last executing test programs: 18.164245009s ago: executing program 4 (id=1078): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a"], 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x200, 0x7fff, 0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)={'b', ' *:* ', 'rw\x00'}, 0x9) (async) write$cgroup_devices(r7, &(0x7f0000000200)={'b', ' *:* ', 'rw\x00'}, 0x9) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}}, 0x4000) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4044010) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) 18.02885657s ago: executing program 0 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000fbff0000050000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffffffffffffffff00"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0x1, &(0x7f0000000100)="71dd380e65469b5f53056d14b24f391fa304541b086cdf28d74cdce75461a3941eb14d30c4d60c0ac7261d98693ee6bc00bec5501b2349f56b34ef84ae78b6366dfd47b0ff6cb61bdd34601fc2587ad64940030000e41471fc2504c0ffcbe22deeff87edce88365c118cb77bf9539104937b26d0121e4ed575fa7a0ccca86f8768a5258c88a675e01880ef0d904ac6ff2d2340846605e6193e470f36fdfbf7c72f37bd158f07f22dee2dbd5a0d3c917de0f0dd8c9d", &(0x7f0000002300)=""/4085}, 0x20) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) 17.810876644s ago: executing program 0 (id=1083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x7c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0x1, 0x8}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) 17.583037771s ago: executing program 4 (id=1086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r5, 0x6, 0xdb12a9e8eb45100c, &(0x7f0000000080), 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="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", 0x121, 0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020701010000000000000000000000000c00078006010140000017f0e35a11f366b29edc3ae0dd7584d440fa0bf97352035b7232217049233d6ee43f026bbe0ded1756628c60f06db8ce01742d9e05e343a4b9c8cd49c2376b4ace3dff31c8e63b13e107fe5cdf78f91f81a754aa44562e1d922ee3d76c6f6440ed05f3"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f0000000000)=[{r7, 0x2000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRESOCT=r8, @ANYRESOCT=0x0, @ANYRES8=r8], 0x144c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 17.552914409s ago: executing program 0 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@raw=[@exit, @alu={0x4, 0x0, 0x7, 0x5, 0x4, 0x50, 0xfffffffffffffff0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x6, 0xa8, &(0x7f00000003c0)=""/168, 0x41000, 0x8, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0x3ff, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, r1], &(0x7f0000000540)=[{0x3, 0x3, 0x7, 0x2}], 0x10, 0x7}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 17.198383589s ago: executing program 3 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00174e0000000400000004000000220000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$inet(0x2, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r2, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000001c0), 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000140), &(0x7f00000004c0)=@udp6}, 0x20) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r6, 0x2}, 0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYRESHEX=r5, @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a", @ANYRESHEX=r5], 0x4c}}, 0x0) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000080)={0x40, 0x1, 0x9, 0x1, 0x4c, 0x19, 0x14, "a35f57e9daad7c8972c759c575772994679c0024", "28082a603362d0dd2bd5f58d9e9948600a2a0177"}) (async) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="2fe5afbf"]}]}, 0x1c}], 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r11, 0x800, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 17.186361592s ago: executing program 4 (id=1090): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 17.026500354s ago: executing program 3 (id=1092): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x2) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xfffd, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 16.92563749s ago: executing program 3 (id=1094): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 16.922102976s ago: executing program 4 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 16.721605151s ago: executing program 3 (id=1097): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025f6fd1cdf58850f3e8d2ba18d8e28594d5217cd172355eb58f223e0158270011c527a759983eaa72240ac253f9b909d1a325f82905e6fed0b202f87153004dbcc9b73f6c58b7876a37780b76f2e7894e7", 0x95) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x44001) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001240)={{r6}, "53c9ce40c333363a43b031d9f1eb32e464bc79f5eabcf5e81638325c645cb9c37d422902a1844ba81f774dd0d09a5b897d6a49ccbcd1e81303570dc6bec7b4b1dcff33721f1241cf4d7c34fc42bd407d8b3239e581cfd71990d55b100ac42e255c1d3e90d70f89eefe90d2ce7c2c47b638c5f04bb5a0ed97cbb6f0035ea52b1a8071123485684300179d091aa606c8f5ab7cab478ba60fad6a0e0a457274fefcb5e39519d9d8f1aa58ac7120b3ba0de9c41556b7b144e675ce05a7772879666cf63f7774c19010e59454363a2f6798202575839cdb1e04ea9097531e9665aa879377103c0b6fbe6d601558c6d148f0b5a371edd66c91938850325160ba5064523e3b1197268502b9c5148e86f99fb1aec5e17b87e8e6f02b789ed011f6a6244d968e392245c39542178bdac95f76027d37f65cc81b9af7439f97242cad43ab85af8ba04597865ea4dd3703a89bc942c4889ee52f271ca028af6bbb0e4259e98e229627d61615c6dedf171a4c515a6b0055c92b302acff1531d31f524a5c87fe54f5cb5cda1953b06d07d47710c5acd4d569d9ec4a7ddd89d780bb7a9c686391bd0e73ba3e4a3e7b9c9cb5ab1692740edd321b3bef45cdcb53080272011c6c7e528ea7594123f6c505d97a83a5cacb7f9715d5cddf039ec29edba4b34570ebf1e2f6403ae3e68ac2d44dee96becae88ff73ec6a341d20f22e6e7d68d33c6acbda5dc6b299fbac2c24266a65b0e24baed33f495b401f3bb6079491af017cbf2b2a246959fc3f571569c06051d584abeab11200d7d69e8182fbfc791398481fe19821b4b0dbadaec5cb1bb253d1c854a1e33b9d4cdb1df3c8b298ff8e792dc8eb968e56dfa9625d56e3d8e145acf9743d4e4a9b8c12920cfddc1611747ea90b1ee8437fcccdb5757711ca6a02c6bf0051fd509929729f89a83e5ddd440538c10baa4d890fbdd6e8ad261aad07f9670704c54e0acdbc73bcbd778e25dc6476984c9d0b12b28bce7d4ada45034fa44d597d00ab18352a34ffd738064d9a07df87c7376b8392e146343903c7f6d4f13a1f046b9adbab8e544d16163c4e235bdfeaaa3ee30905430c0eca4bdbe09e1c8d495490f0b37d64dde121fa2acde28d2a49b7a513b6be1dd12f214a5bcbccdf6814df509fa706341a4442a600137fe83a2e327d29223de2465cefe311553fe4e039d5850a0e8a1d6d413715fd6c120e222ca7df1e4d35726120ac8dc726858819df76b0780adec7905389cf82a9f33b531ec1d4dd84bdd1d5284f1568f1dbd4f5ac8856df9f47e768acb917a8ee96b0096b850188f1dec0f8fd2d86766186dfcf7b86934933b937da77105c92d6bc4a525195265c75e0e3d2399a9d8fa9712ebfe198a2673743dc5ac0d0670c3b28f46ccd3ecc5c60e6d6c07006a7b64ebfa661add51dd4094739bf1fd2b20f7ea09b78743bd452d57e8f323c07e0e296008d8220d87d6096c7fa9fe8c4fbcb0200b0e3552f7c7a654890a34a317f92d2083e39e24328027094ae57bd580e05a7ff24ed28320fb4a256449dc7718684ea7e6b96c32ea66a93565a03388b5e607a287c4fac13324bbda886ca99655d80621df55ad000e7287a8e54ae1728411f7728024744099b1ad1071d1fa5bd492fd47f77e73dcfd3d4b45b5c5358234b8e7b8a24f3d744aa0a907bf4962d78d5c9fcc05f04aa4ec19ed5ccfcb4c1b0c68605dbb4a7ba1114ea28dd1c94315be93ed783b5be909fdfc2e88873efcf15b1af04281b39ddcadb213304f851d1d19bd20f01e7f4beca8f6685d2856068af6485fb54f8686d5723a6e4c71d216c45ed5f177707a27c3a89de1f92f14cf0b49605befa7725cfbee39012229577eac30afe1aa64d096055da95b0907d8f7a8338cd2dd9e7c60119aeab9451dae390c12004da993a44f293ccea6031ab91b3deaed5a7455e56400112af70d76369cd83663efe96b6c5a33c04e6c8218667eb948f2b63ef483f1175149ee6985f83cf62840cec5691162695a94320052161614bbe5cafbcb9a61abbf8f61297a1b8423b35a0ce606a5dc85c4fb894aee835cd437542db0be28cac8a6d0fd4482d1d614f77ec0b8df4931e6b891fc8ef6d701d00dd923112d6d480647d6480b95d9c3ee57ea28bd81ec7c133aa7b691b6ca40be9798a69bf0b537abf53804446cb838eef25c50bda2373ee01a057601ba29532c9d7c31b61ca5937a396ffbf03642be68d443f77ecba58be72251ad3ee7c554852d045260f131b472db13b7b8750ee95223a878cd43b959c1eeeb8f3cd11f9b542d19ea57611ae7fc6e5a268f064e79893c044d634c87f2ebe61a9776a774c2dc94f693fae790bf520b66a2e58c5d1996a266133a2292a823a78843295ef1ddcde682b0b1144b94935494c9964a2e8d3e7cfa8db1a537dd5c0258c4d6c9ada44a09cafc84aaf1771fba70c611b78819a2bc4d860d165b38d93b2e79d28f64545a26fee140dd4399dba855a26e60e132e6630b211a8fa13a3533932bfdc0cb6c08a73fa2cafcbf50c6b3d3af65db19a1ce0b2764ac9c4b6a13c5e284d41fa8d3354752aa1bf82de8503ebc9347dafd3f01b08ae46d1205af917657e8833f33441973d4868922597239994591fcc404e27e325df470e03d2e5d793370e01e7b99df9a735db853ca9ecbfc5d27f10ef7e3fa3a2e815ac188de809a505345a3c549c2e997e3f4d5a983d124f73cb0ce2620f38c76a108db7da61cfb667fbace84054d238533b1b682b4431e60cd60c787fdefce343c44655364c151faa7d44f656c682bd77ee3971947ee76f9664b0d6685eabdf9b457e0f535376e1702ee7836416295627c8a8107628a131997ffcacc6a8c9af5b45a524face46fda55f4848705eecc3df6fcb4f14cf9c4a4bc961954ff1f52a415a970d94515c24d2e8de927fdd92228e812c5571400e4b32707a5e5bdcab4181b79653a1490e22b4b8a2edcdd4ceae39c11da5a0bf767ce638e6cf3119bf3ac821875ae7cbcd14fd758b704b37a16d8e9f53617e913858d87dd98476a9c3bfb30ffef92aaa8d1626ed21a621481666be4ae00650307f096408998522e2e16e106af9a6180a632c236248622ab5e07eee7924a8ff07120b32ee4c9a7e628e59c52777b0044932e9d9dae7062ec2b09b88b9d5f4d5fc32b8889ae22c8eea87c693abb6b89f53e090e600dcfd0431ad151e49bf8905740ae110c9f3b81dcf3c8b8acaf2d393b0a126642e6e1a89a510f5bb6d895e6d301892970902301c572e949efac24824d4f42997b8643cd9ef8da4f28c09af7f8ff96885ee61602daba16b825fe6dfe204f2f6e85b67c0a4fe4b9a558f8bcff15bcf68499bc7b51b340480c0e2bb3049f3f8a83bc2449c8fbb8db96777ec7c675309080b5a26268d2bea17b857640903baf061a5197767b8cb1eee617392dd7e2d95574ba39df5963d50c5ad906a3aff6896fd9198fbcdc6ba1f29d7a29091c9b29fbd4befa296890edac0c5fc7cf68dd79b491933d605377809c3354a63209dc40f0569eac96645d26498b135d263dddfa237ede3d636c8bd830506e0064ff5b2a2545bf3e23f0d3cf91825ab019aebd52a71dcbcb2330def0790c7a5321d18c497adfc71a7eef9868853b901c2bfab8350c210dbff59f79e15a583d86b57c70b448a8d488ecd9a84ce28ea709c5d02f5706a976d71c5765702c9342b705d0884368b75e5072e686daea7dffbb3869d385975c891e3371407f7e4f08b31cfffe53e44729d58938e85e6cf13ff8580cec377dcf1eaeda603204e7898e4acd549120622d22078d343630ca0a6f7c633268d504a10ed906bc965eb8987ca350af975e47c3577672de786f5e74a5efd775c97c69c32d75feece2a7c685f195efb88c62f73c7f3b84daefb38bcd333448eca2bdb35f38b90ebae5c3822e3913b22935ce807408669f919a92c9470ff861e5a59dec5b7a3560df4edbae7914a5301a2fde05d60285630969c49ccb73e5637674bad7088e477d6b0a921110d8ff697bcdd3bd95cf2078e437e65a8513a900baaa89b2b8b6a4592ff4899ec72aafaa1d10dd681338a268e94b3e28c9326ff030ea9aa9bbae40090d379626914695a21b6b6cbf07fcbc2008f429c96deb2d456a4f40fd5fcd7d931831c29d85b1dae040fc72cfdca524a1b52a58bd0d87fc48fda3c08ef7e3ae01cd28ffe622f32c7b88ff6f699e5d7a3ac9fcee5ab6c42fb7ffef21e203f7a14f7e974405c5f37db64ca659fd2f759fded1ab84234c0c42361b67828d58d3e5a7018cde999306510c3bc608226d890802628fe22e6b24dcc3a8b2a5a7a9f3b5430b439d30436009050d0f9162ab4593adf1ccead80e40e41e1d93d47fa91362e8ea8a0607e171b5ff3fc7650175a524abda81542d246dff2d4765f1429bc3229d04cc7846b89578986bd4dfdf71e6ea952cef860bf977444e576fc7fb23de6be347e9c43a932c64417c8a557a70c61d3f9165ccd1c6ad62905a40678dbcc7e24b99ea5e7206e4a0a9c61e87f9d1e8aa474b652451449f77ab1f98031c36b3b18c172546fc0fc48dccd1311c87ed4856849898036dd5ee3b865f0e96bbf2bc80fb7b497b2d5379e12fb653c3690bd970da27ccf44545ce5b8a927424190bce4ff010e6831da196d9a6c74bc9bfaf505129ed4256e8f91f69937510caa921469fb4a8c1488a9b0e858c6b06fa68ff206693cb6a9211e623478ede7979548021448090a98370d994209c9a708b10eed4984dd89e05d33b25ba92a1fd7ac44a2ea3ef81ae0382564820186305f6654af252c437a795bf56a0f75e3df9c12b49b747b9d3f89dff10aeb76e7e35759e0db941655d0c768fbe888feac637515e08c843784a2386ddaab606ee5e2e0dfd4ced40d6838044d385aff56b445fd130b07631ca3bc4f3fb7be44994bbfd001654e91c9ac7455e003e6fb4cea77beac8363d5163cc2ece94b46b8046f1bbbd9ea8aedc99ffa512e91880bf4b6f07412326797c891bea6a89f710ae9c770533f0ce307ff51a79a39095adefc74a97dab1a34d621e42dd2879ec158af292e47a68f6ab8159b1872c0f4ecac6756b8ce90e50a06fe52b1f60681553e98435386698ca1000262c24ccdf7d1bca3c042d0de3e4d48ba9cab727a8d99c31f668aa1fe84d4221166f73cc7eb7330bd8db18bd905900456e07c4e7d92f6fb5f46dcf5c7c70ed554986ced09c3ff4bcc4f242b51ea170922bff530467f16477cfa23b38d7032d642df99e40ab4b99e35e545f7099c07f8a45a30bc6fd68fe486140142f53279b1b5eb9c1d0fd72c032a10473e833f4b0dc54748b8ff12c92b121490cf66b9e437ce2d988f0854226fbea9769397a669afa66844e1719ddc92a8569f6f1130bd0c0b7ee303baf297ecbce348a217aa47fbc872a5165a355136ab108672fb809f9d20ab6564afe68179bd9f129906d1587a6fc932cb48f793ffa7cd93ef5f4e7c18a97a22f54b62660de7c08594172571a10110caf327e7646b29187cdecad44460e78ec119020b8433fb7072353412eed06d9d7b7fe578d3cbf66dfc571bcc0cf9400c899e6de0c66ee947dd723ec9dc56df5f30a3faa30609157458d63a3f349be6ac9f5264f8dbc0719bd1cff72f5a70cf5cc0d20a6f36bb256545ab4cb9c2333b1fd38cb1dae605c765b014f690a7f54ff5747c0e19c2a2ea0e67a11f5ed46262960fb1b3e79ac7d7758aa5aff23e1cbb7165066ab4b59055a18a5568657a7718df6c921acb9c3347ed54b37a1893dab0c8ce22bb79"}) write$cgroup_pid(r1, &(0x7f0000000280), 0x12) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 16.720083333s ago: executing program 4 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x2, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000340)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000e3ffffff6331ce5db6ba62d46a00"}}}]}, 0x48}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0x3}]}}}}}}}, 0x0) connect$unix(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x80, 0x20, 0x14, 0xd8, 0xff, 0x0, 0xc8, 0xa, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket(0x2b, 0x800, 0xfffffff5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x24004814) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$ax25_int(r9, 0x101, 0x8, &(0x7f0000000040)=0x20a, 0x4) 16.719769241s ago: executing program 0 (id=1099): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @private1, 0x21b}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 16.597807896s ago: executing program 0 (id=1100): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.445639873s ago: executing program 3 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c801}, 0x44004) 16.35901426s ago: executing program 1 (id=1103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xf8}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000080)="16dcfadd77efdbcbcc14354260fcf92c20cd43fb3f268e874d9eca69439cedd3d8ff6f1e77c5f8e3d65e0be01c847c06d03c14d6e8fe907a1f82cb8f5b98fa7b0cf6e3fda59fee99c3d9313b0647ff3c00f66eae6930c1b4fcf09b120a") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="03ee4b95792cf9340bf19c5ce157cc48bd1e3421f1a828791c31f8a89d3559186bacf1dbf37bda632f34ba42bdb60ed549ca451a8f82ce29a39b13a49ea645ea187c492ce189fe34a48ab04acbbfd87f01558d6c0ead200fa721d737b73b045b87fee54e878c804904ce728b954d479900455e22daf5c52673df1adb4084ac2d88aea18097099919e1a57d620fea82204f3385b0db0f9377569cb1c1af13022e0e4e9b02b0d79a52e286cf334335d77cf66e", @ANYRES16=r2, @ANYBLOB="000829bd7000fbdbdf25010000000800020007000000080004009a0000000800020002000000080004000008000005000500420000003c000680050002000e00000005000200070000000500020006000000050002000300000008000300ffffffff060005004e24000005000200000000003c000680060005004e200000080003000a010102060005004e21000008000300ac14143a08000300000000000500020004000000050002006700000008000400010000000500050001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f00000006c0)="0300f198aaae5a98ca0000850800", 0xe, 0x20044080, &(0x7f0000000200)={0x11, 0x2, r4, 0x1, 0xfe, 0x6, @random="5483ccb17b06"}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 16.329840619s ago: executing program 2 (id=1104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @remote, 0x80}, 0x1c) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080)=0x80, 0x4) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f00000000c0)=0xfffffff7, 0x4) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000000200)={0x10e8, 0x1, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CT={0xd0, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3a4}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x20}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @NFQA_PAYLOAD={0x1004, 0xa, "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"}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x74, 0x453, 0x4, 0x70bd2b, 0x25dfdbff, "74950e4db2f60d0300d6e81473bcb70e38f990e863a3cf945608cb028510b06e608ceb51994fee4de08b920ef32dd4a27c267539c70f47d9a64f373af7292ef22d9a6387182c4abd0a17abf5a1cf1eb8702d2fa1ec46b19b89d80e02d994ebae6a", ["", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x240440c0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000014c0)=""/141, &(0x7f0000001580)=0x8d) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000015c0), 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000001640)={0xffffffff, 0x20, '\x00', 0x1, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000016c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x18, 0xf, 0x1b, 0x3ff, 0x9], 0x1, &(0x7f0000001680)=[{}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001780)={{0x0, @private=0xa010102, 0x4e22, 0x2, 'rr\x00', 0x8, 0x1bb, 0x11}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4, 0x4, 0xf, 0x2a5}}, 0x44) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001800)={r2, 0x2, 0x9, 0x3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r3) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x74, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xc5fc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x38e}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd563}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x9, 0x401, 0x6, 0xfffe]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x200418c4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000019c0)=[@in6={0xa, 0x4e24, 0xd, @loopback, 0xe9}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @remote}], 0x3c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1e}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r10, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x870}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001d00)={0x0, @in={{0x2, 0x4e21, @local}}, 0x80, 0x3ff}, &(0x7f0000001dc0)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001ec0)={r11, 0x1, 0x75, 0x8a, 0x9, 0x8, 0xe1c6, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x100, @remote, 0x5}}, 0x4, 0xb5d3, 0x6, 0x5, 0x2}}, &(0x7f0000001f80)=0xb0) 16.221604905s ago: executing program 3 (id=1105): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@remote, @default, @bcast, @default, @netrom, @rose, @null, @rose]}, &(0x7f00000002c0)=0x48) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10800, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) r4 = accept$ax25(r1, &(0x7f0000000300)={{}, [@bcast, @default, @remote, @rose, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000200)={0x3, @null, r5}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf, 0x3}, &(0x7f00000005c0)=0x90) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000100)={'sit0\x00'}) 16.22105787s ago: executing program 4 (id=1106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0xac, r1, 0x911, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ')%'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x2f753894914ed6d2}, 0x48810) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000240)) ioctl(r2, 0x3, &(0x7f0000000500)="3e0327a71eb56fb9d3dc570a3922a3f7c0d8b75b847d19a307c71481681cc9348d1492ce6ee3feeaefff73cbc6b0919e471101b2c482bd053be9b226c1953545fcae4a20") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x50b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000004c0)='batadv_slave_0\x00', 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@restrict={0xc, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x5f, 0x61, 0x2e, 0x0, 0x0, 0x2e, 0x51]}}, &(0x7f0000000340)=""/176, 0x2e, 0xb0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffff5c9, '\x00', 0x0, r6, 0x3, 0x3, 0x5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r8, &(0x7f00000019c0)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) 16.177961039s ago: executing program 2 (id=1107): socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40004) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') socketpair(0x1, 0x800, 0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) (async) socket(0x23, 0x5, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r2, 0x4}, 0x38) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80) (async, rerun: 64) r10 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newtclass={0x68, 0x28, 0x322, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0xe}, {0x9, 0xfff5}, {0x10, 0x4}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x66, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x85}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0xc094}, 0x400c) 15.98768905s ago: executing program 0 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 15.913549711s ago: executing program 1 (id=1109): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="336b8dc38b8bd8e24a8a509d14db585de2c8c2ebeaebb81c12ff66955959a58729", 0x21}], 0x1}}], 0x1, 0x801) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000840)={0x430, 0x3f3, 0x20, 0x70bd25, 0x25dfdbfc, {0x6, 0x2, 0x10, [0xfffffff7, 0x7fff, 0x9, 0xfffffff0, 0x3, 0x101, 0x0, 0x5fe1, 0x4, 0x1, 0x0, 0x5, 0x3, 0x400, 0xbb, 0x67f, 0xffffffff, 0x5, 0x7, 0x3, 0x9, 0x478399e4, 0x0, 0x7bc9, 0xed7, 0x10000, 0x2, 0x0, 0x7, 0xab, 0x2, 0x1, 0x3a0, 0x843, 0x24, 0x3, 0x4, 0x8, 0xffff, 0x5, 0x2, 0x100, 0x8b, 0x6, 0x5b, 0x5, 0x7, 0x8, 0xffffffff, 0x8, 0x9, 0x6, 0x8, 0x0, 0x8, 0xc, 0xfffffc5d, 0xffffffff, 0x2, 0xe, 0xfffffcbf, 0x0, 0xd, 0x7], [0x6, 0x8001, 0x10001, 0x1, 0xffffffff, 0x7fffffff, 0xb, 0x0, 0xfffffc00, 0x62, 0x0, 0x81a, 0x359e, 0xfffffffb, 0x8, 0x0, 0x5, 0x4, 0x6, 0x100, 0x10, 0xff, 0x9, 0x6, 0xa, 0x9, 0x101, 0x44ce, 0xfffffffa, 0xfffffff1, 0x8, 0xfa, 0x3be6, 0x1, 0xd, 0xa, 0x9, 0x2, 0xff4, 0x8001, 0x2, 0x6, 0x7f, 0x200, 0x200, 0x0, 0x8001, 0xfff, 0x3, 0x8, 0x3, 0x3, 0x7, 0x3, 0x4, 0x325a, 0x4, 0x3a8, 0x9, 0x4, 0x8, 0x8001, 0x5], [0x7ff, 0x4, 0x6, 0xf, 0x0, 0x5, 0x9, 0x7, 0x10001, 0x7fffffff, 0x1, 0x101, 0x5, 0x20, 0x1, 0xc650, 0x3, 0xffff7fff, 0x8, 0x5, 0x3, 0x800, 0x9, 0x6, 0x9, 0x8, 0x1, 0x1000, 0x944, 0x5, 0x0, 0x80, 0xc00000, 0x8, 0xcba1, 0x80000001, 0x0, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0x8000, 0x37, 0x0, 0x2, 0xffffffff, 0xfffffffc, 0x1ff, 0x9, 0x2, 0x1, 0x1ff, 0x3, 0x10000, 0x9, 0x3, 0x3, 0x5, 0x1, 0x94, 0xfffffffb], [0xc, 0x2, 0x4, 0x7, 0x1, 0x200, 0x8001, 0x1, 0x10, 0x6, 0x0, 0x6, 0x3fcc, 0x2, 0x4, 0x4, 0x8, 0x9, 0x55, 0xffff0001, 0x6, 0xc, 0xfc, 0x6, 0x80, 0x5, 0xfffffffe, 0x6, 0x8000, 0x80bf, 0x8, 0x7, 0x5, 0x6, 0x5, 0x4, 0xfffffffc, 0xfffffff8, 0x4, 0xa00, 0x7, 0x7fffffff, 0x9, 0xfffffffc, 0x0, 0x115, 0x1, 0x8001, 0x5, 0x4, 0x3, 0x6, 0x81, 0xfffffff9, 0x1c, 0x7, 0xff, 0xf77, 0xfffffff8, 0x1000, 0x4, 0xd, 0x82, 0x5], 0xe, ['/-\xe8.[+\x00', '\xff\xff\xff\xff\xff\xff', '\x00']}, ["", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x2}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 15.866033775s ago: executing program 2 (id=1110): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 15.812092664s ago: executing program 2 (id=1111): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) socket(0x2c, 0x6, 0xdc63) accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000063a25b300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000002000000b702000014000000b7030000000000008500000019000000bca9000000000000350901009800000095000000000000fa949cfc0000000000560800000000000085000000070000000000009500000000000000631a0cfeac836b5087ea2d37a56c7751ac71beb4b2f348f5cc73af"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.747265625s ago: executing program 1 (id=1112): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x801) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) sendto$packet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 15.718907937s ago: executing program 2 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d6163736563300000"], 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000100)="000000009a3eb336c46e4d3a24942adf3bca32549e4cc177599d539aead8e88f", 0x20, 0x51, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @multicast}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f00)={{0x14, 0x11}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) recvmmsg$unix(r5, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/202, 0xca}], 0x4, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/63, 0x3f}], 0x2, &(0x7f0000000880)}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002d00)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/189, 0xbd}, {&(0x7f0000001a80)=""/177, 0xb1}, {&(0x7f0000001b40)=""/4, 0x4}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/74, 0x4a}, {&(0x7f0000002c00)=""/228, 0xe4}], 0x7, &(0x7f0000002d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x3, 0x22, &(0x7f0000002ec0)) 15.70985316s ago: executing program 1 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4098, 0xe9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f00000001c0)=""/149, 0x95}], 0x4}, 0x5}], 0x1, 0x100, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 15.493015442s ago: executing program 1 (id=1115): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan1\x00', {0x3}, 0x7}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) 15.384476469s ago: executing program 1 (id=1116): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000f010000100a9000000b3f8f6d8f7ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c00090003000000ff03000008001b0000000000"], 0x3c}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) r5 = accept4$inet(r4, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f0000000440)=0x10, 0x800) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ff0f000000b83aaa18000000"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) syz_emit_ethernet(0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000086dd60fec00000483a00fc000000000000000000000000ff02000000000000000000000000000102009078000000006018b08800000000000000000000000000aafe8000000000000000000000000000aa1100000000000000fafb17c133d11e59bb99c35bdfcf89f50000000000001028a9c08f774e0c32f7a4000000"], 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x12e}, 0x0) recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2102) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000206010300000000000000000097e9f84e0c437baf00000014000780080011400000000005001500120000000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000b11810ec92d34ac83486d7a7ba3d40019baa3fc51a8179f47b995608225586309f6c6821d8409f695d6d0b23e39b2e0469e21a0f4651dbdf88232e7268cfd0369e2bc4de"], 0x64}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0x2c, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x60, r15, 0x809, 0x40, 0x0, {}, [{{0x8, 0x1, r14}, {0x14, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x80, 0x76, 0x2, 0x7fffffff}, {0x6, 0x7, 0x8, 0x5}, {0x6, 0x5, 0x3, 0xb6fb}]}}}, {0x0, 0x1, @enabled={{}, {0x0, 0x6, r13}}}, {0x0, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x83}}}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0xfdd, 0x9d, 0x80, 0x8}, {0x5, 0x4d, 0x80, 0x3}, {0x2, 0x9, 0xc, 0x1c0}, {0x3ff, 0x4, 0x12, 0x7fffffff}, {0x5, 0x3, 0x4, 0x4}, {0x7cea, 0x8, 0x6, 0x6}]}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x8001}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x28, 0x8, 0xff, 0x3}, {0x0, 0x0, 0x6, 0x8}, {0x8, 0x30, 0x0, 0xef8}, {0x3, 0x0, 0x4, 0x7}, {0xcf7, 0x6, 0x3}]}}}, {0x0, 0x1, @lb_tx_hash_to_port_mapping}, {0x0, 0x1, @activeport={{}, {}, {0x0, 0x4, r13}}}, {0x0, 0x1, @enabled}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0xfff}}}, {0x0, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x7}}}, {0x0, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x2}}}}, {0x0, 0x1, @queue_id={{{}, {}, {0x0, 0x4, 0x3}}, {0x0, 0x6, r13}}}]}}]}, 0x60}}, 0x40800) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r16, &(0x7f0000000140), &(0x7f0000000080)=@udp=r9}, 0x20) socket(0x2c, 0x3, 0x0) 15.375582308s ago: executing program 2 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x4, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x800}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x61}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x10004810) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x1, 0xfff7ffff, 0x80000003, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x44000) 278.933356ms ago: executing program 32 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 237.496087ms ago: executing program 33 (id=1116): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000f010000100a9000000b3f8f6d8f7ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c00090003000000ff03000008001b0000000000"], 0x3c}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) r5 = accept4$inet(r4, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f0000000440)=0x10, 0x800) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ff0f000000b83aaa18000000"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) syz_emit_ethernet(0x82, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000086dd60fec00000483a00fc000000000000000000000000ff02000000000000000000000000000102009078000000006018b08800000000000000000000000000aafe8000000000000000000000000000aa1100000000000000fafb17c133d11e59bb99c35bdfcf89f50000000000001028a9c08f774e0c32f7a4000000"], 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x12e}, 0x0) recvmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x2102) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000206010300000000000000000097e9f84e0c437baf00000014000780080011400000000005001500120000000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000b11810ec92d34ac83486d7a7ba3d40019baa3fc51a8179f47b995608225586309f6c6821d8409f695d6d0b23e39b2e0469e21a0f4651dbdf88232e7268cfd0369e2bc4de"], 0x64}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0x2c, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x60, r15, 0x809, 0x40, 0x0, {}, [{{0x8, 0x1, r14}, {0x14, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x80, 0x76, 0x2, 0x7fffffff}, {0x6, 0x7, 0x8, 0x5}, {0x6, 0x5, 0x3, 0xb6fb}]}}}, {0x0, 0x1, @enabled={{}, {0x0, 0x6, r13}}}, {0x0, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x83}}}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0xfdd, 0x9d, 0x80, 0x8}, {0x5, 0x4d, 0x80, 0x3}, {0x2, 0x9, 0xc, 0x1c0}, {0x3ff, 0x4, 0x12, 0x7fffffff}, {0x5, 0x3, 0x4, 0x4}, {0x7cea, 0x8, 0x6, 0x6}]}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x8001}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x28, 0x8, 0xff, 0x3}, {0x0, 0x0, 0x6, 0x8}, {0x8, 0x30, 0x0, 0xef8}, {0x3, 0x0, 0x4, 0x7}, {0xcf7, 0x6, 0x3}]}}}, {0x0, 0x1, @lb_tx_hash_to_port_mapping}, {0x0, 0x1, @activeport={{}, {}, {0x0, 0x4, r13}}}, {0x0, 0x1, @enabled}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0xfff}}}, {0x0, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x7}}}, {0x0, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x2}}}}, {0x0, 0x1, @queue_id={{{}, {}, {0x0, 0x4, 0x3}}, {0x0, 0x6, r13}}}]}}]}, 0x60}}, 0x40800) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r16, &(0x7f0000000140), &(0x7f0000000080)=@udp=r9}, 0x20) socket(0x2c, 0x3, 0x0) 172.681783ms ago: executing program 34 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x4, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x800}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x61}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x10004810) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x1, 0xfff7ffff, 0x80000003, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x44000) 88.392034ms ago: executing program 35 (id=1105): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@remote, @default, @bcast, @default, @netrom, @rose, @null, @rose]}, &(0x7f00000002c0)=0x48) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='veth0\x00', 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10800, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa"], 0x18}, 0x0) r4 = accept$ax25(r1, &(0x7f0000000300)={{}, [@bcast, @default, @remote, @rose, @rose, @null, @bcast, @null]}, &(0x7f0000000240)=0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000200)={0x3, @null, r5}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}, 0xf, 0x3}, &(0x7f00000005c0)=0x90) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000100)={'sit0\x00'}) 0s ago: executing program 36 (id=1106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0xac, r1, 0x911, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, ')%'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x2f753894914ed6d2}, 0x48810) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000240)) ioctl(r2, 0x3, &(0x7f0000000500)="3e0327a71eb56fb9d3dc570a3922a3f7c0d8b75b847d19a307c71481681cc9348d1492ce6ee3feeaefff73cbc6b0919e471101b2c482bd053be9b226c1953545fcae4a20") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x50b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000004c0)='batadv_slave_0\x00', 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@restrict={0xc, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x5f, 0x61, 0x2e, 0x0, 0x0, 0x2e, 0x51]}}, &(0x7f0000000340)=""/176, 0x2e, 0xb0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffff5c9, '\x00', 0x0, r6, 0x3, 0x3, 0x5}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r8, &(0x7f00000019c0)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="6110bd000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 419.133797][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.152635][ T5917] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 419.162958][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.233237][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.257509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.378939][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.413460][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.505636][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.539989][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.570712][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.594954][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.764772][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.804432][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.873857][ T5929] Bluetooth: hci1: command tx timeout [ 419.877721][ T5935] Bluetooth: hci0: command tx timeout [ 419.918442][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.926322][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.960182][ T5935] Bluetooth: hci3: command tx timeout [ 419.965704][ T5929] Bluetooth: hci4: command tx timeout [ 419.967522][ T5930] Bluetooth: hci2: command tx timeout [ 420.251362][ T6062] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3'. [ 420.260293][ T6065] dvmrp0: entered allmulticast mode [ 420.768574][ T6077] unsupported nlmsg_type 40 [ 421.023177][ T6086] Zero length message leads to an empty skb [ 421.096809][ T6094] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 421.107859][ T6094] netlink: 128 bytes leftover after parsing attributes in process `syz.3.18'. [ 421.190173][ T6094] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 421.222847][ T6094] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 421.504117][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 421.549871][ T6116] IPv6: Can't replace route, no match found [ 421.616158][ T6119] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 421.668688][ T6119] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 422.148366][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 422.254092][ T6139] tipc: Started in network mode [ 422.286753][ T6139] tipc: Node identity be3ce3e77b71, cluster identity 4711 [ 422.330042][ T6139] tipc: Enabled bearer , priority 0 [ 422.381266][ T6131] syzkaller0: entered promiscuous mode [ 422.387680][ T6131] syzkaller0: entered allmulticast mode [ 422.550416][ T6131] tipc: Resetting bearer [ 422.578292][ T6155] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 422.608952][ T6155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.33'. [ 422.686479][ T6129] tipc: Resetting bearer [ 422.856955][ T6129] tipc: Disabling bearer [ 422.924004][ T6169] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 423.098210][ T6173] netlink: 'syz.3.38': attribute type 8 has an invalid length. [ 423.185895][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 423.209189][ T6180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 423.269996][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 423.304681][ T6179] netlink: 276 bytes leftover after parsing attributes in process `syz.0.40'. [ 423.408999][ T6182] nbd4: detected capacity change from 0 to 63 [ 423.478466][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 423.507520][ T5930] block nbd4: Receive control failed (result -104) [ 423.566294][ T6195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.634570][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 423.668421][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.46'. [ 423.718681][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.727103][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.892768][ T6217] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 423.929155][ T30] audit: type=1800 audit(1758145577.607:2): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.48" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=60 res=0 errno=0 [ 424.428810][ T6241] openvswitch: netlink: Unknown key attributes 2 [ 424.786070][ T6253] netlink: 'syz.4.58': attribute type 5 has an invalid length. [ 425.090827][ T6266] tipc: Enabled bearer , priority 0 [ 425.124498][ T6269] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 425.124868][ T6266] syzkaller0: entered promiscuous mode [ 425.136937][ T6269] xt_bpf: check failed: parse error [ 425.154574][ T6266] syzkaller0: entered allmulticast mode [ 425.263895][ T6278] __nla_validate_parse: 9 callbacks suppressed [ 425.263917][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.66'. [ 425.322693][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.330949][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.746190][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.761119][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.892750][ T6279] warning: `syz.4.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 425.985766][ T6297] tipc: Resetting bearer [ 426.018641][ T6007] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.034788][ T6007] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.072880][ T6263] tipc: Resetting bearer [ 426.086413][ T6263] tipc: Disabling bearer [ 426.157047][ T6007] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.199196][ T6007] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.400496][ T6309] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 426.544557][ T6316] netlink: 248 bytes leftover after parsing attributes in process `syz.2.74'. [ 427.310775][ T6356] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 427.818369][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 428.294400][ T6398] Bluetooth: MGMT ver 1.23 [ 428.323943][ T6404] Bluetooth: MGMT ver 1.23 [ 428.364870][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'. [ 428.812003][ T6433] netlink: 3 bytes leftover after parsing attributes in process `syz.0.104'. [ 428.873907][ T6433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.989001][ T6439] tipc: Started in network mode [ 428.993968][ T6439] tipc: Node identity 0900000000000000ffffffffffffffff, cluster identity 4711 [ 429.251827][ T6446] netlink: 80 bytes leftover after parsing attributes in process `syz.1.109'. [ 429.332087][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.102'. [ 429.342652][ T6450] validate_nla: 2 callbacks suppressed [ 429.342670][ T6450] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 429.348815][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 429.475609][ T6450] veth1_macvtap: left promiscuous mode [ 429.601866][ T6460] netlink: 176 bytes leftover after parsing attributes in process `syz.3.113'. [ 429.656331][ T6460] ip6gretap0: entered promiscuous mode [ 429.721811][ T6465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.114'. [ 429.767565][ T6465] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 430.235138][ T6484] pim6reg: entered allmulticast mode [ 430.261823][ T6484] pim6reg: left allmulticast mode [ 430.752670][ T6506] __nla_validate_parse: 3 callbacks suppressed [ 430.752691][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 430.816420][ T6508] veth0: entered promiscuous mode [ 430.848559][ T6508] netlink: 80 bytes leftover after parsing attributes in process `syz.2.127'. [ 430.931925][ T6508] veth0: left promiscuous mode [ 431.157221][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 431.543278][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 431.593618][ T6536] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.136'. [ 431.842659][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 431.892014][ T6546] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 431.936640][ T6546] bond1: entered promiscuous mode [ 431.942448][ T6546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.049706][ T6546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.091326][ T6546] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 432.145647][ T6546] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 432.183498][ T6546] bond1: (slave wireguard0): making interface the new active one [ 432.192026][ T6546] wireguard0: entered promiscuous mode [ 432.200245][ T6546] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 432.725657][ T6563] tipc: Enabling of bearer rejected, failed to enable media [ 432.765631][ T9] IPVS: starting estimator thread 0... [ 432.778589][ T6568] syz.3.144 (6568) used greatest stack depth: 16696 bytes left [ 432.855693][ T6563] syz.3.144 (6563) used greatest stack depth: 15832 bytes left [ 432.877611][ T6574] IPVS: using max 24 ests per chain, 57600 per kthread [ 432.968425][ T6580] netlink: 42543 bytes leftover after parsing attributes in process `syz.4.150'. [ 433.316467][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 433.477013][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 433.521698][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 433.617827][ T6605] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 433.669182][ T6607] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 434.315919][ T6624] tipc: Can't bind to reserved service type 1 [ 434.637604][ T6635] delete_channel: no stack [ 435.027011][ T6644] tipc: Started in network mode [ 435.036232][ T6644] tipc: Node identity aed3939f784d, cluster identity 4711 [ 435.059337][ T6644] tipc: Enabled bearer , priority 0 [ 435.089870][ T6644] syzkaller0: entered promiscuous mode [ 435.125908][ T6644] syzkaller0: entered allmulticast mode [ 435.192706][ T6644] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.295788][ T6649] tipc: Resetting bearer [ 435.315651][ T6642] tipc: Resetting bearer [ 435.364192][ T6642] tipc: Disabling bearer [ 435.916856][ T6682] __nla_validate_parse: 8 callbacks suppressed [ 435.916877][ T6682] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.180'. [ 436.345248][ T6698] netlink: 'syz.1.185': attribute type 5 has an invalid length. [ 436.864800][ T6715] netlink: 64 bytes leftover after parsing attributes in process `syz.1.192'. [ 436.925610][ T6715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'. [ 437.080728][ T6715] syzkaller0: entered promiscuous mode [ 437.087731][ T6715] syzkaller0: entered allmulticast mode [ 439.186072][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 439.200326][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.198'. [ 439.249776][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 439.311132][ T6754] netlink: 'syz.2.200': attribute type 6 has an invalid length. [ 439.362122][ T6762] netlink: 'syz.1.202': attribute type 2 has an invalid length. [ 439.370210][ T6762] netlink: 119 bytes leftover after parsing attributes in process `syz.1.202'. [ 440.215246][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.221956][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.295850][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 440.319266][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 440.560951][ T6763] lec:lec_atm_close: lec0: Shut down! [ 440.772961][ T6824] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.214'. [ 440.884281][ T6826] trusted_key: syz.0.214 sent an empty control message without MSG_MORE. [ 441.193711][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz.4.217'. [ 441.228224][ T6836] netlink: 43 bytes leftover after parsing attributes in process `syz.4.217'. [ 441.267617][ T6836] netlink: 'syz.4.217': attribute type 6 has an invalid length. [ 441.297495][ T6836] netlink: 'syz.4.217': attribute type 5 has an invalid length. [ 441.305196][ T6836] netlink: 43 bytes leftover after parsing attributes in process `syz.4.217'. [ 441.415713][ T6851] tipc: Enabled bearer , priority 0 [ 441.441058][ T6852] syzkaller0: entered promiscuous mode [ 441.493893][ T6852] syzkaller0: entered allmulticast mode [ 441.588435][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 441.725844][ T6852] tipc: Resetting bearer [ 441.791230][ T6852] tipc: Disabling bearer [ 442.005971][ T6880] openvswitch: netlink: Missing key (keys=40, expected=100) [ 442.433090][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. [ 442.573466][ T6912] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.235'. [ 442.785418][ T6915] geneve2: entered promiscuous mode [ 442.800838][ T6915] geneve2: entered allmulticast mode [ 442.809163][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 442.824800][ T6919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.237'. [ 442.866793][ T6917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.889877][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 442.899506][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 442.937817][ T5999] lec:lec_start_xmit: lec0:No lecd attached [ 443.098479][ T6926] IPVS: set_ctl: invalid protocol: 0 172.20.20.42:20002 [ 443.320962][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 443.379175][ T6936] bridge_slave_1: left allmulticast mode [ 443.399276][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.244'. [ 443.428866][ T6936] bridge_slave_1: left promiscuous mode [ 443.452933][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 443.468265][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.523354][ T6936] bridge_slave_0: left allmulticast mode [ 443.545435][ T6936] bridge_slave_0: left promiscuous mode [ 443.582665][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.652812][ T6937] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 443.813667][ T6940] veth0: entered promiscuous mode [ 443.880480][ T6939] veth0: left promiscuous mode [ 443.955499][ T6968] netlink: 'syz.0.246': attribute type 2 has an invalid length. [ 444.010995][ T6937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.104819][ T6961] bond1: (slave geneve2): making interface the new active one [ 444.143941][ T6961] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 444.364563][ T6982] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 444.558898][ T6989] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 444.672159][ T6989] netlink: 'syz.2.252': attribute type 5 has an invalid length. [ 444.724563][ T6917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.758179][ T6917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 445.035915][ T6917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.092387][ T6917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 445.496370][ T6917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.530544][ T6917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 445.942789][ T7044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.987513][ T6007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 445.997147][ T6007] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.042314][ T6007] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 446.054362][ T6007] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.135561][ T6007] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 446.167671][ T6007] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.252180][ T6010] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 446.281711][ T6010] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.367780][ T7057] __nla_validate_parse: 13 callbacks suppressed [ 446.367801][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 446.623630][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 446.674628][ T7068] openvswitch: netlink: Actions may not be safe on all matching packets [ 446.961707][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 447.302128][ T7094] syzkaller1: entered promiscuous mode [ 447.328294][ T7094] syzkaller1: entered allmulticast mode [ 447.435410][ T7102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.282'. [ 447.719583][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.284'. [ 448.507489][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 448.515834][ C0] lec:lec_tx_timeout: lec0 [ 448.525309][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 448.632052][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 448.852509][ T7153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.883869][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 448.960685][ T7155] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 449.626203][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 449.701005][ T7186] xfrm1: entered promiscuous mode [ 449.706100][ T7186] xfrm1: entered allmulticast mode [ 449.745633][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 450.133186][ T7209] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 450.214077][ T7221] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 450.252266][ T7221] netlink: 244 bytes leftover after parsing attributes in process `syz.0.320'. [ 450.274075][ T7223] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 450.372767][ T7228] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 450.535535][ T7234] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 451.929329][ T7287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.086251][ T7302] __nla_validate_parse: 2 callbacks suppressed [ 452.086271][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 452.119804][ T7298] netlink: 596 bytes leftover after parsing attributes in process `syz.2.340'. [ 452.426995][ T7314] IPVS: Unknown mcast interface: veth1_virt_wifi [ 452.930195][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 453.536147][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'. [ 453.635960][ T94] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 30 seconds [ 453.647681][ T94] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 30 seconds [ 453.658790][ T94] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 30 seconds [ 453.672880][ T94] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 30 seconds [ 453.835755][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 454.020461][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 454.096041][ T7386] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 454.120007][ T7386] netlink: 'syz.3.361': attribute type 2 has an invalid length. [ 454.267459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 454.275593][ C0] lec:lec_tx_timeout: lec0 [ 454.281229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.325659][ T7402] netlink: 71 bytes leftover after parsing attributes in process `syz.4.364'. [ 454.835294][ T7422] syzkaller0: entered promiscuous mode [ 454.862613][ T7422] syzkaller0: entered allmulticast mode [ 454.909257][ T7430] netlink: 'syz.3.370': attribute type 12 has an invalid length. [ 455.354475][ T7451] syzkaller1: entered promiscuous mode [ 455.369448][ T7451] syzkaller1: entered allmulticast mode [ 456.059568][ T7477] Unknown options in mask b7f2 [ 456.135364][ T7480] netlink: 'syz.1.381': attribute type 12 has an invalid length. [ 456.167683][ T7480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.381'. [ 456.249634][ T7488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.381'. [ 456.514245][ T7496] netlink: 81 bytes leftover after parsing attributes in process `syz.3.386'. [ 456.605009][ T7498] netlink: 'syz.4.387': attribute type 29 has an invalid length. [ 456.613583][ T7498] netlink: 'syz.4.387': attribute type 29 has an invalid length. [ 456.656003][ T7499] netlink: 'syz.4.387': attribute type 29 has an invalid length. [ 456.782057][ T7503] openvswitch: netlink: IP tunnel TTL not specified. [ 457.086180][ T7510] netlink: 'syz.3.391': attribute type 21 has an invalid length. [ 457.270974][ T7514] __nla_validate_parse: 1 callbacks suppressed [ 457.270994][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'. [ 457.350029][ T7514] netlink: 'syz.4.392': attribute type 10 has an invalid length. [ 457.406439][ T7514] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 457.475105][ T7514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.736699][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 458.048342][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'. [ 458.099013][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 459.159372][ T7582] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 459.192095][ T7582] netlink: 224 bytes leftover after parsing attributes in process `syz.2.413'. [ 459.226281][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 459.263538][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 459.298887][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 459.308161][ T7591] netlink: 'syz.4.416': attribute type 11 has an invalid length. [ 459.433051][ T7590] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.483161][ T7590] team0: Cannot enslave team device to itself [ 459.592794][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.420'. [ 459.601904][ T7598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.420'. [ 460.027458][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 460.035567][ C0] lec:lec_tx_timeout: lec0 [ 460.040493][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.087994][ T7620] tipc: Enabled bearer , priority 0 [ 460.098278][ T7620] syzkaller0: entered promiscuous mode [ 460.103785][ T7620] syzkaller0: entered allmulticast mode [ 460.176516][ T7626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.249697][ T7634] bond0: (slave bond_slave_0): Releasing backup interface [ 460.378453][ T7634] bond0: (slave bond_slave_1): Releasing backup interface [ 460.467356][ T7634] team0: Port device team_slave_0 removed [ 460.498712][ T7634] team0: Port device team_slave_1 removed [ 460.505655][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.513709][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.524590][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.532102][ T7634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.538798][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 460.573495][ T7641] C: renamed from lo (while UP) [ 460.582453][ T7641] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 460.616256][ T7636] tipc: Resetting bearer [ 460.646474][ T7619] tipc: Resetting bearer [ 460.690276][ T7619] tipc: Disabling bearer [ 460.739061][ T7655] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 461.678046][ T7696] tipc: Enabled bearer , priority 0 [ 461.789088][ T7691] tipc: Disabling bearer [ 462.376381][ T7726] __nla_validate_parse: 14 callbacks suppressed [ 462.376401][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 462.467512][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 462.547592][ T7726] netlink: 'syz.3.450': attribute type 11 has an invalid length. [ 462.702595][ T5999] IPVS: starting estimator thread 0... [ 462.734297][ T7740] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 462.799643][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 462.869974][ T7744] IPVS: using max 25 ests per chain, 60000 per kthread [ 462.923802][ T7748] block nbd3: not configured, cannot reconfigure [ 462.990053][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 463.181815][ T7734] netlink: 'syz.2.452': attribute type 32 has an invalid length. [ 463.222072][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 463.259552][ T7734] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 463.482689][ T7761] tipc: Enabled bearer , priority 0 [ 463.500988][ T7775] netlink: 72 bytes leftover after parsing attributes in process `syz.3.463'. [ 463.513751][ T7761] syzkaller0: entered promiscuous mode [ 463.522780][ T7761] syzkaller0: entered allmulticast mode [ 463.626621][ T7761] tipc: Resetting bearer [ 463.703820][ T7759] tipc: Resetting bearer [ 463.803056][ T7759] tipc: Disabling bearer [ 465.077565][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 465.085612][ C0] lec:lec_tx_timeout: lec0 [ 465.090357][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.186042][ T7847] batadv_slave_0: entered promiscuous mode [ 465.295886][ T7843] batadv_slave_0: left promiscuous mode [ 465.446807][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 465.735038][ T7874] tipc: Enabling of bearer rejected, failed to enable media [ 465.926061][ T7888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 465.993877][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 466.019286][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 466.053608][ T7893] pim6reg: entered allmulticast mode [ 466.402552][ T7903] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 466.540533][ T7912] netlink: 'syz.2.498': attribute type 2 has an invalid length. [ 466.783588][ T1213] IPVS: starting estimator thread 0... [ 466.882840][ T7920] IPVS: using max 25 ests per chain, 60000 per kthread [ 466.928291][ T7930] Bluetooth: MGMT ver 1.23 [ 467.135706][ T7937] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 467.147887][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 467.548763][ T7937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.775853][ T7959] __nla_validate_parse: 3 callbacks suppressed [ 467.775873][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 467.794556][ T7958] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 467.836760][ T7958] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 468.913619][ T8008] netlink: 240 bytes leftover after parsing attributes in process `syz.2.525'. [ 468.938361][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 468.950171][ T8008] netlink: 240 bytes leftover after parsing attributes in process `syz.2.525'. [ 469.000899][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 469.124895][ T8016] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 469.206072][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 469.228607][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 469.325878][ T8025] netlink: 'syz.3.534': attribute type 4 has an invalid length. [ 469.478477][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.520560][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.665197][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 469.817152][ T8042] netlink: 'syz.1.537': attribute type 7 has an invalid length. [ 469.844102][ T8042] netlink: 'syz.1.537': attribute type 8 has an invalid length. [ 469.921120][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 470.041470][ T8054] syzkaller0: entered promiscuous mode [ 470.089107][ T8054] syzkaller0: entered allmulticast mode [ 470.097486][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 470.105537][ C0] lec:lec_tx_timeout: lec0 [ 470.110368][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.152009][ T8060] vxcan1: entered allmulticast mode [ 470.251692][ T8063] netlink: 224 bytes leftover after parsing attributes in process `syz.0.544'. [ 470.354370][ T8070] netlink: 248 bytes leftover after parsing attributes in process `syz.2.546'. [ 470.559728][ T8081] netlink: 'syz.2.550': attribute type 2 has an invalid length. [ 470.566572][ T8083] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 471.064797][ T8106] netlink: 'syz.1.559': attribute type 6 has an invalid length. [ 471.356873][ T30] audit: type=1107 audit(1758145625.037:3): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­i‰' [ 471.405870][ T8129] netlink: 'syz.1.567': attribute type 3 has an invalid length. [ 471.713061][ T8137] netlink: 'syz.1.570': attribute type 1 has an invalid length. [ 471.756684][ T8137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.993646][ T8190] syzkaller1: entered promiscuous mode [ 473.002376][ T8190] syzkaller1: entered allmulticast mode [ 473.912107][ T8218] __nla_validate_parse: 9 callbacks suppressed [ 473.912127][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 474.039103][ T8218] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 474.074887][ T8222] vxcan1: tx address claim with dlc 0 [ 474.106702][ T8218] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 474.190399][ T8218] gretap2: entered promiscuous mode [ 474.195671][ T8218] gretap2: entered allmulticast mode [ 474.319422][ T8218] tipc: Enabled bearer , priority 0 [ 474.715221][ T8252] netlink: 48 bytes leftover after parsing attributes in process `syz.4.603'. [ 474.766651][ T8216] tipc: Disabling bearer [ 474.868919][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 474.887397][ T8256] netlink: 244 bytes leftover after parsing attributes in process `syz.2.602'. [ 475.117686][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 475.125733][ C0] lec:lec_tx_timeout: lec0 [ 475.130782][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 475.216824][ T8269] sctp: [Deprecated]: syz.2.609 (pid 8269) Use of int in maxseg socket option. [ 475.216824][ T8269] Use struct sctp_assoc_value instead [ 475.237255][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 475.279535][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 475.473508][ T8286] openvswitch: netlink: Unknown key attributes 2 [ 475.489617][ T8283] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 475.520647][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 475.834571][ T8302] syzkaller1: entered promiscuous mode [ 475.852240][ T8302] syzkaller1: entered allmulticast mode [ 475.891826][ T8302] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 476.023567][ T8308] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 476.129961][ T8308] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 476.171819][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 476.190785][ T8313] netlink: 'syz.0.620': attribute type 20 has an invalid length. [ 476.264753][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 476.268776][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.274703][ T8313] netlink: 'syz.0.620': attribute type 20 has an invalid length. [ 476.316117][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.352576][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.379115][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.522914][ T8319] tipc: Enabled bearer , priority 0 [ 476.572986][ T8323] syzkaller0: entered promiscuous mode [ 476.611064][ T8323] syzkaller0: entered allmulticast mode [ 476.690357][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 476.732261][ T8319] tipc: Resetting bearer [ 476.759546][ T8318] tipc: Resetting bearer [ 476.878278][ T8318] tipc: Disabling bearer [ 477.599059][ T8374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.606457][ T8374] IPv6: NLM_F_CREATE should be set when creating new route [ 477.613792][ T8374] IPv6: NLM_F_CREATE should be set when creating new route [ 477.688410][ T8374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.962402][ T8388] netlink: 'syz.1.643': attribute type 11 has an invalid length. [ 478.191307][ T8397] tipc: Started in network mode [ 478.196610][ T8397] tipc: Node identity 8a9709ba466d, cluster identity 4711 [ 478.206163][ T8397] tipc: Enabled bearer , priority 0 [ 478.252628][ T8397] syzkaller0: entered promiscuous mode [ 478.258697][ T8397] syzkaller0: entered allmulticast mode [ 478.370619][ T8397] tipc: Resetting bearer [ 478.421215][ T8396] tipc: Resetting bearer [ 478.525775][ T8396] tipc: Disabling bearer [ 478.937713][ T8429] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 478.943092][ T8433] __nla_validate_parse: 7 callbacks suppressed [ 478.943109][ T8433] netlink: 256 bytes leftover after parsing attributes in process `syz.4.657'. [ 479.044603][ T8437] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 479.073618][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 479.182201][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 479.283477][ T8448] lo: entered allmulticast mode [ 479.301349][ T8448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.340247][ T8444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.661'. [ 479.393146][ T8452] ip6gre1: entered allmulticast mode [ 479.748128][ T8471] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 479.780386][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 479.961608][ T8483] syzkaller0: entered promiscuous mode [ 479.990402][ T8483] syzkaller0: entered allmulticast mode [ 480.103896][ T8492] netlink: 288 bytes leftover after parsing attributes in process `syz.1.676'. [ 480.126417][ T8492] netlink: 508 bytes leftover after parsing attributes in process `syz.1.676'. [ 480.137782][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 480.145807][ C0] lec:lec_tx_timeout: lec0 [ 480.151146][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.159971][ T8492] netlink: 764 bytes leftover after parsing attributes in process `syz.1.676'. [ 480.206211][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 480.220483][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 480.287020][ T8495] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 481.174459][ T8540] tipc: New replicast peer: 255.255.255.255 [ 481.222041][ T8540] tipc: Enabled bearer , priority 10 [ 482.374493][ T6006] tipc: Node number set to 3438938554 [ 482.564131][ T8603] digital: digital_start_poll: Unknown protocol [ 482.969762][ T8621] netlink: 'syz.0.711': attribute type 8 has an invalid length. [ 483.225419][ T8628] netlink: 'syz.4.714': attribute type 6 has an invalid length. [ 483.438272][ T8613] infiniband syz0: set active [ 483.444372][ T8613] infiniband syz0: added macvlan1 [ 483.534815][ T8640] netlink: 'syz.1.715': attribute type 21 has an invalid length. [ 483.542789][ T8613] RDS/IB: syz0: added [ 483.543321][ T8613] smc: adding ib device syz0 with port count 1 [ 483.556552][ T8613] smc: ib device syz0 port 1 has pnetid [ 483.564843][ T8640] IPv6: NLM_F_CREATE should be specified when creating new route [ 483.711111][ T94] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 60 seconds [ 483.722085][ T94] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 60 seconds [ 483.733832][ T94] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 60 seconds [ 483.746152][ T94] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 60 seconds [ 483.986667][ T8640] IPv6: sit2: Disabled Multicast RS [ 484.004253][ T8640] sit2: entered allmulticast mode [ 484.241221][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.249620][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.437230][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.460991][ T8652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.645156][ T8656] netlink: 'syz.2.722': attribute type 4 has an invalid length. [ 485.167633][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 485.175706][ C0] lec:lec_tx_timeout: lec0 [ 485.180353][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 485.871606][ T1157] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 485.880524][ T1157] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 485.890802][ T1157] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 485.899613][ T1157] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.033004][ T1157] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 486.077699][ T1157] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.144011][ T1157] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 486.166937][ T1157] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.498133][ T8696] __nla_validate_parse: 10 callbacks suppressed [ 486.498153][ T8696] netlink: 104 bytes leftover after parsing attributes in process `syz.4.731'. [ 486.528142][ T8695] nbd: couldn't find a device at index 117440512 [ 486.545724][ T8699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.783692][ T8710] netlink: 76 bytes leftover after parsing attributes in process `syz.1.737'. [ 486.982385][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 487.021487][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 487.048072][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 487.053202][ T8720] netlink: 'syz.3.741': attribute type 2 has an invalid length. [ 487.092549][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 487.183716][ T8725] netlink: 'syz.1.738': attribute type 4 has an invalid length. [ 487.746415][ T8739] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 488.189061][ T8754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.748'. [ 488.308550][ T8756] tipc: Enabled bearer , priority 0 [ 488.326492][ T8756] syzkaller0: entered promiscuous mode [ 488.335741][ T8756] syzkaller0: entered allmulticast mode [ 488.360100][ T8756] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 488.379342][ T8756] tipc: Resetting bearer [ 488.395276][ T8755] tipc: Resetting bearer [ 488.445003][ T8755] tipc: Disabling bearer [ 488.764970][ T8765] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 488.880955][ T8765] team0: Port device dummy0 added [ 489.105352][ T8774] netlink: 'syz.1.753': attribute type 3 has an invalid length. [ 489.537015][ T8786] netlink: 'syz.4.757': attribute type 21 has an invalid length. [ 489.556960][ T8786] netlink: 'syz.4.757': attribute type 22 has an invalid length. [ 489.575778][ T8792] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 489.585862][ T8786] netlink: 'syz.4.757': attribute type 23 has an invalid length. [ 489.595567][ T8786] netlink: 'syz.4.757': attribute type 25 has an invalid length. [ 489.617908][ T8786] netlink: 'syz.4.757': attribute type 26 has an invalid length. [ 489.661663][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.757'. [ 489.784560][ T8794] bond3: (slave gretap1): making interface the new active one [ 489.835433][ T8794] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 489.877650][ T8796] netlink: 'syz.1.760': attribute type 30 has an invalid length. [ 489.885833][ T8797] netlink: 'syz.1.760': attribute type 30 has an invalid length. [ 490.187443][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 490.195511][ C0] lec:lec_tx_timeout: lec0 [ 490.200610][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 490.330782][ T8807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.336083][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 490.399729][ T8813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.415062][ T8813] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 490.430960][ T8813] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 490.504543][ T8816] veth5: entered promiscuous mode [ 490.520120][ T8816] bond4: (slave veth5): Enslaving as an active interface with a down link [ 490.543233][ T8840] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 490.582803][ T8829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.300598][ T8872] syz.1.780 uses old SIOCAX25GETINFO [ 491.341250][ T8872] tc_dump_action: action bad kind [ 491.736418][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.788'. [ 492.078574][ T8912] netlink: 104 bytes leftover after parsing attributes in process `syz.3.794'. [ 492.089279][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.793'. [ 492.308448][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.499985][ T8932] netlink: 36 bytes leftover after parsing attributes in process `syz.2.800'. [ 492.515305][ T8923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.535728][ T8924] bond2: (slave gretap1): making interface the new active one [ 492.545187][ T8924] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 492.556623][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 492.572098][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 492.582501][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 492.778760][ T8938] tipc: Started in network mode [ 492.805674][ T8938] tipc: Node identity 9a8dd412627a, cluster identity 4711 [ 492.842311][ T8938] tipc: Enabled bearer , priority 0 [ 492.881137][ T8931] infiniband syz2: set down [ 492.882533][ T8942] syzkaller0: entered promiscuous mode [ 492.885763][ T8931] infiniband syz2: added vxcan1 [ 492.942174][ T8942] syzkaller0: entered allmulticast mode [ 492.950792][ T8931] RDS/IB: syz2: added [ 492.954941][ T8931] smc: adding ib device syz2 with port count 1 [ 492.987674][ T8931] smc: ib device syz2 port 1 has pnetid [ 492.996378][ T6017] vxcan1 speed is unknown, defaulting to 1000 [ 493.063069][ T6037] vxcan1 speed is unknown, defaulting to 1000 [ 493.100048][ T8938] tipc: Resetting bearer [ 493.130053][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 493.344242][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 493.387079][ T8957] netlink: 228 bytes leftover after parsing attributes in process `syz.3.808'. [ 493.429761][ T8936] tipc: Resetting bearer [ 493.509073][ T8936] tipc: Disabling bearer [ 493.765548][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 493.818811][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.810'. [ 493.858330][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 493.897157][ T8965] ip6gre2: entered allmulticast mode [ 494.338979][ T8978] netlink: 88 bytes leftover after parsing attributes in process `syz.0.816'. [ 494.391846][ T8978] netlink: 88 bytes leftover after parsing attributes in process `syz.0.816'. [ 494.456471][ T8979] team0: Port device bridge3 added [ 494.581155][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 495.044956][ T9007] team0: No ports can be present during mode change [ 495.207563][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 495.215667][ C0] lec:lec_tx_timeout: lec0 [ 495.220677][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 495.712188][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 496.311056][ T9054] validate_nla: 4 callbacks suppressed [ 496.311075][ T9054] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 496.337775][ T9056] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 496.392569][ T9058] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 496.511518][ T8931] vxcan1 speed is unknown, defaulting to 1000 [ 496.575023][ T9066] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 497.250630][ T9095] __nla_validate_parse: 2 callbacks suppressed [ 497.250650][ T9095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.846'. [ 497.403034][ T9101] tipc: Enabled bearer , priority 0 [ 497.544099][ T9110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.848'. [ 497.714085][ T9100] tipc: Disabling bearer [ 497.824096][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 497.965791][ T9130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.853'. [ 498.589744][ T9153] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.860'. [ 498.639220][ T9153] netlink: zone id is out of range [ 498.659315][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 498.679604][ T9153] netlink: zone id is out of range [ 498.684795][ T9153] netlink: zone id is out of range [ 498.708229][ T9153] netlink: zone id is out of range [ 498.713418][ T9153] netlink: zone id is out of range [ 498.723476][ T9153] netlink: zone id is out of range [ 498.750909][ T9153] netlink: zone id is out of range [ 498.766106][ T9153] netlink: zone id is out of range [ 498.792147][ T9153] netlink: zone id is out of range [ 499.049963][ T9175] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 499.085350][ T9175] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 499.680551][ T9170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.940556][ T9125] syz.2.852: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.966921][ T9125] CPU: 0 UID: 0 PID: 9125 Comm: syz.2.852 Not tainted syzkaller #0 PREEMPT(full) [ 499.966948][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.966960][ T9125] Call Trace: [ 499.966968][ T9125] [ 499.966976][ T9125] dump_stack_lvl+0x189/0x250 [ 499.967008][ T9125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.967033][ T9125] ? __pfx__printk+0x10/0x10 [ 499.967059][ T9125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 499.967082][ T9125] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 499.967107][ T9125] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 499.967133][ T9125] warn_alloc+0x214/0x310 [ 499.967170][ T9125] ? __pfx_warn_alloc+0x10/0x10 [ 499.967208][ T9125] ? __get_vm_area_node+0x28f/0x300 [ 499.967235][ T9125] ? nf_tables_newset+0x132b/0x2530 [ 499.967265][ T9125] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 499.967328][ T9125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.967363][ T9125] ? rcu_is_watching+0x15/0xb0 [ 499.967385][ T9125] ? nf_tables_newset+0x132b/0x2530 [ 499.967414][ T9125] ? nf_tables_newset+0x132b/0x2530 [ 499.967436][ T9125] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 499.967465][ T9125] ? nf_tables_newset+0x132b/0x2530 [ 499.967490][ T9125] ? nft_table_lookup+0x211/0x230 [ 499.967513][ T9125] ? nft_set_lookup+0x128/0x150 [ 499.967548][ T9125] ? nft_hash_privsize+0x5f/0xf0 [ 499.967573][ T9125] nf_tables_newset+0x132b/0x2530 [ 499.967612][ T9125] ? __pfx_nf_tables_newset+0x10/0x10 [ 499.967662][ T9125] ? __nla_parse+0x40/0x60 [ 499.967688][ T9125] nfnetlink_rcv+0x1132/0x2520 [ 499.967755][ T9125] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 499.967840][ T9125] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.967885][ T9125] netlink_unicast+0x82c/0x9e0 [ 499.967927][ T9125] ? __pfx_netlink_unicast+0x10/0x10 [ 499.967960][ T9125] ? netlink_sendmsg+0x642/0xb30 [ 499.967980][ T9125] ? skb_put+0x11b/0x210 [ 499.968007][ T9125] netlink_sendmsg+0x805/0xb30 [ 499.968040][ T9125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.968066][ T9125] ? aa_sock_msg_perm+0xf1/0x1d0 [ 499.968089][ T9125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.968109][ T9125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.968130][ T9125] __sock_sendmsg+0x21c/0x270 [ 499.968163][ T9125] ____sys_sendmsg+0x505/0x830 [ 499.968192][ T9125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.968228][ T9125] ? import_iovec+0x74/0xa0 [ 499.968257][ T9125] ___sys_sendmsg+0x21f/0x2a0 [ 499.968285][ T9125] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.968350][ T9125] ? __fget_files+0x2a/0x420 [ 499.968366][ T9125] ? __fget_files+0x3a0/0x420 [ 499.968396][ T9125] __x64_sys_sendmsg+0x19b/0x260 [ 499.968425][ T9125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.968463][ T9125] ? rcu_is_watching+0x15/0xb0 [ 499.968488][ T9125] ? do_syscall_64+0xbe/0x3b0 [ 499.968515][ T9125] do_syscall_64+0xfa/0x3b0 [ 499.968545][ T9125] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.968565][ T9125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.968585][ T9125] ? clear_bhb_loop+0x60/0xb0 [ 499.968610][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.968628][ T9125] RIP: 0033:0x7fc69ff8eba9 [ 499.968646][ T9125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.968662][ T9125] RSP: 002b:00007fc6a0e86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.968683][ T9125] RAX: ffffffffffffffda RBX: 00007fc6a01d5fa0 RCX: 00007fc69ff8eba9 [ 499.968697][ T9125] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 499.968709][ T9125] RBP: 00007fc6a0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 499.968721][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.968732][ T9125] R13: 00007fc6a01d6038 R14: 00007fc6a01d5fa0 R15: 00007ffdfab842a8 [ 499.968765][ T9125] [ 500.334465][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 500.342539][ C0] lec:lec_tx_timeout: lec0 [ 500.347778][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 500.356159][ T9125] Mem-Info: [ 500.367451][ T9125] active_anon:6067 inactive_anon:0 isolated_anon:0 [ 500.367451][ T9125] active_file:2564 inactive_file:39898 isolated_file:0 [ 500.367451][ T9125] unevictable:768 dirty:113 writeback:0 [ 500.367451][ T9125] slab_reclaimable:10978 slab_unreclaimable:106175 [ 500.367451][ T9125] mapped:29294 shmem:1360 pagetables:1293 [ 500.367451][ T9125] sec_pagetables:0 bounce:0 [ 500.367451][ T9125] kernel_misc_reclaimable:0 [ 500.367451][ T9125] free:1312434 free_pcp:16122 free_cma:0 [ 500.414648][ T9125] Node 0 active_anon:24268kB inactive_anon:0kB active_file:10256kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117176kB dirty:448kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13112kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.446659][ T9125] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.479806][ T9125] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.510713][ T9125] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 500.516546][ T9125] Node 0 DMA32 free:1343508kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24220kB inactive_anon:0kB active_file:10256kB inactive_file:157820kB unevictable:1536kB writepending:448kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:47792kB local_pcp:27584kB free_cma:0kB [ 500.550413][ T9125] lowmem_reserve[]: 0 0 1 1 1 [ 500.555185][ T9125] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 500.585188][ T9125] lowmem_reserve[]: 0 0 0 0 0 [ 500.590169][ T9125] Node 1 Normal free:3892120kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15848kB local_pcp:8320kB free_cma:0kB [ 500.621713][ T9125] lowmem_reserve[]: 0 0 0 0 0 [ 500.626506][ T9125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 500.640750][ T9125] Node 0 DMA32: 1355*4kB (UM) 885*8kB (UM) 256*16kB (UME) 81*32kB (UME) 131*64kB (UME) 105*128kB (UM) 28*256kB (UM) 38*512kB (UME) 18*1024kB (U) 4*2048kB (U) 305*4096kB (UM) = 1343540kB [ 500.659907][ T9125] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 500.673417][ T9125] Node 1 Normal: 162*4kB (UME) 38*8kB (UME) 36*16kB (UME) 93*32kB (UME) 32*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3892120kB [ 500.692252][ T9125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.701982][ T9125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.711494][ T9125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.721457][ T9125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.730906][ T9125] 43818 total pagecache pages [ 500.735640][ T9125] 0 pages in swap cache [ 500.739895][ T9125] Free swap = 124996kB [ 500.744068][ T9125] Total swap = 124996kB [ 500.749155][ T9125] 2097051 pages RAM [ 500.752987][ T9125] 0 pages HighMem/MovableOnly [ 500.757797][ T9125] 425670 pages reserved [ 500.761970][ T9125] 0 pages cma reserved [ 500.909554][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 501.633106][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.639810][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.790409][ T9185] !: renamed from dummy0 (while UP) [ 501.834824][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 501.902436][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 502.011559][ T9214] netlink: 'syz.3.875': attribute type 4 has an invalid length. [ 502.144676][ T9221] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 502.251092][ T9221] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 502.344119][ T9231] tipc: Enabled bearer , priority 0 [ 502.443496][ T9231] syzkaller0: entered promiscuous mode [ 502.449276][ T9231] syzkaller0: entered allmulticast mode [ 502.495355][ T9243] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 502.650903][ T9243] tipc: Resetting bearer [ 503.092029][ T9229] tipc: Resetting bearer [ 503.194464][ T9229] tipc: Disabling bearer [ 503.230361][ T9267] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 503.240343][ T9222] vxcan1 speed is unknown, defaulting to 1000 [ 503.246763][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 503.278225][ T9267] netlink: 244 bytes leftover after parsing attributes in process `syz.0.885'. [ 503.991735][ T9306] netlink: 52 bytes leftover after parsing attributes in process `syz.2.893'. [ 504.001141][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 504.660809][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 504.726714][ T9327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 504.832028][ T9327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'. [ 504.870457][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 504.895856][ T9339] netlink: 'syz.3.900': attribute type 1 has an invalid length. [ 504.906093][ T9339] netlink: 224 bytes leftover after parsing attributes in process `syz.3.900'. [ 505.714819][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 505.727040][ T6015] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 505.752100][ T9380] gretap0: entered promiscuous mode [ 505.815043][ T9378] !€ÿ: renamed from bond_slave_0 [ 505.996378][ T9389] net_ratelimit: 219 callbacks suppressed [ 505.996399][ T9389] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.107434][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 506.115473][ C0] lec:lec_tx_timeout: lec0 [ 506.120237][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.183498][ T9395] bridge0: port 3(vlan1) entered blocking state [ 506.203253][ T9395] bridge0: port 3(vlan1) entered disabled state [ 506.212837][ T9395] vlan1: entered allmulticast mode [ 506.228337][ T9395] gretap0: entered allmulticast mode [ 506.274730][ T9395] vlan1: entered promiscuous mode [ 506.284730][ T9395] gretap0: entered promiscuous mode [ 506.493364][ T9405] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 506.531636][ T9405] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 506.889329][ T9417] netlink: 'syz.2.919': attribute type 18 has an invalid length. [ 507.000134][ T9425] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 507.053754][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.127253][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.161821][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.219579][ T6296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.253416][ T9428] openvswitch: netlink: IP tunnel dst address not specified [ 507.580609][ T9452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.893076][ T9467] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 507.932043][ T9468] IPv6: sit2: Disabled Multicast RS [ 508.441918][ T9489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.448066][ T9490] __nla_validate_parse: 6 callbacks suppressed [ 508.448083][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 508.476358][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 508.486550][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 508.503483][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 509.055989][ T9499] syzkaller0: entered promiscuous mode [ 509.077752][ T9499] syzkaller0: entered allmulticast mode [ 509.108185][ T9516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.940'. [ 509.130093][ T9512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.940'. [ 509.825916][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 510.757476][ T9530] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 511.095366][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 511.127437][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.135485][ C0] lec:lec_tx_timeout: lec0 [ 511.140645][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 511.180739][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 511.212434][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 511.291846][ T9559] team0: Port device 0! removed [ 511.329572][ T9559] bridge_slave_0: left allmulticast mode [ 511.342102][ T9559] bridge_slave_0: left promiscuous mode [ 511.349405][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.376075][ T9559] bridge_slave_1: left allmulticast mode [ 511.402923][ T9559] bridge_slave_1: left promiscuous mode [ 511.413548][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.434188][ T9559] bond0: (slave bond_slave_0): Releasing backup interface [ 511.456973][ T9559] bond0: (slave bond_slave_1): Releasing backup interface [ 511.494410][ T9559] team0: Port device team_slave_0 removed [ 511.514739][ T9559] team0: Port device team_slave_1 removed [ 511.533448][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.541312][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.560291][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.572370][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.604660][ T9559] bond1: (slave geneve2): Releasing active interface [ 511.622641][ T9567] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 511.658083][ T9570] netlink: 'syz.2.955': attribute type 29 has an invalid length. [ 512.566596][ T9619] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 512.635847][ T9625] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 512.712995][ T9625] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 512.745698][ T9632] xt_time: unknown flags 0xf4 [ 513.131803][ T6037] IPVS: starting estimator thread 0... [ 513.139377][ T9648] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 513.247560][ T9652] IPVS: using max 23 ests per chain, 55200 per kthread [ 513.426403][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 513.768656][ T9690] __nla_validate_parse: 9 callbacks suppressed [ 513.768676][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 513.789763][ T94] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 90 seconds [ 513.801293][ T94] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 90 seconds [ 513.803389][ T9690] netlink: 'syz.2.984': attribute type 3 has an invalid length. [ 513.813336][ T94] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 90 seconds [ 513.831870][ T94] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 90 seconds [ 514.302645][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.990'. [ 514.328434][ T9709] netlink: 44 bytes leftover after parsing attributes in process `syz.4.990'. [ 514.353767][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.990'. [ 514.403266][ T9711] netlink: 'syz.1.991': attribute type 2 has an invalid length. [ 514.805481][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 514.851936][ T9730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.901697][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 514.949335][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 514.972491][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 515.004035][ T9738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 515.050002][ T9738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1000'. [ 515.080670][ T9742] block nbd1: server does not support multiple connections per device. [ 515.109322][ T9742] block nbd1: shutting down sockets [ 515.559783][ T9761] netlink: 'syz.0.1006': attribute type 9 has an invalid length. [ 515.815076][ T9777] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 516.147466][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 516.155549][ C0] lec:lec_tx_timeout: lec0 [ 516.160457][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.412197][ T9812] team_slave_0: entered promiscuous mode [ 516.418124][ T9812] team_slave_1: entered promiscuous mode [ 516.455210][ T9812] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 516.479423][ T9812] team0: Device macvtap1 is already an upper device of the team interface [ 516.502994][ T9812] team_slave_0: left promiscuous mode [ 516.508594][ T9812] team_slave_1: left promiscuous mode [ 516.609125][ T9814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.756928][ T9818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.797943][ T9818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.918691][ T9829] "syz.4.1026" (9829) uses obsolete ecb(arc4) skcipher [ 517.038440][ T9818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.087945][ T9818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.409692][ T9818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.465205][ T9818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.514131][ T9870] 8021q: VLANs not supported on lo [ 517.524627][ T9871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.577218][ T9872] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 517.657114][ T9871] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 517.784514][ T9818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.812925][ T9818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.882301][ T9871] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 517.883894][ T9872] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 517.912642][ T9885] vlan1: left allmulticast mode [ 517.957441][ T9885] gretap0: left allmulticast mode [ 517.977968][ T9885] vlan1: left promiscuous mode [ 517.998593][ T9885] gretap0: left promiscuous mode [ 518.014249][ T9885] bridge0: port 3(vlan1) entered disabled state [ 518.053048][ T9885] bridge_slave_1: left allmulticast mode [ 518.077491][ T9885] bridge_slave_1: left promiscuous mode [ 518.099508][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.163130][ T9885] bridge_slave_0: left allmulticast mode [ 518.177707][ T9885] bridge_slave_0: left promiscuous mode [ 518.193792][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.440772][ T6296] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.473831][ T6296] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.548690][ T6010] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.556926][ T6010] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.587811][ T5930] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 518.594407][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 518.691088][ T9917] netlink: 'syz.4.1048': attribute type 13 has an invalid length. [ 518.738032][ T5947] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.749098][ T5947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.764642][ T5947] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.773758][ T5947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.842637][ T9925] __nla_validate_parse: 14 callbacks suppressed [ 518.842658][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 518.972604][ T9917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.022996][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 519.056887][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 519.092645][ T9933] openvswitch: netlink: Missing key (keys=40, expected=80) [ 519.492891][ T9945] pimreg3: entered allmulticast mode [ 519.839367][ T9967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.879458][ T9966] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1061'. [ 519.947007][ T9963] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1062'. [ 520.031771][ T9975] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1065'. [ 520.041083][ T9963] netlink: 'syz.1.1062': attribute type 7 has an invalid length. [ 520.082330][ T9963] : entered promiscuous mode [ 520.100236][ T9975] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1065'. [ 520.103006][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 520.135698][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 520.157895][ T9975] gretap0: entered promiscuous mode [ 520.270719][ T9985] tipc: Enabled bearer , priority 13 [ 520.352685][ T9992] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 520.379987][ T9962] vxcan1 speed is unknown, defaulting to 1000 [ 520.701984][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 521.167563][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 521.175691][ C0] lec:lec_tx_timeout: lec0 [ 521.180505][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 521.398673][ T6037] tipc: Node number set to 4176991250 [ 521.812668][T10054] tipc: Enabling of bearer rejected, failed to enable media [ 522.045000][T10064] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 522.299555][T10064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.381823][T10068] bond3: (slave gretap1): making interface the new active one [ 522.421810][T10068] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 522.846389][T10102] netlink: 'syz.4.1098': attribute type 12 has an invalid length. [ 523.018899][T10107] syzkaller0: entered promiscuous mode [ 523.024447][T10107] syzkaller0: entered allmulticast mode [ 523.072788][T10107] tipc: Enabled bearer , priority 0 [ 523.097999][T10107] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 523.170366][T10107] tipc: Resetting bearer [ 523.194899][T10105] tipc: Resetting bearer [ 523.319700][T10105] tipc: Disabling bearer [ 523.400066][T10129] netlink: 'syz.3.1105': attribute type 21 has an invalid length. [ 523.665982][T10139] openvswitch: netlink: Missing key (keys=40, expected=80) [ 523.809671][T10144] veth3: entered promiscuous mode [ 523.814943][T10144] veth3: entered allmulticast mode [ 524.154763][T10156] __nla_validate_parse: 5 callbacks suppressed [ 524.154817][T10156] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1116'. [ 526.187583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 526.195656][ C0] lec:lec_tx_timeout: lec0 [ 526.200285][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.094313][ T5240] udevd[5240]: worker [6043] /devices/virtual/block/nbd4 is taking a long time [ 531.207583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.215590][ C0] lec:lec_tx_timeout: lec0 [ 531.220237][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.430100][ T5935] Bluetooth: hci4: command 0x0406 tx timeout [ 534.430340][ T5924] Bluetooth: hci2: command 0x0406 tx timeout [ 534.436160][ T5935] Bluetooth: hci0: command 0x0c1a tx timeout [ 534.442250][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 536.227587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.235622][ C0] lec:lec_tx_timeout: lec0 [ 536.240319][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 540.094729][ T5930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.105173][ T5930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.120298][ T5930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.144031][ T5930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.152573][ T5930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 540.261131][ T5930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.271473][ T5930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.280378][ T5930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.288878][ T5930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.296692][ T5930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 540.443312][ T5930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 540.461096][ T5929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 540.461351][ T5934] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 540.478190][ T5934] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 540.486236][ T5929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 540.486236][ T5934] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 540.503239][ T5929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 540.503258][ T5934] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 540.519636][ T5934] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 540.527122][ T5934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 540.593312][ T5190] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 540.608948][ T5190] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 540.622957][ T5190] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 540.634637][ T5190] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 540.643288][ T5190] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 540.776730][T10166] vxcan1 speed is unknown, defaulting to 1000 [ 541.064417][T10168] vxcan1 speed is unknown, defaulting to 1000 [ 541.487952][T10171] vxcan1 speed is unknown, defaulting to 1000 [ 541.519963][T10166] chnl_net:caif_netlink_parms(): no params data found [ 541.939565][T10170] vxcan1 speed is unknown, defaulting to 1000 [ 541.948627][T10166] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.955798][T10166] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.978463][T10166] bridge_slave_0: entered allmulticast mode [ 541.986730][T10166] bridge_slave_0: entered promiscuous mode [ 542.010675][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.027422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 542.027956][T10166] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.035449][ C0] lec:lec_tx_timeout: lec0 [ 542.044298][T10166] bridge_slave_1: entered allmulticast mode [ 542.047475][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.070419][T10166] bridge_slave_1: entered promiscuous mode [ 542.188013][ T5190] Bluetooth: hci5: command tx timeout [ 542.279121][T10166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.337159][T10166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.352700][ T5190] Bluetooth: hci6: command tx timeout [ 542.365970][T10168] chnl_net:caif_netlink_parms(): no params data found [ 542.461944][T10174] vxcan1 speed is unknown, defaulting to 1000 [ 542.502906][T10166] team0: Port device team_slave_0 added [ 542.512059][T10166] team0: Port device team_slave_1 added [ 542.593514][ T5190] Bluetooth: hci8: command tx timeout [ 542.596341][ T5934] Bluetooth: hci7: command tx timeout [ 542.667674][ T5934] Bluetooth: hci9: command tx timeout [ 542.707000][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.715989][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.748279][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.805217][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.812310][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.839747][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.940366][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.947684][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.954851][T10168] bridge_slave_0: entered allmulticast mode [ 542.962410][T10168] bridge_slave_0: entered promiscuous mode [ 543.025551][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.033137][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.041007][T10168] bridge_slave_1: entered allmulticast mode [ 543.050023][T10168] bridge_slave_1: entered promiscuous mode [ 543.127595][T10171] chnl_net:caif_netlink_parms(): no params data found [ 543.143091][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.159909][T10166] hsr_slave_0: entered promiscuous mode [ 543.166309][T10166] hsr_slave_1: entered promiscuous mode [ 543.172577][T10166] debugfs: 'hsr0' already exists in 'hsr' [ 543.178472][T10166] Cannot create hsr debugfs directory [ 543.210877][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.305821][T10168] team0: Port device team_slave_0 added [ 543.317190][T10168] team0: Port device team_slave_1 added [ 543.415519][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.422613][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.449560][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.501149][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.509085][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.535058][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.673768][T10171] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.682028][T10171] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.689487][T10171] bridge_slave_0: entered allmulticast mode [ 543.696619][T10171] bridge_slave_0: entered promiscuous mode [ 543.704324][T10170] chnl_net:caif_netlink_parms(): no params data found [ 543.756388][T10171] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.763981][T10171] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.771845][T10171] bridge_slave_1: entered allmulticast mode [ 543.779273][T10171] bridge_slave_1: entered promiscuous mode [ 543.877524][ T94] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 120 seconds [ 543.889035][ T94] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 120 seconds [ 543.900934][ T94] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 120 seconds [ 543.912179][ T94] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 120 seconds [ 544.009304][T10168] hsr_slave_0: entered promiscuous mode [ 544.015670][T10168] hsr_slave_1: entered promiscuous mode [ 544.022235][T10168] debugfs: 'hsr0' already exists in 'hsr' [ 544.028542][T10168] Cannot create hsr debugfs directory [ 544.043165][T10174] chnl_net:caif_netlink_parms(): no params data found [ 544.066164][T10171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.111528][T10171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.250958][T10171] team0: Port device team_slave_0 added [ 544.267833][ T5934] Bluetooth: hci5: command tx timeout [ 544.269378][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.280924][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.288471][T10170] bridge_slave_0: entered allmulticast mode [ 544.295533][T10170] bridge_slave_0: entered promiscuous mode [ 544.334356][T10171] team0: Port device team_slave_1 added [ 544.371658][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.382292][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.390918][T10170] bridge_slave_1: entered allmulticast mode [ 544.398258][T10170] bridge_slave_1: entered promiscuous mode [ 544.427873][ T5934] Bluetooth: hci6: command tx timeout [ 544.492213][T10171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.499625][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.527062][T10171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.571743][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.616983][T10171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.624370][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.650693][T10171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.662438][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.670830][ T5934] Bluetooth: hci7: command tx timeout [ 544.674766][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.676921][ T5190] Bluetooth: hci8: command tx timeout [ 544.683514][T10174] bridge_slave_0: entered allmulticast mode [ 544.698152][T10174] bridge_slave_0: entered promiscuous mode [ 544.708928][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.747863][ T5190] Bluetooth: hci9: command tx timeout [ 544.774207][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.781793][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.789863][T10174] bridge_slave_1: entered allmulticast mode [ 544.796940][T10174] bridge_slave_1: entered promiscuous mode [ 544.879880][T10170] team0: Port device team_slave_0 added [ 544.919219][T10171] hsr_slave_0: entered promiscuous mode [ 544.925569][T10171] hsr_slave_1: entered promiscuous mode [ 544.932782][T10171] debugfs: 'hsr0' already exists in 'hsr' [ 544.938641][T10171] Cannot create hsr debugfs directory [ 544.946056][T10170] team0: Port device team_slave_1 added [ 544.975383][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.040321][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.050731][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.058239][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.085275][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.101415][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.108619][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.134711][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.228851][T10174] team0: Port device team_slave_0 added [ 545.238346][T10174] team0: Port device team_slave_1 added [ 545.326498][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.333758][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.360793][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.406422][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.413644][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.440486][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.468061][T10170] hsr_slave_0: entered promiscuous mode [ 545.474421][T10170] hsr_slave_1: entered promiscuous mode [ 545.481727][T10170] debugfs: 'hsr0' already exists in 'hsr' [ 545.487665][T10170] Cannot create hsr debugfs directory [ 545.643309][T10174] hsr_slave_0: entered promiscuous mode [ 545.650120][T10174] hsr_slave_1: entered promiscuous mode [ 545.656165][T10174] debugfs: 'hsr0' already exists in 'hsr' [ 545.662431][T10174] Cannot create hsr debugfs directory [ 546.347629][ T5190] Bluetooth: hci5: command tx timeout [ 546.507744][ T5190] Bluetooth: hci6: command tx timeout [ 546.758158][ T5934] Bluetooth: hci7: command tx timeout [ 546.763775][ T5190] Bluetooth: hci8: command tx timeout [ 546.828481][ T5190] Bluetooth: hci9: command tx timeout [ 547.067573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 547.075607][ C0] lec:lec_tx_timeout: lec0 [ 547.080681][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 548.427790][ T5190] Bluetooth: hci5: command tx timeout [ 548.588150][ T5190] Bluetooth: hci6: command tx timeout [ 548.827927][ T5190] Bluetooth: hci8: command tx timeout [ 548.828165][ T5934] Bluetooth: hci7: command tx timeout [ 548.907618][ T5934] Bluetooth: hci9: command tx timeout [ 552.087622][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 552.095651][ C0] lec:lec_tx_timeout: lec0 [ 552.100383][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 557.107438][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 557.115482][ C0] lec:lec_tx_timeout: lec0 [ 557.120554][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 562.127435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 562.135479][ C0] lec:lec_tx_timeout: lec0 [ 562.140901][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 563.073401][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.080030][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.147765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.155814][ C0] lec:lec_tx_timeout: lec0 [ 567.160419][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 572.167431][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 572.175485][ C0] lec:lec_tx_timeout: lec0 [ 572.180566][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 573.956018][ T94] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 150 seconds [ 573.967547][ T94] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 150 seconds [ 573.978881][ T94] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 150 seconds [ 573.990769][ T94] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 150 seconds [ 577.187441][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 577.195462][ C0] lec:lec_tx_timeout: lec0 [ 577.200330][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 582.207776][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 582.215821][ C0] lec:lec_tx_timeout: lec0 [ 582.220416][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 587.227653][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 587.235699][ C0] lec:lec_tx_timeout: lec0 [ 587.240365][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.067606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 593.075674][ C0] lec:lec_tx_timeout: lec0 [ 593.080600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.087723][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 598.095762][ C0] lec:lec_tx_timeout: lec0 [ 598.100406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 600.636127][ T5190] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 600.648662][ T5190] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 600.657015][ T5190] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 600.667842][ T5190] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 600.677729][ T5190] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 600.733339][ T5929] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 600.743733][ T5929] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 600.751846][ T5929] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 600.764250][ T5929] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 600.772236][ T5929] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 600.790997][ T5930] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 600.808153][ T5930] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 600.816193][ T5930] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 600.825759][ T5930] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 600.837105][ T5930] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 600.912760][ T5934] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 600.921768][ T5934] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 600.930116][ T5934] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 600.940219][ T5934] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 600.948422][ T5934] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 600.995521][ T5934] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 601.004826][ T5934] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 601.020071][ T5934] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 601.056217][ T5934] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 601.065280][ T5934] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 601.207217][T10213] vxcan1 speed is unknown, defaulting to 1000 [ 601.562998][T10211] vxcan1 speed is unknown, defaulting to 1000 [ 602.003774][T10213] chnl_net:caif_netlink_parms(): no params data found [ 602.036694][T10215] vxcan1 speed is unknown, defaulting to 1000 [ 602.412797][T10217] vxcan1 speed is unknown, defaulting to 1000 [ 602.425632][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.447832][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.455132][T10213] bridge_slave_0: entered allmulticast mode [ 602.470475][T10213] bridge_slave_0: entered promiscuous mode [ 602.545609][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.578509][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.585812][T10213] bridge_slave_1: entered allmulticast mode [ 602.619863][T10213] bridge_slave_1: entered promiscuous mode [ 602.747953][ T5930] Bluetooth: hci10: command tx timeout [ 602.786561][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.815881][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.828321][ T5930] Bluetooth: hci11: command tx timeout [ 602.886420][T10219] vxcan1 speed is unknown, defaulting to 1000 [ 602.907996][ T5930] Bluetooth: hci12: command tx timeout [ 602.975715][T10213] team0: Port device team_slave_0 added [ 602.987908][ T5930] Bluetooth: hci13: command tx timeout [ 603.008458][T10213] team0: Port device team_slave_1 added [ 603.107450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 603.115496][ C0] lec:lec_tx_timeout: lec0 [ 603.120122][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 603.147869][ T5930] Bluetooth: hci14: command tx timeout [ 603.251243][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.259061][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.288385][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.301309][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.308429][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.334706][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.352703][T10211] chnl_net:caif_netlink_parms(): no params data found [ 603.500370][T10213] hsr_slave_0: entered promiscuous mode [ 603.507254][T10213] hsr_slave_1: entered promiscuous mode [ 603.514079][T10213] debugfs: 'hsr0' already exists in 'hsr' [ 603.519886][T10213] Cannot create hsr debugfs directory [ 603.696637][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.704279][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.712517][T10211] bridge_slave_0: entered allmulticast mode [ 603.722630][T10211] bridge_slave_0: entered promiscuous mode [ 603.740950][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.751204][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.759911][T10211] bridge_slave_1: entered allmulticast mode [ 603.767102][T10211] bridge_slave_1: entered promiscuous mode [ 603.953983][T10211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.029448][T10215] chnl_net:caif_netlink_parms(): no params data found [ 604.042812][ T94] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 180 seconds [ 604.056347][ T94] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 180 seconds [ 604.071224][ T94] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 180 seconds [ 604.082301][ T94] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 180 seconds [ 604.108838][T10211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.122625][ T5240] udevd[5240]: worker [6043] /devices/virtual/block/nbd4 timeout; kill it [ 604.138129][ T5240] udevd[5240]: seq 11269 '/devices/virtual/block/nbd4' killed [ 604.220519][T10217] chnl_net:caif_netlink_parms(): no params data found [ 604.319406][T10211] team0: Port device team_slave_0 added [ 604.430471][T10211] team0: Port device team_slave_1 added [ 604.524191][T10219] chnl_net:caif_netlink_parms(): no params data found [ 604.535317][T10215] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.544037][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.552775][T10215] bridge_slave_0: entered allmulticast mode [ 604.561387][T10215] bridge_slave_0: entered promiscuous mode [ 604.623587][T10215] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.631022][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.642307][T10215] bridge_slave_1: entered allmulticast mode [ 604.650616][T10215] bridge_slave_1: entered promiscuous mode [ 604.658898][T10211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.665858][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.695534][T10211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.737126][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.744488][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.752269][T10217] bridge_slave_0: entered allmulticast mode [ 604.760479][T10217] bridge_slave_0: entered promiscuous mode [ 604.812647][T10211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.820127][T10211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.852942][T10211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.852972][ T5930] Bluetooth: hci10: command tx timeout [ 604.890442][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.898289][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.905557][T10217] bridge_slave_1: entered allmulticast mode [ 604.911744][ T5930] Bluetooth: hci11: command tx timeout [ 604.913870][T10217] bridge_slave_1: entered promiscuous mode [ 604.947167][T10215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.988569][ T5930] Bluetooth: hci12: command tx timeout [ 605.013840][T10217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.025862][T10215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.067675][ T5930] Bluetooth: hci13: command tx timeout [ 605.075382][T10217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.203525][T10215] team0: Port device team_slave_0 added [ 605.213747][T10215] team0: Port device team_slave_1 added [ 605.228186][ T5930] Bluetooth: hci14: command tx timeout [ 605.273619][T10211] hsr_slave_0: entered promiscuous mode [ 605.281392][T10211] hsr_slave_1: entered promiscuous mode [ 605.287666][T10211] debugfs: 'hsr0' already exists in 'hsr' [ 605.293420][T10211] Cannot create hsr debugfs directory [ 605.336024][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.343562][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.351374][T10219] bridge_slave_0: entered allmulticast mode [ 605.360272][T10219] bridge_slave_0: entered promiscuous mode [ 605.370704][T10217] team0: Port device team_slave_0 added [ 605.407196][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.414662][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.422249][T10219] bridge_slave_1: entered allmulticast mode [ 605.431264][T10219] bridge_slave_1: entered promiscuous mode [ 605.440554][T10217] team0: Port device team_slave_1 added [ 605.485168][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.495713][T10215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.503255][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.530389][T10215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.612278][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.639675][T10215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.646663][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.673935][T10215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.709069][T10217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.716061][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.742866][T10217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.756328][T10217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.763488][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.791788][T10217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.840854][T10219] team0: Port device team_slave_0 added [ 605.870231][T10219] team0: Port device team_slave_1 added [ 606.001212][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.009284][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.039380][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.058559][T10215] hsr_slave_0: entered promiscuous mode [ 606.064997][T10215] hsr_slave_1: entered promiscuous mode [ 606.072133][T10215] debugfs: 'hsr0' already exists in 'hsr' [ 606.078009][T10215] Cannot create hsr debugfs directory [ 606.098065][T10217] hsr_slave_0: entered promiscuous mode [ 606.104474][T10217] hsr_slave_1: entered promiscuous mode [ 606.111509][T10217] debugfs: 'hsr0' already exists in 'hsr' [ 606.117267][T10217] Cannot create hsr debugfs directory [ 606.124021][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.131630][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.160017][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.376648][T10219] hsr_slave_0: entered promiscuous mode [ 606.385287][T10219] hsr_slave_1: entered promiscuous mode [ 606.392246][T10219] debugfs: 'hsr0' already exists in 'hsr' [ 606.398867][T10219] Cannot create hsr debugfs directory [ 606.917940][ T5930] Bluetooth: hci10: command tx timeout [ 606.988031][ T5930] Bluetooth: hci11: command tx timeout [ 607.068013][ T5930] Bluetooth: hci12: command tx timeout [ 607.158600][ T5930] Bluetooth: hci13: command tx timeout [ 607.318215][ T5930] Bluetooth: hci14: command tx timeout [ 608.127678][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 608.135687][ C0] lec:lec_tx_timeout: lec0 [ 608.140373][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 608.987999][ T5930] Bluetooth: hci10: command tx timeout [ 609.067655][ T5930] Bluetooth: hci11: command tx timeout [ 609.149303][ T5929] Bluetooth: hci12: command tx timeout [ 609.227498][ T5929] Bluetooth: hci13: command tx timeout [ 609.387581][ T5929] Bluetooth: hci14: command tx timeout [ 611.237781][ T5930] Bluetooth: hci3: command 0x0405 tx timeout [ 613.147448][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 613.155486][ C0] lec:lec_tx_timeout: lec0 [ 613.161364][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 618.167619][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 618.175671][ C0] lec:lec_tx_timeout: lec0 [ 618.180326][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 623.197467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 623.205520][ C0] lec:lec_tx_timeout: lec0 [ 623.210823][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.511017][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.517436][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.227420][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 628.235465][ C0] lec:lec_tx_timeout: lec0 [ 628.240909][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.027416][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 634.035430][ C0] lec:lec_tx_timeout: lec0 [ 634.040720][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.107939][ T55] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 210 seconds [ 634.118851][ T55] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 210 seconds [ 634.130153][ T55] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 210 seconds [ 634.141228][ T55] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 210 seconds [ 639.067711][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 639.075769][ C0] lec:lec_tx_timeout: lec0 [ 639.080484][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 644.087407][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 644.095446][ C0] lec:lec_tx_timeout: lec0 [ 644.100146][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 649.107465][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 649.115509][ C0] lec:lec_tx_timeout: lec0 [ 649.120615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 654.127401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 654.135471][ C0] lec:lec_tx_timeout: lec0 [ 654.140107][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 659.147596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 659.155662][ C0] lec:lec_tx_timeout: lec0 [ 659.160310][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 661.104463][ T5934] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 661.119519][ T5934] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 661.128055][ T5934] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 661.136812][ T5934] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 661.144718][ T5934] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 661.340323][ T5934] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 661.350368][ T5934] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 661.358746][ T5934] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 661.378459][ T5934] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 661.387799][ T5934] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 661.409746][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 661.420702][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 661.429389][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 661.438101][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 661.446094][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 661.496533][ T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 661.505744][ T51] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 661.514270][ T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 661.523080][ T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 661.531079][ T51] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 661.618388][ T51] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 661.637770][ T5924] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 661.646304][ T5924] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 661.655012][ T5924] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 661.663964][ T5924] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 661.815385][T10256] vxcan1 speed is unknown, defaulting to 1000 [ 662.171934][T10260] vxcan1 speed is unknown, defaulting to 1000 [ 662.427680][ T5924] Bluetooth: hci5: command 0x0406 tx timeout [ 662.427878][ T5934] Bluetooth: hci6: command 0x0406 tx timeout [ 662.615484][T10256] chnl_net:caif_netlink_parms(): no params data found [ 662.768148][T10258] vxcan1 speed is unknown, defaulting to 1000 [ 662.909900][T10256] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.917207][T10256] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.925019][T10256] bridge_slave_0: entered allmulticast mode [ 662.940181][T10256] bridge_slave_0: entered promiscuous mode [ 663.011983][T10256] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.027682][T10256] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.035015][T10256] bridge_slave_1: entered allmulticast mode [ 663.043942][T10256] bridge_slave_1: entered promiscuous mode [ 663.221652][T10256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.237444][ T5929] Bluetooth: hci15: command tx timeout [ 663.261202][T10256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.353451][T10256] team0: Port device team_slave_0 added [ 663.362728][T10256] team0: Port device team_slave_1 added [ 663.415954][T10262] vxcan1 speed is unknown, defaulting to 1000 [ 663.467761][ T5929] Bluetooth: hci16: command tx timeout [ 663.548468][ T5929] Bluetooth: hci17: command tx timeout [ 663.626779][T10256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.637415][ T5929] Bluetooth: hci18: command tx timeout [ 663.657539][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.697023][T10256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.708247][ T5929] Bluetooth: hci19: command tx timeout [ 663.764879][T10256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.772766][T10256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.799341][T10256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.862771][T10264] vxcan1 speed is unknown, defaulting to 1000 [ 663.906583][T10260] chnl_net:caif_netlink_parms(): no params data found [ 664.167227][T10256] hsr_slave_0: entered promiscuous mode [ 664.174887][T10256] hsr_slave_1: entered promiscuous mode [ 664.177399][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 664.182459][T10256] debugfs: 'hsr0' already exists in 'hsr' [ 664.188464][ C0] lec:lec_tx_timeout: lec0 [ 664.197521][ T55] block nbd4: Possible stuck request ffff88802537e000: control (read@0,1024B). Runtime 240 seconds [ 664.200216][T10256] Cannot create hsr debugfs directory [ 664.210650][ T55] block nbd4: Possible stuck request ffff88802537e1c0: control (read@1024,1024B). Runtime 240 seconds [ 664.210685][ T55] block nbd4: Possible stuck request ffff88802537e380: control (read@2048,1024B). Runtime 240 seconds [ 664.238496][ T55] block nbd4: Possible stuck request ffff88802537e540: control (read@3072,1024B). Runtime 240 seconds [ 664.566911][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.574685][T10260] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.582858][T10260] bridge_slave_0: entered allmulticast mode [ 664.591808][T10260] bridge_slave_0: entered promiscuous mode [ 664.601523][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.609953][T10260] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.617296][T10260] bridge_slave_1: entered allmulticast mode [ 664.625126][T10260] bridge_slave_1: entered promiscuous mode [ 664.799171][T10258] chnl_net:caif_netlink_parms(): no params data found [ 664.855197][T10260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.934763][T10260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.074845][T10262] chnl_net:caif_netlink_parms(): no params data found [ 665.156191][T10260] team0: Port device team_slave_0 added [ 665.218879][T10260] team0: Port device team_slave_1 added [ 665.225113][T10264] chnl_net:caif_netlink_parms(): no params data found [ 665.308267][ T5929] Bluetooth: hci15: command tx timeout [ 665.386043][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.393971][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.402483][T10258] bridge_slave_0: entered allmulticast mode [ 665.411244][T10258] bridge_slave_0: entered promiscuous mode [ 665.421872][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.429482][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.436678][T10258] bridge_slave_1: entered allmulticast mode [ 665.444243][T10258] bridge_slave_1: entered promiscuous mode [ 665.474148][T10260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.482555][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.509827][T10260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.557951][ T5924] Bluetooth: hci16: command tx timeout [ 665.608885][T10260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.615879][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.642830][T10260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.648400][ T5924] Bluetooth: hci17: command tx timeout [ 665.708505][ T5924] Bluetooth: hci18: command tx timeout [ 665.718994][T10262] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.727294][T10262] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.735616][T10262] bridge_slave_0: entered allmulticast mode [ 665.749771][T10262] bridge_slave_0: entered promiscuous mode [ 665.773185][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.787087][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.807542][ T5924] Bluetooth: hci19: command tx timeout [ 665.835756][T10262] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.843333][T10262] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.851698][T10262] bridge_slave_1: entered allmulticast mode [ 665.861619][T10262] bridge_slave_1: entered promiscuous mode [ 665.906644][T10260] hsr_slave_0: entered promiscuous mode [ 665.914450][T10260] hsr_slave_1: entered promiscuous mode [ 665.921111][T10260] debugfs: 'hsr0' already exists in 'hsr' [ 665.926861][T10260] Cannot create hsr debugfs directory [ 666.014900][T10258] team0: Port device team_slave_0 added [ 666.074689][T10258] team0: Port device team_slave_1 added [ 666.141391][T10262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.150981][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.159682][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.166923][T10264] bridge_slave_0: entered allmulticast mode [ 666.175141][T10264] bridge_slave_0: entered promiscuous mode [ 666.192514][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.200650][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.208443][T10264] bridge_slave_1: entered allmulticast mode [ 666.215649][T10264] bridge_slave_1: entered promiscuous mode [ 666.244625][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.251978][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.278611][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.306642][T10262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.361966][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.369298][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.395792][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.498940][T10262] team0: Port device team_slave_0 added [ 666.517200][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.568734][T10262] team0: Port device team_slave_1 added [ 666.579298][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.661178][T10258] hsr_slave_0: entered promiscuous mode [ 666.668825][T10258] hsr_slave_1: entered promiscuous mode [ 666.674954][T10258] debugfs: 'hsr0' already exists in 'hsr' [ 666.682465][T10258] Cannot create hsr debugfs directory [ 666.736956][T10264] team0: Port device team_slave_0 added [ 666.765784][T10262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.773719][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.801306][T10262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.815382][T10262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.823008][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.850045][T10262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.882787][T10264] team0: Port device team_slave_1 added [ 667.030732][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.037896][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.065309][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.081180][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.088290][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.114680][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.160576][T10262] hsr_slave_0: entered promiscuous mode [ 667.167000][T10262] hsr_slave_1: entered promiscuous mode [ 667.173558][T10262] debugfs: 'hsr0' already exists in 'hsr' [ 667.179414][T10262] Cannot create hsr debugfs directory [ 667.328769][T10264] hsr_slave_0: entered promiscuous mode [ 667.335239][T10264] hsr_slave_1: entered promiscuous mode [ 667.342152][T10264] debugfs: 'hsr0' already exists in 'hsr' [ 667.348180][T10264] Cannot create hsr debugfs directory [ 667.388516][ T5924] Bluetooth: hci15: command tx timeout [ 667.548943][ T5924] Bluetooth: hci9: command 0x0406 tx timeout [ 667.553726][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 667.554994][ T5190] Bluetooth: hci8: command 0x0406 tx timeout [ 667.628771][ T5934] Bluetooth: hci16: command tx timeout [ 667.719252][ T5934] Bluetooth: hci17: command tx timeout [ 667.798989][ T5934] Bluetooth: hci18: command tx timeout [ 667.867610][ T5934] Bluetooth: hci19: command tx timeout [ 669.467651][ T5934] Bluetooth: hci15: command tx timeout [ 669.707991][ T5934] Bluetooth: hci16: command tx timeout [ 669.787512][ T5934] Bluetooth: hci17: command tx timeout [ 669.867590][ T5934] Bluetooth: hci18: command tx timeout [ 669.957613][ T5934] Bluetooth: hci19: command tx timeout [ 671.227729][ T31] INFO: task dhcpcd:5534 blocked for more than 143 seconds. [ 671.235043][ T31] Not tainted syzkaller #0 [ 671.241104][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.250598][ T31] task:dhcpcd state:D stack:24920 pid:5534 tgid:5534 ppid:1 task_flags:0x400140 flags:0x00004002 [ 671.262753][ T31] Call Trace: [ 671.266046][ T31] [ 671.269236][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 671.273795][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.286114][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.296568][ T31] ? __pfx___schedule+0x10/0x10 [ 671.328282][ T31] ? schedule+0x91/0x360 [ 671.332588][ T31] schedule+0x165/0x360 [ 671.336778][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.361895][ T31] __mutex_lock+0x7e6/0x1350 [ 671.366552][ T31] ? __mutex_lock+0x5bb/0x1350 [ 671.392466][ T31] ? genl_rcv_msg+0x10d/0x790 [ 671.397244][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.408144][ T31] ? stack_trace_save+0x9c/0xe0 [ 671.413050][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 671.418610][ T31] ? radix_tree_lookup+0x240/0x290 [ 671.423765][ T31] genl_rcv_msg+0x10d/0x790 [ 671.428446][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.433333][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.438787][ T31] netlink_rcv_skb+0x208/0x470 [ 671.443581][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.448540][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.453601][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.459007][ T31] ? down_read+0x1ad/0x2e0 [ 671.463461][ T31] genl_rcv+0x28/0x40 [ 671.468094][ T31] netlink_unicast+0x82c/0x9e0 [ 671.472915][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 671.478316][ T31] ? netlink_sendmsg+0x642/0xb30 [ 671.483283][ T31] ? skb_put+0x11b/0x210 [ 671.487720][ T31] netlink_sendmsg+0x805/0xb30 [ 671.492528][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.498336][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.503222][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 671.508400][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.513714][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.519094][ T31] __sock_sendmsg+0x21c/0x270 [ 671.523813][ T31] ____sys_sendmsg+0x505/0x830 [ 671.528988][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.534320][ T31] ? import_iovec+0x74/0xa0 [ 671.538959][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 671.543670][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.549845][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 671.554865][ T31] ? __might_fault+0xb0/0x130 [ 671.559926][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 671.564902][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.570503][ T31] ? __secure_computing+0xe2/0x2a0 [ 671.575652][ T31] do_syscall_64+0xfa/0x3b0 [ 671.580266][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.585491][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.591980][ T31] ? clear_bhb_loop+0x60/0xb0 [ 671.596683][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.602703][ T31] RIP: 0033:0x7f7b8d060407 [ 671.607135][ T31] RSP: 002b:00007ffea9d23810 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 671.615808][ T31] RAX: ffffffffffffffda RBX: 00007f7b8cfd6740 RCX: 00007f7b8d060407 [ 671.624133][ T31] RDX: 0000000000000000 RSI: 00007ffea9d23890 RDI: 000000000000000e [ 671.632320][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 671.640470][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555d15ad3e10 [ 671.648766][ T31] R13: 000000000000000e R14: 00007ffea9d37d50 R15: 0000555d1e11d340 [ 671.656767][ T31] [ 671.659991][ T31] INFO: task syz.4.1106:10119 blocked for more than 143 seconds. [ 671.667898][ T31] Not tainted syzkaller #0 [ 671.672854][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.681878][ T31] task:syz.4.1106 state:D stack:26024 pid:10119 tgid:10118 ppid:5916 task_flags:0x480140 flags:0x00004004 [ 671.693990][ T31] Call Trace: [ 671.697310][ T31] [ 671.700948][ T31] __schedule+0x1798/0x4cc0 [ 671.705493][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.710739][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.715650][ T31] ? __pfx___schedule+0x10/0x10 [ 671.721971][ T31] ? schedule+0x91/0x360 [ 671.726284][ T31] schedule+0x165/0x360 [ 671.731647][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 671.737144][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 671.743387][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 671.750372][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 671.756296][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 671.762687][ T31] nbd_set_size+0x47e/0x6a0 [ 671.767232][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 671.772396][ T31] ? nla_memcpy+0x5b/0xc0 [ 671.776753][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 671.782291][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 671.788053][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 671.794057][ T31] ? bpf_lsm_capable+0x9/0x20 [ 671.798896][ T31] ? security_capable+0x7e/0x2e0 [ 671.803874][ T31] ? radix_tree_lookup+0x240/0x290 [ 671.809088][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 671.814435][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 671.820367][ T31] ? __nla_parse+0x40/0x60 [ 671.824813][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 671.831235][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 671.836819][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 671.843187][ T31] ? stack_trace_save+0x9c/0xe0 [ 671.848175][ T31] genl_rcv_msg+0x60e/0x790 [ 671.852737][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.858007][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 671.863760][ T31] netlink_rcv_skb+0x208/0x470 [ 671.868665][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.873542][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.878747][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.884082][ T31] ? down_read+0x1ad/0x2e0 [ 671.888804][ T31] genl_rcv+0x28/0x40 [ 671.892818][ T31] netlink_unicast+0x82c/0x9e0 [ 671.897822][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 671.903151][ T31] ? netlink_sendmsg+0x642/0xb30 [ 671.908177][ T31] netlink_sendmsg+0x805/0xb30 [ 671.913007][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.918466][ T31] ? __lock_acquire+0xab9/0xd20 [ 671.923344][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 671.928366][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.933677][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.939179][ T31] __sock_sendmsg+0x21c/0x270 [ 671.943913][ T31] ____sys_sendmsg+0x505/0x830 [ 671.948986][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.954306][ T31] ? import_iovec+0x74/0xa0 [ 671.959056][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 671.963772][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.969099][ T31] ? __fget_files+0x2a/0x420 [ 671.973718][ T31] ? __fget_files+0x3a0/0x420 [ 671.978656][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 671.983633][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.989198][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.993999][ T31] ? do_syscall_64+0xbe/0x3b0 [ 671.998818][ T31] do_syscall_64+0xfa/0x3b0 [ 672.003344][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.008685][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.014780][ T31] ? clear_bhb_loop+0x60/0xb0 [ 672.019683][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.025592][ T31] RIP: 0033:0x7f5938f8eba9 [ 672.030235][ T31] RSP: 002b:00007f5939d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.038781][ T31] RAX: ffffffffffffffda RBX: 00007f59391d5fa0 RCX: 00007f5938f8eba9 [ 672.046779][ T31] RDX: 0000000000048810 RSI: 0000200000000180 RDI: 0000000000000004 [ 672.054902][ T31] RBP: 00007f5939011e19 R08: 0000000000000000 R09: 0000000000000000 [ 672.063079][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.071129][ T31] R13: 00007f59391d6038 R14: 00007f59391d5fa0 R15: 00007ffe331b1a48 [ 672.079197][ T31] [ 672.082270][ T31] INFO: task syz.3.1105:10126 blocked for more than 144 seconds. [ 672.090064][ T31] Not tainted syzkaller #0 [ 672.095034][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.107269][ T31] task:syz.3.1105 state:D stack:27944 pid:10126 tgid:10120 ppid:5922 task_flags:0x400140 flags:0x00004004 [ 672.119845][ T31] Call Trace: [ 672.123150][ T31] [ 672.126127][ T31] __schedule+0x1798/0x4cc0 [ 672.130713][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.135593][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.140558][ T31] ? __pfx___schedule+0x10/0x10 [ 672.145439][ T31] ? schedule+0x91/0x360 [ 672.149761][ T31] schedule+0x165/0x360 [ 672.153948][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.159580][ T31] __mutex_lock+0x7e6/0x1350 [ 672.164197][ T31] ? __mutex_lock+0x5bb/0x1350 [ 672.169120][ T31] ? genl_rcv_msg+0x10d/0x790 [ 672.173826][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.178982][ T31] ? stack_trace_save+0x9c/0xe0 [ 672.183864][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 672.189392][ T31] ? radix_tree_lookup+0x240/0x290 [ 672.194534][ T31] genl_rcv_msg+0x10d/0x790 [ 672.199122][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.204006][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.209145][ T31] netlink_rcv_skb+0x208/0x470 [ 672.213935][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.218913][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.223965][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.229435][ T31] ? down_read+0x1ad/0x2e0 [ 672.233877][ T31] genl_rcv+0x28/0x40 [ 672.237946][ T31] netlink_unicast+0x82c/0x9e0 [ 672.242763][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 672.248136][ T31] ? netlink_sendmsg+0x642/0xb30 [ 672.253096][ T31] ? skb_put+0x11b/0x210 [ 672.257452][ T31] netlink_sendmsg+0x805/0xb30 [ 672.262254][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.267665][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 672.272633][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.278110][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.283423][ T31] __sock_sendmsg+0x21c/0x270 [ 672.288199][ T31] ____sys_sendmsg+0x505/0x830 [ 672.292994][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.298402][ T31] ? import_iovec+0x74/0xa0 [ 672.302945][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 672.307706][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.312987][ T31] ? __fget_files+0x2a/0x420 [ 672.317673][ T31] ? __fget_files+0x3a0/0x420 [ 672.322385][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 672.327406][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.332906][ T31] ? rcu_is_watching+0x15/0xb0 [ 672.337835][ T31] ? do_syscall_64+0xbe/0x3b0 [ 672.342536][ T31] do_syscall_64+0xfa/0x3b0 [ 672.347032][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.352414][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.358574][ T31] ? clear_bhb_loop+0x60/0xb0 [ 672.363279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.369237][ T31] RIP: 0033:0x7fb22578eba9 [ 672.373673][ T31] RSP: 002b:00007fb226572038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.382163][ T31] RAX: ffffffffffffffda RBX: 00007fb2259d5fa0 RCX: 00007fb22578eba9 [ 672.390300][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 672.398367][ T31] RBP: 00007fb225811e19 R08: 0000000000000000 R09: 0000000000000000 [ 672.406358][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.414424][ T31] R13: 00007fb2259d6038 R14: 00007fb2259d5fa0 R15: 00007fff6d404098 [ 672.422485][ T31] [ 672.425548][ T31] INFO: task syz.0.1108:10131 blocked for more than 144 seconds. [ 672.433583][ T31] Not tainted syzkaller #0 [ 672.438614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.447298][ T31] task:syz.0.1108 state:D stack:25864 pid:10131 tgid:10130 ppid:5919 task_flags:0x400140 flags:0x00004004 [ 672.460384][ T31] Call Trace: [ 672.463685][ T31] [ 672.466637][ T31] __schedule+0x1798/0x4cc0 [ 672.471333][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.476218][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.481160][ T31] ? __pfx___schedule+0x10/0x10 [ 672.486035][ T31] ? schedule+0x91/0x360 [ 672.490362][ T31] schedule+0x165/0x360 [ 672.494545][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.500172][ T31] __mutex_lock+0x7e6/0x1350 [ 672.504786][ T31] ? __mutex_lock+0x5bb/0x1350 [ 672.509937][ T31] ? genl_rcv_msg+0x10d/0x790 [ 672.514660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.519982][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 672.525148][ T31] ? radix_tree_lookup+0x240/0x290 [ 672.530393][ T31] genl_rcv_msg+0x10d/0x790 [ 672.534925][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.540063][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 672.545109][ T31] ? __asan_memcpy+0x40/0x70 [ 672.549883][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.555293][ T31] netlink_rcv_skb+0x208/0x470 [ 672.561091][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.565990][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.571126][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.576443][ T31] ? down_read+0x1ad/0x2e0 [ 672.580995][ T31] genl_rcv+0x28/0x40 [ 672.585003][ T31] netlink_unicast+0x82c/0x9e0 [ 672.590068][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 672.595385][ T31] ? netlink_sendmsg+0x642/0xb30 [ 672.600424][ T31] ? skb_put+0x11b/0x210 [ 672.604706][ T31] netlink_sendmsg+0x805/0xb30 [ 672.609637][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.614945][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 672.619978][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.625282][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.630750][ T31] __sock_sendmsg+0x21c/0x270 [ 672.635456][ T31] __sys_sendto+0x3bd/0x520 [ 672.640056][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 672.645112][ T31] ? count_memcg_event_mm+0x21/0x260 [ 672.650491][ T31] ? exc_page_fault+0x76/0xf0 [ 672.655198][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 672.660597][ T31] __x64_sys_sendto+0xde/0x100 [ 672.665396][ T31] do_syscall_64+0xfa/0x3b0 [ 672.670464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.675696][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.681929][ T31] ? clear_bhb_loop+0x60/0xb0 [ 672.686656][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.692750][ T31] RIP: 0033:0x7f4b7cf90a3c [ 672.697193][ T31] RSP: 002b:00007f4b7b1f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 672.705790][ T31] RAX: ffffffffffffffda RBX: 00007f4b7b1f4fc0 RCX: 00007f4b7cf90a3c [ 672.713918][ T31] RDX: 0000000000000024 RSI: 00007f4b7b1f5010 RDI: 0000000000000004 [ 672.722083][ T31] RBP: 0000000000000000 R08: 00007f4b7b1f4f14 R09: 000000000000000c [ 672.730131][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 672.738203][ T31] R13: 00007f4b7b1f4f68 R14: 00007f4b7b1f5010 R15: 0000000000000000 [ 672.746208][ T31] [ 672.749520][ T31] INFO: task syz.1.1116:10156 blocked for more than 144 seconds. [ 672.757274][ T31] Not tainted syzkaller #0 [ 672.762348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.771092][ T31] task:syz.1.1116 state:D stack:24936 pid:10156 tgid:10154 ppid:5917 task_flags:0x400140 flags:0x00004004 [ 672.783213][ T31] Call Trace: [ 672.786514][ T31] [ 672.789594][ T31] __schedule+0x1798/0x4cc0 [ 672.794140][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.799565][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.804462][ T31] ? __pfx___schedule+0x10/0x10 [ 672.809422][ T31] ? schedule+0x91/0x360 [ 672.813681][ T31] schedule+0x165/0x360 [ 672.817917][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.823405][ T31] __mutex_lock+0x7e6/0x1350 [ 672.828380][ T31] ? __mutex_lock+0x5bb/0x1350 [ 672.833166][ T31] ? genl_rcv_msg+0x10d/0x790 [ 672.837932][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.842976][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 672.848172][ T31] ? radix_tree_lookup+0x240/0x290 [ 672.853333][ T31] genl_rcv_msg+0x10d/0x790 [ 672.857955][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.863011][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 672.868154][ T31] ? __asan_memcpy+0x40/0x70 [ 672.872771][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.878240][ T31] netlink_rcv_skb+0x208/0x470 [ 672.883025][ T31] ? __lock_acquire+0xab9/0xd20 [ 672.888034][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.893095][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.898497][ T31] ? down_read+0x1ad/0x2e0 [ 672.902938][ T31] genl_rcv+0x28/0x40 [ 672.906921][ T31] netlink_unicast+0x82c/0x9e0 [ 672.911942][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 672.917268][ T31] ? netlink_sendmsg+0x642/0xb30 [ 672.922320][ T31] ? skb_put+0x11b/0x210 [ 672.926591][ T31] netlink_sendmsg+0x805/0xb30 [ 672.931456][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.936774][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 672.941865][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.947174][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.952606][ T31] __sock_sendmsg+0x21c/0x270 [ 672.957461][ T31] __sys_sendto+0x3bd/0x520 [ 672.961998][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 672.967063][ T31] ? count_memcg_event_mm+0x21/0x260 [ 672.972461][ T31] ? exc_page_fault+0x76/0xf0 [ 672.977182][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 672.982586][ T31] __x64_sys_sendto+0xde/0x100 [ 672.987736][ T31] do_syscall_64+0xfa/0x3b0 [ 672.992273][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.997631][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.003713][ T31] ? clear_bhb_loop+0x60/0xb0 [ 673.008463][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.014372][ T31] RIP: 0033:0x7faf6e190a3c [ 673.018857][ T31] RSP: 002b:00007faf6f0f7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 673.027303][ T31] RAX: ffffffffffffffda RBX: 00007faf6f0f7fc0 RCX: 00007faf6e190a3c [ 673.035474][ T31] RDX: 0000000000000020 RSI: 00007faf6f0f8010 RDI: 000000000000000d [ 673.043515][ T31] RBP: 0000000000000000 R08: 00007faf6f0f7f14 R09: 000000000000000c [ 673.051731][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 673.059837][ T31] R13: 00007faf6f0f7f68 R14: 00007faf6f0f8010 R15: 0000000000000000 [ 673.068219][ T31] [ 673.071298][ T31] INFO: task syz.2.1117:10157 blocked for more than 145 seconds. [ 673.079279][ T31] Not tainted syzkaller #0 [ 673.084235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.092969][ T31] task:syz.2.1117 state:D stack:26696 pid:10157 tgid:10155 ppid:5923 task_flags:0x400140 flags:0x00004004 [ 673.105204][ T31] Call Trace: [ 673.108735][ T31] [ 673.111691][ T31] __schedule+0x1798/0x4cc0 [ 673.116226][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.121181][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.126069][ T31] ? __pfx___schedule+0x10/0x10 [ 673.130986][ T31] ? schedule+0x91/0x360 [ 673.135250][ T31] schedule+0x165/0x360 [ 673.139497][ T31] schedule_preempt_disabled+0x13/0x30 [ 673.144974][ T31] __mutex_lock+0x7e6/0x1350 [ 673.149873][ T31] ? __mutex_lock+0x5bb/0x1350 [ 673.154667][ T31] ? genl_rcv_msg+0x10d/0x790 [ 673.159561][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 673.164620][ T31] ? stack_trace_save+0x9c/0xe0 [ 673.169571][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 673.174968][ T31] ? radix_tree_lookup+0x240/0x290 [ 673.180188][ T31] genl_rcv_msg+0x10d/0x790 [ 673.184724][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.189749][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.194808][ T31] netlink_rcv_skb+0x208/0x470 [ 673.199647][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.204531][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.209699][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.215032][ T31] ? down_read+0x1ad/0x2e0 [ 673.219603][ T31] genl_rcv+0x28/0x40 [ 673.223615][ T31] netlink_unicast+0x82c/0x9e0 [ 673.228895][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 673.234227][ T31] ? netlink_sendmsg+0x642/0xb30 [ 673.241164][ T31] ? skb_put+0x11b/0x210 [ 673.245456][ T31] netlink_sendmsg+0x805/0xb30 [ 673.251457][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.256768][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.261902][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.267210][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.273038][ T31] __sock_sendmsg+0x21c/0x270 [ 673.278006][ T31] __sys_sendto+0x3bd/0x520 [ 673.282539][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 673.287975][ T31] ? count_memcg_event_mm+0x21/0x260 [ 673.293292][ T31] ? exc_page_fault+0x76/0xf0 [ 673.298425][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 673.303741][ T31] __x64_sys_sendto+0xde/0x100 [ 673.309007][ T31] do_syscall_64+0xfa/0x3b0 [ 673.313535][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.319161][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.325251][ T31] ? clear_bhb_loop+0x60/0xb0 [ 673.330407][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.336318][ T31] RIP: 0033:0x7fc69ff90a3c [ 673.341226][ T31] RSP: 002b:00007fc6a0e84ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 673.350943][ T31] RAX: ffffffffffffffda RBX: 00007fc6a0e84fc0 RCX: 00007fc69ff90a3c [ 673.359238][ T31] RDX: 0000000000000020 RSI: 00007fc6a0e85010 RDI: 0000000000000003 [ 673.367228][ T31] RBP: 0000000000000000 R08: 00007fc6a0e84f14 R09: 000000000000000c [ 673.375269][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 673.383397][ T31] R13: 00007fc6a0e84f68 R14: 00007fc6a0e85010 R15: 0000000000000000 [ 673.391688][ T31] [ 673.394762][ T31] INFO: task syz.2.1117:10159 blocked for more than 145 seconds. [ 673.402565][ T31] Not tainted syzkaller #0 [ 673.407580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.416269][ T31] task:syz.2.1117 state:D stack:28616 pid:10159 tgid:10155 ppid:5923 task_flags:0x400040 flags:0x00004004 [ 673.428455][ T31] Call Trace: [ 673.431748][ T31] [ 673.434678][ T31] __schedule+0x1798/0x4cc0 [ 673.439374][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.444326][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.449281][ T31] ? __pfx___schedule+0x10/0x10 [ 673.454185][ T31] ? schedule+0x91/0x360 [ 673.458541][ T31] schedule+0x165/0x360 [ 673.462718][ T31] schedule_preempt_disabled+0x13/0x30 [ 673.468368][ T31] __mutex_lock+0x7e6/0x1350 [ 673.472995][ T31] ? __mutex_lock+0x5bb/0x1350 [ 673.477856][ T31] ? genl_rcv_msg+0x10d/0x790 [ 673.482567][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 673.487764][ T31] ? stack_trace_save+0x9c/0xe0 [ 673.492649][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 673.498129][ T31] ? radix_tree_lookup+0x240/0x290 [ 673.503283][ T31] genl_rcv_msg+0x10d/0x790 [ 673.507973][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.512851][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.517996][ T31] netlink_rcv_skb+0x208/0x470 [ 673.522790][ T31] ? __lock_acquire+0xab9/0xd20 [ 673.527752][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.532811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.538147][ T31] ? down_read+0x1ad/0x2e0 [ 673.542559][ T31] genl_rcv+0x28/0x40 [ 673.546533][ T31] netlink_unicast+0x82c/0x9e0 [ 673.551584][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 673.556925][ T31] ? netlink_sendmsg+0x642/0xb30 [ 673.561921][ T31] ? skb_put+0x11b/0x210 [ 673.566208][ T31] netlink_sendmsg+0x805/0xb30 [ 673.571086][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.576393][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.581462][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.586767][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.592265][ T31] __sock_sendmsg+0x21c/0x270 [ 673.596975][ T31] __sys_sendto+0x3bd/0x520 [ 673.601622][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 673.606675][ T31] ? count_memcg_event_mm+0x21/0x260 [ 673.612053][ T31] ? exc_page_fault+0x76/0xf0 [ 673.616750][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 673.622123][ T31] __x64_sys_sendto+0xde/0x100 [ 673.626923][ T31] do_syscall_64+0xfa/0x3b0 [ 673.631673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.636896][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.643277][ T31] ? clear_bhb_loop+0x60/0xb0 [ 673.648191][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.654111][ T31] RIP: 0033:0x7fc69ff90a3c [ 673.658875][ T31] RSP: 002b:00007fc6a0e63ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 673.667313][ T31] RAX: ffffffffffffffda RBX: 00007fc6a0e63fc0 RCX: 00007fc69ff90a3c [ 673.675490][ T31] RDX: 0000000000000020 RSI: 00007fc6a0e64010 RDI: 0000000000000003 [ 673.683525][ T31] RBP: 0000000000000000 R08: 00007fc6a0e63f14 R09: 000000000000000c [ 673.691581][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 673.699646][ T31] R13: 00007fc6a0e63f68 R14: 00007fc6a0e64010 R15: 0000000000000000 [ 673.707984][ T31] [ 673.711079][ T31] [ 673.711079][ T31] Showing all locks held in the system: [ 673.718918][ T31] 1 lock held by khungtaskd/31: [ 673.723778][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 673.733748][ T31] 2 locks held by kworker/u8:3/49: [ 673.738952][ T31] 2 locks held by dhcpcd/5534: [ 673.743749][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.752107][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 673.761267][ T31] 2 locks held by getty/5629: [ 673.765958][ T31] #0: ffff888033d3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 673.775918][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 673.786172][ T31] 1 lock held by udevd/6043: [ 673.791243][ T31] #0: ffff8880252c1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 673.800592][ T31] 2 locks held by kworker/1:8/8658: [ 673.805810][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 673.815946][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 673.825014][ T31] 6 locks held by syz.4.1106/10119: [ 673.830401][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.838697][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 673.847793][ T31] #2: ffff8880251f9230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 673.858253][ T31] #3: ffff8881427a9aa8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 673.868113][ T31] #4: ffff8881427a9448 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 673.880378][ T31] #5: ffff8881427a9480 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 673.892833][ T31] 2 locks held by syz.3.1105/10126: [ 673.898082][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.906325][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 673.915550][ T31] 2 locks held by syz.0.1108/10131: [ 673.920819][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.929206][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 673.938262][ T31] 2 locks held by syz.1.1116/10156: [ 673.943452][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.951884][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 673.960978][ T31] 2 locks held by syz.2.1117/10157: [ 673.966188][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.974513][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 673.983589][ T31] 2 locks held by syz.2.1117/10159: [ 673.989028][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 673.997261][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.006569][ T31] 2 locks held by syz-executor/10166: [ 674.011994][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.020306][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.029753][ T31] 2 locks held by syz-executor/10168: [ 674.035137][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.043472][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.052556][ T31] 2 locks held by syz-executor/10170: [ 674.057987][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.066226][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.075544][ T31] 2 locks held by syz-executor/10171: [ 674.081046][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.089426][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.098767][ T31] 2 locks held by syz-executor/10174: [ 674.104152][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.112543][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.121634][ T31] 2 locks held by syz-executor/10211: [ 674.127019][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.135334][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.144374][ T31] 2 locks held by syz-executor/10213: [ 674.149982][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.158270][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.167286][ T31] 2 locks held by syz-executor/10215: [ 674.172750][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.181055][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.190335][ T31] 2 locks held by syz-executor/10217: [ 674.195723][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.204022][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.213203][ T31] 2 locks held by syz-executor/10219: [ 674.218658][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.226886][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.236079][ T31] 2 locks held by syz-executor/10256: [ 674.241557][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.249873][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.258999][ T31] 2 locks held by syz-executor/10258: [ 674.264376][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.272767][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.281833][ T31] 2 locks held by syz-executor/10260: [ 674.287223][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.295552][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.304603][ T31] 2 locks held by syz-executor/10262: [ 674.310158][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.318553][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.327645][ T31] 2 locks held by syz-executor/10264: [ 674.333032][ T31] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.341322][ T31] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 674.350523][ T31] [ 674.352866][ T31] ============================================= [ 674.352866][ T31] [ 674.361339][ T31] NMI backtrace for cpu 0 [ 674.361356][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 674.361377][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.361387][ T31] Call Trace: [ 674.361394][ T31] [ 674.361401][ T31] dump_stack_lvl+0x189/0x250 [ 674.361439][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.361462][ T31] ? __pfx__printk+0x10/0x10 [ 674.361502][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 674.361531][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 674.361563][ T31] ? __pfx__printk+0x10/0x10 [ 674.361597][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.361631][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.361662][ T31] watchdog+0xf93/0xfe0 [ 674.361696][ T31] ? watchdog+0x1de/0xfe0 [ 674.361730][ T31] kthread+0x70e/0x8a0 [ 674.361758][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.361786][ T31] ? __pfx_kthread+0x10/0x10 [ 674.361812][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.361843][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.361861][ T31] ? __pfx_kthread+0x10/0x10 [ 674.361887][ T31] ret_from_fork+0x436/0x7d0 [ 674.361911][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.361938][ T31] ? __switch_to_asm+0x39/0x70 [ 674.361962][ T31] ? __switch_to_asm+0x33/0x70 [ 674.361986][ T31] ? __pfx_kthread+0x10/0x10 [ 674.362011][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.362054][ T31] [ 674.362062][ T31] Sending NMI from CPU 0 to CPUs 1: [ 674.507745][ C1] NMI backtrace for cpu 1 [ 674.507764][ C1] CPU: 1 UID: 0 PID: 6296 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 674.507783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.507794][ C1] Workqueue: bat_events batadv_nc_worker [ 674.507823][ C1] RIP: 0010:__lock_acquire+0x4f2/0xd20 [ 674.507848][ C1] Code: 4c 8d 3c c7 49 81 c7 10 0b 00 00 eb 1d 44 89 e0 48 ff c3 48 63 8f e8 0a 00 00 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 <48> 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 [ 674.507862][ C1] RSP: 0018:ffffc9000b8278f0 EFLAGS: 00000082 [ 674.507875][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffffff [ 674.507886][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88807eb8bc00 [ 674.507896][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b47b3e2 [ 674.507906][ C1] R10: dffffc0000000000 R11: ffffffff8b47b310 R12: ffffffffffffff05 [ 674.507917][ C1] R13: 0000000000000001 R14: ffff88807eb8c740 R15: ffff88807eb8c710 [ 674.507928][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 674.507941][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.507952][ C1] CR2: 000055f7ffcb9000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 674.507968][ C1] Call Trace: [ 674.507974][ C1] [ 674.507984][ C1] ? batadv_nc_worker+0xd2/0x610 [ 674.508005][ C1] lock_acquire+0x120/0x360 [ 674.508025][ C1] ? batadv_nc_worker+0xd2/0x610 [ 674.508049][ C1] ? batadv_nc_worker+0xd2/0x610 [ 674.508070][ C1] ? batadv_nc_worker+0xd2/0x610 [ 674.508090][ C1] batadv_nc_worker+0xef/0x610 [ 674.508110][ C1] ? batadv_nc_worker+0xd2/0x610 [ 674.508131][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 674.508147][ C1] process_scheduled_works+0xae1/0x17b0 [ 674.508172][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.508201][ C1] worker_thread+0x8a0/0xda0 [ 674.508218][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.508244][ C1] ? __kthread_parkme+0x7b/0x200 [ 674.508263][ C1] kthread+0x70e/0x8a0 [ 674.508282][ C1] ? __pfx_worker_thread+0x10/0x10 [ 674.508297][ C1] ? __pfx_kthread+0x10/0x10 [ 674.508315][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.508337][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.508351][ C1] ? __pfx_kthread+0x10/0x10 [ 674.508369][ C1] ret_from_fork+0x436/0x7d0 [ 674.508385][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 674.508403][ C1] ? __switch_to_asm+0x39/0x70 [ 674.508422][ C1] ? __switch_to_asm+0x33/0x70 [ 674.508440][ C1] ? __pfx_kthread+0x10/0x10 [ 674.508458][ C1] ret_from_fork_asm+0x1a/0x30 [ 674.508483][ C1] [ 674.508821][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 674.772460][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 674.781573][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.791628][ T31] Call Trace: [ 674.794907][ T31] [ 674.797841][ T31] dump_stack_lvl+0x99/0x250 [ 674.802442][ T31] ? __asan_memcpy+0x40/0x70 [ 674.807038][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.812237][ T31] ? __pfx__printk+0x10/0x10 [ 674.816843][ T31] vpanic+0x281/0x750 [ 674.820829][ T31] ? __pfx_vpanic+0x10/0x10 [ 674.825336][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 674.830886][ T31] ? preempt_schedule+0xae/0xc0 [ 674.835737][ T31] ? preempt_schedule_common+0x83/0xd0 [ 674.841200][ T31] panic+0xb9/0xc0 [ 674.844940][ T31] ? __pfx_panic+0x10/0x10 [ 674.849381][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 674.854783][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 674.860964][ T31] watchdog+0xfd2/0xfe0 [ 674.865144][ T31] ? watchdog+0x1de/0xfe0 [ 674.869495][ T31] kthread+0x70e/0x8a0 [ 674.873577][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.878271][ T31] ? __pfx_kthread+0x10/0x10 [ 674.882887][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.888102][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.893310][ T31] ? __pfx_kthread+0x10/0x10 [ 674.897916][ T31] ret_from_fork+0x436/0x7d0 [ 674.902517][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.907636][ T31] ? __switch_to_asm+0x39/0x70 [ 674.912406][ T31] ? __switch_to_asm+0x33/0x70 [ 674.917190][ T31] ? __pfx_kthread+0x10/0x10 [ 674.921790][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.926580][ T31] [ 674.929832][ T31] Kernel Offset: disabled [ 674.934149][ T31] Rebooting in 86400 seconds..