last executing test programs: 19.27399564s ago: executing program 1 (id=6756): ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000400)=0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002000000000000000000000000fffbfff900d4387211459b0d75330000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r0, 0x1e, 0x0, 0x82, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0]}, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x613, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x605, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @echo={0x8, 0x0, 0x0, 0xd, 0x6d63, "fae6e45069177add1d2716d12735186cf372cbf515f574d4875f0166432ebb15ee217175acab5eccf26b1e28522d47d3256acee2aef5fbed1860f2ccb9044c04d6e1cef8c6abce6183bb658e1524e7edd89262f82df3e82e9daaa0eba033bcc84dcefd2c6119033ee00b062b66282707060c2fee2a2a980d05e0732c1320557f350dfc21476f79da9bc773af3153db9ae1f16bac98306bf8d9542bb6be872cd5923a31b5e79a7914ee2dc3e0e1aeab1ccbe885a19205758a066db8b2b2c98079b55a8e9bcd5f87dbacb548f8be54a9415815375cb8e61de036d51b77c997b7b9806fd88f7eab15286d9d850d1d234b661b03f1fadb324b08a50c9ba10786e3f78f32c8d125492f80e212cbf4d6e554f786a447be3fcecc9b1a69880e7eacfa4b737fe1fe34f92df52da033f24a8e09ff62c3a89668bc808131236b911f2b3d5eafe579f284dc1b56878d2e939c33a6c05e4828fa1c11d1da576d0cf5979d61ef29d45041500c179b5327418453594f3fbbef19413237c9d6820a559bcf3c795b28a1a614006c5295d04239a3ab617160856f086df4d7dbf30e0b69427a01cd5a83ee8cc605cd07d25dadd3427607e7676575ce5d640874868c2587e997ed8384f18a82c54229b763493d75113143953f1b583c96cf2922f66528f9e51e1b227f1ee993bfe5e551892fb8819e0ac1d7cf2e3af461114b788a028f47ab9922385574ef36b5ba76a40d7683020ba09c5f8bfaa022c96d7e9be5a1e0d4f39f9617806d04be72a6d1061917f79fea3ea76740e0dc58d176fa2cdfcac8af12fe479e9729b912e3cc4f6e2ecc98d63be79ee40f11fa55d118a1000d6051f05a8aaba0a0a64399921297eeef026e3f332aaf0a5462f5c96536c4e09efa558e85b30f6e3e612d64c5ed9004bc41a132a7c8160f9ec5f784540afc5a6bf6c30ff3a8f86547415467cf19c3385eaf749a7e6661eea6ede6e6b9b9edfba57dfd98747533cf343663a12f77674754919251ee12bef589902178acefdb36bc43bd6a883286c3ca4d177983064904bdbed8d72a38f9b603718a952bf050dd2add5a6e4026379769095fefdcfc8a6067b8c570295a453f043df991c8bb2f00ab7a2f36b4d5211514e5883bef28f45a479ae9d9924849d77096a5617658c4b13dee336f6982f660e7b0b96cd77c8c229a7c4fd6cd3549adb99b1bb3ed151757133b683adec2ca957342dacc7a1a4822e3202c46c73fdfa22744ee02d860df3309598a7cbddf25fa7dd443f3fe5f64b90e3f2e48d814bc0ed1010ac3cd826d1136dfac3252d20675bf833fe908312552e1f82457ac274fb9c48f6a4e84e1eb9e8fccbb6a311bc851187a3d2737c5d0894fccbf82ebcdc4738a234fa5d467403dc95ee62e212b8b191d2b37357919427107ff7d6115eaa3e6493956856d5ae13d13c8271b512b065439f2fd509bf9f7233bd8b19ce5470d9ffdded8bc53e57010ed8d3faf0717ddc9318fbfbfd4f272924ae8ef4167f86a60306d211f0b194aebbf6f93cff7ae6ac9f6592965475caa4de0f570d17a2b59c58f21a41b7d22f5162429c3fb70ef6e9f21a9d1d06e63b924ce973d73da7a21568f1464a439f9b52dc4c4f41fe55e575f102c0360a8a967f84b01f875bb644766db5a2d146af88c4383d6ef40461fb254388b13ed901cf09cdecfb6e81af1b71687bad91002aa3133b333e97fe157c8ef600728fc611bd0daa0fe0bef95e0251db30d43a35efba56f84a55b4436fb3c02d5b7881592646cfc7f6a918ef7383b29df14af8c3f7573ad67cb0f71090e50eb289da0269e319340ec8863a682b31aac421fd9b70989f59da139712511181642d561800733bb2cc5a280de2ec1c50c665a52076caeaf282fd607527873eebb34ae48e6a525541d08a99746be07f1646e3a81ef5555973ad52b3b64b0f8b2c2c3cfee10811708825dceea9aec55b52f72dc1b3a9a8b9d63649ffdcdf248fb90363b184f53cc2e54fcc7ad9d87672f35c7f5b68d79b96d5ba4e77e7162f7b1c52f1695c60591f61b26bfd3adbc7590cc6bef533f0102a87304d7460994aae5862b586186542a4acc1553df79b0bfc0faf0344e0a015d404fda342b7ac9cfbadba3f2f6004102c2b5b3aeb2"}}}}}, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000bc0)={{r1}, "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"}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002280)=ANY=[@ANYRES32=r7], 0x8) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 19.27367367s ago: executing program 2 (id=6757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x10}}, 0x80}}, 0x0) 19.273215071s ago: executing program 3 (id=6758): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001bffffe10000000000010000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 19.151786116s ago: executing program 3 (id=6760): r0 = epoll_create1(0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x51, 0xf, 0x0, 0x0) r2 = accept(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20004880) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r6) epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000011c0)={0x9}) 19.147848991s ago: executing program 1 (id=6762): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="dfa0a70199c964985f15771424344bc081d5138fbf7de96dd484909b", 0x1c}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r8 = socket(0x10, 0x803, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2040000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4480006c51d3aae5482cedfa276b00", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf251400000005000c000000000008000a000e00000005000b000500000005000c000000000005001800010000000800130057000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x44080) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x10, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986f6ec", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 19.092493296s ago: executing program 2 (id=6763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840011000000000002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x40004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_EVENT={0x8, 0x2c, 0x4}]}, 0x44}}, 0x14) 19.025225932s ago: executing program 3 (id=6765): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8920, &(0x7f00000000c0)={'sit0\x00', 0x0}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0xa, 0xa, 0x0, 0x70bd2b, 0x25dfdbfb, {0x3, 0x0, 0x1}, [@typed={0x9, 0x158, 0x0, 0x0, @str='sit0\x00'}, @typed={0xc, 0x121, 0x0, 0x0, @u64=0xc}, @generic="27627ae3cec51d66b9fa0c48ca622a7340"]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, 0x0}}], 0x2, 0x4000040) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000000)={0x9000000, 0x1}) 18.880766951s ago: executing program 2 (id=6766): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x850) 18.871513597s ago: executing program 0 (id=6767): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x2}, 0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bind$tipc(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRESOCT=r0, @ANYRES8=r0], 0x4c}}, 0x0) 18.79120215s ago: executing program 0 (id=6768): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x180, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xec, 0x6, "b88ddcb46fc887ac981e1b372c83341f9dd897f04709e1ac3d1165e7a3506516e4d0ac4e71c8c6eeb3998d63b90bfd2424e31ab536bd1c6beeeb6b8e63b0998efdbe11b4bfd1ece644817a84a03d42a14f311438b034d6c1b86e2692c0785b4e34fcae6bfcb35155bbb47fbeddcf987b493f4bc543dd079333c92e89e77bece64261396b9d2aaeafce15d5e7416ee15af8c76bb844dee8bcf468ebeb42701ac7ed871d3c224d13b3c12dc4397e56dda613237b50c42de53cdd7e5f96ceb97f9f0c2ca8d0eb5e681eb021c48d8e6839ab41fe777fdfe287aaf22d976a94f5879e1f4d49ce7c42b122"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x6c, 0x6, "bbeeecca2b112b07c12129e4cfe2b1a541efa19e446c76384ad38413d423e9c4daafce81705085e5afb5787ad70e0bd764fc2cbf0443e6a881db020760580bd318de4a9c4888a7055213a774cb6f87d05639c549ebbd67d8da1c01a4831dbb7bb4f78069f7410e7e"}]}, @NFT_MSG_NEWTABLE={0x120, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xf3, 0x6, "179d03fb750d6c0c633314a9e9628cab29dd8e8e88fb297ae0feefa3c8aa4e1456ea42f9bb4b9e4266d4626e0cd287538d8f85962c21e58d539ed48fbbe5d07f24912e4b3488afc6c24219d5a2eadd47126eac0ce1d2e32cc3bc5c25b915626db7e64bd879c78be3374c609cf4fb4aa36952758e89f1d0a2519a91fb0b11218ccdbd911c2fd237ec505f63883dac3c15a1ddd221ed8796820cd363fa8f0fb4562c03a0bba562e64f1c61f08f9c0575ce2a314b693051428a7e266f10ba91250ff6a20d5578c0565d22133a796f499168f7d5981722d1ca41e5e5cb2d584b3b3f1fc071e109d99f055e5021415bb4ab"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2c8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) 18.649767183s ago: executing program 4 (id=6771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x1, 0x10, 0x6, 0x0, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x6, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}}, 0x0) 18.572567309s ago: executing program 4 (id=6772): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="eeff3d7572d982a3fc2189ed5474bb1282a48d08ae112a7d68c79d4dc75cb1c16335af3982d17e8a60bb3a0c1190643fe16f26340f974998ef4697976588e7a8f0a636ed8fccc39f906058df12c3723bd1bbe68ba0f9c6473216b1c713ee58605ce5a56e8dab10bda2250e43c61d099e1a5e927c35061fb1285434e1e1a6296152369ac88304216178951d7d9264c4f63b0d167e44acaa07e6ac4c6ceda34b3a266676f70c089130e4a35a45f5c2aa72a65fab40bb77abc4bc2199ae345a3017444d877062529beedb23cd7a8d846d352217", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', r1, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0xc184, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x12a4, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_WOL_MODES={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "3e466b95a7b852fbc99e390ce2bb71a82b5bf732b7fa7569ca89ec74adfa5e623262efea444b3627d6b71cde62ff1a61d296a6fe58a3845b15870fc5fe066cb7c8be66654d917d63ceff18d32081"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_MODES={0x208, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@@-\\(-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$\\@(@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+]\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbc}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "45ad511cdfcff74d8a552f138a03ecae5c83c9e88ffecd04e895b2886c6e65860ddc20305722806eed942ad42a0c0256bc456a91f5570ef8877bc31a88708452ac71b26aa1589ad3eba19ac454d3f9e03d9ee19bed3d0dd1b38ce137"}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "f290ff07ad75a5ae78431e47cdf70656e3fdd6dd378f86d33e06327e1a1a9d71a2e7642805d57026054b7c5c53c01b4aed842512a139c4d6a448112044d64d43ef9d613d6e32a473c136b724bf95f4e977e606a0e6c6009428ab400a0b0f3e27d35217dff80dd17dff3fdde48cafea8a258d94326bf5f623ed737fc67e8df235"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\xd6-\\^^-)/[^.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.#)/-\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x1008, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x174, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x158, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "a7e093db450985a4ee16a03b6cd6977430128193b7952af799267d63e20b24115b0d8317289252fc420d7b0ac5b509de70c996b92f004e6a8d48bc9f7c6c8ae06bb68e7c3eba55d8dbc4501ec5a101ebbf82fc0117fa0f8b82ecac2c576b1262ed5818589000f3628527903dd9ffed4e059cbba429ceef1dc56e25b7e357d77006a7d6264cbecae122460545813065f6ef0a9786f408ffae8118ba608868462a7b55a7ba5a0ec3b6b7d182c6fffde6f4ce69e04ccc7d1853402e46f682cead5d9a8b5ce2577fd0f75cee4d9faf9d9f239ca7b04fe247f5b07b324f758d08c73023ddc403770c1c9b82edd511d8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x70}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xa}]}, 0x174}, 0x1, 0x0, 0x0, 0x40044}, 0x20040084) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.046139145s ago: executing program 0 (id=6773): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, r0) 15.969351255s ago: executing program 1 (id=6774): socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@phonet={0x23, 0xfc, 0x1, 0x6}, 0x80, 0x0}}], 0x2, 0x9200000000000000) 15.967759738s ago: executing program 3 (id=6775): socket$kcm(0x1e, 0x4, 0x0) (async) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) accept4(r2, 0x0, 0x0, 0x0) (async) r8 = accept4(r2, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) (async) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r11, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r11, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x11) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0xe6f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x5187, @remote, 0x3c7}], 0x58) accept4$unix(r8, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000240)=""/192, 0xc0, 0x40000040, 0x0, 0x0) 15.966610785s ago: executing program 2 (id=6776): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000008000000000000000000000011e6071498", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10081, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@delqdisc={0x234, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xb, 0x6}, {0xf, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2a}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x2, 0xcdff, 0x8, 0x1, 0x3, 0x7f, 0x3}}, {0xa, 0x2, [0x7fff, 0x1000, 0x0]}}, {{0x1c, 0x1, {0x3, 0x9, 0x1, 0x8, 0x0, 0x9, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x6, 0x92, 0x9, 0x1, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x7, 0x9, 0x0, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0xe31, 0x7, 0x0, 0x7, 0xffff8000, 0x3}}, {0xa, 0x2, [0x7ff, 0x3e, 0x2792]}}, {{0x1c, 0x1, {0x6, 0x1, 0x839e, 0x81, 0x2, 0x7fffffff, 0xc, 0x8}}, {0x14, 0x2, [0x7, 0x7, 0x6, 0x40, 0x1, 0x0, 0x4cf, 0x3]}}, {{0x1c, 0x1, {0x94, 0x9, 0x3, 0x3, 0x0, 0xc, 0x1, 0x7}}, {0x12, 0x2, [0x1ff, 0x2, 0x0, 0xee, 0xdca, 0x5, 0x1]}}, {{0x1c, 0x1, {0x0, 0x3, 0x7, 0x1, 0x2, 0x200, 0x80, 0x5}}, {0xe, 0x2, [0xc0, 0x1, 0x8, 0x5, 0x2]}}, {{0x1c, 0x1, {0x4, 0x2, 0x2, 0x4a1, 0x0, 0x5, 0x1ff, 0x5}}, {0xe, 0x2, [0x1, 0x40, 0x3, 0xb, 0x605e]}}, {{0x1c, 0x1, {0x1, 0x6, 0x5ab0, 0x6, 0x2, 0x6, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0x101, 0x3]}}, {{0x1c, 0x1, {0x3, 0x9, 0xfff7, 0x7, 0x1, 0xbf, 0x5, 0x3}}, {0xa, 0x2, [0x1ff, 0x8, 0xcee2]}}, {{0x1c, 0x1, {0x7, 0x3, 0x3, 0x800, 0x0, 0xd3cb, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x5, 0x7f, 0x8, 0xb4, 0x2, 0x6, 0x7, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x2, 0x3, 0x95f, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x234}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@getqdisc={0x38, 0x26, 0xc01, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0x10, 0x1}}, [{0x4}, {0x4}, {0x49}, {0x4}, {0x4}]}, 0x38}}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ecbf4ed4395a51945459c395eaca649af3b8c814d4a7b3ea1d03390d36489a06cdceb4c3594f3a58a3759573ceafb0ad718b92a848db8a1485831ecfbebbe0eaf35ed66a33b556b83e780f0c4e1d57a742d23f6f508bd0767c6a9d56673e530c84ae8ebee0d386df54d2565187105b47fcd05bcaf8c51438b452afd1d5ae5087eed240e004d2280e59b764a421243f1f32524cfbb9827782b4414c4adaa21a2b5cb57bed099dd3f2543764f42555d9ca3c0854faa670bb52afe1d94d5499a2bc93272856bbe10d5bd9f0c1e0eb06cef1cc9e84be33591567e9742cfac87f3006ecee023ff3b78e51ad4d9b54c83b81278a714fbbb331e8554d7f7466dbc49875201bceecf24e4755a5836b39f957a35c3148531f4fb4e9462efb76e63fa72fa56c5eb7e552d25772f35fa470355b01bc2e8b172a5a4625143d9e5c9736741e20d00dd9c9ca20de9d57a94d8f95abecf0ab9d88e5a6fb56fcb8d0b791d73cd1800f985f90308420b59cba1aedb05723abb3c738a34282511728cecb31d589a898e23ffc69e6ab2beb6927ee10d9b97adfe2fb9eb5d9338e40c8fdb1b4a8bf5de65ea748610d27bc805f66cdaeaa37c57dce426960644932fad198e9262a0f7414c9573a08eb5297373ed986e66fa9afb853a2c5fdc8e9b7940cf3f5f47b9c5a669bc97fecf36146e3dfd8f133a3d3f201f17d74b18a773c26d3b5c9534b31a3bdde8d3cd85616293df903d3c709378ed48c98fe75117d717ddbf34149b6d20e1c80cb9b8963c9407480f9140427ff4f6ad5d531ff4647a6aa3d8c161f6de3fb4c7d128ffce878a65c678a016bff5feb48744ce39a61aea274d998ffd7834490d9affa71c140f890aa567c66a25b3bd6c538d7ad3338e46e3db8d6c850364a5ef17a678b91f27cdaf48cbd419ae08537192474e8444470bfb06f88f6adccb9a36d3db966d26a2febccb8d70900d2ff66a0b89d1798ecdd9e38ebfcbd34ecfd434a2c5d014a33eb2886cd28ea7037855771e5252133cd008b4b89edab5c94c0309d8b9383cad0f0f7114b70981619bbbc8cb8e8", 0x30b}], 0x2}, 0x4041) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000009140cc67000000000000000000001500003e137d2cf32d0036f368000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r13 = socket(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="020b00070200"/16], 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000140)={'ip6_vti0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98e1000000000056080000e6d5000000008500000007000000b700000000000000950000000000"], &(0x7f0000000980)='GPL\x00', 0x80000b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast}, [@bcast, @default, @bcast, @rose, @netrom, @netrom, @rose, @netrom]}, &(0x7f0000000200)=0x48, 0x80800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xd1) ioctl$SIOCAX25ADDUID(r14, 0x89e1, &(0x7f0000000400)={0x3, @bcast, r15}) 15.962340431s ago: executing program 4 (id=6777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0x1000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x1}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r5, 0x25, 0x4, @void}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}], 0x3) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0x5, 0x1, 0x422, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xe}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) write$nbd(r9, &(0x7f0000000400)=ANY=[], 0xb4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.904103548s ago: executing program 0 (id=6778): socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet(0x2, 0x5, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000080)="545a81560e5227fd70d2899e", 0x6, 0x0, 0x7}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8=r1], 0xffe) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaabdaaaaaaaaaaaaaaaa86dd6000000000400600fe8000000000000000000000000000bbfe800000e4ff000000000100000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04c20000907800001e0401a11e0c07400b6df4f5c06e887cfe07f989519f7e13127224407c80fe8a3616b4bf3400006cc8000000"], 0x0) 15.829233045s ago: executing program 1 (id=6779): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74, 0xfff7fffe}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 15.775767722s ago: executing program 1 (id=6780): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x128, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb3ef}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x121c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x71}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008815}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x22, 0x2, 0x401) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4c040}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000afc15684f78891e7a7408444e1ad0eac5c47d359667d13ea935612f9dd76086293848c01e5a1c8be8054f25644020f13bff81201d803a3ee8c4704a415f04da78b5e0153ab5d0ea7b853500a2e6"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'nicvf0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 15.628217067s ago: executing program 0 (id=6781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) 15.518767232s ago: executing program 3 (id=6782): socket$inet(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES8=r3], 0x58}}, 0x200000c4) socket$inet(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES8=r3], 0x58}}, 0x200000c4) (async) 15.483124157s ago: executing program 0 (id=6783): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800000005e1372817f200001c14002efe00000100000000140012001100b6acd7b8f7f0a0ae8c"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r4, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01012cbd7000fddbdf25030000000c00040002000000000200000c00030000000000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0006000300000000000000080001000000000008000100000000000800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x94) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15.482378127s ago: executing program 4 (id=6784): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="dfa0a70199c964985f15771424344bc081d5138fbf7de96dd484909b8dabf11eb084b12fb6811e", 0x27}], 0x1) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r9 = socket(0x10, 0x803, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r9, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 15.367973349s ago: executing program 2 (id=6785): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14fc98c4", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async, rerun: 64) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) (async) r5 = socket(0xa, 0x3, 0x3b) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) r7 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r7, 0x0, 0x32, 0x0, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000014000192edbc7ffba5023aec9ddeb61d"], 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (rerun: 32) 15.351249579s ago: executing program 1 (id=6786): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x1000}, 0x20050840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000000009500000700000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c06728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(0x0, r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x50) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r12, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r5, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x7e}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r14 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r14, 0x10f, 0x86, &(0x7f0000000440), 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r14, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc6bc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008044) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 15.335739771s ago: executing program 3 (id=6787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000a00)=""/4117, 0x1015}, {&(0x7f0000001c40)=""/60, 0x3c}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000680)=""/95, 0x5f}], 0x5}, 0x2100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000080)) ioctl$int_in(r4, 0x5452, &(0x7f000000fa00)=0x9) ppoll(&(0x7f0000000240)=[{r4, 0x51}], 0x1, &(0x7f0000000380), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) 15.284696575s ago: executing program 4 (id=6788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r5, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (rerun: 64) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6, 0xfffffffc}, 0x8) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x4c, 0x13, 0x100, 0x70bd29, 0x25dfdbff, {0x1, 0x70, 0x6, 0x7, {0x4e22, 0x4e24, [0x4, 0xffffffff, 0xfff, 0x2], [0x7, 0x121, 0xabaf, 0x80000001], 0x0, [0x2a, 0x3]}, 0x3, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 15.253772167s ago: executing program 2 (id=6789): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) 15.218461069s ago: executing program 4 (id=6790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 178.298977ms ago: executing program 32 (id=6783): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800000005e1372817f200001c14002efe00000100000000140012001100b6acd7b8f7f0a0ae8c"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r4, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01012cbd7000fddbdf25030000000c00040002000000000200000c00030000000000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0006000300000000000000080001000000000008000100000000000800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x94) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 131.80303ms ago: executing program 33 (id=6786): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x1000}, 0x20050840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000000009500000700000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c06728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(0x0, r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x50) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r12, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r5, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x7e}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r14 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r14, 0x10f, 0x86, &(0x7f0000000440), 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r14, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc6bc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008044) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 105.232069ms ago: executing program 34 (id=6789): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001800}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) 52.660466ms ago: executing program 35 (id=6787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000a00)=""/4117, 0x1015}, {&(0x7f0000001c40)=""/60, 0x3c}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000680)=""/95, 0x5f}], 0x5}, 0x2100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000080)) ioctl$int_in(r4, 0x5452, &(0x7f000000fa00)=0x9) ppoll(&(0x7f0000000240)=[{r4, 0x51}], 0x1, &(0x7f0000000380), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) 0s ago: executing program 36 (id=6790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) kernel console output (not intermixed with test programs): 0 [ 560.740611][T17143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.001876][T17143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.013261][T17143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.453963][T17142] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.473091][T17142] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.582653][T27825] chnl_net:caif_netlink_parms(): no params data found [ 561.597968][T17142] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.614208][T17142] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.621382][T27935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.709992][T17143] gretap0: left promiscuous mode [ 561.723008][T17143] bridge0: port 3(gretap0) entered disabled state [ 561.751151][T17143] bridge_slave_1: left allmulticast mode [ 561.756885][T17143] bridge_slave_1: left promiscuous mode [ 561.780716][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.794375][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.799325][T27947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5951'. [ 561.813793][T27946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5952'. [ 561.876388][T17143] veth0_to_bond: left allmulticast mode [ 561.886540][T17143] veth0_to_bond: left promiscuous mode [ 561.894462][T17143] bridge14: port 2(veth0_to_bond) entered disabled state [ 561.924062][T17143] veth11: left allmulticast mode [ 561.929317][T17143] veth11: left promiscuous mode [ 561.936446][T17143] bridge14: port 1(veth11) entered disabled state [ 562.248975][ T51] Bluetooth: hci1: command tx timeout [ 562.308132][T17143] xfrm0 (unregistering): left allmulticast mode [ 562.585253][T17143] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 562.593973][T17143] bridge3 (unregistering): left promiscuous mode [ 562.674833][T17143] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 562.683363][T17143] bridge5 (unregistering): left promiscuous mode [ 562.864074][T17143] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 562.872761][T17143] bridge9 (unregistering): left promiscuous mode [ 562.973659][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.994560][T17143] bond10 (unregistering): (slave bridge12): Releasing backup interface [ 563.003430][T17143] bridge12 (unregistering): left promiscuous mode [ 563.154152][T17143] bond1 (unregistering): Released all slaves [ 563.166996][T17143] bond2 (unregistering): Released all slaves [ 563.179665][T17143] bond3 (unregistering): Released all slaves [ 563.194053][T17143] bond4 (unregistering): Released all slaves [ 563.208346][T17143] bond5 (unregistering): Released all slaves [ 563.235102][T17143] bond6 (unregistering): Released all slaves [ 563.247534][T17143] bond7 (unregistering): Released all slaves [ 563.261283][T17143] bond8 (unregistering): Released all slaves [ 563.273731][T17143] bond9 (unregistering): Released all slaves [ 563.291249][T17143] bond10 (unregistering): Released all slaves [ 563.307246][T17143] bond11 (unregistering): Released all slaves [ 563.329430][T17143] bond12 (unregistering): Released all slaves [ 563.346300][T17143] bond0 (unregistering): Released all slaves [ 563.579088][T27825] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.603250][T27825] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.632718][T27825] bridge_slave_0: entered allmulticast mode [ 563.651470][T27825] bridge_slave_0: entered promiscuous mode [ 563.668646][T17143] 9: left promiscuous mode [ 563.807283][T27979] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.5957'. [ 563.866972][T27825] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.885718][T27825] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.904728][T27825] bridge_slave_1: entered allmulticast mode [ 563.912918][T27825] bridge_slave_1: entered promiscuous mode [ 564.022183][T17143] : left promiscuous mode [ 564.039018][T28000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5961'. [ 564.095767][T27989] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 564.114306][T27825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.144077][T17143] tipc: Left network mode [ 564.146251][T27989] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 564.170827][T28006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5962'. [ 564.192022][T27825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.321334][ T51] Bluetooth: hci1: command tx timeout [ 564.342655][T27825] team0: Port device team_slave_0 added [ 564.355932][T28014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5964'. [ 564.390032][T27825] team0: Port device team_slave_1 added [ 564.561602][T28019] netlink: 'syz.3.5966': attribute type 1 has an invalid length. [ 564.569373][T28019] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5966'. [ 564.627446][T28033] xt_socket: unknown flags 0x50 [ 564.694008][T27825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.701834][T28033] netlink: 'syz.0.5968': attribute type 3 has an invalid length. [ 564.711512][T27825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.781333][T27825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.841190][T27825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.848165][T27825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.887900][T27825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.953707][T28048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 565.084552][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5972'. [ 565.239380][T28064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5975'. [ 565.252496][T27825] hsr_slave_0: entered promiscuous mode [ 565.259476][T27825] hsr_slave_1: entered promiscuous mode [ 565.266548][T27825] debugfs: 'hsr0' already exists in 'hsr' [ 565.274983][T27825] Cannot create hsr debugfs directory [ 565.307176][T28064] veth0_to_team: entered promiscuous mode [ 565.336786][T28064] veth0_to_team: left promiscuous mode [ 565.423486][T28067] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 565.446925][T28067] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 565.500588][T28067] team0: Failed to send options change via netlink (err -105) [ 565.528005][T28067] team0: Port device batadv1 added [ 566.928952][T28131] gre1: entered promiscuous mode [ 566.938216][T28131] gre1: entered allmulticast mode [ 567.084514][T27825] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.092132][T28139] __nla_validate_parse: 3 callbacks suppressed [ 567.092150][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5992'. [ 567.273176][T28159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5995'. [ 567.341460][T27825] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.399764][T28154] macsec2: entered promiscuous mode [ 567.479623][T28166] bond0: (slave gre0): Error: Device type is different from other slaves [ 567.626427][T27825] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.776546][T27825] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.833568][T28192] netlink: 'syz.3.6003': attribute type 9 has an invalid length. [ 568.111086][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 60 seconds [ 568.122656][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 60 seconds [ 568.133795][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 60 seconds [ 568.145466][T28205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6006'. [ 568.149881][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 60 seconds [ 568.235088][T17143] hsr_slave_0: left promiscuous mode [ 568.265981][T17143] hsr_slave_1: left promiscuous mode [ 568.312523][T28214] netlink: 'syz.2.6008': attribute type 11 has an invalid length. [ 568.344416][T17143] hsr0: left allmulticast mode [ 568.353540][T28214] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6008'. [ 568.549214][T17143] pim6reg (unregistering): left allmulticast mode [ 568.576545][T17143] vcan0 (unregistering): left allmulticast mode [ 568.903274][T17143] lo (unregistering): left allmulticast mode [ 569.199761][T27825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 569.254032][T27825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 569.294264][T27825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 569.311422][T28256] netlink: 'syz.3.6017': attribute type 39 has an invalid length. [ 569.325274][T27825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 569.527842][T17143] IPVS: stop unused estimator thread 0... [ 569.585071][T27825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.647043][T27825] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.697571][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.704847][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.765244][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.772451][ T8139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.989299][T28271] nbd0: detected capacity change from 0 to 63 [ 570.145647][T28257] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 570.342511][T27825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.407595][ T51] block nbd0: Receive control failed (result -104) [ 570.464546][T27825] veth0_vlan: entered promiscuous mode [ 570.479474][T27825] veth1_vlan: entered promiscuous mode [ 570.544177][T27825] veth0_macvtap: entered promiscuous mode [ 570.570682][T27825] veth1_macvtap: entered promiscuous mode [ 570.621564][T27825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.645233][T27825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.671307][ T8139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.687481][ T8139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.704360][ T8139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.723914][ T8139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.034992][ T8139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.069812][ T8139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.177919][ T8165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.188108][ T8165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.345910][T28347] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6032'. [ 571.528039][T28358] netlink: 'syz.0.6033': attribute type 1 has an invalid length. [ 571.541103][T28357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6035'. [ 571.633773][T28358] 8021q: adding VLAN 0 to HW filter on device bond10 [ 571.663090][T28367] vlan2: entered promiscuous mode [ 571.668193][T28367] bond10: entered promiscuous mode [ 571.763780][T28367] vlan2: entered allmulticast mode [ 571.768946][T28367] bond10: entered allmulticast mode [ 571.843222][T28373] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6037'. [ 571.869980][T28358] bond10: (slave bridge13): making interface the new active one [ 571.939955][T28383] xt_addrtype: ipv6 does not support BROADCAST matching [ 571.953981][T28358] bridge13: entered promiscuous mode [ 571.959574][T28358] bridge13: entered allmulticast mode [ 572.008502][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 572.011559][T28358] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 572.042450][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.070612][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.090441][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.103466][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 572.261889][T28387] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.6040'. [ 572.821219][T28406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6043'. [ 572.876660][ T8139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.925064][T28410] block nbd0: Unsupported socket: should be TCP or UNIX. [ 573.136601][ T8139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.163901][T28429] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6047'. [ 573.190077][T28384] chnl_net:caif_netlink_parms(): no params data found [ 573.345334][ T8139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.477782][ T8139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.599090][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6051'. [ 573.654564][T28451] bridge0: port 1(wlan0) entered blocking state [ 573.672191][T28451] bridge0: port 1(wlan0) entered disabled state [ 573.691800][T28451] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 573.701557][T28451] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 573.802452][T28384] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.828987][T28384] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.859210][T28384] bridge_slave_0: entered allmulticast mode [ 573.883250][T28384] bridge_slave_0: entered promiscuous mode [ 573.898730][T28384] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.908754][T28384] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.917069][T28384] bridge_slave_1: entered allmulticast mode [ 573.926451][T28384] bridge_slave_1: entered promiscuous mode [ 574.092419][ T8171] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.106826][T28471] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6056'. [ 574.107330][ T8171] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.133516][T28384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.162009][ T5823] Bluetooth: hci5: command tx timeout [ 574.189336][ T8165] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.253281][T28478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6059'. [ 574.263644][T28384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.348081][T28384] team0: Port device team_slave_0 added [ 574.381287][T28478] syzkaller1: entered promiscuous mode [ 574.386815][T28478] syzkaller1: entered allmulticast mode [ 574.408367][T28384] team0: Port device team_slave_1 added [ 574.418015][T17143] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.442154][T28485] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6060'. [ 574.442154][T28483] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6060'. [ 574.617343][T28489] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 574.907913][ T8139] dvmrp0 (unregistering): left allmulticast mode [ 576.240599][ T5823] Bluetooth: hci5: command tx timeout [ 576.864591][ T8139] bond0 (unregistering): Released all slaves [ 576.876883][ T8139] bond1 (unregistering): Released all slaves [ 576.899801][T28384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.908246][T28384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.950366][T28384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.971610][T28492] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 577.064698][T28384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.072933][T28384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.102769][T28384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.192545][ T8139] : left promiscuous mode [ 577.335847][T28384] hsr_slave_0: entered promiscuous mode [ 577.354780][T28384] hsr_slave_1: entered promiscuous mode [ 577.371866][T28384] debugfs: 'hsr0' already exists in 'hsr' [ 577.390275][T28384] Cannot create hsr debugfs directory [ 577.398292][ T5192] udevd[5192]: worker [17659] /devices/virtual/block/nbd2 is taking a long time [ 577.403974][ T8139] tipc: Left network mode [ 577.494408][ T8139] IPVS: stopping master sync thread 22759 ... [ 578.287773][T28577] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6082'. [ 578.324202][ T5823] Bluetooth: hci5: command tx timeout [ 578.329770][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 578.390971][T28384] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.527589][T28593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6085'. [ 578.604749][ T8139] team0 (unregistering): Port device wireguard0 removed [ 579.040853][T28384] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.216585][T28384] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.235611][T28619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6091'. [ 579.435845][T28384] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.488916][T28632] netlink: 'syz.4.6094': attribute type 1 has an invalid length. [ 579.506118][T28619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6091'. [ 579.533235][T28619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6091'. [ 579.553404][T28632] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 579.735030][ T8139] IPVS: stop unused estimator thread 0... [ 579.826605][T28641] syzkaller1: entered promiscuous mode [ 579.852753][T28641] syzkaller1: entered allmulticast mode [ 579.920102][T28384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 580.050238][T28384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 580.089329][T28384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 580.120697][T28384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 580.174209][T28669] netlink: 'syz.4.6100': attribute type 1 has an invalid length. [ 580.375424][T28682] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 580.400260][ T5823] Bluetooth: hci5: command tx timeout [ 580.404314][T28384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.413957][T28682] netlink: 'syz.1.6103': attribute type 2 has an invalid length. [ 580.425287][T28682] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6103'. [ 580.497019][T28384] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.543936][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.551154][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.606973][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.614201][ T8173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.705827][T28699] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6106'. [ 580.754753][T28698] No such timeout policy "syz0" [ 580.876944][T28716] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6110'. [ 580.938592][T28716] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6110'. [ 581.073037][T28729] openvswitch: netlink: IP tunnel dst address not specified [ 581.144981][T28384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.340582][T28384] veth0_vlan: entered promiscuous mode [ 581.348892][T28746] netlink: 'syz.0.6117': attribute type 7 has an invalid length. [ 581.384777][T28384] veth1_vlan: entered promiscuous mode [ 581.538697][T28384] veth0_macvtap: entered promiscuous mode [ 581.557918][T28384] veth1_macvtap: entered promiscuous mode [ 581.627626][T28384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.654680][T28384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.699108][T28763] netlink: 'syz.4.6124': attribute type 10 has an invalid length. [ 581.733120][T17143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.744121][T17143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.749344][T28768] xt_TCPMSS: Only works on TCP SYN packets [ 581.794730][T28763] team0: Port device vxcan1 added [ 581.818181][T17143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.827508][T17143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.146683][ T8171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.192210][ T8171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.306991][T17142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.350305][T17142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.491493][ T5823] Bluetooth: hci5: command tx timeout [ 582.929034][T28832] netlink: 'syz.2.6139': attribute type 83 has an invalid length. [ 583.231495][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 583.242582][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 583.252218][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 583.270432][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 583.283279][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 583.329093][T28851] veth1_macvtap: left promiscuous mode [ 583.508140][T28855] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 583.666908][T28858] netlink: 'syz.0.6147': attribute type 8 has an invalid length. [ 583.671379][T28861] sock: sock_set_timeout: `syz.2.6148' (pid 28861) tries to set negative timeout [ 583.676153][T28858] __nla_validate_parse: 8 callbacks suppressed [ 583.676169][T28858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'. [ 583.716416][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'. [ 583.737438][T28863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6149'. [ 583.757429][T28858] bond0: entered promiscuous mode [ 583.766978][T28858] veth0_virt_wifi: entered promiscuous mode [ 583.775981][T28858] bond0: left promiscuous mode [ 583.782053][T28858] veth0_virt_wifi: left promiscuous mode [ 583.822306][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'. [ 583.994440][T28867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6149'. [ 584.013525][T28863] syzkaller0: entered promiscuous mode [ 584.019051][T28863] syzkaller0: entered allmulticast mode [ 584.072054][T28870] bond11 (unregistering): Released all slaves [ 584.329203][T28882] xt_l2tp: v2 tid > 0xffff: 1114244 [ 584.513375][T28886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6154'. [ 585.367139][ T5823] Bluetooth: hci4: command tx timeout [ 586.119337][T28898] veth0_to_bond: entered allmulticast mode [ 586.223300][ T35] bond0: (slave netdevsim0): Releasing backup interface [ 586.345477][ T8165] bridge0: port 3(team0) entered disabled state [ 586.497782][ T8171] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.569659][ T8165] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.590952][T28848] chnl_net:caif_netlink_parms(): no params data found [ 586.662173][T28926] netlink: 'syz.0.6166': attribute type 9 has an invalid length. [ 586.683622][T28926] netlink: 'syz.0.6166': attribute type 11 has an invalid length. [ 586.692305][ T8165] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.704817][T28926] netlink: 'syz.0.6166': attribute type 12 has an invalid length. [ 586.717316][T28926] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6166'. [ 586.728850][T28926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'. [ 586.737940][ T8171] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.747744][T28931] x_tables: duplicate underflow at hook 1 [ 586.762728][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6167'. [ 586.840037][ T35] veth0_to_bond: left allmulticast mode [ 586.860955][ T35] veth0_to_bond: left promiscuous mode [ 586.886395][ T35] bridge4: port 2(veth0_to_bond) entered disabled state [ 586.915260][ T35] veth9: left allmulticast mode [ 586.925284][ T35] veth9: left promiscuous mode [ 586.931677][ T35] bridge4: port 1(veth9) entered disabled state [ 587.036488][ T35] bond2 (unregistering): (slave vti0): Releasing backup interface [ 587.048793][ T35] vti0 (unregistering): left promiscuous mode [ 587.419379][T28947] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6173'. [ 587.435914][ T35] bond0 (unregistering): Released all slaves [ 587.443461][ T5823] Bluetooth: hci4: command tx timeout [ 587.457228][ T35] bond1 (unregistering): Released all slaves [ 587.479103][ T35] bond2 (unregistering): Released all slaves [ 587.503117][ T35] bond3 (unregistering): Released all slaves [ 587.521930][ T35] bond4 (unregistering): Released all slaves [ 587.540105][ T35] bond5 (unregistering): Released all slaves [ 587.566130][ T35] bond6 (unregistering): Released all slaves [ 587.578530][ T35] bond7 (unregistering): Released all slaves [ 587.591965][ T35] bond8 (unregistering): Released all slaves [ 587.611242][ T35] bond9 (unregistering): Released all slaves [ 587.625153][ T35] bond10 (unregistering): (slave lo): Releasing backup interface [ 587.642176][ T35] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 587.656408][ T35] bond10 (unregistering): Released all slaves [ 587.786145][T28848] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.810483][T28848] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.832931][T28848] bridge_slave_0: entered allmulticast mode [ 587.851773][T28848] bridge_slave_0: entered promiscuous mode [ 587.862189][T28848] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.869812][T28848] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.877830][T28848] bridge_slave_1: entered allmulticast mode [ 587.888581][T28848] bridge_slave_1: entered promiscuous mode [ 588.032515][T28961] pim6reg527: entered allmulticast mode [ 588.098336][T28848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.133757][T28848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.305721][T28848] team0: Port device team_slave_0 added [ 588.326749][T28848] team0: Port device team_slave_1 added [ 588.481894][T28848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.497511][T28848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.531783][T28848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.585759][T28848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.596843][T28848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.673043][T28848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.691283][T28995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.833985][T29012] __nla_validate_parse: 2 callbacks suppressed [ 588.834003][T29012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6188'. [ 588.850773][T29013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6187'. [ 588.850773][T29005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6187'. [ 588.877239][T29007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6186'. [ 588.977909][T28848] hsr_slave_0: entered promiscuous mode [ 589.009909][T28848] hsr_slave_1: entered promiscuous mode [ 589.037321][T28848] debugfs: 'hsr0' already exists in 'hsr' [ 589.052271][T28848] Cannot create hsr debugfs directory [ 589.217192][T29032] netlink: 'syz.1.6193': attribute type 1 has an invalid length. [ 589.282133][T29032] bond1: entered promiscuous mode [ 589.293511][T29032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.416033][T29041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.424257][T29041] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 589.435978][T29041] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 589.449419][T29041] bond1: (slave vti0): making interface the new active one [ 589.457046][T29041] vti0: entered promiscuous mode [ 589.464877][T29053] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6198'. [ 589.476179][T29041] bond1: (slave vti0): Enslaving as an active interface with an up link [ 589.522162][ T5823] Bluetooth: hci4: command tx timeout [ 589.694810][T29053] tap0: tun_chr_ioctl cmd 1074025672 [ 589.700256][T29053] tap0: ignored: set checksum disabled [ 589.810488][T29067] openvswitch: netlink: Unknown key attributes 2 [ 589.864517][T29067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6201'. [ 589.905267][T28848] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.075526][ T35] hsr_slave_0: left promiscuous mode [ 590.097357][ T35] hsr_slave_1: left promiscuous mode [ 590.431163][ T35] team0 (unregistering): Port device vxcan1 removed [ 590.466507][T28848] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.666300][T28848] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.872235][T28848] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.149833][ T35] IPVS: stop unused estimator thread 0... [ 591.401682][T28848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 591.435340][T28848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 591.462369][T28848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 591.494689][T28848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 591.602165][ T5823] Bluetooth: hci4: command tx timeout [ 591.993237][T28848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.104462][T28848] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.206387][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.213627][ T8173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.220505][T29188] ip6t_srh: unknown srh invflags 4000 [ 592.250835][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.258054][ T8173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.392317][T29198] netlink: 294 bytes leftover after parsing attributes in process `syz.0.6223'. [ 592.420769][T29198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.496132][T29205] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.535331][T29205] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.589325][T29205] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 592.770155][T29213] syzkaller0: create flow: hash 3357552229 index 1 [ 592.823006][T29231] netlink: 'syz.3.6226': attribute type 62 has an invalid length. [ 592.862966][T29205] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.885147][T29205] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.906217][T29205] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.016145][T29205] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.036605][T29205] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.055089][T29205] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.118621][T29205] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.131213][T29205] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.145709][T29205] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 593.206938][T29203] syzkaller0: delete flow: hash 3357552229 index 1 [ 593.700071][T29269] Bluetooth: MGMT ver 1.23 [ 595.429474][T28848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.571246][T29262] syzkaller0: entered promiscuous mode [ 595.577199][T29262] syzkaller0: entered allmulticast mode [ 597.580764][T29297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.661729][ T8145] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.670071][ T8145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 597.697051][ T8145] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 597.706794][ T8145] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.716767][ T8145] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 597.726852][ T8145] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 597.747660][T29301] veth0: entered promiscuous mode [ 597.755612][ T8145] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.765084][ T8145] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 597.775138][ T8145] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 597.787230][T29301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6234'. [ 597.799975][T29301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6234'. [ 597.811077][T29300] veth0: left promiscuous mode [ 597.850345][ T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.859747][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 597.890882][ T35] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 597.988395][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6239'. [ 597.999143][T28848] veth0_vlan: entered promiscuous mode [ 598.052505][T28848] veth1_vlan: entered promiscuous mode [ 598.158170][T28848] veth0_macvtap: entered promiscuous mode [ 598.169347][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 90 seconds [ 598.182344][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 90 seconds [ 598.193914][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 90 seconds [ 598.210359][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 90 seconds [ 598.232130][T28848] veth1_macvtap: entered promiscuous mode [ 598.241968][T29323] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6241'. [ 598.267300][T29323] syzkaller0: entered promiscuous mode [ 598.274211][T29323] syzkaller0: entered allmulticast mode [ 598.298887][T28848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.344224][T29323] tc action pedit offset must be on 32 bit boundaries [ 598.362711][T28848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.424914][T29332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 598.427073][T29330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6243'. [ 598.441007][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.452692][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.532166][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 598.545880][T29332] macvtap1: entered promiscuous mode [ 598.547908][T29335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 598.566347][T29335] netlink: 'syz.1.6245': attribute type 15 has an invalid length. [ 598.575754][T29336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6243'. [ 598.579345][T29332] vlan0: entered promiscuous mode [ 598.591692][T29332] macvtap1: entered allmulticast mode [ 598.597104][T29332] vlan0: entered allmulticast mode [ 598.603069][T29332] veth0_vlan: entered allmulticast mode [ 598.623429][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.635471][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.658936][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 598.696726][T29335] netlink: 'syz.1.6245': attribute type 15 has an invalid length. [ 598.709486][ T8148] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 598.747475][ T8148] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 598.770342][ T8148] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 598.814617][ T8165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 598.941472][ T8171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.967938][ T8171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.091661][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.103010][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.174927][T29367] openvswitch: netlink: IP tunnel TTL not specified. [ 599.196003][T29367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.598683][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.609979][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.628385][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.657247][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.700034][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.095982][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 30 seconds [ 600.107061][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 30 seconds [ 600.123398][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 30 seconds [ 600.134594][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 30 seconds [ 600.227372][T29414] vlan2: entered allmulticast mode [ 600.233360][T29414] bridge0: entered allmulticast mode [ 600.365325][T29417] syzkaller0: entered promiscuous mode [ 600.371417][T29417] syzkaller0: entered allmulticast mode [ 600.455801][T18221] bond0: (slave syz_tun): Releasing backup interface [ 600.466764][T18221] syz_tun (unregistering): left allmulticast mode [ 600.598251][T29437] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.609546][T29437] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.724077][T29392] chnl_net:caif_netlink_parms(): no params data found [ 600.845759][T29452] x_tables: duplicate underflow at hook 2 [ 601.093159][T29470] veth0_macvtap: left promiscuous mode [ 601.184943][T29392] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.192769][T29392] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.200737][T29392] bridge_slave_0: entered allmulticast mode [ 601.221272][T29392] bridge_slave_0: entered promiscuous mode [ 601.253554][T29392] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.269066][T29392] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.291697][T29392] bridge_slave_1: entered allmulticast mode [ 601.309343][T29392] bridge_slave_1: entered promiscuous mode [ 601.369416][T29486] syzkaller1: entered allmulticast mode [ 601.386681][T29392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.401282][T29392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.465082][T29392] team0: Port device team_slave_0 added [ 601.476754][T29392] team0: Port device team_slave_1 added [ 601.481081][T29497] netlink: 'syz.1.6292': attribute type 7 has an invalid length. [ 601.540917][T29392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.548172][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.575447][T29392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.589512][T29392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.596789][T29392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.624499][T29392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.677443][T29500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 601.701960][T29392] hsr_slave_0: entered promiscuous mode [ 601.709324][T29392] hsr_slave_1: entered promiscuous mode [ 601.716977][T29392] debugfs: 'hsr0' already exists in 'hsr' [ 601.723256][T29392] Cannot create hsr debugfs directory [ 601.760885][ T5823] Bluetooth: hci3: command tx timeout [ 602.455778][T29530] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 602.483635][T29530] team1: entered promiscuous mode [ 602.488871][T29530] team1: entered allmulticast mode [ 602.647338][T29392] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 602.695108][T29392] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 602.819335][T29392] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 602.852746][T29392] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 602.966977][T29562] sctp: [Deprecated]: syz.0.6311 (pid 29562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.966977][T29562] Use struct sctp_sack_info instead [ 603.058011][T29572] __nla_validate_parse: 12 callbacks suppressed [ 603.058029][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6314'. [ 603.126240][T29392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.164075][T29576] syzkaller1: entered promiscuous mode [ 603.180014][T29576] syzkaller1: entered allmulticast mode [ 603.204111][T29392] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.221004][T29576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 603.243399][T29576] netlink: 'syz.2.6315': attribute type 1 has an invalid length. [ 603.277696][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.284967][ T8171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.328684][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.335927][ T8165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.459195][T29589] syzkaller0: entered promiscuous mode [ 603.478852][T29589] syzkaller0: entered allmulticast mode [ 603.535807][T29593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.545015][T29589] netlink: 'syz.0.6318': attribute type 4 has an invalid length. [ 603.572583][T29589] netlink: 'syz.0.6318': attribute type 4 has an invalid length. [ 603.609063][T29600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.634251][T29590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'. [ 603.724537][T29604] team0: No ports can be present during mode change [ 603.738744][T29609] netlink: 'syz.4.6323': attribute type 1 has an invalid length. [ 603.843135][ T5823] Bluetooth: hci3: command tx timeout [ 603.950462][T29621] x_tables: duplicate underflow at hook 1 [ 603.962033][T29392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.076035][T29628] netlink: 'syz.2.6329': attribute type 7 has an invalid length. [ 604.117583][T29392] veth0_vlan: entered promiscuous mode [ 604.134790][T29628] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.6329'. [ 604.136808][T29392] veth1_vlan: entered promiscuous mode [ 604.186616][T29628] netlink: 'syz.2.6329': attribute type 7 has an invalid length. [ 604.268098][T29392] veth0_macvtap: entered promiscuous mode [ 604.282894][T29392] veth1_macvtap: entered promiscuous mode [ 604.303861][T29642] tipc: Started in network mode [ 604.309582][T29642] tipc: Node identity , cluster identity 4711 [ 604.355069][T29392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.384259][T29392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.418577][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.459150][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.530558][ T8171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.557706][ T8171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.610066][ T29] audit: type=1800 audit(1774045663.317:13): pid=29661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6338" name="memory.events" dev="tmpfs" ino=318 res=0 errno=0 [ 604.667731][ T8171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.686403][ T8171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.725338][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.775814][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.514640][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 605.527605][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 605.537836][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 605.547815][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 605.565202][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 605.921146][ T5823] Bluetooth: hci3: command tx timeout [ 605.951529][T29705] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.6350'. [ 605.962293][T29705] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 607.600900][ T5823] Bluetooth: hci2: command tx timeout [ 607.675234][T29714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6352'. [ 607.763952][T29714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 607.831406][T29721] netlink: 'syz.3.6355': attribute type 178 has an invalid length. [ 607.891484][T29719] syzkaller0: entered promiscuous mode [ 607.897028][T29719] syzkaller0: entered allmulticast mode [ 607.968968][T29730] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 608.001938][ T5823] Bluetooth: hci3: command tx timeout [ 608.079586][T29699] chnl_net:caif_netlink_parms(): no params data found [ 608.193858][T29747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6362'. [ 608.280960][T29753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 608.286408][T29754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6364'. [ 608.308924][T29747] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.316587][T29747] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.532621][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6362'. [ 608.575923][T29699] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.580447][T29771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6367'. [ 608.583835][T29699] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.599578][T29699] bridge_slave_0: entered allmulticast mode [ 608.609651][T29699] bridge_slave_0: entered promiscuous mode [ 608.618684][T29699] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.626131][T29699] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.634147][T29699] bridge_slave_1: entered allmulticast mode [ 608.642562][T29699] bridge_slave_1: entered promiscuous mode [ 608.689297][T29699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.727767][T29778] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6370'. [ 608.744953][T29699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.766133][T29780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6369'. [ 608.857662][T29699] team0: Port device team_slave_0 added [ 608.875872][T29699] team0: Port device team_slave_1 added [ 608.927424][T29699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.935205][T29699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.963633][T29699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.996268][T29699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.003963][T29796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6375'. [ 609.013564][T29699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.065465][T29699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.148586][ T8148] team0: left allmulticast mode [ 609.156676][ T8148] team_slave_0: left allmulticast mode [ 609.170805][ T8148] team_slave_1: left allmulticast mode [ 609.176423][ T8148] team0: left promiscuous mode [ 609.190934][ T8148] team_slave_0: left promiscuous mode [ 609.196566][ T8148] team_slave_1: left promiscuous mode [ 609.209529][ T8148] bridge0: port 3(team0) entered disabled state [ 609.256195][T29801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6378'. [ 609.267429][ T8148] bridge_slave_0: left allmulticast mode [ 609.281899][ T8148] bridge_slave_0: left promiscuous mode [ 609.289791][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.337933][ T8148] veth0_to_bond: left allmulticast mode [ 609.338436][T29807] netlink: 'syz.4.6377': attribute type 1 has an invalid length. [ 609.344330][ T8148] veth0_to_bond: left promiscuous mode [ 609.354085][T29807] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6377'. [ 609.359713][ T8148] bridge8: port 2(veth0_to_bond) entered disabled state [ 609.368662][T29807] NCSI netlink: No device for ifindex 0 [ 609.386012][ T8148] veth7: left allmulticast mode [ 609.395576][ T8148] veth7: left promiscuous mode [ 609.402092][ T8148] bridge8: port 1(veth7) entered disabled state [ 609.663915][ T8148] bond8 (unregistering): (slave gretap1): Releasing active interface [ 609.691509][ T5823] Bluetooth: hci2: command tx timeout [ 609.711398][ T8148] bond2 (unregistering): (slave geneve2): Releasing active interface [ 610.184194][ T8148] team0: Port device bridge9 removed [ 610.225233][ T8148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.236472][ T8148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.248860][ T8148] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 610.259337][ T8148] bond0 (unregistering): Released all slaves [ 610.270263][ T8148] bond1 (unregistering): Released all slaves [ 610.283672][ T8148] bond2 (unregistering): Released all slaves [ 610.296189][ T8148] bond3 (unregistering): Released all slaves [ 610.311024][ T8148] bond4 (unregistering): (slave C): Releasing backup interface [ 610.319098][ T8148] bond4 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 610.339847][ T8148] bond4 (unregistering): Released all slaves [ 610.353935][ T8148] bond5 (unregistering): Released all slaves [ 610.366528][ T8148] bond6 (unregistering): Released all slaves [ 610.379778][ T8148] bond7 (unregistering): (slave vcan0): Releasing backup interface [ 610.389355][ T8148] bond7 (unregistering): Released all slaves [ 610.407867][ T8148] bond8 (unregistering): Released all slaves [ 610.421897][ T8148] bond9 (unregistering): Released all slaves [ 610.439458][ T8148] bond10 (unregistering): Released all slaves [ 610.474584][T29699] hsr_slave_0: entered promiscuous mode [ 610.486981][T29699] hsr_slave_1: entered promiscuous mode [ 610.499985][T29699] debugfs: 'hsr0' already exists in 'hsr' [ 610.507282][T29699] Cannot create hsr debugfs directory [ 610.525754][T29805] vlan2: entered promiscuous mode [ 610.535909][T29805] bond0: entered promiscuous mode [ 610.541458][T29805] bond_slave_0: entered promiscuous mode [ 610.557856][T29805] bond_slave_1: entered promiscuous mode [ 610.583551][T29809] bridge_slave_0: invalid flags given to default FDB implementation [ 610.746840][T29830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6384'. [ 610.804327][ T8148] tipc: Disabling bearer [ 610.820927][ T8148] tipc: Left network mode [ 610.837656][T29830] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.844944][T29838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.845357][T29830] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.207819][T29841] bond3 (unregistering): Released all slaves [ 611.335176][T29699] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.366715][T29699] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 611.382203][T29699] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 611.626829][T29699] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.647100][T29699] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 611.649394][T29881] netlink: 'syz.1.6397': attribute type 83 has an invalid length. [ 611.677385][T29699] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 611.737620][T29890] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 611.762605][ T5823] Bluetooth: hci2: command tx timeout [ 611.772844][T27263] IPVS: starting estimator thread 0... [ 611.784067][T29883] veth1: mtu less than device minimum [ 611.870327][T29891] IPVS: using max 34 ests per chain, 81600 per kthread [ 611.885937][T29699] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.908495][T29699] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 611.932039][T29699] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 612.061600][T29699] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.074340][T29699] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 612.100282][T29699] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 612.144206][T29918] openvswitch: netlink: IP tunnel dst address not specified [ 612.278069][ T8148] hsr_slave_0: left promiscuous mode [ 612.292114][ T8148] hsr_slave_1: left promiscuous mode [ 612.308209][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.324304][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.333036][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.340986][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.356378][ T8148] veth1_macvtap: left promiscuous mode [ 612.363113][ T8148] veth1_vlan: left promiscuous mode [ 612.368994][ T8148] veth0_vlan: left promiscuous mode [ 612.719804][ T8148] team0 (unregistering): Port device team_slave_1 removed [ 612.746202][ T8148] team0 (unregistering): Port device team_slave_0 removed [ 612.820884][ T8148] smc: removing net device team0 with user defined pnetid SYZ2 [ 613.124234][T29940] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20001 [ 613.308397][T29699] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 613.340456][T29951] __nla_validate_parse: 3 callbacks suppressed [ 613.340471][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6418'. [ 613.369146][ T8148] IPVS: stop unused estimator thread 0... [ 613.382366][T29699] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 613.417654][T29957] tipc: Started in network mode [ 613.426137][T29957] tipc: Node identity e0000001, cluster identity 4711 [ 613.433873][T29957] tipc: Enabling of bearer rejected, failed to enable media [ 613.570775][T29960] netlink: 'syz.4.6421': attribute type 58 has an invalid length. [ 613.578687][T29960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6421'. [ 613.663109][T29699] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 613.708333][T29699] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 613.840724][ T5823] Bluetooth: hci2: command tx timeout [ 613.912904][T29968] tipc: Started in network mode [ 613.917824][T29968] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 613.959766][T29968] tipc: Enabled bearer , priority 10 [ 614.045823][T29699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.173974][T29699] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.212674][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.219906][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.253469][T29977] syzkaller0: entered promiscuous mode [ 614.259824][T29979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6426'. [ 614.288712][T29977] syzkaller0: entered allmulticast mode [ 614.296812][T29979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6426'. [ 614.307736][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.315042][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.335376][T29981] netlink: 'syz.1.6427': attribute type 4 has an invalid length. [ 614.835333][T29699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.877701][T30008] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6433'. [ 615.034425][T29699] veth0_vlan: entered promiscuous mode [ 615.091059][T27264] tipc: Node number set to 4269801492 [ 615.103413][T29699] veth1_vlan: entered promiscuous mode [ 615.258635][T29699] veth0_macvtap: entered promiscuous mode [ 615.300750][T29699] veth1_macvtap: entered promiscuous mode [ 615.404727][T29699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.439284][T29699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.496009][ T8165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.518175][ T8148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.531375][ T8148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.599110][ T8148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.823014][ T8148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.841788][ T8148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.926077][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.935538][T30040] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 615.944833][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.959086][T30040] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 616.098888][T30053] netlink: 'syz.0.6346': attribute type 4 has an invalid length. [ 616.232938][T30061] netlink: 'syz.4.6445': attribute type 1 has an invalid length. [ 616.275703][T30061] bond1: entered promiscuous mode [ 616.282107][T30061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 616.357201][T30061] bond1: (slave bridge1): making interface the new active one [ 616.377005][T30061] bridge1: entered promiscuous mode [ 616.383833][T30061] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 616.394690][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6448'. [ 616.468553][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6449'. [ 616.489073][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6449'. [ 616.508060][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6449'. [ 616.544019][T30079] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6451'. [ 616.556991][T30086] netlink: 'syz.3.6453': attribute type 4 has an invalid length. [ 616.769599][T30096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.817083][T30099] x_tables: unsorted underflow at hook 4 [ 616.839400][T30096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.348151][T30131] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 617.437859][T30131] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 617.480947][T30133] netlink: 'syz.1.6471': attribute type 1 has an invalid length. [ 617.497718][T30133] netlink: 'syz.1.6471': attribute type 2 has an invalid length. [ 617.528094][T30133] netlink: 'syz.1.6471': attribute type 1 has an invalid length. [ 617.558921][T30133] netlink: 'syz.1.6471': attribute type 3 has an invalid length. [ 617.644018][T30145] netlink: 'syz.3.6475': attribute type 1 has an invalid length. [ 617.771668][T30145] bond1 (unregistering): Released all slaves [ 617.811123][T30153] x_tables: duplicate underflow at hook 1 [ 617.814051][T30154] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 617.867016][T30154] bond0: entered promiscuous mode [ 617.872655][T30154] bond_slave_0: entered promiscuous mode [ 617.878534][T30154] bond_slave_1: entered promiscuous mode [ 617.888529][T30154] batadv0: entered promiscuous mode [ 617.897359][T30154] debugfs: 'hsr1' already exists in 'hsr' [ 617.905899][T30154] Cannot create hsr debugfs directory [ 617.911864][T30154] hsr1: entered promiscuous mode [ 617.918487][T30154] hsr1: entered allmulticast mode [ 617.935615][T30159] netlink: 'syz.1.6479': attribute type 3 has an invalid length. [ 617.949922][T30159] netlink: 'syz.1.6479': attribute type 2 has an invalid length. [ 617.958767][T30154] bond0: entered allmulticast mode [ 617.974862][T30154] bond_slave_0: entered allmulticast mode [ 617.980824][T30154] bond_slave_1: entered allmulticast mode [ 617.986772][T30154] batadv0: entered allmulticast mode [ 617.994183][T30154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 618.022454][T30154] bond0: left promiscuous mode [ 618.028584][T30154] bond_slave_0: left promiscuous mode [ 618.037737][T30154] bond_slave_1: left promiscuous mode [ 618.065113][T30154] batadv0: left promiscuous mode [ 618.509965][T30214] sch_fq: defrate 0 ignored. [ 618.809533][T30231] dvmrp0: entered allmulticast mode [ 619.216913][T30255] __nla_validate_parse: 16 callbacks suppressed [ 619.216934][T30255] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6506'. [ 619.244744][T30256] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6505'. [ 619.263557][T30251] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6505'. [ 619.347560][T30267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6509'. [ 619.386537][T30267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6509'. [ 619.608305][T30280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 619.809044][T30299] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6522'. [ 619.857756][T30299] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6522'. [ 622.298996][T30364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6540'. [ 622.602434][T30390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6547'. [ 622.735192][T30398] syzkaller1: entered promiscuous mode [ 622.756738][T30400] validate_nla: 4 callbacks suppressed [ 622.756758][T30400] netlink: 'syz.1.6548': attribute type 2 has an invalid length. [ 622.759479][T30398] syzkaller1: entered allmulticast mode [ 622.778719][T27263] IPVS: starting estimator thread 0... [ 622.890394][T30401] IPVS: using max 29 ests per chain, 69600 per kthread [ 623.876802][T30427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.041788][T30470] batman_adv: batadv0: Adding interface: dummy0 [ 624.055581][T30470] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.142914][T30470] batman_adv: batadv0: Interface activated: dummy0 [ 624.158085][T30480] netlink: 'syz.0.6571': attribute type 21 has an invalid length. [ 624.178584][T30478] batadv0: mtu less than device minimum [ 624.187627][T30480] Bluetooth: MGMT ver 1.23 [ 624.212059][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.223818][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.235577][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.247373][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.259034][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.270892][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.282637][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.294486][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.306150][T30478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 624.373990][T30470] __nla_validate_parse: 11 callbacks suppressed [ 624.374011][T30470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6568'. [ 624.405130][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.651693][T30508] siw: device registration error -23 [ 624.767978][T30523] netlink: 'syz.0.6584': attribute type 1 has an invalid length. [ 624.822209][T30523] bond1: entered promiscuous mode [ 624.827824][T30523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.910503][T30531] vlan3: entered allmulticast mode [ 624.936523][T30535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6585'. [ 624.993103][T30534] ipvlan2: entered allmulticast mode [ 624.997564][T30540] netlink: 'syz.2.6589': attribute type 12 has an invalid length. [ 624.998451][T30534] bond1: entered allmulticast mode [ 625.016665][T30540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6589'. [ 625.114180][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6593'. [ 625.144807][T30549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6593'. [ 625.146535][T30551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6592'. [ 625.154798][T30549] Bluetooth: MGMT ver 1.23 [ 625.173057][ T8171] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.207584][ T8171] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.231733][ T8171] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.276400][ T8171] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.331816][T30547] netlink: 'syz.1.6592': attribute type 8 has an invalid length. [ 625.340258][T30547] sch_fq: defrate 0 ignored. [ 625.844243][T30586] sctp: [Deprecated]: syz.0.6604 (pid 30586) Use of int in maxseg socket option. [ 625.844243][T30586] Use struct sctp_assoc_value instead [ 625.909533][T30592] netlink: 4316 bytes leftover after parsing attributes in process `syz.2.6607'. [ 625.939530][T30601] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6606'. [ 625.951384][T30594] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6606'. [ 625.956625][T30604] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.6608'. [ 625.980021][T30594] vlan2: entered allmulticast mode [ 625.987838][T30594] gretap0: entered allmulticast mode [ 626.196163][T30614] bond0: entered promiscuous mode [ 626.202249][T30614] bond_slave_0: entered promiscuous mode [ 626.208323][T30614] bond_slave_1: entered promiscuous mode [ 628.250482][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 120 seconds [ 628.261611][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 120 seconds [ 628.273486][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 120 seconds [ 628.284734][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 120 seconds [ 629.035084][T30614] bond0: left promiscuous mode [ 629.039923][T30614] bond_slave_0: left promiscuous mode [ 629.079847][T30614] bond_slave_1: left promiscuous mode [ 629.443227][T30641] __nla_validate_parse: 5 callbacks suppressed [ 629.443245][T30641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6620'. [ 629.490284][T30641] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6620'. [ 629.498362][T30650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6620'. [ 629.525449][T30641] netlink: 'syz.3.6620': attribute type 6 has an invalid length. [ 629.534676][T30641] netlink: 'syz.3.6620': attribute type 5 has an invalid length. [ 629.553602][T30641] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6620'. [ 629.635710][T30649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6624'. [ 629.665606][T30649] net_ratelimit: 12 callbacks suppressed [ 629.665627][T30649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.999255][T30680] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 630.031426][T30680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 630.069029][T30687] openvswitch: netlink: IP tunnel dst address not specified [ 630.151515][T30690] netlink: 'syz.0.6634': attribute type 11 has an invalid length. [ 630.181545][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 60 seconds [ 630.193556][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 60 seconds [ 630.200779][T30690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6634'. [ 630.204970][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 60 seconds [ 630.226272][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 60 seconds [ 630.645736][T30727] netlink: 'syz.1.6646': attribute type 1 has an invalid length. [ 630.654584][T30727] netlink: 'syz.1.6646': attribute type 1 has an invalid length. [ 630.719616][T30711] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6641'. [ 630.874770][T30732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6647'. [ 630.928034][T30740] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.996675][T30747] netlink: 512 bytes leftover after parsing attributes in process `syz.3.6651'. [ 631.344333][T30771] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6660'. [ 632.154528][T30834] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 632.219236][T30837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.403694][T30847] tipc: Started in network mode [ 632.408778][T30847] tipc: Node identity ac14140f, cluster identity 4711 [ 632.416271][T30847] tipc: New replicast peer: 255.255.255.255 [ 632.424620][T30847] tipc: Enabled bearer , priority 10 [ 632.499468][T30851] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 632.540220][T30856] netlink: 'syz.0.6686': attribute type 1 has an invalid length. [ 632.553790][T30856] netlink: 'syz.0.6686': attribute type 2 has an invalid length. [ 632.940723][T30881] netlink: 'syz.0.6696': attribute type 63 has an invalid length. [ 632.956959][T30882] netlink: 'syz.0.6696': attribute type 63 has an invalid length. [ 633.207454][T30900] veth0: entered promiscuous mode [ 633.229219][T30899] veth0: left promiscuous mode [ 633.483427][T30919] bridge1: entered promiscuous mode [ 633.497294][T30919] bridge1: entered allmulticast mode [ 633.514491][T30919] team0: Port device bridge1 added [ 633.532245][T30919] bridge0: port 3(team0) entered blocking state [ 633.554369][T30919] bridge0: port 3(team0) entered disabled state [ 633.561756][T30919] team0: entered allmulticast mode [ 633.569988][T30919] team_slave_0: entered allmulticast mode [ 633.578462][T30919] team_slave_1: entered allmulticast mode [ 633.588126][T30919] team0: entered promiscuous mode [ 633.595004][T30919] team_slave_0: entered promiscuous mode [ 633.601937][T30919] team_slave_1: entered promiscuous mode [ 633.608549][T30919] bridge0: port 3(team0) entered blocking state [ 633.615014][T30919] bridge0: port 3(team0) entered forwarding state [ 633.624477][T18419] tipc: Node number set to 2886997007 [ 633.796193][T30944] netlink: 'syz.1.6714': attribute type 12 has an invalid length. [ 633.841365][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 634.256593][T30971] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 634.280676][T30971] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.288396][T30971] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.656868][T30997] __nla_validate_parse: 17 callbacks suppressed [ 634.656891][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6729'. [ 634.758739][T31001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6731'. [ 634.780496][T31001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6731'. [ 634.800656][T30997] macsec1: entered promiscuous mode [ 634.805895][T30997] bridge0: entered promiscuous mode [ 634.875191][T30997] macsec1: entered allmulticast mode [ 634.890206][T30997] bridge0: entered allmulticast mode [ 634.896409][T30997] bridge0: port 3(macsec1) entered blocking state [ 634.917715][T30997] bridge0: port 3(macsec1) entered disabled state [ 634.931634][T31011] netlink: 'syz.3.6735': attribute type 9 has an invalid length. [ 634.939894][T30997] bridge0: left allmulticast mode [ 634.946993][T30997] bridge0: left promiscuous mode [ 634.956608][T31011] netlink: 'syz.3.6735': attribute type 11 has an invalid length. [ 634.975753][T31016] pimreg: entered allmulticast mode [ 634.980231][T31011] netlink: 'syz.3.6735': attribute type 12 has an invalid length. [ 634.999207][T31011] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6735'. [ 635.103044][T31020] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 4, id = 0 [ 635.118298][T31022] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 635.231761][T31029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6738'. [ 635.478595][T31041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6744'. [ 635.547849][T31048] ipt_rpfilter: unknown options [ 635.578149][T31050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6745'. [ 635.657367][T31057] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6748'. [ 635.752586][T31060] netlink: 'syz.1.6749': attribute type 32 has an invalid length. [ 635.906646][T31072] openvswitch: netlink: Message has 8 unknown bytes. [ 635.928967][T31072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.952288][T31072] netlink: 'syz.0.6753': attribute type 21 has an invalid length. [ 635.972845][T31072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6753'. [ 636.129309][ T5192] udevd[5192]: worker [16896] /devices/virtual/block/nbd0 is taking a long time [ 636.257261][T31096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6761'. [ 636.302347][T31104] xt_l2tp: v2 tid > 0xffff: 1114244 [ 636.412454][T31111] mac80211_hwsim hwsim77 ÿ: renamed from wlan1 (while UP) [ 636.515943][T31119] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 636.527354][T31119] gretap1: entered promiscuous mode [ 636.533913][T31119] gretap1: entered allmulticast mode [ 639.266319][T31099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.601347][T31143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.627955][T31167] rdma_op ffff8880b311c1f0 conn xmit_rdma 0000000000000000 [ 639.910714][T31180] openvswitch: netlink: IP tunnel dst address not specified [ 640.201669][T31215] __nla_validate_parse: 4 callbacks suppressed [ 640.201685][T31215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6787'. [ 640.217860][T31215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6787'. [ 640.312147][T31221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6786'. [ 655.451719][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.464197][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.476703][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 655.486532][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.497333][T31233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 655.504704][T31231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.506960][T31233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 655.525717][T31233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.538207][T31233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 655.540754][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 655.560613][T31233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 655.569132][T31233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 655.578418][T31233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 655.582371][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 655.594771][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 655.728420][T31231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 655.738170][T31231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 655.747323][T31231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 655.755440][T31231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 655.764373][T31231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 655.809671][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 655.822278][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 655.831166][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 655.850813][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 655.862089][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 656.348500][T31234] chnl_net:caif_netlink_parms(): no params data found [ 656.385616][T31228] chnl_net:caif_netlink_parms(): no params data found [ 656.479125][T31230] chnl_net:caif_netlink_parms(): no params data found [ 656.503007][T31237] chnl_net:caif_netlink_parms(): no params data found [ 656.585042][T31239] chnl_net:caif_netlink_parms(): no params data found [ 656.692513][T31234] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.699723][T31234] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.707283][T31234] bridge_slave_0: entered allmulticast mode [ 656.715144][T31234] bridge_slave_0: entered promiscuous mode [ 656.768200][T31234] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.775545][T31234] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.783224][T31234] bridge_slave_1: entered allmulticast mode [ 656.790568][T31234] bridge_slave_1: entered promiscuous mode [ 656.813622][T31228] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.820969][T31228] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.828220][T31228] bridge_slave_0: entered allmulticast mode [ 656.835735][T31228] bridge_slave_0: entered promiscuous mode [ 656.883021][T31228] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.890537][T31228] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.897831][T31228] bridge_slave_1: entered allmulticast mode [ 656.905301][T31228] bridge_slave_1: entered promiscuous mode [ 656.912485][T31230] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.919625][T31230] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.927413][T31230] bridge_slave_0: entered allmulticast mode [ 656.935115][T31230] bridge_slave_0: entered promiscuous mode [ 656.953154][T31237] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.963381][T31237] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.971427][T31237] bridge_slave_0: entered allmulticast mode [ 656.978510][T31237] bridge_slave_0: entered promiscuous mode [ 657.012754][T31230] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.019868][T31230] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.027560][T31230] bridge_slave_1: entered allmulticast mode [ 657.034869][T31230] bridge_slave_1: entered promiscuous mode [ 657.046617][T31234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.064718][T31234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.074587][T31237] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.082308][T31237] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.089576][T31237] bridge_slave_1: entered allmulticast mode [ 657.097289][T31237] bridge_slave_1: entered promiscuous mode [ 657.168525][T31239] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.175931][T31239] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.183682][T31239] bridge_slave_0: entered allmulticast mode [ 657.191616][T31239] bridge_slave_0: entered promiscuous mode [ 657.204145][T31228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.235804][T31237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.249987][T31239] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.257643][T31239] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.265032][T31239] bridge_slave_1: entered allmulticast mode [ 657.272413][T31239] bridge_slave_1: entered promiscuous mode [ 657.293298][T31228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.317974][T31230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.329230][T31234] team0: Port device team_slave_0 added [ 657.338010][T31237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.372891][T31230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.384882][T31234] team0: Port device team_slave_1 added [ 657.426613][T31228] team0: Port device team_slave_0 added [ 657.456962][T31237] team0: Port device team_slave_0 added [ 657.466140][T31237] team0: Port device team_slave_1 added [ 657.475296][T31239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.486798][T31228] team0: Port device team_slave_1 added [ 657.527299][T31239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.547524][T31230] team0: Port device team_slave_0 added [ 657.555646][T31234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.562954][T31234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.589168][T31234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.600263][T31231] Bluetooth: hci6: command tx timeout [ 657.602526][ T5823] Bluetooth: hci0: command tx timeout [ 657.609647][T31234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.620838][T31234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.647376][T31234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.681685][ T5823] Bluetooth: hci7: command tx timeout [ 657.693266][T31230] team0: Port device team_slave_1 added [ 657.699603][T31228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.706919][T31228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.733740][T31228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.755727][T31237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.764326][T31237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.791108][T31237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.823028][T31228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.829987][T31228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.856296][ T5823] Bluetooth: hci8: command tx timeout [ 657.869309][T31228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.881919][T31237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.888971][T31237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.915983][T31237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.921013][ T5823] Bluetooth: hci9: command tx timeout [ 657.937758][T31239] team0: Port device team_slave_0 added [ 657.987769][T31239] team0: Port device team_slave_1 added [ 658.006296][T31230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.013314][T31230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.039877][T31230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.057160][T31234] hsr_slave_0: entered promiscuous mode [ 658.064326][T31234] hsr_slave_1: entered promiscuous mode [ 658.072000][T31234] debugfs: 'hsr0' already exists in 'hsr' [ 658.077756][T31234] Cannot create hsr debugfs directory [ 658.116821][T31230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.123988][T31230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.150872][T31230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.196033][T31239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.203202][T31239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.232342][T31239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.291493][T31239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.298464][T31239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.326903][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 150 seconds [ 658.326992][T31239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.337917][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 150 seconds [ 658.337955][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 150 seconds [ 658.371902][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 150 seconds [ 658.398553][T31237] hsr_slave_0: entered promiscuous mode [ 658.408031][T31237] hsr_slave_1: entered promiscuous mode [ 658.414652][T31237] debugfs: 'hsr0' already exists in 'hsr' [ 658.420728][T31237] Cannot create hsr debugfs directory [ 658.440006][T31228] hsr_slave_0: entered promiscuous mode [ 658.446647][T31228] hsr_slave_1: entered promiscuous mode [ 658.453181][T31228] debugfs: 'hsr0' already exists in 'hsr' [ 658.458903][T31228] Cannot create hsr debugfs directory [ 658.471266][T31230] hsr_slave_0: entered promiscuous mode [ 658.478353][T31230] hsr_slave_1: entered promiscuous mode [ 658.484860][T31230] debugfs: 'hsr0' already exists in 'hsr' [ 658.491184][T31230] Cannot create hsr debugfs directory [ 658.521010][T31239] hsr_slave_0: entered promiscuous mode [ 658.527635][T31239] hsr_slave_1: entered promiscuous mode [ 658.534140][T31239] debugfs: 'hsr0' already exists in 'hsr' [ 658.539860][T31239] Cannot create hsr debugfs directory [ 659.680460][ T5823] Bluetooth: hci0: command tx timeout [ 659.680722][T31231] Bluetooth: hci6: command tx timeout [ 659.760456][T31231] Bluetooth: hci7: command tx timeout [ 659.920587][T31231] Bluetooth: hci8: command tx timeout [ 660.000807][T31231] Bluetooth: hci9: command tx timeout [ 660.244970][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 90 seconds [ 660.255935][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 90 seconds [ 660.267558][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 90 seconds [ 660.278609][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 90 seconds [ 661.760713][T31231] Bluetooth: hci0: command tx timeout [ 661.760761][ T5823] Bluetooth: hci6: command tx timeout [ 661.840801][ T5823] Bluetooth: hci7: command tx timeout [ 662.000707][ T5823] Bluetooth: hci8: command tx timeout [ 662.081708][ T5823] Bluetooth: hci9: command tx timeout [ 663.840544][ T5823] Bluetooth: hci6: command tx timeout [ 663.845994][ T5823] Bluetooth: hci0: command tx timeout [ 663.920767][ T5823] Bluetooth: hci7: command tx timeout [ 664.081402][ T5823] Bluetooth: hci8: command tx timeout [ 664.170381][ T5823] Bluetooth: hci9: command tx timeout [ 682.800665][T31231] Bluetooth: hci1: command 0x0406 tx timeout [ 685.843873][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.400987][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 180 seconds [ 688.411878][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 180 seconds [ 688.423164][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 180 seconds [ 688.434595][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 180 seconds [ 688.817915][ T5192] udevd[5192]: worker [17659] /devices/virtual/block/nbd2 timeout; kill it [ 688.826739][ T5192] udevd[5192]: seq 28267 '/devices/virtual/block/nbd2' killed [ 690.330961][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 120 seconds [ 690.341824][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 120 seconds [ 690.353257][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 120 seconds [ 690.364697][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 120 seconds [ 703.280973][T31231] Bluetooth: hci5: command 0x0406 tx timeout [ 708.400580][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 715.987272][ T5823] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 715.999028][ T5823] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 716.009902][ T5823] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 716.024099][ T5823] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 716.040857][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 716.062011][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 716.073933][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 716.091956][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 716.106837][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 716.120780][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 716.218092][ T5823] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 716.234069][T31233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 716.247085][T31231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 716.247475][T31233] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 716.267115][T31231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 716.277655][T31231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 716.288297][T31233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 716.288417][T31231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 716.306908][T31231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 716.326747][T31231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 716.382751][T31231] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 716.403905][T31231] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 716.413227][T31231] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 716.422974][T31231] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 716.431679][T31231] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 716.919744][T31279] chnl_net:caif_netlink_parms(): no params data found [ 716.965537][T31284] chnl_net:caif_netlink_parms(): no params data found [ 717.101560][T31282] chnl_net:caif_netlink_parms(): no params data found [ 717.170659][T31285] chnl_net:caif_netlink_parms(): no params data found [ 717.277511][T31279] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.285833][T31279] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.295535][T31279] bridge_slave_0: entered allmulticast mode [ 717.302860][T31279] bridge_slave_0: entered promiscuous mode [ 717.316112][T31279] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.323566][T31279] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.331072][T31279] bridge_slave_1: entered allmulticast mode [ 717.338865][T31279] bridge_slave_1: entered promiscuous mode [ 717.378062][T31288] chnl_net:caif_netlink_parms(): no params data found [ 717.404646][T31284] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.412201][T31284] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.419689][T31284] bridge_slave_0: entered allmulticast mode [ 717.427043][T31284] bridge_slave_0: entered promiscuous mode [ 717.467388][T31284] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.474887][T31284] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.482536][T31284] bridge_slave_1: entered allmulticast mode [ 717.489630][T31284] bridge_slave_1: entered promiscuous mode [ 717.517355][T31279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.571722][T31279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.592316][T31282] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.599484][T31282] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.611404][T31282] bridge_slave_0: entered allmulticast mode [ 717.618667][T31282] bridge_slave_0: entered promiscuous mode [ 717.666093][T31282] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.673509][T31282] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.683588][T31282] bridge_slave_1: entered allmulticast mode [ 717.691552][T31282] bridge_slave_1: entered promiscuous mode [ 717.701976][T31284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.712313][T31285] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.719440][T31285] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.726994][T31285] bridge_slave_0: entered allmulticast mode [ 717.734458][T31285] bridge_slave_0: entered promiscuous mode [ 717.754825][T31279] team0: Port device team_slave_0 added [ 717.763940][T31279] team0: Port device team_slave_1 added [ 717.783669][T31284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.793437][T31285] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.800902][T31285] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.808352][T31285] bridge_slave_1: entered allmulticast mode [ 717.815863][T31285] bridge_slave_1: entered promiscuous mode [ 717.904910][T31282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.937214][T31288] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.944750][T31288] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.952469][T31288] bridge_slave_0: entered allmulticast mode [ 717.959647][T31288] bridge_slave_0: entered promiscuous mode [ 717.968431][T31279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.976841][T31279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.003923][T31279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.018170][T31282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.031245][T31284] team0: Port device team_slave_0 added [ 718.042883][T31285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.056036][T31285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.078926][T31288] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.088388][T31288] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.095838][ T5823] Bluetooth: hci10: command tx timeout [ 718.096272][T31288] bridge_slave_1: entered allmulticast mode [ 718.109270][T31288] bridge_slave_1: entered promiscuous mode [ 718.117407][T31279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.125176][T31279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.151999][T31279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.185845][T31284] team0: Port device team_slave_1 added [ 718.235278][T31288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.245418][ T5823] Bluetooth: hci11: command tx timeout [ 718.275469][T31285] team0: Port device team_slave_0 added [ 718.284878][T31285] team0: Port device team_slave_1 added [ 718.293203][T31288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.305645][T31282] team0: Port device team_slave_0 added [ 718.312562][T31284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.319604][T31284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.346924][T31284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.391066][T31282] team0: Port device team_slave_1 added [ 718.397602][T31284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.405445][ T5823] Bluetooth: hci13: command tx timeout [ 718.410783][ T5823] Bluetooth: hci12: command tx timeout [ 718.411804][T31284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.443222][T31284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.480905][ T5823] Bluetooth: hci14: command tx timeout [ 718.496726][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 210 seconds [ 718.504579][T31288] team0: Port device team_slave_0 added [ 718.508034][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 210 seconds [ 718.525357][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 210 seconds [ 718.533116][T31288] team0: Port device team_slave_1 added [ 718.536766][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 210 seconds [ 718.561119][T31279] hsr_slave_0: entered promiscuous mode [ 718.567695][T31279] hsr_slave_1: entered promiscuous mode [ 718.574156][T31279] debugfs: 'hsr0' already exists in 'hsr' [ 718.579888][T31279] Cannot create hsr debugfs directory [ 718.588082][T31285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.595670][T31285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.622467][T31285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.696494][T31285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.703692][T31285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.730804][T31285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.743804][T31282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.751124][T31282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.778068][T31282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.792187][T31288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.799398][T31288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.826518][T31288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.843827][T31284] hsr_slave_0: entered promiscuous mode [ 718.850803][T31284] hsr_slave_1: entered promiscuous mode [ 718.857375][T31284] debugfs: 'hsr0' already exists in 'hsr' [ 718.863822][T31284] Cannot create hsr debugfs directory [ 718.886018][T31282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.894438][T31282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.920941][T31282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.932861][T31288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.939811][T31288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.968553][T31288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.074203][T31285] hsr_slave_0: entered promiscuous mode [ 719.082603][T31285] hsr_slave_1: entered promiscuous mode [ 719.088902][T31285] debugfs: 'hsr0' already exists in 'hsr' [ 719.094853][T31285] Cannot create hsr debugfs directory [ 719.183327][T31282] hsr_slave_0: entered promiscuous mode [ 719.189883][T31282] hsr_slave_1: entered promiscuous mode [ 719.196928][T31282] debugfs: 'hsr0' already exists in 'hsr' [ 719.204629][T31282] Cannot create hsr debugfs directory [ 719.215179][T31288] hsr_slave_0: entered promiscuous mode [ 719.222298][T31288] hsr_slave_1: entered promiscuous mode [ 719.228530][T31288] debugfs: 'hsr0' already exists in 'hsr' [ 719.234557][T31288] Cannot create hsr debugfs directory [ 720.160569][T31231] Bluetooth: hci10: command tx timeout [ 720.320811][T31231] Bluetooth: hci11: command tx timeout [ 720.401329][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 150 seconds [ 720.412458][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 150 seconds [ 720.424944][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 150 seconds [ 720.438063][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 150 seconds [ 720.480928][T31231] Bluetooth: hci12: command tx timeout [ 720.481507][ T5823] Bluetooth: hci13: command tx timeout [ 720.560520][ T5823] Bluetooth: hci14: command tx timeout [ 722.240560][ T5823] Bluetooth: hci10: command tx timeout [ 722.400786][ T5823] Bluetooth: hci11: command tx timeout [ 722.561123][T31233] Bluetooth: hci12: command tx timeout [ 722.566805][ T5823] Bluetooth: hci13: command tx timeout [ 722.640855][ T5823] Bluetooth: hci14: command tx timeout [ 723.760804][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 724.320504][T31231] Bluetooth: hci10: command tx timeout [ 724.480622][T31231] Bluetooth: hci11: command tx timeout [ 724.640754][ T5823] Bluetooth: hci12: command tx timeout [ 724.646286][T31231] Bluetooth: hci13: command tx timeout [ 724.720502][T31231] Bluetooth: hci14: command tx timeout [ 726.803525][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 739.120764][ T5823] Bluetooth: hci2: command 0x0405 tx timeout [ 747.284686][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.566324][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 240 seconds [ 748.577332][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 240 seconds [ 748.589157][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 240 seconds [ 748.600939][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 240 seconds [ 750.480997][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 180 seconds [ 750.492061][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 180 seconds [ 750.504820][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 180 seconds [ 750.516287][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 180 seconds [ 751.145370][ T5192] udevd[5192]: worker [16896] /devices/virtual/block/nbd0 timeout; kill it [ 751.155197][ T5192] udevd[5192]: seq 31147 '/devices/virtual/block/nbd0' killed [ 776.567692][ T5823] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 776.581777][ T5823] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 776.591980][ T5823] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 776.601370][ T5823] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 776.631106][ T5823] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 776.755885][ T5823] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 776.767390][ T5823] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 776.782739][ T5823] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 776.791890][ T5823] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 776.799592][ T5823] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 776.839552][ T5823] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 776.853698][ T5823] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 776.864277][ T5823] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 776.874782][ T5823] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 776.894033][T31233] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 776.904248][T31233] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 776.915432][T31233] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 776.929531][T31233] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 776.941508][T31233] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 776.952832][T31233] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 777.028989][T31231] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 777.046028][T31231] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 777.057506][T31231] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 777.072344][T31231] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 777.090518][T31231] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 777.349720][T31329] chnl_net:caif_netlink_parms(): no params data found [ 777.570596][T31332] chnl_net:caif_netlink_parms(): no params data found [ 777.654340][T31334] chnl_net:caif_netlink_parms(): no params data found [ 777.685047][T31329] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.692917][T31329] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.700529][T31329] bridge_slave_0: entered allmulticast mode [ 777.707760][T31329] bridge_slave_0: entered promiscuous mode [ 777.718100][T31329] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.725543][T31329] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.733136][T31329] bridge_slave_1: entered allmulticast mode [ 777.740983][T31329] bridge_slave_1: entered promiscuous mode [ 777.835828][T31338] chnl_net:caif_netlink_parms(): no params data found [ 777.853480][T31329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.886440][T31329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.983012][T31329] team0: Port device team_slave_0 added [ 778.037997][T31329] team0: Port device team_slave_1 added [ 778.064944][T31332] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.074690][T31332] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.083905][T31332] bridge_slave_0: entered allmulticast mode [ 778.092834][T31332] bridge_slave_0: entered promiscuous mode [ 778.133992][T31332] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.141462][T31332] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.148768][T31332] bridge_slave_1: entered allmulticast mode [ 778.156575][T31332] bridge_slave_1: entered promiscuous mode [ 778.164700][T31334] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.172133][T31334] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.179497][T31334] bridge_slave_0: entered allmulticast mode [ 778.188773][T31334] bridge_slave_0: entered promiscuous mode [ 778.212966][T31329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.220022][T31329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.248726][T31329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.284744][T31334] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.293867][T31334] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.301632][T31334] bridge_slave_1: entered allmulticast mode [ 778.308836][T31334] bridge_slave_1: entered promiscuous mode [ 778.316787][T31335] chnl_net:caif_netlink_parms(): no params data found [ 778.341256][T31329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.348202][T31329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.375036][T31329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.398513][T31332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.427162][T31338] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.434428][T31338] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.442449][T31338] bridge_slave_0: entered allmulticast mode [ 778.449702][T31338] bridge_slave_0: entered promiscuous mode [ 778.461463][T31332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.507319][T31338] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.515425][T31338] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.523255][T31338] bridge_slave_1: entered allmulticast mode [ 778.530768][T31338] bridge_slave_1: entered promiscuous mode [ 778.562670][T31334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.574909][T31334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.643511][ T5157] block nbd2: Possible stuck request ffff8880269e8000: control (read@0,1024B). Runtime 270 seconds [ 778.654529][ T5157] block nbd2: Possible stuck request ffff8880269e8200: control (read@1024,1024B). Runtime 270 seconds [ 778.661597][T31338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.666021][ T5157] block nbd2: Possible stuck request ffff8880269e8400: control (read@2048,1024B). Runtime 270 seconds [ 778.679464][T31338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.686687][ T5157] block nbd2: Possible stuck request ffff8880269e8600: control (read@3072,1024B). Runtime 270 seconds [ 778.700345][T31332] team0: Port device team_slave_0 added [ 778.724118][T31363] Bluetooth: hci15: command tx timeout [ 778.731518][T31334] team0: Port device team_slave_0 added [ 778.740688][T31334] team0: Port device team_slave_1 added [ 778.758570][T31329] hsr_slave_0: entered promiscuous mode [ 778.765446][T31329] hsr_slave_1: entered promiscuous mode [ 778.772187][T31329] debugfs: 'hsr0' already exists in 'hsr' [ 778.777907][T31329] Cannot create hsr debugfs directory [ 778.797202][T31332] team0: Port device team_slave_1 added [ 778.867996][T31334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.875060][T31334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.901736][T31363] Bluetooth: hci16: command tx timeout [ 778.908514][T31334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.919621][T31335] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.927308][T31335] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.935489][T31335] bridge_slave_0: entered allmulticast mode [ 778.943303][T31335] bridge_slave_0: entered promiscuous mode [ 778.951764][T31335] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.959238][T31335] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.970831][T31335] bridge_slave_1: entered allmulticast mode [ 778.971017][T31363] Bluetooth: hci17: command tx timeout [ 778.978819][T31335] bridge_slave_1: entered promiscuous mode [ 778.993859][T31338] team0: Port device team_slave_0 added [ 779.023226][T31334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.030530][T31334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.057801][T31363] Bluetooth: hci18: command tx timeout [ 779.065422][T31334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.097749][T31338] team0: Port device team_slave_1 added [ 779.118362][T31332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.125703][T31332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.130751][T31363] Bluetooth: hci19: command tx timeout [ 779.153117][T31332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.218062][T31332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.225218][T31332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.252158][T31332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.299885][T31335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.312988][T31338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.319940][T31338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.346675][T31338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.387816][T31335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.398292][T31338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.405733][T31338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.433541][T31338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.463747][T31332] hsr_slave_0: entered promiscuous mode [ 779.471257][T31332] hsr_slave_1: entered promiscuous mode [ 779.477629][T31332] debugfs: 'hsr0' already exists in 'hsr' [ 779.483590][T31332] Cannot create hsr debugfs directory [ 779.519241][T31334] hsr_slave_0: entered promiscuous mode [ 779.526900][T31334] hsr_slave_1: entered promiscuous mode [ 779.533889][T31334] debugfs: 'hsr0' already exists in 'hsr' [ 779.539618][T31334] Cannot create hsr debugfs directory [ 779.566671][T31335] team0: Port device team_slave_0 added [ 779.575499][T31335] team0: Port device team_slave_1 added [ 779.733597][T31335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.741015][T31335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.767653][T31335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.782349][T31335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.789311][T31335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.815949][T31335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.842204][T31338] hsr_slave_0: entered promiscuous mode [ 779.848865][T31338] hsr_slave_1: entered promiscuous mode [ 779.856771][T31338] debugfs: 'hsr0' already exists in 'hsr' [ 779.862635][T31338] Cannot create hsr debugfs directory [ 780.038157][T31335] hsr_slave_0: entered promiscuous mode [ 780.045081][T31335] hsr_slave_1: entered promiscuous mode [ 780.052041][T31335] debugfs: 'hsr0' already exists in 'hsr' [ 780.057795][T31335] Cannot create hsr debugfs directory [ 780.080278][T31363] Bluetooth: hci9: command 0x0406 tx timeout [ 780.090685][T31363] Bluetooth: hci0: command 0x0406 tx timeout [ 780.101793][T31363] Bluetooth: hci7: command 0x0406 tx timeout [ 780.106244][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 780.108543][T31363] Bluetooth: hci8: command 0x0406 tx timeout [ 780.561013][ T2069] block nbd0: Possible stuck request ffff88806a148000: control (read@0,1024B). Runtime 210 seconds [ 780.571885][ T2069] block nbd0: Possible stuck request ffff88806a148200: control (read@1024,1024B). Runtime 210 seconds [ 780.586007][ T2069] block nbd0: Possible stuck request ffff88806a148400: control (read@2048,1024B). Runtime 210 seconds [ 780.597446][ T2069] block nbd0: Possible stuck request ffff88806a148600: control (read@3072,1024B). Runtime 210 seconds [ 780.801088][T31235] Bluetooth: hci15: command tx timeout [ 780.960595][T31235] Bluetooth: hci16: command tx timeout [ 781.043348][T31235] Bluetooth: hci17: command tx timeout [ 781.120406][T31235] Bluetooth: hci18: command tx timeout [ 781.201990][T31235] Bluetooth: hci19: command tx timeout [ 782.880752][T31235] Bluetooth: hci15: command tx timeout [ 783.040559][T31235] Bluetooth: hci16: command tx timeout [ 783.121627][T31235] Bluetooth: hci17: command tx timeout [ 783.200661][T31235] Bluetooth: hci18: command tx timeout [ 783.290808][T31235] Bluetooth: hci19: command tx timeout [ 784.970458][T31235] Bluetooth: hci15: command tx timeout [ 785.120488][T31235] Bluetooth: hci16: command tx timeout [ 785.201040][T31235] Bluetooth: hci17: command tx timeout [ 785.280956][T31235] Bluetooth: hci18: command tx timeout [ 785.360534][T31235] Bluetooth: hci19: command tx timeout [ 802.970980][ T30] INFO: task syz.0.6783:31197 blocked for more than 143 seconds. [ 802.978924][ T30] Not tainted syzkaller #0 [ 802.984067][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 802.992912][ T30] task:syz.0.6783 state:D stack:26240 pid:31197 tgid:31183 ppid:29699 task_flags:0x480140 flags:0x00080002 [ 803.005571][ T30] Call Trace: [ 803.008869][ T30] [ 803.012308][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 803.016817][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.022036][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 803.027096][ T30] ? __pfx___schedule+0x10/0x10 [ 803.032936][ T30] ? schedule+0x90/0x360 [ 803.037227][ T30] schedule+0x164/0x360 [ 803.041973][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 803.047554][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 803.054053][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 803.060754][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 803.100460][ T30] nbd_set_size+0x454/0x680 [ 803.105035][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 803.120590][ T30] ? nla_memcpy+0x5b/0xc0 [ 803.125131][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 803.133240][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 803.139015][ T30] ? rcu_is_watching+0x15/0xb0 [ 803.144328][ T30] ? trace_kmalloc+0x2a/0x110 [ 803.149767][ T30] ? __nla_parse+0x40/0x60 [ 803.154428][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 803.161066][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 803.167424][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 803.173788][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.178770][ T30] genl_rcv_msg+0x61c/0x7a0 [ 803.183376][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.188419][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 803.194702][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.199710][ T30] netlink_rcv_skb+0x232/0x4b0 [ 803.204946][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.209997][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.215682][ T30] ? down_read+0x272/0x2e0 [ 803.220460][ T30] ? genl_rcv+0xd/0x40 [ 803.224550][ T30] genl_rcv+0x28/0x40 [ 803.228635][ T30] netlink_unicast+0x80f/0x9b0 [ 803.233814][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 803.239168][ T30] ? netlink_sendmsg+0x650/0xb40 [ 803.244410][ T30] ? skb_put+0x11b/0x210 [ 803.248671][ T30] netlink_sendmsg+0x813/0xb40 [ 803.253855][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.259143][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.264149][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.270026][ T30] ____sys_sendmsg+0x972/0x9f0 [ 803.275036][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.280835][ T30] ? import_iovec+0x73/0xa0 [ 803.285385][ T30] ___sys_sendmsg+0x2a5/0x360 [ 803.290363][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.295599][ T30] ? futex_wake+0x4ac/0x580 [ 803.300246][ T30] ? __fget_files+0x2a/0x420 [ 803.304875][ T30] ? __fget_files+0x3a0/0x420 [ 803.309551][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 803.314952][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 803.320563][ T30] ? rcu_is_watching+0x15/0xb0 [ 803.325512][ T30] do_syscall_64+0x14d/0xf80 [ 803.330332][ T30] ? trace_irq_disable+0x3b/0x150 [ 803.335378][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.341758][ T30] ? clear_bhb_loop+0x40/0x90 [ 803.346435][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.352689][ T30] RIP: 0033:0x7fa9f259c799 [ 803.357147][ T30] RSP: 002b:00007fa9f339a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.366503][ T30] RAX: ffffffffffffffda RBX: 00007fa9f2816180 RCX: 00007fa9f259c799 [ 803.375802][ T30] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000007 [ 803.384189][ T30] RBP: 00007fa9f2632c99 R08: 0000000000000000 R09: 0000000000000000 [ 803.392458][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.400866][ T30] R13: 00007fa9f2816218 R14: 00007fa9f2816180 R15: 00007ffc1242db68 [ 803.408955][ T30] [ 803.412578][ T30] INFO: task syz.1.6786:31201 blocked for more than 143 seconds. [ 803.420533][ T30] Not tainted syzkaller #0 [ 803.425470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.434630][ T30] task:syz.1.6786 state:D stack:27880 pid:31201 tgid:31199 ppid:27825 task_flags:0x400040 flags:0x00080002 [ 803.449011][ T30] Call Trace: [ 803.452528][ T30] [ 803.455482][ T30] __schedule+0x15dd/0x52d0 [ 803.460020][ T30] ? __pfx___schedule+0x10/0x10 [ 803.465500][ T30] ? schedule+0x90/0x360 [ 803.469749][ T30] schedule+0x164/0x360 [ 803.474765][ T30] schedule_preempt_disabled+0x13/0x30 [ 803.480484][ T30] __mutex_lock+0x7fe/0x1300 [ 803.485194][ T30] ? __mutex_lock+0x5ac/0x1300 [ 803.489951][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 803.495178][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 803.500403][ T30] ? radix_tree_lookup+0x240/0x290 [ 803.505626][ T30] genl_rcv_msg+0x10b/0x7a0 [ 803.510460][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.515505][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.521449][ T30] netlink_rcv_skb+0x232/0x4b0 [ 803.526346][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.531598][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.536925][ T30] ? down_read+0x272/0x2e0 [ 803.541436][ T30] ? genl_rcv+0xd/0x40 [ 803.545525][ T30] genl_rcv+0x28/0x40 [ 803.549508][ T30] netlink_unicast+0x80f/0x9b0 [ 803.554740][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 803.560250][ T30] ? netlink_sendmsg+0x650/0xb40 [ 803.565245][ T30] ? skb_put+0x11b/0x210 [ 803.569507][ T30] netlink_sendmsg+0x813/0xb40 [ 803.574565][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.580444][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.585872][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.591687][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.597043][ T30] __sys_sendto+0x672/0x710 [ 803.603436][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 803.608602][ T30] ? exc_page_fault+0x6a/0xc0 [ 803.613637][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 803.618950][ T30] __x64_sys_sendto+0xde/0x100 [ 803.624141][ T30] do_syscall_64+0x14d/0xf80 [ 803.628826][ T30] ? trace_irq_disable+0x3b/0x150 [ 803.633953][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.640081][ T30] ? clear_bhb_loop+0x40/0x90 [ 803.644786][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.651557][ T30] RIP: 0033:0x7f96aaf5cfce [ 803.656003][ T30] RSP: 002b:00007f96abe0de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 803.664550][ T30] RAX: ffffffffffffffda RBX: 00007f96abe0f6c0 RCX: 00007f96aaf5cfce [ 803.672772][ T30] RDX: 0000000000000020 RSI: 00007f96abe0e000 RDI: 0000000000000005 [ 803.682375][ T30] RBP: 0000000000000000 R08: 00007f96abe0df04 R09: 000000000000000c [ 803.690555][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 803.698553][ T30] R13: 00007f96abe0df58 R14: 00007f96abe0e000 R15: 0000000000000000 [ 803.706718][ T30] [ 803.709761][ T30] INFO: task syz.1.6786:31208 blocked for more than 144 seconds. [ 803.721322][ T30] Not tainted syzkaller #0 [ 803.726488][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.735638][ T30] task:syz.1.6786 state:D stack:27880 pid:31208 tgid:31199 ppid:27825 task_flags:0x400040 flags:0x00080002 [ 803.748350][ T30] Call Trace: [ 803.751941][ T30] [ 803.754904][ T30] __schedule+0x15dd/0x52d0 [ 803.759419][ T30] ? __pfx___schedule+0x10/0x10 [ 803.767775][ T30] ? schedule+0x90/0x360 [ 803.772225][ T30] schedule+0x164/0x360 [ 803.776393][ T30] schedule_preempt_disabled+0x13/0x30 [ 803.782752][ T30] __mutex_lock+0x7fe/0x1300 [ 803.787381][ T30] ? __mutex_lock+0x5ac/0x1300 [ 803.792587][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 803.797294][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 803.802577][ T30] ? radix_tree_lookup+0x240/0x290 [ 803.807718][ T30] genl_rcv_msg+0x10b/0x7a0 [ 803.812610][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.817667][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 803.823060][ T30] netlink_rcv_skb+0x232/0x4b0 [ 803.827915][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.833381][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.838698][ T30] ? down_read+0x272/0x2e0 [ 803.843457][ T30] ? genl_rcv+0xd/0x40 [ 803.847553][ T30] genl_rcv+0x28/0x40 [ 803.851966][ T30] netlink_unicast+0x80f/0x9b0 [ 803.856764][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 803.862259][ T30] ? netlink_sendmsg+0x650/0xb40 [ 803.867243][ T30] ? skb_put+0x11b/0x210 [ 803.871807][ T30] netlink_sendmsg+0x813/0xb40 [ 803.876792][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.882466][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.887898][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.893416][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.898738][ T30] __sys_sendto+0x672/0x710 [ 803.903500][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 803.908560][ T30] ? fd_install+0x94/0x3d0 [ 803.913405][ T30] ? fd_install+0x306/0x3d0 [ 803.917922][ T30] __x64_sys_sendto+0xde/0x100 [ 803.925953][ T30] do_syscall_64+0x14d/0xf80 [ 803.930867][ T30] ? trace_irq_disable+0x3b/0x150 [ 803.935932][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.942402][ T30] ? clear_bhb_loop+0x40/0x90 [ 803.947197][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.953313][ T30] RIP: 0033:0x7f96aaf5cfce [ 803.957740][ T30] RSP: 002b:00007f96abdece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 803.966589][ T30] RAX: ffffffffffffffda RBX: 00007f96abdee6c0 RCX: 00007f96aaf5cfce [ 803.974892][ T30] RDX: 0000000000000020 RSI: 00007f96abded000 RDI: 0000000000000007 [ 803.982965][ T30] RBP: 0000000000000000 R08: 00007f96abdecf04 R09: 000000000000000c [ 803.991933][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 803.999947][ T30] R13: 00007f96abdecf58 R14: 00007f96abded000 R15: 0000000000000000 [ 804.009134][ T30] [ 804.012551][ T30] INFO: task syz.1.6786:31213 blocked for more than 144 seconds. [ 804.020774][ T30] Not tainted syzkaller #0 [ 804.025717][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.034868][ T30] task:syz.1.6786 state:D stack:26120 pid:31213 tgid:31199 ppid:27825 task_flags:0x400140 flags:0x00080002 [ 804.046976][ T30] Call Trace: [ 804.050471][ T30] [ 804.053402][ T30] __schedule+0x15dd/0x52d0 [ 804.057903][ T30] ? __pfx___schedule+0x10/0x10 [ 804.068253][ T30] ? schedule+0x90/0x360 [ 804.072824][ T30] schedule+0x164/0x360 [ 804.077027][ T30] schedule_preempt_disabled+0x13/0x30 [ 804.082812][ T30] __mutex_lock+0x7fe/0x1300 [ 804.087432][ T30] ? __mutex_lock+0x5ac/0x1300 [ 804.093294][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 804.098076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 804.103261][ T30] ? radix_tree_lookup+0x240/0x290 [ 804.108426][ T30] genl_rcv_msg+0x10b/0x7a0 [ 804.113351][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.118403][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 804.123772][ T30] netlink_rcv_skb+0x232/0x4b0 [ 804.128725][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.133993][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.139379][ T30] ? down_read+0x272/0x2e0 [ 804.143932][ T30] ? genl_rcv+0xd/0x40 [ 804.148199][ T30] genl_rcv+0x28/0x40 [ 804.152624][ T30] netlink_unicast+0x80f/0x9b0 [ 804.157406][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 804.163174][ T30] ? netlink_sendmsg+0x650/0xb40 [ 804.168133][ T30] ? skb_put+0x11b/0x210 [ 804.172622][ T30] netlink_sendmsg+0x813/0xb40 [ 804.177426][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.183070][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 804.188016][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 804.193964][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.199336][ T30] __sys_sendto+0x672/0x710 [ 804.203970][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 804.209037][ T30] ? fd_install+0x94/0x3d0 [ 804.213947][ T30] ? fd_install+0x306/0x3d0 [ 804.218490][ T30] __x64_sys_sendto+0xde/0x100 [ 804.223385][ T30] do_syscall_64+0x14d/0xf80 [ 804.227993][ T30] ? trace_irq_disable+0x3b/0x150 [ 804.233247][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.239332][ T30] ? clear_bhb_loop+0x40/0x90 [ 804.244625][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.250772][ T30] RIP: 0033:0x7f96aaf5cfce [ 804.255298][ T30] RSP: 002b:00007f96abdcbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 804.263853][ T30] RAX: ffffffffffffffda RBX: 00007f96abdcd6c0 RCX: 00007f96aaf5cfce [ 804.272091][ T30] RDX: 0000000000000020 RSI: 00007f96abdcc000 RDI: 0000000000000009 [ 804.280165][ T30] RBP: 0000000000000000 R08: 00007f96abdcbf04 R09: 000000000000000c [ 804.288235][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 804.296904][ T30] R13: 00007f96abdcbf58 R14: 00007f96abdcc000 R15: 0000000000000000 [ 804.305299][ T30] [ 804.308331][ T30] INFO: task syz.1.6786:31220 blocked for more than 144 seconds. [ 804.316279][ T30] Not tainted syzkaller #0 [ 804.321480][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.330597][ T30] task:syz.1.6786 state:D stack:27144 pid:31220 tgid:31199 ppid:27825 task_flags:0x400040 flags:0x00080002 [ 804.342772][ T30] Call Trace: [ 804.346074][ T30] [ 804.349016][ T30] __schedule+0x15dd/0x52d0 [ 804.353936][ T30] ? __pfx___schedule+0x10/0x10 [ 804.358808][ T30] ? schedule+0x90/0x360 [ 804.363368][ T30] schedule+0x164/0x360 [ 804.367564][ T30] schedule_preempt_disabled+0x13/0x30 [ 804.373239][ T30] __mutex_lock+0x7fe/0x1300 [ 804.377881][ T30] ? __mutex_lock+0x5ac/0x1300 [ 804.382799][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 804.387509][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 804.392896][ T30] ? radix_tree_lookup+0x240/0x290 [ 804.398428][ T30] genl_rcv_msg+0x10b/0x7a0 [ 804.403349][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.408480][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 804.413633][ T30] netlink_rcv_skb+0x232/0x4b0 [ 804.418423][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.423836][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.429137][ T30] ? down_read+0x272/0x2e0 [ 804.433738][ T30] ? genl_rcv+0xd/0x40 [ 804.437822][ T30] genl_rcv+0x28/0x40 [ 804.441928][ T30] netlink_unicast+0x80f/0x9b0 [ 804.446717][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 804.452444][ T30] ? netlink_sendmsg+0x650/0xb40 [ 804.457420][ T30] ? skb_put+0x11b/0x210 [ 804.461893][ T30] netlink_sendmsg+0x813/0xb40 [ 804.466680][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.472170][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 804.477230][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 804.482924][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.488238][ T30] __sys_sendto+0x672/0x710 [ 804.492925][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 804.498625][ T30] ? fd_install+0x94/0x3d0 [ 804.503219][ T30] ? fd_install+0x306/0x3d0 [ 804.507754][ T30] __x64_sys_sendto+0xde/0x100 [ 804.512867][ T30] do_syscall_64+0x14d/0xf80 [ 804.517477][ T30] ? trace_irq_disable+0x3b/0x150 [ 804.522613][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.528693][ T30] ? clear_bhb_loop+0x40/0x90 [ 804.533611][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.539519][ T30] RIP: 0033:0x7f96aaf5cfce [ 804.544296][ T30] RSP: 002b:00007f96abdaae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 804.552899][ T30] RAX: ffffffffffffffda RBX: 00007f96abdac6c0 RCX: 00007f96aaf5cfce [ 804.561896][ T30] RDX: 0000000000000020 RSI: 00007f96abdab000 RDI: 000000000000000b [ 804.569881][ T30] RBP: 0000000000000000 R08: 00007f96abdaaf04 R09: 000000000000000c [ 804.578413][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 804.586592][ T30] R13: 00007f96abdaaf58 R14: 00007f96abdab000 R15: 0000000000000000 [ 804.594736][ T30] [ 804.597776][ T30] INFO: task syz.3.6787:31202 blocked for more than 144 seconds. [ 804.606846][ T30] Not tainted syzkaller #0 [ 804.611991][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.620780][ T30] task:syz.3.6787 state:D stack:25544 pid:31202 tgid:31200 ppid:29392 task_flags:0x400140 flags:0x00080002 [ 804.633065][ T30] Call Trace: [ 804.636345][ T30] [ 804.639265][ T30] __schedule+0x15dd/0x52d0 [ 804.644464][ T30] ? __pfx___schedule+0x10/0x10 [ 804.649357][ T30] ? schedule+0x90/0x360 [ 804.653828][ T30] schedule+0x164/0x360 [ 804.658002][ T30] schedule_preempt_disabled+0x13/0x30 [ 804.663763][ T30] __mutex_lock+0x7fe/0x1300 [ 804.668354][ T30] ? __mutex_lock+0x5ac/0x1300 [ 804.673362][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 804.678058][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 804.683299][ T30] ? radix_tree_lookup+0x240/0x290 [ 804.688431][ T30] genl_rcv_msg+0x10b/0x7a0 [ 804.693322][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.698354][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 804.703964][ T30] netlink_rcv_skb+0x232/0x4b0 [ 804.708762][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.713994][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.719307][ T30] ? down_read+0x272/0x2e0 [ 804.724296][ T30] ? genl_rcv+0xd/0x40 [ 804.728395][ T30] genl_rcv+0x28/0x40 [ 804.732538][ T30] netlink_unicast+0x80f/0x9b0 [ 804.737344][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 804.742762][ T30] ? netlink_sendmsg+0x650/0xb40 [ 804.747715][ T30] ? skb_put+0x11b/0x210 [ 804.752350][ T30] netlink_sendmsg+0x813/0xb40 [ 804.757122][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.762517][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 804.767562][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 804.773019][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.778326][ T30] __sys_sendto+0x672/0x710 [ 804.783294][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 804.788359][ T30] ? exc_page_fault+0x6a/0xc0 [ 804.793259][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 804.798568][ T30] __x64_sys_sendto+0xde/0x100 [ 804.803790][ T30] do_syscall_64+0x14d/0xf80 [ 804.808838][ T30] ? trace_irq_disable+0x3b/0x150 [ 804.814297][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.820497][ T30] ? clear_bhb_loop+0x40/0x90 [ 804.825274][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.831331][ T30] RIP: 0033:0x7f0ed5f5cfce [ 804.835753][ T30] RSP: 002b:00007f0ed6eb8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 804.844445][ T30] RAX: ffffffffffffffda RBX: 00007f0ed6eba6c0 RCX: 00007f0ed5f5cfce [ 804.852628][ T30] RDX: 0000000000000020 RSI: 00007f0ed6eb9000 RDI: 0000000000000006 [ 804.860717][ T30] RBP: 0000000000000000 R08: 00007f0ed6eb8f04 R09: 000000000000000c [ 804.868707][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 804.877126][ T30] R13: 00007f0ed6eb8f58 R14: 00007f0ed6eb9000 R15: 0000000000000000 [ 804.886354][ T30] [ 804.889509][ T30] INFO: task syz.3.6787:31210 blocked for more than 145 seconds. [ 804.898467][ T30] Not tainted syzkaller #0 [ 804.903792][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.913547][ T30] task:syz.3.6787 state:D stack:27880 pid:31210 tgid:31200 ppid:29392 task_flags:0x400040 flags:0x00080002 [ 804.925680][ T30] Call Trace: [ 804.928968][ T30] [ 804.932094][ T30] __schedule+0x15dd/0x52d0 [ 804.936631][ T30] ? __pfx___schedule+0x10/0x10 [ 804.941773][ T30] ? schedule+0x90/0x360 [ 804.946014][ T30] schedule+0x164/0x360 [ 804.950543][ T30] schedule_preempt_disabled+0x13/0x30 [ 804.956020][ T30] __mutex_lock+0x7fe/0x1300 [ 804.961783][ T30] ? __mutex_lock+0x5ac/0x1300 [ 804.966585][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 804.971839][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 804.976903][ T30] ? radix_tree_lookup+0x240/0x290 [ 804.982264][ T30] genl_rcv_msg+0x10b/0x7a0 [ 804.986803][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.991913][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 804.997046][ T30] netlink_rcv_skb+0x232/0x4b0 [ 805.002274][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.007304][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.013662][ T30] ? down_read+0x272/0x2e0 [ 805.018110][ T30] ? genl_rcv+0xd/0x40 [ 805.022229][ T30] genl_rcv+0x28/0x40 [ 805.026244][ T30] netlink_unicast+0x80f/0x9b0 [ 805.031283][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 805.036590][ T30] ? netlink_sendmsg+0x650/0xb40 [ 805.042004][ T30] ? skb_put+0x11b/0x210 [ 805.046272][ T30] netlink_sendmsg+0x813/0xb40 [ 805.051096][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.056397][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.061708][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.066999][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.072370][ T30] __sys_sendto+0x672/0x710 [ 805.076974][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 805.082212][ T30] ? exc_page_fault+0x6a/0xc0 [ 805.087035][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 805.092628][ T30] __x64_sys_sendto+0xde/0x100 [ 805.097433][ T30] do_syscall_64+0x14d/0xf80 [ 805.102140][ T30] ? trace_irq_disable+0x3b/0x150 [ 805.107191][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.114391][ T30] ? clear_bhb_loop+0x40/0x90 [ 805.119109][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.126487][ T30] RIP: 0033:0x7f0ed5f5cfce [ 805.131708][ T30] RSP: 002b:00007f0ed6e97e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 805.140277][ T30] RAX: ffffffffffffffda RBX: 00007f0ed6e996c0 RCX: 00007f0ed5f5cfce [ 805.148270][ T30] RDX: 0000000000000020 RSI: 00007f0ed6e98000 RDI: 0000000000000006 [ 805.156764][ T30] RBP: 0000000000000000 R08: 00007f0ed6e97f04 R09: 000000000000000c [ 805.165001][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 805.173370][ T30] R13: 00007f0ed6e97f58 R14: 00007f0ed6e98000 R15: 0000000000000000 [ 805.181768][ T30] [ 805.184857][ T30] INFO: task syz.2.6789:31209 blocked for more than 145 seconds. [ 805.192714][ T30] Not tainted syzkaller #0 [ 805.197651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 805.207249][ T30] task:syz.2.6789 state:D stack:27880 pid:31209 tgid:31207 ppid:28384 task_flags:0x400040 flags:0x00080002 [ 805.220460][ T30] Call Trace: [ 805.223767][ T30] [ 805.226695][ T30] __schedule+0x15dd/0x52d0 [ 805.231380][ T30] ? __pfx___schedule+0x10/0x10 [ 805.236340][ T30] ? schedule+0x90/0x360 [ 805.241122][ T30] schedule+0x164/0x360 [ 805.245312][ T30] schedule_preempt_disabled+0x13/0x30 [ 805.250892][ T30] __mutex_lock+0x7fe/0x1300 [ 805.255500][ T30] ? __mutex_lock+0x5ac/0x1300 [ 805.260627][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 805.265343][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 805.270758][ T30] ? radix_tree_lookup+0x240/0x290 [ 805.276183][ T30] genl_rcv_msg+0x10b/0x7a0 [ 805.281295][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.286373][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 805.291500][ T30] netlink_rcv_skb+0x232/0x4b0 [ 805.296283][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.301603][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.306903][ T30] ? down_read+0x272/0x2e0 [ 805.311374][ T30] ? genl_rcv+0xd/0x40 [ 805.315446][ T30] genl_rcv+0x28/0x40 [ 805.320374][ T30] netlink_unicast+0x80f/0x9b0 [ 805.325192][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 805.330802][ T30] ? netlink_sendmsg+0x650/0xb40 [ 805.335778][ T30] ? skb_put+0x11b/0x210 [ 805.340422][ T30] netlink_sendmsg+0x813/0xb40 [ 805.345219][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.350709][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.355948][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.361758][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.367112][ T30] __sys_sendto+0x672/0x710 [ 805.371865][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 805.376934][ T30] ? exc_page_fault+0x6a/0xc0 [ 805.381698][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 805.386999][ T30] __x64_sys_sendto+0xde/0x100 [ 805.392125][ T30] do_syscall_64+0x14d/0xf80 [ 805.396718][ T30] ? trace_irq_disable+0x3b/0x150 [ 805.401874][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.407957][ T30] ? clear_bhb_loop+0x40/0x90 [ 805.412727][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.418637][ T30] RIP: 0033:0x7f6434d5cfce [ 805.424137][ T30] RSP: 002b:00007f6435c08e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 805.432900][ T30] RAX: ffffffffffffffda RBX: 00007f6435c0a6c0 RCX: 00007f6434d5cfce [ 805.441513][ T30] RDX: 0000000000000020 RSI: 00007f6435c09000 RDI: 0000000000000003 [ 805.449510][ T30] RBP: 0000000000000000 R08: 00007f6435c08f04 R09: 000000000000000c [ 805.458067][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 805.466224][ T30] R13: 00007f6435c08f58 R14: 00007f6435c09000 R15: 0000000000000000 [ 805.474536][ T30] [ 805.477595][ T30] INFO: task syz.4.6790:31212 blocked for more than 145 seconds. [ 805.485818][ T30] Not tainted syzkaller #0 [ 805.491207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 805.499880][ T30] task:syz.4.6790 state:D stack:27880 pid:31212 tgid:31211 ppid:28848 task_flags:0x400040 flags:0x00080002 [ 805.512686][ T30] Call Trace: [ 805.516020][ T30] [ 805.518996][ T30] __schedule+0x15dd/0x52d0 [ 805.527712][ T30] ? __pfx___schedule+0x10/0x10 [ 805.533171][ T30] ? schedule+0x90/0x360 [ 805.537443][ T30] schedule+0x164/0x360 [ 805.541914][ T30] schedule_preempt_disabled+0x13/0x30 [ 805.547389][ T30] __mutex_lock+0x7fe/0x1300 [ 805.552108][ T30] ? __mutex_lock+0x5ac/0x1300 [ 805.556892][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 805.561680][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 805.566826][ T30] ? radix_tree_lookup+0x240/0x290 [ 805.572345][ T30] genl_rcv_msg+0x10b/0x7a0 [ 805.576894][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.582033][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 805.587008][ T30] netlink_rcv_skb+0x232/0x4b0 [ 805.592052][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.597213][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.603081][ T30] ? down_read+0x272/0x2e0 [ 805.607523][ T30] ? genl_rcv+0xd/0x40 [ 805.611716][ T30] genl_rcv+0x28/0x40 [ 805.615761][ T30] netlink_unicast+0x80f/0x9b0 [ 805.620919][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 805.627155][ T30] ? netlink_sendmsg+0x650/0xb40 [ 805.632598][ T30] ? skb_put+0x11b/0x210 [ 805.636953][ T30] netlink_sendmsg+0x813/0xb40 [ 805.641877][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.647184][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.652253][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.657570][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.663200][ T30] __sys_sendto+0x672/0x710 [ 805.667902][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 805.673081][ T30] ? exc_page_fault+0x6a/0xc0 [ 805.677778][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 805.685401][ T30] __x64_sys_sendto+0xde/0x100 [ 805.690734][ T30] do_syscall_64+0x14d/0xf80 [ 805.695424][ T30] ? trace_irq_disable+0x3b/0x150 [ 805.700649][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.706817][ T30] ? clear_bhb_loop+0x40/0x90 [ 805.711597][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.717516][ T30] RIP: 0033:0x7f657d95cfce [ 805.722268][ T30] RSP: 002b:00007f657e7d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 805.731878][ T30] RAX: ffffffffffffffda RBX: 00007f657e7d76c0 RCX: 00007f657d95cfce [ 805.739977][ T30] RDX: 000000000000001c RSI: 00007f657e7d6000 RDI: 0000000000000004 [ 805.748228][ T30] RBP: 0000000000000000 R08: 00007f657e7d5f04 R09: 000000000000000c [ 805.756614][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 805.765164][ T30] R13: 00007f657e7d5f58 R14: 00007f657e7d6000 R15: 0000000000000000 [ 805.773692][ T30] [ 805.776800][ T30] INFO: task syz-executor:31228 blocked for more than 146 seconds. [ 805.785433][ T30] Not tainted syzkaller #0 [ 805.790579][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 805.799312][ T30] task:syz-executor state:D stack:22976 pid:31228 tgid:31228 ppid:1 task_flags:0x400140 flags:0x00080002 [ 805.811681][ T30] Call Trace: [ 805.814966][ T30] [ 805.817888][ T30] __schedule+0x15dd/0x52d0 [ 805.822612][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 805.827617][ T30] ? __pfx___schedule+0x10/0x10 [ 805.833220][ T30] ? schedule+0x90/0x360 [ 805.837500][ T30] schedule+0x164/0x360 [ 805.842218][ T30] schedule_preempt_disabled+0x13/0x30 [ 805.847695][ T30] __mutex_lock+0x7fe/0x1300 [ 805.852497][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 805.857722][ T30] ? __mutex_lock+0x5ac/0x1300 [ 805.862629][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 805.867418][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 805.872823][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 805.877821][ T30] ? radix_tree_lookup+0x240/0x290 [ 805.883237][ T30] genl_rcv_msg+0x10b/0x7a0 [ 805.887775][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.893103][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 805.898082][ T30] netlink_rcv_skb+0x232/0x4b0 [ 805.903220][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.908252][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.913721][ T30] ? down_read+0x272/0x2e0 [ 805.918163][ T30] ? genl_rcv+0xd/0x40 [ 805.922742][ T30] genl_rcv+0x28/0x40 [ 805.926823][ T30] netlink_unicast+0x80f/0x9b0 [ 805.932674][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 805.938019][ T30] ? netlink_sendmsg+0x650/0xb40 [ 805.943114][ T30] ? skb_put+0x11b/0x210 [ 805.947375][ T30] netlink_sendmsg+0x813/0xb40 [ 805.952399][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.957800][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.963116][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.968428][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.974031][ T30] __sys_sendto+0x672/0x710 [ 805.978614][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 805.983993][ T30] ? fd_install+0x94/0x3d0 [ 805.988610][ T30] ? fd_install+0x306/0x3d0 [ 805.993607][ T30] __x64_sys_sendto+0xde/0x100 [ 805.998488][ T30] do_syscall_64+0x14d/0xf80 [ 806.007451][ T30] ? trace_irq_disable+0x3b/0x150 [ 806.012722][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.018890][ T30] ? clear_bhb_loop+0x40/0x90 [ 806.023925][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.029865][ T30] RIP: 0033:0x7f537a15cfce [ 806.035097][ T30] RSP: 002b:00007ffcd49858b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 806.043781][ T30] RAX: ffffffffffffffda RBX: 000055557324c500 RCX: 00007f537a15cfce [ 806.052193][ T30] RDX: 0000000000000020 RSI: 00007f537af44670 RDI: 0000000000000005 [ 806.060702][ T30] RBP: 0000000000000001 R08: 00007ffcd4985934 R09: 000000000000000c [ 806.068718][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 806.076960][ T30] R13: 00007ffcd4985988 R14: 00007f537af44670 R15: 0000000000000000 [ 806.085927][ T30] [ 806.088975][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 806.098227][ T30] INFO: task syz-executor:31230 blocked for more than 146 seconds. [ 806.106867][ T30] Not tainted syzkaller #0 [ 806.112354][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 806.121496][ T30] task:syz-executor state:D stack:22984 pid:31230 tgid:31230 ppid:1 task_flags:0x400140 flags:0x00080002 [ 806.133543][ T30] Call Trace: [ 806.137367][ T30] [ 806.140713][ T30] __schedule+0x15dd/0x52d0 [ 806.145334][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.150651][ T30] ? __pfx___schedule+0x10/0x10 [ 806.155523][ T30] ? schedule+0x90/0x360 [ 806.159801][ T30] schedule+0x164/0x360 [ 806.164514][ T30] schedule_preempt_disabled+0x13/0x30 [ 806.170529][ T30] __mutex_lock+0x7fe/0x1300 [ 806.175158][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 806.180465][ T30] ? __mutex_lock+0x5ac/0x1300 [ 806.185242][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 806.190018][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 806.195349][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.200793][ T30] ? radix_tree_lookup+0x240/0x290 [ 806.205915][ T30] genl_rcv_msg+0x10b/0x7a0 [ 806.210895][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.215944][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.221080][ T30] netlink_rcv_skb+0x232/0x4b0 [ 806.225875][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.231429][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.236865][ T30] ? down_read+0x272/0x2e0 [ 806.242673][ T30] ? genl_rcv+0xd/0x40 [ 806.247053][ T30] genl_rcv+0x28/0x40 [ 806.251335][ T30] netlink_unicast+0x80f/0x9b0 [ 806.256147][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 806.261798][ T30] ? netlink_sendmsg+0x650/0xb40 [ 806.266808][ T30] ? skb_put+0x11b/0x210 [ 806.271211][ T30] netlink_sendmsg+0x813/0xb40 [ 806.275999][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.281369][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 806.286314][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.292004][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.297297][ T30] __sys_sendto+0x672/0x710 [ 806.301985][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 806.307033][ T30] ? fd_install+0x94/0x3d0 [ 806.311603][ T30] ? fd_install+0x306/0x3d0 [ 806.316132][ T30] __x64_sys_sendto+0xde/0x100 [ 806.321683][ T30] do_syscall_64+0x14d/0xf80 [ 806.326306][ T30] ? trace_irq_disable+0x3b/0x150 [ 806.331607][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.337703][ T30] ? clear_bhb_loop+0x40/0x90 [ 806.343443][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.349368][ T30] RIP: 0033:0x7f1c73d5cfce [ 806.354310][ T30] RSP: 002b:00007ffcc64cbf98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 806.362929][ T30] RAX: ffffffffffffffda RBX: 000055558b87c500 RCX: 00007f1c73d5cfce [ 806.371138][ T30] RDX: 0000000000000020 RSI: 00007f1c74b44670 RDI: 0000000000000005 [ 806.379128][ T30] RBP: 0000000000000001 R08: 00007ffcc64cc014 R09: 000000000000000c [ 806.387526][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 806.395716][ T30] R13: 00007ffcc64cc068 R14: 00007f1c74b44670 R15: 0000000000000000 [ 806.404085][ T30] [ 806.407135][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 806.416576][ T30] INFO: task syz-executor:31234 blocked for more than 146 seconds. [ 806.425428][ T30] Not tainted syzkaller #0 [ 806.430559][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 806.439315][ T30] task:syz-executor state:D stack:23336 pid:31234 tgid:31234 ppid:1 task_flags:0x400140 flags:0x00080002 [ 806.452373][ T30] Call Trace: [ 806.455716][ T30] [ 806.458648][ T30] __schedule+0x15dd/0x52d0 [ 806.463495][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.468581][ T30] ? __pfx___schedule+0x10/0x10 [ 806.473692][ T30] ? schedule+0x90/0x360 [ 806.477957][ T30] schedule+0x164/0x360 [ 806.482847][ T30] schedule_preempt_disabled+0x13/0x30 [ 806.488344][ T30] __mutex_lock+0x7fe/0x1300 [ 806.493101][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 806.498318][ T30] ? __mutex_lock+0x5ac/0x1300 [ 806.503192][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 806.507987][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 806.513636][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.518610][ T30] ? radix_tree_lookup+0x240/0x290 [ 806.523852][ T30] genl_rcv_msg+0x10b/0x7a0 [ 806.528436][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.533811][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.538784][ T30] netlink_rcv_skb+0x232/0x4b0 [ 806.544104][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.549606][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.555565][ T30] ? down_read+0x272/0x2e0 [ 806.560014][ T30] ? genl_rcv+0xd/0x40 [ 806.564572][ T30] genl_rcv+0x28/0x40 [ 806.568564][ T30] netlink_unicast+0x80f/0x9b0 [ 806.573909][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 806.579310][ T30] ? netlink_sendmsg+0x650/0xb40 [ 806.584439][ T30] ? skb_put+0x11b/0x210 [ 806.588700][ T30] netlink_sendmsg+0x813/0xb40 [ 806.594087][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.599497][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 806.604745][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.610444][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.616159][ T30] __sys_sendto+0x672/0x710 [ 806.620805][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 806.625951][ T30] ? fd_install+0x94/0x3d0 [ 806.630828][ T30] ? fd_install+0x306/0x3d0 [ 806.635364][ T30] __x64_sys_sendto+0xde/0x100 [ 806.641221][ T30] do_syscall_64+0x14d/0xf80 [ 806.645861][ T30] ? trace_irq_disable+0x3b/0x150 [ 806.652174][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.658383][ T30] ? clear_bhb_loop+0x40/0x90 [ 806.663460][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.669369][ T30] RIP: 0033:0x7fd7b615cfce [ 806.674079][ T30] RSP: 002b:00007ffe9546e568 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 806.682628][ T30] RAX: ffffffffffffffda RBX: 000055556884b500 RCX: 00007fd7b615cfce [ 806.691108][ T30] RDX: 0000000000000020 RSI: 00007fd7b6f44670 RDI: 0000000000000005 [ 806.699099][ T30] RBP: 0000000000000001 R08: 00007ffe9546e5e4 R09: 000000000000000c [ 806.707275][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 806.715516][ T30] R13: 00007ffe9546e638 R14: 00007fd7b6f44670 R15: 0000000000000000 [ 806.724814][ T30] [ 806.727885][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 806.737217][ T30] INFO: task syz-executor:31237 blocked for more than 147 seconds. [ 806.745412][ T30] Not tainted syzkaller #0 [ 806.751424][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 806.760352][ T30] task:syz-executor state:D stack:22848 pid:31237 tgid:31237 ppid:1 task_flags:0x400140 flags:0x00080002 [ 806.772659][ T30] Call Trace: [ 806.775968][ T30] [ 806.778918][ T30] __schedule+0x15dd/0x52d0 [ 806.783947][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.788924][ T30] ? __pfx___schedule+0x10/0x10 [ 806.794096][ T30] ? schedule+0x90/0x360 [ 806.798378][ T30] schedule+0x164/0x360 [ 806.802929][ T30] schedule_preempt_disabled+0x13/0x30 [ 806.808514][ T30] __mutex_lock+0x7fe/0x1300 [ 806.814243][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 806.819565][ T30] ? __mutex_lock+0x5ac/0x1300 [ 806.824437][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 806.829128][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 806.834564][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.839793][ T30] ? radix_tree_lookup+0x240/0x290 [ 806.845262][ T30] genl_rcv_msg+0x10b/0x7a0 [ 806.849796][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.855612][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 806.860775][ T30] netlink_rcv_skb+0x232/0x4b0 [ 806.865653][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.871214][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.876647][ T30] ? down_read+0x272/0x2e0 [ 806.881696][ T30] ? genl_rcv+0xd/0x40 [ 806.885784][ T30] genl_rcv+0x28/0x40 [ 806.889761][ T30] netlink_unicast+0x80f/0x9b0 [ 806.894809][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 806.900517][ T30] ? netlink_sendmsg+0x650/0xb40 [ 806.905492][ T30] ? skb_put+0x11b/0x210 [ 806.909755][ T30] netlink_sendmsg+0x813/0xb40 [ 806.914810][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.921019][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 806.925992][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.931674][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.936980][ T30] __sys_sendto+0x672/0x710 [ 806.941566][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 806.946726][ T30] ? fd_install+0x94/0x3d0 [ 806.951386][ T30] ? fd_install+0x306/0x3d0 [ 806.956541][ T30] __x64_sys_sendto+0xde/0x100 [ 806.961747][ T30] do_syscall_64+0x14d/0xf80 [ 806.966524][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.972840][ T30] ? clear_bhb_loop+0x40/0x90 [ 806.977676][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.983881][ T30] RIP: 0033:0x7fb35555cfce [ 806.988582][ T30] RSP: 002b:00007ffc26dcdb18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 806.997414][ T30] RAX: ffffffffffffffda RBX: 0000555561ee6500 RCX: 00007fb35555cfce [ 807.005787][ T30] RDX: 0000000000000020 RSI: 00007fb356344670 RDI: 0000000000000005 [ 807.013936][ T30] RBP: 0000000000000001 R08: 00007ffc26dcdb94 R09: 000000000000000c [ 807.022352][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 807.030602][ T30] R13: 00007ffc26dcdbe8 R14: 00007fb356344670 R15: 0000000000000000 [ 807.038625][ T30] [ 807.042461][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 807.054196][ T30] INFO: task syz-executor:31239 blocked for more than 147 seconds. [ 807.063745][ T30] Not tainted syzkaller #0 [ 807.068790][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 807.078226][ T30] task:syz-executor state:D stack:23040 pid:31239 tgid:31239 ppid:1 task_flags:0x400140 flags:0x00080002 [ 807.091196][ T30] Call Trace: [ 807.094497][ T30] [ 807.097449][ T30] __schedule+0x15dd/0x52d0 [ 807.102150][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 807.107215][ T30] ? __pfx___schedule+0x10/0x10 [ 807.112259][ T30] ? schedule+0x90/0x360 [ 807.116527][ T30] schedule+0x164/0x360 [ 807.121362][ T30] schedule_preempt_disabled+0x13/0x30 [ 807.126984][ T30] __mutex_lock+0x7fe/0x1300 [ 807.131931][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 807.137163][ T30] ? __mutex_lock+0x5ac/0x1300 [ 807.142045][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 807.146844][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 807.152275][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 807.157333][ T30] ? radix_tree_lookup+0x240/0x290 [ 807.163809][ T30] genl_rcv_msg+0x10b/0x7a0 [ 807.168381][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.173748][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 807.178735][ T30] netlink_rcv_skb+0x232/0x4b0 [ 807.183907][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.188956][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.194403][ T30] ? down_read+0x272/0x2e0 [ 807.198921][ T30] ? genl_rcv+0xd/0x40 [ 807.203616][ T30] genl_rcv+0x28/0x40 [ 807.207635][ T30] netlink_unicast+0x80f/0x9b0 [ 807.212618][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 807.217989][ T30] ? netlink_sendmsg+0x650/0xb40 [ 807.223006][ T30] ? skb_put+0x11b/0x210 [ 807.227284][ T30] netlink_sendmsg+0x813/0xb40 [ 807.232185][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.237738][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.243138][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.248429][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.253797][ T30] __sys_sendto+0x672/0x710 [ 807.258313][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 807.264266][ T30] ? rcu_is_watching+0x15/0xb0 [ 807.269068][ T30] __x64_sys_sendto+0xde/0x100 [ 807.274256][ T30] do_syscall_64+0x14d/0xf80 [ 807.278849][ T30] ? trace_irq_disable+0x3b/0x150 [ 807.284737][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.291015][ T30] ? clear_bhb_loop+0x40/0x90 [ 807.295714][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.301908][ T30] RIP: 0033:0x7ff1a9d5cfce [ 807.306342][ T30] RSP: 002b:00007ffef371cf08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 807.315031][ T30] RAX: ffffffffffffffda RBX: 00005555641c4500 RCX: 00007ff1a9d5cfce [ 807.323155][ T30] RDX: 0000000000000020 RSI: 00007ff1aab44670 RDI: 0000000000000005 [ 807.331518][ T30] RBP: 0000000000000001 R08: 00007ffef371cf84 R09: 000000000000000c [ 807.339489][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 807.347794][ T30] R13: 00007ffef371cfd8 R14: 00007ff1aab44670 R15: 0000000000000000 [ 807.356023][ T30] [ 807.359041][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 807.369754][ T30] [ 807.369754][ T30] Showing all locks held in the system: [ 807.377570][ T30] 1 lock held by khungtaskd/30: [ 807.382587][ T30] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 807.392681][ T30] 2 locks held by getty/5587: [ 807.397344][ T30] #0: ffff888035d6b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 807.407151][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 807.417416][ T30] 2 locks held by kworker/u8:10/8137: [ 807.423192][ T30] 1 lock held by udevd/16896: [ 807.428141][ T30] #0: ffff88806cf3b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 807.437599][ T30] 1 lock held by udevd/17659: [ 807.442692][ T30] #0: ffff888026894358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 807.452274][ T30] 6 locks held by syz.0.6783/31197: [ 807.457464][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.465737][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.475603][ T30] #2: ffff88803fc23278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 807.486317][ T30] #3: ffff88802a6ebff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 807.495886][ T30] #4: ffff88802a6eb990 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 807.508142][ T30] #5: ffff88802a6eb9c8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 807.521028][ T30] 2 locks held by syz.1.6786/31201: [ 807.526239][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.534802][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.543883][ T30] 2 locks held by syz.1.6786/31208: [ 807.549120][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.557760][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.567154][ T30] 2 locks held by syz.1.6786/31213: [ 807.573155][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.581754][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.590844][ T30] 2 locks held by syz.1.6786/31220: [ 807.596057][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.604696][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.613888][ T30] 2 locks held by syz.3.6787/31202: [ 807.619071][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.627350][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.636394][ T30] 2 locks held by syz.3.6787/31210: [ 807.642053][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.650392][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.659524][ T30] 2 locks held by syz.2.6789/31209: [ 807.664872][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.674683][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.684028][ T30] 2 locks held by syz.4.6790/31212: [ 807.689240][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.697539][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.706815][ T30] 2 locks held by syz-executor/31228: [ 807.712352][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.720649][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.729644][ T30] 2 locks held by syz-executor/31230: [ 807.735382][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.743666][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.752796][ T30] 2 locks held by syz-executor/31234: [ 807.758167][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.767514][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.777353][ T30] 2 locks held by syz-executor/31237: [ 807.782846][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.791406][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.800565][ T30] 2 locks held by syz-executor/31239: [ 807.805949][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.814249][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.824173][ T30] 2 locks held by syz-executor/31279: [ 807.829550][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.837806][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.847622][ T30] 2 locks held by syz-executor/31282: [ 807.853344][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.861772][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.870852][ T30] 2 locks held by syz-executor/31284: [ 807.876208][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.885571][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.894721][ T30] 2 locks held by syz-executor/31285: [ 807.900194][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.908423][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.917813][ T30] 2 locks held by syz-executor/31288: [ 807.923560][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.931984][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.941348][ T30] 2 locks held by syz-executor/31329: [ 807.946905][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.955193][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.964244][ T30] 2 locks held by syz-executor/31332: [ 807.969608][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 807.978223][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 807.988265][ T30] 2 locks held by syz-executor/31334: [ 807.993794][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 808.002583][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 808.011693][ T30] 2 locks held by syz-executor/31335: [ 808.017080][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 808.025355][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 808.034536][ T30] 2 locks held by syz-executor/31338: [ 808.039893][ T30] #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 808.048280][ T30] #1: ffffffff8fc3b748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 808.057382][ T30] [ 808.059709][ T30] ============================================= [ 808.059709][ T30] [ 808.068469][ T30] NMI backtrace for cpu 0 [ 808.068486][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 808.068506][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 808.068517][ T30] Call Trace: [ 808.068525][ T30] [ 808.068532][ T30] dump_stack_lvl+0xe8/0x150 [ 808.068559][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 808.068582][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 808.068604][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 808.068636][ T30] sys_info+0x135/0x170 [ 808.068655][ T30] watchdog+0xfd9/0x1030 [ 808.068683][ T30] ? watchdog+0x21a/0x1030 [ 808.068710][ T30] kthread+0x388/0x470 [ 808.068726][ T30] ? __pfx_watchdog+0x10/0x10 [ 808.068746][ T30] ? __pfx_kthread+0x10/0x10 [ 808.068762][ T30] ret_from_fork+0x51e/0xb90 [ 808.068784][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 808.068801][ T30] ? __switch_to+0xc7d/0x1450 [ 808.068822][ T30] ? __pfx_kthread+0x10/0x10 [ 808.068837][ T30] ret_from_fork_asm+0x1a/0x30 [ 808.068872][ T30] [ 808.068882][ T30] Sending NMI from CPU 0 to CPUs 1: [ 808.181540][ C1] NMI backtrace for cpu 1 [ 808.181559][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 808.181579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 808.181590][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 808.181615][ C1] Code: 8e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 e2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 808.181631][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 808.181647][ C1] RAX: 00000000003b9529 RBX: ffffffff819a900a RCX: 0000000080000001 [ 808.181660][ C1] RDX: 0000000000000001 RSI: ffffffff8def7965 RDI: ffffffff8c27c200 [ 808.181672][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 808.181686][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: 0000000000000001 [ 808.181698][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 1ffff11003ad9000 [ 808.181711][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 808.181726][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.181738][ C1] CR2: 00005592735c1f40 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 808.181754][ C1] Call Trace: [ 808.181761][ C1] [ 808.181768][ C1] default_idle+0x9/0x20 [ 808.181789][ C1] default_idle_call+0x72/0xb0 [ 808.181812][ C1] do_idle+0x36a/0x5f0 [ 808.181839][ C1] ? __pfx_do_idle+0x10/0x10 [ 808.181866][ C1] cpu_startup_entry+0x43/0x60 [ 808.181896][ C1] start_secondary+0x101/0x110 [ 808.181917][ C1] common_startup_64+0x13e/0x147 [ 808.181942][ C1] [ 808.346421][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 808.353268][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 808.362367][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 808.372426][ T30] Call Trace: [ 808.375832][ T30] [ 808.378760][ T30] vpanic+0x56c/0xa60 [ 808.382739][ T30] ? __pfx___schedule+0x10/0x10 [ 808.387588][ T30] ? __pfx_vpanic+0x10/0x10 [ 808.392159][ T30] ? __pfx_console_unlock+0x10/0x10 [ 808.397361][ T30] panic+0xc5/0xd0 [ 808.401080][ T30] ? __pfx_panic+0x10/0x10 [ 808.405595][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 808.410977][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 808.417211][ T30] watchdog+0x1023/0x1030 [ 808.421551][ T30] ? watchdog+0x21a/0x1030 [ 808.425979][ T30] kthread+0x388/0x470 [ 808.430037][ T30] ? __pfx_watchdog+0x10/0x10 [ 808.434751][ T30] ? __pfx_kthread+0x10/0x10 [ 808.439334][ T30] ret_from_fork+0x51e/0xb90 [ 808.443935][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 808.449039][ T30] ? __switch_to+0xc7d/0x1450 [ 808.453714][ T30] ? __pfx_kthread+0x10/0x10 [ 808.458295][ T30] ret_from_fork_asm+0x1a/0x30 [ 808.463090][ T30] [ 808.466550][ T30] Kernel Offset: disabled [ 808.470873][ T30] Rebooting in 86400 seconds..