100000000000000", @ANYBLOB="16c616000000000000000000001ccc000000005bf400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000002a00)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x94) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="000102000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008"], 0x4c}}, 0x20000011) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 72.436791ms ago: executing program 35 (id=2165): r0 = socket(0x2c, 0x3, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1c00}}}}]}, 0x40}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'veth1_to_hsr\x00', {0x54}, 0x13}) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) 0s ago: executing program 36 (id=2162): r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @empty, 0x8}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x0, @local}}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 50.945903][ T5849] cgroup: Unknown subsys name 'net' [ 51.076126][ T5849] cgroup: Unknown subsys name 'cpuset' [ 51.083204][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.227218][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.596385][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.604446][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.611922][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.619224][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.629044][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.633748][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.644000][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.651235][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.652119][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.658611][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.671836][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.672710][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.679826][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.686877][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.694534][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.701219][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.707079][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.720892][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.728855][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.735863][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.746228][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.754222][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.755691][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.761653][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.769149][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.068063][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 56.194371][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 56.204123][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 56.241776][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 56.256001][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 56.324594][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.331699][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.339006][ T5862] bridge_slave_0: entered allmulticast mode [ 56.345706][ T5862] bridge_slave_0: entered promiscuous mode [ 56.362834][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.369932][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.377082][ T5871] bridge_slave_0: entered allmulticast mode [ 56.383466][ T5871] bridge_slave_0: entered promiscuous mode [ 56.390223][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.397586][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.404966][ T5862] bridge_slave_1: entered allmulticast mode [ 56.411311][ T5862] bridge_slave_1: entered promiscuous mode [ 56.428799][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.436034][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.443132][ T5871] bridge_slave_1: entered allmulticast mode [ 56.449721][ T5871] bridge_slave_1: entered promiscuous mode [ 56.494666][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.501762][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.509152][ T5859] bridge_slave_0: entered allmulticast mode [ 56.516455][ T5859] bridge_slave_0: entered promiscuous mode [ 56.530579][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.541800][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.552705][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.567432][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.574786][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.581878][ T5859] bridge_slave_1: entered allmulticast mode [ 56.588514][ T5859] bridge_slave_1: entered promiscuous mode [ 56.619590][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.646213][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.653353][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.660569][ T5869] bridge_slave_0: entered allmulticast mode [ 56.667822][ T5869] bridge_slave_0: entered promiscuous mode [ 56.676056][ T5871] team0: Port device team_slave_0 added [ 56.681872][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.688996][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.696132][ T5869] bridge_slave_1: entered allmulticast mode [ 56.702506][ T5869] bridge_slave_1: entered promiscuous mode [ 56.714163][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.721256][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.728561][ T5866] bridge_slave_0: entered allmulticast mode [ 56.735088][ T5866] bridge_slave_0: entered promiscuous mode [ 56.743138][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.754692][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.765061][ T5871] team0: Port device team_slave_1 added [ 56.779759][ T5862] team0: Port device team_slave_0 added [ 56.785750][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.792819][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.800058][ T5866] bridge_slave_1: entered allmulticast mode [ 56.806603][ T5866] bridge_slave_1: entered promiscuous mode [ 56.830763][ T5862] team0: Port device team_slave_1 added [ 56.863244][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.884691][ T5859] team0: Port device team_slave_0 added [ 56.890824][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.898402][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.924725][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.938477][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.948111][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.955136][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.981070][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.996835][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.006930][ T5859] team0: Port device team_slave_1 added [ 57.014543][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.024103][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.031027][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.057415][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.074065][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.080998][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.106887][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.141869][ T5869] team0: Port device team_slave_0 added [ 57.160960][ T5866] team0: Port device team_slave_0 added [ 57.168363][ T5866] team0: Port device team_slave_1 added [ 57.176619][ T5869] team0: Port device team_slave_1 added [ 57.183168][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.190169][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.216655][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.228930][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.236062][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.262027][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.309960][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.317145][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.343750][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.366501][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.373447][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.399375][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.411186][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.418147][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.444161][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.465144][ T5862] hsr_slave_0: entered promiscuous mode [ 57.471108][ T5862] hsr_slave_1: entered promiscuous mode [ 57.477808][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.485879][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.511947][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.525897][ T5871] hsr_slave_0: entered promiscuous mode [ 57.531986][ T5871] hsr_slave_1: entered promiscuous mode [ 57.537999][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 57.543769][ T5871] Cannot create hsr debugfs directory [ 57.583211][ T5859] hsr_slave_0: entered promiscuous mode [ 57.589263][ T5859] hsr_slave_1: entered promiscuous mode [ 57.595354][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 57.601082][ T5859] Cannot create hsr debugfs directory [ 57.660893][ T5866] hsr_slave_0: entered promiscuous mode [ 57.667210][ T5866] hsr_slave_1: entered promiscuous mode [ 57.673466][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 57.679510][ T5866] Cannot create hsr debugfs directory [ 57.715777][ T5869] hsr_slave_0: entered promiscuous mode [ 57.721694][ T5869] hsr_slave_1: entered promiscuous mode [ 57.728155][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 57.733909][ T5869] Cannot create hsr debugfs directory [ 57.783789][ T5873] Bluetooth: hci0: command tx timeout [ 57.789241][ T5874] Bluetooth: hci1: command tx timeout [ 57.863770][ T5874] Bluetooth: hci4: command tx timeout [ 57.869231][ T5873] Bluetooth: hci3: command tx timeout [ 57.869249][ T5865] Bluetooth: hci2: command tx timeout [ 57.968092][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.976706][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.988607][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.997044][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.031225][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.040451][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.049716][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.059897][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.105597][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.117097][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.126305][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.135794][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.202042][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.211313][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.220342][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.229925][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.268345][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.278242][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.287230][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.298518][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.314539][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.345970][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.366905][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.374023][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.382399][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.389523][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.411542][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.426416][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.460092][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.484224][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.500970][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.527847][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.534962][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.548943][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.556055][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.586699][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.612858][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.620007][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.646467][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.653562][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.670970][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.682914][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.690034][ T4656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.711273][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.729932][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.737057][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.768670][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.788315][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.802678][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.815500][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.865852][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.872936][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.882311][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.889434][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.007508][ T5859] veth0_vlan: entered promiscuous mode [ 59.044734][ T5859] veth1_vlan: entered promiscuous mode [ 59.083325][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.127072][ T5859] veth0_macvtap: entered promiscuous mode [ 59.139339][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.156750][ T5859] veth1_macvtap: entered promiscuous mode [ 59.214768][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.239405][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.251215][ T5866] veth0_vlan: entered promiscuous mode [ 59.264425][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.275513][ T5871] veth0_vlan: entered promiscuous mode [ 59.286280][ T5871] veth1_vlan: entered promiscuous mode [ 59.295674][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.305439][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.325910][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.335825][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.366674][ T5866] veth1_vlan: entered promiscuous mode [ 59.387571][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.431146][ T5871] veth0_macvtap: entered promiscuous mode [ 59.447114][ T4656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.451372][ T5862] veth0_vlan: entered promiscuous mode [ 59.461722][ T4656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.471897][ T5871] veth1_macvtap: entered promiscuous mode [ 59.491518][ T5866] veth0_macvtap: entered promiscuous mode [ 59.520890][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.529209][ T5866] veth1_macvtap: entered promiscuous mode [ 59.546312][ T5862] veth1_vlan: entered promiscuous mode [ 59.557894][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.581997][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.590587][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.599726][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.617679][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.629764][ T5862] veth0_macvtap: entered promiscuous mode [ 59.638330][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.679785][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.691615][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.692549][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.736368][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.746871][ T5862] veth1_macvtap: entered promiscuous mode [ 59.753267][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.764824][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.773581][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.782936][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.847113][ T5978] Zero length message leads to an empty skb [ 59.850038][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.863873][ T5865] Bluetooth: hci1: command tx timeout [ 59.869269][ T5865] Bluetooth: hci0: command tx timeout [ 59.881324][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.891879][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.907151][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.927880][ T5869] veth0_vlan: entered promiscuous mode [ 59.946181][ T5865] Bluetooth: hci2: command tx timeout [ 59.946194][ T5873] Bluetooth: hci3: command tx timeout [ 59.951589][ T5865] Bluetooth: hci4: command tx timeout [ 59.969346][ T4656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.979279][ T4656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.008119][ T4656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.021458][ T4656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.036968][ T5869] veth1_vlan: entered promiscuous mode [ 60.043290][ T5982] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.043298][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.043312][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.069905][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.084122][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.142629][ T5869] veth0_macvtap: entered promiscuous mode [ 60.170416][ T5869] veth1_macvtap: entered promiscuous mode [ 60.219750][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.232478][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.232680][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.252364][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.254952][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.299314][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.310304][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 60.321400][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.331541][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.372047][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.397721][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 60.408780][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.424709][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.479058][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 60.522338][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.531692][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.669712][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.695314][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.761197][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.778515][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.785456][ T6014] tipc: Started in network mode [ 60.792263][ T6014] tipc: Node identity 26f94ec04f91, cluster identity 4711 [ 60.802064][ T6014] tipc: Enabled bearer , priority 0 [ 60.840649][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 60.850016][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 60.892877][ T6020] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 60.932538][ T6014] syzkaller0: entered promiscuous mode [ 60.938737][ T6014] syzkaller0: entered allmulticast mode [ 60.945947][ T6014] tipc: Resetting bearer [ 60.960249][ T5932] IPVS: starting estimator thread 0... [ 60.960911][ T1007] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 61.026543][ T6020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.040362][ T6026] vlan1: entered allmulticast mode [ 61.046088][ T6026] veth0_vlan: entered allmulticast mode [ 61.061800][ T6013] tipc: Resetting bearer [ 61.074647][ T6029] IPVS: using max 41 ests per chain, 98400 per kthread [ 61.120450][ T6037] netlink: 'syz.4.19': attribute type 28 has an invalid length. [ 61.131558][ T6037] netlink: 'syz.4.19': attribute type 3 has an invalid length. [ 61.139841][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 61.141760][ T6037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19'. [ 61.171860][ T6013] tipc: Disabling bearer [ 61.263622][ T6044] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.295356][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 61.305594][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23'. [ 61.418919][ T6052] syzkaller0: entered promiscuous mode [ 61.424753][ T6052] syzkaller0: entered allmulticast mode [ 61.597811][ T6025] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 61.722409][ T6063] netlink: 'syz.2.26': attribute type 7 has an invalid length. [ 61.809392][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.30'. [ 61.946421][ T5865] Bluetooth: hci0: command tx timeout [ 61.947779][ T5873] Bluetooth: hci1: command tx timeout [ 62.024928][ T5873] Bluetooth: hci4: command tx timeout [ 62.024977][ T5865] Bluetooth: hci3: command tx timeout [ 62.030333][ T5873] Bluetooth: hci2: command tx timeout [ 62.439326][ T6112] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 62.623362][ T6130] openvswitch: netlink: Multiple metadata blocks provided [ 62.745865][ T6141] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 62.840284][ T6153] netlink: 'syz.2.52': attribute type 21 has an invalid length. [ 62.863573][ T6157] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 62.896965][ T6157] netlink: 'syz.4.53': attribute type 7 has an invalid length. [ 63.037375][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.044929][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.266734][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.281415][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.421395][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.443922][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.475607][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.521241][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.568433][ T6209] veth0: entered promiscuous mode [ 63.720044][ T6221] netlink: 'syz.4.67': attribute type 2 has an invalid length. [ 63.733046][ T6221] nbd: must specify a device to reconfigure [ 63.737235][ T6208] veth0: left promiscuous mode [ 63.782457][ T6225] netlink: 'syz.1.68': attribute type 5 has an invalid length. [ 63.914099][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.966462][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.015669][ T6231] bond0 (unregistering): Released all slaves [ 64.024193][ T5874] Bluetooth: hci0: command tx timeout [ 64.030062][ T5865] Bluetooth: hci1: command tx timeout [ 64.104476][ T5874] Bluetooth: hci3: command tx timeout [ 64.104605][ T5865] Bluetooth: hci4: command tx timeout [ 64.110136][ T5874] Bluetooth: hci2: command tx timeout [ 64.151536][ T6242] syz.3.73 uses obsolete (PF_INET,SOCK_PACKET) [ 64.421851][ T6269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.597246][ T6277] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 64.675352][ T6280] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 64.713163][ T6286] tipc: Enabling of bearer rejected, failed to enable media [ 64.757783][ T6288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.083908][ T6312] nbd: error processing sock list [ 65.091233][ T1007] syzkaller0: tun_net_xmit 76 [ 65.099084][ T1007] syzkaller0: tun_net_xmit 48 [ 65.113831][ T5988] syzkaller0: tun_net_xmit 76 [ 65.118800][ T6312] block nbd0: shutting down sockets [ 65.491114][ T6351] __nla_validate_parse: 18 callbacks suppressed [ 65.491129][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 65.770395][ T6380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.787002][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.979348][ T6398] bridge_slave_0: left allmulticast mode [ 66.006555][ T6398] bridge_slave_0: left promiscuous mode [ 66.025789][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.038575][ T6398] bridge_slave_1: left allmulticast mode [ 66.052747][ T6398] bridge_slave_1: left promiscuous mode [ 66.065371][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.089291][ T6398] bond0: (slave bond_slave_0): Releasing backup interface [ 66.116272][ T6398] bond0: (slave bond_slave_1): Releasing backup interface [ 66.144385][ T6398] team0: Port device team_slave_0 removed [ 66.152532][ T6418] validate_nla: 3 callbacks suppressed [ 66.152547][ T6418] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 66.169455][ T6418] netlink: 232 bytes leftover after parsing attributes in process `syz.0.123'. [ 66.169546][ T6398] team0: Port device team_slave_1 removed [ 66.179157][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 66.194668][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 66.207596][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.215768][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.224381][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.234919][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.259462][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 66.343014][ T6426] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 66.508244][ T6441] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 66.572628][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 66.636843][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 66.699829][ T6454] team0: Device gtp0 is of different type [ 66.718761][ T6459] (unnamed net_device) (uninitialized): option use_carrier: invalid value (3) [ 66.746552][ T6465] syzkaller1: entered promiscuous mode [ 66.761171][ T6465] syzkaller1: entered allmulticast mode [ 66.798406][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 66.820025][ T6474] dvmrp0: entered allmulticast mode [ 66.846438][ T6474] ipvlan2: entered promiscuous mode [ 66.862974][ T6476] tipc: Started in network mode [ 66.866025][ T6478] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 66.869516][ T6476] tipc: Node identity e69354a36f53, cluster identity 4711 [ 66.882727][ T6476] tipc: Enabled bearer , priority 0 [ 66.895431][ T6478] netlink: 'syz.2.144': attribute type 16 has an invalid length. [ 66.907204][ T6478] netlink: 'syz.2.144': attribute type 3 has an invalid length. [ 66.915333][ T6478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.144'. [ 66.928070][ T6476] syzkaller0: entered promiscuous mode [ 66.937253][ T6476] syzkaller0: entered allmulticast mode [ 66.943335][ T6476] tipc: Resetting bearer [ 66.968361][ T6475] tipc: Resetting bearer [ 67.023274][ T6491] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 67.034183][ T6491] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 67.057873][ T6475] tipc: Disabling bearer [ 67.142544][ T6502] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 67.143401][ T6503] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 67.291171][ T6521] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 67.351533][ T6526] netlink: 'syz.1.158': attribute type 10 has an invalid length. [ 67.422643][ T6526] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 67.450685][ T6537] sctp: [Deprecated]: syz.4.160 (pid 6537) Use of int in max_burst socket option. [ 67.450685][ T6537] Use struct sctp_assoc_value instead [ 67.674553][ T6562] gtp0: entered promiscuous mode [ 67.681120][ T6562] gtp0: entered allmulticast mode [ 67.694502][ T6553] tipc: Enabling of bearer rejected, failed to enable media [ 67.702963][ T6552] tipc: Enabling of bearer rejected, failed to enable media [ 67.952279][ T6603] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 67.965620][ T6603] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 68.318540][ T6641] bond2: entered promiscuous mode [ 68.325127][ T6641] bond2: entered allmulticast mode [ 68.331381][ T6641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.349725][ T6641] bond2 (unregistering): Released all slaves [ 68.983264][ T6720] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 68.995033][ T6723] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 69.020850][ T6723] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 69.079839][ T6729] geneve2: entered promiscuous mode [ 69.089854][ T6729] geneve2: entered allmulticast mode [ 69.105625][ T148] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 69.114818][ T148] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 69.174549][ T6729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.192268][ T148] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 69.259767][ T6749] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 69.278259][ T6746] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 69.507851][ T24] IPVS: starting estimator thread 0... [ 69.615128][ T6775] IPVS: using max 45 ests per chain, 108000 per kthread [ 69.814128][ T6805] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 69.821161][ T6809] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 69.828978][ T6805] openvswitch: netlink: IP tunnel dst address not specified [ 69.891978][ T6819] syz.1.258 uses old SIOCAX25GETINFO [ 69.925311][ T6823] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 70.053142][ T6841] veth1_to_bond: entered allmulticast mode [ 70.098419][ T6841] veth1_to_bond (unregistering): left allmulticast mode [ 70.113199][ T6844] tipc: Started in network mode [ 70.118289][ T6844] tipc: Node identity 2e8fff56d056, cluster identity 4711 [ 70.126723][ T6844] tipc: Enabled bearer , priority 0 [ 70.135821][ T6844] syzkaller0: entered promiscuous mode [ 70.141402][ T6844] syzkaller0: entered allmulticast mode [ 70.158286][ T6844] tipc: Resetting bearer [ 70.178985][ T6843] tipc: Resetting bearer [ 70.205030][ T6843] tipc: Disabling bearer [ 70.212971][ T6851] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 70.265485][ T6860] openvswitch: netlink: Flow key attr not present in new flow. [ 70.459694][ T6883] bridge0: port 3(vlan2) entered blocking state [ 70.466362][ T6883] bridge0: port 3(vlan2) entered disabled state [ 70.472828][ T6883] vlan2: entered allmulticast mode [ 70.478745][ T6883] bridge0: entered allmulticast mode [ 70.485082][ T6883] vlan2: left allmulticast mode [ 70.489980][ T6883] bridge0: left allmulticast mode [ 70.503012][ T6886] __nla_validate_parse: 39 callbacks suppressed [ 70.503027][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 70.583505][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 70.599652][ T6729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.610702][ T6729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 70.678177][ T6729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.688871][ T6729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 70.728091][ T6729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.738554][ T6729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 70.843217][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 70.851730][ T49] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.865916][ T6895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.881960][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 70.893561][ T49] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.903524][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 70.912446][ T49] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.932138][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 70.949488][ T49] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 70.998876][ T6905] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.036684][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 71.047080][ T6909] netlink: 164 bytes leftover after parsing attributes in process `syz.4.287'. [ 71.096253][ T6914] vlan2: entered promiscuous mode [ 71.101533][ T6914] vlan2: entered allmulticast mode [ 71.108551][ T6914] hsr_slave_1: entered allmulticast mode [ 71.162063][ T6921] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.291'. [ 71.171703][ T6921] netlink: zone id is out of range [ 71.177989][ T6921] netlink: zone id is out of range [ 71.183295][ T6921] netlink: zone id is out of range [ 71.192101][ T6921] netlink: zone id is out of range [ 71.209646][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 71.218979][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 71.306831][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313134][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.825878][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 71.849316][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 71.904965][ T6997] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 71.941218][ T6997] syzkaller0: entered promiscuous mode [ 71.953499][ T6997] syzkaller0: entered allmulticast mode [ 71.973272][ T6997] tipc: Started in network mode [ 71.978360][ T6997] tipc: Node identity , cluster identity 4711 [ 71.984911][ T6997] tipc: Failed to obtain node identity [ 71.990461][ T6997] tipc: Enabling of bearer rejected, failed to enable media [ 72.018749][ T7003] netlink: 68 bytes leftover after parsing attributes in process `syz.4.317'. [ 72.290356][ T7035] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20002 [ 72.456019][ T7053] veth1_to_hsr: default FDB implementation only supports local addresses [ 72.633177][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.095798][ T7131] syzkaller1: entered promiscuous mode [ 73.101670][ T7131] syzkaller1: entered allmulticast mode [ 73.943828][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 74.444059][ T7214] bridge_slave_0: left allmulticast mode [ 74.449733][ T7214] bridge_slave_0: left promiscuous mode [ 74.477746][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.487242][ T7214] bridge_slave_1: left allmulticast mode [ 74.492995][ T7214] bridge_slave_1: left promiscuous mode [ 74.528551][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.546699][ T7214] bond0: (slave bond_slave_0): Releasing backup interface [ 74.561457][ T7214] bond0: (slave bond_slave_1): Releasing backup interface [ 74.587180][ T7214] team0: Port device team_slave_0 removed [ 74.609378][ T7214] team0: Port device team_slave_1 removed [ 74.636691][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.654335][ T5865] block nbd0: Receive control failed (result -32) [ 74.663810][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.674509][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.682795][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.828143][ T7227] validate_nla: 4 callbacks suppressed [ 74.828161][ T7227] netlink: 'syz.1.390': attribute type 9 has an invalid length. [ 74.862181][ T7228] netlink: 'syz.1.390': attribute type 9 has an invalid length. [ 74.936754][ T7235] net_ratelimit: 5 callbacks suppressed [ 74.936770][ T7235] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 75.008227][ T7241] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 75.418315][ T7270] Unsupported ieee802154 address type: 0 [ 75.567819][ T7303] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 75.585798][ T7303] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 75.610809][ T7303] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 75.628709][ T7303] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 75.638478][ T7313] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 75.651725][ T7303] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 75.717944][ T7320] netlink: 'syz.1.416': attribute type 12 has an invalid length. [ 75.741859][ T7320] __nla_validate_parse: 39 callbacks suppressed [ 75.741875][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 75.778610][ T1007] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.790842][ T1007] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.799980][ T7320] netlink: 'syz.1.416': attribute type 12 has an invalid length. [ 75.812137][ T1007] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.836922][ T1007] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.855553][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 75.855628][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 75.915568][ T7320] netlink: 88 bytes leftover after parsing attributes in process `syz.1.416'. [ 75.925003][ T7323] openvswitch: netlink: Unknown nsh attribute 0 [ 75.931267][ T7323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.987506][ T7332] wg2: entered promiscuous mode [ 75.993356][ T7332] wg2: entered allmulticast mode [ 76.154815][ T7343] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 76.425478][ T43] cfg80211: failed to load regulatory.db [ 76.527158][ T7378] tipc: Started in network mode [ 76.541229][ T7378] tipc: Node identity fffff001, cluster identity 4711 [ 76.555819][ T7378] tipc: Node number set to 4294963201 [ 76.597110][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.626486][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.669302][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.696016][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.772524][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 76.787914][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 76.826621][ T7393] syz.2.439 (7393) used greatest stack depth: 17992 bytes left [ 76.886734][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 76.904450][ T7409] Bluetooth: MGMT ver 1.23 [ 76.991074][ T7417] netlink: 80 bytes leftover after parsing attributes in process `syz.2.450'. [ 77.035611][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 77.050593][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'. [ 77.077263][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.078350][ T7422] bond1: entered promiscuous mode [ 77.093049][ T7422] bond1: entered allmulticast mode [ 77.098640][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.106504][ T7427] tunl0: entered promiscuous mode [ 77.375587][ T7461] geneve2: entered promiscuous mode [ 77.380866][ T7461] geneve2: entered allmulticast mode [ 77.435668][ T7465] sock: sock_timestamping_bind_phc: sock not bind to device [ 80.497245][ T7469] validate_nla: 7 callbacks suppressed [ 80.497258][ T7469] netlink: 'syz.4.466': attribute type 3 has an invalid length. [ 80.526699][ T7471] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.613139][ T7487] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 80.674387][ T7495] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 80.674387][ T7493] netlink: 'syz.0.473': attribute type 23 has an invalid length. [ 80.864747][ T7511] __nla_validate_parse: 8 callbacks suppressed [ 80.864763][ T7511] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.479'. [ 80.887080][ T7516] netlink: 92 bytes leftover after parsing attributes in process `syz.0.481'. [ 80.896246][ T7511] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.916039][ T7517] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.479'. [ 80.939921][ T7517] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.939994][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 80.985964][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 81.020641][ T7535] netlink: 'syz.3.486': attribute type 13 has an invalid length. [ 81.068156][ T7540] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 81.132228][ T7549] trusted_key: syz.1.492 sent an empty control message without MSG_MORE. [ 81.177031][ T7535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.262050][ T7561] Unsupported ieee802154 address type: 0 [ 81.289543][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 81.344246][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 81.365050][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 81.387396][ T7576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 81.530600][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'. [ 81.635460][ T7602] bridge_slave_0: entered allmulticast mode [ 81.649894][ T7602] bridge_slave_0: entered promiscuous mode [ 81.757745][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 81.788717][ T1007] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.797275][ T1007] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.805718][ T7622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.822473][ T1007] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.853389][ T1007] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.911056][ T7635] !€ÿ: renamed from bond_slave_0 [ 81.979760][ T7641] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 81.990060][ T7642] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 82.019674][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.027933][ T7641] bond0: (slave team0): Enslaving as an active interface with an up link [ 82.053363][ T7642] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 82.071960][ T7648] netlink: 'syz.4.523': attribute type 10 has an invalid length. [ 82.080439][ T7648] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 82.120342][ T7653] bridge_slave_1: left allmulticast mode [ 82.135218][ T7653] bridge_slave_1: left promiscuous mode [ 82.140908][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.166749][ T7653] bridge_slave_0: left allmulticast mode [ 82.172402][ T7653] bridge_slave_0: left promiscuous mode [ 82.182220][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.465390][ T7685] netlink: 'syz.2.535': attribute type 30 has an invalid length. [ 82.516979][ T7686] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 82.525791][ T7686] netlink: 'syz.0.537': attribute type 4 has an invalid length. [ 83.028009][ T7671] vlan2: entered allmulticast mode [ 83.033142][ T7671] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 83.431700][ T7723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.439896][ T7725] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 83.496990][ T7723] bond1: (slave gretap1): making interface the new active one [ 83.521189][ T7723] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 83.761343][ T7771] bond2: entered promiscuous mode [ 83.768160][ T7771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.802179][ T7781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.819666][ T7781] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 83.833761][ T7781] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 83.855624][ T7781] bond2: (slave wireguard0): making interface the new active one [ 83.876414][ T7781] wireguard0: entered promiscuous mode [ 83.887314][ T7781] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 83.900817][ T7783] : entered promiscuous mode [ 84.316857][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.377125][ T7821] bond0: (slave rose0): Enslaving as an active interface with an up link [ 84.890324][ T7883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.899021][ T7883] bond1: (slave bond2): making interface the new active one [ 84.910077][ T7883] bond1: (slave bond2): Enslaving as an active interface with an up link [ 84.926296][ T7884] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 85.194021][ T7924] !: renamed from dummy0 (while UP) [ 85.237688][ T7931] batadv1: entered allmulticast mode [ 85.316878][ T7932] batadv1: entered allmulticast mode [ 85.794154][ T7977] sctp: [Deprecated]: syz.1.610 (pid 7977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.794154][ T7977] Use struct sctp_sack_info instead [ 85.816443][ T7979] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 86.287918][ T8022] __nla_validate_parse: 18 callbacks suppressed [ 86.287937][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'. [ 86.321935][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 86.359935][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 86.426489][ T8034] netlink: 96 bytes leftover after parsing attributes in process `syz.3.624'. [ 86.818414][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 86.819767][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.642'. [ 86.843193][ T8091] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.938309][ T8100] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 87.001533][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.646'. [ 87.151499][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.647'. [ 87.168120][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.649'. [ 87.168412][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 87.190573][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.199075][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.213735][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.311231][ T8132] bond2: entered promiscuous mode [ 87.317807][ T8132] bond2: entered allmulticast mode [ 87.323098][ T8132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.432162][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.441617][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.567076][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.576580][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.966892][ T8180] validate_nla: 3 callbacks suppressed [ 87.966909][ T8180] netlink: 'syz.1.662': attribute type 29 has an invalid length. [ 87.998503][ T8180] Bluetooth: MGMT ver 1.23 [ 88.006478][ T8180] Illegal XDP return value 2064507316 on prog (id 160) dev syz_tun, expect packet loss! [ 88.017052][ T8180] Bluetooth: MGMT ver 1.23 [ 88.023847][ T8185] Can't find ip_set type bitmap:ip,mac [ 88.026018][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.100646][ T8196] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 88.266295][ T8215] syzkaller0: entered promiscuous mode [ 88.271920][ T8215] syzkaller0: entered allmulticast mode [ 88.537322][ T8239] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 88.622332][ T8246] bridge2: entered promiscuous mode [ 88.637951][ T8246] bridge2: entered allmulticast mode [ 88.650164][ T8256] openvswitch: netlink: IPv4 tunnel dst address is zero [ 88.766713][ T8261] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 88.776615][ T8261] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 88.805508][ T5988] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 88.826632][ T5988] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 88.879483][ T8275] veth1_macvtap: left promiscuous mode [ 88.994320][ T8284] netlink: 'syz.3.695': attribute type 8 has an invalid length. [ 90.421708][ T8399] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 90.548914][ T8414] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 90.570143][ T8414] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 90.688791][ T8432] tls_set_device_offload: netdev not found [ 90.890605][ T8456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.142030][ T43] IPVS: starting estimator thread 0... [ 91.223713][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.254550][ T8480] IPVS: using max 49 ests per chain, 117600 per kthread [ 91.476565][ T8520] __nla_validate_parse: 25 callbacks suppressed [ 91.476583][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 91.511073][ T8522] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.759'. [ 91.641763][ T8537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.661597][ T8540] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 91.703202][ T8540] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.831145][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 92.310954][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.786'. [ 92.385798][ T8626] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 92.435847][ T8632] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 92.465364][ T8637] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 92.536463][ T8637] bridge0: port 3(team0) entered blocking state [ 92.546697][ T8637] bridge0: port 3(team0) entered disabled state [ 92.561656][ T8637] team0: entered allmulticast mode [ 92.571303][ T8637] team_slave_0: entered allmulticast mode [ 92.583816][ T8637] team_slave_1: entered allmulticast mode [ 92.591550][ T8637] team0: entered promiscuous mode [ 92.597729][ T8637] team_slave_0: entered promiscuous mode [ 92.603656][ T8637] team_slave_1: entered promiscuous mode [ 92.609929][ T8637] bridge0: port 3(team0) entered blocking state [ 92.616262][ T8637] bridge0: port 3(team0) entered forwarding state [ 92.727217][ T8659] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 92.744450][ T8665] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 92.927523][ T8683] bond4: entered promiscuous mode [ 92.933095][ T8683] bond4: entered allmulticast mode [ 92.940968][ T8683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.950167][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 93.022473][ T8693] validate_nla: 2 callbacks suppressed [ 93.022490][ T8693] netlink: 'syz.2.809': attribute type 6 has an invalid length. [ 93.039227][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 93.066680][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 93.167591][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 93.176931][ T8712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.815'. [ 93.341419][ T8726] team0: Device gtp0 is up. Set it down before adding it as a team port [ 93.379113][ T8730] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 93.489839][ T8739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.824'. [ 93.799287][ T8772] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 94.397540][ T8840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.647747][ T8868] netlink: 'syz.4.868': attribute type 24 has an invalid length. [ 95.383857][ T5865] Bluetooth: hci0: command tx timeout [ 99.463764][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.463775][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.746169][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752508][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.823680][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.235400][ T8897] __nla_validate_parse: 4 callbacks suppressed [ 155.235417][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.872'. [ 155.275550][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'. [ 155.300924][ T8904] netlink: 'syz.4.874': attribute type 7 has an invalid length. [ 155.321314][ T8904] netlink: 'syz.4.874': attribute type 8 has an invalid length. [ 155.333109][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.872'. [ 155.345699][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 155.356916][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 155.459433][ T8904] gretap0: entered promiscuous mode [ 155.465883][ T8904] batadv_slave_1: entered promiscuous mode [ 155.472467][ T8904] erspan0: entered promiscuous mode [ 155.537773][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 155.547910][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 155.560629][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 155.603962][ T8938] delete_channel: no stack [ 155.911122][ T8988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.901'. [ 155.920867][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 155.935298][ T8988] netlink: 'syz.3.901': attribute type 3 has an invalid length. [ 155.953513][ T8988] netlink: 'syz.3.901': attribute type 2 has an invalid length. [ 156.045411][ T9000] bond0: option mode: unable to set because the bond device has slaves [ 156.100064][ T9005] netlink: 'syz.0.907': attribute type 15 has an invalid length. [ 156.137705][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 156.137804][ T9005] netlink: 'syz.0.907': attribute type 15 has an invalid length. [ 156.157092][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 156.166199][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 156.175738][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 156.310615][ T9014] netlink: 'syz.0.909': attribute type 178 has an invalid length. [ 156.879326][ T9079] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 156.904334][ T9079] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 157.167102][ T9111] openvswitch: netlink: Flow key attribute not present in set flow. [ 157.215808][ T9113] netlink: 'syz.2.944': attribute type 7 has an invalid length. [ 157.231537][ T9113] netlink: 'syz.2.944': attribute type 8 has an invalid length. [ 157.261595][ T9113] gretap0: entered promiscuous mode [ 157.270263][ T9113] batadv_slave_1: entered promiscuous mode [ 157.287845][ T9113] erspan0: entered promiscuous mode [ 157.296613][ T9113] debugfs: 'hsr1' already exists in 'hsr' [ 157.302531][ T9126] netlink: zone id is out of range [ 157.314786][ T9113] Cannot create hsr debugfs directory [ 157.321659][ T9126] netlink: zone id is out of range [ 157.329823][ T9113] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 157.341063][ T9126] netlink: zone id is out of range [ 157.348031][ T9113] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.362520][ T9126] netlink: zone id is out of range [ 157.370004][ T9113] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 157.380779][ T9126] netlink: zone id is out of range [ 157.394088][ T9126] netlink: zone id is out of range [ 157.432250][ T9126] netlink: zone id is out of range [ 157.448181][ T9126] netlink: del zone limit has 4 unknown bytes [ 157.498413][ T9147] netlink: 'syz.3.956': attribute type 6 has an invalid length. [ 157.535313][ T9150] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 157.630819][ T9168] geneve2: entered promiscuous mode [ 157.637746][ T9168] geneve2: entered allmulticast mode [ 157.669569][ T148] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.687033][ T148] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.711162][ T9168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.725592][ T9168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.740590][ T148] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 157.787260][ T9180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.794488][ T9180] IPv6: NLM_F_CREATE should be set when creating new route [ 158.119780][ T30] audit: type=1107 audit(1755918470.939:2): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 158.191318][ T9228] sctp: [Deprecated]: syz.4.985 (pid 9228) Use of int in max_burst socket option deprecated. [ 158.191318][ T9228] Use struct sctp_assoc_value instead [ 158.288209][ T9238] bridge0: entered promiscuous mode [ 158.293496][ T9238] macsec2: entered promiscuous mode [ 158.360698][ T9238] bridge0: port 4(macsec2) entered blocking state [ 158.379747][ T9238] bridge0: port 4(macsec2) entered disabled state [ 158.386435][ T9238] macsec2: entered allmulticast mode [ 158.391768][ T9238] bridge0: entered allmulticast mode [ 158.400794][ T9238] macsec2: left allmulticast mode [ 158.406508][ T9238] bridge0: left allmulticast mode [ 158.412186][ T9238] bridge0: left promiscuous mode [ 158.438726][ T9247] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 158.470461][ T9249] raw_sendmsg: syz.4.992 forgot to set AF_INET. Fix it! [ 158.474924][ T9247] ip6gre0: entered promiscuous mode [ 158.493630][ T9247] ip6gre0: entered allmulticast mode [ 159.161697][ T9168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.183643][ T9168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.203967][ T9168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.291576][ T9168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.313590][ T9168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.325636][ T9168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.406756][ T9168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.432768][ T9168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.447408][ T9168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 159.533324][ T4656] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.559333][ T4656] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.571315][ T4656] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.588229][ T9314] geneve3: entered promiscuous mode [ 159.593735][ T9314] geneve3: entered allmulticast mode [ 159.615033][ T4656] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.623208][ T4656] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.632075][ T4656] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.653882][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.675737][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.703152][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.713919][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.722695][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.735136][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.834960][ T9334] delete_channel: no stack [ 160.448341][ T9411] __nla_validate_parse: 34 callbacks suppressed [ 160.448358][ T9411] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1045'. [ 160.479755][ T9411] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1045'. [ 160.525228][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'. [ 160.588348][ T9429] netlink: 211416 bytes leftover after parsing attributes in process `syz.1.1050'. [ 160.708833][ T9442] netlink: 'syz.1.1055': attribute type 11 has an invalid length. [ 160.717002][ T9442] netlink: 'syz.1.1055': attribute type 11 has an invalid length. [ 160.725358][ T9442] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1055'. [ 160.846456][ T9460] : entered promiscuous mode [ 160.905876][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 161.058703][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 161.134439][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 161.143423][ T9489] validate_nla: 7 callbacks suppressed [ 161.143438][ T9489] netlink: 'syz.2.1069': attribute type 5 has an invalid length. [ 161.159471][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'. [ 161.172638][ T9489] geneve2: entered promiscuous mode [ 161.177973][ T9489] geneve2: entered allmulticast mode [ 161.185470][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 161.206069][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 161.216888][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 161.228141][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 161.312695][ T9510] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 161.339232][ T9510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.381279][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 161.473443][ T9529] sit2: entered promiscuous mode [ 161.478447][ T9529] sit2: entered allmulticast mode [ 161.522182][ T9531] unsupported nlmsg_type 40 [ 161.528221][ T9533] netlink: 'syz.4.1082': attribute type 7 has an invalid length. [ 161.531551][ T9531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 161.538237][ T9533] netlink: 'syz.4.1082': attribute type 8 has an invalid length. [ 161.554951][ T9531] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 161.562747][ T9531] gretap2: entered promiscuous mode [ 161.568203][ T9531] gretap2: entered allmulticast mode [ 161.855196][ T9565] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 161.863070][ T9565] nbd: error processing sock list [ 161.868515][ T9565] block nbd1: shutting down sockets [ 162.001361][ T9588] netlink: 'syz.4.1099': attribute type 7 has an invalid length. [ 162.009458][ T9588] netlink: 'syz.4.1099': attribute type 8 has an invalid length. [ 162.137303][ T9603] netlink: 'syz.4.1104': attribute type 7 has an invalid length. [ 162.150028][ T9603] netlink: 'syz.4.1104': attribute type 8 has an invalid length. [ 162.221882][ T9614] bond5 (unregistering): Released all slaves [ 162.453874][ T9639] netlink: 'syz.2.1114': attribute type 7 has an invalid length. [ 162.567916][ T9649] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 162.577893][ T9649] tipc: Enabled bearer , priority 0 [ 162.625733][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.638152][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.647677][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.657476][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.921919][ T9684] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 162.951254][ T9684] bond3: entered promiscuous mode [ 162.960096][ T9684] bond3: entered allmulticast mode [ 162.965953][ T9684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.703639][ T9474] tipc: Node number set to 1768443584 [ 163.842484][ T9741] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 163.852615][ T9741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.039647][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.187983][ T9780] sctp: [Deprecated]: syz.4.1166 (pid 9780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.187983][ T9780] Use struct sctp_sack_info instead [ 164.540678][ T9822] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 164.548355][ T9822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.601356][ T9831] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 165.159757][ T9879] sit0: entered promiscuous mode [ 165.166380][ T9879] sit0: entered allmulticast mode [ 165.942153][ T9935] __nla_validate_parse: 71 callbacks suppressed [ 165.942170][ T9935] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1210'. [ 165.965698][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 166.089869][ T9935] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1210'. [ 166.361786][ T9955] team0 (unregistering): Port device team_slave_0 removed [ 166.383168][ T9955] team0 (unregistering): Port device team_slave_1 removed [ 166.401592][ T9972] validate_nla: 12 callbacks suppressed [ 166.401608][ T9972] netlink: 'syz.2.1222': attribute type 23 has an invalid length. [ 166.499118][ T9984] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 166.512160][ T9983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1224'. [ 166.553786][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.629688][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1230'. [ 166.656529][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 166.802245][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1233'. [ 166.921035][T10035] netlink: 'syz.2.1240': attribute type 21 has an invalid length. [ 166.936364][T10035] netlink: 'syz.2.1240': attribute type 22 has an invalid length. [ 166.945184][T10035] netlink: 'syz.2.1240': attribute type 23 has an invalid length. [ 166.953402][T10035] netlink: 'syz.2.1240': attribute type 25 has an invalid length. [ 166.963529][T10035] netlink: 'syz.2.1240': attribute type 26 has an invalid length. [ 166.973737][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'. [ 167.162956][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1250'. [ 167.192855][T10059] netlink: 'syz.0.1250': attribute type 7 has an invalid length. [ 167.213671][T10059] netlink: 'syz.0.1250': attribute type 8 has an invalid length. [ 167.221529][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 167.252244][T10059] gretap0: entered promiscuous mode [ 167.259728][T10059] batadv_slave_1: entered promiscuous mode [ 167.269507][T10059] erspan0: entered promiscuous mode [ 167.285870][T10059] debugfs: 'hsr1' already exists in 'hsr' [ 167.291756][T10059] Cannot create hsr debugfs directory [ 167.291855][T10068] netlink: 'syz.3.1253': attribute type 15 has an invalid length. [ 167.717539][T10124] tipc: Invalid UDP bearer configuration [ 167.717584][T10124] tipc: Enabling of bearer rejected, failed to enable media [ 167.738719][T10127] hsr_slave_0: left promiscuous mode [ 167.746853][T10127] hsr_slave_1: left promiscuous mode [ 168.033882][T10156] vxcan1: entered allmulticast mode [ 168.323023][T10194] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 168.346522][T10194] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 168.438083][T10206] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 169.133274][T10287] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 169.381601][T10324] IPv6: sit1: Disabled Multicast RS [ 169.406143][T10324] sit1: entered allmulticast mode [ 169.517596][T10335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.552453][T10337] veth0_to_bridge: entered promiscuous mode [ 169.576966][T10336] veth0_to_bridge: left promiscuous mode [ 169.785680][T10359] veth5: entered allmulticast mode [ 169.803139][T10359] veth7: entered allmulticast mode [ 169.818813][T10359] veth9: entered allmulticast mode [ 169.840206][T10359] veth11: entered allmulticast mode [ 169.859011][T10359] veth13: entered allmulticast mode [ 169.887806][T10359] veth15: entered allmulticast mode [ 169.920923][T10359] veth17: entered allmulticast mode [ 169.937239][T10359] veth19: entered allmulticast mode [ 169.952611][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 169.962152][T10388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.977693][T10389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.992895][T10359] veth21: entered allmulticast mode [ 170.013715][T10359] veth23: entered allmulticast mode [ 170.079258][T10359] veth25: entered allmulticast mode [ 170.106662][T10359] veth27: entered allmulticast mode [ 170.163876][T10359] veth29: entered allmulticast mode [ 170.200431][T10359] veth31: entered allmulticast mode [ 170.256860][T10359] veth33: entered allmulticast mode [ 170.290186][T10359] veth35: entered allmulticast mode [ 170.311154][T10359] veth37: entered allmulticast mode [ 170.323417][T10359] veth39: entered allmulticast mode [ 170.346087][T10359] veth41: entered allmulticast mode [ 170.357077][T10359] veth43: entered allmulticast mode [ 170.368808][T10359] veth45: entered allmulticast mode [ 170.379646][T10359] veth47: entered allmulticast mode [ 170.391503][T10359] veth49: entered allmulticast mode [ 170.401989][T10359] veth51: entered allmulticast mode [ 170.412406][T10359] veth53: entered allmulticast mode [ 170.422996][T10359] veth55: entered allmulticast mode [ 170.436210][T10359] veth57: entered allmulticast mode [ 170.447031][T10359] veth59: entered allmulticast mode [ 170.458245][T10359] veth61: entered allmulticast mode [ 170.468701][T10359] veth63: entered allmulticast mode [ 170.479200][T10359] veth65: entered allmulticast mode [ 170.489776][T10359] veth67: entered allmulticast mode [ 170.515860][T10359] veth69: entered allmulticast mode [ 170.527748][T10359] veth71: entered allmulticast mode [ 170.591977][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.603837][T10438] bridge_slave_1: left allmulticast mode [ 170.617138][T10438] bridge_slave_1: left promiscuous mode [ 170.622958][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.634489][T10438] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 170.710844][T10449] syz_tun: entered promiscuous mode [ 170.716240][T10449] syz_tun: entered allmulticast mode [ 170.867222][T10468] gretap0: entered promiscuous mode [ 170.873427][T10468] batadv_slave_1: entered promiscuous mode [ 170.884265][T10468] erspan0: entered promiscuous mode [ 170.890355][T10468] debugfs: 'hsr1' already exists in 'hsr' [ 170.896392][T10468] Cannot create hsr debugfs directory [ 171.094067][T10478] __nla_validate_parse: 99 callbacks suppressed [ 171.094084][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 171.384581][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 171.554183][T10512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1396'. [ 171.567030][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1399'. [ 171.576307][T10517] validate_nla: 24 callbacks suppressed [ 171.576321][T10517] netlink: 'syz.4.1399': attribute type 7 has an invalid length. [ 171.605381][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 171.629749][T10517] netlink: 'syz.4.1399': attribute type 8 has an invalid length. [ 171.641736][T10511] bond0: entered promiscuous mode [ 171.651217][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 171.651799][T10511] bond_slave_0: entered promiscuous mode [ 171.668719][T10511] bond_slave_1: entered promiscuous mode [ 171.687633][T10511] bond0: left promiscuous mode [ 171.702619][T10511] bond_slave_0: left promiscuous mode [ 171.709500][T10511] bond_slave_1: left promiscuous mode [ 171.998615][T10538] nbd: must specify an index to disconnect [ 172.019274][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'. [ 172.032137][T10541] tipc: Invalid UDP bearer configuration [ 172.032170][T10541] tipc: Enabling of bearer rejected, failed to enable media [ 172.297041][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 172.344206][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1411'. [ 172.364211][T10558] netlink: 'syz.4.1411': attribute type 7 has an invalid length. [ 172.372029][T10558] netlink: 'syz.4.1411': attribute type 8 has an invalid length. [ 172.412279][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 172.432625][ T30] audit: type=1800 audit(1755918485.249:3): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1412" name="memory.events" dev="tmpfs" ino=1575 res=0 errno=0 [ 172.463922][ T5865] Bluetooth: hci4: link tx timeout [ 172.469964][ T5865] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 172.478168][ T5865] Bluetooth: hci4: link tx timeout [ 172.483322][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.729332][T10594] tipc: Enabling of bearer rejected, failed to enable media [ 172.855086][T10618] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 172.879624][T10620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.979514][T10632] netlink: 'syz.4.1433': attribute type 11 has an invalid length. [ 173.132425][T10662] netlink: 'syz.1.1442': attribute type 1 has an invalid length. [ 173.163339][T10662] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.184267][T10662] bond4: (slave geneve3): making interface the new active one [ 173.192868][T10662] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 173.857778][T10739] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 173.865654][T10743] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 174.421531][T10811] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 174.441235][T10811] team0: Port device geneve0 added [ 174.503924][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 174.766301][T10829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.878857][T10850] netlink: 'syz.3.1496': attribute type 7 has an invalid length. [ 174.886937][T10850] netlink: 'syz.3.1496': attribute type 8 has an invalid length. [ 175.296635][T10890] netem: change failed [ 175.317265][T10891] sit0: entered promiscuous mode [ 176.229810][T10951] __nla_validate_parse: 94 callbacks suppressed [ 176.229827][T10951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1524'. [ 176.248158][T10951] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.1524'. [ 176.363232][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1531'. [ 176.381600][T10976] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.517219][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'. [ 176.529191][T10992] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1539'. [ 176.583750][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 176.767865][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 176.832733][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1547'. [ 176.914690][T11037] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.921105][T11037] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.942372][T11041] ksmbd: Unknown IPC event: 3, ignore. [ 176.975734][T11039] validate_nla: 4 callbacks suppressed [ 176.975747][T11039] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 176.990817][T11039] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1551'. [ 176.996823][T11045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 177.002466][T11039] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 177.106664][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1555'. [ 177.126101][T11053] netlink: 'syz.1.1555': attribute type 7 has an invalid length. [ 177.148596][T11053] netlink: 'syz.1.1555': attribute type 8 has an invalid length. [ 177.161695][T11053] gretap0: entered promiscuous mode [ 177.170360][T11053] batadv_slave_1: entered promiscuous mode [ 177.177006][T11053] erspan0: entered promiscuous mode [ 177.183001][T11053] debugfs: 'hsr1' already exists in 'hsr' [ 177.190420][T11053] Cannot create hsr debugfs directory [ 179.242211][T11108] netlink: 'syz.0.1572': attribute type 7 has an invalid length. [ 179.277291][T11108] netlink: 'syz.0.1572': attribute type 8 has an invalid length. [ 179.644714][T11161] openvswitch: netlink: IPv4 tun info is not correct [ 179.726530][T11172] netlink: 'syz.4.1591': attribute type 7 has an invalid length. [ 179.734735][T11172] netlink: 'syz.4.1591': attribute type 8 has an invalid length. [ 179.970227][T11198] pim6reg: tun_chr_ioctl cmd 1074025677 [ 179.978448][T11198] pim6reg: linktype set to 65534 [ 179.983582][T11199] pim6reg: tun_chr_ioctl cmd 1074025677 [ 179.989303][T11199] pim6reg: linktype set to 65534 [ 180.174947][T11219] netlink: 'syz.0.1605': attribute type 1 has an invalid length. [ 180.273538][T11232] netlink: 'syz.2.1611': attribute type 1 has an invalid length. [ 180.310317][T11232] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.323699][T11232] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 180.337678][T11232] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 180.342091][T11239] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 180.361109][T11237] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 180.475967][T11254] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 180.485304][T11250] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 180.574374][T11245] nbd2: detected capacity change from 0 to 127 [ 180.770842][T11284] syzkaller1: entered promiscuous mode [ 180.781773][T11284] syzkaller1: entered allmulticast mode [ 180.792591][T11284] syzkaller1: left promiscuous mode [ 180.798192][T11284] syzkaller1: left allmulticast mode [ 180.904645][ T5187] Bluetooth: hci2: command 0x0406 tx timeout [ 180.910714][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 180.916879][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 180.921761][T11297] geneve4: entered promiscuous mode [ 180.930498][T11297] geneve4: entered allmulticast mode [ 180.938448][ T4621] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 180.957636][ T4621] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 180.968856][ T4621] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 180.988759][ T4621] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 181.084935][ T5873] block nbd2: Receive control failed (result -32) [ 181.091591][ T5878] block nbd2: Receive control failed (result -32) [ 181.351205][T11346] __nla_validate_parse: 21 callbacks suppressed [ 181.351223][T11346] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1647'. [ 181.386743][T11348] bond5: entered promiscuous mode [ 181.394923][T11348] bond5: entered allmulticast mode [ 181.401235][T11348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.527472][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 181.548537][T11357] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1648'. [ 181.928775][T11369] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1654'. [ 181.941610][T11369] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1654'. [ 181.971159][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 181.984357][T11369] validate_nla: 5 callbacks suppressed [ 181.984372][T11369] netlink: 'syz.1.1654': attribute type 21 has an invalid length. [ 182.020839][T11369] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1654'. [ 182.055373][T11369] netlink: 'syz.1.1654': attribute type 4 has an invalid length. [ 182.065885][T11369] netlink: 'syz.1.1654': attribute type 5 has an invalid length. [ 182.073792][T11369] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1654'. [ 182.157071][T11392] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 182.193745][T11394] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 182.240595][T11396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.248590][T11396] bond6: (slave bond7): making interface the new active one [ 182.256175][T11396] bond6: (slave bond7): Enslaving as an active interface with an up link [ 182.266641][T11394] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 182.278514][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1663'. [ 182.288144][T11392] bond6: entered promiscuous mode [ 182.293225][T11392] bond7: entered promiscuous mode [ 182.299112][T11392] bond6: entered allmulticast mode [ 182.304488][T11392] bond7: entered allmulticast mode [ 182.310191][T11392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.561225][T11413] veth11: entered allmulticast mode [ 182.592473][T11412] netlink: 'syz.1.1669': attribute type 32 has an invalid length. [ 182.600681][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 182.610422][T11412] (unnamed net_device) (uninitialized): option coupled_control: invalid value (28) [ 182.876610][T11421] netlink: 'syz.0.1671': attribute type 180 has an invalid length. [ 182.888414][T11429] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 182.909617][T11432] Unsupported ieee802154 address type: 0 [ 182.921723][T11429] bond8: entered promiscuous mode [ 182.929561][T11429] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.943113][T11432] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.967892][T11429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 182.978286][T11429] bond8: (slave bond9): making interface the new active one [ 182.986775][T11429] bond9: entered promiscuous mode [ 182.993103][T11429] bond8: (slave bond9): Enslaving as an active interface with an up link [ 183.031065][T11442] pim6reg: entered allmulticast mode [ 183.038300][T11442] pim6reg: left allmulticast mode [ 183.068228][T11445] lo: entered allmulticast mode [ 183.075388][T11398] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.103457][T11450] sctp: [Deprecated]: syz.2.1681 (pid 11450) Use of int in max_burst socket option. [ 183.103457][T11450] Use struct sctp_assoc_value instead [ 183.241171][T11467] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 183.279993][T11472] ªªªªªª: renamed from vlan0 (while UP) [ 183.380361][T11467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.411247][T11476] bond4: (slave gretap1): making interface the new active one [ 183.426525][T11476] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 183.518580][T11496] tipc: Enabled bearer , priority 0 [ 183.552241][T11496] tipc: Resetting bearer [ 183.693443][T11515] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 184.480835][T11565] pim6reg: entered allmulticast mode [ 184.533915][ T24] tipc: Node number set to 2311083171 [ 184.593929][T11571] nbd3: detected capacity change from 0 to 127 [ 184.618906][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058f7f000: rx timeout, send abort [ 184.627418][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058f7f000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.737324][ T5878] block nbd3: Receive control failed (result -32) [ 184.868587][T11614] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.887197][T11614] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 184.910960][T11614] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 185.039800][T11631] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.057640][T11631] bridge_slave_1: left allmulticast mode [ 185.063293][T11631] bridge_slave_1: left promiscuous mode [ 185.070699][T11631] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.253993][ T30] audit: type=1800 audit(1755918498.069:4): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1751" name="memory.events" dev="tmpfs" ino=1770 res=0 errno=0 [ 185.305922][ T30] audit: type=1804 audit(1755918498.129:5): pid=11658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1753" name="/newroot/361/cgroup.controllers" dev="tmpfs" ino=1856 res=1 errno=0 [ 185.331210][ T30] audit: type=1800 audit(1755918498.129:6): pid=11658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1753" name="cgroup.controllers" dev="tmpfs" ino=1856 res=0 errno=0 [ 185.658246][T11709] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 186.338870][T11788] IPVS: length: 139 != 1152 [ 186.384832][T11792] __nla_validate_parse: 28 callbacks suppressed [ 186.384844][T11792] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1794'. [ 187.266311][T11855] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1815'. [ 187.370132][T11861] syz_tun: entered promiscuous mode [ 187.375637][T11861] syz_tun: entered allmulticast mode [ 187.382605][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'. [ 187.402990][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1819'. [ 187.420122][T11863] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.430330][T11865] veth83: entered allmulticast mode [ 187.579073][T11893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'. [ 187.670463][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 187.800426][T11923] tipc: Enabling of bearer rejected, failed to enable media [ 187.902587][T11935] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1834'. [ 188.036124][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'. [ 188.062447][T11947] validate_nla: 7 callbacks suppressed [ 188.062464][T11947] netlink: 'syz.1.1836': attribute type 9 has an invalid length. [ 188.076412][T11947] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1836'. [ 188.107063][T11951] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 188.107672][T11952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1838'. [ 188.576866][T11999] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 188.849232][ T30] audit: type=1107 audit(1755918501.659:7): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 188.927839][T12043] netlink: 'syz.0.1870': attribute type 27 has an invalid length. [ 189.193940][T12072] netlink: 'syz.0.1879': attribute type 30 has an invalid length. [ 189.250764][T12076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.517822][T12097] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.529963][T12097] bond0: (slave bond6): Enslaving as an active interface with an up link [ 190.093979][T12165] netlink: 'syz.3.1907': attribute type 16 has an invalid length. [ 190.101932][T12165] netlink: 'syz.3.1907': attribute type 17 has an invalid length. [ 190.126149][T12165] ip6gre0: left promiscuous mode [ 190.131261][T12165] ip6gre0: left allmulticast mode [ 190.151144][T12165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.528889][T12202] 8021q: VLANs not supported on ip6tnl0 [ 190.545705][T12213] lo: entered promiscuous mode [ 190.558925][T12213] netlink: 'syz.0.1927': attribute type 2 has an invalid length. [ 190.567158][T12213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.586051][T12213] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 190.706929][T12226] netlink: 'syz.3.1930': attribute type 21 has an invalid length. [ 190.737407][T12226] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.900639][T12248] netlink: 'syz.2.1938': attribute type 16 has an invalid length. [ 190.909861][T12248] netlink: 'syz.2.1938': attribute type 17 has an invalid length. [ 190.940045][T12248] sit0: left promiscuous mode [ 190.959294][T12248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.967367][T12248] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.979208][T12248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.457903][T12300] ': renamed from veth0 (while UP) [ 191.472593][T12304] __nla_validate_parse: 38 callbacks suppressed [ 191.472607][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 191.491756][T12304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 191.502545][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1951'. [ 191.520883][T12304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 191.530219][T12304] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1951'. [ 191.546255][T12307] syzkaller1: entered promiscuous mode [ 191.551817][T12307] syzkaller1: entered allmulticast mode [ 191.596441][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1956'. [ 191.620873][T12311] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1956'. [ 191.690275][T12330] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 191.706272][T12315] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1957'. [ 191.828679][T12336] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.868809][T12339] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 191.897330][T12347] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1964'. [ 192.009009][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 192.033004][T12357] bond0: (slave bridge_slave_1): Releasing backup interface [ 192.203898][T12381] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 192.303396][T12394] IPVS: Unknown mcast interface: vcan0 [ 192.895113][T12475] tipc: Enabled bearer , priority 0 [ 192.923090][T12475] syzkaller0: entered promiscuous mode [ 192.936294][T12475] syzkaller0: entered allmulticast mode [ 192.988950][T12475] tipc: Resetting bearer [ 193.017063][T12474] tipc: Resetting bearer [ 193.041880][T12474] tipc: Disabling bearer [ 193.068327][T12492] tipc: Enabling of bearer rejected, failed to enable media [ 193.392743][T12542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.414238][T12543] netlink: 'syz.2.2028': attribute type 11 has an invalid length. [ 193.456948][T12546] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 193.484432][T12546] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 193.492880][T12546] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 193.509917][T12548] team0: Device ip6gre1 is of different type [ 193.754884][T12568] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 193.915986][T12572] validate_nla: 3 callbacks suppressed [ 193.916003][T12572] netlink: 'syz.3.2036': attribute type 7 has an invalid length. [ 193.932008][T12572] netlink: 'syz.3.2036': attribute type 8 has an invalid length. [ 194.188243][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328854][T12591] bridge: RTM_NEWNEIGH with invalid ether address [ 194.729538][T12631] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 194.849453][T12627] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.865807][T12627] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 194.880021][T12627] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 194.952669][T12641] tunl0: entered promiscuous mode [ 194.959279][T12641] netlink: 'syz.4.2056': attribute type 3 has an invalid length. [ 194.988212][T12627] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.009984][T12627] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 195.023074][T12646] netlink: 'syz.2.2059': attribute type 14 has an invalid length. [ 195.031962][T12627] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.045330][T12646] netlink: 'syz.2.2059': attribute type 13 has an invalid length. [ 195.105041][T12627] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.144047][T12627] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 195.176420][T12627] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.248503][T12627] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.273022][T12627] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 195.286845][T12627] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 195.400938][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.411718][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.420227][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.430826][T12679] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 195.451101][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.467526][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.476809][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.489847][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.499253][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.499998][T12681] netlink: 'syz.4.2071': attribute type 11 has an invalid length. [ 195.507844][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.536513][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.552592][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.572706][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.695090][T12708] netlink: 'syz.4.2081': attribute type 12 has an invalid length. [ 195.723982][T12712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.731208][T12712] IPv6: NLM_F_CREATE should be set when creating new route [ 195.849609][T12724] ip6erspan1: entered promiscuous mode [ 195.860444][T12724] ip6erspan1: entered allmulticast mode [ 196.127618][T12759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.167175][T12758] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 196.177822][T12758] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 196.224431][T12750] geneve3: entered promiscuous mode [ 196.414863][T12782] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 196.422937][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.433455][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.452119][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.461035][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.500529][T12790] __nla_validate_parse: 36 callbacks suppressed [ 196.500545][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 196.564820][T12796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.578695][T12796] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.650612][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 196.737414][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 196.750149][T12812] tap0: tun_chr_ioctl cmd 1074025676 [ 196.766071][T12812] tap0: owner set to 0 [ 209.543752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.158613][T12838] gretap2: entered allmulticast mode [ 255.164726][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 255.361434][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'. [ 255.385937][T12859] netlink: 'syz.1.2124': attribute type 10 has an invalid length. [ 255.446752][T12871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.459438][T12871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.523816][T12885] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 255.552064][T12885] netlink: 'syz.1.2132': attribute type 2 has an invalid length. [ 255.613727][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2132'. [ 255.627956][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.659843][T12900] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 255.781473][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2140'. [ 255.819074][T12920] netlink: 'syz.2.2142': attribute type 39 has an invalid length. [ 255.917721][T12934] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 255.947974][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 256.030594][T12942] vti0: entered promiscuous mode [ 256.072955][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2155'. [ 256.156881][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 256.164134][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2156'. [ 256.208996][T12956] team0: Device wireguard0 is of different type [ 256.315617][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2163'. [ 256.333060][T12979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2163'. [ 272.526986][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.535550][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.542717][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.550665][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.558092][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.656585][ T5878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.673752][ T5878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.680939][ T5878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.689695][ T5878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.697593][ T5878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.753607][ T5873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.763206][ T5873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.774977][ T5873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.782553][ T5873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.790030][ T5873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.797340][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 272.804570][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 272.811801][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 272.814610][ T5878] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 272.821326][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 272.826608][ T5878] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 272.833999][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 272.840429][ T5878] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 272.854537][ T5878] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 272.861895][ T5878] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 274.583640][ T5878] Bluetooth: hci5: command tx timeout [ 274.743612][ T5878] Bluetooth: hci6: command tx timeout [ 274.824085][ T5878] Bluetooth: hci7: command tx timeout [ 274.903639][ T5878] Bluetooth: hci9: command tx timeout [ 274.903666][ T5873] Bluetooth: hci8: command tx timeout [ 276.663728][ T5873] Bluetooth: hci5: command tx timeout [ 276.823724][ T5873] Bluetooth: hci6: command tx timeout [ 276.903639][ T5873] Bluetooth: hci7: command tx timeout [ 276.984325][ T5873] Bluetooth: hci9: command tx timeout [ 276.984980][ T5878] Bluetooth: hci8: command tx timeout [ 278.743665][ T5878] Bluetooth: hci5: command tx timeout [ 278.903895][ T5878] Bluetooth: hci6: command tx timeout [ 278.983660][ T5878] Bluetooth: hci7: command tx timeout [ 279.063752][ T5878] Bluetooth: hci8: command tx timeout [ 279.064981][ T5873] Bluetooth: hci9: command tx timeout [ 280.823848][ T5873] Bluetooth: hci5: command tx timeout [ 280.983633][ T5873] Bluetooth: hci6: command tx timeout [ 281.064187][ T5873] Bluetooth: hci7: command tx timeout [ 281.143662][ T5873] Bluetooth: hci9: command tx timeout [ 281.143717][ T5878] Bluetooth: hci8: command tx timeout [ 317.066259][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.853544][ T5873] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 332.863669][ T5873] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 332.876046][ T5873] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 332.913853][ T5873] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 332.921351][ T5875] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 332.943757][ T5865] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 332.951016][ T5865] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 332.958393][ T5865] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 332.966503][ T5875] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 332.975264][ T5865] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 332.975384][ T5875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 332.990508][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 333.000751][ T5873] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 333.000770][ T5863] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 333.020481][ T5863] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 333.028586][ T5863] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 333.037736][ T5873] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 333.038059][ T5863] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 333.046243][ T5873] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 333.052687][ T5863] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 333.059368][ T5873] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 333.067173][ T5863] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 333.076855][ T5873] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 333.088560][ T5879] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 333.096161][ T5879] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 334.983684][ T5875] Bluetooth: hci10: command tx timeout [ 335.063598][ T5875] Bluetooth: hci11: command tx timeout [ 335.143601][ T5875] Bluetooth: hci13: command tx timeout [ 335.153614][ T5879] Bluetooth: hci12: command tx timeout [ 335.154162][ T5875] Bluetooth: hci14: command tx timeout [ 337.063650][ T5875] Bluetooth: hci10: command tx timeout [ 337.143612][ T5875] Bluetooth: hci11: command tx timeout [ 337.223976][ T5875] Bluetooth: hci14: command tx timeout [ 337.225336][ T5879] Bluetooth: hci12: command tx timeout [ 337.229811][ T5875] Bluetooth: hci13: command tx timeout [ 337.543815][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.153645][ T5875] Bluetooth: hci10: command tx timeout [ 339.223595][ T5875] Bluetooth: hci11: command tx timeout [ 339.303652][ T5875] Bluetooth: hci13: command tx timeout [ 339.309186][ T5875] Bluetooth: hci12: command tx timeout [ 339.314713][ T5873] Bluetooth: hci14: command tx timeout [ 341.223672][ T5873] Bluetooth: hci10: command tx timeout [ 341.303714][ T5873] Bluetooth: hci11: command tx timeout [ 341.383667][ T5873] Bluetooth: hci12: command tx timeout [ 341.383706][ T5875] Bluetooth: hci13: command tx timeout [ 341.389162][ T5873] Bluetooth: hci14: command tx timeout [ 378.505089][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.894960][ T5875] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 392.902268][ T5875] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 392.909720][ T5875] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 392.917555][ T5875] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 392.925123][ T5875] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 392.941906][ T5875] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 392.950677][ T5875] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 392.958123][ T5875] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 392.966141][ T5875] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 392.975142][ T5875] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 392.999590][ T5875] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 393.006965][ T5875] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 393.015779][ T5875] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 393.017495][ T5878] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 393.024211][ T5875] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 393.030452][ T5878] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 393.039892][ T5875] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 393.044842][ T5878] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 393.059137][ T5878] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 393.066662][ T5878] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 393.765427][ T5879] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 393.772695][ T5879] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 393.780666][ T5879] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 393.788504][ T5879] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 393.796163][ T5879] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 394.983601][ T5187] Bluetooth: hci15: command tx timeout [ 395.063604][ T5187] Bluetooth: hci17: command tx timeout [ 395.064188][ T5863] Bluetooth: hci16: command tx timeout [ 395.143621][ T5863] Bluetooth: hci18: command tx timeout [ 395.863566][ T5863] Bluetooth: hci19: command tx timeout [ 395.943549][ T5863] Bluetooth: hci8: command 0x0406 tx timeout [ 395.944579][ T5187] Bluetooth: hci7: command 0x0406 tx timeout [ 395.949895][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 395.955706][ T5187] Bluetooth: hci6: command 0x0406 tx timeout [ 395.961548][ T5863] Bluetooth: hci9: command 0x0406 tx timeout [ 397.073830][T13053] Bluetooth: hci15: command tx timeout [ 397.143623][T13053] Bluetooth: hci16: command tx timeout [ 397.143658][ T5874] Bluetooth: hci17: command tx timeout [ 397.233677][ T5874] Bluetooth: hci18: command tx timeout [ 397.943564][ T5874] Bluetooth: hci19: command tx timeout [ 399.144129][ T5874] Bluetooth: hci15: command tx timeout [ 399.223636][ T5874] Bluetooth: hci17: command tx timeout [ 399.224008][T13053] Bluetooth: hci16: command tx timeout [ 399.303653][T13053] Bluetooth: hci18: command tx timeout [ 400.023611][T13053] Bluetooth: hci19: command tx timeout [ 401.223575][T13053] Bluetooth: hci15: command tx timeout [ 401.304214][T13053] Bluetooth: hci17: command tx timeout [ 401.313565][T13053] Bluetooth: hci16: command tx timeout [ 401.383720][T13053] Bluetooth: hci18: command tx timeout [ 402.103595][T13053] Bluetooth: hci19: command tx timeout [ 419.463761][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 419.471341][ T31] Not tainted syzkaller #0 [ 419.476304][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.485107][ T31] task:kworker/0:1 state:D stack:23056 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 419.497169][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 419.504396][ T31] Call Trace: [ 419.507682][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.510615][ T31] __schedule+0x1798/0x4cc0 [ 419.515140][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.521550][ T31] ? __pfx___schedule+0x10/0x10 [ 419.527873][ T31] ? lock_release+0x4b/0x3e0 [ 419.532553][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.537348][ T31] schedule+0x165/0x360 [ 419.551373][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.558788][ T31] __mutex_lock+0x7e6/0x1350 [ 419.563414][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.569655][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.576429][ T31] ? reg_check_chans_work+0x95/0xf30 [ 419.581986][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.587305][ T31] ? __switch_to+0xdae/0x1670 [ 419.592006][ T31] ? do_raw_spin_lock+0x121/0x290 [ 419.598752][ T31] reg_check_chans_work+0x95/0xf30 [ 419.604455][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.609573][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.614826][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 419.620562][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.625354][ T31] ? lock_acquire+0x5f/0x360 [ 419.629937][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.634789][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.640535][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.646263][ T31] process_scheduled_works+0xae1/0x17b0 [ 419.651810][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.657807][ T31] worker_thread+0x8a0/0xda0 [ 419.662788][ T31] kthread+0x70e/0x8a0 [ 419.666885][ T31] ? __pfx_worker_thread+0x10/0x10 [ 419.671988][ T31] ? __pfx_kthread+0x10/0x10 [ 419.676585][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.681775][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.686978][ T31] ? __pfx_kthread+0x10/0x10 [ 419.691581][ T31] ret_from_fork+0x3f9/0x770 [ 419.696233][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.701338][ T31] ? __switch_to_asm+0x39/0x70 [ 419.706159][ T31] ? __switch_to_asm+0x33/0x70 [ 419.710928][ T31] ? __pfx_kthread+0x10/0x10 [ 419.715529][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.720290][ T31] [ 419.723318][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 419.731006][ T31] Not tainted syzkaller #0 [ 419.735943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.744605][ T31] task:kworker/u8:2 state:D stack:23528 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 419.756657][ T31] Workqueue: events_unbound linkwatch_event [ 419.762554][ T31] Call Trace: [ 419.766189][ T31] [ 419.769125][ T31] __schedule+0x1798/0x4cc0 [ 419.773648][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 419.778682][ T31] ? kasan_save_track+0x4f/0x80 [ 419.783663][ T31] ? kasan_save_free_info+0x46/0x50 [ 419.788875][ T31] ? __kasan_slab_free+0x5b/0x80 [ 419.793839][ T31] ? __pfx___schedule+0x10/0x10 [ 419.798689][ T31] ? schedule+0x91/0x360 [ 419.802909][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.807666][ T31] ? lock_release+0x4b/0x3e0 [ 419.812236][ T31] ? wq_worker_sleeping+0x63/0x250 [ 419.817366][ T31] schedule+0x165/0x360 [ 419.821521][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.826989][ T31] __mutex_lock+0x7e6/0x1350 [ 419.831581][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.836349][ T31] ? linkwatch_event+0xe/0x60 [ 419.841014][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.846033][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.851728][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.856516][ T31] ? rcu_is_watching+0x15/0xb0 [ 419.861264][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.867588][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 419.873321][ T31] linkwatch_event+0xe/0x60 [ 419.877859][ T31] process_scheduled_works+0xae1/0x17b0 [ 419.883479][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.889477][ T31] worker_thread+0x8a0/0xda0 [ 419.894094][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.900445][ T31] ? __kthread_parkme+0x7b/0x200 [ 419.905430][ T31] kthread+0x70e/0x8a0 [ 419.909508][ T31] ? __pfx_worker_thread+0x10/0x10 [ 419.914640][ T31] ? __pfx_kthread+0x10/0x10 [ 419.919235][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.924445][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.929631][ T31] ? __pfx_kthread+0x10/0x10 [ 419.934255][ T31] ret_from_fork+0x3f9/0x770 [ 419.938844][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.944033][ T31] ? __switch_to_asm+0x39/0x70 [ 419.948804][ T31] ? __switch_to_asm+0x33/0x70 [ 419.953570][ T31] ? __pfx_kthread+0x10/0x10 [ 419.958155][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.962905][ T31] [ 419.966035][ T31] INFO: task kworker/u8:28:11897 blocked for more than 143 seconds. [ 419.974343][ T31] Not tainted syzkaller #0 [ 419.979278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.987952][ T31] task:kworker/u8:28 state:D stack:22472 pid:11897 tgid:11897 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 419.999965][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 420.005962][ T31] Call Trace: [ 420.009238][ T31] [ 420.012159][ T31] __schedule+0x1798/0x4cc0 [ 420.016676][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.022992][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.027824][ T31] ? __pfx___schedule+0x10/0x10 [ 420.032677][ T31] ? schedule+0x91/0x360 [ 420.036924][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.041824][ T31] ? lock_release+0x4b/0x3e0 [ 420.046437][ T31] ? wq_worker_sleeping+0x63/0x250 [ 420.051543][ T31] schedule+0x165/0x360 [ 420.055734][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.061196][ T31] __mutex_lock+0x7e6/0x1350 [ 420.065796][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.070780][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 420.075999][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.081013][ T31] addrconf_dad_work+0x112/0x14b0 [ 420.086044][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 420.091484][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.096266][ T31] ? lock_acquire+0x5f/0x360 [ 420.100842][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.105632][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 420.111344][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 420.117073][ T31] process_scheduled_works+0xae1/0x17b0 [ 420.122622][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.128603][ T31] worker_thread+0x8a0/0xda0 [ 420.133177][ T31] kthread+0x70e/0x8a0 [ 420.137268][ T31] ? __pfx_worker_thread+0x10/0x10 [ 420.142392][ T31] ? __pfx_kthread+0x10/0x10 [ 420.146986][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.151732][ T31] ? __pfx_kthread+0x10/0x10 [ 420.156316][ T31] ret_from_fork+0x3f9/0x770 [ 420.160893][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.165999][ T31] ? __switch_to_asm+0x39/0x70 [ 420.170761][ T31] ? __switch_to_asm+0x33/0x70 [ 420.175852][ T31] ? __pfx_kthread+0x10/0x10 [ 420.180451][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.185237][ T31] [ 420.188293][ T31] INFO: task kworker/u8:30:11902 blocked for more than 144 seconds. [ 420.200073][ T31] Not tainted syzkaller #0 [ 420.205017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.213697][ T31] task:kworker/u8:30 state:D stack:22472 pid:11902 tgid:11902 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 420.225730][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 420.233000][ T31] Call Trace: [ 420.236284][ T31] [ 420.239199][ T31] __schedule+0x1798/0x4cc0 [ 420.243700][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.248445][ T31] ? __pfx___schedule+0x10/0x10 [ 420.253272][ T31] ? schedule+0x91/0x360 [ 420.257506][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.262252][ T31] ? lock_release+0x4b/0x3e0 [ 420.266871][ T31] ? wq_worker_sleeping+0x63/0x250 [ 420.271979][ T31] schedule+0x165/0x360 [ 420.276339][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.281808][ T31] __mutex_lock+0x7e6/0x1350 [ 420.286434][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.291197][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa50 [ 420.297447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.302457][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.307212][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.311957][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa50 [ 420.318056][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.322801][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 420.328542][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 420.334286][ T31] process_scheduled_works+0xae1/0x17b0 [ 420.339835][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.345815][ T31] worker_thread+0x8a0/0xda0 [ 420.350383][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.356714][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.362593][ T31] ? __kthread_parkme+0x7b/0x200 [ 420.367537][ T31] kthread+0x70e/0x8a0 [ 420.371590][ T31] ? __pfx_worker_thread+0x10/0x10 [ 420.376701][ T31] ? __pfx_kthread+0x10/0x10 [ 420.381631][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.386423][ T31] ? __pfx_kthread+0x10/0x10 [ 420.391102][ T31] ret_from_fork+0x3f9/0x770 [ 420.395698][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.400793][ T31] ? __switch_to_asm+0x39/0x70 [ 420.405576][ T31] ? __switch_to_asm+0x33/0x70 [ 420.410345][ T31] ? __pfx_kthread+0x10/0x10 [ 420.414985][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.419754][ T31] [ 420.422770][ T31] INFO: task syz.4.2162:12975 blocked for more than 144 seconds. [ 420.430503][ T31] Not tainted syzkaller #0 [ 420.435445][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.444136][ T31] task:syz.4.2162 state:D stack:26056 pid:12975 tgid:12973 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 420.456080][ T31] Call Trace: [ 420.459364][ T31] [ 420.462287][ T31] __schedule+0x1798/0x4cc0 [ 420.466810][ T31] ? __pfx___schedule+0x10/0x10 [ 420.471640][ T31] ? schedule+0x91/0x360 [ 420.475884][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.480857][ T31] ? lock_release+0x4b/0x3e0 [ 420.485473][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.491357][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.497684][ T31] schedule+0x165/0x360 [ 420.501822][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.507305][ T31] __mutex_lock+0x7e6/0x1350 [ 420.511884][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.516642][ T31] ? devinet_ioctl+0x323/0x1b50 [ 420.521470][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.526489][ T31] ? bpf_lsm_capable+0x9/0x20 [ 420.531147][ T31] ? security_capable+0x7e/0x2e0 [ 420.536093][ T31] devinet_ioctl+0x323/0x1b50 [ 420.540750][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.545510][ T31] ? lock_release+0x4b/0x3e0 [ 420.550084][ T31] ? __might_fault+0xb0/0x130 [ 420.554777][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 420.559894][ T31] ? get_user_ifreq+0x12c/0x180 [ 420.564771][ T31] inet_ioctl+0x3c0/0x4c0 [ 420.569109][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 420.573978][ T31] ? lock_release+0x4b/0x3e0 [ 420.578567][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 420.584552][ T31] ? kfree+0x18e/0x440 [ 420.588627][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 420.593676][ T31] ? packet_ioctl+0x254/0x350 [ 420.598382][ T31] sock_do_ioctl+0xd9/0x300 [ 420.602870][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 420.607985][ T31] ? do_futex+0x333/0x420 [ 420.612305][ T31] sock_ioctl+0x576/0x790 [ 420.616667][ T31] ? lock_release+0x4b/0x3e0 [ 420.621246][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 420.626105][ T31] ? __fget_files+0x2a/0x420 [ 420.630681][ T31] ? __fget_files+0x3a0/0x420 [ 420.635354][ T31] ? __fget_files+0x2a/0x420 [ 420.639930][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.644871][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 420.649702][ T31] __se_sys_ioctl+0xfc/0x170 [ 420.654307][ T31] do_syscall_64+0xfa/0x3b0 [ 420.658813][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.664952][ T31] ? clear_bhb_loop+0x60/0xb0 [ 420.669627][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.675532][ T31] RIP: 0033:0x7f728378ebe9 [ 420.679932][ T31] RSP: 002b:00007f72819ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.688736][ T31] RAX: ffffffffffffffda RBX: 00007f72839b5fa0 RCX: 00007f728378ebe9 [ 420.696727][ T31] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000003 [ 420.704705][ T31] RBP: 00007f7283811e19 R08: 0000000000000000 R09: 0000000000000000 [ 420.712671][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.720642][ T31] R13: 00007f72839b6038 R14: 00007f72839b5fa0 R15: 00007ffed0cf2698 [ 420.728619][ T31] [ 420.731629][ T31] INFO: task syz.2.2163:12979 blocked for more than 144 seconds. [ 420.739347][ T31] Not tainted syzkaller #0 [ 420.744543][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.753240][ T31] task:syz.2.2163 state:D stack:26056 pid:12979 tgid:12978 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 420.765189][ T31] Call Trace: [ 420.768464][ T31] [ 420.771399][ T31] __schedule+0x1798/0x4cc0 [ 420.775915][ T31] ? __kernel_text_address+0xd/0x40 [ 420.781096][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.787452][ T31] ? arch_stack_walk+0xfc/0x150 [ 420.792318][ T31] ? __pfx___schedule+0x10/0x10 [ 420.797174][ T31] ? schedule+0x91/0x360 [ 420.801414][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.806190][ T31] ? lock_release+0x4b/0x3e0 [ 420.810761][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 420.816646][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.822953][ T31] schedule+0x165/0x360 [ 420.827190][ T31] schedule_preempt_disabled+0x13/0x30 [ 420.832653][ T31] __mutex_lock+0x7e6/0x1350 [ 420.837299][ T31] ? __mutex_lock+0x5bb/0x1350 [ 420.842048][ T31] ? __netdev_update_features+0xcb1/0x1be0 [ 420.847857][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 420.852862][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.857622][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 420.863949][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.868717][ T31] __netdev_update_features+0xcb1/0x1be0 [ 420.874354][ T31] ? __pfx___netdev_update_features+0x10/0x10 [ 420.880408][ T31] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 420.886651][ T31] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 420.893389][ T31] ? do_raw_spin_lock+0x121/0x290 [ 420.898439][ T31] netdev_update_features+0x6d/0xe0 [ 420.904208][ T31] ? __pfx_netdev_update_features+0x10/0x10 [ 420.910114][ T31] ? bond_netdev_event+0xd9/0xe80 [ 420.915141][ T31] ? netdevice_event+0x2dc/0x8a0 [ 420.920060][ T31] macsec_notify+0x2f5/0x660 [ 420.924676][ T31] ? __pfx_macsec_notify+0x10/0x10 [ 420.929802][ T31] notifier_call_chain+0x1b3/0x3e0 [ 420.934943][ T31] netdev_features_change+0x85/0xc0 [ 420.940142][ T31] ? __pfx_netdev_features_change+0x10/0x10 [ 420.946040][ T31] ? security_capable+0x7e/0x2e0 [ 420.950961][ T31] dev_ethtool+0x1536/0x19b0 [ 420.955562][ T31] ? __pfx_dev_ethtool+0x10/0x10 [ 420.960479][ T31] ? dev_load+0x21/0x1f0 [ 420.964741][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.969501][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.974259][ T31] ? lock_release+0x4b/0x3e0 [ 420.978836][ T31] ? dev_load+0x21/0x1f0 [ 420.983056][ T31] dev_ioctl+0x392/0x1150 [ 420.987404][ T31] sock_do_ioctl+0x22c/0x300 [ 420.992213][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 420.997349][ T31] ? do_futex+0x395/0x420 [ 421.001663][ T31] sock_ioctl+0x576/0x790 [ 421.005990][ T31] ? lock_release+0x4b/0x3e0 [ 421.010563][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 421.015407][ T31] ? __fget_files+0x2a/0x420 [ 421.019978][ T31] ? __fget_files+0x3a0/0x420 [ 421.024659][ T31] ? __fget_files+0x2a/0x420 [ 421.029250][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 421.034184][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 421.039015][ T31] __se_sys_ioctl+0xfc/0x170 [ 421.043602][ T31] do_syscall_64+0xfa/0x3b0 [ 421.048108][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.054171][ T31] ? clear_bhb_loop+0x60/0xb0 [ 421.058844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.064735][ T31] RIP: 0033:0x7f762ef8ebe9 [ 421.069143][ T31] RSP: 002b:00007f762fdc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.077562][ T31] RAX: ffffffffffffffda RBX: 00007f762f1b5fa0 RCX: 00007f762ef8ebe9 [ 421.085538][ T31] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 421.093510][ T31] RBP: 00007f762f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 421.101858][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.109857][ T31] R13: 00007f762f1b6038 R14: 00007f762f1b5fa0 R15: 00007ffcb81d7b78 [ 421.117827][ T31] [ 421.120837][ T31] INFO: task syz.2.2163:12989 blocked for more than 145 seconds. [ 421.128620][ T31] Not tainted syzkaller #0 [ 421.133558][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.142216][ T31] task:syz.2.2163 state:D stack:26184 pid:12989 tgid:12978 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 421.154124][ T31] Call Trace: [ 421.157385][ T31] [ 421.160292][ T31] __schedule+0x1798/0x4cc0 [ 421.164804][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.169564][ T31] ? unwind_next_frame+0xa5/0x2390 [ 421.174668][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.179412][ T31] ? __pfx___schedule+0x10/0x10 [ 421.184292][ T31] ? schedule+0x91/0x360 [ 421.188533][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.193276][ T31] ? lock_release+0x4b/0x3e0 [ 421.198075][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 421.204016][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.210348][ T31] schedule+0x165/0x360 [ 421.214522][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.219980][ T31] __mutex_lock+0x7e6/0x1350 [ 421.224602][ T31] ? __mutex_lock+0x5bb/0x1350 [ 421.229365][ T31] ? ethnl_default_dump_one+0x151/0x7e0 [ 421.234926][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.239936][ T31] ? __nlmsg_put+0xef/0x1b0 [ 421.244446][ T31] ethnl_default_dump_one+0x151/0x7e0 [ 421.249797][ T31] ? lock_release+0x4b/0x3e0 [ 421.254400][ T31] ethnl_default_dumpit+0x30c/0x600 [ 421.259591][ T31] ? ethnl_default_dumpit+0xd1/0x600 [ 421.264865][ T31] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 421.270563][ T31] ? __build_skb_around+0x257/0x3e0 [ 421.275763][ T31] genl_dumpit+0x10b/0x1b0 [ 421.280162][ T31] netlink_dump+0x6e1/0xe90 [ 421.284658][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 421.289684][ T31] ? ethnl_default_parse+0x195/0x290 [ 421.294965][ T31] ? genl_start+0x581/0x6c0 [ 421.299669][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 421.304971][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 421.310685][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 421.316920][ T31] ? genl_get_cmd+0x67f/0x910 [ 421.321580][ T31] ? __pfx_genl_start+0x10/0x10 [ 421.326424][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 421.331340][ T31] ? __pfx_genl_done+0x10/0x10 [ 421.336112][ T31] genl_rcv_msg+0x5da/0x790 [ 421.340614][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.345638][ T31] ? __pfx_ethnl_default_start+0x10/0x10 [ 421.351251][ T31] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 421.356966][ T31] ? __pfx_ethnl_default_done+0x10/0x10 [ 421.362491][ T31] ? __asan_memcpy+0x40/0x70 [ 421.367070][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.372421][ T31] netlink_rcv_skb+0x208/0x470 [ 421.377189][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.382195][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.387483][ T31] ? lock_release+0x4b/0x3e0 [ 421.392163][ T31] ? down_read+0x1ad/0x2e0 [ 421.396589][ T31] genl_rcv+0x28/0x40 [ 421.400552][ T31] netlink_unicast+0x82c/0x9e0 [ 421.405641][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 421.410961][ T31] ? netlink_sendmsg+0x642/0xb30 [ 421.415917][ T31] ? skb_put+0x11b/0x210 [ 421.420137][ T31] netlink_sendmsg+0x805/0xb30 [ 421.424896][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.430169][ T31] ? futex_unqueue+0x22/0x240 [ 421.434885][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 421.439819][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.445107][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.450377][ T31] __sock_sendmsg+0x21c/0x270 [ 421.455070][ T31] ____sys_sendmsg+0x505/0x830 [ 421.459820][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.465108][ T31] ? import_iovec+0x74/0xa0 [ 421.469600][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 421.474287][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.479487][ T31] ? futex_wait+0x285/0x360 [ 421.484033][ T31] ? __fget_files+0x2a/0x420 [ 421.488627][ T31] ? __fget_files+0x3a0/0x420 [ 421.493296][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 421.498261][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.503942][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.508705][ T31] do_syscall_64+0xfa/0x3b0 [ 421.513189][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.519270][ T31] ? clear_bhb_loop+0x60/0xb0 [ 421.523976][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.529862][ T31] RIP: 0033:0x7f762ef8ebe9 [ 421.534287][ T31] RSP: 002b:00007f762fda3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.542705][ T31] RAX: ffffffffffffffda RBX: 00007f762f1b6090 RCX: 00007f762ef8ebe9 [ 421.550719][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 421.558692][ T31] RBP: 00007f762f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 421.566656][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.574647][ T31] R13: 00007f762f1b6128 R14: 00007f762f1b6090 R15: 00007ffcb81d7b78 [ 421.582623][ T31] [ 421.585655][ T31] INFO: task syz.2.2163:12993 blocked for more than 145 seconds. [ 421.593363][ T31] Not tainted syzkaller #0 [ 421.598312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.607190][ T31] task:syz.2.2163 state:D stack:28928 pid:12993 tgid:12978 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 421.619149][ T31] Call Trace: [ 421.622411][ T31] [ 421.625356][ T31] __schedule+0x1798/0x4cc0 [ 421.629849][ T31] ? stack_depot_save_flags+0x40/0x860 [ 421.635334][ T31] ? __pfx___schedule+0x10/0x10 [ 421.640168][ T31] ? schedule+0x91/0x360 [ 421.644429][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.649199][ T31] ? lock_release+0x4b/0x3e0 [ 421.653809][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 421.659704][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.666034][ T31] schedule+0x165/0x360 [ 421.670172][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.675640][ T31] __mutex_lock+0x7e6/0x1350 [ 421.680215][ T31] ? __mutex_lock+0x5bb/0x1350 [ 421.684979][ T31] ? bpf_map_offload_map_alloc+0x130/0x840 [ 421.690765][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.695787][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.700530][ T31] ? bpf_map_area_alloc+0x64/0x180 [ 421.705691][ T31] ? bpf_map_init_from_attr+0x14a/0x340 [ 421.711448][ T31] bpf_map_offload_map_alloc+0x130/0x840 [ 421.717097][ T31] ? futex_wait+0x285/0x360 [ 421.721584][ T31] ? __pfx_bpf_map_offload_map_alloc+0x10/0x10 [ 421.727735][ T31] ? __might_fault+0xb0/0x130 [ 421.732391][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.737149][ T31] ? lock_acquire+0x5f/0x360 [ 421.741729][ T31] ? array_map_alloc_check+0x269/0x380 [ 421.747182][ T31] map_create+0xaa0/0x14d0 [ 421.751585][ T31] ? __might_fault+0xcc/0x130 [ 421.756258][ T31] ? security_bpf+0x7e/0x300 [ 421.760830][ T31] __sys_bpf+0x60f/0x870 [ 421.765089][ T31] ? __pfx___sys_bpf+0x10/0x10 [ 421.769862][ T31] ? __fget_files+0x3a0/0x420 [ 421.774572][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 421.779773][ T31] __x64_sys_bpf+0x7c/0x90 [ 421.784274][ T31] do_syscall_64+0xfa/0x3b0 [ 421.788805][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.794888][ T31] ? clear_bhb_loop+0x60/0xb0 [ 421.799562][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.805451][ T31] RIP: 0033:0x7f762ef8ebe9 [ 421.809844][ T31] RSP: 002b:00007f762fd82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.818461][ T31] RAX: ffffffffffffffda RBX: 00007f762f1b6180 RCX: 00007f762ef8ebe9 [ 421.826455][ T31] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 0000000000000000 [ 421.834439][ T31] RBP: 00007f762f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 421.842404][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.850367][ T31] R13: 00007f762f1b6218 R14: 00007f762f1b6180 R15: 00007ffcb81d7b78 [ 421.858353][ T31] [ 421.861364][ T31] INFO: task syz.1.2164:12982 blocked for more than 145 seconds. [ 421.869146][ T31] Not tainted syzkaller #0 [ 421.874093][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.882753][ T31] task:syz.1.2164 state:D stack:25224 pid:12982 tgid:12982 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 421.894691][ T31] Call Trace: [ 421.897967][ T31] [ 421.900880][ T31] __schedule+0x1798/0x4cc0 [ 421.905390][ T31] ? stack_trace_save+0x9c/0xe0 [ 421.910223][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 421.915918][ T31] ? stack_depot_save_flags+0x40/0x860 [ 421.921390][ T31] ? __pfx___schedule+0x10/0x10 [ 421.926248][ T31] ? schedule+0x91/0x360 [ 421.930472][ T31] ? rcu_is_watching+0x15/0xb0 [ 421.935227][ T31] ? lock_release+0x4b/0x3e0 [ 421.939814][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 421.945718][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.952029][ T31] schedule+0x165/0x360 [ 421.956186][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.961625][ T31] __mutex_lock+0x7e6/0x1350 [ 421.966209][ T31] ? __mutex_lock+0x5bb/0x1350 [ 421.970952][ T31] ? tun_chr_close+0x3e/0x1c0 [ 421.975646][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.980674][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 421.985777][ T31] tun_chr_close+0x3e/0x1c0 [ 421.990262][ T31] __fput+0x44c/0xa70 [ 421.994254][ T31] task_work_run+0x1d4/0x260 [ 421.998841][ T31] ? __pfx_task_work_run+0x10/0x10 [ 422.003965][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 422.009682][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.014458][ T31] exit_to_user_mode_loop+0xec/0x110 [ 422.019963][ T31] do_syscall_64+0x2bd/0x3b0 [ 422.024640][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.030708][ T31] ? clear_bhb_loop+0x60/0xb0 [ 422.036688][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.042589][ T31] RIP: 0033:0x7f515dd8ebe9 [ 422.047025][ T31] RSP: 002b:00007ffd307e04c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 422.055612][ T31] RAX: 0000000000000000 RBX: 00007f515dfb7da0 RCX: 00007f515dd8ebe9 [ 422.063873][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 422.071842][ T31] RBP: 00007f515dfb7da0 R08: 00000000000000a0 R09: 00000009307e07bf [ 422.079871][ T31] R10: 00007f515dfb7cb0 R11: 0000000000000246 R12: 000000000003ec8c [ 422.087887][ T31] R13: 00007f515dfb6090 R14: ffffffffffffffff R15: 00007ffd307e05e0 [ 422.096240][ T31] [ 422.099264][ T31] INFO: task syz.1.2164:12983 blocked for more than 145 seconds. [ 422.107078][ T31] Not tainted syzkaller #0 [ 422.112004][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.120707][ T31] task:syz.1.2164 state:D stack:27976 pid:12983 tgid:12982 ppid:5859 task_flags:0x400140 flags:0x00004004 [ 422.132985][ T31] Call Trace: [ 422.136361][ T31] [ 422.139289][ T31] __schedule+0x1798/0x4cc0 [ 422.143924][ T31] ? __pfx___schedule+0x10/0x10 [ 422.148767][ T31] ? schedule+0x91/0x360 [ 422.153015][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.157785][ T31] ? lock_release+0x4b/0x3e0 [ 422.162373][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 422.168265][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.174605][ T31] schedule+0x165/0x360 [ 422.178761][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.184261][ T31] __mutex_lock+0x7e6/0x1350 [ 422.188862][ T31] ? __mutex_lock+0x5bb/0x1350 [ 422.193679][ T31] ? br_ioctl_stub+0x199/0xc80 [ 422.198440][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.203484][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 422.209384][ T31] br_ioctl_stub+0x199/0xc80 [ 422.214007][ T31] ? __mutex_lock+0x335/0x1350 [ 422.218772][ T31] ? __pfx_br_ioctl_stub+0x10/0x10 [ 422.224126][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 422.229165][ T31] ? sock_ioctl+0x4b4/0x790 [ 422.233751][ T31] ? do_futex+0x395/0x420 [ 422.238081][ T31] ? __pfx_br_ioctl_stub+0x10/0x10 [ 422.243172][ T31] sock_ioctl+0x4d5/0x790 [ 422.247502][ T31] ? lock_release+0x4b/0x3e0 [ 422.252074][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 422.257004][ T31] ? __fget_files+0x2a/0x420 [ 422.261592][ T31] ? __fget_files+0x3a0/0x420 [ 422.266350][ T31] ? __fget_files+0x2a/0x420 [ 422.270971][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 422.275929][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 422.280764][ T31] __se_sys_ioctl+0xfc/0x170 [ 422.285371][ T31] do_syscall_64+0xfa/0x3b0 [ 422.289882][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.295975][ T31] ? clear_bhb_loop+0x60/0xb0 [ 422.300650][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.306546][ T31] RIP: 0033:0x7f515dd8ebe9 [ 422.310956][ T31] RSP: 002b:00007f515ebae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.319379][ T31] RAX: ffffffffffffffda RBX: 00007f515dfb5fa0 RCX: 00007f515dd8ebe9 [ 422.327555][ T31] RDX: 0000200000000080 RSI: 0000000000008940 RDI: 0000000000000006 [ 422.335542][ T31] RBP: 00007f515de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.343525][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.351488][ T31] R13: 00007f515dfb6038 R14: 00007f515dfb5fa0 R15: 00007ffd307e0368 [ 422.359458][ T31] [ 422.362460][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 422.371493][ T31] INFO: task syz.0.2166:12985 blocked for more than 146 seconds. [ 422.379205][ T31] Not tainted syzkaller #0 [ 422.384142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.392909][ T31] task:syz.0.2166 state:D stack:25016 pid:12985 tgid:12984 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 422.404823][ T31] Call Trace: [ 422.408090][ T31] [ 422.411056][ T31] __schedule+0x1798/0x4cc0 [ 422.415602][ T31] ? __pfx___schedule+0x10/0x10 [ 422.420461][ T31] ? schedule+0x91/0x360 [ 422.424745][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.429734][ T31] ? lock_release+0x4b/0x3e0 [ 422.434354][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 422.440247][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.446576][ T31] schedule+0x165/0x360 [ 422.450715][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.456180][ T31] __mutex_lock+0x7e6/0x1350 [ 422.460755][ T31] ? __mutex_lock+0x5bb/0x1350 [ 422.465524][ T31] ? nl80211_pre_doit+0x5f/0x930 [ 422.470445][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.475475][ T31] ? __nla_parse+0x40/0x60 [ 422.479878][ T31] nl80211_pre_doit+0x5f/0x930 [ 422.484662][ T31] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 422.490998][ T31] genl_family_rcv_msg_doit+0x1bb/0x300 [ 422.496545][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 422.502602][ T31] ? bpf_lsm_capable+0x9/0x20 [ 422.507291][ T31] ? security_capable+0x7e/0x2e0 [ 422.512220][ T31] genl_rcv_msg+0x60e/0x790 [ 422.516732][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.521737][ T31] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 422.527106][ T31] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 422.532591][ T31] ? __pfx_nl80211_post_doit+0x10/0x10 [ 422.538094][ T31] ? __asan_memcpy+0x40/0x70 [ 422.542698][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 422.548106][ T31] netlink_rcv_skb+0x208/0x470 [ 422.552880][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.557910][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.563190][ T31] ? lock_release+0x4b/0x3e0 [ 422.567788][ T31] ? down_read+0x1ad/0x2e0 [ 422.572185][ T31] genl_rcv+0x28/0x40 [ 422.576160][ T31] netlink_unicast+0x82c/0x9e0 [ 422.580910][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 422.586218][ T31] ? netlink_sendmsg+0x642/0xb30 [ 422.591143][ T31] ? skb_put+0x11b/0x210 [ 422.595420][ T31] netlink_sendmsg+0x805/0xb30 [ 422.600176][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.605470][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 422.610390][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.615708][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.620996][ T31] __sock_sendmsg+0x21c/0x270 [ 422.625682][ T31] ____sys_sendmsg+0x505/0x830 [ 422.630740][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.636058][ T31] ? import_iovec+0x74/0xa0 [ 422.640553][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 422.645237][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.650426][ T31] ? futex_wake+0x4b2/0x560 [ 422.654951][ T31] ? __fget_files+0x2a/0x420 [ 422.659558][ T31] ? __fget_files+0x3a0/0x420 [ 422.664313][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 422.669254][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.674720][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.679466][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.684246][ T31] do_syscall_64+0xfa/0x3b0 [ 422.688758][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.694824][ T31] ? clear_bhb_loop+0x60/0xb0 [ 422.699486][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.705392][ T31] RIP: 0033:0x7f2ece38ebe9 [ 422.709786][ T31] RSP: 002b:00007f2ecf26d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.718196][ T31] RAX: ffffffffffffffda RBX: 00007f2ece5b5fa0 RCX: 00007f2ece38ebe9 [ 422.726169][ T31] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 422.734351][ T31] RBP: 00007f2ece411e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.742318][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.750313][ T31] R13: 00007f2ece5b6038 R14: 00007f2ece5b5fa0 R15: 00007ffc481c3118 [ 422.758319][ T31] [ 422.761319][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 422.770331][ T31] INFO: task syz.3.2165:12987 blocked for more than 146 seconds. [ 422.778083][ T31] Not tainted syzkaller #0 [ 422.783007][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.791745][ T31] task:syz.3.2165 state:D stack:25160 pid:12987 tgid:12986 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 422.803670][ T31] Call Trace: [ 422.806951][ T31] [ 422.809879][ T31] __schedule+0x1798/0x4cc0 [ 422.814409][ T31] ? __pfx___schedule+0x10/0x10 [ 422.819241][ T31] ? schedule+0x91/0x360 [ 422.823559][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.828354][ T31] ? lock_release+0x4b/0x3e0 [ 422.832944][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 422.839075][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.845437][ T31] schedule+0x165/0x360 [ 422.849576][ T31] schedule_preempt_disabled+0x13/0x30 [ 422.855033][ T31] __mutex_lock+0x7e6/0x1350 [ 422.859607][ T31] ? __mutex_lock+0x5bb/0x1350 [ 422.864388][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 422.869159][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 422.874199][ T31] ? ns_capable+0x8a/0xf0 [ 422.878525][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 422.884346][ T31] rtnl_newlink+0x8db/0x1c70 [ 422.888935][ T31] ? netlink_sendmsg+0x805/0xb30 [ 422.893885][ T31] ? rtnl_newlink+0x8f1/0x1c70 [ 422.898651][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 422.903693][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.908452][ T31] ? nlmon_xmit+0xb0/0x100 [ 422.912846][ T31] ? kmem_cache_free+0x18f/0x400 [ 422.917794][ T31] ? rcu_is_watching+0x15/0xb0 [ 422.922556][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 422.927683][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 422.933036][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 422.939081][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 422.944237][ T31] ? lock_release+0x4b/0x3e0 [ 422.948827][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 422.953930][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 422.959020][ T31] ? __dev_queue_xmit+0x1d79/0x3b50 [ 422.964230][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 422.969345][ T31] ? lock_release+0x4b/0x3e0 [ 422.973930][ T31] ? bpf_lsm_capable+0x9/0x20 [ 422.978587][ T31] ? security_capable+0x7e/0x2e0 [ 422.983548][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 422.988573][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 422.993522][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 422.998635][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.004106][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 423.009132][ T31] ? __asan_memcpy+0x40/0x70 [ 423.013720][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 423.019077][ T31] netlink_rcv_skb+0x208/0x470 [ 423.023848][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.029307][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.034596][ T31] netlink_unicast+0x82c/0x9e0 [ 423.039346][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 423.045033][ T31] ? netlink_sendmsg+0x642/0xb30 [ 423.050071][ T31] ? skb_put+0x11b/0x210 [ 423.054318][ T31] netlink_sendmsg+0x805/0xb30 [ 423.059069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.064360][ T31] ? futex_unqueue+0x22/0x240 [ 423.069032][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.073982][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.079272][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.084576][ T31] __sock_sendmsg+0x21c/0x270 [ 423.089251][ T31] ____sys_sendmsg+0x505/0x830 [ 423.094021][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.099309][ T31] ? import_iovec+0x74/0xa0 [ 423.103830][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 423.108502][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.113702][ T31] ? futex_wait+0x285/0x360 [ 423.118210][ T31] ? __fget_files+0x2a/0x420 [ 423.122779][ T31] ? __fget_files+0x3a0/0x420 [ 423.127463][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 423.132386][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.137846][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.142800][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.148337][ T31] do_syscall_64+0xfa/0x3b0 [ 423.152831][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.158901][ T31] ? clear_bhb_loop+0x60/0xb0 [ 423.163601][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.169486][ T31] RIP: 0033:0x7f60e2d8ebe9 [ 423.173903][ T31] RSP: 002b:00007f60e3bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.182313][ T31] RAX: ffffffffffffffda RBX: 00007f60e2fb5fa0 RCX: 00007f60e2d8ebe9 [ 423.190289][ T31] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000004 [ 423.198301][ T31] RBP: 00007f60e2e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 423.206282][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.214261][ T31] R13: 00007f60e2fb6038 R14: 00007f60e2fb5fa0 R15: 00007ffe6dec4708 [ 423.222237][ T31] [ 423.225267][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 423.234281][ T31] INFO: task syz.3.2165:12991 blocked for more than 147 seconds. [ 423.241986][ T31] Not tainted syzkaller #0 [ 423.247134][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.255806][ T31] task:syz.3.2165 state:D stack:27112 pid:12991 tgid:12986 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 423.267702][ T31] Call Trace: [ 423.270961][ T31] [ 423.273897][ T31] __schedule+0x1798/0x4cc0 [ 423.278402][ T31] ? kasan_save_track+0x4f/0x80 [ 423.283232][ T31] ? kasan_save_track+0x3e/0x80 [ 423.288090][ T31] ? kasan_save_free_info+0x46/0x50 [ 423.293264][ T31] ? kfree+0x18e/0x440 [ 423.297333][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 423.302950][ T31] ? __pfx___schedule+0x10/0x10 [ 423.307930][ T31] ? schedule+0x91/0x360 [ 423.312267][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.318407][ T31] ? lock_release+0x4b/0x3e0 [ 423.323025][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 423.328930][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.335331][ T31] schedule+0x165/0x360 [ 423.339495][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.344947][ T31] __mutex_lock+0x7e6/0x1350 [ 423.349737][ T31] ? __mutex_lock+0x5bb/0x1350 [ 423.354541][ T31] ? vlan_ioctl_handler+0xd0/0x650 [ 423.359660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.364691][ T31] ? __mutex_lock+0x335/0x1350 [ 423.369438][ T31] ? lock_release+0x4b/0x3e0 [ 423.374036][ T31] ? __might_fault+0xb0/0x130 [ 423.378722][ T31] ? __might_fault+0xcc/0x130 [ 423.383398][ T31] vlan_ioctl_handler+0xd0/0x650 [ 423.388447][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 423.394113][ T31] ? do_futex+0x333/0x420 [ 423.398453][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 423.404068][ T31] sock_ioctl+0x610/0x790 [ 423.408407][ T31] ? lock_release+0x4b/0x3e0 [ 423.412982][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 423.418748][ T31] ? __fget_files+0x2a/0x420 [ 423.423351][ T31] ? __fget_files+0x3a0/0x420 [ 423.428146][ T31] ? __fget_files+0x2a/0x420 [ 423.432783][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 423.437812][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 423.442684][ T31] __se_sys_ioctl+0xfc/0x170 [ 423.447699][ T31] do_syscall_64+0xfa/0x3b0 [ 423.452433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.458584][ T31] ? clear_bhb_loop+0x60/0xb0 [ 423.463258][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.469166][ T31] RIP: 0033:0x7f60e2d8ebe9 [ 423.473615][ T31] RSP: 002b:00007f60e3b95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.482046][ T31] RAX: ffffffffffffffda RBX: 00007f60e2fb6090 RCX: 00007f60e2d8ebe9 [ 423.490040][ T31] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000003 [ 423.498065][ T31] RBP: 00007f60e2e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 423.506040][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.514023][ T31] R13: 00007f60e2fb6128 R14: 00007f60e2fb6090 R15: 00007ffe6dec4708 [ 423.521998][ T31] [ 423.525029][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 423.534047][ T31] INFO: task syz-executor:13001 blocked for more than 147 seconds. [ 423.541928][ T31] Not tainted syzkaller #0 [ 423.546891][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.555995][ T31] task:syz-executor state:D stack:27048 pid:13001 tgid:13001 ppid:1 task_flags:0x400140 flags:0x00004004 [ 423.567949][ T31] Call Trace: [ 423.571228][ T31] [ 423.574171][ T31] __schedule+0x1798/0x4cc0 [ 423.578684][ T31] ? stack_depot_save_flags+0x40/0x860 [ 423.584173][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 423.589959][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.594726][ T31] ? __pfx___schedule+0x10/0x10 [ 423.599575][ T31] ? schedule+0x91/0x360 [ 423.603811][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.608579][ T31] ? lock_release+0x4b/0x3e0 [ 423.613151][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 423.619039][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.625395][ T31] schedule+0x165/0x360 [ 423.629540][ T31] schedule_preempt_disabled+0x13/0x30 [ 423.635043][ T31] __mutex_lock+0x7e6/0x1350 [ 423.639628][ T31] ? __mutex_lock+0x5bb/0x1350 [ 423.644404][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 423.649508][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 423.654902][ T31] ? __nla_parse+0x40/0x60 [ 423.659334][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 423.664275][ T31] ? unwind_get_return_address+0x4d/0x90 [ 423.669899][ T31] ? arch_stack_walk+0xfc/0x150 [ 423.674780][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 423.680151][ T31] ? lock_release+0x4b/0x3e0 [ 423.684759][ T31] ? bpf_lsm_capable+0x9/0x20 [ 423.689447][ T31] ? security_capable+0x7e/0x2e0 [ 423.694435][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 423.699804][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 423.704756][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 423.709853][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.715319][ T31] ? __netlink_lookup+0xbd/0x810 [ 423.720248][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.725012][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.729752][ T31] netlink_rcv_skb+0x208/0x470 [ 423.734523][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.739990][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.745323][ T31] netlink_unicast+0x82c/0x9e0 [ 423.750088][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 423.755375][ T31] ? netlink_sendmsg+0x642/0xb30 [ 423.760530][ T31] ? skb_put+0x11b/0x210 [ 423.764802][ T31] netlink_sendmsg+0x805/0xb30 [ 423.769569][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.774859][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.779797][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.785293][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.790585][ T31] __sock_sendmsg+0x21c/0x270 [ 423.795259][ T31] __sys_sendto+0x3bd/0x520 [ 423.799771][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 423.804804][ T31] ? count_memcg_event_mm+0x21/0x260 [ 423.810073][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 423.815352][ T31] __x64_sys_sendto+0xde/0x100 [ 423.820119][ T31] do_syscall_64+0xfa/0x3b0 [ 423.824622][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.830664][ T31] ? clear_bhb_loop+0x60/0xb0 [ 423.835334][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.841205][ T31] RIP: 0033:0x7f910cf90a7c [ 423.845613][ T31] RSP: 002b:00007ffcb96c7510 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.854039][ T31] RAX: ffffffffffffffda RBX: 00007f910dce4620 RCX: 00007f910cf90a7c [ 423.862409][ T31] RDX: 0000000000000028 RSI: 00007f910dce4670 RDI: 0000000000000003 [ 423.870472][ T31] RBP: 0000000000000000 R08: 00007ffcb96c7564 R09: 000000000000000c [ 423.878466][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 423.886468][ T31] R13: 0000000000000000 R14: 00007f910dce4670 R15: 0000000000000000 [ 423.894460][ T31] [ 423.897482][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 423.906503][ T31] INFO: task syz-executor:13003 blocked for more than 147 seconds. [ 423.914420][ T31] Not tainted syzkaller #0 [ 423.919367][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.928022][ T31] task:syz-executor state:D stack:27048 pid:13003 tgid:13003 ppid:1 task_flags:0x400140 flags:0x00004004 [ 423.939967][ T31] Call Trace: [ 423.943233][ T31] [ 423.946169][ T31] __schedule+0x1798/0x4cc0 [ 423.950665][ T31] ? stack_depot_save_flags+0x40/0x860 [ 423.956142][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 423.962159][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.966944][ T31] ? __pfx___schedule+0x10/0x10 [ 423.971797][ T31] ? schedule+0x91/0x360 [ 423.976033][ T31] ? rcu_is_watching+0x15/0xb0 [ 423.980864][ T31] ? lock_release+0x4b/0x3e0 [ 423.985469][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 423.991373][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.997725][ T31] schedule+0x165/0x360 [ 424.001881][ T31] schedule_preempt_disabled+0x13/0x30 [ 424.007340][ T31] __mutex_lock+0x7e6/0x1350 [ 424.011918][ T31] ? __mutex_lock+0x5bb/0x1350 [ 424.016694][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 424.021788][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.026820][ T31] ? __nla_parse+0x40/0x60 [ 424.031220][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 424.036154][ T31] ? unwind_get_return_address+0x4d/0x90 [ 424.041769][ T31] ? arch_stack_walk+0xfc/0x150 [ 424.046621][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 424.051974][ T31] ? lock_release+0x4b/0x3e0 [ 424.056572][ T31] ? bpf_lsm_capable+0x9/0x20 [ 424.061241][ T31] ? security_capable+0x7e/0x2e0 [ 424.066440][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 424.071817][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 424.076779][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 424.081872][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.087345][ T31] ? __netlink_lookup+0xbd/0x810 [ 424.092268][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.097042][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.101789][ T31] netlink_rcv_skb+0x208/0x470 [ 424.106566][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.112015][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.117302][ T31] netlink_unicast+0x82c/0x9e0 [ 424.122051][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 424.127334][ T31] ? netlink_sendmsg+0x642/0xb30 [ 424.132255][ T31] ? skb_put+0x11b/0x210 [ 424.136491][ T31] netlink_sendmsg+0x805/0xb30 [ 424.141244][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.146533][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.151452][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.156760][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.162030][ T31] __sock_sendmsg+0x21c/0x270 [ 424.166938][ T31] __sys_sendto+0x3bd/0x520 [ 424.171448][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 424.176494][ T31] ? count_memcg_event_mm+0x21/0x260 [ 424.181792][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 424.187151][ T31] __x64_sys_sendto+0xde/0x100 [ 424.191918][ T31] do_syscall_64+0xfa/0x3b0 [ 424.196419][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.202467][ T31] ? clear_bhb_loop+0x60/0xb0 [ 424.207146][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.213018][ T31] RIP: 0033:0x7fa8e5d90a7c [ 424.217422][ T31] RSP: 002b:00007ffe36d70080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.225835][ T31] RAX: ffffffffffffffda RBX: 00007fa8e6ae4620 RCX: 00007fa8e5d90a7c [ 424.233810][ T31] RDX: 0000000000000028 RSI: 00007fa8e6ae4670 RDI: 0000000000000003 [ 424.241761][ T31] RBP: 0000000000000000 R08: 00007ffe36d700d4 R09: 000000000000000c [ 424.249731][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 424.257700][ T31] R13: 0000000000000000 R14: 00007fa8e6ae4670 R15: 0000000000000000 [ 424.266631][ T31] [ 424.269888][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 424.278914][ T31] INFO: task syz-executor:13005 blocked for more than 148 seconds. [ 424.286793][ T31] Not tainted syzkaller #0 [ 424.291701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.300379][ T31] task:syz-executor state:D stack:26696 pid:13005 tgid:13005 ppid:1 task_flags:0x400140 flags:0x00004004 [ 424.312312][ T31] Call Trace: [ 424.315599][ T31] [ 424.318534][ T31] __schedule+0x1798/0x4cc0 [ 424.323033][ T31] ? stack_depot_save_flags+0x40/0x860 [ 424.328510][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 424.334318][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.339076][ T31] ? __pfx___schedule+0x10/0x10 [ 424.344859][ T31] ? schedule+0x91/0x360 [ 424.349138][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.353931][ T31] ? lock_release+0x4b/0x3e0 [ 424.358519][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 424.364462][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.370981][ T31] schedule+0x165/0x360 [ 424.375155][ T31] schedule_preempt_disabled+0x13/0x30 [ 424.380680][ T31] __mutex_lock+0x7e6/0x1350 [ 424.385315][ T31] ? __mutex_lock+0x5bb/0x1350 [ 424.390153][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 424.395274][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.400290][ T31] ? __nla_parse+0x40/0x60 [ 424.404762][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 424.409688][ T31] ? unwind_get_return_address+0x4d/0x90 [ 424.415337][ T31] ? arch_stack_walk+0xfc/0x150 [ 424.420192][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 424.425621][ T31] ? lock_release+0x4b/0x3e0 [ 424.430196][ T31] ? bpf_lsm_capable+0x9/0x20 [ 424.434890][ T31] ? security_capable+0x7e/0x2e0 [ 424.439850][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 424.445323][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 424.450304][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 424.455414][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.460855][ T31] ? __netlink_lookup+0xbd/0x810 [ 424.465830][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.470579][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.475576][ T31] netlink_rcv_skb+0x208/0x470 [ 424.480345][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.485855][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.491131][ T31] netlink_unicast+0x82c/0x9e0 [ 424.495911][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 424.501175][ T31] ? netlink_sendmsg+0x642/0xb30 [ 424.506151][ T31] ? skb_put+0x11b/0x210 [ 424.510375][ T31] netlink_sendmsg+0x805/0xb30 [ 424.515142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.520415][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.525394][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.530657][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.535941][ T31] __sock_sendmsg+0x21c/0x270 [ 424.540599][ T31] __sys_sendto+0x3bd/0x520 [ 424.545150][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 424.550164][ T31] ? count_memcg_event_mm+0x21/0x260 [ 424.555452][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 424.560721][ T31] __x64_sys_sendto+0xde/0x100 [ 424.565569][ T31] do_syscall_64+0xfa/0x3b0 [ 424.570077][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.576458][ T31] ? clear_bhb_loop+0x60/0xb0 [ 424.581165][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.587532][ T31] RIP: 0033:0x7f40e3790a7c [ 424.591961][ T31] RSP: 002b:00007ffda3d7c740 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.600408][ T31] RAX: ffffffffffffffda RBX: 00007f40e44e4620 RCX: 00007f40e3790a7c [ 424.608445][ T31] RDX: 0000000000000028 RSI: 00007f40e44e4670 RDI: 0000000000000003 [ 424.616420][ T31] RBP: 0000000000000000 R08: 00007ffda3d7c794 R09: 000000000000000c [ 424.624506][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 424.632462][ T31] R13: 0000000000000000 R14: 00007f40e44e4670 R15: 0000000000000000 [ 424.640461][ T31] [ 424.643552][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 424.652568][ T31] INFO: task syz-executor:13007 blocked for more than 148 seconds. [ 424.660474][ T31] Not tainted syzkaller #0 [ 424.665472][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.674166][ T31] task:syz-executor state:D stack:26696 pid:13007 tgid:13007 ppid:1 task_flags:0x400140 flags:0x00004004 [ 424.686369][ T31] Call Trace: [ 424.689648][ T31] [ 424.692559][ T31] __schedule+0x1798/0x4cc0 [ 424.697099][ T31] ? stack_depot_save_flags+0x40/0x860 [ 424.702562][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 424.708412][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.713158][ T31] ? __pfx___schedule+0x10/0x10 [ 424.718032][ T31] ? schedule+0x91/0x360 [ 424.722274][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.727086][ T31] ? lock_release+0x4b/0x3e0 [ 424.731666][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 424.737559][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.743979][ T31] schedule+0x165/0x360 [ 424.748144][ T31] schedule_preempt_disabled+0x13/0x30 [ 424.753608][ T31] __mutex_lock+0x7e6/0x1350 [ 424.758183][ T31] ? __mutex_lock+0x5bb/0x1350 [ 424.762933][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 424.768092][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 424.773107][ T31] ? __nla_parse+0x40/0x60 [ 424.777547][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 424.782696][ T31] ? unwind_get_return_address+0x4d/0x90 [ 424.788393][ T31] ? arch_stack_walk+0xfc/0x150 [ 424.793228][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 424.798606][ T31] ? lock_release+0x4b/0x3e0 [ 424.803183][ T31] ? bpf_lsm_capable+0x9/0x20 [ 424.807917][ T31] ? security_capable+0x7e/0x2e0 [ 424.812842][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 424.818216][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 424.823140][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 424.828349][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.833813][ T31] ? __netlink_lookup+0xbd/0x810 [ 424.838746][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.843605][ T31] ? rcu_is_watching+0x15/0xb0 [ 424.848363][ T31] netlink_rcv_skb+0x208/0x470 [ 424.853109][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.858579][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.863956][ T31] netlink_unicast+0x82c/0x9e0 [ 424.868731][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 424.874056][ T31] ? netlink_sendmsg+0x642/0xb30 [ 424.878992][ T31] ? skb_put+0x11b/0x210 [ 424.883515][ T31] netlink_sendmsg+0x805/0xb30 [ 424.888287][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.893570][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.898487][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.903842][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.909172][ T31] __sock_sendmsg+0x21c/0x270 [ 424.913880][ T31] __sys_sendto+0x3bd/0x520 [ 424.918369][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 424.923375][ T31] ? count_memcg_event_mm+0x21/0x260 [ 424.928707][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 424.934002][ T31] __x64_sys_sendto+0xde/0x100 [ 424.938766][ T31] do_syscall_64+0xfa/0x3b0 [ 424.943249][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.949352][ T31] ? clear_bhb_loop+0x60/0xb0 [ 424.954030][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.959905][ T31] RIP: 0033:0x7f71c4d90a7c [ 424.964413][ T31] RSP: 002b:00007fff7b134500 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.972826][ T31] RAX: ffffffffffffffda RBX: 00007f71c5ae4620 RCX: 00007f71c4d90a7c [ 424.980807][ T31] RDX: 0000000000000028 RSI: 00007f71c5ae4670 RDI: 0000000000000003 [ 424.989080][ T31] RBP: 0000000000000000 R08: 00007fff7b134554 R09: 000000000000000c [ 424.997082][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 425.005137][ T31] R13: 0000000000000000 R14: 00007f71c5ae4670 R15: 0000000000000000 [ 425.013118][ T31] [ 425.016169][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 425.025349][ T31] INFO: task syz-executor:13009 blocked for more than 148 seconds. [ 425.033233][ T31] Not tainted syzkaller #0 [ 425.038177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.046904][ T31] task:syz-executor state:D stack:27048 pid:13009 tgid:13009 ppid:1 task_flags:0x400140 flags:0x00004004 [ 425.058832][ T31] Call Trace: [ 425.062094][ T31] [ 425.065083][ T31] __schedule+0x1798/0x4cc0 [ 425.069576][ T31] ? stack_depot_save_flags+0x40/0x860 [ 425.075038][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 425.080848][ T31] ? rcu_is_watching+0x15/0xb0 [ 425.085659][ T31] ? __pfx___schedule+0x10/0x10 [ 425.090733][ T31] ? schedule+0x91/0x360 [ 425.095023][ T31] ? rcu_is_watching+0x15/0xb0 [ 425.099789][ T31] ? lock_release+0x4b/0x3e0 [ 425.104447][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.110330][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.116674][ T31] schedule+0x165/0x360 [ 425.120819][ T31] schedule_preempt_disabled+0x13/0x30 [ 425.126369][ T31] __mutex_lock+0x7e6/0x1350 [ 425.130979][ T31] ? __mutex_lock+0x5bb/0x1350 [ 425.135895][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 425.141005][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 425.146202][ T31] ? __nla_parse+0x40/0x60 [ 425.150635][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 425.155616][ T31] ? unwind_get_return_address+0x4d/0x90 [ 425.161248][ T31] ? arch_stack_walk+0xfc/0x150 [ 425.166175][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 425.171542][ T31] ? lock_release+0x4b/0x3e0 [ 425.176162][ T31] ? bpf_lsm_capable+0x9/0x20 [ 425.180826][ T31] ? security_capable+0x7e/0x2e0 [ 425.185827][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 425.191410][ T31] rtnetlink_rcv_msg+0x7cc/0xb70 [ 425.196375][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 425.201476][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.206986][ T31] ? __netlink_lookup+0xbd/0x810 [ 425.211905][ T31] ? rcu_is_watching+0x15/0xb0 [ 425.216670][ T31] ? rcu_is_watching+0x15/0xb0 [ 425.221442][ T31] netlink_rcv_skb+0x208/0x470 [ 425.226354][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 425.231835][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.237162][ T31] netlink_unicast+0x82c/0x9e0 [ 425.241912][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 425.247239][ T31] ? netlink_sendmsg+0x642/0xb30 [ 425.252176][ T31] ? skb_put+0x11b/0x210 [ 425.256427][ T31] netlink_sendmsg+0x805/0xb30 [ 425.261175][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.266505][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.271422][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.276727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.282030][ T31] __sock_sendmsg+0x21c/0x270 [ 425.286743][ T31] __sys_sendto+0x3bd/0x520 [ 425.291230][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 425.296593][ T31] ? count_memcg_event_mm+0x21/0x260 [ 425.301891][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 425.308248][ T31] __x64_sys_sendto+0xde/0x100 [ 425.313009][ T31] do_syscall_64+0xfa/0x3b0 [ 425.317524][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.323659][ T31] ? clear_bhb_loop+0x60/0xb0 [ 425.328338][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.334250][ T31] RIP: 0033:0x7f7d4b590a7c [ 425.338641][ T31] RSP: 002b:00007fff2c882920 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 425.347105][ T31] RAX: ffffffffffffffda RBX: 00007f7d4c2e4620 RCX: 00007f7d4b590a7c [ 425.355098][ T31] RDX: 0000000000000028 RSI: 00007f7d4c2e4670 RDI: 0000000000000003 [ 425.363054][ T31] RBP: 0000000000000000 R08: 00007fff2c882974 R09: 000000000000000c [ 425.371070][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 425.379061][ T31] R13: 0000000000000000 R14: 00007f7d4c2e4670 R15: 0000000000000000 [ 425.387092][ T31] [ 425.390208][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 425.399524][ T31] INFO: lockdep is turned off. [ 425.404341][ T31] NMI backtrace for cpu 0 [ 425.404360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 425.404371][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.404377][ T31] Call Trace: [ 425.404381][ T31] [ 425.404386][ T31] dump_stack_lvl+0x189/0x250 [ 425.404402][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.404413][ T31] ? __pfx__printk+0x10/0x10 [ 425.404428][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 425.404440][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 425.404451][ T31] ? __pfx__printk+0x10/0x10 [ 425.404464][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.404478][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 425.404490][ T31] watchdog+0xf93/0xfe0 [ 425.404504][ T31] ? watchdog+0x1de/0xfe0 [ 425.404517][ T31] kthread+0x70e/0x8a0 [ 425.404529][ T31] ? __pfx_watchdog+0x10/0x10 [ 425.404540][ T31] ? __pfx_kthread+0x10/0x10 [ 425.404551][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.404563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.404575][ T31] ? __pfx_kthread+0x10/0x10 [ 425.404586][ T31] ret_from_fork+0x3f9/0x770 [ 425.404596][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 425.404606][ T31] ? __switch_to_asm+0x39/0x70 [ 425.404618][ T31] ? __switch_to_asm+0x33/0x70 [ 425.404628][ T31] ? __pfx_kthread+0x10/0x10 [ 425.404639][ T31] ret_from_fork_asm+0x1a/0x30 [ 425.404654][ T31] [ 425.404658][ T31] Sending NMI from CPU 0 to CPUs 1: [ 425.549326][ C1] NMI backtrace for cpu 1 [ 425.549342][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 425.549360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.549370][ C1] Workqueue: bat_events batadv_nc_worker [ 425.549394][ C1] RIP: 0010:batadv_nc_worker+0x222/0x610 [ 425.549414][ C1] Code: 89 c6 e8 f1 82 78 f6 85 db 74 15 e8 98 30 5f f6 84 c0 74 18 e8 9f 7e 78 f6 48 8b 5c 24 08 eb 65 e8 93 7e 78 f6 48 8b 5c 24 08 59 e8 37 72 32 00 89 c3 31 ff 89 c6 e8 bc 82 78 f6 85 db 74 15 [ 425.549428][ C1] RSP: 0018:ffffc90000b97a20 EFLAGS: 00000293 [ 425.549441][ C1] RAX: ffffffff8b472c9d RBX: ffff88803009c180 RCX: ffff8880212cbc00 [ 425.549454][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.549463][ C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: 0000000000000000 [ 425.549473][ C1] R10: dffffc0000000000 R11: ffffffff8b472a80 R12: dffffc0000000000 [ 425.549485][ C1] R13: ffffffff8b472b52 R14: ffff88802349cd80 R15: 000000000000000a [ 425.549497][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 425.549509][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.549520][ C1] CR2: 00007fcf12ae7d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 425.549535][ C1] Call Trace: [ 425.549541][ C1] [ 425.549550][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 425.549567][ C1] process_scheduled_works+0xae1/0x17b0 [ 425.549593][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.549615][ C1] worker_thread+0x8a0/0xda0 [ 425.549640][ C1] kthread+0x70e/0x8a0 [ 425.549659][ C1] ? __pfx_worker_thread+0x10/0x10 [ 425.549673][ C1] ? __pfx_kthread+0x10/0x10 [ 425.549691][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.549710][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.549728][ C1] ? __pfx_kthread+0x10/0x10 [ 425.549746][ C1] ret_from_fork+0x3f9/0x770 [ 425.549762][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 425.549785][ C1] ? __switch_to_asm+0x39/0x70 [ 425.549803][ C1] ? __switch_to_asm+0x33/0x70 [ 425.549820][ C1] ? __pfx_kthread+0x10/0x10 [ 425.549838][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.549863][ C1] [ 425.550354][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 425.768453][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 425.777548][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.787582][ T31] Call Trace: [ 425.790845][ T31] [ 425.793761][ T31] dump_stack_lvl+0x99/0x250 [ 425.798339][ T31] ? __asan_memcpy+0x40/0x70 [ 425.802917][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.808100][ T31] ? __pfx__printk+0x10/0x10 [ 425.812680][ T31] vpanic+0x281/0x750 [ 425.816642][ T31] ? __pfx_vpanic+0x10/0x10 [ 425.821127][ T31] ? preempt_schedule+0xae/0xc0 [ 425.825963][ T31] ? preempt_schedule_common+0x83/0xd0 [ 425.831409][ T31] panic+0xb9/0xc0 [ 425.835113][ T31] ? __pfx_panic+0x10/0x10 [ 425.839513][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 425.844874][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 425.851011][ T31] watchdog+0xfd2/0xfe0 [ 425.855156][ T31] ? watchdog+0x1de/0xfe0 [ 425.859472][ T31] kthread+0x70e/0x8a0 [ 425.863528][ T31] ? __pfx_watchdog+0x10/0x10 [ 425.868186][ T31] ? __pfx_kthread+0x10/0x10 [ 425.872758][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.877941][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.883122][ T31] ? __pfx_kthread+0x10/0x10 [ 425.887701][ T31] ret_from_fork+0x3f9/0x770 [ 425.892273][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 425.897366][ T31] ? __switch_to_asm+0x39/0x70 [ 425.902112][ T31] ? __switch_to_asm+0x33/0x70 [ 425.906859][ T31] ? __pfx_kthread+0x10/0x10 [ 425.911432][ T31] ret_from_fork_asm+0x1a/0x30 [ 425.916190][ T31] [ 425.919434][ T31] Kernel Offset: disabled [ 425.923739][ T31] Rebooting in 86400 seconds..