last executing test programs: 17.842460156s ago: executing program 2 (id=2849): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000140)=""/4154, 0x103a}], 0x3}, 0x40000000) 17.743658631s ago: executing program 2 (id=2851): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="4da3a81a49108260cb", 0x0, 0x200, 0xffffffffffffffff, 0x4}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x100000000, 0x7, 0x94}) r4 = openat$cgroup_ro(r0, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x15) read$alg(r3, &(0x7f00000000c0)=""/18, 0x12) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x20000, 0x0, 0x0, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRES32=r8, @ANYBLOB="010020bd70100600000000000000080009000200000008000bfe0aef3a62ed9b7f577a6354e207abe7b653ff037988150366c28d7e7f31ccc635f4046cc14380bf73e59e5b1722771e6575d996d9bd3cc1e7262af01f8d577c20dbc310d20f0d895e5608b045be38a94b869b72"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYRES8=r3, @ANYRES16=r10, @ANYRES8=r9, @ANYRESOCT=r1, @ANYBLOB="18fdc37a27807a7146669277db139e1fc9e33a474bc9a82fe6c5dbd65c957c713abc8670ebfcbf37beb94ec0a34f013cb237cb5659c746baa87ef8cb763621d2b4401f43fdf6cbbda30335489c1178d62746a6febc70a6ee18ebb2f00fddf3cbd63f77286c6cd0828cb3261f23308a4ad62062c2ada99ddc1d452e1d486c7cae7bc5fd87f0776589ca61c79cd6ecffc34604acb7", @ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r11, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000687404d844827a9f3b6a3b8607aebaf1494f260edecb5c809d98f697fe1708b58ebf60d8f0e009db947247194b3036d2dae61ffa20195ea2575b16f643481a618a01384f18feecc2e702f595f44147c27a0b3ced2f7617131873da16a01de25651630817915f3bec9d0ef0a3badf1886fb714514516372cc3f7a13c955b55e3f1328d198eb28dfd8fa2652b2901d9d8ba79120b7a985cd9378a5ca", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250500000005002f000000000005002d0001000000050038000100000005002a0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x400c005) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17.582222901s ago: executing program 2 (id=2854): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x3, 0xb6bc, 0x5b}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x24044884) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c010}, 0x2000880) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7bc6}}}, 0x32) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 17.470686312s ago: executing program 1 (id=2857): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x18, 0x0, 0x800, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x2040400) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000003000000000000000000000d0a00000000000000010000060400000001000000040000000061006c"], &(0x7f0000000f40)=""/4088, 0x3b, 0xff8, 0x8}, 0x28) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="460080000000125800"/20, @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010062726964676500001c00028005000700060000000500260000000000050029000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 17.171641953s ago: executing program 3 (id=2861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x6}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180f000009000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000400)=""/153, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f0000002b40)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000780)="52e1cadc3f6852ebbf7ca7f736146193f94f12777f23981dfce6decf1e6323608b6de1c76157ebad31eff7ed12e17b03f760d3cc8310cd859167b77fc3b38d19d2dd7fbd8bb88d10e1975f8fb4bf88", 0x4f}], 0x2, 0x0, 0x0, 0x4000094}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040848}}], 0x2, 0x24044002) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r6, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) syz_emit_ethernet(0xd6, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f5d8ff00a03c00fe800000000000ffff000000000000aaff0200000000000000000000000000010003000000000000c910fc"], 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a000100800000000000000081808079"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x848) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async, rerun: 64) r10 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 17.101146094s ago: executing program 0 (id=2862): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = epoll_create(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000380000008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x30000000}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 16.990655634s ago: executing program 1 (id=2863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xee9c}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) unshare(0x26020480) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x2, 0x0) (async) unshare(0x2c020400) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x7, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x8b, 0x4, 0x4d6, 0x7ffff7ffffffffff}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, 0x0}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="030013a52a", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf251000000008003a000500000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000140)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r10, 0x891c, 0x0) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000000)={r9, 0x4000, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) 16.916723086s ago: executing program 0 (id=2864): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38040400", @ANYRES16=r2, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x430402, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) 16.914296532s ago: executing program 3 (id=2865): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x8010, r0, 0x45510000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da6", 0x7}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf949114e6dfe6ee2f169a", 0x29}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x25e6, @local, 0xfffffffe}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="99894b5bce6b61b54260e0efc04d9019e9c22a8d41634520ab46bab19a7dddc10e2741d04b", 0x25}], 0x1}}], 0x2, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000019880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2604082c) bind$can_raw(r0, &(0x7f0000000000), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20044002) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x1}, 0x8, 0x2, 0x0, 0x0, "f96aa3621edfc273"}, 0x10}, 0x1, 0x0, 0x0, 0x20044004}, 0x4004080) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 16.794955299s ago: executing program 1 (id=2866): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3e16851670be6409}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xe8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8001000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084) 16.657401965s ago: executing program 1 (id=2868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000340)={'erspan0\x00'}) 16.598375886s ago: executing program 0 (id=2870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) close(r2) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedcffff, 0x1000, 0xffffffff, 0x1}, 0x20) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, r4, 0xe9a82000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x200}]}, 0x18}}, 0x0) 16.540406276s ago: executing program 3 (id=2871): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001a00010000400000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000007000000000000000000000014000100000000000000c7"], 0x44}}, 0x4000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x24, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x7}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r10, 0x4c, 0x1}, &(0x7f0000000440)=0xc) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000000c0)={0x7, 0x1ff, 0x7, 0xd, 0x519}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r10, 0x12000}, &(0x7f0000000080)=0x8) 16.494841198s ago: executing program 4 (id=2872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffd, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20004044, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xfffffffc}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 16.374738435s ago: executing program 0 (id=2873): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.3163829s ago: executing program 1 (id=2874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3789b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a0500200f314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263e44f59fae487c62c98a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae01bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449ac59110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc030000009443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a36d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd58023fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b152a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e222dbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c4d2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff830000"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$isdn_base(0x22, 0x3, 0x0) listen(r1, 0xa) 16.269347805s ago: executing program 3 (id=2875): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xb, 0xf}, {0x9, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) r3 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYRES8=0x0], 0xfffffffffffffd26) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) connect$pppl2tp(r0, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x210, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xf1, 0x45, "93aed6eb94ddbc879793eb70fe9ffc38fca6e3bf0038eac167f9e8bca420fae78f68e81766774015d4b504b8efa4ef36d824324a615004b1918c51e32bca59d169b36a6b71df3b9ee41d46d2a90d4694cd599806c7a91a1eceffe93b61e2f4659ad00f9632636540d4d59be4fe0998c6ed41f2ef34d8a423c9993d6b360b5cbef4a1b22d1b777fe1847642b13232996cc2156dc27bcd0c7e2a45fad61884cec7aeb3eba9a5e7a4b5da39b652ac14d13a75afa14936f4d15deb6ffaf2c6f55792b2ca7a21be45af53dcf998a11282cb3dc82621bb765dfd2b4f475ccd56da0c2e5521184807d054fafa57dda467"}, @NL80211_ATTR_TESTDATA={0x88, 0x45, "38aabee935e6187f4793cccbac69b25d1276562246d404ede0f9622dc8e25e702d721b80204d09e4ea2fb78f468e148f467ca4b2a6dc884698b2e36979735579620c754943c9413a6b181752295dab2c2a92b5842db8c4261decf1bad88e4b867df65e29e77db9242ab1dc44ee3a35fe40af9eddf212ed5164dba2c8283387f48fff4751"}, @NL80211_ATTR_TESTDATA={0x14, 0x45, "4145539c38c0a10634f088e652d4888c"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "6ecba58a5589b4d7e40fbfeb5783b40989ba7743f7e48f9c2c"}, @NL80211_ATTR_TESTDATA={0x49, 0x45, "23cb320f8ae49d00e199a049298da16f3226fd749745e8269634cfd1f2608dcb6a6f29a4fe1738a5580273e45df94aa689a6da13ed5f4ba04ff39c45689eefbe215bdc8a92"}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044004) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000050601080000000000000000030000090900020073797a3100000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) writev(r4, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0xfeb7}, {&(0x7f0000000080)="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", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x9) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000001200)={0x6, &(0x7f00000011c0)=[{0x0, 0x6, 0x1, 0x7}, {0x2b4, 0x8, 0x4, 0x1}, {0x7, 0x4, 0x6, 0x4}, {0x8, 0x5, 0x28, 0x1000}, {0x9, 0xf, 0x4, 0x7fff}, {0x8, 0x2, 0xec, 0x3}]}, 0x10) 16.198678936s ago: executing program 0 (id=2876): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd27, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}}, 0xc080) 16.19820485s ago: executing program 4 (id=2877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "7f"}]}], {0x14}}, 0x74}}, 0x0) 16.049093905s ago: executing program 1 (id=2878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) 16.011902823s ago: executing program 4 (id=2879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x115, r1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640201b2000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x4000010) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r6, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x4e20, 0x0, 0xfffe, 0x200, 0x2}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) sendto$inet6(r7, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) 15.96275509s ago: executing program 3 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x72a, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040004) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0xa7, 0x0, 0x0, @fd=r0}]}, 0x28}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000f600000018121000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00}, 0x94) 15.88341526s ago: executing program 0 (id=2881): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000080)=@phonet, &(0x7f0000000140)=0x80) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000fc0)=@rose={'rose', 0x0}, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000fc0)=@rose={'rose', 0x0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10001, 0x5, 0x4}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x7ffffffd, 0x25dfdbfb, {0xa}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}}, 0x20000050) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='X'], 0xc8}}], 0x2, 0x20008004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000f80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000f80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r7, 0x1, 0x6, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x77e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8094) 15.831131228s ago: executing program 2 (id=2882): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockname$unix(r6, 0x0, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000640)={0x5, 0x7, 0x1, 0x6, 0x1, [0x1, 0x1, 0x0, 0x7fff]}) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x30, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) write$tun(r9, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x600, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d000100000000000000000008000c00", @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x27, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000090000000000000001000100180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b7080000ff0700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000011a90200fd070000bf91000000002823e5060000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xe3, &(0x7f0000000200)=""/227, 0x41100, 0x21, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xe, 0x3e, 0x28addbae}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r6, r7, r9, r10, r7, r11], &(0x7f0000000680)=[{0x5, 0x3, 0x6, 0x6}], 0x10, 0x3}, 0x94) 15.786827104s ago: executing program 4 (id=2883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000065c0)=ANY=[@ANYBLOB="580000000102010100000000860000000a00000206000740000400003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c0002"], 0x58}}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 15.688937992s ago: executing program 3 (id=2885): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xea, &(0x7f0000000040)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x2, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4b}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x40840) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f0000000200)={0x1a, 0x33a, 0x8, 0xb, 0x2, 0x6, @broadcast}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xc, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xa7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f0000000300)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000340)=""/197, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xb, 0x80, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r5, r6, r7], &(0x7f00000006c0)=[{0x0, 0x4, 0x1, 0x6}, {0x2, 0x5, 0x4, 0x6}, {0x1, 0x1, 0xc, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x1, 0x1, 0x2, 0xa}, {0x3, 0x5, 0x1, 0x4}, {0x1, 0x4, 0x2, 0x8}, {0x2, 0x3, 0x4, 0x3}], 0x10, 0x9}, 0x94) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000000800)={'IDLETIMER\x00'}, &(0x7f0000000840)=0x1e) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000880)=0x80000001, &(0x7f00000008c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000900)={'wlan1\x00', {0x2, 0x4e24, @multicast2}}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000940)={r3, 0x5, 0xffffffffffffffff, 0x9}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r6, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000b00)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000b40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x10, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffc01}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000a40)='GPL\x00', 0xc4, 0x6e, &(0x7f0000000a80)=""/110, 0x40f00, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x3, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c00)=[{0x0, 0x2, 0x6, 0x5}, {0x3, 0x1, 0xa, 0x8}, {0x3, 0x5, 0x1, 0x5}, {0x0, 0x3, 0x10, 0xa}, {0x2, 0x5, 0xa, 0x2}, {0x1, 0x4, 0xc, 0x6}], 0x10, 0x7ff}, 0x94) write$ppp(r9, &(0x7f0000000d40)="8a832b3b2cecb915a6e177ceef8a7ad934b742e48dea6cfc2f014a6f9f986afe0eccd411cc0e0f42347ba2c2b0614ac0026ccdb7f61679394777134dc8f88448875ba8be4d4ddc3726f5317e78cee37ebfb327f329a9fef0a481025f931694de7d576cbe57a81f247b0f96856dd9a9d539a38c745865da7fa73dde03a07492b9c6c4e2dfae6bd52404a399453c2fcf78a338525101842cad26607dffa96803022cf44c52c2e36dee8e2a46c5a769c76ed6d6e19943c35157c439321ac24a4e37fdf231104058e3650bd27dbb487610affb0450cb896cdea9d5da68291445288a81e0741db0", 0xe5) accept$packet(r9, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e80)=0x14) getsockname$netrom(r9, &(0x7f0000000ec0)={{0x3, @rose}, [@netrom, @bcast, @netrom, @remote, @rose, @rose, @remote, @bcast]}, &(0x7f0000000f40)=0x48) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, r12, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x42}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x90}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x12}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004844}, 0x20048000) r14 = accept$netrom(r9, &(0x7f0000001140)={{}, [@rose, @netrom, @rose, @rose, @netrom, @null, @netrom, @null]}, &(0x7f00000011c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r14, 0x890b, &(0x7f0000001200)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @null, 0xeb0, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 15.666062351s ago: executing program 2 (id=2886): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r1, r1, 0x22, 0x201c, 0x4, @value=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r1, r1, 0x22, 0x201c, 0x4, @value=r1}, 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) 15.594761233s ago: executing program 4 (id=2887): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021001"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.502017501s ago: executing program 4 (id=2888): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xf10}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) (async) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) (async, rerun: 64) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) (async, rerun: 64) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0) (async, rerun: 64) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000040001200000024000000080000008500aa436fb620000e6112573ceb53e7821a0214be4e61c28fe0a896a61e0e9a0299dcba8ea9f1398ea5a0a143432dd207eae0c0975a057467c7f26b71fb14f5e7b72eb0d7ea48b587127d3d3d43edcdd02fb410076506dc660d43246d30759c0000000000000200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'hsr0\x00', @multicast}) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x76) (rerun: 64) 15.49798619s ago: executing program 2 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x82, 0x0, 0x0, {[@eol, @generic={0x0, 0x2}, @generic={0x8, 0xd, "9294f8a639e2a611b3ea7a"}, @mptcp=@mp_join={0x1e, 0x3}, @eol, @generic={0x22, 0x8, "730b37ce18aa"}, @mptcp=@ack={0x1e, 0xd, 0xffa, 0x4, "06ba2dd15e056ad187"}]}}}}}}}}, 0x0) (async) connect$netlink(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffff9}, 0x1c) (async) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001180)=""/4096, &(0x7f00000000c0)=0x1000) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a410400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) 176.387492ms ago: executing program 32 (id=2881): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000080)=@phonet, &(0x7f0000000140)=0x80) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000fc0)=@rose={'rose', 0x0}, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000fc0)=@rose={'rose', 0x0}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10001, 0x5, 0x4}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x7ffffffd, 0x25dfdbfb, {0xa}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}}, 0x20000050) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='X'], 0xc8}}], 0x2, 0x20008004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000f80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000f80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r7, 0x1, 0x6, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x77e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8094) 130.609769ms ago: executing program 33 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x2, 0x82, 0x0, 0x0, {[@eol, @generic={0x0, 0x2}, @generic={0x8, 0xd, "9294f8a639e2a611b3ea7a"}, @mptcp=@mp_join={0x1e, 0x3}, @eol, @generic={0x22, 0x8, "730b37ce18aa"}, @mptcp=@ack={0x1e, 0xd, 0xffa, 0x4, "06ba2dd15e056ad187"}]}}}}}}}}, 0x0) (async) connect$netlink(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffff9}, 0x1c) (async) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001180)=""/4096, &(0x7f00000000c0)=0x1000) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a410400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) 85.203082ms ago: executing program 34 (id=2885): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xea, &(0x7f0000000040)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x2, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4b}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x40840) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f0000000200)={0x1a, 0x33a, 0x8, 0xb, 0x2, 0x6, @broadcast}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xc, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xa7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f0000000300)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000340)=""/197, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xb, 0x80, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r5, r6, r7], &(0x7f00000006c0)=[{0x0, 0x4, 0x1, 0x6}, {0x2, 0x5, 0x4, 0x6}, {0x1, 0x1, 0xc, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x1, 0x1, 0x2, 0xa}, {0x3, 0x5, 0x1, 0x4}, {0x1, 0x4, 0x2, 0x8}, {0x2, 0x3, 0x4, 0x3}], 0x10, 0x9}, 0x94) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000000800)={'IDLETIMER\x00'}, &(0x7f0000000840)=0x1e) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000880)=0x80000001, &(0x7f00000008c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000900)={'wlan1\x00', {0x2, 0x4e24, @multicast2}}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000940)={r3, 0x5, 0xffffffffffffffff, 0x9}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r6, 0xffffffffffffffff}, 0x4) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000b00)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000b40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x10, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffc01}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000a40)='GPL\x00', 0xc4, 0x6e, &(0x7f0000000a80)=""/110, 0x40f00, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x3, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c00)=[{0x0, 0x2, 0x6, 0x5}, {0x3, 0x1, 0xa, 0x8}, {0x3, 0x5, 0x1, 0x5}, {0x0, 0x3, 0x10, 0xa}, {0x2, 0x5, 0xa, 0x2}, {0x1, 0x4, 0xc, 0x6}], 0x10, 0x7ff}, 0x94) write$ppp(r9, &(0x7f0000000d40)="8a832b3b2cecb915a6e177ceef8a7ad934b742e48dea6cfc2f014a6f9f986afe0eccd411cc0e0f42347ba2c2b0614ac0026ccdb7f61679394777134dc8f88448875ba8be4d4ddc3726f5317e78cee37ebfb327f329a9fef0a481025f931694de7d576cbe57a81f247b0f96856dd9a9d539a38c745865da7fa73dde03a07492b9c6c4e2dfae6bd52404a399453c2fcf78a338525101842cad26607dffa96803022cf44c52c2e36dee8e2a46c5a769c76ed6d6e19943c35157c439321ac24a4e37fdf231104058e3650bd27dbb487610affb0450cb896cdea9d5da68291445288a81e0741db0", 0xe5) accept$packet(r9, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e80)=0x14) getsockname$netrom(r9, &(0x7f0000000ec0)={{0x3, @rose}, [@netrom, @bcast, @netrom, @remote, @rose, @rose, @remote, @bcast]}, &(0x7f0000000f40)=0x48) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001000)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, r12, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x42}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x90}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x12}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004844}, 0x20048000) r14 = accept$netrom(r9, &(0x7f0000001140)={{}, [@rose, @netrom, @rose, @rose, @netrom, @null, @netrom, @null]}, &(0x7f00000011c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r14, 0x890b, &(0x7f0000001200)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @null, 0xeb0, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001280)={'batadv_slave_0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 35 (id=2888): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xf10}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) (async) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) (async, rerun: 64) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) (async, rerun: 64) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0) (async, rerun: 64) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000040001200000024000000080000008500aa436fb620000e6112573ceb53e7821a0214be4e61c28fe0a896a61e0e9a0299dcba8ea9f1398ea5a0a143432dd207eae0c0975a057467c7f26b71fb14f5e7b72eb0d7ea48b587127d3d3d43edcdd02fb410076506dc660d43246d30759c0000000000000200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'hsr0\x00', @multicast}) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x76) (rerun: 64) kernel console output (not intermixed with test programs): 961] pimreg: entered allmulticast mode [ 243.740562][T11968] netlink: 'syz.4.1563': attribute type 20 has an invalid length. [ 243.750956][T11968] netlink: 'syz.4.1563': attribute type 21 has an invalid length. [ 243.813018][T11967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.999544][T11976] netlink: 'syz.4.1566': attribute type 5 has an invalid length. [ 244.141009][T11967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.320541][T11967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.442339][T11995] netlink: 'syz.2.1571': attribute type 1 has an invalid length. [ 244.495475][T11967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.529383][T12004] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 244.603713][T11995] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.687497][T12002] vlan2: entered promiscuous mode [ 244.692753][T12002] bond8: entered promiscuous mode [ 244.698146][T12002] vlan2: entered allmulticast mode [ 244.703381][T12002] bond8: entered allmulticast mode [ 244.761575][T12005] bond8: (slave gretap1): making interface the new active one [ 244.786126][T12005] gretap1: entered promiscuous mode [ 244.798105][T12005] gretap1: entered allmulticast mode [ 244.808984][T12005] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 244.845612][T12011] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 245.001941][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.030577][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.088901][T12016] openvswitch: netlink: Flow key attr not present in new flow. [ 245.127121][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.212048][ T7163] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.907887][T12046] __nla_validate_parse: 10 callbacks suppressed [ 245.907910][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 246.281142][T12043] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.485430][T12052] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1582'. [ 246.500877][T12052] netlink: 245 bytes leftover after parsing attributes in process `syz.2.1582'. [ 246.641488][T12043] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.688970][T12062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1584'. [ 246.846105][T12043] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.061647][T12043] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.110074][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 247.203798][T12086] lo speed is unknown, defaulting to 1000 [ 247.286389][T12096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 247.295617][T12096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 247.320139][T12101] gretap2: entered promiscuous mode [ 247.515293][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.530256][T12108] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1596'. [ 247.578958][T12100] lo speed is unknown, defaulting to 1000 [ 247.614024][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.633728][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.717004][T12110] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 247.724015][T12110] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 247.738580][T12110] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 247.771274][T12088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 247.894119][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.916344][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 249.372669][T12166] tipc: Enabling of bearer rejected, already enabled [ 249.384025][T12166] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 249.393578][T12166] syzkaller1: entered promiscuous mode [ 249.403587][T12166] syzkaller1: entered allmulticast mode [ 249.596650][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.692018][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.824216][T12191] pim6reg: left allmulticast mode [ 250.412960][T12210] lo speed is unknown, defaulting to 1000 [ 250.786597][T12221] sctp: [Deprecated]: syz.3.1627 (pid 12221) Use of int in maxseg socket option. [ 250.786597][T12221] Use struct sctp_assoc_value instead [ 251.077403][T12231] __nla_validate_parse: 6 callbacks suppressed [ 251.077427][T12231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1629'. [ 251.319262][T12239] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 251.447719][T12242] erspan0: entered promiscuous mode [ 251.489046][T12242] erspan0: left promiscuous mode [ 251.940236][T12264] tipc: Enabling of bearer rejected, already enabled [ 252.592642][T12296] bridge_slave_1: entered promiscuous mode [ 252.621306][T12296] bridge_slave_1: left promiscuous mode [ 252.823614][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1647'. [ 252.940545][T12310] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 252.950780][T12309] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1649'. [ 252.973609][T12310] team0: Port device dummy0 added [ 253.271002][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 253.454075][T12332] pim6reg: entered allmulticast mode [ 253.480416][T12332] pim6reg: left allmulticast mode [ 253.528595][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 253.692829][T12350] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1660'. [ 253.791595][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 253.833856][T12357] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1664'. [ 254.004617][T12373] netlink: 'syz.0.1668': attribute type 12 has an invalid length. [ 254.023050][T12373] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1668'. [ 254.180294][T12376] !: renamed from dummy0 [ 254.648127][T12396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 255.041018][T12414] lo speed is unknown, defaulting to 1000 [ 255.076477][T12416] netlink: 'syz.0.1678': attribute type 2 has an invalid length. [ 255.118019][T12419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.621728][T12436] netlink: 'syz.2.1685': attribute type 2 has an invalid length. [ 255.814686][T12444] pimreg: entered allmulticast mode [ 255.857532][T12444] pimreg: left allmulticast mode [ 255.981503][T12454] netlink: 'syz.3.1689': attribute type 13 has an invalid length. [ 255.989551][T12454] netlink: 'syz.3.1689': attribute type 17 has an invalid length. [ 256.003282][T12454] lo: left allmulticast mode [ 256.023991][T12454] tunl0: left allmulticast mode [ 256.060030][T12454] gre0: left allmulticast mode [ 256.090913][T12454] gretap0: left allmulticast mode [ 256.147416][T12454] erspan0: left allmulticast mode [ 256.188610][T12454] ip_vti0: left allmulticast mode [ 256.213576][T12454] ip6_vti0: left allmulticast mode [ 256.257296][T12454] sit0: left allmulticast mode [ 256.278550][T12454] ip6tnl0: left allmulticast mode [ 256.312604][T12454] ip6gre0: left allmulticast mode [ 256.330965][T12454] syz_tun: left allmulticast mode [ 256.339170][T12473] __nla_validate_parse: 3 callbacks suppressed [ 256.339221][T12473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1695'. [ 256.356881][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1695'. [ 256.375976][T12454] ip6gretap0: left allmulticast mode [ 256.393594][T12454] bridge0: left allmulticast mode [ 256.402176][T12454] vcan0: left allmulticast mode [ 256.411160][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.421969][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.438196][T12454] nlmon0: left allmulticast mode [ 256.440779][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 256.455132][T12454] caif0: left allmulticast mode [ 256.460297][T12454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.584814][ T70] bridge0: port 1(team0) entered blocking state [ 256.592067][ T70] bridge0: port 1(team0) entered forwarding state [ 256.650320][T12474] delete_channel: no stack [ 256.897226][T12495] lo speed is unknown, defaulting to 1000 [ 256.948401][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 257.085059][T12509] IPv6: Can't replace route, no match found [ 257.788722][T12525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.803037][T12525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.413324][T12551] netlink: 'syz.0.1711': attribute type 48 has an invalid length. [ 259.762692][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 150 seconds [ 259.774214][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 150 seconds [ 259.787208][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 150 seconds [ 259.811952][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 150 seconds [ 259.966232][T12543] bridge0: entered promiscuous mode [ 259.972394][T12543] bridge0: entered allmulticast mode [ 260.149035][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 260.223485][T12558] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 260.276879][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 260.394921][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 260.443815][T12568] batadv_slave_1: entered promiscuous mode [ 260.471512][T12567] batadv_slave_1: left promiscuous mode [ 260.624368][T12583] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1720'. [ 260.685074][T12585] lo speed is unknown, defaulting to 1000 [ 260.706178][T12589] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 260.893316][T12594] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 260.981112][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1724'. [ 261.015461][T12600] veth7: entered promiscuous mode [ 261.040521][T12600] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 261.081111][T12597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1723'. [ 261.619504][T12625] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 261.810911][T12627] IPVS: Scheduler module ip_vs_ not found [ 261.910050][T12631] netlink: 'syz.3.1731': attribute type 1 has an invalid length. [ 261.968946][T12631] pim6reg: entered allmulticast mode [ 261.978192][T12631] pim6reg: left allmulticast mode [ 262.051766][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 262.130264][T12642] : entered promiscuous mode [ 262.139456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.158443][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.510191][T12663] netlink: 'syz.4.1743': attribute type 9 has an invalid length. [ 262.529342][T12663] netlink: 'syz.4.1743': attribute type 7 has an invalid length. [ 262.538708][T12663] netlink: 'syz.4.1743': attribute type 8 has an invalid length. [ 262.581677][T12663] netlink: 'syz.4.1743': attribute type 21 has an invalid length. [ 262.740175][T12646] netlink: 'syz.1.1734': attribute type 16 has an invalid length. [ 262.748412][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1734'. [ 262.929317][T12683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1749'. [ 262.960019][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1750'. [ 262.975967][T12685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1750'. [ 263.016833][T12685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 263.076388][T12685] gretap2: entered promiscuous mode [ 263.081857][T12685] gretap2: entered allmulticast mode [ 263.298943][T12693] lo speed is unknown, defaulting to 1000 [ 263.631914][T12706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1754'. [ 263.929173][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 264.174028][T12728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'. [ 264.211337][T12733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1759'. [ 264.220096][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 264.902028][T12765] macsec2: entered promiscuous mode [ 265.763375][T12801] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 265.908345][T12801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.934969][T12809] bond1: (slave gretap1): making interface the new active one [ 265.946986][T12809] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 266.063549][T12819] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 266.241063][T12821] tipc: Enabling of bearer rejected, already enabled [ 266.252553][T12821] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 266.335120][T12829] netlink: 'syz.3.1784': attribute type 12 has an invalid length. [ 266.582604][T12838] netlink: 'syz.3.1787': attribute type 10 has an invalid length. [ 266.638674][T12841] sctp: [Deprecated]: syz.1.1788 (pid 12841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.638674][T12841] Use struct sctp_sack_info instead [ 266.668142][ T7158] bridge0: port 1(team0) entered disabled state [ 266.931582][T12851] syzkaller0: left promiscuous mode [ 266.937259][T12851] syzkaller0: left allmulticast mode [ 267.126749][T12853] __nla_validate_parse: 3 callbacks suppressed [ 267.126770][T12853] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1792'. [ 267.253687][T12856] netlink: zone id is out of range [ 267.345003][T12856] netlink: zone id is out of range [ 267.371515][T12856] netlink: zone id is out of range [ 267.387031][T12856] netlink: zone id is out of range [ 267.399338][T12856] netlink: zone id is out of range [ 267.411036][T12856] netlink: zone id is out of range [ 267.416429][T12856] netlink: zone id is out of range [ 267.422205][T12856] netlink: zone id is out of range [ 267.429445][T12856] netlink: zone id is out of range [ 267.442586][T12856] netlink: zone id is out of range [ 268.460150][T12888] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 268.593339][T12891] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1803'. [ 268.703448][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 268.783651][T12893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.853695][T12896] lo speed is unknown, defaulting to 1000 [ 269.644453][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 269.666033][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 269.679209][T12922] erspan0: left allmulticast mode [ 269.878602][T12922] veth0_to_bond: left allmulticast mode [ 270.032138][T12922] bond2: left promiscuous mode [ 270.038915][T12922] veth3: left promiscuous mode [ 270.047788][T12922] erspan0: left promiscuous mode [ 270.057841][T12922] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 270.065311][T12922] macsec1: left promiscuous mode [ 270.070896][T12922] macsec1: left allmulticast mode [ 270.086653][T12922] geneve2: left promiscuous mode [ 270.091992][T12922] geneve2: left allmulticast mode [ 270.107511][ T70] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.156866][ T70] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.186606][ T70] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.195085][ T70] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.309704][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 270.317092][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 270.336228][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 270.384930][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 270.476853][T12954] bridge8: entered promiscuous mode [ 270.482537][T12954] macsec2: entered promiscuous mode [ 270.516126][T12954] macsec2: entered allmulticast mode [ 270.522482][T12954] bridge8: entered allmulticast mode [ 270.533393][T12954] bridge8: port 1(macsec2) entered blocking state [ 270.556419][T12954] bridge8: port 1(macsec2) entered disabled state [ 270.633138][T12954] bridge8: left allmulticast mode [ 270.646402][T12954] bridge8: left promiscuous mode [ 271.027663][T12986] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 271.124887][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 271.158052][T12986] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.138049][T13024] netlink: 'syz.1.1842': attribute type 4 has an invalid length. [ 272.156216][T13024] __nla_validate_parse: 46 callbacks suppressed [ 272.156239][T13024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1842'. [ 272.571125][T13053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.578678][T13053] IPv6: NLM_F_CREATE should be set when creating new route [ 272.609926][T13051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1849'. [ 272.663922][T13061] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 272.958663][T13075] lo speed is unknown, defaulting to 1000 [ 272.991122][T13078] netlink: 'syz.1.1856': attribute type 13 has an invalid length. [ 273.077188][T13078] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.107256][T13078] net_ratelimit: 93 callbacks suppressed [ 273.107271][T13078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.130679][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.276734][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.399687][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 273.419714][T13095] openvswitch: netlink: nsh attribute has 124 unknown bytes. [ 273.429124][T13095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.539832][T13102] netlink: 'syz.4.1863': attribute type 1 has an invalid length. [ 273.754345][T13111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1864'. [ 273.777416][T13102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.809779][T13104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.820962][T13112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1864'. [ 273.832310][T13104] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 273.846330][T13104] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 273.916370][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.322973][ T7158] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.343133][ T7158] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.423912][T13133] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 274.604105][T13142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1872'. [ 274.624320][T13145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.655459][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1872'. [ 274.683100][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1872'. [ 274.692756][T13148] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 274.732025][T13142] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 274.863061][T13152] netlink: 'syz.4.1875': attribute type 1 has an invalid length. [ 275.276741][T13186] syzkaller1: entered promiscuous mode [ 275.294518][T13186] syzkaller1: entered allmulticast mode [ 275.348254][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 275.357949][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.385195][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 275.431975][T13205] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 275.456658][T13205] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 275.464278][T13205] bond0: (slave wlan1): refused to change device type [ 275.933309][T13240] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 276.202936][T13254] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 276.213110][T13254] tipc: Enabled bearer , priority 10 [ 276.304061][T13256] netlink: 'syz.0.1897': attribute type 83 has an invalid length. [ 277.249229][T13312] __nla_validate_parse: 21 callbacks suppressed [ 277.249251][T13312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1909'. [ 277.307841][T13312] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1909'. [ 278.089469][T13346] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1917'. [ 278.236002][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.253297][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1922'. [ 278.370713][T13356] nbd: socks must be embedded in a SOCK_ITEM attr [ 278.480684][T13365] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1923'. [ 278.519803][T13365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1923'. [ 278.532681][T13365] pimreg: left allmulticast mode [ 279.008424][T13385] netlink: 'syz.2.1928': attribute type 4 has an invalid length. [ 279.441109][T13405] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1935'. [ 279.465199][T13405] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1935'. [ 279.562490][T13412] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 279.585321][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 279.693304][T13412] bridge0: entered promiscuous mode [ 279.709839][T13412] bridge0: entered allmulticast mode [ 279.730363][T13412] team0: Port device bridge0 added [ 279.835409][T13418] lo speed is unknown, defaulting to 1000 [ 280.237503][T13441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1945'. [ 280.711715][T13461] tc_dump_action: action bad kind [ 280.763286][T13463] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 281.386038][T13473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.393344][T13473] IPv6: NLM_F_CREATE should be set when creating new route [ 281.400747][T13473] IPv6: NLM_F_CREATE should be set when creating new route [ 281.482112][T13473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.631136][T13476] tap0: tun_chr_ioctl cmd 1074025678 [ 281.646424][T13476] tap0: group set to 0 [ 282.210421][T13506] tipc: Enabling of bearer rejected, already enabled [ 282.279580][T13506] syzkaller0: entered promiscuous mode [ 282.369384][T13518] __nla_validate_parse: 3 callbacks suppressed [ 282.369409][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'. [ 282.791164][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 282.899690][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 282.908730][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 282.935970][T13560] netlink: 'syz.2.1981': attribute type 12 has an invalid length. [ 282.943840][T13560] netlink: 'syz.2.1981': attribute type 11 has an invalid length. [ 283.096810][T13565] IPv6: Can't replace route, no match found [ 283.179773][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 283.275357][T13575] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1988'. [ 283.456709][T13580] syzkaller1: entered allmulticast mode [ 283.483228][T13584] batadv2: entered allmulticast mode [ 283.496637][T13584] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 283.507910][T13580] syzkaller1: left allmulticast mode [ 283.635407][T13592] lo speed is unknown, defaulting to 1000 [ 284.012919][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 284.269959][T13613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 284.432721][T13615] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1999'. [ 284.551864][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2000'. [ 284.704344][T13219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.743668][T13219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.858986][T13614] bridge0: left allmulticast mode [ 284.900947][T13614] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 285.342559][T13627] lo speed is unknown, defaulting to 1000 [ 285.494114][T13642] bond0 (unregistering): Released all slaves [ 286.007606][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.183257][T13665] tipc: Enabling of bearer rejected, already enabled [ 286.234082][T13670] lo speed is unknown, defaulting to 1000 [ 286.278554][T13665] siw: device registration error -23 [ 286.358563][T13665] syzkaller0: entered promiscuous mode [ 286.364190][T13675] lo speed is unknown, defaulting to 1000 [ 286.372405][T13665] syzkaller0: entered allmulticast mode [ 286.380067][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 286.636578][T13684] tun0: tun_chr_ioctl cmd 2148553947 [ 287.468665][T13705] lo speed is unknown, defaulting to 1000 [ 287.494707][T13714] __nla_validate_parse: 5 callbacks suppressed [ 287.494729][T13714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 287.650484][T13714] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2022'. [ 287.779384][T13729] netlink: 'syz.1.2027': attribute type 4 has an invalid length. [ 288.261638][T13742] netlink: 'syz.4.2032': attribute type 15 has an invalid length. [ 288.732133][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 288.773588][T13765] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2035'. [ 288.804409][T13765] gretap0: entered promiscuous mode [ 288.813564][T13765] gretap0: left allmulticast mode [ 288.855415][T13765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2035'. [ 288.924835][T13765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 288.966908][T13772] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2035'. [ 288.988326][T13772] 0ªî{X¹¦: renamed from gretap0 [ 289.011587][T13772] 0ªî{X¹¦: left promiscuous mode [ 289.019587][T13772] 0ªî{X¹¦: entered allmulticast mode [ 289.027049][T13772] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 289.043969][T13760] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 289.189970][T13781] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 289.206654][T13781] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.237568][T13784] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 289.296979][T13784] netlink: 'syz.1.2043': attribute type 10 has an invalid length. [ 289.318005][T13781] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 289.325574][T13784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2043'. [ 289.346011][T13781] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.384513][T13784] veth0_vlan: left promiscuous mode [ 289.405892][T13784] veth0_vlan: entered promiscuous mode [ 289.411424][T13784] veth0_vlan: entered allmulticast mode [ 289.463289][T13784] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 289.514619][T13781] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 289.529823][T13781] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.609923][T13781] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 289.626226][T13781] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.697412][T13809] netlink: 'syz.3.2048': attribute type 10 has an invalid length. [ 289.720587][T13809] syz_tun: entered promiscuous mode [ 289.744787][T13809] syz_tun: entered allmulticast mode [ 289.761293][T13809] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 289.824272][T13816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2051'. [ 289.841939][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 289.851090][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 180 seconds [ 289.862557][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 180 seconds [ 289.874092][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 180 seconds [ 289.885299][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 180 seconds [ 289.963692][T13822] netlink: 'syz.1.2053': attribute type 13 has an invalid length. [ 289.974720][T13822] netlink: 'syz.1.2053': attribute type 17 has an invalid length. [ 290.194223][T13812] team0: left allmulticast mode [ 290.209627][T13812] dummy0: left allmulticast mode [ 290.214639][T13812] team0: left promiscuous mode [ 290.221275][T13812] dummy0: left promiscuous mode [ 290.227811][T13812] bridge0: port 1(team0) entered disabled state [ 290.364453][T13822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.391573][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.452356][T13216] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 290.466897][T13216] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.573861][T13216] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 290.582432][T13216] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.640474][ T7168] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 290.666903][ T7168] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.749444][T13217] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 290.788754][T13217] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.814790][T13833] lo speed is unknown, defaulting to 1000 [ 290.852123][T13847] sctp: [Deprecated]: syz.0.2057 (pid 13847) Use of int in maxseg socket option. [ 290.852123][T13847] Use struct sctp_assoc_value instead [ 290.911722][T13217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.936949][T13217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.276543][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.678176][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.216492][T13926] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 292.295620][T13931] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 292.323448][T13931] netlink: 'syz.1.2075': attribute type 2 has an invalid length. [ 292.346918][T13931] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 292.368955][T13939] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 292.514651][T13947] __nla_validate_parse: 8 callbacks suppressed [ 292.514670][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2076'. [ 292.515026][T13943] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2077'. [ 293.081750][T13959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.447912][T13970] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 293.658884][T13970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.983989][T13994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2087'. [ 294.284011][T13972] macsec1: entered promiscuous mode [ 294.297579][T13972] macsec1: entered allmulticast mode [ 294.456889][T14007] netlink: 'syz.0.2091': attribute type 3 has an invalid length. [ 294.464862][T14007] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 294.647164][T14014] IPv6: addrconf: prefix option has invalid lifetime [ 294.678743][T14010] tipc: Enabled bearer , priority 0 [ 294.698568][T14010] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2092'. [ 294.738002][T14008] tipc: Disabling bearer [ 294.864999][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 294.912545][T14025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.993029][T14025] bond4: (slave batadv0): Opening slave failed [ 295.077626][T14031] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.115954][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.080038][T14066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2106'. [ 296.179953][T14068] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 296.334228][T14068] batadv_slave_0: entered promiscuous mode [ 296.349753][T14068] batadv_slave_0: left allmulticast mode [ 296.388210][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2105'. [ 296.464968][T14074] macsec1: entered promiscuous mode [ 296.469835][T14077] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2110'. [ 296.485413][T14074] macsec1: entered allmulticast mode [ 296.492527][T14074] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 296.538732][T14077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2110'. [ 296.549463][T14077] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2110'. [ 296.778038][T13216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.789437][T14088] netlink: 'syz.3.2114': attribute type 10 has an invalid length. [ 296.801498][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.810052][T13216] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.820590][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.847146][T14088] netlink: 'syz.3.2114': attribute type 10 has an invalid length. [ 296.891219][T14088] team0: Port device dummy0 removed [ 296.902132][T14088] dummy0: entered allmulticast mode [ 296.918147][T14088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.024497][T14095] rdma_rxe: rxe_newlink: failed to add veth1_to_bond [ 297.296845][T14106] lo speed is unknown, defaulting to 1000 [ 297.601939][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.632095][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.843458][T14115] __nla_validate_parse: 24 callbacks suppressed [ 297.843484][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2122'. [ 298.004683][T14121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2123'. [ 298.028374][T14115] lo speed is unknown, defaulting to 1000 [ 298.628988][T14131] IPv6: syztnl1: Disabled Multicast RS [ 298.904531][T14140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2127'. [ 298.934623][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'. [ 299.110143][T14147] vlan0: entered promiscuous mode [ 299.126178][T14147] vlan0: left allmulticast mode [ 299.654911][T13955] Set syz1 is full, maxelem 65536 reached [ 299.697494][T14154] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 299.765273][T14158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.969990][T14167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.219438][T14170] bridge0: entered promiscuous mode [ 300.281787][T14170] bridge0: port 1(macvlan3) entered blocking state [ 300.310504][T14170] bridge0: port 1(macvlan3) entered disabled state [ 300.327205][T14170] macvlan3: entered allmulticast mode [ 300.339569][T14170] bridge0: entered allmulticast mode [ 300.358124][T14170] macvlan3: left allmulticast mode [ 300.370483][T14170] bridge0: left allmulticast mode [ 300.390500][T14170] bridge0: left promiscuous mode [ 300.705982][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 300.863694][T14198] netlink: 'syz.3.2141': attribute type 1 has an invalid length. [ 300.873516][T14199] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 300.875955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.903275][T14190] netlink: 'syz.3.2141': attribute type 1 has an invalid length. [ 301.303236][T14210] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.337679][T14217] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 301.695183][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 301.723481][T14247] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2154'. [ 301.784648][T14248] geneve3: entered promiscuous mode [ 301.821260][T13217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.850241][T13217] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.871575][T13217] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.885055][T13217] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.012556][T14255] lo speed is unknown, defaulting to 1000 [ 302.238555][T14263] tipc: Enabled bearer , priority 0 [ 302.252957][T14263] syzkaller0: entered promiscuous mode [ 302.258759][T14263] syzkaller0: entered allmulticast mode [ 302.322142][T14263] tipc: Resetting bearer [ 302.337486][T14262] tipc: Resetting bearer [ 302.355859][T14262] tipc: Disabling bearer [ 302.576668][T14265] syzkaller0: entered promiscuous mode [ 302.605897][T14265] syzkaller0: entered allmulticast mode [ 302.724618][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2166'. [ 302.964254][T14281] lo speed is unknown, defaulting to 1000 [ 303.056157][T14285] netlink: 'syz.4.2168': attribute type 4 has an invalid length. [ 303.124049][T14286] netlink: 'syz.4.2168': attribute type 4 has an invalid length. [ 303.203267][ T5914] lo speed is unknown, defaulting to 1000 [ 303.242470][ T10] lo speed is unknown, defaulting to 1000 [ 303.915937][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 304.121122][T14307] netlink: 'syz.4.2174': attribute type 2 has an invalid length. [ 304.156761][T14307] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 304.356196][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'. [ 304.377511][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2177'. [ 304.892216][T14334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2182'. [ 305.009714][T14340] openvswitch: netlink: IP tunnel dst address not specified [ 305.274697][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 305.291493][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 305.422772][T14352] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2186'. [ 305.533813][T14350] can: request_module (can-proto-0) failed. [ 305.578658][T14356] sit0: entered allmulticast mode [ 305.690013][T14356] xfrm0: entered allmulticast mode [ 305.762222][T14356] tipc: Resetting bearer [ 305.781789][T14356] syzkaller0: left promiscuous mode [ 305.814589][T14356] bond4: entered allmulticast mode [ 305.825850][T14356] bond5: entered allmulticast mode [ 305.867373][T14356] bond6: left promiscuous mode [ 305.878064][T14356] veth4: entered allmulticast mode [ 305.894098][T14356] macvlan2: entered allmulticast mode [ 305.902393][T14356] macvlan3: entered allmulticast mode [ 305.984205][T14356] B: entered allmulticast mode [ 305.990440][T14356] ip6erspan0: entered allmulticast mode [ 306.006309][T14356] vxlan0: entered allmulticast mode [ 306.012049][T14356] bond7: entered allmulticast mode [ 306.040149][T14356] vlan2: left promiscuous mode [ 306.051389][T14356] bond8: left promiscuous mode [ 306.060008][T14356] gretap1: left promiscuous mode [ 306.075450][T14356] netdevsim netdevsim2 eth0: entered allmulticast mode [ 306.087840][T14356] netdevsim netdevsim2 eth1: entered allmulticast mode [ 306.099635][T14356] netdevsim netdevsim2 eth2: entered allmulticast mode [ 306.110546][T14356] netdevsim netdevsim2 eth3: entered allmulticast mode [ 306.123028][T14356] bridge2: entered allmulticast mode [ 306.146583][T14356] bond9: entered allmulticast mode [ 306.161987][T14356] ip6gretap2: entered allmulticast mode [ 306.176305][T14356] veth7: entered allmulticast mode [ 306.198605][T14356] veth6: entered allmulticast mode [ 306.224731][T14356] veth7: left promiscuous mode [ 306.231335][T14356] : entered allmulticast mode [ 306.246079][T14356] gretap2: left promiscuous mode [ 306.251861][T14356] gtp0: entered allmulticast mode [ 306.263984][T14356] bridge3: entered allmulticast mode [ 306.305905][T14356] ip6gre1: entered allmulticast mode [ 306.312348][T14356] macsec1: left promiscuous mode [ 306.319090][T14356] dummy0.4: entered allmulticast mode [ 306.410658][T14384] netlink: 'syz.3.2195': attribute type 3 has an invalid length. [ 306.418865][T14384] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 306.445898][T14384] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2195'. [ 306.583081][T14389] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2196'. [ 306.848061][T14398] netlink: 'syz.1.2200': attribute type 1 has an invalid length. [ 306.987077][T14398] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.058468][T14404] bond8: (slave gretap2): making interface the new active one [ 307.108551][T14404] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 307.243427][T14419] 8021q: VLANs not supported on ipvlan0 [ 307.579528][T14435] netlink: 'syz.1.2206': attribute type 9 has an invalid length. [ 307.932255][T14453] netlink: 'syz.1.2213': attribute type 99 has an invalid length. [ 307.940146][T14454] netlink: 'syz.1.2213': attribute type 99 has an invalid length. [ 307.986538][T14456] syzkaller0: entered promiscuous mode [ 307.992060][T14456] syzkaller0: entered allmulticast mode [ 308.315334][T14465] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2216'. [ 308.418894][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 308.486308][T13216] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.506955][T13219] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.515488][T13219] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.544466][T13219] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.677866][T14475] netlink: zone id is out of range [ 308.683301][T14475] netlink: zone id is out of range [ 308.712637][T14475] netlink: zone id is out of range [ 308.827184][T14475] netlink: zone id is out of range [ 308.841565][T14475] netlink: zone id is out of range [ 308.866141][T14475] netlink: zone id is out of range [ 308.871432][T14475] netlink: zone id is out of range [ 308.890699][T14483] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 308.908201][T14475] netlink: zone id is out of range [ 308.913398][T14475] netlink: zone id is out of range [ 309.035864][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.071446][T14492] tipc: Enabling of bearer rejected, already enabled [ 309.145889][T14493] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 309.352465][T14504] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 309.978719][T14535] veth9: entered promiscuous mode [ 309.993267][T14537] __nla_validate_parse: 6 callbacks suppressed [ 309.993285][T14537] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 310.593037][T13219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.642210][T13219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.778564][T14585] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 311.292509][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 311.320176][T14614] sit0: Master is either lo or non-ether device [ 311.510515][T14622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2262'. [ 311.643301][T14629] netlink: 'syz.3.2265': attribute type 15 has an invalid length. [ 311.719658][T14631] net_ratelimit: 96 callbacks suppressed [ 311.719708][T14631] openvswitch: netlink: IP tunnel dst address not specified [ 311.891068][T14642] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2268'. [ 311.906968][T13219] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 312.049605][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2270'. [ 312.146781][T13219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.169515][T13219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.403088][T14667] netlink: 'syz.2.2277': attribute type 21 has an invalid length. [ 312.411544][T14667] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 312.671279][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 312.685379][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 313.063792][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 313.080097][T14695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 313.092442][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 313.312495][T14709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.177974][T14712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.368833][T14739] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 314.377027][T14739] netlink: 'syz.0.2296': attribute type 3 has an invalid length. [ 314.711168][T14749] lo speed is unknown, defaulting to 1000 [ 315.028120][T14768] IPv6: sit1: Disabled Multicast RS [ 315.169272][T14780] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 315.181551][T14780] macvlan0: entered promiscuous mode [ 315.192790][T14780] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 315.362642][T14791] __nla_validate_parse: 5 callbacks suppressed [ 315.362664][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 315.400574][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 315.410420][T14791] netlink: 'syz.3.2308': attribute type 7 has an invalid length. [ 316.001164][T14821] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 316.703484][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 316.707956][T14849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2323'. [ 316.715013][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 316.732591][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 316.746998][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 316.757284][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 316.774734][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2324'. [ 316.813306][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 317.004130][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.017133][T14860] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 317.031712][T14860] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 317.719236][T14894] bridge_slave_1: default FDB implementation only supports local addresses [ 318.023332][T14915] netlink: 'syz.0.2341': attribute type 4 has an invalid length. [ 318.078360][T14915] netlink: 'syz.0.2341': attribute type 4 has an invalid length. [ 318.105287][T14917] lo speed is unknown, defaulting to 1000 [ 319.638824][T14972] nbd: socks must be embedded in a SOCK_ITEM attr [ 319.721266][T14976] batadv_slave_0: entered promiscuous mode [ 319.904673][T14975] batadv_slave_0 (unregistering): left promiscuous mode [ 319.919613][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 210 seconds [ 319.931108][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 210 seconds [ 319.942963][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 210 seconds [ 319.955330][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 210 seconds [ 320.476176][ T30] audit: type=1800 audit(1754241877.938:2): pid=14997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2361" name="cgroup.controllers" dev="tmpfs" ino=2436 res=0 errno=0 [ 320.626373][T15016] __nla_validate_parse: 16 callbacks suppressed [ 320.626397][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2366'. [ 320.761150][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 320.780571][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 320.784485][T15026] netlink: 'syz.2.2370': attribute type 64 has an invalid length. [ 320.923130][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2371'. [ 321.000973][T15045] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2373'. [ 321.071907][T15045] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 321.196861][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.291829][T15057] tipc: Enabled bearer , priority 0 [ 321.300185][T15057] syzkaller0: entered promiscuous mode [ 321.309512][T15057] syzkaller0: entered allmulticast mode [ 321.378701][T15057] tipc: Resetting bearer [ 321.389804][T15055] tipc: Resetting bearer [ 321.394984][T15063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2378'. [ 321.422327][T15055] tipc: Disabling bearer [ 321.428585][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2378'. [ 321.609445][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'. [ 321.622081][T15075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2385'. [ 321.653323][T15073] bridge0: entered promiscuous mode [ 321.688104][T15073] bridge0: port 1(macvlan3) entered blocking state [ 321.708005][T15073] bridge0: port 1(macvlan3) entered disabled state [ 321.714928][T15073] macvlan3: entered allmulticast mode [ 321.721531][T15073] bridge0: entered allmulticast mode [ 321.730126][T15073] macvlan3: left allmulticast mode [ 321.735455][T15073] bridge0: left allmulticast mode [ 321.741532][T15073] bridge0: left promiscuous mode [ 322.031198][T15093] lo speed is unknown, defaulting to 1000 [ 322.241777][T15113] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 322.307154][T15110] netlink: 'syz.0.2394': attribute type 1 has an invalid length. [ 322.336151][T15110] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2394'. [ 322.391018][T15109] lo speed is unknown, defaulting to 1000 [ 323.380546][T15167] openvswitch: netlink: Missing valid actions attribute. [ 323.391351][T15167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.592036][T15174] lo speed is unknown, defaulting to 1000 [ 323.621955][T15175] netlink: 'syz.0.2409': attribute type 21 has an invalid length. [ 323.638528][T15175] netlink: 'syz.0.2409': attribute type 6 has an invalid length. [ 324.162601][ T10] page_pool_release_retry() stalled pool shutdown: id 44, 1 inflight 60 sec [ 324.275271][T15187] team0: Port device team_slave_0 removed [ 324.452751][T15203] lo speed is unknown, defaulting to 1000 [ 324.752200][T15209] lo speed is unknown, defaulting to 1000 [ 325.035899][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.443239][T15226] lo speed is unknown, defaulting to 1000 [ 325.776690][T15255] __nla_validate_parse: 134 callbacks suppressed [ 325.776711][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 325.792392][T15255] netlink: 'syz.3.2427': attribute type 5 has an invalid length. [ 325.805477][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2427'. [ 325.822624][T15255] geneve2: entered promiscuous mode [ 325.829007][T15255] geneve2: entered allmulticast mode [ 325.837358][T13216] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 325.859700][T13216] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 325.887802][T13216] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 325.898871][T13219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 326.133040][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'. [ 326.404271][T15293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2433'. [ 326.435616][T15293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2433'. [ 326.960904][T15313] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2438'. [ 327.133133][T15313] batadv0: entered promiscuous mode [ 327.164707][T15313] batadv0: entered allmulticast mode [ 327.779334][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2446'. [ 328.100652][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 328.726880][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 328.853692][T15367] veth0_vlan: left allmulticast mode [ 328.884616][T15392] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 328.953121][T15367] bridge0: left promiscuous mode [ 328.960719][T15367] bridge0: left allmulticast mode [ 328.985484][T15367] batadv2: left allmulticast mode [ 329.164013][T15367] geneve3: left promiscuous mode [ 329.230865][T13217] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.266086][T13217] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.356013][T13217] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.364447][T13217] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.413378][T15405] netlink: 'syz.0.2460': attribute type 1 has an invalid length. [ 329.434629][T15401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2458'. [ 329.562475][T15405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.587890][T15405] bond0: (slave gretap2): making interface the new active one [ 329.596941][T15405] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 329.620859][T15416] netlink: zone id is out of range [ 329.631162][T15416] netlink: zone id is out of range [ 329.646219][T15416] netlink: zone id is out of range [ 329.666160][T15416] netlink: zone id is out of range [ 329.682424][T15416] netlink: zone id is out of range [ 329.701653][T15416] netlink: zone id is out of range [ 329.722855][T15416] netlink: zone id is out of range [ 329.748849][T15416] netlink: zone id is out of range [ 329.801030][T15416] netlink: zone id is out of range [ 329.835063][T15416] netlink: zone id is out of range [ 330.633945][T15455] tipc: Enabled bearer , priority 0 [ 330.664945][T15455] syzkaller0: entered promiscuous mode [ 330.678422][T15455] syzkaller0: entered allmulticast mode [ 330.757375][T15455] tipc: Resetting bearer [ 330.820157][T15460] macvlan1: entered promiscuous mode [ 330.839518][T15460] macvlan1: left promiscuous mode [ 330.858540][T15464] !: renamed from dummy0 (while UP) [ 331.437929][T15454] tipc: Resetting bearer [ 331.478059][T15454] tipc: Disabling bearer [ 331.740423][T15495] tipc: Enabling of bearer rejected, already enabled [ 331.922983][T15514] __nla_validate_parse: 4 callbacks suppressed [ 331.923006][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2488'. [ 332.152586][T15517] lo speed is unknown, defaulting to 1000 [ 332.230728][T15519] lo speed is unknown, defaulting to 1000 [ 332.679300][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 332.784639][T15538] lo speed is unknown, defaulting to 1000 [ 333.974095][T15578] netlink: 'syz.1.2503': attribute type 13 has an invalid length. [ 334.008712][T15578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2503'. [ 334.049260][T15578] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 334.133339][T15590] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2507'. [ 334.393740][T15601] netlink: 'syz.1.2511': attribute type 83 has an invalid length. [ 334.743788][T15612] can: request_module (can-proto-0) failed. [ 334.870906][T15628] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.976365][T15629] lo speed is unknown, defaulting to 1000 [ 335.062633][T15638] netlink: 'syz.3.2520': attribute type 33 has an invalid length. [ 335.103565][T15638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2520'. [ 335.241534][T15646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2522'. [ 335.257913][T15646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2522'. [ 335.258669][T15636] lo speed is unknown, defaulting to 1000 [ 335.593904][T15660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2525'. [ 335.716469][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 335.988272][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 336.249419][T15680] hsr_slave_0: left promiscuous mode [ 336.271324][T15680] hsr_slave_1: left promiscuous mode [ 336.841734][T15720] lo speed is unknown, defaulting to 1000 [ 337.262427][T15743] __nla_validate_parse: 1 callbacks suppressed [ 337.262449][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 337.284193][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2545'. [ 337.289210][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 337.368970][T15744] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2544'. [ 337.381676][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 337.540125][T15739] tipc: Enabled bearer , priority 0 [ 337.564258][T15738] tipc: Resetting bearer [ 339.513110][T15738] tipc: Disabling bearer [ 339.682437][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 339.729529][T15767] net_ratelimit: 141 callbacks suppressed [ 339.729553][T15767] openvswitch: netlink: Missing key (keys=40, expected=100) [ 339.869994][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 339.938636][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 340.382590][T15803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.754307][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 340.988933][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 342.140344][T15859] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 342.252965][T15866] bond0: (slave rose0): Enslaving as an active interface with an up link [ 342.313652][T15874] __nla_validate_parse: 45 callbacks suppressed [ 342.313673][T15874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2579'. [ 342.739907][T15886] macsec2: entered promiscuous mode [ 342.749955][T15886] gretap0: entered promiscuous mode [ 342.765601][T15888] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 342.778574][T15886] gretap0: left promiscuous mode [ 343.044386][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 343.053606][T15902] nbd: must specify a size in bytes for the device [ 343.486909][T15914] lo speed is unknown, defaulting to 1000 [ 343.599666][T15920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2590'. [ 343.702563][T15924] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 343.866569][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 343.969175][T15941] netlink: 'syz.0.2596': attribute type 4 has an invalid length. [ 343.976501][T15936] lo speed is unknown, defaulting to 1000 [ 343.981395][T15941] netlink: 'syz.0.2596': attribute type 4 has an invalid length. [ 344.134094][ T5922] IPVS: starting estimator thread 0... [ 344.177574][T15915] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20003 [ 344.217746][T15915] netlink: 'syz.2.2588': attribute type 2 has an invalid length. [ 344.245766][T15945] IPVS: using max 25 ests per chain, 60000 per kthread [ 344.731032][ T7168] IPVS: stop unused estimator thread 0... [ 344.920749][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 345.047844][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 345.484002][T15987] @ÿ: renamed from bond_slave_0 (while UP) [ 345.531879][T15987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2608'. [ 345.546376][T15991] netlink: 'syz.2.2610': attribute type 2 has an invalid length. [ 345.622124][T15991] þ`Ì: entered promiscuous mode [ 345.727716][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'. [ 345.758060][ T5848] Bluetooth: hci0: command tx timeout [ 346.391727][T16027] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 346.402424][T16027] netlink: 'syz.4.2620': attribute type 2 has an invalid length. [ 346.667392][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2624'. [ 346.686159][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2624'. [ 347.260179][T16076] tipc: Enabled bearer , priority 0 [ 347.271969][T16076] syzkaller0: entered promiscuous mode [ 347.280463][T16076] syzkaller0: entered allmulticast mode [ 347.324289][T16076] tipc: Resetting bearer [ 347.347128][T16073] tipc: Resetting bearer [ 347.368834][T16079] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 347.404030][T16073] tipc: Disabling bearer [ 347.758258][T16103] __nla_validate_parse: 3 callbacks suppressed [ 347.758280][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2640'. [ 347.774875][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2640'. [ 348.041181][T16118] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4 [ 348.145924][T16125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2645'. [ 348.164301][T16115] tipc: Enabled bearer , priority 0 [ 348.172850][T16115] syzkaller0: entered promiscuous mode [ 348.173648][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'. [ 348.206345][T16115] syzkaller0: entered allmulticast mode [ 348.230979][T16115] tipc: Resetting bearer [ 348.289107][T16114] tipc: Resetting bearer [ 348.324633][T16114] tipc: Disabling bearer [ 348.598529][T16152] veth1_macvtap: left promiscuous mode [ 348.698837][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 348.719632][T16152] veth1_macvtap: entered promiscuous mode [ 348.828543][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 348.842684][T16162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2653'. [ 348.969611][T16169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'. [ 349.104646][T16170] syzkaller0: entered promiscuous mode [ 349.110463][T16170] syzkaller0: entered allmulticast mode [ 349.144868][T16173] netlink: 'syz.2.2657': attribute type 4 has an invalid length. [ 349.433839][T16186] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 349.446238][T16186] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2659'. [ 349.479563][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 350.003447][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 240 seconds [ 350.021705][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 240 seconds [ 350.033991][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 240 seconds [ 350.049068][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 240 seconds [ 351.902705][T16201] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 351.985297][T16202] lo speed is unknown, defaulting to 1000 [ 352.100441][ T30] audit: type=1800 audit(1754241909.568:3): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2665" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2628 res=0 errno=0 [ 352.195832][ T30] audit: type=1804 audit(1754241909.568:4): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2665" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2628 res=1 errno=0 [ 352.569942][T16244] gretap0: entered promiscuous mode [ 352.577819][T16247] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 352.581653][T16244] macsec1: entered promiscuous mode [ 352.595022][T16244] gretap0: left promiscuous mode [ 352.719093][T16251] netlink: 'syz.3.2674': attribute type 10 has an invalid length. [ 352.750036][T16251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.779711][T16251] team0: Port device bond0 added [ 352.934832][T16253] lo speed is unknown, defaulting to 1000 [ 352.936920][T16262] tipc: Enabling of bearer rejected, already enabled [ 353.145581][T16269] !: renamed from dummy0 (while UP) [ 353.601526][T16296] netlink: 'syz.1.2682': attribute type 27 has an invalid length. [ 353.704600][T16293] __nla_validate_parse: 5 callbacks suppressed [ 353.704624][T16293] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2682'. [ 353.854988][T16281] lo speed is unknown, defaulting to 1000 [ 354.804401][T16341] netlink: 'syz.3.2693': attribute type 23 has an invalid length. [ 354.841893][T16342] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2692'. [ 354.977206][T16347] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2694'. [ 355.172141][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2698'. [ 355.189183][T16351] netlink: 'syz.1.2697': attribute type 10 has an invalid length. [ 355.226885][T16351] veth0_vlan: left promiscuous mode [ 355.234454][T16351] veth0_vlan: entered promiscuous mode [ 355.264227][T16351] team0: Device veth0_vlan failed to register rx_handler [ 355.376724][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2701'. [ 355.473080][T16369] IPv6: Can't replace route, no match found [ 355.582829][T16379] bridge0: port 1(gretap0) entered blocking state [ 355.602867][T16379] bridge0: port 1(gretap0) entered disabled state [ 355.622265][T16379] gretap0: entered allmulticast mode [ 355.643816][T16379] gretap0: entered promiscuous mode [ 355.651932][T16379] bridge0: port 1(gretap0) entered blocking state [ 355.658597][T16379] bridge0: port 1(gretap0) entered forwarding state [ 355.688818][T16385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2707'. [ 355.821155][ T30] audit: type=1800 audit(1754241913.288:5): pid=16394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2709" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2926 res=0 errno=0 [ 355.958758][T16404] IPVS: length: 140 != 16466316312 [ 356.202112][T16415] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 356.450954][T16426] lo speed is unknown, defaulting to 1000 [ 356.543391][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 356.695278][T16440] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2720'. [ 356.839250][T16440] batadv1: entered promiscuous mode [ 356.844835][T16440] batadv1: entered allmulticast mode [ 356.942749][T16445] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2722'. [ 356.952413][T16445] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2722'. [ 356.979594][T16445] lo speed is unknown, defaulting to 1000 [ 356.990692][T16445] lo speed is unknown, defaulting to 1000 [ 357.000346][T16445] lo speed is unknown, defaulting to 1000 [ 357.035951][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.205492][T16448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.756810][T16470] gretap2: entered promiscuous mode [ 357.824422][T15387] lo speed is unknown, defaulting to 1000 [ 357.834730][T15387] syz0: Port: 1 Link ACTIVE [ 357.843830][T16445] infiniband syz0: set active [ 357.855556][T16445] infiniband syz0: added lo [ 357.873109][T16445] syz0: rxe_create_cq: returned err = -12 [ 357.921487][T16445] infiniband syz0: Couldn't create ib_mad CQ [ 357.941980][T16445] infiniband syz0: Couldn't open port 1 [ 358.041861][T16445] RDS/IB: syz0: added [ 358.054063][T16445] smc: adding ib device syz0 with port count 1 [ 358.074236][T16445] smc: ib device syz0 port 1 has pnetid [ 358.120533][ T10] lo speed is unknown, defaulting to 1000 [ 358.130131][T16445] lo speed is unknown, defaulting to 1000 [ 358.373398][T16501] netlink: 'syz.2.2734': attribute type 303 has an invalid length. [ 358.789604][T16514] __nla_validate_parse: 11 callbacks suppressed [ 358.789627][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 358.878061][T16445] lo speed is unknown, defaulting to 1000 [ 359.311630][T16536] netlink: 748 bytes leftover after parsing attributes in process `syz.3.2751'. [ 359.404921][T16543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2754'. [ 359.432749][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2754'. [ 359.455203][T16541] veth5: entered promiscuous mode [ 359.462413][T16543] netlink: 'syz.1.2754': attribute type 7 has an invalid length. [ 359.479169][T16543] netlink: 'syz.1.2754': attribute type 8 has an invalid length. [ 359.490279][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 359.621398][T16540] veth7: entered promiscuous mode [ 359.629846][T16445] lo speed is unknown, defaulting to 1000 [ 359.675198][T16557] syzkaller0: left allmulticast mode [ 359.693919][T16557] tipc: Resetting bearer [ 359.945831][T16571] netlink: 'syz.3.2763': attribute type 10 has an invalid length. [ 359.953969][T16571] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2763'. [ 360.008028][T16565] tipc: Enabled bearer , priority 0 [ 360.021273][T16571] team0: entered promiscuous mode [ 360.046752][T16571] bond0: entered promiscuous mode [ 360.052232][T16571] !: entered promiscuous mode [ 360.073021][T16565] syzkaller0: entered promiscuous mode [ 360.090764][T16565] syzkaller0: entered allmulticast mode [ 360.189815][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'. [ 360.211128][T16565] tipc: Resetting bearer [ 360.261122][T16564] tipc: Resetting bearer [ 360.326714][T16564] tipc: Disabling bearer [ 360.351811][T16445] lo speed is unknown, defaulting to 1000 [ 360.516978][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2769'. [ 360.713885][T16603] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 360.875337][T16611] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 360.947166][T16611] 8021q: adding VLAN 0 to HW filter on device bond11 [ 361.054189][T16613] bond11: (slave bridge4): making interface the new active one [ 361.123023][T16613] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 361.209626][T16445] lo speed is unknown, defaulting to 1000 [ 361.711453][T16636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2782'. [ 361.751870][T16640] smc: net device bond0 applied user defined pnetid SYZ2 [ 361.762028][T16636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2782'. [ 361.805400][T16646] smc: net device bond0 erased user defined pnetid SYZ2 [ 361.990582][T16646] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 362.112574][T16660] lo speed is unknown, defaulting to 1000 [ 362.155402][T16660] lo speed is unknown, defaulting to 1000 [ 362.197746][T16663] lo speed is unknown, defaulting to 1000 [ 362.409190][T16674] tipc: Enabled bearer , priority 0 [ 362.464478][T16674] syzkaller0: entered promiscuous mode [ 362.505900][T16674] syzkaller0: entered allmulticast mode [ 362.518041][T16677] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 362.541255][T16677] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 362.790071][T16673] tipc: Resetting bearer [ 362.834702][T16673] tipc: Disabling bearer [ 362.930109][T16663] lo speed is unknown, defaulting to 1000 [ 363.592679][T16711] pimreg: entered allmulticast mode [ 364.003833][T16730] __nla_validate_parse: 4 callbacks suppressed [ 364.003855][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 364.512277][T16739] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 364.911781][T16752] tipc: Enabling of bearer rejected, already enabled [ 364.945387][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2814'. [ 364.954985][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2814'. [ 364.974167][T16751] team0: entered promiscuous mode [ 364.981558][T16751] team_slave_1: entered promiscuous mode [ 365.000566][T16751] team0: left promiscuous mode [ 365.016714][T16751] team_slave_1: left promiscuous mode [ 365.165269][T16761] lo speed is unknown, defaulting to 1000 [ 365.180167][T16760] lo speed is unknown, defaulting to 1000 [ 365.201450][T16761] lo speed is unknown, defaulting to 1000 [ 365.570366][T16785] tipc: Enabled bearer , priority 0 [ 365.578671][T16785] syzkaller0: entered promiscuous mode [ 365.599115][T16785] syzkaller0: entered allmulticast mode [ 365.672871][T16785] tipc: Resetting bearer [ 365.681619][T16760] lo speed is unknown, defaulting to 1000 [ 365.700620][T16784] tipc: Resetting bearer [ 365.740267][T16784] tipc: Disabling bearer [ 365.981664][T16802] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2830'. [ 366.700439][T16826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.718350][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 366.782547][T16822] lo speed is unknown, defaulting to 1000 [ 367.018367][T16822] lo speed is unknown, defaulting to 1000 [ 367.300212][T16838] Bluetooth: MGMT ver 1.23 [ 367.316072][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 367.388008][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 367.954011][T16854] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2844'. [ 368.273268][T16863] tun0: tun_chr_ioctl cmd 1074812117 [ 368.293521][T16867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2850'. [ 368.314811][T16867] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2850'. [ 368.620047][T16880] lo speed is unknown, defaulting to 1000 [ 368.628297][T16880] lo speed is unknown, defaulting to 1000 [ 368.722632][T16887] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 369.280256][T16915] __nla_validate_parse: 3 callbacks suppressed [ 369.280277][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 369.305182][T16915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 369.519721][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 369.587707][T16932] netlink: 'syz.3.2871': attribute type 3 has an invalid length. [ 369.632813][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2871'. [ 369.882249][T16948] vlan0: entered promiscuous mode [ 369.897365][T16948] vlan1: entered promiscuous mode [ 369.911531][T16949] netlink: 'syz.0.2876': attribute type 1 has an invalid length. [ 370.102340][T16956] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 370.132463][T16959] netlink: 'syz.3.2880': attribute type 1 has an invalid length. [ 370.144460][T16956] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 370.275692][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 370.298180][T16967] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2882'. [ 370.977578][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.987361][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.997096][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.009942][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.019024][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.057003][T16994] lo speed is unknown, defaulting to 1000 [ 371.063968][T16994] lo speed is unknown, defaulting to 1000 [ 371.347639][T16994] chnl_net:caif_netlink_parms(): no params data found [ 371.430541][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.440242][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.447709][T16994] bridge_slave_0: entered allmulticast mode [ 371.455082][T16994] bridge_slave_0: entered promiscuous mode [ 371.466485][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.473679][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.481706][T16994] bridge_slave_1: entered allmulticast mode [ 371.489935][T16994] bridge_slave_1: entered promiscuous mode [ 371.533863][T16994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.549122][T16994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.588585][T16994] team0: Port device team_slave_0 added [ 371.597278][T16994] team0: Port device team_slave_1 added [ 371.630993][T16994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.638520][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.664989][T16994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.680631][T16994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.688101][T16994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.714329][T16994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.765152][T16994] hsr_slave_0: entered promiscuous mode [ 371.771835][T16994] hsr_slave_1: entered promiscuous mode [ 373.125975][ T5848] Bluetooth: hci0: command tx timeout [ 375.195846][ T5848] Bluetooth: hci0: command tx timeout [ 377.276564][ T5848] Bluetooth: hci0: command tx timeout [ 379.355953][ T5848] Bluetooth: hci0: command tx timeout [ 380.076981][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 270 seconds [ 380.087899][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 270 seconds [ 380.099198][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 270 seconds [ 380.110580][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 270 seconds [ 386.671602][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.690516][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.707519][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.707677][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.724514][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.724747][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.740507][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.741301][ T5159] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.758005][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.758304][ T5159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.770108][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.781089][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.782563][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.814720][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.823168][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.823740][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 386.841405][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 386.852365][ T5855] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 386.861104][ T5855] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 386.869361][ T5855] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 386.937173][T17009] lo speed is unknown, defaulting to 1000 [ 386.950055][T17007] lo speed is unknown, defaulting to 1000 [ 386.963496][T17009] lo speed is unknown, defaulting to 1000 [ 386.967132][T17012] lo speed is unknown, defaulting to 1000 [ 386.985399][T17006] lo speed is unknown, defaulting to 1000 [ 387.122895][T17007] lo speed is unknown, defaulting to 1000 [ 387.371926][T17009] chnl_net:caif_netlink_parms(): no params data found [ 387.433974][T17012] lo speed is unknown, defaulting to 1000 [ 387.570355][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.577990][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.585255][T17009] bridge_slave_0: entered allmulticast mode [ 387.593821][T17009] bridge_slave_0: entered promiscuous mode [ 387.614457][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.622924][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.636138][T17009] bridge_slave_1: entered allmulticast mode [ 387.645051][T17009] bridge_slave_1: entered promiscuous mode [ 387.719243][T17006] lo speed is unknown, defaulting to 1000 [ 387.784703][T17009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.799315][T17009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.928562][T17009] team0: Port device team_slave_0 added [ 387.978369][T17009] team0: Port device team_slave_1 added [ 388.103540][T17009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.111126][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.143970][T17009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.177390][T17009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.184449][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.211320][T17009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.253080][T17007] chnl_net:caif_netlink_parms(): no params data found [ 388.422093][T17009] hsr_slave_0: entered promiscuous mode [ 388.436822][T17009] hsr_slave_1: entered promiscuous mode [ 388.444708][T17009] debugfs: 'hsr0' already exists in 'hsr' [ 388.452136][T17009] Cannot create hsr debugfs directory [ 388.549722][T17012] chnl_net:caif_netlink_parms(): no params data found [ 388.570881][T17007] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.578700][T17007] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.586141][T17007] bridge_slave_0: entered allmulticast mode [ 388.593393][T17007] bridge_slave_0: entered promiscuous mode [ 388.631684][T17007] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.639411][T17007] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.647332][T17007] bridge_slave_1: entered allmulticast mode [ 388.655882][T17007] bridge_slave_1: entered promiscuous mode [ 388.795344][T17007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.809671][T17007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.876037][ T5159] Bluetooth: hci7: command tx timeout [ 388.882725][ T5855] Bluetooth: hci5: command tx timeout [ 388.953560][T17012] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.961404][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.966046][ T5855] Bluetooth: hci8: command tx timeout [ 388.969333][T17012] bridge_slave_0: entered allmulticast mode [ 388.974657][ T5855] Bluetooth: hci6: command tx timeout [ 388.983285][T17012] bridge_slave_0: entered promiscuous mode [ 389.001098][T17012] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.008741][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.016128][T17012] bridge_slave_1: entered allmulticast mode [ 389.023963][T17012] bridge_slave_1: entered promiscuous mode [ 389.033511][T17007] team0: Port device team_slave_0 added [ 389.061021][T17006] chnl_net:caif_netlink_parms(): no params data found [ 389.104928][T17007] team0: Port device team_slave_1 added [ 389.141762][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.156778][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.241908][T17007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.249754][T17007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.277738][T17007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.291638][T17007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.299344][T17007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.326255][T17007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.371490][T17012] team0: Port device team_slave_0 added [ 389.411502][T17012] team0: Port device team_slave_1 added [ 389.489305][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.500594][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.527639][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.577799][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.584791][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.612312][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.660667][T17007] hsr_slave_0: entered promiscuous mode [ 389.667907][T17007] hsr_slave_1: entered promiscuous mode [ 389.674114][T17007] debugfs: 'hsr0' already exists in 'hsr' [ 389.680900][T17007] Cannot create hsr debugfs directory [ 389.726687][T17006] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.734401][T17006] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.742781][T17006] bridge_slave_0: entered allmulticast mode [ 389.750939][T17006] bridge_slave_0: entered promiscuous mode [ 389.761369][T17006] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.769345][T17006] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.777060][T17006] bridge_slave_1: entered allmulticast mode [ 389.784377][T17006] bridge_slave_1: entered promiscuous mode [ 389.877753][T17012] hsr_slave_0: entered promiscuous mode [ 389.884394][T17012] hsr_slave_1: entered promiscuous mode [ 389.891593][T17012] debugfs: 'hsr0' already exists in 'hsr' [ 389.897585][T17012] Cannot create hsr debugfs directory [ 389.916434][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.930575][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.998716][T17006] team0: Port device team_slave_0 added [ 390.042562][T17006] team0: Port device team_slave_1 added [ 390.123489][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.131408][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.157802][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.188729][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.196213][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.222668][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.359779][T17006] hsr_slave_0: entered promiscuous mode [ 390.366918][T17006] hsr_slave_1: entered promiscuous mode [ 390.373546][T17006] debugfs: 'hsr0' already exists in 'hsr' [ 390.379902][T17006] Cannot create hsr debugfs directory [ 390.956781][ T5855] Bluetooth: hci5: command tx timeout [ 390.956793][ T5159] Bluetooth: hci7: command tx timeout [ 391.035998][ T5855] Bluetooth: hci6: command tx timeout [ 391.036190][ T5159] Bluetooth: hci8: command tx timeout [ 393.035873][ T5159] Bluetooth: hci7: command tx timeout [ 393.036288][ T5855] Bluetooth: hci5: command tx timeout [ 393.116105][ T5855] Bluetooth: hci6: command tx timeout [ 393.116324][ T5159] Bluetooth: hci8: command tx timeout [ 395.116004][ T5159] Bluetooth: hci5: command tx timeout [ 395.116255][ T5855] Bluetooth: hci7: command tx timeout [ 395.196017][ T5855] Bluetooth: hci6: command tx timeout [ 395.196032][ T5159] Bluetooth: hci8: command tx timeout [ 410.156861][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 300 seconds [ 410.167979][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 300 seconds [ 410.179378][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 300 seconds [ 410.190686][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 300 seconds [ 424.876275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 431.205055][ T5159] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 431.214172][ T5159] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 431.222547][ T5159] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 431.232551][ T5159] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 431.241188][ T5159] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 431.282674][T17039] lo speed is unknown, defaulting to 1000 [ 431.290155][T17039] lo speed is unknown, defaulting to 1000 [ 431.600815][T17039] chnl_net:caif_netlink_parms(): no params data found [ 431.692138][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.699919][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.708112][T17039] bridge_slave_0: entered allmulticast mode [ 431.716337][T17039] bridge_slave_0: entered promiscuous mode [ 431.725004][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.732608][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.740687][T17039] bridge_slave_1: entered allmulticast mode [ 431.748789][T17039] bridge_slave_1: entered promiscuous mode [ 431.796355][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.809827][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.850785][T17039] team0: Port device team_slave_0 added [ 431.859522][T17039] team0: Port device team_slave_1 added [ 431.897090][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.904145][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.931164][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.944085][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.951297][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.977709][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.035377][T17039] hsr_slave_0: entered promiscuous mode [ 432.042439][T17039] hsr_slave_1: entered promiscuous mode [ 432.049558][T17039] debugfs: 'hsr0' already exists in 'hsr' [ 432.055326][T17039] Cannot create hsr debugfs directory [ 433.275880][ T5855] Bluetooth: hci9: command tx timeout [ 435.356083][ T5855] Bluetooth: hci9: command tx timeout [ 437.435895][ T5855] Bluetooth: hci9: command tx timeout [ 439.515822][ T5855] Bluetooth: hci9: command tx timeout [ 440.248091][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 330 seconds [ 440.259617][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 330 seconds [ 440.270850][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 330 seconds [ 440.282275][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 330 seconds [ 447.246636][ T5159] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 447.267831][ T5159] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 447.285969][ T5159] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 447.294780][ T5159] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 447.303119][ T5159] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 447.340904][ T5159] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 447.352116][ T5159] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 447.366397][ T5159] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 447.379822][ T5159] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 447.406068][T17051] lo speed is unknown, defaulting to 1000 [ 447.412335][ T5159] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 447.421935][T17051] lo speed is unknown, defaulting to 1000 [ 447.532064][T17053] lo speed is unknown, defaulting to 1000 [ 447.551139][ T5159] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 447.566102][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 447.573863][ T5848] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 447.584576][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 447.596459][ T5851] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 447.606322][ T5848] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 447.614306][ T5848] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 447.621669][ T5851] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 447.631978][ T5848] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 447.640937][ T5855] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 447.761445][T17055] lo speed is unknown, defaulting to 1000 [ 447.772401][T17053] lo speed is unknown, defaulting to 1000 [ 447.785247][T17056] lo speed is unknown, defaulting to 1000 [ 448.091188][T17055] lo speed is unknown, defaulting to 1000 [ 448.129606][T17051] chnl_net:caif_netlink_parms(): no params data found [ 448.451560][T17056] lo speed is unknown, defaulting to 1000 [ 448.452592][T17051] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.466236][T17051] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.473896][T17051] bridge_slave_0: entered allmulticast mode [ 448.493206][T17051] bridge_slave_0: entered promiscuous mode [ 448.580357][T17051] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.596173][T17051] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.603567][T17051] bridge_slave_1: entered allmulticast mode [ 448.629633][T17051] bridge_slave_1: entered promiscuous mode [ 448.716282][T17053] chnl_net:caif_netlink_parms(): no params data found [ 448.795410][T17051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.810153][T17051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.927907][T17051] team0: Port device team_slave_0 added [ 448.961995][T17051] team0: Port device team_slave_1 added [ 449.075307][T17053] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.083012][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.090695][T17053] bridge_slave_0: entered allmulticast mode [ 449.099475][T17053] bridge_slave_0: entered promiscuous mode [ 449.108603][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.117583][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.124877][T17053] bridge_slave_1: entered allmulticast mode [ 449.132897][T17053] bridge_slave_1: entered promiscuous mode [ 449.146803][T17051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.153776][T17051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.180984][T17051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.194663][T17051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.201852][T17051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.228526][T17051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.349479][T17053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.359231][ T5159] Bluetooth: hci10: command tx timeout [ 449.444752][T17053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.516516][ T5159] Bluetooth: hci11: command tx timeout [ 449.582226][T17051] hsr_slave_0: entered promiscuous mode [ 449.589772][T17051] hsr_slave_1: entered promiscuous mode [ 449.596456][T17051] debugfs: 'hsr0' already exists in 'hsr' [ 449.602248][T17051] Cannot create hsr debugfs directory [ 449.634484][T17053] team0: Port device team_slave_0 added [ 449.646197][T17053] team0: Port device team_slave_1 added [ 449.663024][T17055] chnl_net:caif_netlink_parms(): no params data found [ 449.676624][ T5159] Bluetooth: hci12: command tx timeout [ 449.767249][ T5159] Bluetooth: hci13: command tx timeout [ 449.777875][T17056] chnl_net:caif_netlink_parms(): no params data found [ 449.824518][T17053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.831920][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.859618][T17053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.936698][T17053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.943982][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.970363][T17053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.068603][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.076442][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.083966][T17055] bridge_slave_0: entered allmulticast mode [ 450.091958][T17055] bridge_slave_0: entered promiscuous mode [ 450.101786][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.109160][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.117069][T17055] bridge_slave_1: entered allmulticast mode [ 450.124952][T17055] bridge_slave_1: entered promiscuous mode [ 450.242793][T17056] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.251415][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.259101][T17056] bridge_slave_0: entered allmulticast mode [ 450.267283][T17056] bridge_slave_0: entered promiscuous mode [ 450.313163][T17056] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.321155][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.329503][T17056] bridge_slave_1: entered allmulticast mode [ 450.337628][T17056] bridge_slave_1: entered promiscuous mode [ 450.349593][T17055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.384437][T17053] hsr_slave_0: entered promiscuous mode [ 450.391438][T17053] hsr_slave_1: entered promiscuous mode [ 450.398738][T17053] debugfs: 'hsr0' already exists in 'hsr' [ 450.404583][T17053] Cannot create hsr debugfs directory [ 450.431983][T17055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.532471][T17055] team0: Port device team_slave_0 added [ 450.594674][T17056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.607426][T17055] team0: Port device team_slave_1 added [ 450.649151][T17056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.715189][T17055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.722989][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.750120][T17055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.792380][T17056] team0: Port device team_slave_0 added [ 450.818793][T17055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.826655][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.853556][T17055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.889405][T17056] team0: Port device team_slave_1 added [ 451.020401][T17056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.028195][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.055282][T17056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.095019][T17056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.103088][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.130156][T17056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.169819][T17055] hsr_slave_0: entered promiscuous mode [ 451.176804][T17055] hsr_slave_1: entered promiscuous mode [ 451.183261][T17055] debugfs: 'hsr0' already exists in 'hsr' [ 451.189903][T17055] Cannot create hsr debugfs directory [ 451.337222][T17056] hsr_slave_0: entered promiscuous mode [ 451.343784][T17056] hsr_slave_1: entered promiscuous mode [ 451.351253][T17056] debugfs: 'hsr0' already exists in 'hsr' [ 451.357292][T17056] Cannot create hsr debugfs directory [ 451.446269][ T5159] Bluetooth: hci10: command tx timeout [ 451.596040][ T5159] Bluetooth: hci11: command tx timeout [ 451.756189][ T5159] Bluetooth: hci12: command tx timeout [ 451.836250][ T5159] Bluetooth: hci13: command tx timeout [ 453.515919][ T5159] Bluetooth: hci10: command tx timeout [ 453.676081][ T5159] Bluetooth: hci11: command tx timeout [ 453.836857][ T5159] Bluetooth: hci12: command tx timeout [ 453.916205][ T5159] Bluetooth: hci13: command tx timeout [ 455.597279][ T5159] Bluetooth: hci10: command tx timeout [ 455.755993][ T5159] Bluetooth: hci11: command tx timeout [ 455.916029][ T5159] Bluetooth: hci12: command tx timeout [ 455.996382][ T5159] Bluetooth: hci13: command tx timeout [ 470.316953][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 360 seconds [ 470.328205][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 360 seconds [ 470.339470][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 360 seconds [ 470.351336][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 360 seconds [ 491.316909][ T5851] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 491.325480][ T5851] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 491.335424][ T5851] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 491.347720][ T5851] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 491.356877][ T5851] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 491.399525][T17084] lo speed is unknown, defaulting to 1000 [ 491.408086][T17084] lo speed is unknown, defaulting to 1000 [ 491.760036][T17084] chnl_net:caif_netlink_parms(): no params data found [ 491.863221][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.871186][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.878902][T17084] bridge_slave_0: entered allmulticast mode [ 491.887045][T17084] bridge_slave_0: entered promiscuous mode [ 491.896232][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.903394][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.911479][T17084] bridge_slave_1: entered allmulticast mode [ 491.920528][T17084] bridge_slave_1: entered promiscuous mode [ 491.963721][T17084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.976972][T17084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.019064][T17084] team0: Port device team_slave_0 added [ 492.028654][T17084] team0: Port device team_slave_1 added [ 492.069928][T17084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.077348][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.104198][T17084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.119152][T17084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.126602][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.153767][T17084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.217808][T17084] hsr_slave_0: entered promiscuous mode [ 492.224957][T17084] hsr_slave_1: entered promiscuous mode [ 492.231839][T17084] debugfs: 'hsr0' already exists in 'hsr' [ 492.238085][T17084] Cannot create hsr debugfs directory [ 493.436970][ T5851] Bluetooth: hci14: command tx timeout [ 493.516001][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 495.516149][ T5159] Bluetooth: hci14: command tx timeout [ 497.595927][ T5159] Bluetooth: hci14: command tx timeout [ 499.676374][ T5159] Bluetooth: hci14: command tx timeout [ 500.401764][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 390 seconds [ 500.414270][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 390 seconds [ 500.425786][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 390 seconds [ 500.437489][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 390 seconds [ 507.023095][ T5851] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 507.033443][ T5851] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 507.042565][ T5851] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 507.051221][ T5851] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 507.059453][ T5851] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 507.119572][ T5159] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 507.125188][T17094] lo speed is unknown, defaulting to 1000 [ 507.130654][ T5159] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 507.134889][T17094] lo speed is unknown, defaulting to 1000 [ 507.142279][ T5159] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 507.154851][ T5159] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 507.163238][ T5159] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 507.219330][T17096] lo speed is unknown, defaulting to 1000 [ 507.379155][T17096] lo speed is unknown, defaulting to 1000 [ 507.836180][T17094] chnl_net:caif_netlink_parms(): no params data found [ 508.323686][ T5851] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 508.333806][ T5851] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 508.342583][ T5851] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 508.367901][ T5851] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 508.376449][ T5851] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 508.425354][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.434935][ T5851] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 508.435125][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.450505][ T5851] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 508.459559][ T5851] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 508.463072][T17094] bridge_slave_0: entered allmulticast mode [ 508.486507][ T5851] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 508.488483][T17094] bridge_slave_0: entered promiscuous mode [ 508.506068][ T5851] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 508.530343][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.539207][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.546642][T17094] bridge_slave_1: entered allmulticast mode [ 508.555237][T17094] bridge_slave_1: entered promiscuous mode [ 508.586191][T17096] chnl_net:caif_netlink_parms(): no params data found [ 508.653654][T17108] lo speed is unknown, defaulting to 1000 [ 508.658593][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.674113][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.742863][T17108] lo speed is unknown, defaulting to 1000 [ 508.806336][T17094] team0: Port device team_slave_0 added [ 508.826803][T17094] team0: Port device team_slave_1 added [ 508.833189][T17110] lo speed is unknown, defaulting to 1000 [ 509.017969][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.025045][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.052412][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.065146][T17096] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.073996][T17096] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.081471][T17096] bridge_slave_0: entered allmulticast mode [ 509.090398][T17096] bridge_slave_0: entered promiscuous mode [ 509.100044][T17096] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.107563][T17096] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.114846][T17096] bridge_slave_1: entered allmulticast mode [ 509.121233][ T5851] Bluetooth: hci15: command tx timeout [ 509.130622][T17096] bridge_slave_1: entered promiscuous mode [ 509.164278][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.171794][T17110] lo speed is unknown, defaulting to 1000 [ 509.172885][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.206172][ T5851] Bluetooth: hci16: command tx timeout [ 509.219443][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.334341][T17096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.370000][T17096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.522128][T17096] team0: Port device team_slave_0 added [ 509.538929][T17094] hsr_slave_0: entered promiscuous mode [ 509.546555][T17094] hsr_slave_1: entered promiscuous mode [ 509.553266][T17094] debugfs: 'hsr0' already exists in 'hsr' [ 509.559368][T17094] Cannot create hsr debugfs directory [ 509.627651][T17096] team0: Port device team_slave_1 added [ 509.761544][T17096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.769441][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.797859][T17096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.811849][T17096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.818909][T17096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.845235][T17096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.145258][T17096] hsr_slave_0: entered promiscuous mode [ 510.153769][T17096] hsr_slave_1: entered promiscuous mode [ 510.161027][T17096] debugfs: 'hsr0' already exists in 'hsr' [ 510.167382][T17096] Cannot create hsr debugfs directory [ 510.190600][T17108] chnl_net:caif_netlink_parms(): no params data found [ 510.477636][ T5851] Bluetooth: hci17: command tx timeout [ 510.605901][T17110] chnl_net:caif_netlink_parms(): no params data found [ 510.636859][ T5851] Bluetooth: hci18: command tx timeout [ 510.656723][T17108] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.663881][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.672423][T17108] bridge_slave_0: entered allmulticast mode [ 510.680958][T17108] bridge_slave_0: entered promiscuous mode [ 510.741090][T17108] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.754240][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.762188][T17108] bridge_slave_1: entered allmulticast mode [ 510.771466][T17108] bridge_slave_1: entered promiscuous mode [ 510.912522][T17108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.943541][T17110] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.951052][T17110] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.958973][T17110] bridge_slave_0: entered allmulticast mode [ 510.968045][T17110] bridge_slave_0: entered promiscuous mode [ 510.981302][T17108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.010831][T17110] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.018651][T17110] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.026993][T17110] bridge_slave_1: entered allmulticast mode [ 511.034450][T17110] bridge_slave_1: entered promiscuous mode [ 511.153487][T17110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.167288][T17108] team0: Port device team_slave_0 added [ 511.179010][T17110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.196235][ T5851] Bluetooth: hci15: command tx timeout [ 511.213827][T17108] team0: Port device team_slave_1 added [ 511.276623][ T5851] Bluetooth: hci16: command tx timeout [ 511.322683][T17108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.331221][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.359001][T17108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.384769][T17110] team0: Port device team_slave_0 added [ 511.392383][T17108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.399927][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.432252][T17108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.457161][T17110] team0: Port device team_slave_1 added [ 511.562103][T17108] hsr_slave_0: entered promiscuous mode [ 511.569858][T17108] hsr_slave_1: entered promiscuous mode [ 511.577805][T17108] debugfs: 'hsr0' already exists in 'hsr' [ 511.583592][T17108] Cannot create hsr debugfs directory [ 511.591313][T17110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.599220][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.625517][T17110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.638956][T17110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.646805][T17110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.673277][T17110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.885435][T17110] hsr_slave_0: entered promiscuous mode [ 511.893544][T17110] hsr_slave_1: entered promiscuous mode [ 511.900770][T17110] debugfs: 'hsr0' already exists in 'hsr' [ 511.907154][T17110] Cannot create hsr debugfs directory [ 512.556789][T17128] Bluetooth: hci17: command tx timeout [ 512.716276][T17128] Bluetooth: hci18: command tx timeout [ 513.276808][T17128] Bluetooth: hci15: command tx timeout [ 513.355826][T17128] Bluetooth: hci16: command tx timeout [ 514.006994][ T5159] Bluetooth: hci5: command 0x0406 tx timeout [ 514.008635][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 514.020252][T17128] Bluetooth: hci6: command 0x0406 tx timeout [ 514.028588][ T5851] Bluetooth: hci8: command 0x0406 tx timeout [ 514.636194][ T5848] Bluetooth: hci17: command tx timeout [ 514.796460][ T5848] Bluetooth: hci18: command tx timeout [ 515.356295][ T5848] Bluetooth: hci15: command tx timeout [ 515.436190][ T5848] Bluetooth: hci16: command tx timeout [ 516.716796][ T5848] Bluetooth: hci17: command tx timeout [ 516.876107][ T5848] Bluetooth: hci18: command tx timeout [ 530.482872][ T97] block nbd0: Possible stuck request ffff88802544e000: control (read@0,1024B). Runtime 420 seconds [ 530.494205][ T97] block nbd0: Possible stuck request ffff88802544e1c0: control (read@1024,1024B). Runtime 420 seconds [ 530.505377][ T97] block nbd0: Possible stuck request ffff88802544e380: control (read@2048,1024B). Runtime 420 seconds [ 530.517344][ T97] block nbd0: Possible stuck request ffff88802544e540: control (read@3072,1024B). Runtime 420 seconds [ 531.756151][ T31] INFO: task syz.0.2881:16965 blocked for more than 143 seconds. [ 531.765270][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 531.772789][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.782065][ T31] task:syz.0.2881 state:D stack:25608 pid:16965 tgid:16962 ppid:5837 task_flags:0x480140 flags:0x00004004 [ 531.794771][ T31] Call Trace: [ 531.798193][ T31] [ 531.801272][ T31] __schedule+0x1737/0x4d30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.805871][ T31] ? __lock_acquire+0xab9/0xd20 [ 531.815672][ T31] ? __lock_acquire+0xab9/0xd20 [ 531.820615][ T31] ? schedule+0x165/0x360 [ 531.825123][ T31] ? __lock_acquire+0xab9/0xd20 [ 531.830148][ T31] ? __pfx___schedule+0x10/0x10 [ 531.835059][ T31] ? schedule+0x91/0x360 [ 531.839593][ T31] schedule+0x165/0x360 [ 531.843797][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 531.866141][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 531.872300][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 531.894376][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 531.901187][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 531.915824][ T31] ? nbd_set_size+0x2ab/0x6a0 [ 531.920558][ T31] nbd_set_size+0x47e/0x6a0 [ 531.925100][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 531.930634][ T31] ? nla_memcpy+0x5b/0xc0 [ 531.935006][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 531.940202][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 531.947471][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 531.953507][ T31] ? bpf_lsm_capable+0x9/0x20 [ 531.979574][ T31] ? security_capable+0x7e/0x2e0 [ 531.984730][ T31] ? radix_tree_lookup+0x240/0x290 [ 532.028650][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 532.034127][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 532.060856][ T31] ? __nla_parse+0x40/0x60 [ 532.065350][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 532.072251][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 532.078376][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.084527][ T31] ? stack_trace_save+0x9c/0xe0 [ 532.089730][ T31] genl_rcv_msg+0x60e/0x790 [ 532.094305][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.099774][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 532.105530][ T31] netlink_rcv_skb+0x205/0x470 [ 532.110483][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.115360][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.120459][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.125972][ T31] ? down_read+0x1ad/0x2e0 [ 532.130454][ T31] genl_rcv+0x28/0x40 [ 532.134516][ T31] netlink_unicast+0x82c/0x9e0 [ 532.139433][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.144865][ T31] ? netlink_sendmsg+0x642/0xb30 [ 532.150339][ T31] netlink_sendmsg+0x805/0xb30 [ 532.155257][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.161050][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.166121][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 532.171096][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.176455][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.181875][ T31] __sock_sendmsg+0x219/0x270 [ 532.186733][ T31] ____sys_sendmsg+0x505/0x830 [ 532.191532][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.196927][ T31] ? import_iovec+0x74/0xa0 [ 532.201462][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 532.206585][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.211860][ T31] ? __fget_files+0x2a/0x420 [ 532.216543][ T31] ? __fget_files+0x3a0/0x420 [ 532.221417][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 532.226543][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.232061][ T31] ? rcu_is_watching+0x15/0xb0 [ 532.237082][ T31] ? do_syscall_64+0xbe/0x3b0 [ 532.241885][ T31] do_syscall_64+0xfa/0x3b0 [ 532.246596][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.251826][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.257959][ T31] ? clear_bhb_loop+0x60/0xb0 [ 532.262663][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.268754][ T31] RIP: 0033:0x7f81aab8eb69 [ 532.273215][ T31] RSP: 002b:00007f81ab9d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.281726][ T31] RAX: ffffffffffffffda RBX: 00007f81aadb5fa0 RCX: 00007f81aab8eb69 [ 532.289918][ T31] RDX: 0000000000008094 RSI: 00002000000011c0 RDI: 000000000000000b [ 532.298098][ T31] RBP: 00007f81aac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 532.306607][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.314599][ T31] R13: 0000000000000000 R14: 00007f81aadb5fa0 R15: 00007fff0301c068 [ 532.323362][ T31] [ 532.326520][ T31] INFO: task syz.3.2885:16974 blocked for more than 143 seconds. [ 532.334270][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 532.341758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.350682][ T31] task:syz.3.2885 state:D stack:25928 pid:16974 tgid:16972 ppid:5841 task_flags:0x400140 flags:0x00004004 [ 532.362691][ T31] Call Trace: [ 532.366070][ T31] [ 532.369028][ T31] __schedule+0x1737/0x4d30 [ 532.373586][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.378510][ T31] ? schedule+0x165/0x360 [ 532.382867][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.387890][ T31] ? __pfx___schedule+0x10/0x10 [ 532.392799][ T31] ? schedule+0x91/0x360 [ 532.397321][ T31] schedule+0x165/0x360 [ 532.401509][ T31] schedule_preempt_disabled+0x13/0x30 [ 532.407379][ T31] __mutex_lock+0x7e3/0x1340 [ 532.412009][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 532.417342][ T31] ? __mutex_lock+0x5b6/0x1340 [ 532.422155][ T31] ? genl_rcv_msg+0x10d/0x790 [ 532.427110][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 532.432267][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 532.437483][ T31] ? radix_tree_lookup+0x240/0x290 [ 532.442629][ T31] genl_rcv_msg+0x10d/0x790 [ 532.447390][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.452468][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 532.457552][ T31] ? __asan_memcpy+0x40/0x70 [ 532.462194][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 532.467885][ T31] netlink_rcv_skb+0x205/0x470 [ 532.472694][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.478163][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.483397][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.488995][ T31] ? down_read+0x1ad/0x2e0 [ 532.493443][ T31] genl_rcv+0x28/0x40 [ 532.497782][ T31] netlink_unicast+0x82c/0x9e0 [ 532.502668][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.508127][ T31] ? netlink_sendmsg+0x642/0xb30 [ 532.513474][ T31] ? skb_put+0x11b/0x210 [ 532.517804][ T31] netlink_sendmsg+0x805/0xb30 [ 532.522602][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.528134][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 532.533111][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.538485][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.544122][ T31] __sock_sendmsg+0x219/0x270 [ 532.549185][ T31] __sys_sendto+0x3bd/0x520 [ 532.553758][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 532.559297][ T31] ? count_memcg_event_mm+0x21/0x260 [ 532.564682][ T31] ? exc_page_fault+0x76/0xf0 [ 532.569561][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 532.574983][ T31] __x64_sys_sendto+0xde/0x100 [ 532.579915][ T31] do_syscall_64+0xfa/0x3b0 [ 532.584558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.589929][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.596140][ T31] ? clear_bhb_loop+0x60/0xb0 [ 532.600864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.606998][ T31] RIP: 0033:0x7f601d7909fc [ 532.611598][ T31] RSP: 002b:00007f601e650ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 532.620109][ T31] RAX: ffffffffffffffda RBX: 00007f601e650fc0 RCX: 00007f601d7909fc [ 532.628442][ T31] RDX: 000000000000001c RSI: 00007f601e651010 RDI: 0000000000000007 [ 532.643591][ T31] RBP: 0000000000000000 R08: 00007f601e650f14 R09: 000000000000000c [ 532.651700][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 532.659763][ T31] R13: 00007f601e650f68 R14: 00007f601e651010 R15: 0000000000000000 [ 532.667965][ T31] [ 532.671042][ T31] INFO: task syz.4.2888:16983 blocked for more than 144 seconds. [ 532.678830][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 532.686209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.694915][ T31] task:syz.4.2888 state:D stack:28360 pid:16983 tgid:16982 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 532.707057][ T31] Call Trace: [ 532.710355][ T31] [ 532.713283][ T31] __schedule+0x1737/0x4d30 [ 532.718271][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.723165][ T31] ? schedule+0x165/0x360 [ 532.727666][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.732639][ T31] ? __pfx___schedule+0x10/0x10 [ 532.737839][ T31] ? schedule+0x91/0x360 [ 532.742297][ T31] schedule+0x165/0x360 [ 532.746657][ T31] schedule_preempt_disabled+0x13/0x30 [ 532.752585][ T31] __mutex_lock+0x7e3/0x1340 [ 532.757365][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 532.762545][ T31] ? __mutex_lock+0x5b6/0x1340 [ 532.767510][ T31] ? genl_rcv_msg+0x10d/0x790 [ 532.772216][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 532.777655][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 532.782898][ T31] ? radix_tree_lookup+0x240/0x290 [ 532.788203][ T31] genl_rcv_msg+0x10d/0x790 [ 532.792996][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.798459][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 532.803522][ T31] ? __asan_memcpy+0x40/0x70 [ 532.808480][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 532.813908][ T31] netlink_rcv_skb+0x205/0x470 [ 532.819085][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.823967][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.829158][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.834484][ T31] ? down_read+0x1ad/0x2e0 [ 532.839086][ T31] genl_rcv+0x28/0x40 [ 532.843091][ T31] netlink_unicast+0x82c/0x9e0 [ 532.847992][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.853314][ T31] ? netlink_sendmsg+0x642/0xb30 [ 532.858360][ T31] ? skb_put+0x11b/0x210 [ 532.862626][ T31] netlink_sendmsg+0x805/0xb30 [ 532.867573][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.872896][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 532.878189][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.883516][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.889020][ T31] __sock_sendmsg+0x219/0x270 [ 532.893817][ T31] __sys_sendto+0x3bd/0x520 [ 532.898406][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 532.903574][ T31] ? count_memcg_event_mm+0x21/0x260 [ 532.909087][ T31] ? rcu_is_watching+0x15/0xb0 [ 532.913878][ T31] __x64_sys_sendto+0xde/0x100 [ 532.918937][ T31] do_syscall_64+0xfa/0x3b0 [ 532.923468][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.928882][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.934979][ T31] ? clear_bhb_loop+0x60/0xb0 [ 532.939732][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.945816][ T31] RIP: 0033:0x7f0398b909fc [ 532.950260][ T31] RSP: 002b:00007f0399a4fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 532.958944][ T31] RAX: ffffffffffffffda RBX: 00007f0399a4ffc0 RCX: 00007f0398b909fc [ 532.967038][ T31] RDX: 0000000000000020 RSI: 00007f0399a50010 RDI: 0000000000000003 [ 532.975030][ T31] RBP: 0000000000000000 R08: 00007f0399a4ff14 R09: 000000000000000c [ 532.983178][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 532.991426][ T31] R13: 00007f0399a4ff68 R14: 00007f0399a50010 R15: 0000000000000000 [ 532.999506][ T31] [ 533.002577][ T31] INFO: task syz.2.2889:16988 blocked for more than 144 seconds. [ 533.015913][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 533.023572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.032413][ T31] task:syz.2.2889 state:D stack:28112 pid:16988 tgid:16984 ppid:5836 task_flags:0x400140 flags:0x00004004 [ 533.044814][ T31] Call Trace: [ 533.048264][ T31] [ 533.051226][ T31] __schedule+0x1737/0x4d30 [ 533.055835][ T31] ? arch_stack_walk+0xfc/0x150 [ 533.060829][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.065830][ T31] ? schedule+0x165/0x360 [ 533.070371][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.075276][ T31] ? __pfx___schedule+0x10/0x10 [ 533.080258][ T31] ? schedule+0x91/0x360 [ 533.084541][ T31] schedule+0x165/0x360 [ 533.088826][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.094336][ T31] __mutex_lock+0x7e3/0x1340 [ 533.099037][ T31] ? __mutex_lock+0x5b6/0x1340 [ 533.103844][ T31] ? genl_rcv_msg+0x10d/0x790 [ 533.108667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.113726][ T31] ? stack_trace_save+0x9c/0xe0 [ 533.118962][ T31] ? radix_tree_lookup+0x240/0x290 [ 533.124380][ T31] genl_rcv_msg+0x10d/0x790 [ 533.129043][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.133951][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.139091][ T31] netlink_rcv_skb+0x205/0x470 [ 533.143906][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.148929][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.154264][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.159746][ T31] ? down_read+0x1ad/0x2e0 [ 533.164279][ T31] genl_rcv+0x28/0x40 [ 533.168363][ T31] netlink_unicast+0x82c/0x9e0 [ 533.173353][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.178748][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.183823][ T31] ? skb_put+0x11b/0x210 [ 533.188167][ T31] netlink_sendmsg+0x805/0xb30 [ 533.192999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.198759][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 533.204085][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.209469][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.214810][ T31] __sock_sendmsg+0x219/0x270 [ 533.219825][ T31] __sys_sendto+0x3bd/0x520 [ 533.224501][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 533.229988][ T31] ? count_memcg_event_mm+0x21/0x260 [ 533.235322][ T31] ? exc_page_fault+0x76/0xf0 [ 533.240102][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 533.245753][ T31] __x64_sys_sendto+0xde/0x100 [ 533.250859][ T31] do_syscall_64+0xfa/0x3b0 [ 533.255431][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.260738][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.267395][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.272124][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.278160][ T31] RIP: 0033:0x7f22523909fc [ 533.282610][ T31] RSP: 002b:00007f2253268ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.291278][ T31] RAX: ffffffffffffffda RBX: 00007f2253268fc0 RCX: 00007f22523909fc [ 533.299390][ T31] RDX: 0000000000000024 RSI: 00007f2253269010 RDI: 0000000000000009 [ 533.307510][ T31] RBP: 0000000000000000 R08: 00007f2253268f14 R09: 000000000000000c [ 533.315743][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 533.323756][ T31] R13: 00007f2253268f68 R14: 00007f2253269010 R15: 0000000000000000 [ 533.332041][ T31] [ 533.335078][ T31] INFO: task syz-executor:16994 blocked for more than 144 seconds. [ 533.343067][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 533.350608][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.359795][ T31] task:syz-executor state:D stack:22424 pid:16994 tgid:16994 ppid:1 task_flags:0x400140 flags:0x00004004 [ 533.371921][ T31] Call Trace: [ 533.375203][ T31] [ 533.378255][ T31] __schedule+0x1737/0x4d30 [ 533.382798][ T31] ? __kernel_text_address+0xd/0x40 [ 533.388146][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.393029][ T31] ? schedule+0x165/0x360 [ 533.397430][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.402333][ T31] ? __pfx___schedule+0x10/0x10 [ 533.407401][ T31] ? schedule+0x91/0x360 [ 533.411754][ T31] schedule+0x165/0x360 [ 533.415986][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.421473][ T31] __mutex_lock+0x7e3/0x1340 [ 533.426228][ T31] ? __mutex_lock+0x5b6/0x1340 [ 533.431610][ T31] ? genl_rcv_msg+0x10d/0x790 [ 533.436383][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.441542][ T31] ? stack_trace_save+0x9c/0xe0 [ 533.446582][ T31] ? radix_tree_lookup+0x240/0x290 [ 533.451828][ T31] genl_rcv_msg+0x10d/0x790 [ 533.456437][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.461422][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.466571][ T31] netlink_rcv_skb+0x205/0x470 [ 533.471711][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.476647][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.481716][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.487127][ T31] ? down_read+0x1ad/0x2e0 [ 533.491568][ T31] genl_rcv+0x28/0x40 [ 533.495591][ T31] netlink_unicast+0x82c/0x9e0 [ 533.500402][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.506320][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.511307][ T31] ? skb_put+0x11b/0x210 [ 533.515941][ T31] netlink_sendmsg+0x805/0xb30 [ 533.520789][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.526168][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 533.531331][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.536947][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.542477][ T31] __sock_sendmsg+0x219/0x270 [ 533.547599][ T31] __sys_sendto+0x3bd/0x520 [ 533.552165][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 533.557343][ T31] ? fd_install+0x97/0x540 [ 533.561884][ T31] ? fd_install+0x30d/0x540 [ 533.566692][ T31] __x64_sys_sendto+0xde/0x100 [ 533.571706][ T31] do_syscall_64+0xfa/0x3b0 [ 533.576373][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.581686][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.587882][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.592719][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.598993][ T31] RIP: 0033:0x7f8ead3909fc [ 533.603587][ T31] RSP: 002b:00007ffcc0dcf3c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.612389][ T31] RAX: ffffffffffffffda RBX: 00007f8eae0e4620 RCX: 00007f8ead3909fc [ 533.620548][ T31] RDX: 0000000000000020 RSI: 00007f8eae0e4670 RDI: 0000000000000005 [ 533.629501][ T31] RBP: 0000000000000000 R08: 00007ffcc0dcf414 R09: 000000000000000c [ 533.637980][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 533.646170][ T31] R13: 00007ffcc0dcf468 R14: 00007f8eae0e4670 R15: 0000000000000000 [ 533.654279][ T31] [ 533.657509][ T31] [ 533.657509][ T31] Showing all locks held in the system: [ 533.665256][ T31] 1 lock held by khungtaskd/31: [ 533.670402][ T31] #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 533.682610][ T31] 2 locks held by getty/5597: [ 533.688353][ T31] #0: ffff88814c9af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 533.699157][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 533.709463][ T31] 1 lock held by udevd/5888: [ 533.714066][ T31] #0: ffff888142f8c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 533.723666][ T31] 2 locks held by kworker/u8:14/7168: [ 533.730346][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.743219][ T31] #1: ffffc9001d18fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.756680][ T31] 6 locks held by syz.0.2881/16965: [ 533.761913][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.770454][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.779735][ T31] #2: ffff888025394230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 533.790495][ T31] #3: ffff888142f75f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 533.800284][ T31] #4: ffff888142f758f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 533.812721][ T31] #5: ffff888142f75930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 533.825230][ T31] 2 locks held by syz.3.2885/16974: [ 533.830718][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.839476][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.848794][ T31] 2 locks held by syz.4.2888/16983: [ 533.854145][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.862553][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.871764][ T31] 2 locks held by syz.2.2889/16988: [ 533.877089][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.885407][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.894430][ T31] 2 locks held by syz-executor/16994: [ 533.899866][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.908249][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.917510][ T31] 2 locks held by syz-executor/17006: [ 533.923191][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.931500][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.940660][ T31] 2 locks held by syz-executor/17007: [ 533.946434][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.954680][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.964196][ T31] 2 locks held by syz-executor/17009: [ 533.969780][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.978101][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 533.987376][ T31] 2 locks held by syz-executor/17012: [ 533.992773][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.001489][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.010781][ T31] 2 locks held by syz-executor/17039: [ 534.016322][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.024565][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.033715][ T31] 2 locks held by syz-executor/17051: [ 534.039168][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.047896][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.057036][ T31] 2 locks held by syz-executor/17053: [ 534.062451][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.070888][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.080451][ T31] 2 locks held by syz-executor/17055: [ 534.086079][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.094316][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.103513][ T31] 2 locks held by syz-executor/17056: [ 534.109132][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.117555][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.126744][ T31] 2 locks held by syz-executor/17084: [ 534.132138][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.140491][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.149894][ T31] 2 locks held by syz-executor/17094: [ 534.155372][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.163808][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.172935][ T31] 2 locks held by syz-executor/17096: [ 534.178404][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.186919][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.196020][ T31] 2 locks held by syz-executor/17108: [ 534.201413][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.209760][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.218885][ T31] 2 locks held by syz-executor/17110: [ 534.224271][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.232597][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.242184][ T31] [ 534.244657][ T31] ============================================= [ 534.244657][ T31] [ 534.253582][ T31] NMI backtrace for cpu 0 [ 534.253597][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 534.253612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.253620][ T31] Call Trace: [ 534.253625][ T31] [ 534.253631][ T31] dump_stack_lvl+0x189/0x250 [ 534.253651][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.253664][ T31] ? __pfx__printk+0x10/0x10 [ 534.253685][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 534.253702][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 534.253717][ T31] ? __pfx__printk+0x10/0x10 [ 534.253734][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.253754][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 534.253770][ T31] watchdog+0xf93/0xfe0 [ 534.253789][ T31] ? watchdog+0x1de/0xfe0 [ 534.253808][ T31] kthread+0x70e/0x8a0 [ 534.253823][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.253839][ T31] ? __pfx_kthread+0x10/0x10 [ 534.253853][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.253868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.253884][ T31] ? __pfx_kthread+0x10/0x10 [ 534.253897][ T31] ret_from_fork+0x3fc/0x770 [ 534.253917][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.253938][ T31] ? __switch_to_asm+0x39/0x70 [ 534.253951][ T31] ? __switch_to_asm+0x33/0x70 [ 534.253963][ T31] ? __pfx_kthread+0x10/0x10 [ 534.253977][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.253999][ T31] [ 534.254003][ T31] Sending NMI from CPU 0 to CPUs 1: [ 534.404591][ C1] NMI backtrace for cpu 1 [ 534.404612][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 534.404631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.404640][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 534.404668][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 534.404681][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 534.404697][ C1] RAX: c33d683e73e09c00 RBX: ffffffff81969b18 RCX: c33d683e73e09c00 [ 534.404709][ C1] RDX: 0000000000000001 RSI: ffffffff8d9790f8 RDI: ffffffff8be30a00 [ 534.404720][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 534.404731][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa07af0 [ 534.404742][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad3b40 [ 534.404753][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 534.404766][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.404777][ C1] CR2: 000055d0163fa000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 534.404793][ C1] Call Trace: [ 534.404800][ C1] [ 534.404807][ C1] default_idle+0x13/0x20 [ 534.404822][ C1] default_idle_call+0x74/0xb0 [ 534.404838][ C1] do_idle+0x1e8/0x510 [ 534.404864][ C1] ? __pfx_do_idle+0x10/0x10 [ 534.404894][ C1] cpu_startup_entry+0x44/0x60 [ 534.404916][ C1] start_secondary+0x101/0x110 [ 534.404937][ C1] common_startup_64+0x13e/0x147 [ 534.404963][ C1] [ 534.405667][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 534.405683][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 534.405707][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.405718][ T31] Call Trace: [ 534.405726][ T31] [ 534.405734][ T31] dump_stack_lvl+0x99/0x250 [ 534.405757][ T31] ? __asan_memcpy+0x40/0x70 [ 534.405781][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.405801][ T31] ? __pfx__printk+0x10/0x10 [ 534.405836][ T31] panic+0x2db/0x790 [ 534.405861][ T31] ? __pfx_panic+0x10/0x10 [ 534.405881][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 534.405910][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 534.405941][ T31] watchdog+0xfd2/0xfe0 [ 534.405972][ T31] ? watchdog+0x1de/0xfe0 [ 534.406003][ T31] kthread+0x70e/0x8a0 [ 534.406028][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.406051][ T31] ? __pfx_kthread+0x10/0x10 [ 534.406074][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.406097][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.406119][ T31] ? __pfx_kthread+0x10/0x10 [ 534.406141][ T31] ret_from_fork+0x3fc/0x770 [ 534.406184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.406218][ T31] ? __switch_to_asm+0x39/0x70 [ 534.406238][ T31] ? __switch_to_asm+0x33/0x70 [ 534.406257][ T31] ? __pfx_kthread+0x10/0x10 [ 534.406279][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.406315][ T31] [ 534.710761][ T31] Kernel Offset: disabled [ 534.715214][ T31] Rebooting in 86400 seconds..