last executing test programs: 18.215728194s ago: executing program 0 (id=2370): r0 = socket(0x2b, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x0) 18.073829859s ago: executing program 0 (id=2373): socket(0x2a, 0x4, 0x20ee) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 18.05481277s ago: executing program 2 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) 18.025794231s ago: executing program 0 (id=2376): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) socket(0x10, 0x803, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) (async) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x11) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400}) (async) 17.905124188s ago: executing program 1 (id=2377): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) 17.904817837s ago: executing program 2 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 17.901916717s ago: executing program 3 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="410000000900000000000a00000004800800"], 0x18}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000040), 0x4) r6 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) socketpair(0x1a, 0xa, 0x8000, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r9, 0x0) close(r9) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001ac0)={0x30e, 0xfffffffffffffffe, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.87059449s ago: executing program 1 (id=2380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000201f10200000000000000000a0000040c0019800800020001000000300002802c000180140003005de3e41077515723465181156feb1541bd76f3e4757688f1fd873ecd229b7a00fa97abaa250414750166afc7ec511a8551492f3f58aa4775d52ad5f9977467e0f2c68b42a227e5288e886f2a1a7d2064f86755d5752b859c087f"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) 17.848425701s ago: executing program 0 (id=2381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x3}}}, {0x8, 0x6558, 0x800000}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r1, 0x20, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17.769761998s ago: executing program 3 (id=2382): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018340000010000000000000000000000b510060010000000851000000700000018160000", @ANYRES32=r1, @ANYBLOB="000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffff9d03000008000000b7040000010000008500000082000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 17.765959387s ago: executing program 2 (id=2383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x344, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe39}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad1e991}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4296}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x49b}}}}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3bd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81a}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x166}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8d2}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb02}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x880}, 0x20004004) 17.760852748s ago: executing program 1 (id=2384): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x30fc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff3}}, 0xa, 0x8, 0x57, 0x2, 0x2}, &(0x7f00000000c0)=0x98) r3 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x11d, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x1, 0x1, 0x1}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1) 17.710621847s ago: executing program 3 (id=2385): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @loopback}, {0x1, @broadcast}, 0x16, {0x2, 0x4e21, @remote}, 'xfrm0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a80)={'ip_vti0\x00', &(0x7f0000001a00)={'syztnl2\x00', 0x0, 0x20, 0x10, 0xffffffff, 0x7, {{0xd, 0x4, 0x1, 0x3a, 0x34, 0x65, 0x0, 0xd2, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x5, [{@remote, 0x7}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010102, 0x5}]}, @end]}}}}}) sendmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[{0x110, 0x111, 0xff, "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"}, {0x110, 0x108, 0x4, "2a6e4b80e92dae5b85a575924b918c7a6d6ec70d4864be501a407fdb2844f0e30e51ca0afb80e43bcd2e2de1a325b0e496eb8279d1358db0d7527a77b3f74efd1eca1272366fea46957795df12b76f35a594bd3a05bf0844806137e1b6571512a6ba344b636ce83da6f19624f911e67911c6501b142923719af59b9669ab4e77c86c3d7504635cf6376dcf03a15353f4e8160e6fdb1e5ac804a1fe3f8038122b8f3e87ef2e47eb53b7e9479c4b127b2ef81790affb83a4eb903a69b3bf4bc69fe7429a3e40a8fe52dc3591f5d73dea9cd962cec463794719a126e5d8b13e3244e6cce302157c1628d34ebb2c2ce6dbf086d1b2dda080cef8d0"}, {0x108, 0x107, 0x5, "72e34604f03bed976cc5b1f6b8e56db28d47b69b1290c9c0a9aa724e8371f7373d8ed8e3b1c6b4564a1e92406bdb9928d6cb5e6d58b397b0ae2dca93e2b0795e2b51f7df354b56af6799c3d05660e10d3d3535419a13c5b9f673a95691f7c79068be46a9c6fe39afd5fa54f6ff4952b5267a62dd10745f89438dffa42a2053dbdbfc16af57764992be0a4fe2b47bcb973acb406fe0fabcb0fb9fb6a857f2f5d1aaf138c057688b63873a31f8375d9a36d3b16870c62df02c78cf778739ad0068b132aba6d706a6c9b5fe2e028d74be3a11e228571ca2c2c8d7d9997a3ab2d8720c0e1d1da09df92870a3a9730480ba77e6"}, {0x68, 0x108, 0x4, "23fdd67a3289987f0f4f571c80d4639c80a3151ac10554dad120b431fc39b08dd50d856718c68bddba32f6745f3852faf32c5862ebc36d9dc9f7da857aeaad25afbdb7166824c48b5c092708e716bc77d860"}, {0x1010, 0x10d, 0x8, "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"}, {0x78, 0x119, 0x8, "c3ef7b252bee8479163905caa6d6cd02396207acb96e4f689b63777ef3308b77f23a9eb1b95d10e630437b4d9784e3e44865e893ad41dfa1ee47f7c16f78ae2b5965e64d68ed053d0e6d15695c205cea31bea6eb4c091620982ddcf942734781b01eab691a"}], 0x1418}}, {{&(0x7f0000001580)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001600)="46400f6784899e480024ca5ecabdbed124b6e2e3c077f84feaccf577ef649e662958d4", 0x23}, {&(0x7f0000001640)="9ebbde189c31898ee36227adb3", 0xd}, {&(0x7f0000001680)="89c383af058f1f9b4ebb51010bbbef5fa1f7c019329f90b973428ed8975e4483d568763937aab18f315caaa584328e7516e1e0876f63113cbb11b4b3664c03bc93844258a5a0038f139edb3d0c05d31b7a14554ad738e54124b355f573248cc5b7cda83c97159a4e36cedc1d9cec8a621b48c5691511ff42bafc94004769428cb1026bea47af9b7e1f8cda954ab911c84606cb99a0654031600c2429c48e917bbb3d475320c0140902836e5a00d2218db680d7e328a136695221340204c2af77b3fc4494739d8df245f8dd27d2742483d4ea258c7429eea16b76cd18fd7a7dd1860cd63fc25834ea28771a8b2fa7e37b734c36206f3846", 0xf7}, {&(0x7f0000001780)="03d1aa0c7df142bf871f96e3640e75285268b7910c94a662d7639eded2a5e20865cb23144e7aa94459aede4aeb04d08922edf38cc17bff14e9d80a23dc2e672a45e41a164ad23e598266db8869f204cca2411a201a884e9760c0b36fd63ffd4fae6535713d9c3bad5ba0a80b7ebcec65b63f3e1619fc3e161fb26d2e627eaa7a3d561121f1d6ce0259", 0x89}, {&(0x7f0000001840)="e34699cd6158f0c38e6d7a357b82234c7a4255ec8e13f75265ca37966e67fc17e33461ec841763623f4bd8cc2477979c0dac8ee668b7", 0x36}, {&(0x7f0000001880)="cece9621c52b1f62a5e2014d8d68ea0f1864b93953018806e912a2e30ee5785f718cea0bbeba50223115b2f87e36a8e397d7264980448d3f460d053ca451d26cbef45d5c8127eb5de488de5a2936ae348d2ba46826d847d1463cc1bf327eb6c4418099e640", 0x65}], 0x6, &(0x7f0000001980)=[{0x80, 0x110, 0x7fffffff, "230ca808aad6f44005d1b404bacbe9e1df50fa877a94918219f76724e98e1c711e9765164d542c7956223018a34cd146664fd30b24fb4f51b92025d0df93fcc78e3f39c5f2ff7a3e4e9e839aee64b550565c1fbd94da551fc188a09607b8ae89c992bf739f584d81c8"}], 0x80}}, {{&(0x7f0000001ac0)=@xdp={0x2c, 0x2, r1, 0x37}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001b40)="255b6aaf3936e2954146eeaf7925fa99e92c7b41923122f17f6fadb42f7806020a5117968d7c0498622d25755967a8153c0702fb738c75a69531e82ec4bf062434e5442178ed2d601a74ce6fa07a23edaaa5d92b3d957b216731db60fe99034d8e5a79394d24be1f393ad8d273d4603a156551fcb1786bfa8f9ce8be7cceba527d4290f966d9dd8e96600d5668a98e3a2d88511e9e456d9ff61f0e54ec660d383376eaefb096beb8c0152695211a8371c2ae6eba71fbea03cef1588518f2f69551c7ce7ddf5d1305002f7f2dc1783ce6bf80c30630e36ec3513f1f4c13fc6bfa9611064e05262932331f26dc412fb860916ca4840337b0544a494afbff8aa1c4c23a65ca504cb92228ce0a0614c5823764e0ab8ce04fe8da1478eed247514b441a2dbabb87a0365e95d042197323d56383323c757b155a5fc298dc5903840b113b144fd442b04d35d814e8ac704558ed64f57d0f8d411777d54c1c6c5c63238d10b64ee2d51489bb2638e5df1ac982e52cde5401b3e2b6413931a1fdbc01f1d258acca684a05a4e551b2cc0162c99f00b8cd159b1e62282e48b785de35fca555c96dc116119dbfabed95a3a843501c5d8e9095a7848aebde7949b6bc9ddac90c3a556de25ac9496ccb73e5d8a80aaf85b674eeaa0bc08f3da11afbec0ea0041d2c5f621c0e189b50bb8d2f47432c7e74b62343f29280902d37d76a725c58c3b998689606a0a5adb2e941f3c1bc1a594445c6d86df0c639f14ff1c54bac8c1d06e287dc2d0f1f89c597204012711d6fc5ae5b8651fe521d959b0b43a23bb2ef16e8a590912582d23bbeae7f02418df444edff7a89eb81ca36c77fb721459deb7e48cfa4b74570d759bec4fc969257fd0cb98cf7e113f705092bd3ed145721cb8d364475e17db77a186f5ea6fb6464172dd95ba83ef4bfac3a1639e191c168edd3e6fdee8e894cc242a31726265859e950fba298ffab8cbe27ddc8f5a141479daab808c9e2cc42aa2518511c2a90fd14de728c511e5ac5c4d908b43162a6625d2dc7476e5583e84f269dae7163959cda31a67e7e00617bb7916fcae21bae5165b2eaa113f388503851425d6d8c8ddfc98667072307028ba87ca442c70cb3b3afab0b1343b7ca04cc3a21cf1f86c3e972dd86a58e0c117ee2db04b66c540fdc1705d7b5a98b77288551b5c2e884d1f41381828d2a93c8d5d61d8409a97e8ce351b77f53cacbd5a4a3f305d285cce7c8d54f5ff35b85062e4bebd1ad9644e7dd9b183a73487f814a569ada6dec60382c854fbf72b9f1f7d7173cb14bb8a97f70765242282feaee42f5844efee651d61a5652c8640d7ccfa1c3978fc083838a7be6fa0749856e133548e560c2a8106bc42cca890d097dc58284e356ba4fd82b82cf6d8b3cf49b23ffaa158bd4b5932c466315fadde38cb7ac1798dd238ca65f3bf1a49e68958f9e2026a5261372266bcaaff4428048977e732eb19bf91a0a6657ec04dbd4e97ed14bf773ef8a1b6f1763386620fabd4e785a416d541cbc2d26c8069f3ce9c19c24acce9e6834feaf818d51cd291ba73b0b0855bd291f3544dd94adabea1993cb387688c05f78ca6598e627977d57c0bb910f96f3e4ca1d315805ceb7d63b216ba58ff3e30b12c0086157a34973c0c447d29edff2a61e10281227426df54f03de74ca13d5ea314efa3673b56452bdb11b6cb979bc0305202befc1989e216d1b52eda6fa825b8c5616da87889f86ff2a9866193f74b84dd7ff323752630efeef8735409bf342fcb5b43d42afa9c8337ae95bd039c14f6c6677fc1a1a4913e96b6dd97aefbbaf0449e400488bec463767401c5c48036e1cb4b46d097567fc0c6315da28994603b723ab087a355e912df244439524ff2721edc1d2749000ae8e504137c780df1cc57f52c901f9ad1dbae92318dc3e3e684a4fad01e63f3b6f3c0e2f8c435a981b96abc324a71a14b20e219656e0f22d0227847e19489233abc00e8bbf5d4ab7c20451e11bcae2555d644833ea886af8997866cfe4795d7bff1d4c3c6f58f094b48ea3e11d25a9c5fa1fe3ccb44ae897de94afdbde882a34b71c8887c00fad7e8e88d207f3c410f7927df321813991cc2ff2d13ef376a0c212cf7face2bcb31ae2a5ae102cb78611d6c8f0e75f4c7c4d3ffba63424b395f1d2f81e692c505488c035be3c91526ce3ad20663b0e9d127f7b3387d460e6429236cca57b766541a8c6162c1f799ad4fe75068928975e0cef00528f4f2dd8e8c19b86c81644eeaaafd4ddb51908358a8add911a08ee4f5f5d03a86cdf8dbba59815b24987433f816551db70bb78b0da82bbb7d48da3bbf5f59135a0111a11acf6e99c8cf2e14e54e2b71d979ce252afb22e680f87e501cb9fd37f3178a922691e3e1f016ce0b826d32c9828e85d36478696a6595745c41519b4ead38076cad193de8eea1b423d0b4710a9fa48c20520a78b77d71a9756039249acba2a0cc17ce733b3e998b1751c9ddfeffa329597bf1382d717514ac2ae5a38f2cdc1376f257b61daa664b17222677e8df6dda8d917e8af83148a23a60d588ee061adfe29f08e50c97353e1091f6e0cd249625be886c99160640b95b6d9faf69e165e57cbfde2fd658dbf6833514eecb606cd92dd81b1f5157024e67db0fa1c3a54b133227f9d7349fef382dd0b0e614c8d6d2719a8eccf7df366e48c43ef810690dec5ed18d78f1fccaeb63c02f9adb5e0a88c4f703d23dbe0cf87064d7c03a4df691072525d407eaa474e65e0e76553d1fa79a3cf87d9284219491ef78f1e7c4529ce9d72b6c3a5d6e59b9f5d30af5fadf82891df84a1ff2441fc356a0e6f942813905439cb689a029777e10dc6969b8dd5f5ee17da4c7be7d3201c6eb61546bfdfabf313bf30ce1486a93b5763e8dcd4eae6e134209b44a65baf9a0900fc2e68d465d30ece05370bd49ad0259be160e754710e21830b43ebf58c73d64e60dd113dd8fbab9999100c47c748d0bb9fa5ae4215ddddd4abed4cec0be581914992eb2b8028cf53a9137f9c743b067030da77e604a0052cbed9840d90945d8742e920ee546aacdeb874f96acb26350906ae260a7899eb8ddd1847640cc22c034b3d040e8174110bc3ecf224be32b6225ab8bee89f9bfd30ee5b869996aec3e390d2325fb51f3be43a23b08658ca84486b8e37bdd9a9202e6d973279a19195ee665071c70ad487c8202df1068f5018212c06310a653f0767347721e7984380e145c71337f75e0d55f94de8c78b46ef9a4e3d2e1d15f379a9658926594bbf540b4dbc5d4ab5b87412ae8560e898bae119aaf6762ad9857a9946dd51a22a9d636f489c8af416eef65536f4dc9c6aa910b53e5b10a7d4980f2e71b062570a76a309ae6d66e6b13b593eae5252fe5e2d4dff1e3f6f930597107ed7bd9ea243829494509188750ff52e56f6312d6617b00369598b4b7cd7da343e3e1d808e20a4202ca81c0d7dd6767ce8f26bd7b0985e1018b9520a96eb022506213310d8a26e2cd25dae6af20a1e39717aed4f0876a1bd25301e3f5a795d0b0b612d8995139bba064efb6dfdaaf180af4d3a46e8b6a48a42a347f9fd177a11aaa401fd780cddcd1cc60c70417db89d47e6debe704d792ae63417c28cdac7e6e77e3c6631e582d60e179467fcba87a93d4f3b6fc2f9a8f0036bfab485db953c1511d3c75c1e02c951aed30a067f1351e3344874c9843863f90ad5727fe32dc842d11dc7fcb9d95f26fbfd3bbc9ae85740fc85370c9261d98ce682584cc7e55bf48354ad0198682e492d8713d566136616b6e3923873681d75f438e6fa843178399ae126bad9edff64466bc823788274cd4e4b6447d7f160c0d1565f225bb34b27d53e58e39519ef5aaba47e8abebb56cf1aa0d08514a8df5dadd4946f920f4bf74afffbe09dd328ff0e510c93c4253cc47f5a9854bb48a5c1b47406e696967f5dc8949f52abe2a7d67fa8557a712886d4979626bcaac3ff27d585f40fdd7ae98ba36c77551e105cbab8667777ac16ab200a2ec3bffc6acb419c4f5240a5dab516d582b511538e975654dcc2bf59625e5d4302da56ad3624f557dfde6f46867b855b55300d0c0519a9c11d0d6adef083c190b9e55343a973ad64291a50af1492bcca23df82cbe66d264843cc0e053bf80a7ae33d46bc7a82d93fa4b2ed5be1adacf30786bcd6d6d765127e2dfce87a87af2e767e9163eaa23dbf56129dbb88b0e57db1a36fbd7afb0f2d373d115eb4f2f979273db710e2190e9a1b388422cf392e8db8431307a83d30ef3549a464c165412978651290a03d828a59cee36ef8637be100e8b8f9dc744ddec1f2dc5d137e71c99f4437b1bcfb61298a3f417d972fa708a76fc92bd7955dd63f77fe2d16eb6379f275eef7dc358dd8f7c0f0d5b7210c4e93c4d65ab770193d0a4cfd32258a02511b6b6cb5ddd13b9d4ddad9396b0d035e407be7347b52ea01c8215b28e3ce61641ac67d8637eb4dc083aae831c4d701fef6ebcad51ab78b41cb26d5d85851e1f83ae5d82bbbead921fdc8a7a3425109dd41405c4885cb31ac49ab3101acc5e1f568d10af53ad0e13b84fe102ab0bd58cdf573376ac2109d3afa12ad8512c8ad6bb4bd35d09606e191868404f7b9a8764e2729d51f3f2b4795aef19f9788e5ef121ff1b67b251e3169d52fced6dcfbff2250323fff8f0583ee537d4665e2c5b2c64647bfaa5a9c45a43de44d90a83b54b02183da51a116a705a714fdfcd4664948d82d84720a3542316bae0a0e780e366275d213c21fdb44dee58b8415117ca167e6e87f1e0078258e43f0e393b1835297f06e164f5cb351e3f3c74c02bf3fa49a84fd26aa34a22770f6d7ffd6116f71cedb6fe58ee3f2a3b437fb56fedce5e230c1b5e735a15b54da940ccbb08e6f2763ae4b3867c3113fb6e3bc220a029f950cb897ee926c7b23108ab9f1b87c3220372675de100ee391ff49eedd01ad724d11b249b6e0de7075c6554bc1c117cf92d04a37881c3ebd4f245e948940efc3225a8c6de54fa2186beb489c4d804535d8f798dcc78c538b30b096d218485d8b2976a0e19529a2ccc4da00f039ce16c8436369b5053aa569ca7ce14e420182a2b47cedd994bc6aafb1c23e2b36cd3602f4028bec342caf3a24787b1013cb74b937aec78763b4ffa2669dacc8f97d798c5ea14f9ee25b924d56e781204df612234df2dc281fd24abddcdb233445e33167484c094d28fe3f917867e8f40415c174e96344ca66c1c370cb9b7428d00e20e93376f498109fa6ba995e26913ef13a91c042cf1a001639feaf8c90bdf68d1805fdd5879fcb69e5577ceb32e5e1d586de963afea3fb15fc5ca414aa311fa2d8af7144fd7d1fd09769b240ec2a241913f9c7ccb62363440717de4cec0538cb92f8a1639be8b56b1bd3c4b5967a9df945272a41c8a3d1025c35c7b4aea7fcc906b6591fe9d84b583a3f07bfecae764b97c333f8209f869c4086fa5100e645fcaaf9f0dba6c3f9d3e8b14560b4ddc3bfb3251513f341685a4ae0a4faa849e6f0c773dc88e10787f2b98390ba1bf32edc432b53a5e90f493cf8d8f294ccceb0f63166d36f75b67ac1e9f2c384f02130194a7baf207a8ebf323382c3e316f3027d24f8d75e36588d869d074eb026f93ee28ac150195e74b61017cc49dc4f0a24f0758d28b1b0e6695dc98ae2a254dcc0b5cdbc9f82d2ae49000c0dc872c231bbf345f8ad71a9e331de089f10dc10002ffc87badf33fae5b2c02cec43464cb8dbb2893a5d7618ee8b265646cec2090f103b6b2705", 0x1000}, {&(0x7f0000002b40)="7b22e63ee44e6e88321a2b665f50b6a7b3e0e5ed3510a38ba8aa3b53c70b68a0b82ac8af065d0aae6f8d1b2a947e30a9bbc55a90aa58e5892735bfcc537d498b139bec539d8dfc015d09f48c1dadf0bbcdbbe57b903acdc092447bf0e97c69773029bf7e5d91ab54c244a4878fbd5bef49eea5c354d4e30fd03398e6e3c1480973e4719bb501af26ee", 0x89}, {&(0x7f0000002c00)="7d3a0daeba6e6d58fa3ef329be77375ca79ee6990d8d2904a5fb791f77b76fe963a0b840d0495e6eb3cafc9c003613c37f05dad0b8b41ba66605d699bff2", 0x3e}, {&(0x7f0000002c40)="a9cffbac89918474b0", 0x9}, {&(0x7f0000002c80)="7d672e5cf23c10a5f54fd43b8404e00f50e5ba30d4cb0a84587bc54a6ad78baa15434a7d2c901804c42505d25e7fff9c284068fd8cf9c7f3617a632a1634505db9f9c2a05df4b2", 0x47}, {&(0x7f0000002d00)="8902df41c32d8059ad98c588877050947aeff3882ec78387e3f64aa293edc2dd38dc975e1e55b92d6030ee66fef62e6eb00833089afba3301ecde651c2", 0x3d}], 0x6, &(0x7f0000002dc0)=[{0xc8, 0x10a, 0x669, "cf6b69c73d4a3f21a05908d87fb05ce18b8a759f1455bb290b7a2c89c2898541dd5b96b6fb69de73e6a18c3152717c7509054f1152a288da1986ea13e488a66d8cc710b9bec0efa8fcbae3c38e4cb0017cc92150038099ad93329de732f5bb5492a2a6df2b562607b30a6dcc3683378f2ddf0c54688ba36a456b763f8d924bc99742fd9d85617e42c3991136d48f48821b9c24c4a29974fb7b20a26cfb2e12fa76ce4f07a8273a3fb569e5e0ead03a43c7ff6e42d5"}, {0xa0, 0x110, 0x100, "c54f4d6512df71bfb53b39e092aa3a479d3cd7c03cac63e151bde4590f392db94409abfae6a66e59c0e032ba2c78e121dd6c53ff77bb3bb52709906f838d05a3a31826bdd3ca8974c5ecc2e078730ddf971a6f2448f8aeafbb849c57af5a18a7e51a1ff8fadfe25ecb467f060b1598dcc9af3344f86a3c7cda2daadf432c4a30ef81df4c1f631b1e9576d4904d00d696"}], 0x168}}, {{&(0x7f0000002f40)=@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002fc0)="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", 0xff}, {&(0x7f00000030c0)="65c2a0cbe00f9be30cb4dc0a2ebcdc8acfb939c5c04e63b7fb019b5c83b83bf74dac8aa91c37cee8cc90aca684e0b81f677a066388a67dafddf711c2878f4de2edcb0e59294cc9a8d07615172d2a916d5671a00c348674049e9fb572c14af8c6d9adec6e97a7fafbe4ea5ea1e53af229197d1eec50acb788d3db44fc572db9cab8870520", 0x84}, {&(0x7f0000003180)="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", 0x1000}], 0x3}}], 0x4, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000042c0)) r2 = accept(0xffffffffffffffff, &(0x7f0000004300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000004380)=0x80) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000043c0), &(0x7f0000004400)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000044c0)={'erspan0\x00', &(0x7f0000004440)={'gretap0\x00', r1, 0x0, 0x7800, 0x7, 0x3, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x65, 0x0, 0x0, 0x842ac4d1f2429178, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0x1d, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @private=0xa010101, @local]}]}}}}}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000045c0)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000801}, 0x801) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000004680)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000004740)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, r5}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x44801) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000047c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000004a40)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004a00)={&(0x7f0000004800)={0x1d8, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x35}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x330c2504}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x636b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x14}, 0x4000090) sendmsg$nl_generic(r3, &(0x7f0000004e00)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004ac0)={0x2d0, 0x31, 0x400, 0x70bd2c, 0x25dfdbfb, {0x1a}, [@nested={0x1e2, 0x14b, 0x0, 0x1, [@generic="48bce117c7b4d139f06dae1ea6b8c0944aecd3c41b87947cdd021b710b0477d794494bfc6877e0eef1d66bb7f3775c50a6387ad956745f40429aeff6722b5d7f7d11451ff0d218124422e0e83c237e18c437fcba00356f86020cce54d1dee1bc5fa6995d8972f866b6b8a2ed91a0a9fe1db7efc36ad1995a0fcc768c4ec36acb0774c1f830fee55de7981a4319c1a8803286447cede0896eebac0c9c2646b289ae01be2d5405da7975f4d1ffd50b244ec1932663fd30f561b031f9c3e84a2e20e18fb56465208f84b1198ccf07af93e23dd631b39f3c44bb20c2c23942b82a83b1e2bc33e4f24489624e8d30ccc89d", @typed={0xc, 0x48, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x75}, @generic="8fd0c796f2a16072b25e614ccd4b4420501a4cf546251eeb", @generic="e59e427c7abb1bcda7bbd66f46e3f58cef4e4f2e11813c2bf4f59de621001d033926768006a0c0aebaefad84eb61fd456658df8d4f4d80ab440d26ea769b5e60810b92c3d71d3b1af8342cd9c7b9231edf8a16bd184039f1b0f56bd8215c4a6167991bb141135a65acf45260df0a174955439912a1a4c7ee65e2ae634373eb8503ccd0ab64e9973a72334e1b2ac050b665aa2625b23c0ea7bdfdcd33e034e965596d4805c50adb6f014e2f7b2d309d9e77542d5d27c506ee798cb61d141b80d486402f", @nested={0x4, 0x110}]}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @nested={0x29, 0x1b, 0x0, 0x1, [@generic, @nested={0x4, 0x158}, @generic="65e9e0d7800898843a", @nested={0x4, 0xc3}, @typed={0x14, 0x123, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x4, 0xc}, @generic="03ac8e9bb216cf7e57c68eabf60541408ef9f9ae9123f3dc5f0dae35e322b3f28c7e78d62f30040dd16182740cb79642572de5b178d0aaa1aa340ba7b43fb7e42a059880d0dd2f5b99657afbdec845072919aa1e44a85b0b05d89fff36c879f7d1d9e878b333481d1c63c91243dcb7a5dbb4bcf64b0682bf6839bf9213ce463b09c3f0745d2e82fb5eed47a14086ae6fac12fb9902fb0a4371ec3cae17"]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4}, 0x4001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004ec0)={'ip_vti0\x00', &(0x7f0000004e40)={'tunl0\x00', r5, 0x700, 0x8, 0x8, 0x0, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x64, 0x0, 0x5, 0x4, 0x0, @broadcast, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@local, 0x3}]}, @noop]}}}}}) bind$netlink(r3, &(0x7f0000004f00)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000005000)={r0, &(0x7f0000004f40)="f9a791aef1fa7e1543883b27b5c77c8a0c532d1390467ca42a669ec9b0bd3b51c0ad23aba1a19cd213d334d97b094c358dac10b3d61841ac6d1cdb1a7bd2ed797a3a8d69a3fb8ba683c694718fec682fec911d10566e8588ffd6131d512646515d3a", &(0x7f0000004fc0)=""/23, 0x4}, 0x20) r7 = accept4$inet6(r2, &(0x7f0000005040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000005080)=0x1c, 0x800) sendmsg$nl_route(r3, &(0x7f0000005180)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)=@getaddr={0x14, 0x16, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000811}, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000005200)={'nat\x00', 0x0, 0x0, 0x0, [0x2, 0x81, 0x3, 0x7fff, 0xf8f, 0x185fc033], 0x9, &(0x7f00000051c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) socket$netlink(0x10, 0x3, 0xb) r8 = getuid() ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000005340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000005380)={0x0, 0x9, 0x8b, 0x9}, &(0x7f00000053c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000005400)={r9, 0x1}, 0x8) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000005440), &(0x7f0000005480)=0xc) 17.659562652s ago: executing program 0 (id=2387): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000060000000000000000"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) read(r0, &(0x7f0000000080)=""/38, 0x26) 17.653564653s ago: executing program 1 (id=2388): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000d00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r2, 0x800, 0xfffffffd, 0xfffffffe, {{0x7e}, {@void, @void}}}, 0x14}}, 0x855) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x24d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0xb, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x5b, 0x3, {{'deflate\x00'}, 0x98, "e1282e0fd9733dc5dd52986e7a22bcafc4ed2e"}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0xf, 0x0, 0x1}, {{@in6=@dev, 0x0, 0xe}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) bind$netlink(r7, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000003c0)={'netpci0\x00', 0x4000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r12, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x18010}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) 17.571457264s ago: executing program 2 (id=2389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffe, 0xb}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r12, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r12, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r13, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) ioctl$int_in(r12, 0x5421, &(0x7f00000012c0)=0xe) accept4(r12, 0x0, 0x0, 0x80000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000124afedb1db6d4a347075362f2ec1700428de", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="060014002526000008000100", @ANYRES32=r16, @ANYBLOB="110014004e4c424c5f434950534f7634000000000c0014005c7d7b5b28272725"], 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x2000c000) 17.49381316s ago: executing program 3 (id=2390): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0x1f, r4}]}, 0x44}}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, r2, 0x25, 0x2, @val=@netkit}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @local}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delroute={0x40, 0x19, 0x800, 0x70bd29, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x3, 0xfe, 0x1, 0xfd, 0x5, 0x2100}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0xffe8, 0x35, 0x7, r2}}, @RTA_IIF={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 17.219045237s ago: executing program 3 (id=2392): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x6020400) (async) unshare(0x6020400) r6 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r6, 0x300) (async) shutdown(r6, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'veth0_virt_wifi\x00', @random="0100"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaa88aaaaaabbbbbbbbbbbb08000000070690780914b8eb2e2c3c2aeef94e22000000000000", @ANYBLOB="4cc1f30e4eb17aa9ef723007b38b526d0d92d96366e925aa5e97b8e8cf9c3e5c36815a63a3054aab910b8c145ffe209ee8ace603ddf03fc8b68449eba97222b70546d37d4e435802177190e67ede7ed16091cba7ee66bc87ea0f69d5973006e1bb606e38da50e50faf7b859d3dc172948e4b506c64ef2608dd868899bdcbd05156c3057c09bea4d216d0ce8ecfe031a67d80080de7e9f2fe50f6395682b5d4983f3b024eb95bebbd8f1a5ce4703bd8403604e8694c", @ANYRESDEC, @ANYRES8=r2], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaa88aaaaaabbbbbbbbbbbb08000000070690780914b8eb2e2c3c2aeef94e22000000000000", @ANYBLOB="4cc1f30e4eb17aa9ef723007b38b526d0d92d96366e925aa5e97b8e8cf9c3e5c36815a63a3054aab910b8c145ffe209ee8ace603ddf03fc8b68449eba97222b70546d37d4e435802177190e67ede7ed16091cba7ee66bc87ea0f69d5973006e1bb606e38da50e50faf7b859d3dc172948e4b506c64ef2608dd868899bdcbd05156c3057c09bea4d216d0ce8ecfe031a67d80080de7e9f2fe50f6395682b5d4983f3b024eb95bebbd8f1a5ce4703bd8403604e8694c", @ANYRESDEC, @ANYRES8=r2], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) (async) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000400000002"}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000400000002"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/162, 0xa2, 0x0, &(0x7f00000000c0)=""/7, 0x7}, &(0x7f0000000140)=0x40) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 17.137337475s ago: executing program 2 (id=2393): syz_init_net_socket$nfc_raw(0x27, 0x6f92421cd797653c, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r0) 17.092361437s ago: executing program 2 (id=2395): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) listen(r5, 0x7) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000bedbdfa503004000080001000000000010000380"], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20008040) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) (async) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70ad28, 0x8000000, {}, [{0x4c, 0x1, [@m_ct={0x48, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f8a9255cb604e7f206f48fc7a251d90c"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.997701343s ago: executing program 1 (id=2396): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x364, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x23, 0x88a2, 'pim6reg1\x00', 'pimreg0\x00', 'wg2\x00', 'pim6reg\x00', @multicast, [0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x10e, 0x146, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x5, {0x300000000}}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x56, {0x2}}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}, {0x5, 0x14, 0x6558, 'netpci0\x00', 'bridge_slave_0\x00', 'ipvlan1\x00', 'wg1\x00', @empty, [0xff, 0xff, 0x0, 0xff], @remote, [0xff], 0x9e, 0x116, 0x18e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x80, 0x3}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"afb901c4850e48a75ee554edda32b906300d0332d02e0a1b1c5cfc3f8fb1"}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xa, 0x169d, 0x2, 0x0, 0x0, "15122909c4ba28372cb0f22778f65b62361d0e2ac6c3ef56b6f6028109d74d2594ce8c70755df05e0619916f801f5f4c4d351f104b15542df1b309780538a49e"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x3dc) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080)=0xb, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000380)="031bb31f8b", 0x5}], 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) 16.933796967s ago: executing program 3 (id=2397): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000010017000000400006803c0004"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 16.918085184s ago: executing program 1 (id=2398): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x187}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000004) (async) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x187}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000004) accept4(r0, 0x0, 0x0, 0x80800) 16.757188579s ago: executing program 0 (id=2400): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000003c0)={0x18, 0x0, {0x4, @broadcast, 'wg2\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000440)=0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000480), 0x0) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000600)={0x80000008}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) r4 = getuid() getpid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d40)={&(0x7f0000001ac0)={0xcc, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "b97764e7e92ece8202fc554b57cfd8b4889d19c73fe1c952819c6238a10ac38a6129e49efcef609c006e448d790d811c74bf5d59eb484c5b775b206062f05917ee0bb4f1c4a98e3331d63f3df5282ae95a4d1d5c9f82857b1c202139abc65909264bfc78a5d5953693b91fb74537636796"}, @NL80211_ATTR_FRAME_MATCH={0x32, 0x5b, "9e618ca4c986d922a9e60d03029d3489a53fa9b523750c46c2bdf47f4faa4d04d1a25472f5b795baf73192390013"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$int_out(r2, 0x5460, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000002e00)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004040)={&(0x7f0000003e80)={0xe8, 0x12, 0x200, 0x70bd2c, 0x25dfdbfe, {0x1a}, [@nested={0x14, 0x30, 0x0, 0x1, [@nested={0x4, 0x30}, @typed={0xc, 0xa7, 0x0, 0x0, @u64=0xffff}]}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x4}, @generic="7ace718aa98938bab9509a7a47ea0e320f9a10b5c9cfd564f87ab0eeb803b05079c23aacddf43fb9b18c2d9fbd3efcc9c90541ddae4dc8e10dcdfd70cff74e1cb4a6ade1f64b57bc96573df02cc60f3979ef443de7427138b42a453c370219ee496c668895e8123564c65e668158d74ae93c9615694fc13da74ff5d6634aa341bf7426722251add89272b00c33469f31864d0adfeca1953c4fd1fc88bad4ae71b82002007ec562058b9bb88f1fd3f9"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040010}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000004100), 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0xff, 0x4e22, 0x0, 0xa, 0x80, 0x30, 0x2b}, {0x436, 0x7, 0x5, 0xffff, 0x63c, 0x2, 0x0, 0x10001}, {0x8, 0x9f53, 0x0, 0x5}, 0x2, 0x6e6bc0, 0x0, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@multicast2, 0x3500, 0x4, 0x1, 0x1, 0x1, 0x6}}, 0xe8) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff000000000900450000240000000000119078000000000000000000004e200010907842b7000000000000"], 0x0) 16.311681383s ago: executing program 4 (id=2402): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/198, 0xc6}], 0x8}, 0x32120) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 16.141752034s ago: executing program 4 (id=2403): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) 16.119405419s ago: executing program 4 (id=2404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 16.060296437s ago: executing program 4 (id=2405): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00"], 0x48) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/111, 0x6f}], 0x1}, 0x8}], 0x1, 0x122, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) write(r2, &(0x7f0000000040)="09000000010000", 0x7) ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 15.149160286s ago: executing program 4 (id=2406): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) (async) socket(0xa, 0x3, 0x3a) (async) socket$kcm(0x2, 0xa, 0x2) (async) close(0x4) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100"], 0xfdef) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) (async) close(r1) 15.064160159s ago: executing program 4 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) unshare(0x2c020400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r9, &(0x7f0000000f80)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x12, r11, 0x4}, 0x38) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x2, 0x5a, &(0x7f0000000340)=""/90, 0x40f00, 0x52, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[r8, r9, r10, 0x1, r11, r3, r12], &(0x7f0000000440)=[{0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x1, 0xc}, {0x5, 0x2, 0x1, 0x5}, {0x4, 0x5, 0xc, 0x3}, {0x3, 0x4, 0x8, 0x5}, {0x2, 0x5, 0x1, 0xc}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x6}, 0x94) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="7f0075c78b0961697a"], 0x9) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 2.033233806s ago: executing program 32 (id=2395): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) listen(r5, 0x7) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000bedbdfa503004000080001000000000010000380"], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20008040) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) (async) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70ad28, 0x8000000, {}, [{0x4c, 0x1, [@m_ct={0x48, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f8a9255cb604e7f206f48fc7a251d90c"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.113777146s ago: executing program 33 (id=2400): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000003c0)={0x18, 0x0, {0x4, @broadcast, 'wg2\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000440)=0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000480), 0x0) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000600)={0x80000008}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000640), &(0x7f0000000680)=0x4) r4 = getuid() getpid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d40)={&(0x7f0000001ac0)={0xcc, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "b97764e7e92ece8202fc554b57cfd8b4889d19c73fe1c952819c6238a10ac38a6129e49efcef609c006e448d790d811c74bf5d59eb484c5b775b206062f05917ee0bb4f1c4a98e3331d63f3df5282ae95a4d1d5c9f82857b1c202139abc65909264bfc78a5d5953693b91fb74537636796"}, @NL80211_ATTR_FRAME_MATCH={0x32, 0x5b, "9e618ca4c986d922a9e60d03029d3489a53fa9b523750c46c2bdf47f4faa4d04d1a25472f5b795baf73192390013"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$int_out(r2, 0x5460, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000002e00)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004040)={&(0x7f0000003e80)={0xe8, 0x12, 0x200, 0x70bd2c, 0x25dfdbfe, {0x1a}, [@nested={0x14, 0x30, 0x0, 0x1, [@nested={0x4, 0x30}, @typed={0xc, 0xa7, 0x0, 0x0, @u64=0xffff}]}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x4}, @generic="7ace718aa98938bab9509a7a47ea0e320f9a10b5c9cfd564f87ab0eeb803b05079c23aacddf43fb9b18c2d9fbd3efcc9c90541ddae4dc8e10dcdfd70cff74e1cb4a6ade1f64b57bc96573df02cc60f3979ef443de7427138b42a453c370219ee496c668895e8123564c65e668158d74ae93c9615694fc13da74ff5d6634aa341bf7426722251add89272b00c33469f31864d0adfeca1953c4fd1fc88bad4ae71b82002007ec562058b9bb88f1fd3f9"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040010}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000004100), 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e23, 0xff, 0x4e22, 0x0, 0xa, 0x80, 0x30, 0x2b}, {0x436, 0x7, 0x5, 0xffff, 0x63c, 0x2, 0x0, 0x10001}, {0x8, 0x9f53, 0x0, 0x5}, 0x2, 0x6e6bc0, 0x0, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@multicast2, 0x3500, 0x4, 0x1, 0x1, 0x1, 0x6}}, 0xe8) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff000000000900450000240000000000119078000000000000000000004e200010907842b7000000000000"], 0x0) 1.089441823s ago: executing program 34 (id=2398): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x187}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000004) (async) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x187}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000004) accept4(r0, 0x0, 0x0, 0x80800) 1.039305396s ago: executing program 35 (id=2397): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000010017000000400006803c0004"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 36 (id=2407): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) unshare(0x2c020400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r9, &(0x7f0000000f80)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x12, r11, 0x4}, 0x38) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x2, 0x5a, &(0x7f0000000340)=""/90, 0x40f00, 0x52, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[r8, r9, r10, 0x1, r11, r3, r12], &(0x7f0000000440)=[{0x3, 0x1, 0x7, 0x1}, {0x0, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x1, 0xc}, {0x5, 0x2, 0x1, 0x5}, {0x4, 0x5, 0xc, 0x3}, {0x3, 0x4, 0x8, 0x5}, {0x2, 0x5, 0x1, 0xc}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x6}, 0x94) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="7f0075c78b0961697a"], 0x9) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) kernel console output (not intermixed with test programs): n process `syz.1.820'. [ 147.939317][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 147.982804][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 148.005333][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.039339][ T9068] team0: Port device batadv1 added [ 148.060231][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.139166][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 148.226838][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.828'. [ 148.242489][ T9083] nbd: nbd64 already in use [ 148.266882][ T9079] netlink: 56 bytes leftover after parsing attributes in process `syz.0.827'. [ 148.284294][ T29] audit: type=1800 audit(1773396386.345:3): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.829" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=787 res=0 errno=0 [ 148.286872][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 148.440828][ T5807] udevd[5807]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.533105][ T9099] gre0: entered promiscuous mode [ 148.539991][ T9099] gre0: entered allmulticast mode [ 148.562373][ T9099] netlink: zone id is out of range [ 148.567909][ T9099] netlink: zone id is out of range [ 148.573131][ T9099] netlink: zone id is out of range [ 148.578633][ T9099] netlink: zone id is out of range [ 148.583846][ T9099] netlink: zone id is out of range [ 148.589431][ T9099] netlink: zone id is out of range [ 148.595189][ T9099] netlink: zone id is out of range [ 148.600950][ T9099] netlink: zone id is out of range [ 148.695651][ T9108] Unknown options in mask b7f2 [ 148.734683][ T9108] tun0: tun_chr_ioctl cmd 1074025675 [ 148.751561][ T9108] tun0: persist disabled [ 148.835097][ T9118] Bluetooth: MGMT ver 1.23 [ 148.843156][ T9118] Bluetooth: hci1: too big key_count value 32778 [ 148.941378][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 149.054761][ T9122] team0: Port device team_slave_0 removed [ 149.095702][ T9131] syzkaller1: entered promiscuous mode [ 149.114383][ T9131] syzkaller1: entered allmulticast mode [ 149.260985][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 149.310152][ T9146] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 149.761109][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 150.637237][ T9191] syzkaller0: entered promiscuous mode [ 150.655363][ T9191] syzkaller0: entered allmulticast mode [ 150.725410][ T9200] netlink: 'syz.0.861': attribute type 4 has an invalid length. [ 150.971413][ T9221] syzkaller0: entered promiscuous mode [ 150.977031][ T9221] syzkaller0: entered allmulticast mode [ 151.318401][ T9242] syzkaller0: entered promiscuous mode [ 151.323983][ T9242] syzkaller0: entered allmulticast mode [ 151.693385][ T9272] syzkaller0: entered promiscuous mode [ 151.701114][ T9272] syzkaller0: entered allmulticast mode [ 152.871981][ T9362] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 152.984924][ T9371] tipc: Started in network mode [ 153.012177][ T9371] tipc: Node identity 4, cluster identity 4711 [ 153.024128][ T9371] tipc: Node number set to 4 [ 153.159926][ T9386] __nla_validate_parse: 6 callbacks suppressed [ 153.159942][ T9386] netlink: 44 bytes leftover after parsing attributes in process `syz.4.912'. [ 153.196051][ T9385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.912'. [ 153.205447][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'. [ 153.290880][ T9392] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 153.409783][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 153.436504][ T9393] bond1: (slave gretap1): making interface the new active one [ 153.444693][ T9393] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.914636][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.922093][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.142428][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.176314][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.399884][ T9425] netlink: 104 bytes leftover after parsing attributes in process `syz.4.924'. [ 154.461629][ T9427] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.925'. [ 154.582284][ T9421] kthread_run failed with err -4 [ 154.606186][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.628126][ T9409] bond0: (slave rose0): Enslaving as an active interface with an up link [ 154.709502][ T9436] net_ratelimit: 49 callbacks suppressed [ 154.709522][ T9436] IPVS: sed: FWM 3 0x00000003 - no destination available [ 154.750785][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 154.930024][ T8177] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.940844][ T9439] lo speed is unknown, defaulting to 1000 [ 154.965050][ T8177] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.015940][ T8177] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.055286][ T9439] lo speed is unknown, defaulting to 1000 [ 155.061059][ T8177] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.096889][ T9439] lo speed is unknown, defaulting to 1000 [ 155.160610][ T9439] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.183929][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 155.285190][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 155.285940][ T515] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 155.322634][ T515] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.335521][ T9468] veth0: entered promiscuous mode [ 155.356355][ T9439] lo speed is unknown, defaulting to 1000 [ 155.367487][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 155.375250][ T515] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.393927][ T515] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.555007][ T9439] lo speed is unknown, defaulting to 1000 [ 155.562457][ T9485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.936'. [ 155.625180][ T9483] bond4: Unable to set up delay as MII monitoring is disabled [ 155.646145][ T9483] bond4 (unregistering): Released all slaves [ 155.675038][ T9439] lo speed is unknown, defaulting to 1000 [ 155.675944][ T9453] veth0: left promiscuous mode [ 155.688120][ T9439] lo speed is unknown, defaulting to 1000 [ 155.698117][ T9439] lo speed is unknown, defaulting to 1000 [ 155.924277][ T9503] vxcan2: entered allmulticast mode [ 156.045308][ T9516] netlink: 'syz.3.945': attribute type 10 has an invalid length. [ 156.071822][ T9518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.114177][ T9516] team0: Device vxcan1 is of different type [ 156.258343][ T9527] syzkaller0: entered promiscuous mode [ 156.263858][ T9527] syzkaller0: entered allmulticast mode [ 156.339727][ T9533] netlink: 'syz.0.949': attribute type 8 has an invalid length. [ 156.434909][ T9533] bond0: entered promiscuous mode [ 156.450237][ T9533] bond_slave_0: entered promiscuous mode [ 156.462537][ T9533] bond_slave_1: entered promiscuous mode [ 156.480737][ T9533] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 156.512604][ T9533] gretap0: entered promiscuous mode [ 156.533183][ T9533] erspan0: entered promiscuous mode [ 156.547224][ T9533] hsr1: entered promiscuous mode [ 156.948616][ T9576] netlink: 'syz.2.960': attribute type 13 has an invalid length. [ 157.124099][ T10] lo speed is unknown, defaulting to 1000 [ 157.586254][ T9628] netlink: 'syz.1.973': attribute type 4 has an invalid length. [ 157.657194][ T9631] netlink: 'syz.4.975': attribute type 3 has an invalid length. [ 157.776662][ T9637] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 157.865554][ T9637] bond2: entered promiscuous mode [ 157.872263][ T9637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.950509][ T9646] macvtap1: entered allmulticast mode [ 158.050314][ T9637] bond2: (slave bridge4): making interface the new active one [ 158.085934][ T9637] bridge4: entered promiscuous mode [ 158.109675][ T9637] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 158.173380][ T9662] __nla_validate_parse: 7 callbacks suppressed [ 158.173398][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 158.233584][ T9666] xt_hashlimit: size too large, truncated to 1048576 [ 158.317515][ T9669] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 158.452239][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 158.517862][ T9681] netlink: 68 bytes leftover after parsing attributes in process `syz.4.986'. [ 158.525540][ T9683] team0: Port device ip6gre1 added [ 158.543808][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 158.635634][ T9692] netlink: 44 bytes leftover after parsing attributes in process `syz.3.990'. [ 158.812113][ T9700] netlink: 'syz.2.992': attribute type 2 has an invalid length. [ 158.876142][ T9700] netlink: 'syz.2.992': attribute type 11 has an invalid length. [ 158.884147][ T9700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.992'. [ 158.905383][ T9702] wg1 speed is unknown, defaulting to 1000 [ 159.099095][ T9716] sctp: [Deprecated]: syz.3.997 (pid 9716) Use of int in maxseg socket option. [ 159.099095][ T9716] Use struct sctp_assoc_value instead [ 159.124232][ T9719] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 159.141810][ T9716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.997'. [ 159.156967][ T9710] nbd0: detected capacity change from 0 to 63 [ 159.164162][ T9714] block nbd0: NBD_DISCONNECT [ 159.164384][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.998'. [ 159.220233][ T9714] block nbd0: Disconnected due to user request. [ 159.262343][ T9710] bond4: (slave gretap1): making interface the new active one [ 159.275519][ T9710] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 159.290164][ T9714] block nbd0: shutting down sockets [ 159.336022][ C0] blk_print_req_error: 138 callbacks suppressed [ 159.336040][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.351848][ C0] buffer_io_error: 138 callbacks suppressed [ 159.351864][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 159.368221][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.377773][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 159.385592][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.395104][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 159.402976][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.412496][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 159.422300][ T9728] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 159.429399][ T5807] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.430219][ T9728] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1001'. [ 159.439854][ T5807] Buffer I/O error on dev nbd0, logical block 0, async page read [ 159.479746][ T5807] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.489392][ T5807] Buffer I/O error on dev nbd0, logical block 1, async page read [ 159.497793][ T5807] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.545918][ T5807] Buffer I/O error on dev nbd0, logical block 2, async page read [ 159.553738][ T5807] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.595225][ T9741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1005'. [ 159.606024][ T9702] lo speed is unknown, defaulting to 1000 [ 159.617334][ T5807] Buffer I/O error on dev nbd0, logical block 3, async page read [ 159.625190][ T5807] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.641487][ T5807] Buffer I/O error on dev nbd0, logical block 0, async page read [ 159.654874][ T5807] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 159.691384][ T9744] syzkaller1: entered promiscuous mode [ 159.697138][ T9744] syzkaller1: entered allmulticast mode [ 159.714049][ T10] IPVS: starting estimator thread 0... [ 159.721779][ T5807] Buffer I/O error on dev nbd0, logical block 1, async page read [ 159.731298][ T5807] ldm_validate_partition_table(): Disk read failed. [ 159.744675][ T5807] Dev nbd0: unable to read RDB block 0 [ 159.750919][ T5807] nbd0: unable to read partition table [ 159.762081][ T5807] ldm_validate_partition_table(): Disk read failed. [ 159.771835][ T5807] Dev nbd0: unable to read RDB block 0 [ 159.780516][ T5807] nbd0: unable to read partition table [ 159.807535][ T9746] IPVS: using max 33 ests per chain, 79200 per kthread [ 159.896103][ T9759] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 159.919946][ T9759] team0: Device vxcan1 is of different type [ 161.139041][ T9832] lo: Caught tx_queue_len zero misconfig [ 161.404327][ T9847] bond6: (slave vlan0): Enslaving as a backup interface with an up link [ 161.494552][ T9859] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 161.599078][ T9859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.937309][ T9894] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 161.967119][ T9895] netlink: 'syz.2.1041': attribute type 4 has an invalid length. [ 161.996247][ T9900] netlink: 'syz.2.1041': attribute type 4 has an invalid length. [ 162.047387][ T9909] x_tables: duplicate underflow at hook 1 [ 162.060553][ T5863] lo speed is unknown, defaulting to 1000 [ 162.066711][ T10] lo speed is unknown, defaulting to 1000 [ 162.081488][ T9909] IPv6: sit2: Disabled Multicast RS [ 162.110681][ T9909] sit2: entered allmulticast mode [ 162.182676][ T9918] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 162.473307][ T9949] syzkaller1: entered promiscuous mode [ 162.514431][ T9949] syzkaller1: entered allmulticast mode [ 162.567897][ T9948] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.586689][ T9939] bond0: (slave gre0): Error: Device type is different from other slaves [ 162.601581][ T9953] bond7: entered allmulticast mode [ 162.661906][ T9957] bond7: (slave ip6gretap1): making interface the new active one [ 162.669945][ T9957] ip6gretap1: entered allmulticast mode [ 162.678907][ T9957] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 162.864115][ T9973] syzkaller1: entered promiscuous mode [ 162.872893][ T9973] syzkaller1: entered allmulticast mode [ 162.886876][ T9980] netlink: 'syz.3.1064': attribute type 11 has an invalid length. [ 162.932179][ T9977] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 162.944323][ T9977] bond5 (unregistering): Released all slaves [ 163.295130][T10018] __nla_validate_parse: 16 callbacks suppressed [ 163.295147][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 163.405047][T10023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1074'. [ 163.457959][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 163.528521][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1076'. [ 163.741551][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 163.924537][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 165.943958][ T9990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.960180][T10005] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1068'. [ 165.969303][T10005] validate_nla: 3 callbacks suppressed [ 165.969316][T10005] netlink: 'syz.2.1068': attribute type 2 has an invalid length. [ 165.982891][T10005] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 166.151333][T10053] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 166.228435][T10063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1082'. [ 166.264238][T10056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.317748][T10053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.327890][T10071] delete_channel: no stack [ 166.402690][T10056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.467359][T10080] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 166.476409][T10079] xt_CONNSECMARK: invalid mode: 0 [ 166.601502][T10056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.639688][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'. [ 166.654571][T10090] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1092'. [ 166.714112][T10056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.861997][ T8179] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.889490][ T8179] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.910703][ T8179] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.931253][ T82] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.282142][T10134] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 167.330172][T10140] Bluetooth: MGMT ver 1.23 [ 167.470150][T10150] vlan2: entered promiscuous mode [ 167.475280][T10150] bridge0: entered promiscuous mode [ 167.558916][T10159] bridge5: port 1(veth0_to_bond) entered blocking state [ 167.567417][T10159] bridge5: port 1(veth0_to_bond) entered disabled state [ 167.574551][T10159] veth0_to_bond: entered allmulticast mode [ 167.581850][T10159] veth0_to_bond: entered promiscuous mode [ 168.327593][T10216] __nla_validate_parse: 7 callbacks suppressed [ 168.327612][T10216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1128'. [ 168.404491][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.515498][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 168.829215][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1138'. [ 168.897829][T10259] netlink: 'syz.1.1142': attribute type 11 has an invalid length. [ 168.977805][T10268] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 169.019911][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 169.059446][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 169.111718][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.209111][T10288] netlink: 'syz.3.1150': attribute type 5 has an invalid length. [ 169.334014][T10282] syzkaller0: entered promiscuous mode [ 169.339940][T10282] syzkaller0: entered allmulticast mode [ 169.503275][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 169.530978][T10314] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 169.746160][ T82] wlan0: Trigger new scan to find an IBSS to join [ 170.151924][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.452662][T10304] netlink: 'syz.3.1155': attribute type 4 has an invalid length. [ 170.465442][T10309] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 170.495335][T10321] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 170.842622][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 170.986634][T10362] bond0: entered promiscuous mode [ 170.991872][T10362] bond_slave_0: entered promiscuous mode [ 171.005166][T10362] bond_slave_1: entered promiscuous mode [ 171.096822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.181078][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.315460][T10379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1170'. [ 171.532669][T10403] x_tables: duplicate underflow at hook 2 [ 171.533735][T10397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.576670][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.585075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.647252][T10397] netlink: 'syz.4.1176': attribute type 9 has an invalid length. [ 171.681917][T10407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'. [ 171.695575][T10397] netlink: 'syz.4.1176': attribute type 6 has an invalid length. [ 172.108556][T10448] xt_hashlimit: size too large, truncated to 1048576 [ 172.332678][ T5944] lo speed is unknown, defaulting to 1000 [ 172.338649][ T5944] syz0: Port: 1 Link DOWN [ 172.343562][T10452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.353123][T10443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.366418][ T515] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.381188][ T515] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.411615][T10457] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 172.443179][ T515] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.484778][ T515] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.498619][ T515] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.507536][ T515] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.517166][ T515] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.526089][ T515] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.696213][ T515] wlan0: Trigger new scan to find an IBSS to join [ 172.723189][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 172.765923][T10477] s5ÿÿø: renamed from vlan1 (while UP) [ 173.248164][T10516] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 173.295429][T10521] tunl0: Caught tx_queue_len zero misconfig [ 173.450708][T10534] __nla_validate_parse: 3 callbacks suppressed [ 173.450727][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 173.470934][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 173.495462][T10534] netlink: 'syz.2.1217': attribute type 12 has an invalid length. [ 173.514597][T10540] syzkaller1: entered promiscuous mode [ 173.520586][T10540] syzkaller1: entered allmulticast mode [ 173.745561][T10561] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 173.751107][T10562] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1225'. [ 174.023825][T10576] bond4: option fail_over_mac: invalid value (16) [ 174.041011][T10576] bond4 (unregistering): Released all slaves [ 174.080560][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1233'. [ 174.182031][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 174.290211][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 174.370478][T10616] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1240'. [ 174.500607][T10625] tipc: Enabling of bearer rejected, failed to enable media [ 174.528934][T10624] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 174.538805][T10625] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 174.582461][T10624] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 174.596311][T10624] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 174.619376][T10624] bond5: (slave ip6gre2): making interface the new active one [ 174.630248][T10624] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 174.864161][T10653] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1247'. [ 174.922858][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1251'. [ 174.969916][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 175.406536][T10690] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 175.516988][T10690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.562758][T10691] bond5: entered allmulticast mode [ 175.591913][T10690] bond5: (slave ip6gretap1): making interface the new active one [ 175.593898][T10709] netlink: 'syz.2.1267': attribute type 2 has an invalid length. [ 175.617403][T10690] ip6gretap1: entered allmulticast mode [ 175.625323][T10690] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 175.736024][ T515] wlan0: Trigger new scan to find an IBSS to join [ 175.917188][T10728] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.943184][T10728] bond4: (slave lo): Enslaving as an active interface with an up link [ 175.953874][T10728] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 175.972400][T10727] x_tables: duplicate underflow at hook 2 [ 176.068226][T10727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.167303][T10727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.179458][T10727] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.208653][T10727] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 176.319151][T10751] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 176.375991][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 176.711786][ T8177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.784259][T10780] netem: invalid attributes len -24 [ 176.789783][T10780] netem: change failed [ 176.795929][T10780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.803724][T10780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.811951][T10780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.819547][T10780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.858883][T10784] validate_nla: 2 callbacks suppressed [ 176.858895][T10784] netlink: 'syz.1.1290': attribute type 1 has an invalid length. [ 176.890427][T10784] bond8: entered promiscuous mode [ 176.896006][T10784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 176.929735][T10784] bond8: (slave bridge3): making interface the new active one [ 176.940252][T10784] bridge3: entered promiscuous mode [ 176.948674][T10784] bridge3: left promiscuous mode [ 176.969722][T10786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.531049][T10825] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 177.569448][T10825] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 177.643982][T10830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.664881][T10830] netlink: 'syz.3.1301': attribute type 21 has an invalid length. [ 177.684156][T10828] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 177.692233][T10830] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 177.700752][T10830] netlink: 'syz.3.1301': attribute type 5 has an invalid length. [ 177.711572][T10830] netlink: 'syz.3.1301': attribute type 21 has an invalid length. [ 177.743803][T10830] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 177.752463][T10830] netlink: 'syz.3.1301': attribute type 5 has an invalid length. [ 177.843755][T10835] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 178.153020][T10863] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 178.432967][T10881] raw_sendmsg: syz.2.1321 forgot to set AF_INET. Fix it! [ 178.833086][T10897] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 178.858029][T10897] __nla_validate_parse: 28 callbacks suppressed [ 178.858047][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 178.906613][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 178.958916][T10902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1329'. [ 179.191358][T10921] --map-set only usable from mangle table [ 179.252710][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 179.310567][T10922] bond6: (slave gretap1): making interface the new active one [ 179.319024][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 179.320446][T10922] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 179.356608][T10928] bond0: entered promiscuous mode [ 179.364467][T10928] bond0: left promiscuous mode [ 179.561797][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 179.671766][T10950] bond6: Setting coupled_control to off (0) [ 179.694412][T10955] tipc: Started in network mode [ 179.699405][T10955] tipc: Node identity ea561a9693, cluster identity 4711 [ 179.706754][T10955] tipc: Enabled bearer , priority 0 [ 179.723237][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'. [ 179.759047][T10955] syzkaller0: entered promiscuous mode [ 179.764545][T10955] syzkaller0: entered allmulticast mode [ 179.781161][T10963] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 179.788301][T10955] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1345'. [ 179.848832][T10955] tipc: Resetting bearer [ 179.860412][T10954] tipc: Resetting bearer [ 179.906804][T10954] tipc: Disabling bearer [ 179.935485][T10978] openvswitch: netlink: IP tunnel dst address not specified [ 180.065503][T10984] erspan0: entered allmulticast mode [ 180.101453][T10984] netem: change failed [ 180.130197][T10989] gre0: left allmulticast mode [ 180.149521][T10989] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 180.173860][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1353'. [ 180.212987][T10993] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1354'. [ 180.393323][T11005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 180.403734][T11005] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.414731][T11005] gretap2: entered promiscuous mode [ 180.420131][T11005] gretap2: entered allmulticast mode [ 180.752019][T11031] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 181.025786][T11050] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 181.202153][T11058] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.340738][T11072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.613459][T11176] validate_nla: 8 callbacks suppressed [ 182.613476][T11176] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 182.646648][T11170] xt_TCPMSS: Only works on TCP SYN packets [ 182.653984][T11174] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 182.662933][T11170] ip6_vti0: entered allmulticast mode [ 182.694971][T11174] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 182.698769][T11176] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 182.731681][ T5936] IPVS: starting estimator thread 0... [ 182.797313][T11190] x_tables: duplicate underflow at hook 2 [ 182.866088][T11188] IPVS: using max 30 ests per chain, 72000 per kthread [ 183.167561][T11219] wg1 speed is unknown, defaulting to 1000 [ 183.221327][T11224] macvtap1: entered promiscuous mode [ 183.248737][T11224] syz_tun: entered promiscuous mode [ 183.273992][T11224] syz_tun: left promiscuous mode [ 183.421591][T11235] syzkaller0: entered promiscuous mode [ 183.466488][T11235] syzkaller0: entered allmulticast mode [ 183.573975][T11235] 0: reclassify loop, rule prio 0, protocol 800 [ 183.888292][T11219] lo speed is unknown, defaulting to 1000 [ 183.998984][T11251] sctp: [Deprecated]: syz.2.1425 (pid 11251) Use of int in max_burst socket option deprecated. [ 183.998984][T11251] Use struct sctp_assoc_value instead [ 184.102754][T11266] __nla_validate_parse: 23 callbacks suppressed [ 184.102771][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 184.379246][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 184.577962][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 184.667204][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1443'. [ 184.705334][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 185.167733][T11347] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1454'. [ 185.187867][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 185.506410][T11373] nftables ruleset with unbound chain [ 185.527818][T11375] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1460'. [ 185.538085][T11375] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1460'. [ 185.558872][T11375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 185.585360][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 185.702589][T11394] tipc: Enabling of bearer rejected, media not registered [ 185.907713][T11408] tipc: Failed to obtain node identity [ 185.913242][T11408] tipc: Enabling of bearer rejected, failed to enable media [ 186.087144][T11420] xt_l2tp: missing protocol rule (udp|l2tpip) [ 186.377193][T11448] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 186.396551][T11448] bond3: (slave vcan2): Error -95 calling set_mac_address [ 186.597493][T11458] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 187.356156][T11522] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 187.418196][T11517] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 187.521296][T11524] syzkaller0: entered promiscuous mode [ 187.534033][T11524] syzkaller0: entered allmulticast mode [ 187.849599][T11548] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.859070][T11548] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.896117][T11550] netlink: 'syz.0.1518': attribute type 21 has an invalid length. [ 187.957537][T11550] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 187.975098][T11550] bond8 (unregistering): Released all slaves [ 188.054503][T11560] bond7: option all_slaves_active: invalid value (4) [ 188.075733][T11560] bond7 (unregistering): Released all slaves [ 188.834059][T11636] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 188.854282][T11636] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 188.940043][T11640] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 188.952994][T11640] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 188.996016][T11640] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 189.007293][T11640] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 189.035124][T11640] netlink: 'syz.0.1543': attribute type 29 has an invalid length. [ 189.355011][T11679] __nla_validate_parse: 17 callbacks suppressed [ 189.355032][T11679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'. [ 189.406955][T11679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1558'. [ 189.434715][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 189.485300][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1559'. [ 189.500052][T11681] hsr_slave_0 (unregistering): left promiscuous mode [ 189.531204][T11695] netlink: 'syz.2.1562': attribute type 11 has an invalid length. [ 189.780359][T11709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.786027][T11703] wg1 speed is unknown, defaulting to 1000 [ 189.816732][T11708] IPv6: Can't replace route, no match found [ 189.836742][T11711] nbd: must specify a size in bytes for the device [ 189.856594][T11711] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 189.873382][T11708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1564'. [ 190.019823][T11716] bond8: (slave ip6gretap2): making interface the new active one [ 190.039676][T11716] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 190.053885][T11716] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 190.074006][T11716] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 190.131773][T11727] IPVS: persistence engine module ip_vs_pe_À not found [ 190.183908][T11727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1571'. [ 190.193119][T11727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1571'. [ 190.350732][T11737] geneve2: entered promiscuous mode [ 190.368016][T11703] lo speed is unknown, defaulting to 1000 [ 190.407613][T11742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.415876][T11746] netlink: 'syz.0.1576': attribute type 1 has an invalid length. [ 190.461182][ T49] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 41805 - 0 [ 190.470265][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 41805 - 0 [ 190.480425][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 41805 - 0 [ 190.569486][T11753] vþ: entered promiscuous mode [ 190.619724][T11758] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1580'. [ 190.691123][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 190.742554][T11765] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 191.117626][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 192.034561][T11742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.045626][T11742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 41805 - 0 [ 192.232110][T11742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.275183][T11742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 41805 - 0 [ 192.400689][T11742] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.427845][T11742] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 41805 - 0 [ 192.535251][T11896] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.606645][ T7479] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.614861][ T7479] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 41805 - 0 [ 192.650191][ T7479] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.664208][ T7479] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 41805 - 0 [ 192.687084][T11906] x_tables: duplicate underflow at hook 1 [ 192.722685][ T7479] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.733742][T11908] netlink: zone id is out of range [ 192.739345][ T7479] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 41805 - 0 [ 192.747898][T11908] netlink: zone id is out of range [ 192.747930][T11908] netlink: zone id is out of range [ 192.747938][T11908] netlink: zone id is out of range [ 192.747945][T11908] netlink: zone id is out of range [ 192.747953][T11908] netlink: zone id is out of range [ 192.747961][T11908] netlink: zone id is out of range [ 192.747968][T11908] netlink: zone id is out of range [ 192.747976][T11908] netlink: zone id is out of range [ 192.801625][T11903] Can't find ip_set type bitmap:ip,mac [ 192.813671][ T7479] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.889622][ T7479] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 41805 - 0 [ 192.928672][T11917] validate_nla: 6 callbacks suppressed [ 192.928687][T11917] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 192.969439][T11922] IPv6: sit2: Disabled Multicast RS [ 193.013992][T11917] bond4: entered promiscuous mode [ 193.019875][T11917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.129376][T11917] bond4: (slave bridge2): making interface the new active one [ 193.146094][T11917] bridge2: entered promiscuous mode [ 193.152935][T11917] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 193.325883][T11941] vlan0: Caught tx_queue_len zero misconfig [ 193.350704][T11941] syzkaller1: entered promiscuous mode [ 193.364112][T11941] syzkaller1: entered allmulticast mode [ 193.736570][T11971] wg1 speed is unknown, defaulting to 1000 [ 194.148694][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.252654][T12009] ipvlan2: entered allmulticast mode [ 194.271414][T12009] batadv_slave_1: entered allmulticast mode [ 194.286193][T11971] lo speed is unknown, defaulting to 1000 [ 194.361568][T12017] sctp: [Deprecated]: syz.2.1658 (pid 12017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.361568][T12017] Use struct sctp_sack_info instead [ 194.451043][T12026] delete_channel: no stack [ 194.457661][T12025] delete_channel: no stack [ 194.678204][T12034] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 194.700210][T12034] team0: Device macvlan3 is already an upper device of the team interface [ 195.047263][T12066] netlink: 'syz.3.1675': attribute type 4 has an invalid length. [ 195.066493][T12067] __nla_validate_parse: 14 callbacks suppressed [ 195.066511][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 195.091627][T12066] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1675'. [ 195.197551][T12021] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 195.449462][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 195.497580][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1681'. [ 195.546519][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1682'. [ 195.633989][ T7468] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.669597][T12099] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 195.682166][ T7468] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.698898][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1672'. [ 195.708539][ T7468] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.726568][ T7468] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.858537][T12099] bond6: entered promiscuous mode [ 195.868012][T12099] bond6: entered allmulticast mode [ 195.873531][T12099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.019489][T12118] syzkaller0: entered promiscuous mode [ 196.028697][T12118] syzkaller0: entered allmulticast mode [ 196.161705][T12129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.194941][T12129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.207007][T12129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 196.217542][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 196.217698][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 196.223630][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 196.251950][T12136] sctp: [Deprecated]: syz.3.1696 (pid 12136) Use of int in max_burst socket option deprecated. [ 196.251950][T12136] Use struct sctp_assoc_value instead [ 196.371348][T12129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.382476][T12129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.393339][T12129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 196.457093][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 196.528726][T12129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.558012][T12129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.579955][T12129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 196.652582][T12129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.664437][T12129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.677990][T12129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 196.801070][ T515] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.809899][ T515] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.818337][ T515] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.828191][T12166] veth0_to_team: left allmulticast mode [ 196.854222][T12166] bond9: entered promiscuous mode [ 196.859608][T12166] bond9: entered allmulticast mode [ 196.865119][T12166] 8021q: adding VLAN 0 to HW filter on device bond9 [ 196.872845][ T515] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.881175][ T515] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.889674][ T515] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.909400][ T515] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.919851][ T515] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.928791][ T515] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.950130][ T515] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.964815][ T515] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.974424][ T515] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.992867][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1708'. [ 197.155050][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 197.165599][T12186] netlink: 'syz.1.1712': attribute type 30 has an invalid length. [ 197.173903][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 197.256986][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 197.537268][T12215] syzkaller0: entered promiscuous mode [ 197.552900][T12215] syzkaller0: entered allmulticast mode [ 197.758918][T12224] xt_TCPMSS: Only works on TCP SYN packets [ 198.123654][T12248] netlink: 'syz.4.1729': attribute type 3 has an invalid length. [ 198.747163][T12293] netlink: 'syz.1.1741': attribute type 7 has an invalid length. [ 198.763588][T12293] netlink: 'syz.1.1741': attribute type 7 has an invalid length. [ 198.955298][T12313] syzkaller0: entered promiscuous mode [ 198.967144][T12313] syzkaller0: entered allmulticast mode [ 198.974269][T12315] bridge_slave_1: left allmulticast mode [ 198.986279][T12315] bridge_slave_1: left promiscuous mode [ 198.992164][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.013072][T12315] bridge_slave_0: left allmulticast mode [ 199.020553][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.214825][T12338] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 199.405210][T12338] macvtap1: entered allmulticast mode [ 199.499663][T12354] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 199.647802][T12354] 8021q: adding VLAN 0 to HW filter on device bond10 [ 199.676505][T12359] vlan1: entered promiscuous mode [ 199.681644][T12359] bond10: entered promiscuous mode [ 199.687255][T12359] vlan1: entered allmulticast mode [ 199.692489][T12359] bond10: entered allmulticast mode [ 199.709493][T12362] bond10: (slave bridge5): making interface the new active one [ 199.717283][T12362] bridge5: entered promiscuous mode [ 199.722640][T12362] bridge5: entered allmulticast mode [ 199.731502][T12362] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 199.820638][T12370] netlink: 'syz.3.1761': attribute type 21 has an invalid length. [ 199.829129][T12370] netlink: 'syz.3.1761': attribute type 5 has an invalid length. [ 199.865216][T12370] bond7: option fail_over_mac: invalid value (16) [ 199.875213][T12370] bond7 (unregistering): Released all slaves [ 199.889105][T12373] IPVS: persistence engine module ip_vs_pe_À not found [ 199.898829][T12378] macvlan0: entered promiscuous mode [ 199.973205][T12381] netlink: 'syz.0.1765': attribute type 3 has an invalid length. [ 200.085300][T12394] __nla_validate_parse: 21 callbacks suppressed [ 200.085317][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 200.101392][T12394] chnl_net:caif_netlink_parms(): no params data found [ 200.208182][T12397] net_ratelimit: 8 callbacks suppressed [ 200.208199][T12397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.324899][T12404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1770'. [ 200.346653][T12404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1770'. [ 200.614511][T12424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1777'. [ 200.626858][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1779'. [ 200.640799][T12423] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1778'. [ 200.657910][T12424] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 200.732193][T12435] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1782'. [ 200.865689][T12441] syzkaller0: entered promiscuous mode [ 200.871927][T12441] syzkaller0: entered allmulticast mode [ 200.880960][T12441] 0: reclassify loop, rule prio 0, protocol 800 [ 200.889875][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 200.945002][T12447] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 201.034101][T12450] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1785'. [ 201.107722][T12457] x_tables: duplicate underflow at hook 1 [ 201.109456][T12460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1788'. [ 201.368378][T12478] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.558781][T12490] netlink: 'syz.4.1797': attribute type 1 has an invalid length. [ 201.662732][T12490] wg1 speed is unknown, defaulting to 1000 [ 201.890928][T12506] sctp: [Deprecated]: syz.0.1798 (pid 12506) Use of int in max_burst socket option deprecated. [ 201.890928][T12506] Use struct sctp_assoc_value instead [ 202.107774][T12515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.191061][T12517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.313668][T12490] lo speed is unknown, defaulting to 1000 [ 202.693492][T12527] syzkaller0: entered promiscuous mode [ 202.702065][T12527] syzkaller0: entered allmulticast mode [ 202.721873][T12527] batadv_slave_0: entered promiscuous mode [ 203.258546][ T5822] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 204.093456][T12546] bond6: (slave veth7): Enslaving as an active interface with a down link [ 204.105057][T12548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.571401][T12612] syzkaller0: entered promiscuous mode [ 204.578602][T12612] syzkaller0: entered allmulticast mode [ 205.075433][T12651] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 205.101711][T12652] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 205.215660][T12665] __nla_validate_parse: 12 callbacks suppressed [ 205.215679][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 205.235277][T12654] tipc: Enabled bearer , priority 0 [ 205.300325][T12654] syzkaller0: entered promiscuous mode [ 205.306161][T12654] syzkaller0: entered allmulticast mode [ 205.312400][T12654] tipc: Resetting bearer [ 205.334742][T12653] tipc: Resetting bearer [ 205.470947][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 205.495512][T12676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.224725][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 206.602581][T12653] tipc: Disabling bearer [ 206.611622][T12673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.627865][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'. [ 206.726085][T12706] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.841630][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1859'. [ 207.047156][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 207.081725][T12738] validate_nla: 1 callbacks suppressed [ 207.081742][T12738] netlink: 'syz.3.1867': attribute type 3 has an invalid length. [ 207.095166][T12738] block nbd0: not configured, cannot reconfigure [ 207.224277][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.239864][T12748] bridge0: port 3(syz_tun) entered blocking state [ 207.254209][T12748] bridge0: port 3(syz_tun) entered disabled state [ 207.272568][T12748] syz_tun: entered allmulticast mode [ 207.302336][T12748] syz_tun: entered promiscuous mode [ 207.309872][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'. [ 207.332185][T12748] bridge0: port 3(syz_tun) entered blocking state [ 207.339117][T12748] bridge0: port 3(syz_tun) entered forwarding state [ 207.383094][T12758] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1871'. [ 207.385632][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.410492][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.446419][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.570987][T12757] syzkaller0: entered promiscuous mode [ 207.576932][T12757] syzkaller0: entered allmulticast mode [ 207.599768][T12770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1874'. [ 207.601814][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1876'. [ 207.637980][T12771] openvswitch: netlink: Key 25 has unexpected len 0 expected 16 [ 208.117050][T12782] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 208.856630][ T7479] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 209.365234][T12812] netlink: 'syz.4.1887': attribute type 2 has an invalid length. [ 209.389857][T12809] netlink: 'syz.1.1886': attribute type 62 has an invalid length. [ 209.617033][T12830] netlink: 'syz.0.1892': attribute type 3 has an invalid length. [ 209.627167][T12830] tipc: Enabling of bearer rejected, already enabled [ 209.641531][T12830] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 209.820421][T12843] netlink: 'syz.3.1898': attribute type 4 has an invalid length. [ 209.969288][T12858] xt_hashlimit: size too large, truncated to 1048576 [ 210.017659][T12851] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 210.264636][T12878] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 210.278445][T12878] __nla_validate_parse: 8 callbacks suppressed [ 210.278460][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 210.308853][T12878] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 210.437636][T12889] syzkaller0: entered promiscuous mode [ 210.443365][T12889] syzkaller0: entered allmulticast mode [ 210.495311][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'. [ 210.655282][T12904] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 210.694500][T12908] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1918'. [ 211.038094][T12939] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 211.042968][T12937] tipc: Started in network mode [ 211.050854][T12937] tipc: Node identity 0ebde4763e5, cluster identity 4711 [ 211.058629][T12937] tipc: Enabled bearer , priority 0 [ 211.103417][T12937] syzkaller0: entered promiscuous mode [ 211.109051][T12937] syzkaller0: entered allmulticast mode [ 211.114994][T12937] tipc: Resetting bearer [ 211.123829][T12939] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1928'. [ 211.136966][T12936] tipc: Resetting bearer [ 211.911882][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 212.178675][T12989] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1939'. [ 212.191229][T12989] openvswitch: netlink: Flow key attr not present in new flow. [ 212.647000][T12936] tipc: Disabling bearer [ 212.660282][T12977] geneve3: entered promiscuous mode [ 212.669757][ T5893] tipc: Node number set to 820896886 [ 212.680033][T12994] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1943'. [ 212.697038][ T7470] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 40847 - 0 [ 212.706179][ T7470] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 40847 - 0 [ 212.764239][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 212.771002][T12981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.792594][T12981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.822164][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 212.838987][ T7470] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 40847 - 0 [ 213.082995][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 213.114667][T13023] netlink: 'syz.2.1951': attribute type 13 has an invalid length. [ 213.117039][T13025] x_tables: duplicate underflow at hook 2 [ 213.129117][T13023] netlink: 'syz.2.1951': attribute type 13 has an invalid length. [ 213.207875][T13028] syzkaller0: entered promiscuous mode [ 213.213717][T13028] syzkaller0: entered allmulticast mode [ 213.220431][T13030] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 213.229257][T13032] netlink: 'syz.4.1955': attribute type 1 has an invalid length. [ 213.256925][T13034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.263695][T13032] netlink: 'syz.4.1955': attribute type 11 has an invalid length. [ 213.685524][T13062] netlink: 'syz.2.1965': attribute type 13 has an invalid length. [ 213.693784][T13062] macvtap0: entered allmulticast mode [ 213.703405][T13062] macvtap0: refused to change device tx_queue_len [ 214.301279][T13105] netlink: 'syz.4.1980': attribute type 75 has an invalid length. [ 214.379863][T12981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.412772][T12981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.424016][T12981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40847 - 0 [ 214.447084][ T796] IPVS: starting estimator thread 0... [ 214.546201][T13116] IPVS: using max 28 ests per chain, 67200 per kthread [ 214.572714][T12981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.584452][T12981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.614600][T12981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40847 - 0 [ 214.724872][T12981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.747004][T12981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.773826][T12981] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40847 - 0 [ 214.907030][T13135] netlink: 'syz.2.1989': attribute type 21 has an invalid length. [ 214.917354][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.925727][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 40847 - 0 [ 214.934556][ T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.964188][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.983489][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 40847 - 0 [ 215.012592][ T49] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.081503][ T7470] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.089836][ T7470] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 40847 - 0 [ 215.116064][ T7470] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.167453][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.183606][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 40847 - 0 [ 215.202582][ T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 215.302962][T13148] netlink: 'syz.0.1994': attribute type 39 has an invalid length. [ 215.336407][T13148] __nla_validate_parse: 15 callbacks suppressed [ 215.336425][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1994'. [ 215.351927][T13146] syz.3.1993 (13146) used greatest stack depth: 15176 bytes left [ 215.415125][T13159] openvswitch: netlink: Duplicate or invalid key (type 0). [ 215.430222][T13157] netlink: 'syz.2.1998': attribute type 11 has an invalid length. [ 215.438314][T13157] netlink: 'syz.2.1998': attribute type 11 has an invalid length. [ 215.448585][T13157] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1998'. [ 215.465672][T13159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.673505][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 215.822563][T13172] sctp: [Deprecated]: syz.3.2003 (pid 13172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.822563][T13172] Use struct sctp_sack_info instead [ 215.849223][T13173] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2002'. [ 215.955095][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 216.003750][T13181] netlink: 'syz.4.2004': attribute type 1 has an invalid length. [ 216.047940][T13181] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2004'. [ 216.091713][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 216.220099][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 216.249731][T13186] syzkaller0: entered promiscuous mode [ 216.252217][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 216.272680][T13186] syzkaller0: entered allmulticast mode [ 216.524949][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2012'. [ 217.794829][T13229] dvmrp6: entered allmulticast mode [ 217.932612][T13242] xt_hashlimit: size too large, truncated to 1048576 [ 218.012521][T13246] Cannot find map_set index 65533 as target [ 219.155670][T13322] bond3: (slave bridge0): Releasing backup interface [ 219.173751][T13322] bridge0 (unregistering): left promiscuous mode [ 219.238393][T13325] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 219.291865][T13334] sctp: [Deprecated]: syz.0.2041 (pid 13334) Use of int in maxseg socket option. [ 219.291865][T13334] Use struct sctp_assoc_value instead [ 219.598340][T13355] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 219.609853][T13355] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.617851][T13355] gretap2: entered promiscuous mode [ 219.623570][T13355] gretap2: entered allmulticast mode [ 219.773611][T13365] bond12: option min_links: invalid value (18446744073709551614) [ 219.789703][T13365] bond12: option min_links: allowed values 0 - 2147483647 [ 219.844064][T13365] bond12 (unregistering): Released all slaves [ 219.877400][T13366] bond12: option min_links: invalid value (18446744073709551614) [ 219.885153][T13366] bond12: option min_links: allowed values 0 - 2147483647 [ 219.895252][T13366] bond12 (unregistering): Released all slaves [ 220.082012][T13369] batadv_slave_0: entered promiscuous mode [ 220.094201][T13379] syzkaller0: entered promiscuous mode [ 220.099984][T13379] syzkaller0: entered allmulticast mode [ 220.451057][T13417] __nla_validate_parse: 9 callbacks suppressed [ 220.451076][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2065'. [ 220.511819][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2065'. [ 220.609201][T13424] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.669110][T13432] syzkaller0: entered promiscuous mode [ 220.692661][T13432] syzkaller0: entered allmulticast mode [ 220.864512][T13450] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2075'. [ 220.887975][T13457] sctp: [Deprecated]: syz.3.2076 (pid 13457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.887975][T13457] Use struct sctp_sack_info instead [ 221.090011][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'. [ 221.166126][T13484] validate_nla: 3 callbacks suppressed [ 221.166144][T13484] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 221.187767][T13483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2082'. [ 221.196235][T13484] netlink: 'syz.2.2081': attribute type 11 has an invalid length. [ 221.206669][T13484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2081'. [ 221.389560][T13494] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 221.398608][T13491] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 221.441455][T13491] 8021q: adding VLAN 0 to HW filter on device bond12 [ 221.556833][T13490] vlan3: entered promiscuous mode [ 221.561931][T13490] bond12: entered promiscuous mode [ 221.570944][T13490] vlan3: entered allmulticast mode [ 221.578205][T13490] bond12: entered allmulticast mode [ 221.604906][T13491] bond12: (slave bridge6): making interface the new active one [ 221.615902][T13491] bridge6: entered promiscuous mode [ 221.627253][T13491] bridge6: entered allmulticast mode [ 221.633909][T13491] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 221.825647][T13523] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2094'. [ 222.005026][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 222.015784][T13533] sctp: [Deprecated]: syz.4.2098 (pid 13533) Use of int in maxseg socket option. [ 222.015784][T13533] Use struct sctp_assoc_value instead [ 222.201413][T13545] x_tables: duplicate underflow at hook 1 [ 222.355517][T13555] wg1 speed is unknown, defaulting to 1000 [ 222.475303][T13562] xt_hashlimit: size too large, truncated to 1048576 [ 222.663282][T13555] lo speed is unknown, defaulting to 1000 [ 222.869213][T13586] netlink: 'syz.4.2113': attribute type 2 has an invalid length. [ 223.011933][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'. [ 223.047553][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 223.063758][T13593] vlan2: entered promiscuous mode [ 223.082574][T13593] bond0: entered promiscuous mode [ 223.088186][T13593] bond_slave_0: entered promiscuous mode [ 223.095419][T13593] bond_slave_1: entered promiscuous mode [ 223.494768][T13624] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 224.142002][T13653] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 224.276915][T13657] netlink: 'syz.0.2133': attribute type 28 has an invalid length. [ 224.284859][T13657] netlink: 'syz.0.2133': attribute type 3 has an invalid length. [ 225.609186][T13729] nbd0: detected capacity change from 0 to 127 [ 225.719165][T13742] __nla_validate_parse: 4 callbacks suppressed [ 225.719182][T13742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2155'. [ 225.763171][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2154'. [ 225.763860][T13742] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 225.887226][T13747] netlink: 'syz.0.2156': attribute type 32 has an invalid length. [ 225.906248][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 225.932706][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 225.971474][T13747] bond13: Setting coupled_control to off (0) [ 226.317606][ T5822] block nbd0: Receive control failed (result -104) [ 226.352355][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'. [ 226.554520][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 226.569031][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 226.578379][T13792] netlink: 'syz.0.2168': attribute type 3 has an invalid length. [ 226.759871][T13803] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 226.779539][T13813] netlink: 'syz.0.2174': attribute type 7 has an invalid length. [ 226.794595][T13803] netlink: 'syz.4.2175': attribute type 2 has an invalid length. [ 226.804719][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'. [ 226.827026][T13803] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 226.836763][T13808] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 226.854257][T13813] netlink: 'syz.0.2174': attribute type 7 has an invalid length. [ 226.866589][T13803] netlink: 'syz.4.2175': attribute type 3 has an invalid length. [ 226.874452][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 226.895914][T13808] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2175'. [ 227.141272][T13836] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 227.370311][T13852] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 227.419245][T13855] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 227.462282][T13855] sctp: [Deprecated]: syz.4.2186 (pid 13855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.462282][T13855] Use struct sctp_sack_info instead [ 227.576357][T13868] netlink: 'syz.2.2190': attribute type 3 has an invalid length. [ 227.609580][T13868] netlink: 'syz.2.2190': attribute type 2 has an invalid length. [ 227.725525][T13876] x_tables: duplicate underflow at hook 3 [ 227.734105][T13872] syzkaller0: entered promiscuous mode [ 227.739777][T13872] syzkaller0: entered allmulticast mode [ 227.749476][T13872] TC_ACT_REPEAT abuse ? [ 228.034547][T13896] tunl0: left promiscuous mode [ 228.126539][T13896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.494453][T13924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.734447][T13937] tls_set_device_offload_rx: netdev not found [ 229.815053][T14006] veth5: entered allmulticast mode [ 229.873071][T14027] syzkaller0: entered promiscuous mode [ 229.888397][T14027] syzkaller0: entered allmulticast mode [ 230.519503][T14078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.886549][T14103] __nla_validate_parse: 38 callbacks suppressed [ 230.886568][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 231.286690][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 231.388879][T14143] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2261'. [ 231.414934][T14147] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2262'. [ 231.461336][T14147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.871471][T14186] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2272'. [ 231.904908][T14186] netlink: Unknown conntrack attr (type=2304, max=9) [ 232.021440][T14192] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 232.029757][T14126] delete_channel: no stack [ 232.063718][T14192] syzkaller0: entered promiscuous mode [ 232.069608][T14192] syzkaller0: entered allmulticast mode [ 232.095050][T14192] simple: basic_1 [ 232.099072][T14192] simple: basic_2 [ 232.102782][T14192] simple: basic_3 [ 232.106466][T14192] simple: basic_4 [ 232.110107][T14192] simple: basic_5 [ 232.113763][T14192] simple: basic_6 [ 232.117439][T14192] simple: basic_7 [ 232.121078][T14192] simple: basic_8 [ 232.124717][T14192] simple: basic_9 [ 232.128396][T14192] simple: basic_10 [ 232.132122][T14192] simple: basic_11 [ 232.135895][T14192] simple: basic_12 [ 232.139617][T14192] simple: basic_13 [ 232.143342][T14192] simple: basic_14 [ 232.147091][T14192] simple: basic_15 [ 232.150946][T14192] simple: basic_16 [ 232.154671][T14192] simple: basic_17 [ 232.158423][T14192] 0: reclassify loop, rule prio 0, protocol 800 [ 232.517252][T14214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.653595][T14224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'. [ 232.812628][T14229] validate_nla: 14 callbacks suppressed [ 232.812648][T14229] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 232.834180][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 232.844210][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 232.853935][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2286'. [ 233.009739][T14245] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2290'. [ 233.191918][T14259] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.809033][T14290] bond7 (unregistering): Released all slaves [ 233.888551][T14303] netlink: 'syz.3.2299': attribute type 3 has an invalid length. [ 234.049846][T14314] syz_tun: entered allmulticast mode [ 234.066151][T14312] syz_tun: left allmulticast mode [ 234.321447][T14326] netlink: 'syz.4.2305': attribute type 9 has an invalid length. [ 234.392383][T14332] openvswitch: netlink: IP tunnel dst address not specified [ 234.401960][T14333] netlink: 'syz.0.2308': attribute type 1 has an invalid length. [ 234.558333][T14344] bridge_slave_1: left allmulticast mode [ 234.564070][T14344] bridge_slave_1: left promiscuous mode [ 234.571151][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.607408][T14344] bridge_slave_0: left promiscuous mode [ 234.613606][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.714516][T14349] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.738374][T14349] bond14: (slave lo): Enslaving as an active interface with an up link [ 234.760566][T14349] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 235.219780][T14377] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 235.378534][T14386] xt_hashlimit: size too large, truncated to 1048576 [ 235.482747][T14394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.919588][T14415] __nla_validate_parse: 10 callbacks suppressed [ 235.919609][T14415] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2328'. [ 235.936809][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2328'. [ 236.177492][T14429] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2334'. [ 236.191230][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 236.224648][T14429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2334'. [ 236.245950][T14429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2334'. [ 236.449605][T14444] unsupported nlmsg_type 40 [ 237.603710][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2347'. [ 237.614355][T14480] netlink: 'syz.2.2347': attribute type 1 has an invalid length. [ 237.643884][T14480] bond8: entered promiscuous mode [ 237.649314][T14480] 8021q: adding VLAN 0 to HW filter on device bond8 [ 239.449366][T14445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.639386][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 239.698569][T14507] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.787928][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'. [ 239.809158][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2357'. [ 240.107483][T14540] syzkaller0: entered promiscuous mode [ 240.113078][T14540] syzkaller0: entered allmulticast mode [ 240.121503][T14540] 0: reclassify loop, rule prio 0, protocol 800 [ 240.150376][T14544] sctp: [Deprecated]: syz.2.2365 (pid 14544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.150376][T14544] Use struct sctp_sack_info instead [ 240.218378][ T515] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 240.911893][T14610] openvswitch: netlink: IP tunnel TTL not specified. [ 241.053736][T14621] __nla_validate_parse: 10 callbacks suppressed [ 241.053755][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'. [ 241.198855][T14621] macvtap2: entered promiscuous mode [ 241.204295][T14621] vlan0: entered promiscuous mode [ 241.210237][T14621] macvtap2: entered allmulticast mode [ 241.215616][T14621] vlan0: entered allmulticast mode [ 241.220973][T14621] veth0_vlan: entered allmulticast mode [ 241.326664][T14634] syzkaller0: entered promiscuous mode [ 241.332797][T14634] syzkaller0: entered allmulticast mode [ 241.543756][T14643] netlink: 'syz.2.2395': attribute type 3 has an invalid length. [ 242.350972][T14696] netlink: 'syz.4.2403': attribute type 2 has an invalid length. [ 255.578754][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.217700][ T2580] block nbd0: Possible stuck request ffff888025c7a800: control (read@0,1024B). Runtime 30 seconds [ 256.229473][ T2580] block nbd0: Possible stuck request ffff888025c7aa00: control (read@1024,1024B). Runtime 30 seconds [ 256.240446][ T2580] block nbd0: Possible stuck request ffff888025c7ac00: control (read@2048,1024B). Runtime 30 seconds [ 256.251379][ T2580] block nbd0: Possible stuck request ffff888025c7ae00: control (read@3072,1024B). Runtime 30 seconds [ 256.537750][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.545409][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.553891][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.562024][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.570352][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.598696][T14720] wg1 speed is unknown, defaulting to 1000 [ 256.702353][T14720] lo speed is unknown, defaulting to 1000 [ 256.794884][T14720] chnl_net:caif_netlink_parms(): no params data found [ 256.853909][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.861192][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.868709][T14720] bridge_slave_0: entered allmulticast mode [ 256.875554][T14720] bridge_slave_0: entered promiscuous mode [ 256.884289][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.891518][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.898759][T14720] bridge_slave_1: entered allmulticast mode [ 256.906362][T14720] bridge_slave_1: entered promiscuous mode [ 256.930902][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.942329][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.968492][T14720] team0: Port device team_slave_0 added [ 256.975744][T14720] team0: Port device team_slave_1 added [ 256.998157][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.005104][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.031586][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.043713][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.050703][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.076896][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.113495][T14720] hsr_slave_0: entered promiscuous mode [ 257.120274][T14720] hsr_slave_1: entered promiscuous mode [ 257.126513][T14720] debugfs: 'hsr0' already exists in 'hsr' [ 257.132239][T14720] Cannot create hsr debugfs directory [ 257.544764][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.554502][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.566677][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.574500][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.584250][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.585635][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.601618][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.610736][ T5822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.625687][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.633986][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.673107][T14731] wg1 speed is unknown, defaulting to 1000 [ 257.687132][T14733] wg1 speed is unknown, defaulting to 1000 [ 257.700129][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.709133][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.718071][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.726165][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.736982][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 257.791808][T14735] wg1 speed is unknown, defaulting to 1000 [ 257.844038][T14731] lo speed is unknown, defaulting to 1000 [ 258.008338][T14733] lo speed is unknown, defaulting to 1000 [ 258.064337][T14731] chnl_net:caif_netlink_parms(): no params data found [ 258.234599][T14731] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.241831][T14731] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.249341][T14731] bridge_slave_0: entered allmulticast mode [ 258.256441][T14731] bridge_slave_0: entered promiscuous mode [ 258.263336][T14735] lo speed is unknown, defaulting to 1000 [ 258.264457][T14731] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.276836][T14731] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.284017][T14731] bridge_slave_1: entered allmulticast mode [ 258.291106][T14731] bridge_slave_1: entered promiscuous mode [ 258.361548][T14731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.391817][T14731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.420294][T14733] chnl_net:caif_netlink_parms(): no params data found [ 258.457215][T14731] team0: Port device team_slave_0 added [ 258.477151][T14731] team0: Port device team_slave_1 added [ 258.612640][T14731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.620024][T14731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.647859][T14731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.649848][ T5834] Bluetooth: hci5: command tx timeout [ 258.662847][T14731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.666442][ T5822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 258.671126][T14731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.704868][T14731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.707394][ T5822] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 258.724496][ T5822] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 258.733398][ T5822] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 258.742148][ T5822] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 258.784247][T14733] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.791736][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.799771][T14733] bridge_slave_0: entered allmulticast mode [ 258.807579][T14733] bridge_slave_0: entered promiscuous mode [ 258.820156][T14733] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.827601][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.834696][T14733] bridge_slave_1: entered allmulticast mode [ 258.841843][T14733] bridge_slave_1: entered promiscuous mode [ 258.899311][T14731] hsr_slave_0: entered promiscuous mode [ 258.906309][T14731] hsr_slave_1: entered promiscuous mode [ 258.912280][T14731] debugfs: 'hsr0' already exists in 'hsr' [ 258.918109][T14731] Cannot create hsr debugfs directory [ 258.933537][T14735] chnl_net:caif_netlink_parms(): no params data found [ 258.951861][T14733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.973637][T14752] wg1 speed is unknown, defaulting to 1000 [ 258.995267][T14733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.089910][T14733] team0: Port device team_slave_0 added [ 259.138295][T14733] team0: Port device team_slave_1 added [ 259.159031][T14735] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.166619][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.174029][T14735] bridge_slave_0: entered allmulticast mode [ 259.182133][T14735] bridge_slave_0: entered promiscuous mode [ 259.202933][T14752] lo speed is unknown, defaulting to 1000 [ 259.218274][T14735] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.225429][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.233012][T14735] bridge_slave_1: entered allmulticast mode [ 259.240204][T14735] bridge_slave_1: entered promiscuous mode [ 259.258515][T14733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.265452][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.291579][T14733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.326903][T14733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.333847][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.360478][T14733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.421731][T14735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.463025][T14735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.511920][T14735] team0: Port device team_slave_0 added [ 259.523956][T14733] hsr_slave_0: entered promiscuous mode [ 259.530465][T14733] hsr_slave_1: entered promiscuous mode [ 259.537026][T14733] debugfs: 'hsr0' already exists in 'hsr' [ 259.542747][T14733] Cannot create hsr debugfs directory [ 259.569606][T14735] team0: Port device team_slave_1 added [ 259.650549][T14735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.658098][ T5829] Bluetooth: hci7: command tx timeout [ 259.658107][ T5822] Bluetooth: hci6: command tx timeout [ 259.669773][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.695883][T14735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.739969][T14735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.747566][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.774229][T14735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.816059][ T5829] Bluetooth: hci8: command tx timeout [ 259.867861][T14735] hsr_slave_0: entered promiscuous mode [ 259.874043][T14735] hsr_slave_1: entered promiscuous mode [ 259.880454][T14735] debugfs: 'hsr0' already exists in 'hsr' [ 259.886262][T14735] Cannot create hsr debugfs directory [ 260.012837][T14752] chnl_net:caif_netlink_parms(): no params data found [ 260.181007][T14752] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.188348][T14752] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.195638][T14752] bridge_slave_0: entered allmulticast mode [ 260.202983][T14752] bridge_slave_0: entered promiscuous mode [ 260.210776][T14752] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.218059][T14752] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.225236][T14752] bridge_slave_1: entered allmulticast mode [ 260.233042][T14752] bridge_slave_1: entered promiscuous mode [ 260.281338][T14752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.294433][T14752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.334612][T14752] team0: Port device team_slave_0 added [ 260.342242][T14752] team0: Port device team_slave_1 added [ 260.363775][T14752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.370858][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.397152][T14752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.409496][T14752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.417189][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.443510][T14752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.480395][T14752] hsr_slave_0: entered promiscuous mode [ 260.486809][T14752] hsr_slave_1: entered promiscuous mode [ 260.492844][T14752] debugfs: 'hsr0' already exists in 'hsr' [ 260.498668][T14752] Cannot create hsr debugfs directory [ 260.696776][ T5829] Bluetooth: hci5: command tx timeout [ 260.776860][ T5829] Bluetooth: hci9: command tx timeout [ 261.736045][ T5822] Bluetooth: hci7: command tx timeout [ 261.736140][ T5829] Bluetooth: hci6: command tx timeout [ 261.896653][ T5829] Bluetooth: hci8: command tx timeout [ 262.775944][ T5829] Bluetooth: hci5: command tx timeout [ 262.856359][ T5829] Bluetooth: hci9: command tx timeout [ 263.816079][ T5829] Bluetooth: hci7: command tx timeout [ 263.816128][ T5822] Bluetooth: hci6: command tx timeout [ 263.975919][ T5822] Bluetooth: hci8: command tx timeout [ 264.855955][ T5822] Bluetooth: hci5: command tx timeout [ 264.935988][ T5822] Bluetooth: hci9: command tx timeout [ 265.896301][ T5822] Bluetooth: hci6: command tx timeout [ 265.896309][ T5829] Bluetooth: hci7: command tx timeout [ 266.056010][ T5829] Bluetooth: hci8: command tx timeout [ 267.016704][ T5829] Bluetooth: hci9: command tx timeout [ 272.216033][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.297980][ T2580] block nbd0: Possible stuck request ffff888025c7a800: control (read@0,1024B). Runtime 60 seconds [ 286.308797][ T2580] block nbd0: Possible stuck request ffff888025c7aa00: control (read@1024,1024B). Runtime 60 seconds [ 286.319991][ T2580] block nbd0: Possible stuck request ffff888025c7ac00: control (read@2048,1024B). Runtime 60 seconds [ 286.331754][ T2580] block nbd0: Possible stuck request ffff888025c7ae00: control (read@3072,1024B). Runtime 60 seconds [ 287.646019][ T5192] udevd[5192]: worker [5807] /devices/virtual/block/nbd0 is taking a long time [ 304.216935][ T515] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.376204][ T2580] block nbd0: Possible stuck request ffff888025c7a800: control (read@0,1024B). Runtime 90 seconds [ 316.386986][ T2580] block nbd0: Possible stuck request ffff888025c7aa00: control (read@1024,1024B). Runtime 90 seconds [ 316.398114][ T2580] block nbd0: Possible stuck request ffff888025c7ac00: control (read@2048,1024B). Runtime 90 seconds [ 316.409308][ T2580] block nbd0: Possible stuck request ffff888025c7ae00: control (read@3072,1024B). Runtime 90 seconds [ 316.657345][ T5822] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 316.665555][ T5822] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 316.673913][ T5822] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 316.682516][ T5822] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 316.690831][ T5822] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 316.721551][T14765] wg1 speed is unknown, defaulting to 1000 [ 316.827007][T14765] lo speed is unknown, defaulting to 1000 [ 316.925725][T14765] chnl_net:caif_netlink_parms(): no params data found [ 316.988187][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.996183][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.003356][T14765] bridge_slave_0: entered allmulticast mode [ 317.010802][T14765] bridge_slave_0: entered promiscuous mode [ 317.020977][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.030756][T14765] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.038048][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.045435][T14765] bridge_slave_1: entered allmulticast mode [ 317.052742][T14765] bridge_slave_1: entered promiscuous mode [ 317.077969][T14765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.089543][T14765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.117437][T14765] team0: Port device team_slave_0 added [ 317.124837][T14765] team0: Port device team_slave_1 added [ 317.146782][T14765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.153729][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.180047][T14765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.192330][T14765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.199419][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.225460][T14765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.263576][T14765] hsr_slave_0: entered promiscuous mode [ 317.269881][T14765] hsr_slave_1: entered promiscuous mode [ 317.276259][T14765] debugfs: 'hsr0' already exists in 'hsr' [ 317.282004][T14765] Cannot create hsr debugfs directory [ 317.759276][ T5822] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 317.769353][ T5822] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 317.777792][ T5822] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 317.787348][ T5822] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 317.796336][ T5822] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 317.832652][ T5822] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 317.844094][ T5822] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 317.852921][ T5822] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 317.861088][ T5822] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 317.868828][ T5822] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 317.877734][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 317.887774][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 317.896117][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 317.905638][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 317.909367][T14776] wg1 speed is unknown, defaulting to 1000 [ 317.928614][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 317.981214][T14780] wg1 speed is unknown, defaulting to 1000 [ 317.996791][T14778] wg1 speed is unknown, defaulting to 1000 [ 318.087922][T14776] lo speed is unknown, defaulting to 1000 [ 318.257957][T14776] chnl_net:caif_netlink_parms(): no params data found [ 318.296082][T14780] lo speed is unknown, defaulting to 1000 [ 318.429597][T14776] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.437203][T14776] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.444459][T14776] bridge_slave_0: entered allmulticast mode [ 318.452284][T14776] bridge_slave_0: entered promiscuous mode [ 318.473409][T14778] lo speed is unknown, defaulting to 1000 [ 318.480125][T14776] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.489248][T14776] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.496606][T14776] bridge_slave_1: entered allmulticast mode [ 318.503605][T14776] bridge_slave_1: entered promiscuous mode [ 318.557548][T14776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.573630][T14776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.629369][T14776] team0: Port device team_slave_0 added [ 318.652335][T14776] team0: Port device team_slave_1 added [ 318.696382][T14776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.703351][T14776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.730036][T14776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.743728][T14776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.751220][T14776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.778085][ T5834] Bluetooth: hci10: command tx timeout [ 318.785615][T14776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.843926][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 318.855504][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 318.867426][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 318.887780][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 318.897082][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 318.941746][T14776] hsr_slave_0: entered promiscuous mode [ 318.949951][T14776] hsr_slave_1: entered promiscuous mode [ 318.957006][T14776] debugfs: 'hsr0' already exists in 'hsr' [ 318.963851][T14776] Cannot create hsr debugfs directory [ 318.991745][T14780] chnl_net:caif_netlink_parms(): no params data found [ 319.010619][T14778] chnl_net:caif_netlink_parms(): no params data found [ 319.095585][T14792] wg1 speed is unknown, defaulting to 1000 [ 319.238948][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.246753][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.254022][T14780] bridge_slave_0: entered allmulticast mode [ 319.263089][T14780] bridge_slave_0: entered promiscuous mode [ 319.295388][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.311053][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.318562][T14780] bridge_slave_1: entered allmulticast mode [ 319.325591][T14780] bridge_slave_1: entered promiscuous mode [ 319.342945][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.350593][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.358591][T14778] bridge_slave_0: entered allmulticast mode [ 319.366502][T14778] bridge_slave_0: entered promiscuous mode [ 319.373463][T14792] lo speed is unknown, defaulting to 1000 [ 319.374589][T14778] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.386984][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.394177][T14778] bridge_slave_1: entered allmulticast mode [ 319.401226][T14778] bridge_slave_1: entered promiscuous mode [ 319.479438][T14780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.512278][T14778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.524048][T14780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.550162][T14778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.597061][T14780] team0: Port device team_slave_0 added [ 319.624256][T14780] team0: Port device team_slave_1 added [ 319.643505][T14778] team0: Port device team_slave_0 added [ 319.665298][T14780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.672385][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.698855][T14780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.720330][T14778] team0: Port device team_slave_1 added [ 319.744513][T14780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.752401][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.778862][T14780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.817095][ T5834] Bluetooth: hci11: command tx timeout [ 319.827583][T14778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.834548][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.861905][T14778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.897986][T14780] hsr_slave_0: entered promiscuous mode [ 319.904939][T14780] hsr_slave_1: entered promiscuous mode [ 319.911827][T14780] debugfs: 'hsr0' already exists in 'hsr' [ 319.918220][T14780] Cannot create hsr debugfs directory [ 319.924509][T14778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.932079][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.958678][T14778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.976160][ T5834] Bluetooth: hci12: command tx timeout [ 319.976436][ T51] Bluetooth: hci13: command tx timeout [ 320.107801][T14778] hsr_slave_0: entered promiscuous mode [ 320.114133][T14778] hsr_slave_1: entered promiscuous mode [ 320.120492][T14778] debugfs: 'hsr0' already exists in 'hsr' [ 320.126612][T14778] Cannot create hsr debugfs directory [ 320.211554][T14792] chnl_net:caif_netlink_parms(): no params data found [ 320.408537][T14792] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.416086][T14792] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.423313][T14792] bridge_slave_0: entered allmulticast mode [ 320.430598][T14792] bridge_slave_0: entered promiscuous mode [ 320.439701][T14792] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.446999][T14792] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.454260][T14792] bridge_slave_1: entered allmulticast mode [ 320.461933][T14792] bridge_slave_1: entered promiscuous mode [ 320.504678][T14792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.517102][T14792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.555612][T14792] team0: Port device team_slave_0 added [ 320.563417][T14792] team0: Port device team_slave_1 added [ 320.586990][T14792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.594779][T14792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.625086][T14792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.642330][T14792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.650772][T14792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.678093][T14792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.728416][T14792] hsr_slave_0: entered promiscuous mode [ 320.735459][T14792] hsr_slave_1: entered promiscuous mode [ 320.747318][T14792] debugfs: 'hsr0' already exists in 'hsr' [ 320.753077][T14792] Cannot create hsr debugfs directory [ 320.856140][ T51] Bluetooth: hci10: command tx timeout [ 320.935989][ T51] Bluetooth: hci14: command tx timeout [ 321.896579][ T51] Bluetooth: hci11: command tx timeout [ 322.056096][ T5834] Bluetooth: hci13: command tx timeout [ 322.061707][ T51] Bluetooth: hci12: command tx timeout [ 322.936975][ T51] Bluetooth: hci10: command tx timeout [ 323.016748][ T51] Bluetooth: hci14: command tx timeout [ 323.975964][ T51] Bluetooth: hci11: command tx timeout [ 324.136473][ T51] Bluetooth: hci12: command tx timeout [ 324.136483][ T5834] Bluetooth: hci13: command tx timeout [ 325.015963][ T51] Bluetooth: hci10: command tx timeout [ 325.096071][ T51] Bluetooth: hci14: command tx timeout [ 326.056138][ T51] Bluetooth: hci11: command tx timeout [ 326.216179][ T51] Bluetooth: hci12: command tx timeout [ 326.216655][ T5834] Bluetooth: hci13: command tx timeout [ 327.176075][ T5834] Bluetooth: hci14: command tx timeout [ 336.216724][ T515] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.457329][ T2580] block nbd0: Possible stuck request ffff888025c7a800: control (read@0,1024B). Runtime 120 seconds [ 346.468190][ T2580] block nbd0: Possible stuck request ffff888025c7aa00: control (read@1024,1024B). Runtime 120 seconds [ 346.479486][ T2580] block nbd0: Possible stuck request ffff888025c7ac00: control (read@2048,1024B). Runtime 120 seconds [ 346.490636][ T2580] block nbd0: Possible stuck request ffff888025c7ae00: control (read@3072,1024B). Runtime 120 seconds [ 365.176161][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 368.217649][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.536478][ T2580] block nbd0: Possible stuck request ffff888025c7a800: control (read@0,1024B). Runtime 150 seconds [ 376.547398][ T2580] block nbd0: Possible stuck request ffff888025c7aa00: control (read@1024,1024B). Runtime 150 seconds [ 376.558510][ T2580] block nbd0: Possible stuck request ffff888025c7ac00: control (read@2048,1024B). Runtime 150 seconds [ 376.569767][ T2580] block nbd0: Possible stuck request ffff888025c7ae00: control (read@3072,1024B). Runtime 150 seconds [ 376.898450][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 376.907681][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 376.917038][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 376.925242][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 376.935212][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 376.972675][T14810] wg1 speed is unknown, defaulting to 1000 [ 377.077625][T14810] lo speed is unknown, defaulting to 1000 [ 377.187466][T14810] chnl_net:caif_netlink_parms(): no params data found [ 377.251029][T14810] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.259292][T14810] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.266746][T14810] bridge_slave_0: entered allmulticast mode [ 377.273881][T14810] bridge_slave_0: entered promiscuous mode [ 377.281952][T14810] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.289619][T14810] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.297202][T14810] bridge_slave_1: entered allmulticast mode [ 377.304276][T14810] bridge_slave_1: entered promiscuous mode [ 377.331387][T14810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.343217][T14810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.371005][T14810] team0: Port device team_slave_0 added [ 377.379371][T14810] team0: Port device team_slave_1 added [ 377.402856][T14810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.409915][T14810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.437222][T14810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.449321][T14810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.456625][T14810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.482691][T14810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.522621][T14810] hsr_slave_0: entered promiscuous mode [ 377.529229][T14810] hsr_slave_1: entered promiscuous mode [ 377.535361][T14810] debugfs: 'hsr0' already exists in 'hsr' [ 377.541779][T14810] Cannot create hsr debugfs directory [ 378.017215][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 378.027739][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 378.036349][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 378.044405][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 378.055207][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 378.091150][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 378.101312][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 378.114292][ T5829] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 378.118262][ T5822] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 378.123745][ T5829] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 378.140015][T14821] wg1 speed is unknown, defaulting to 1000 [ 378.143626][ T5829] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 378.147387][ T5822] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 378.164290][ T5822] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 378.176520][ T5829] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 378.186816][ T5822] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 378.267940][T14825] wg1 speed is unknown, defaulting to 1000 [ 378.274973][T14823] wg1 speed is unknown, defaulting to 1000 [ 378.336542][T14821] lo speed is unknown, defaulting to 1000 [ 378.461863][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.548043][T14825] lo speed is unknown, defaulting to 1000 [ 378.548454][T14821] chnl_net:caif_netlink_parms(): no params data found [ 378.739858][T14823] lo speed is unknown, defaulting to 1000 [ 378.746924][T14821] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.754201][T14821] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.761756][T14821] bridge_slave_0: entered allmulticast mode [ 378.769363][T14821] bridge_slave_0: entered promiscuous mode [ 378.782053][T14821] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.789515][T14821] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.797402][T14821] bridge_slave_1: entered allmulticast mode [ 378.805103][T14821] bridge_slave_1: entered promiscuous mode [ 378.847878][T14821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.861201][T14821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.902725][T14821] team0: Port device team_slave_0 added [ 378.925968][T14821] team0: Port device team_slave_1 added [ 379.002600][T14821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.011461][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.017640][ T5831] Bluetooth: hci15: command tx timeout [ 379.039989][T14821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.084160][T14821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.091337][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.122310][T14821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.145316][T14839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 379.156956][T14839] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 379.165163][T14839] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 379.181097][T14839] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 379.206083][T14839] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 379.253971][T14821] hsr_slave_0: entered promiscuous mode [ 379.262263][T14821] hsr_slave_1: entered promiscuous mode [ 379.269384][T14821] debugfs: 'hsr0' already exists in 'hsr' [ 379.275141][T14821] Cannot create hsr debugfs directory [ 379.295569][T14823] chnl_net:caif_netlink_parms(): no params data found [ 379.339181][T14825] chnl_net:caif_netlink_parms(): no params data found [ 379.349798][T14837] wg1 speed is unknown, defaulting to 1000 [ 379.571341][T14837] lo speed is unknown, defaulting to 1000 [ 379.634392][T14823] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.643125][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.650696][T14823] bridge_slave_0: entered allmulticast mode [ 379.658295][T14823] bridge_slave_0: entered promiscuous mode [ 379.671554][T14823] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.679213][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.686720][T14823] bridge_slave_1: entered allmulticast mode [ 379.693691][T14823] bridge_slave_1: entered promiscuous mode [ 379.718233][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.725330][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.732938][T14825] bridge_slave_0: entered allmulticast mode [ 379.741574][T14825] bridge_slave_0: entered promiscuous mode [ 379.773299][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.780624][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.788011][T14825] bridge_slave_1: entered allmulticast mode [ 379.795122][T14825] bridge_slave_1: entered promiscuous mode [ 379.809994][T14823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.860828][T14823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.888304][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.901889][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.959461][T14825] team0: Port device team_slave_0 added [ 379.967918][T14823] team0: Port device team_slave_0 added [ 379.983669][T14825] team0: Port device team_slave_1 added [ 379.991452][T14823] team0: Port device team_slave_1 added [ 380.032882][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.040731][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.067568][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.092539][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.100309][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.127792][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.140049][T14839] Bluetooth: hci16: command tx timeout [ 380.148341][T14823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.155284][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.181755][T14823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.209101][T14823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.216230][T14839] Bluetooth: hci17: command tx timeout [ 380.221851][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.226070][T14839] Bluetooth: hci18: command tx timeout [ 380.251232][T14823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.359873][T14823] hsr_slave_0: entered promiscuous mode [ 380.367352][T14823] hsr_slave_1: entered promiscuous mode [ 380.373567][T14823] debugfs: 'hsr0' already exists in 'hsr' [ 380.379575][T14823] Cannot create hsr debugfs directory [ 380.403369][T14825] hsr_slave_0: entered promiscuous mode [ 380.410242][T14825] hsr_slave_1: entered promiscuous mode [ 380.417644][T14825] debugfs: 'hsr0' already exists in 'hsr' [ 380.423403][T14825] Cannot create hsr debugfs directory [ 380.507363][T14837] chnl_net:caif_netlink_parms(): no params data found [ 380.538367][T14839] Bluetooth: hci5: command 0x0406 tx timeout [ 380.544647][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 380.553682][ T5831] Bluetooth: hci7: command 0x0406 tx timeout [ 380.564443][ T5836] Bluetooth: hci8: command 0x0406 tx timeout [ 380.772846][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.780688][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.788054][T14837] bridge_slave_0: entered allmulticast mode [ 380.795260][T14837] bridge_slave_0: entered promiscuous mode [ 380.818965][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.826473][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.833704][T14837] bridge_slave_1: entered allmulticast mode [ 380.841234][T14837] bridge_slave_1: entered promiscuous mode [ 380.884386][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.898296][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.924816][T14837] team0: Port device team_slave_0 added [ 380.934161][T14837] team0: Port device team_slave_1 added [ 380.964741][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.971888][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.998471][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.010977][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.018444][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.045084][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.088778][T14837] hsr_slave_0: entered promiscuous mode [ 381.095222][T14837] hsr_slave_1: entered promiscuous mode [ 381.100949][ T5829] Bluetooth: hci15: command tx timeout [ 381.108733][T14837] debugfs: 'hsr0' already exists in 'hsr' [ 381.114456][T14837] Cannot create hsr debugfs directory [ 381.266012][ T5829] Bluetooth: hci19: command tx timeout [ 382.216361][ T5829] Bluetooth: hci16: command tx timeout [ 382.296386][ T5829] Bluetooth: hci18: command tx timeout [ 382.300489][ T5834] Bluetooth: hci17: command tx timeout [ 383.175969][ T5834] Bluetooth: hci15: command tx timeout [ 383.336003][ T5834] Bluetooth: hci19: command tx timeout [ 384.296080][ T5829] Bluetooth: hci16: command tx timeout [ 384.376195][ T5836] Bluetooth: hci18: command tx timeout [ 384.381781][ T5829] Bluetooth: hci17: command tx timeout [ 385.256030][ T5829] Bluetooth: hci15: command tx timeout [ 385.416495][ T5829] Bluetooth: hci19: command tx timeout [ 385.656238][ T5829] Bluetooth: hci9: command 0x0406 tx timeout [ 386.376026][ T5834] Bluetooth: hci16: command tx timeout [ 386.458795][ T5834] Bluetooth: hci17: command tx timeout [ 386.458827][ T5829] Bluetooth: hci18: command tx timeout [ 387.496033][ T5829] Bluetooth: hci19: command tx timeout [ 393.177246][ T30] INFO: task dhcpcd:5486 blocked for more than 143 seconds. [ 393.184844][ T30] Not tainted syzkaller #0 [ 393.190127][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.199088][ T30] task:dhcpcd state:D stack:25256 pid:5486 tgid:5486 ppid:1 task_flags:0x400140 flags:0x00080000 [ 393.211408][ T30] Call Trace: [ 393.214762][ T30] [ 393.217869][ T30] __schedule+0x15dd/0x52d0 [ 393.222429][ T30] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.227652][ T30] ? __pfx___schedule+0x10/0x10 [ 393.233012][ T30] ? schedule+0x90/0x360 [ 393.237394][ T30] schedule+0x164/0x360 [ 393.241579][ T30] schedule_preempt_disabled+0x13/0x30 [ 393.247566][ T30] __mutex_lock+0x7fe/0x1300 [ 393.252640][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 393.276017][ T30] ? __mutex_lock+0x5ac/0x1300 [ 393.280843][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 393.285542][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 393.306037][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 393.311044][ T30] ? radix_tree_lookup+0x240/0x290 [ 393.320921][ T30] genl_rcv_msg+0x10b/0x7a0 [ 393.325469][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.331616][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 393.337660][ T30] netlink_rcv_skb+0x232/0x4b0 [ 393.342441][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.347698][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.353127][ T30] ? down_read+0x272/0x2e0 [ 393.358216][ T30] ? genl_rcv+0xd/0x40 [ 393.362302][ T30] genl_rcv+0x28/0x40 [ 393.366403][ T30] netlink_unicast+0x80f/0x9b0 [ 393.371182][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 393.376701][ T30] ? netlink_sendmsg+0x650/0xb40 [ 393.381659][ T30] ? skb_put+0x11b/0x210 [ 393.386537][ T30] netlink_sendmsg+0x813/0xb40 [ 393.391313][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.396671][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.401619][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.406981][ T30] ____sys_sendmsg+0x972/0x9f0 [ 393.411753][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.417731][ T30] ? import_iovec+0x73/0xa0 [ 393.422251][ T30] ___sys_sendmsg+0x2a5/0x360 [ 393.427004][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.432211][ T30] ? __rtnl_unlock+0xc8/0xf0 [ 393.436898][ T30] ? __seccomp_filter+0x3e9/0x1ef0 [ 393.442032][ T30] ? __pfx___seccomp_filter+0x10/0x10 [ 393.448031][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 393.452977][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.458586][ T30] ? __secure_computing+0xe1/0x2a0 [ 393.463711][ T30] do_syscall_64+0x14d/0xf80 [ 393.468376][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.474455][ T30] ? clear_bhb_loop+0x40/0x90 [ 393.479642][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.485555][ T30] RIP: 0033:0x7f9cdfea2407 [ 393.490125][ T30] RSP: 002b:00007fff6b96f6e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 393.498760][ T30] RAX: ffffffffffffffda RBX: 00007f9cdfe18780 RCX: 00007f9cdfea2407 [ 393.507172][ T30] RDX: 0000000000000000 RSI: 00007fff6b96f760 RDI: 000000000000000e [ 393.515153][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.523199][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562058a8be10 [ 393.531247][ T30] R13: 000000000000000e R14: 00007fff6b983c20 R15: 0000562065fe3ae0 [ 393.539646][ T30] [ 393.542767][ T30] INFO: task syz.2.2395:14643 blocked for more than 143 seconds. [ 393.550535][ T30] Not tainted syzkaller #0 [ 393.555463][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.564189][ T30] task:syz.2.2395 state:D stack:26216 pid:14643 tgid:14642 ppid:5820 task_flags:0x480140 flags:0x00080002 [ 393.576853][ T30] Call Trace: [ 393.580237][ T30] [ 393.583160][ T30] __schedule+0x15dd/0x52d0 [ 393.587716][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 393.592667][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 393.597754][ T30] ? __pfx___schedule+0x10/0x10 [ 393.602640][ T30] ? schedule+0x90/0x360 [ 393.607423][ T30] schedule+0x164/0x360 [ 393.611682][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 393.617253][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 393.623337][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 393.629467][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 393.635637][ T30] nbd_set_size+0x454/0x680 [ 393.640547][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 393.645576][ T30] ? nla_memcpy+0x5b/0xc0 [ 393.649993][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 393.655326][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 393.661331][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.666457][ T30] ? trace_kmalloc+0x2a/0x110 [ 393.671135][ T30] ? __nla_parse+0x40/0x60 [ 393.675538][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 393.682047][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 393.687739][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.693828][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 393.699332][ T30] genl_rcv_msg+0x61c/0x7a0 [ 393.703854][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.708999][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 393.714736][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 393.719733][ T30] netlink_rcv_skb+0x232/0x4b0 [ 393.724539][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.729978][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.735269][ T30] ? down_read+0x272/0x2e0 [ 393.741790][ T30] ? genl_rcv+0xd/0x40 [ 393.746005][ T30] genl_rcv+0x28/0x40 [ 393.749996][ T30] netlink_unicast+0x80f/0x9b0 [ 393.754781][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 393.760305][ T30] ? netlink_sendmsg+0x650/0xb40 [ 393.765258][ T30] ? skb_put+0x11b/0x210 [ 393.769707][ T30] netlink_sendmsg+0x813/0xb40 [ 393.774518][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.780053][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.785054][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.790483][ T30] ____sys_sendmsg+0x972/0x9f0 [ 393.795290][ T30] ? futex_unqueue+0x211/0x240 [ 393.800597][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.806057][ T30] ? import_iovec+0x73/0xa0 [ 393.810586][ T30] ___sys_sendmsg+0x2a5/0x360 [ 393.815277][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.822161][ T30] ? futex_wait+0x29a/0x380 [ 393.828282][ T30] ? __fget_files+0x2a/0x420 [ 393.832897][ T30] ? __fget_files+0x3a0/0x420 [ 393.837611][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 393.842589][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.848212][ T30] ? rcu_is_watching+0x15/0xb0 [ 393.853023][ T30] do_syscall_64+0x14d/0xf80 [ 393.858067][ T30] ? trace_irq_disable+0x3b/0x150 [ 393.863106][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.869308][ T30] ? clear_bhb_loop+0x40/0x90 [ 393.873998][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.879958][ T30] RIP: 0033:0x7fbf9cb9c799 [ 393.884373][ T30] RSP: 002b:00007fbf9d995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.893304][ T30] RAX: ffffffffffffffda RBX: 00007fbf9ce15fa0 RCX: 00007fbf9cb9c799 [ 393.901520][ T30] RDX: 0000000020008040 RSI: 0000200000000040 RDI: 0000000000000009 [ 393.909900][ T30] RBP: 00007fbf9cc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 393.918319][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.926446][ T30] R13: 00007fbf9ce16038 R14: 00007fbf9ce15fa0 R15: 00007ffc1d135178 [ 393.934445][ T30] [ 393.937521][ T30] INFO: task syz.2.2395:14644 blocked for more than 144 seconds. [ 393.945241][ T30] Not tainted syzkaller #0 [ 393.950899][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.959655][ T30] task:syz.2.2395 state:D stack:28456 pid:14644 tgid:14642 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 393.971596][ T30] Call Trace: [ 393.974873][ T30] [ 393.978223][ T30] __schedule+0x15dd/0x52d0 [ 393.982733][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 393.987801][ T30] ? __pfx___schedule+0x10/0x10 [ 393.992691][ T30] ? schedule+0x90/0x360 [ 393.997004][ T30] schedule+0x164/0x360 [ 394.001172][ T30] schedule_preempt_disabled+0x13/0x30 [ 394.007049][ T30] __mutex_lock+0x7fe/0x1300 [ 394.011650][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 394.016969][ T30] ? __mutex_lock+0x5ac/0x1300 [ 394.021746][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 394.026469][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 394.031501][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.036883][ T30] ? radix_tree_lookup+0x240/0x290 [ 394.041996][ T30] genl_rcv_msg+0x10b/0x7a0 [ 394.046547][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.051575][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.056713][ T30] netlink_rcv_skb+0x232/0x4b0 [ 394.061496][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.067076][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.072378][ T30] ? down_read+0x272/0x2e0 [ 394.076863][ T30] ? genl_rcv+0xd/0x40 [ 394.080945][ T30] genl_rcv+0x28/0x40 [ 394.085266][ T30] netlink_unicast+0x80f/0x9b0 [ 394.090179][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 394.095506][ T30] ? netlink_sendmsg+0x650/0xb40 [ 394.100867][ T30] ? skb_put+0x11b/0x210 [ 394.105137][ T30] netlink_sendmsg+0x813/0xb40 [ 394.109974][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.115271][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.120260][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.125558][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.131352][ T30] __sys_sendto+0x672/0x710 [ 394.136150][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 394.141208][ T30] ? fd_install+0x94/0x3d0 [ 394.145612][ T30] ? fd_install+0x306/0x3d0 [ 394.150189][ T30] __x64_sys_sendto+0xde/0x100 [ 394.154988][ T30] do_syscall_64+0x14d/0xf80 [ 394.160017][ T30] ? trace_irq_disable+0x3b/0x150 [ 394.165040][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.171171][ T30] ? clear_bhb_loop+0x40/0x90 [ 394.175900][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.181813][ T30] RIP: 0033:0x7fbf9cb5cfce [ 394.186784][ T30] RSP: 002b:00007fbf9d972e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 394.195319][ T30] RAX: ffffffffffffffda RBX: 00007fbf9d9746c0 RCX: 00007fbf9cb5cfce [ 394.203355][ T30] RDX: 0000000000000020 RSI: 00007fbf9d973000 RDI: 0000000000000010 [ 394.211349][ T30] RBP: 0000000000000000 R08: 00007fbf9d972f04 R09: 000000000000000c [ 394.219987][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 394.227996][ T30] R13: 00007fbf9d972f58 R14: 00007fbf9d973000 R15: 0000000000000000 [ 394.236117][ T30] [ 394.239161][ T30] INFO: task syz.3.2397:14653 blocked for more than 144 seconds. [ 394.252194][ T30] Not tainted syzkaller #0 [ 394.257230][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.265921][ T30] task:syz.3.2397 state:D stack:28392 pid:14653 tgid:14652 ppid:5819 task_flags:0x400040 flags:0x00080002 [ 394.278280][ T30] Call Trace: [ 394.281555][ T30] [ 394.284472][ T30] __schedule+0x15dd/0x52d0 [ 394.289075][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.294030][ T30] ? __pfx___schedule+0x10/0x10 [ 394.299233][ T30] ? schedule+0x90/0x360 [ 394.303513][ T30] schedule+0x164/0x360 [ 394.308253][ T30] schedule_preempt_disabled+0x13/0x30 [ 394.313759][ T30] __mutex_lock+0x7fe/0x1300 [ 394.318462][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 394.323677][ T30] ? __mutex_lock+0x5ac/0x1300 [ 394.328543][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 394.333229][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 394.338679][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.343631][ T30] ? radix_tree_lookup+0x240/0x290 [ 394.348879][ T30] genl_rcv_msg+0x10b/0x7a0 [ 394.353394][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.358466][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.363443][ T30] netlink_rcv_skb+0x232/0x4b0 [ 394.368594][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.373612][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.379037][ T30] ? down_read+0x272/0x2e0 [ 394.383548][ T30] ? genl_rcv+0xd/0x40 [ 394.387647][ T30] genl_rcv+0x28/0x40 [ 394.391634][ T30] netlink_unicast+0x80f/0x9b0 [ 394.396801][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 394.402151][ T30] ? netlink_sendmsg+0x650/0xb40 [ 394.407127][ T30] ? skb_put+0x11b/0x210 [ 394.411386][ T30] netlink_sendmsg+0x813/0xb40 [ 394.416228][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.421529][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.426991][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.432289][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.437628][ T30] __sys_sendto+0x672/0x710 [ 394.442138][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 394.447243][ T30] ? exc_page_fault+0x6a/0xc0 [ 394.451933][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 394.457908][ T30] __x64_sys_sendto+0xde/0x100 [ 394.462697][ T30] do_syscall_64+0x14d/0xf80 [ 394.467345][ T30] ? trace_irq_disable+0x3b/0x150 [ 394.472391][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.478485][ T30] ? clear_bhb_loop+0x40/0x90 [ 394.483167][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.489487][ T30] RIP: 0033:0x7f771b55cfce [ 394.493917][ T30] RSP: 002b:00007f771c401e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 394.502477][ T30] RAX: ffffffffffffffda RBX: 00007f771c4036c0 RCX: 00007f771b55cfce [ 394.510496][ T30] RDX: 0000000000000020 RSI: 00007f771c402000 RDI: 0000000000000004 [ 394.518912][ T30] RBP: 0000000000000000 R08: 00007f771c401f04 R09: 000000000000000c [ 394.526959][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 394.534937][ T30] R13: 00007f771c401f58 R14: 00007f771c402000 R15: 0000000000000000 [ 394.543095][ T30] [ 394.546735][ T30] INFO: task syz.1.2398:14656 blocked for more than 144 seconds. [ 394.554468][ T30] Not tainted syzkaller #0 [ 394.559589][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.568428][ T30] task:syz.1.2398 state:D stack:26872 pid:14656 tgid:14655 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 394.581055][ T30] Call Trace: [ 394.584330][ T30] [ 394.587349][ T30] __schedule+0x15dd/0x52d0 [ 394.591879][ T30] ? __pfx___schedule+0x10/0x10 [ 394.596783][ T30] ? schedule+0x90/0x360 [ 394.601035][ T30] schedule+0x164/0x360 [ 394.605247][ T30] schedule_preempt_disabled+0x13/0x30 [ 394.611225][ T30] __mutex_lock+0x7fe/0x1300 [ 394.615964][ T30] ? __mutex_lock+0x5ac/0x1300 [ 394.620751][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 394.625430][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 394.630530][ T30] ? radix_tree_lookup+0x240/0x290 [ 394.635663][ T30] genl_rcv_msg+0x10b/0x7a0 [ 394.640605][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.645634][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.650644][ T30] netlink_rcv_skb+0x232/0x4b0 [ 394.655436][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.660545][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.666214][ T30] ? down_read+0x272/0x2e0 [ 394.670619][ T30] ? genl_rcv+0xd/0x40 [ 394.674685][ T30] genl_rcv+0x28/0x40 [ 394.678871][ T30] netlink_unicast+0x80f/0x9b0 [ 394.683655][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 394.689010][ T30] ? netlink_sendmsg+0x650/0xb40 [ 394.693955][ T30] ? skb_put+0x11b/0x210 [ 394.699020][ T30] netlink_sendmsg+0x813/0xb40 [ 394.703821][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.709288][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.714239][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.719651][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.725045][ T30] __sys_sendto+0x672/0x710 [ 394.729961][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 394.735003][ T30] ? exc_page_fault+0x6a/0xc0 [ 394.739721][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 394.745035][ T30] __x64_sys_sendto+0xde/0x100 [ 394.749840][ T30] do_syscall_64+0x14d/0xf80 [ 394.754448][ T30] ? trace_irq_disable+0x3b/0x150 [ 394.759888][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.766028][ T30] ? clear_bhb_loop+0x40/0x90 [ 394.770729][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.779704][ T30] RIP: 0033:0x7f4b1595cfce [ 394.784292][ T30] RSP: 002b:00007f4b16783e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 394.793405][ T30] RAX: ffffffffffffffda RBX: 00007f4b167856c0 RCX: 00007f4b1595cfce [ 394.801427][ T30] RDX: 0000000000000020 RSI: 00007f4b16784000 RDI: 0000000000000009 [ 394.809636][ T30] RBP: 0000000000000000 R08: 00007f4b16783f04 R09: 000000000000000c [ 394.818026][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 394.826050][ T30] R13: 00007f4b16783f58 R14: 00007f4b16784000 R15: 0000000000000000 [ 394.834036][ T30] [ 394.837121][ T30] INFO: task syz.1.2398:14657 blocked for more than 145 seconds. [ 394.844833][ T30] Not tainted syzkaller #0 [ 394.850220][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.859066][ T30] task:syz.1.2398 state:D stack:27616 pid:14657 tgid:14655 ppid:5817 task_flags:0x400040 flags:0x00080002 [ 394.871042][ T30] Call Trace: [ 394.874308][ T30] [ 394.877679][ T30] __schedule+0x15dd/0x52d0 [ 394.882197][ T30] ? __pfx___schedule+0x10/0x10 [ 394.887131][ T30] ? schedule+0x90/0x360 [ 394.891380][ T30] schedule+0x164/0x360 [ 394.895540][ T30] schedule_preempt_disabled+0x13/0x30 [ 394.901126][ T30] __mutex_lock+0x7fe/0x1300 [ 394.905722][ T30] ? __mutex_lock+0x5ac/0x1300 [ 394.910595][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 394.915348][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 394.920975][ T30] ? radix_tree_lookup+0x240/0x290 [ 394.926167][ T30] genl_rcv_msg+0x10b/0x7a0 [ 394.930763][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.935893][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 394.940867][ T30] netlink_rcv_skb+0x232/0x4b0 [ 394.945631][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.951098][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.956461][ T30] ? down_read+0x272/0x2e0 [ 394.960886][ T30] ? genl_rcv+0xd/0x40 [ 394.964938][ T30] genl_rcv+0x28/0x40 [ 394.968976][ T30] netlink_unicast+0x80f/0x9b0 [ 394.973748][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 394.979433][ T30] ? netlink_sendmsg+0x650/0xb40 [ 394.984389][ T30] ? skb_put+0x11b/0x210 [ 394.988673][ T30] netlink_sendmsg+0x813/0xb40 [ 394.993451][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.998797][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.003741][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.009463][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.014818][ T30] __sys_sendto+0x672/0x710 [ 395.019405][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 395.024453][ T30] ? fd_install+0x94/0x3d0 [ 395.029028][ T30] ? fd_install+0x306/0x3d0 [ 395.033558][ T30] __x64_sys_sendto+0xde/0x100 [ 395.038831][ T30] do_syscall_64+0x14d/0xf80 [ 395.043415][ T30] ? trace_irq_disable+0x3b/0x150 [ 395.048481][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.054550][ T30] ? clear_bhb_loop+0x40/0x90 [ 395.059291][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.065195][ T30] RIP: 0033:0x7f4b1595cfce [ 395.070053][ T30] RSP: 002b:00007f4b13bf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 395.078533][ T30] RAX: ffffffffffffffda RBX: 00007f4b13bf66c0 RCX: 00007f4b1595cfce [ 395.086542][ T30] RDX: 0000000000000020 RSI: 00007f4b13bf5000 RDI: 000000000000000a [ 395.094501][ T30] RBP: 0000000000000000 R08: 00007f4b13bf4f04 R09: 000000000000000c [ 395.103010][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 395.111029][ T30] R13: 00007f4b13bf4f58 R14: 00007f4b13bf5000 R15: 0000000000000000 [ 395.119188][ T30] [ 395.122213][ T30] INFO: task syz.0.2400:14671 blocked for more than 145 seconds. [ 395.130382][ T30] Not tainted syzkaller #0 [ 395.135339][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.144052][ T30] task:syz.0.2400 state:D stack:27880 pid:14671 tgid:14670 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 395.156415][ T30] Call Trace: [ 395.159692][ T30] [ 395.162608][ T30] __schedule+0x15dd/0x52d0 [ 395.167211][ T30] ? __pfx___schedule+0x10/0x10 [ 395.172074][ T30] ? schedule+0x90/0x360 [ 395.176397][ T30] schedule+0x164/0x360 [ 395.180565][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.186423][ T30] __mutex_lock+0x7fe/0x1300 [ 395.191012][ T30] ? __mutex_lock+0x5ac/0x1300 [ 395.195808][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 395.200493][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.205514][ T30] ? radix_tree_lookup+0x240/0x290 [ 395.210707][ T30] genl_rcv_msg+0x10b/0x7a0 [ 395.215216][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.220717][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 395.225659][ T30] netlink_rcv_skb+0x232/0x4b0 [ 395.230526][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.235555][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.240909][ T30] ? down_read+0x272/0x2e0 [ 395.245335][ T30] ? genl_rcv+0xd/0x40 [ 395.249789][ T30] genl_rcv+0x28/0x40 [ 395.253764][ T30] netlink_unicast+0x80f/0x9b0 [ 395.258663][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 395.263958][ T30] ? netlink_sendmsg+0x650/0xb40 [ 395.268946][ T30] ? skb_put+0x11b/0x210 [ 395.273201][ T30] netlink_sendmsg+0x813/0xb40 [ 395.278531][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.283820][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.288833][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.294122][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.299486][ T30] __sys_sendto+0x672/0x710 [ 395.304002][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 395.309435][ T30] ? exc_page_fault+0x6a/0xc0 [ 395.314141][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 395.319660][ T30] __x64_sys_sendto+0xde/0x100 [ 395.324452][ T30] do_syscall_64+0x14d/0xf80 [ 395.329097][ T30] ? trace_irq_disable+0x3b/0x150 [ 395.334131][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.340854][ T30] ? clear_bhb_loop+0x40/0x90 [ 395.345554][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.351507][ T30] RIP: 0033:0x7f67c715cfce [ 395.356015][ T30] RSP: 002b:00007f67c7f76e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 395.364439][ T30] RAX: ffffffffffffffda RBX: 00007f67c7f786c0 RCX: 00007f67c715cfce [ 395.372897][ T30] RDX: 0000000000000020 RSI: 00007f67c7f77000 RDI: 0000000000000007 [ 395.380936][ T30] RBP: 0000000000000000 R08: 00007f67c7f76f04 R09: 000000000000000c [ 395.389000][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 395.397528][ T30] R13: 00007f67c7f76f58 R14: 00007f67c7f77000 R15: 0000000000000000 [ 395.405527][ T30] [ 395.408603][ T30] INFO: task syz.4.2407:14713 blocked for more than 145 seconds. [ 395.416384][ T30] Not tainted syzkaller #0 [ 395.421386][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.430508][ T30] task:syz.4.2407 state:D stack:27880 pid:14713 tgid:14712 ppid:5830 task_flags:0x400040 flags:0x00080002 [ 395.442479][ T30] Call Trace: [ 395.445893][ T30] [ 395.448829][ T30] __schedule+0x15dd/0x52d0 [ 395.453336][ T30] ? __pfx___schedule+0x10/0x10 [ 395.458720][ T30] ? schedule+0x90/0x360 [ 395.463007][ T30] schedule+0x164/0x360 [ 395.467197][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.472665][ T30] __mutex_lock+0x7fe/0x1300 [ 395.477309][ T30] ? __mutex_lock+0x5ac/0x1300 [ 395.482076][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 395.487163][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.492187][ T30] ? radix_tree_lookup+0x240/0x290 [ 395.497375][ T30] genl_rcv_msg+0x10b/0x7a0 [ 395.501892][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.506974][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 395.511940][ T30] netlink_rcv_skb+0x232/0x4b0 [ 395.517135][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.522154][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.527586][ T30] ? down_read+0x272/0x2e0 [ 395.532027][ T30] ? genl_rcv+0xd/0x40 [ 395.536148][ T30] genl_rcv+0x28/0x40 [ 395.540131][ T30] netlink_unicast+0x80f/0x9b0 [ 395.544891][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 395.550647][ T30] ? netlink_sendmsg+0x650/0xb40 [ 395.555581][ T30] ? skb_put+0x11b/0x210 [ 395.559933][ T30] netlink_sendmsg+0x813/0xb40 [ 395.564713][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.570046][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.574991][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.580689][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.586036][ T30] __sys_sendto+0x672/0x710 [ 395.590581][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 395.595608][ T30] ? exc_page_fault+0x6a/0xc0 [ 395.600333][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 395.605627][ T30] __x64_sys_sendto+0xde/0x100 [ 395.610801][ T30] do_syscall_64+0x14d/0xf80 [ 395.615386][ T30] ? trace_irq_disable+0x3b/0x150 [ 395.620481][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.626729][ T30] ? clear_bhb_loop+0x40/0x90 [ 395.631427][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.637805][ T30] RIP: 0033:0x7f351215cfce [ 395.642216][ T30] RSP: 002b:00007f35130f0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 395.650672][ T30] RAX: ffffffffffffffda RBX: 00007f35130f26c0 RCX: 00007f351215cfce [ 395.658841][ T30] RDX: 0000000000000020 RSI: 00007f35130f1000 RDI: 0000000000000003 [ 395.667306][ T30] RBP: 0000000000000000 R08: 00007f35130f0f04 R09: 000000000000000c [ 395.675275][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 395.683290][ T30] R13: 00007f35130f0f58 R14: 00007f35130f1000 R15: 0000000000000000 [ 395.691330][ T30] [ 395.694345][ T30] INFO: task syz.4.2407:14714 blocked for more than 145 seconds. [ 395.702549][ T30] Not tainted syzkaller #0 [ 395.707555][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.716266][ T30] task:syz.4.2407 state:D stack:26112 pid:14714 tgid:14712 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 395.728708][ T30] Call Trace: [ 395.731984][ T30] [ 395.734902][ T30] __schedule+0x15dd/0x52d0 [ 395.739604][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 395.744581][ T30] ? __pfx___schedule+0x10/0x10 [ 395.749523][ T30] ? schedule+0x90/0x360 [ 395.753786][ T30] schedule+0x164/0x360 [ 395.758410][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.763886][ T30] __mutex_lock+0x7fe/0x1300 [ 395.768539][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 395.773746][ T30] ? __mutex_lock+0x5ac/0x1300 [ 395.778636][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 395.783408][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.788886][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 395.793828][ T30] ? radix_tree_lookup+0x240/0x290 [ 395.798992][ T30] genl_rcv_msg+0x10b/0x7a0 [ 395.803501][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.808573][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 395.813524][ T30] netlink_rcv_skb+0x232/0x4b0 [ 395.821977][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.827089][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.832457][ T30] ? down_read+0x272/0x2e0 [ 395.836923][ T30] ? genl_rcv+0xd/0x40 [ 395.840996][ T30] genl_rcv+0x28/0x40 [ 395.844984][ T30] netlink_unicast+0x80f/0x9b0 [ 395.850217][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 395.855500][ T30] ? netlink_sendmsg+0x650/0xb40 [ 395.860498][ T30] ? skb_put+0x11b/0x210 [ 395.864769][ T30] netlink_sendmsg+0x813/0xb40 [ 395.869594][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.874896][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 395.880235][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 395.885520][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.890934][ T30] __sys_sendto+0x672/0x710 [ 395.895453][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 395.900658][ T30] ? exc_page_fault+0x6a/0xc0 [ 395.905372][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 395.911068][ T30] __x64_sys_sendto+0xde/0x100 [ 395.915888][ T30] do_syscall_64+0x14d/0xf80 [ 395.920476][ T30] ? trace_irq_disable+0x3b/0x150 [ 395.925518][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.931705][ T30] ? clear_bhb_loop+0x40/0x90 [ 395.936767][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.942653][ T30] RIP: 0033:0x7f351215cfce [ 395.947170][ T30] RSP: 002b:00007f35130cfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 395.955589][ T30] RAX: ffffffffffffffda RBX: 00007f35130d16c0 RCX: 00007f351215cfce [ 395.963631][ T30] RDX: 000000000000001c RSI: 00007f35130d0000 RDI: 0000000000000006 [ 395.971900][ T30] RBP: 0000000000000000 R08: 00007f35130cff04 R09: 000000000000000c [ 395.980013][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 395.988028][ T30] R13: 00007f35130cff58 R14: 00007f35130d0000 R15: 0000000000000000 [ 395.996618][ T30] [ 395.999726][ T30] [ 395.999726][ T30] Showing all locks held in the system: [ 396.007513][ T30] 1 lock held by khungtaskd/30: [ 396.012357][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 396.022282][ T30] 2 locks held by dhcpcd/5486: [ 396.027338][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.035632][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.044649][ T30] 2 locks held by getty/5576: [ 396.049368][ T30] #0: ffff888035fd80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 396.059557][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 396.069673][ T30] 1 lock held by udevd/5807: [ 396.074258][ T30] #0: ffff8880257e7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 396.083570][ T30] 6 locks held by syz.2.2395/14643: [ 396.089056][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.097281][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.106378][ T30] #2: ffff888025c35a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 396.117272][ T30] #3: ffff8880257499d0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 396.126723][ T30] #4: ffff888025749370 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 396.139019][ T30] #5: ffff8880257493a8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 396.151826][ T30] 2 locks held by syz.2.2395/14644: [ 396.157089][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.165282][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.174299][ T30] 2 locks held by syz.3.2397/14653: [ 396.179797][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.188020][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.197043][ T30] 2 locks held by syz.1.2398/14656: [ 396.202221][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.210836][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.219941][ T30] 2 locks held by syz.1.2398/14657: [ 396.225137][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.233353][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.242854][ T30] 2 locks held by syz.0.2400/14671: [ 396.248080][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.256349][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.265297][ T30] 2 locks held by syz.4.2407/14713: [ 396.270935][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.279161][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.288173][ T30] 2 locks held by syz.4.2407/14714: [ 396.293353][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.302018][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.311074][ T30] 2 locks held by syz-executor/14720: [ 396.316499][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.324664][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.334119][ T30] 2 locks held by syz-executor/14731: [ 396.339595][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.348025][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.357472][ T30] 2 locks held by syz-executor/14733: [ 396.362836][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.371066][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.380200][ T30] 2 locks held by syz-executor/14735: [ 396.385579][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.394202][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.403209][ T30] 2 locks held by syz-executor/14752: [ 396.408645][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.417208][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.426236][ T30] 2 locks held by syz-executor/14765: [ 396.431602][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.439894][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.449241][ T30] 2 locks held by syz-executor/14776: [ 396.454616][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.462835][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.471900][ T30] 2 locks held by syz-executor/14778: [ 396.477799][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.486035][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.495012][ T30] 2 locks held by syz-executor/14780: [ 396.500429][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.508918][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.517936][ T30] 2 locks held by syz-executor/14792: [ 396.523299][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.531506][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.540816][ T30] 2 locks held by syz-executor/14810: [ 396.546304][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.554576][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.563564][ T30] 2 locks held by syz-executor/14821: [ 396.569223][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.577426][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.586444][ T30] 2 locks held by syz-executor/14823: [ 396.591812][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.600547][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.609573][ T30] 2 locks held by syz-executor/14825: [ 396.614921][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.623138][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.632414][ T30] 2 locks held by syz-executor/14837: [ 396.637825][ T30] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.646040][ T30] #1: ffffffff8fc3ab88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 396.655055][ T30] [ 396.657874][ T30] ============================================= [ 396.657874][ T30] [ 396.666348][ T30] NMI backtrace for cpu 1 [ 396.666369][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 396.666390][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 396.666400][ T30] Call Trace: [ 396.666406][ T30] [ 396.666414][ T30] dump_stack_lvl+0xe8/0x150 [ 396.666439][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 396.666461][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 396.666483][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 396.666508][ T30] sys_info+0x135/0x170 [ 396.666526][ T30] watchdog+0xfd9/0x1030 [ 396.666557][ T30] ? watchdog+0x21a/0x1030 [ 396.666587][ T30] kthread+0x388/0x470 [ 396.666605][ T30] ? __pfx_watchdog+0x10/0x10 [ 396.666628][ T30] ? __pfx_kthread+0x10/0x10 [ 396.666647][ T30] ret_from_fork+0x51e/0xb90 [ 396.666673][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 396.666694][ T30] ? __switch_to+0xc7d/0x1450 [ 396.666726][ T30] ? __pfx_kthread+0x10/0x10 [ 396.666745][ T30] ret_from_fork_asm+0x1a/0x30 [ 396.666782][ T30] [ 396.666789][ T30] Sending NMI from CPU 1 to CPUs 0: [ 396.777645][ C0] NMI backtrace for cpu 0 [ 396.777661][ C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 396.777679][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 396.777689][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 396.777718][ C0] RIP: 0010:__queue_delayed_work+0x99/0x2d0 [ 396.777741][ C0] Code: 74 08 4c 89 e7 e8 67 6d a2 00 49 83 3c 24 00 0f 85 e4 01 00 00 e8 97 32 38 00 4c 8d 63 08 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 3d 6d a2 00 49 8b 04 24 4c 39 e0 0f 85 c6 01 00 [ 396.777755][ C0] RSP: 0018:ffffc90000b97810 EFLAGS: 00000046 [ 396.777767][ C0] RAX: 1ffff1101481810b RBX: ffff8880a40c0850 RCX: ffff88801afa5b80 [ 396.777778][ C0] RDX: 0000000000000000 RSI: ffff8880308fe000 RDI: 0000000000000008 [ 396.777787][ C0] RBP: 0000000000000008 R08: ffff8880a40c0857 R09: 1ffff1101481810a [ 396.777798][ C0] R10: dffffc0000000000 R11: ffffed101481810b R12: ffff8880a40c0858 [ 396.777808][ C0] R13: dffffc0000000000 R14: 0000000000000065 R15: ffff8880308fe000 [ 396.777823][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 396.777834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.777844][ C0] CR2: 000055e2d4e17ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 396.777858][ C0] Call Trace: [ 396.777863][ C0] [ 396.777872][ C0] queue_delayed_work_on+0x11a/0x1e0 [ 396.777895][ C0] batadv_forw_packet_queue+0x20a/0x240 [ 396.777914][ C0] batadv_iv_ogm_schedule+0x874/0xf50 [ 396.777941][ C0] ? batadv_iv_ogm_schedule+0x43a/0xf50 [ 396.777960][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 396.777979][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 396.777995][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 396.778013][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c8/0x7e0 [ 396.778038][ C0] ? process_scheduled_works+0xa25/0x1830 [ 396.778055][ C0] ? process_scheduled_works+0xa25/0x1830 [ 396.778073][ C0] process_scheduled_works+0xb02/0x1830 [ 396.778103][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.778124][ C0] ? assign_work+0x3d5/0x5e0 [ 396.778143][ C0] worker_thread+0xa50/0xfc0 [ 396.778174][ C0] kthread+0x388/0x470 [ 396.778187][ C0] ? __pfx_worker_thread+0x10/0x10 [ 396.778204][ C0] ? __pfx_kthread+0x10/0x10 [ 396.778224][ C0] ret_from_fork+0x51e/0xb90 [ 396.778242][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 396.778259][ C0] ? __switch_to+0xc7d/0x1450 [ 396.778277][ C0] ? __pfx_kthread+0x10/0x10 [ 396.778290][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.778318][ C0] [ 397.034531][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 397.041378][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 397.050466][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 397.060507][ T30] Call Trace: [ 397.063770][ T30] [ 397.066688][ T30] vpanic+0x56c/0xa60 [ 397.070714][ T30] ? __pfx___schedule+0x10/0x10 [ 397.075547][ T30] ? __pfx_vpanic+0x10/0x10 [ 397.080033][ T30] ? __pfx_console_unlock+0x10/0x10 [ 397.085222][ T30] panic+0xc5/0xd0 [ 397.088948][ T30] ? __pfx_panic+0x10/0x10 [ 397.093347][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 397.098710][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 397.104854][ T30] watchdog+0x1023/0x1030 [ 397.109199][ T30] ? watchdog+0x21a/0x1030 [ 397.113603][ T30] kthread+0x388/0x470 [ 397.117657][ T30] ? __pfx_watchdog+0x10/0x10 [ 397.122322][ T30] ? __pfx_kthread+0x10/0x10 [ 397.126896][ T30] ret_from_fork+0x51e/0xb90 [ 397.131486][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 397.136590][ T30] ? __switch_to+0xc7d/0x1450 [ 397.141262][ T30] ? __pfx_kthread+0x10/0x10 [ 397.145845][ T30] ret_from_fork_asm+0x1a/0x30 [ 397.150614][ T30] [ 397.153891][ T30] Kernel Offset: disabled [ 397.158201][ T30] Rebooting in 86400 seconds..