last executing test programs: 17.253013516s ago: executing program 4 (id=1939): openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 17.127627801s ago: executing program 4 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd29, 0x25dfdbfe, {0x7, r1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x22048084) 16.953205585s ago: executing program 4 (id=1947): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff8d, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="360a000040000000611058000000000095000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x1001, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.707658633s ago: executing program 4 (id=1951): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xf24}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r4, 0x2, 0x30}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x6}}, 0x1, 0xffff, 0x2, 0x2a8, 0x0, 0x3}, 0x9c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xeb3, '\x00', r8, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f00000001c0), &(0x7f0000000280)=r5}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd62, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 16.706277822s ago: executing program 1 (id=1953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4bc}]}, 0x48}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000118c0000b300000086346fe2d499ce9be15b8fc969b2dae3f3e4cc9c41a6976c187350238dfbe3a318e627f79b91fd4c17d1c58300867be2919ba76b08f63c9035b4d4fb3b3e0866d2cc64c5ba805d501900607eb9ae79", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 16.546801216s ago: executing program 1 (id=1958): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@private2, 0x0}, &(0x7f00000000c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000dc0)={0x1144, 0x0, 0xd8dab9a0f0ca5e94, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x208, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "852b7733cacf26d9dc1d42bc9f3e56259389d0aadf3d1a6947a926b78ce5e652"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x190, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1216c2f1b57e282526a5de00bf716b1c0847dd7c4a04df63b8eb1fbd20bb319d"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e337f150aa27ed5a2b8be30fe5028cddbc650ae93e419d16bf82f8233625c182"}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xeb4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}]}, {0x740, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x500, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x7, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x438, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x9}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "87d1304cc001893004aab13190ed5e09136f743fe675bea9a427203452a1beac"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fdd526782d0e3e947cd8495d2736da9e0ecc726fe1b797f7f376377c14f99509"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @empty, 0xffff8000}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d77b41c3966ac31e5c5a031941c03c2cb7daf9e74c1825041396d2f96c64b903"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x40b, @mcast2, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}]}, {0x144, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e056009e9c9d0f062e900028f76dd362a3e6b8fb45bcc0a701880c974478d87d"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9105}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @private0, 0x4}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f35fa8153ccbccc085838b89100cb6105d025f30894f044e1d731a821df675c3"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x1144}, 0x1, 0x0, 0x0, 0x4054}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 16.507724851s ago: executing program 2 (id=1959): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000240)={0x1f, @none}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000300)=0x54) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r6 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x80000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x2}, {0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x44}}, 0x8000) 16.339658299s ago: executing program 0 (id=1961): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000500)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000009"], 0x108}}, 0x0) close(r0) 16.338152498s ago: executing program 2 (id=1962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="a0", 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20000010) 16.258190058s ago: executing program 1 (id=1963): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.157561952s ago: executing program 0 (id=1964): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) 16.059812224s ago: executing program 2 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 16.053330255s ago: executing program 0 (id=1967): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0xb796, 0x7}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1, 0x4, 0x2, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1e8b626b2159e94b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012080007800400010008000640000000830900010073797a30"], 0x110}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 16.007931744s ago: executing program 1 (id=1968): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) (async) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273"], 0x294}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000400ac14140008000200"], 0x2c}}, 0x0) 15.915854873s ago: executing program 0 (id=1969): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="a7d6911b861767a666b0e0a99ebbe6b124e6fa8abd67587a53e754fbda2a57962370b3b11fdb2e5bd04daee46b3019b1fbe4eb27562ede14db08aa44671935b61f10f075d461b1cf914274c5a435e9cd736ed7dde83ea724e20f6469d8f3455f50352c66a9b7efba21db840bf420d2ffeeedd374091a75c4417f993ca7d3a20cf70ba06b47c3612a", 0x88, 0x40040, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @empty, 0x6}, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, 0x0, 0x0) connect$rose(r2, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) 15.915463888s ago: executing program 2 (id=1970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x4810) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xf848}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @generic={0x8, 0x8, 0x6, 0x9, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) 15.91520408s ago: executing program 3 (id=1971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004b9d000008000300", @ANYRES32=r3], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r0, 0xc252d000) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0xfffffffc, 0x5, 0x340, 0x6, 0x100}) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) 15.867487872s ago: executing program 1 (id=1972): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc00000019000100000000000400000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf253600000008000300", @ANYRES32=r7, @ANYBLOB="c943a46a70df3f6b201a58b470681869a468bebe795c8c8353e1af80076d38677adb1ca2c02aca3ae17e9e9a94881633bd219531bc68dfac4584f991f8a3a442535ac1400a23ba7072bb7c3265c783c85c0bab8f605e66d6ab6f62e5b450bd1b4fb3299b77fd9cf329d90186560335b461779f"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="b543000000000000000026000000"], 0x14}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0x0, 0xffffff00, 0x0, 0xffffffff], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xff, 0xff], 0x4e20, 0x4e21, 0x4e23, 0x4e22, 0x9, 0x7, 0x7, 0x47a, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r10 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) getpeername$unix(r10, &(0x7f0000000000), &(0x7f0000000080)=0x6e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002dbd7000ffdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="f8ff767800b50300000500f600080000000500f622400000000600f7000c9d8b60054ea8b8dd3b9ec3c5070000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r12, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x40}}], 0x1, 0x400c404) socket$igmp6(0xa, 0x3, 0x2) 15.855424233s ago: executing program 2 (id=1973): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}, {&(0x7f0000000300)="745695e84a3c9541f0c589329f7b229361d8fcc10f0d94db7b638724a2fdf51de70ac39ae4c48e4d8b3004e991e53aff9d552a2662868e4f51ec56e0b5a4755a1af74ad77bb98ce48880690ecde74b97cab4a9bbba10d0d88dca70ec034394ab0b8d3b9b8026f5242eb0c2a0c810c36022f732b33d28a2d1569f1c5dcbc5129b0546224053b66b20d05c2f0f10aabfc3e98ac74040117f13269aa5b6ad4cbe937b1d822f544cce69ad2125c7335122a243a8b82c504b5f89c3d02b6af784fb81cde95fa3c939431125d316f9ace86cacfee3f6b13ede58ae664430455122f5d95ef9df8d4554248093", 0xe9}, {&(0x7f0000001980)="791fd84b08a042069028c15fc0f305086d48a4dee8bc1d62a798d754beff089f3604c740e75d79c5703d2f300419e086c565078858ca04ad74b3aebdef3e1fa97e7d99621638f2a24b2a67e6a6d054dc8a3405a5039ae046ec0311bf9d5cdd4fb5f1bfa664c580e9fdeb0c28702e9b83e708ec9aa3ed31ed36d49fbefa2561df2c7385ff08649f975f4f87dc6cc1082ea2c225bcf1557f9851f43f7a806440eed5f4d0f3f1a21c6482a43f0a289697deceeb940a210c21ab9425a2eb541148b14e6dc5310f9b6d83cb034423149030cde4a132e25f77e6332a3c3efeca81e79152c4b84302068fa929c12ef0ca375a04621c2edcfada9b928ac85149e586d6fbf0ff420f1a7cd1ec042ce006cfa1ceab9475f6c095295ffa71fbd72c5ddf1de1b3dcf050ef2dea63550b2c7f1bb24f1818111fe84da453a003ef1b6a264b8d051775a507121c96f6cf37014be6325904ce5546361e184d6f67d6692b43e808ceb85d1db5c9286adc24c69aa0c123b6559c57da34fdf9adcb26932cfdedf9603aff0a9b4e73a0ae40fbcbaf1b22824904dc22906c09cbff845bed9d120d70aa9913dcc1c2111b7be21fe0449167d645f6934b4febeb3b79981d0e89c88a91a564c51a825fbecac7dbbb65fd2fb5c5fd4cf5e319d1be4b36eea9c02773d3d731f9dda80255d9912a245ccc0d959ee6deb357645fbd8a2447e26095e1ff4cf9466aaf21df1767c11adca309db78e38a3d8347af92bd2d9cab2639d3958d28f46801fcb71839694e56af45d1859bfd884a1566af5dbd394ed0b49c981c525331abfb0085bd1dcb4456927e5c9d82ae5691de270c4f0401f2aadc4af3b895e58e8fd323a6a14ed6601fdd9829362a1e48f175175c3c0672e68a1175fc1b59a0c9c3ed5a6398c19176bf1e0855c33117ce8025a00792f418784d22f4aa889f5a422cc8817584a7a5fc6e4aafc2d443e3614d35ce1982c55df26167e6309fe1ed4525fbe753f1b3b06b2577832a36f9f626158c6cb1b4254cf0b8feb05b24f85417a42ac07ae221365de2953e319d9435db05d3bb0364f3aa592a7c189c478ef9ded4b4a727585060a689c9879fa00996e3d71556442b0123896caf0145f530892b3c8cf10ce1a2599b1f77297ef6aa1d59c14da32f9977b04f8280ec84cf4f1ce51a9cd91ff35fc4c8f7fa75cb89e789ad360d172f61b7f866d6e05ad0a58309845282dd691c6980d2deae092bfa8736b33a244919673678365b91d97056930a3c2aa55107ad2b335c4adf1da17c360befe2dbfe7a4ce566e516c30e24bfe97da4d3979b450fa411af6e1d5af6f56fd1b346fa1dc8aba2c0f36cd52119ed172ceb300593ebcf4beec7cf862d80d16104a49ac252c287eead5e364c0ab02824f35661159607ff27c6fa31b4c95f76467b9e1b804d50e7eced35e23e83db43ab05e07519b07dc5760e263c495c5d2dae643fd46800f713438cda3ea7d710672b9b3b479c2fd8a3eacbeb642814ff74abf58778326f0ade9fed8f89c93851f1ca814f529ff5a5847309db74de4dfa196d35fb98710039dc7d840bab578f57cbd5e1d018e52ef746c978124279ea3648880e4608993270274a062cf818829eb8237c9eb537db6153d185cee6a1625f0b531c54519155aec5e67a0310e7783af3cf68b6eae360bb981729bc78951faca76e400f83fba4ea4a1097bb8bb911138bdafe618669a1be168203e0d104ff58430c601e604762d0f1413278d8448249d9712bc891f425ea8419656d7c3fa2cde13ff3737c011d29fc189f131d265e52ffd088a7669df6d1f88de85b809101571f260d5216433233432369708e227afb3e1af38a3abcbbf2abc3afb251c1d10e095e51b1c8b44ee4feefda84e9158438f7c8c299b238ac522c14fdd025c7fa982fcd34578c7b9588134c0ab04099588a3d240dd432f72f6161b8b8e66e2a5af86a52e5c243bedf66d2b44bd3f9a6131281e525a322967849d57c3eeb586675d80320074fd22532af283836f02bb0480e8aaf72fe86b301217d7d9ec40212c273907e009dd265c42fb0f393916165c154cae3766a94e40b9bc28e3886cf8309f58fb95f71ab7455eb4e488bc4b24f0ffc259d7d58f6e6ff7fe4600da3906e71d0ebfe7c308b6462b75fe3c70b17472ccd0dc70e31781c53c1d184cfa18465a274b9805431a2aaef6f4b113d58a92f017f31ea38f6bca24c5c43bf8e4c8c7f42e15821e6fe5c72fa33fdb4b2c75ebc4e0cc4ea0b38b375fb7e7367de19ff89943e1949df0fa8a33d81eb071aa0d38b68d0a756097eb4e9a944ed522172b137ac9c171762b4ac435f5afd9d00551646cd44c456b70dd642338b5b592c7d420485b200106feedc748842cb25cedde1feebe9e2de94e69dcc3ea0e424d1a8f1658dc692955aca8ede7ed7024d9584f3fa598ceca3c0798708ae4d3ef7fb2dc3d18c0b5af7db8eec339c2f1761436f6130d6da7a5d9f00d40a80a808a39a1c196114f67629ae64d130dacee79b4bf1044c0789faa876114f370bd0f86e67c2b002913d65c953c7428ba82ec0320a3843437c247799515931faeefbcf6a7285bb792143b1aac37c79057cbd870b50837277045b46c59e26a02a5339267130b3e487b866acd80832960574cc071acd7c0fd081212775ca711000c3648e3d1d5ed306ce8b3a17e42bf9af28c438788cdd2da3e2704cc9692486bb4dbdabaf65b4a4fa45bd1f4840cc910e3afb4ef40c642a953099afd03637e8b15aafe85248dc803b961bb616362161325452ecefd411424aefcaeaa06a8dc1be40e090bb3403ae4df3c4dfd1650438676f800289caf5d3d6e40df0809bfe24647d72ab564d9cd6d709d9fb82ad722506b9a8e13e93c5cd626f9ea5e8273517d251574c865f4e03c7c09707fa4549771467bbc38b00c82771565c20db33e8ac4e266abcf9b8dabc4c390bded60afcce86e63d445a2e24d4cb7546e12f02b9627884601e95afe1f2e447ef5ac3f6298a03e2b31dee7d48fa1062c62eba09804ee9c74550d7bc52e1b1443ba17ca76c1cff6f0e76cc96c78dd5850076720ea1ce450c6b83c6c4195d70853b9233c8c59680ee4a715e76c470f20609a72b81f3428c8dad622c0d0ceebed34ae38fe0dfda263345b703f31b67e80b3d71c094ea0b0a7742a40e618549efe706e14d5417d021183d7e90104a4a7c92b81a96de3b476bf2cada2f060cfa5889e41e5f6e7772aca748977a342e9bc1c1ebb890684a3e64a79ecdb3e7852a5a28023400b3b51396aa53a5e10b52495d54ac3ac874cd522562a5b2bfb9c49ab47cb153fc69201b487d3ecc00691a0b9226b4697dd6df074e2feee0de774785e9c2eb6f8f93d4e93c476cfc6a86b32ef96e4197d0d5456195d3da2284b02d4a8c4ebb9081814c0bf61887775b10ff955ed6bcd4f3d5d8660bfb3e79e8515240ae1837aa3aef88a64a039477d44a379061cbcb01305969efeab915bba2115a4c2959b2e2af5d17f8b65995c830a81ddd6fdffbbfad01f0df9d8ac283d561c6223674465556ec8d9a34ceafba31eb8f292c5f34d04b72dbd21ddec4ede445b5448f39b1015a63704a826740bfe69430a22af239b555975729cc5c909bdf56b46931dc7801efb1c97d93b6288da2c429cf1a2413a29e8e747354773a0ed9e5b9a03c21337d9fccac34c1a6642f7cb58c9b7ec16d31eefa8e8599bb2895199d3ff1156c213616effce5c1f7102d74a444aaf58867d496c5aba73b9493f25cb98a7bee90753bdc1a4d5ac8519766234dd79ea1e86e96c3692e9a3261d4813036cc4cce6ab493dff0a35e4c483f99a70d261db6f4f966adf452002bab222926b53c1cd750258ff75ae36cd19ed70338eb0c6ba2ef876deb2fac01c0fba96c84828acf22aa817766191eef4fac008e1a9cee9ba836eab963f7bad2a6a051767f4a49ffae67f2679810085cc168502263a8b6a74b99e1dd824ea6fdd830ca6dcdf382ef7575d5c89534717e5c1213938efbbe9d756f4e3896dabdd4f4d55ba2ef280e18b6210661f6b55f968c92f5ca1f232f3632f43bca5cdb1417268c80943589b0e52463e0cda0666c3a2ce252a3c9473801b20025b19e612e618c5fc4c314f9cf9fd3f7bd68874cd941518e3975fdaf02e8cf9acb3dafa96c72bc6e03571fe7e78b1b533b6affe4857617712dd5ea4a415e7282d3326abef7f28d3b281d11ef9310dfa26389fa81dd8f4897a78cb0dae3358a18e8f6643cbb793facc05bb4663698ba5d7f08ef373ba3194873057c8418e9a6de7f754d3e8029eb8e25e9e06cdd9cb3e0e025a8eb9d04d63a1725c0b6dbaacb7a6822c00200f316d724f334bef5df00fe7b903a99465c566df8fa16ead0f2cf713482ca86140f081e95e8f4551ef511bbc5a4242374f2a3a48f8c8e7f513a78eaf151d3d2887c74517fd910d468bf6fe4f5962ecd25967f674b6728662bdad85d193564f88f3997bc7d32f97eb06add2b02146368dec21720ed66883dc8e9c3e6995cf7fcbf2db88b9d135ab74f3e0903176b0a5bde2e19219d800dac82664d89842a648d691e31400647732a3c56ca94b8ea2267a4b8e99e689cc1559988994776fa4ea5281924db8a03463b56d1c60054c411b19784cad713e3a88b05d78028f343721dd26d04eec9a33b48d0e6535a725e65f09dcd722a27cdf607899391ac478e19fbecc8aff8643ddbfcd3b2faf1095f7da46ed292eddb5cde402a98cf876b67c0e69a065800da7d7da0baf29d51e89b9ce87663bc09adaf84e2f0c62bfc74299bdff61b92f51a0ed7d77f00a26a528a62dc2e49e4c474e381c67cb45851c177e4d4cafec640d4195aab56a150ad26af6ad676ec4baa500c2db81c26da2b6398ee213cd39873c2dd8e97567f0bca47901256924cbfae56bd378aee823345cd74461f7305ba99b5d309bd92a7ca2e562590d1c8960184e3d08eab2bef57f046574b50c83018ae627c9691f46c8056b0fe4627e779a75e5088b24823256c923e036e7d2453f3cd2e33cb9017202bbc93f327f793eadf32c3b3ee7ca74369278cdc1d5de22a089b4838bc8a176935f536410ff68b346057851518bf325ecbe3e86e9c381dae7e52488fc314d9e4f54f905a9efc89b34ecb055702958960d11cc635d91c1261f2e2f28d1c627fa4a70c211d1538e3cc56a91bdac5b2814b7a0a8d128d62cf442108b7a8a277a67db2d4e2fc112b30216bbf43ea032b9d25128430f1357fe67e0be09344614bad2de19fcf88bc6213df772800515de0d1cf6afd1c1b629ad2079d3f876691a04a5e6729dbfb416cb5f36c0600de3a35986a04e463ba1d200a5f537eb6dd4e3f15091a5a04aabf2a13df510614ebba5f7bb85319b2a7fb0655a0054571ab4002872c2884fd495f4dac3d75914e3be04df764a9afe6f8819116c52ae57937de2ad372d82211af43c116ccc97038098e5512b0b0acef84e73810af10eb5acb506e91f95e1fa7f91f33bde7869236f11ac8ec590de9920278716a8ea1186f40a0d37bddbb447b2b2676e9858b19afe994a6f51151ee9b3a18010193c4bae7f6d799657c3c846a0ab6fb346131fc6596e9cc0f75051e3ba3e2ab328922463cc08bbe1e3a76fb1fccd9ace3a288b89017275212d92a56c86b67b27ea6d59137d728dde0733abc887ff791e4b7cb1122092d0e54a3af28a1c0d00c6a7c3c411f5b8990d6e8182b93ce90930c550aa38be4956a65f0357df2f3cbfcfeac5314e4a38211df86839baac4fd8e53144e5b02a9352e84bb306479f52539c54b85a42ab31d21e6826face847b2785b943586bf3f5819339ab90d9cbfb1577d05358f15bf12ff000000000000000000", 0x1000}, {&(0x7f0000000580)="4468d35267d62b6557f872f4c19200d477ca4927174a0eb508e2091a2b621e795dff0cf22e7a2cedce9b83c2930661ab36accfb2b70d60730d147494fd8b9c2216764487b0b5b4c5028232e91715a1dcbafa0c5b49c165cc5ebd4717e5044821988809a1f220d3526c73ac0f2a068730aa31a43662eb49d000b50af7305f24f20643d4aab3b47a8b28abc2b105c49579da9f6c5f8155279d3f56151ef0573c31f9e9ec0dd5857a46ac79a7f6b9e64c73dda44b7fd450f06cfd8aa9285b7ec8cf15e2c7d605c083bac480d38b07779125b2eb012ed63c802b238727b6e96c481cc94d761218369de7ec304398468f0506af56dfdc75d45365", 0xf8}, {&(0x7f0000000400)="e14983a0b60d5ecf95f053d6c194497f8debe44df239b01ec6bf6dd7099f8d90ddf9a5f6baf197d4a97a9601ec0447f812348567c8398813ec43358f17a72d163c16adb908a63c0170b7fd7f0cb40f9ba0bd8188", 0x54}, {&(0x7f00000008c0)="2381fc4103f0a54f799793c7fc995e4b10d1862e3a9daa8991baef0716f765599ed56a6258dde1c2865dc0d7f50b17e34153464d4515206e4603554f071d123a01bb3045eb6ca6f1971cbfee5798f14b0afb0199c4683e12d2f2d934d2685770d27199", 0x28}, {&(0x7f0000000700)="db526fb847a881878cdfa5df448e37e64496ef2665e0e8d3861016290702261aa39190499025b234085e1d8a501d7841b7e2a5622de58c15f67530199ad0c7b50e3e421cc39d57706d61d485b1070b2a8d1e65c71b060b1fae9e4387610276dfefa29e22", 0xfffffffffffffcee}], 0x7}, 0x4040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="801002000af901010180c200000000000d340338fbd7e84a21bfb86b6baf6bfd1e2adcab6ea7ab10442e45f26493a8c6f3501078da1b200dbdf5263d7ede3af646732491b03fff8ac4cbf121c34d9d29431ae424d6c89cbc01147d"], 0x28}}, 0x0) (async) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r7 = accept4(r2, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) (async) bpf$PROG_LOAD_XDP(0x5, 0xfffffffffffffffd, 0x0) (async) bind$unix(r8, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r8, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) accept4(r8, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x80, 0x11de0cbcd10d27c2) 15.699715766s ago: executing program 4 (id=1974): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xb}, 0x20) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) (async) listen(r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0x6975f000) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x12) r5 = accept4(r3, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000000)=""/35, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000480)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) (async) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0xfffffffffffffffd) (async, rerun: 64) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$pppl2tp(r9, 0x0, 0x0) 15.694494942s ago: executing program 0 (id=1975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a3000c109004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000308000b40000000000900010073797a300000000014000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010094797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008004000a8004000180140000001000010000000000000000000084000a"], 0xc0}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1ffffffffffffd03, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) 15.693883673s ago: executing program 2 (id=1976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x27}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x3c, r4, 0x731, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fcdbdf253800000008000300", @ANYRES32=r8, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x24040990}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r13, 0x913e0000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r14, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r15, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r12, 0x820, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x40050) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r16}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r9], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000000000000008000100010000001f059b9906fb97c4c81b6a2abd32ab8aa1"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.692937169s ago: executing program 3 (id=1977): sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) 15.64781456s ago: executing program 1 (id=1978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x12a, &(0x7f00000005c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0xf4, 0x2b, 0x0, @remote, @local, {[@srh={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51}], {0x0, 0x0, 0xec, 0x0, @gue={{0x1, 0x1, 0x1, 0x1, 0x100, @void}, "88bf35532c261575fbcd4eaece5839b8bad8bed56dbb3b71ed9f869d97043652e8608ccad91d8f6f8fda45318546bc6b357dfec57eb5ac71bd8a070a4025f76ecbfa7f1db6260ce5e4bab835dc7da66be624a4e15a13b59369dfb1eadb5cd65f653f19fd1544dbac4d4614f3312298215ae78d84e1ee45c9ceb4ed019c5830d95678e35b571679c09e34f6f13d4f98ed1f82a865e98a72c6445ca28dfef8439c25ac9069debd52a5b2d13def8eea4b3e1838c45d4ce0c52cfaabb931ddb61d8e716a9359dce89e8a4ca0ae5d5b60759234a2995d25f2cfd69ade446e52bb61aa"}}}}}}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) (async) unshare(0x20000400) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) 15.570261798s ago: executing program 4 (id=1979): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0xfffffffffffffe12) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r4, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 15.511960724s ago: executing program 3 (id=1980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000380)=[{}], 0x1, 0x3f38, &(0x7f00000002c0), 0x8) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 15.496809755s ago: executing program 0 (id=1981): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r1], 0xffe) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = epoll_create(0x9660) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x9, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000002000000020000000000000018110000fb3568927c91d1676074954c70c7b4408091241dbb30768b7cb649f84d02c034178ab4fb51a641a0137f9e14eae8f976dd508ebbfc50e0f7c7bd9c0c757853c9de027227e339b6740850080e9ada5ccc7292433d6535c7857a988cdb556d7485650826977a058245c8192ab644a685124c27a01647eeaf705876b7d490bfe7b25ee6514495", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xf, 0x800, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000001140)=[0xffffffffffffffff], &(0x7f0000001440)=[{0x0, 0x4, 0xc, 0x9}, {0x0, 0x2, 0x10, 0x6}, {0x4, 0x4, 0x1, 0x4}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x3, 0x6, 0x7}, {0x4, 0x4, 0x2, 0x7}, {0x5, 0x2, 0xc, 0x6}, {0x3, 0x4, 0x8, 0xb}, {0x2, 0x5, 0x4, 0xb}, {0x0, 0x5, 0x6}], 0x10, 0x7}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0xf, 0x6, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000001400)={0x80002000}) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000001580)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001500)={0x60, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000000)={r11, 0x5, 0x7}, 0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r12) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x40, r13, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000013c0)=@assoc_value={r9, 0x5}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 15.399305666s ago: executing program 3 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)={0x1000, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x5}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x298, 0x96, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd}, @nested={0x28c, 0x5, 0x0, 0x1, [@nested={0xad, 0xa2, 0x0, 0x1, [@nested={0x4, 0x97}, @nested={0x4, 0x2a}, @nested={0x4, 0xf8}, @typed={0x8, 0x21, 0x0, 0x0, @fd}, @nested={0x4, 0x78}, @generic="a9e2061f8195bbef94630938d449da785144ae662d74665df998c216589f2286abdab080d6a704623499f5bc7b9c39cbc9e75b4e8de879babcb40cfe3b71eabbd4169f8aae561f71e74928e48233105ec0a0bae8b558481e8301d7341a5f48def1413b737de8cb0a9b6e1a629a48371e10a46a773546de6c0341a24d7d0aa75ccacf20c1cf59e1d1edb7ff983c", @typed={0x4, 0x9a}]}, @nested={0x1cd, 0x12f, 0x0, 0x1, [@generic="bd4008381ec362fc3187ef9ecf1827dd", @generic="6272be66bf9b0e723ad196d0d2fb007cf8b2f3848c364a329eab659d6cba7bc3e16ad11e1f4787078711f87196340ccc1be226af7a625ceb8f8cb14fb17f1d75ec4b7ef40631952ffb10f6bc7688559f4055f1fd9e27f3573f8b7b0dbd9825b5d5dcb07f00ca0404361b74cf71e39462c710f34f75ab102002fd61ce21d4d38e232f5546c906be0a56b600a7efee2db0bfb2219dfbc5a811fc77c4c17da573a7e1e5c4af0464e6de0c3f92ad08b26f7e8e0415f85b99ceb1f22fedefca7f66523b820bade38470086ee4b5bba5fa34ed4a39", @generic="36aac3f720cdf63849bea5c77fb2fd9d0d25223c1798bc040fff348b39364c5c5bcddce0f07b5ad9f4be2c8ace38b99ef2f5fc1589a8e39cd5dac988533bbf04e7e6a90f0fa57676ff8ae69ec9bc4e2818390cc75a", @typed={0x4, 0x1a}, @generic="23ca067aa6f5a10b17cc9785553b4bcb2d9f95d151dae04eed94af841c47b0d8666c0d3bd71297f4c593c5dbd98ac72b5f743b9928cc3b5f00a8b034a18cad82df528ce7e6", @nested={0x4, 0x18}, @generic="2df793f1ed5812cebf7c9810b7de33b658eb", @generic="4c0d9bf6f6b75547133815615e7fa0229832cf8f5e4a2e0fdbbcfdbece67a7aeab892895484ead890ff3279e4024156d1f26a5"]}, @typed={0x8, 0x18, 0x0, 0x0, @fd=r2}]}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x1000}, 0x1, 0x0, 0x0, 0x8054}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a051dfcffff0000000000020000000900010073797a30000000000900020073797a300000000058000000160a01040000000000000000020000022c00038018000380140001007465616d5f736c6176655f3000000000080001400000000008000240000000050900020073797a30000000000900010073797a3000000000140000001100010000000000000000000100000a"], 0xac}}, 0x0) 15.247807572s ago: executing program 3 (id=1983): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r8) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r10, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r12, @ANYBLOB="08001180040807200a000600d21eb68500010000"], 0x30}}, 0x0) r13 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r13, &(0x7f0000000300)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5f1a02763bc9ed3813932ad1bfad3f4", 0x14}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004086) (async) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000740)) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r15) sendmsg$IEEE802154_ADD_IFACE(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879350000000005002000000000000c0005000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r13, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xe}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x7, 0x7, 0x2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x40, 0xc2f, 0xe35d}}) 15.237282959s ago: executing program 3 (id=1984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf24270000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x46c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x0, 0xfff2}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x43c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x6, 0xf, 0x9, 0x100, 0x0, 0x8, 0xa6c7, 0x3, 0x1ff, 0x8, 0xfffffff3, 0xca, 0x0, 0x8, 0x3, 0x6, 0x408d01, 0x6, 0x3ff, 0x40003, 0x86, 0x8, 0x2, 0x7, 0x3, 0x5, 0xe4, 0x2, 0x1, 0x1, 0x81, 0x9, 0x2, 0x1, 0x5, 0x7, 0x9, 0x1, 0x7, 0xcf, 0x5, 0x9013, 0x5af92476, 0x9, 0x6b98, 0xce, 0xb, 0xffffffec, 0xffffffff, 0x10000, 0x3, 0xfffffffe, 0x4, 0x1, 0x5, 0x0, 0x5, 0xd, 0x40000000, 0x8, 0x1, 0x29, 0x7, 0x4e, 0x8, 0x912, 0x0, 0x7fffffff, 0x2, 0x4d4bcec6, 0x1, 0x5, 0xffffffff, 0x2, 0xfff, 0x61d1, 0x5, 0x6, 0x7fffffff, 0xfff, 0x40, 0x3ca9, 0x80000001, 0x1, 0x4, 0x6, 0x9, 0x80000001, 0x7f, 0x2, 0x4, 0x4, 0x58f9, 0x5, 0x401, 0x5, 0x6, 0xa937, 0x9, 0x81, 0x4, 0x5, 0x9, 0x4f07, 0x401, 0x10, 0x6, 0x3ff, 0xffff, 0x9, 0x12001, 0x7d, 0x7b, 0xfcdb315, 0x1, 0xe02, 0x4941, 0x8, 0x10000, 0x3, 0x5, 0x7, 0x7, 0x6, 0x1, 0xfffffffb, 0x1e2, 0x5, 0x80, 0x5, 0x5, 0xb, 0x6ae, 0xa, 0x6, 0xc63, 0xb, 0x7fff, 0x2, 0x7, 0x6, 0x7, 0x81, 0xffff, 0x6, 0x5, 0x4, 0x6, 0x2, 0x7ff, 0x6, 0xffffff8c, 0xa, 0xa85, 0x4, 0xd480, 0x2, 0x40, 0x3ff, 0x2, 0x1, 0xc5, 0x1, 0x9, 0x3, 0x6, 0xe, 0x7fffffff, 0x7d14, 0x0, 0x4, 0x6, 0xff, 0x10001, 0x5, 0xfffffffe, 0x1737, 0x6fb8, 0x9, 0x1, 0x1, 0x4, 0x5, 0x7, 0x2, 0x7ec, 0x5, 0x80, 0xd553, 0x4, 0x81, 0x7, 0xfff, 0xa38, 0x401, 0x7, 0x4, 0x51c9, 0x7ff, 0x8, 0x3, 0x3, 0xffffff9c, 0x401, 0xe40, 0x886, 0x5, 0xa4, 0x892, 0x5, 0x1, 0xad8, 0x2, 0x9, 0x4, 0xffff, 0x5e2, 0x4, 0xfff, 0x3e, 0xc, 0x7fff, 0x29c, 0xd972, 0x4, 0xfff, 0x2, 0x2, 0x8, 0xff, 0x0, 0x118, 0x100, 0xe1, 0x0, 0x9, 0x6, 0x7, 0xe0, 0x8, 0x0, 0x4, 0x400, 0x7c5, 0x8, 0xe4, 0x8, 0x1, 0x0, 0x9, 0x8, 0x1, 0x8, 0x7, 0x8]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3}]}}]}, 0x46c}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6eed00000001090400e4c58d2d6ce24fe614feff1302000000b90c321855ff6ed94320cd531dc84ab1c278133740ab2cd3da334325c79189dfe8b244f96041e93981946f23faef1fcbf47d7fed034d5f515075f35e86232c7bb348d4352a64482e3146741aaf22ea6bcef91e60d6baef467256552f814ea9209bf3d57861c45280c71430ab4d"], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'dummy0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) 201.066296ms ago: executing program 32 (id=1981): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r1], 0xffe) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = epoll_create(0x9660) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x9, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000002000000020000000000000018110000fb3568927c91d1676074954c70c7b4408091241dbb30768b7cb649f84d02c034178ab4fb51a641a0137f9e14eae8f976dd508ebbfc50e0f7c7bd9c0c757853c9de027227e339b6740850080e9ada5ccc7292433d6535c7857a988cdb556d7485650826977a058245c8192ab644a685124c27a01647eeaf705876b7d490bfe7b25ee6514495", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xf, 0x800, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000001140)=[0xffffffffffffffff], &(0x7f0000001440)=[{0x0, 0x4, 0xc, 0x9}, {0x0, 0x2, 0x10, 0x6}, {0x4, 0x4, 0x1, 0x4}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x3, 0x6, 0x7}, {0x4, 0x4, 0x2, 0x7}, {0x5, 0x2, 0xc, 0x6}, {0x3, 0x4, 0x8, 0xb}, {0x2, 0x5, 0x4, 0xb}, {0x0, 0x5, 0x6}], 0x10, 0x7}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0xf, 0x6, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000001400)={0x80002000}) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000001580)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001500)={0x60, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000000)={r11, 0x5, 0x7}, 0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r12) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x40, r13, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000013c0)=@assoc_value={r9, 0x5}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 166.095435ms ago: executing program 33 (id=1978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x12a, &(0x7f00000005c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0xf4, 0x2b, 0x0, @remote, @local, {[@srh={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51}], {0x0, 0x0, 0xec, 0x0, @gue={{0x1, 0x1, 0x1, 0x1, 0x100, @void}, "88bf35532c261575fbcd4eaece5839b8bad8bed56dbb3b71ed9f869d97043652e8608ccad91d8f6f8fda45318546bc6b357dfec57eb5ac71bd8a070a4025f76ecbfa7f1db6260ce5e4bab835dc7da66be624a4e15a13b59369dfb1eadb5cd65f653f19fd1544dbac4d4614f3312298215ae78d84e1ee45c9ceb4ed019c5830d95678e35b571679c09e34f6f13d4f98ed1f82a865e98a72c6445ca28dfef8439c25ac9069debd52a5b2d13def8eea4b3e1838c45d4ce0c52cfaabb931ddb61d8e716a9359dce89e8a4ca0ae5d5b60759234a2995d25f2cfd69ade446e52bb61aa"}}}}}}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) (async) unshare(0x20000400) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) 121.53938ms ago: executing program 34 (id=1976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x27}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x3c, r4, 0x731, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fcdbdf253800000008000300", @ANYRES32=r8, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x24040990}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r13, 0x913e0000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r14, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r15, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r12, 0x820, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x40050) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r16}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r9], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000000000000008000100010000001f059b9906fb97c4c81b6a2abd32ab8aa1"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 58.277094ms ago: executing program 35 (id=1984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf24270000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x46c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x0, 0xfff2}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x43c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x6, 0xf, 0x9, 0x100, 0x0, 0x8, 0xa6c7, 0x3, 0x1ff, 0x8, 0xfffffff3, 0xca, 0x0, 0x8, 0x3, 0x6, 0x408d01, 0x6, 0x3ff, 0x40003, 0x86, 0x8, 0x2, 0x7, 0x3, 0x5, 0xe4, 0x2, 0x1, 0x1, 0x81, 0x9, 0x2, 0x1, 0x5, 0x7, 0x9, 0x1, 0x7, 0xcf, 0x5, 0x9013, 0x5af92476, 0x9, 0x6b98, 0xce, 0xb, 0xffffffec, 0xffffffff, 0x10000, 0x3, 0xfffffffe, 0x4, 0x1, 0x5, 0x0, 0x5, 0xd, 0x40000000, 0x8, 0x1, 0x29, 0x7, 0x4e, 0x8, 0x912, 0x0, 0x7fffffff, 0x2, 0x4d4bcec6, 0x1, 0x5, 0xffffffff, 0x2, 0xfff, 0x61d1, 0x5, 0x6, 0x7fffffff, 0xfff, 0x40, 0x3ca9, 0x80000001, 0x1, 0x4, 0x6, 0x9, 0x80000001, 0x7f, 0x2, 0x4, 0x4, 0x58f9, 0x5, 0x401, 0x5, 0x6, 0xa937, 0x9, 0x81, 0x4, 0x5, 0x9, 0x4f07, 0x401, 0x10, 0x6, 0x3ff, 0xffff, 0x9, 0x12001, 0x7d, 0x7b, 0xfcdb315, 0x1, 0xe02, 0x4941, 0x8, 0x10000, 0x3, 0x5, 0x7, 0x7, 0x6, 0x1, 0xfffffffb, 0x1e2, 0x5, 0x80, 0x5, 0x5, 0xb, 0x6ae, 0xa, 0x6, 0xc63, 0xb, 0x7fff, 0x2, 0x7, 0x6, 0x7, 0x81, 0xffff, 0x6, 0x5, 0x4, 0x6, 0x2, 0x7ff, 0x6, 0xffffff8c, 0xa, 0xa85, 0x4, 0xd480, 0x2, 0x40, 0x3ff, 0x2, 0x1, 0xc5, 0x1, 0x9, 0x3, 0x6, 0xe, 0x7fffffff, 0x7d14, 0x0, 0x4, 0x6, 0xff, 0x10001, 0x5, 0xfffffffe, 0x1737, 0x6fb8, 0x9, 0x1, 0x1, 0x4, 0x5, 0x7, 0x2, 0x7ec, 0x5, 0x80, 0xd553, 0x4, 0x81, 0x7, 0xfff, 0xa38, 0x401, 0x7, 0x4, 0x51c9, 0x7ff, 0x8, 0x3, 0x3, 0xffffff9c, 0x401, 0xe40, 0x886, 0x5, 0xa4, 0x892, 0x5, 0x1, 0xad8, 0x2, 0x9, 0x4, 0xffff, 0x5e2, 0x4, 0xfff, 0x3e, 0xc, 0x7fff, 0x29c, 0xd972, 0x4, 0xfff, 0x2, 0x2, 0x8, 0xff, 0x0, 0x118, 0x100, 0xe1, 0x0, 0x9, 0x6, 0x7, 0xe0, 0x8, 0x0, 0x4, 0x400, 0x7c5, 0x8, 0xe4, 0x8, 0x1, 0x0, 0x9, 0x8, 0x1, 0x8, 0x7, 0x8]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3}]}}]}, 0x46c}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6eed00000001090400e4c58d2d6ce24fe614feff1302000000b90c321855ff6ed94320cd531dc84ab1c278133740ab2cd3da334325c79189dfe8b244f96041e93981946f23faef1fcbf47d7fed034d5f515075f35e86232c7bb348d4352a64482e3146741aaf22ea6bcef91e60d6baef467256552f814ea9209bf3d57861c45280c71430ab4d"], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x7a, 0x0, &(0x7f00000000c0)) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'dummy0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) 0s ago: executing program 36 (id=1979): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0xfffffffffffffe12) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r4, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 4.920004][ T7978] netlink: 'syz.1.542': attribute type 11 has an invalid length. [ 144.928103][ T7978] netlink: 'syz.1.542': attribute type 12 has an invalid length. [ 144.939202][ T7978] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.542'. [ 144.967549][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 145.131439][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 145.202670][ T7992] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 145.526123][ T7990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.546479][ T7990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.572478][ T7990] bond0 (unregistering): Released all slaves [ 145.723387][ T7992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.782974][ T8002] bond1: (slave geneve2): making interface the new active one [ 145.833106][ T8002] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 146.029864][ T8030] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 146.037693][ T8030] netlink: 280 bytes leftover after parsing attributes in process `syz.0.553'. [ 146.174427][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 146.208431][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 146.520956][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 146.676783][ T8064] can: request_module (can-proto-0) failed. [ 146.988462][ T8092] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 147.084404][ T8092] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 147.096773][ T8093] Illegal XDP return value 16128 on prog (id 75) dev lo, expect packet loss! [ 147.118454][ T8092] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 147.266173][ T8100] netlink: 'syz.4.570': attribute type 3 has an invalid length. [ 147.354281][ T8104] Cannot find add_set index 0 as target [ 147.488063][ T8110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.571'. [ 147.777143][ T8117] nbd1: detected capacity change from 0 to 127 [ 147.789997][ T8120] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 147.903678][ T5840] block nbd1: Receive control failed (result -104) [ 149.033291][ T8182] validate_nla: 1 callbacks suppressed [ 149.033314][ T8182] netlink: 'syz.0.589': attribute type 12 has an invalid length. [ 149.069988][ T8181] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 149.619944][ T8210] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 149.820527][ T8210] bond3: entered promiscuous mode [ 149.847046][ T8210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.988538][ T8219] bond3: (slave bridge1): making interface the new active one [ 150.002358][ T8219] bridge1: entered promiscuous mode [ 150.016045][ T8219] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 150.025913][ T8220] tipc: Started in network mode [ 150.054469][ T8220] tipc: Node identity , cluster identity 4711 [ 150.081185][ T8220] tipc: Failed to obtain node identity [ 150.103109][ T8220] tipc: Enabling of bearer rejected, failed to enable media [ 150.141090][ T8235] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 150.157131][ T8235] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 150.549382][ T8252] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.827163][ T8269] __nla_validate_parse: 11 callbacks suppressed [ 150.827192][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 150.843968][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 151.169862][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 151.177771][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 151.186347][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 151.196236][ T8286] block nbd1: Dead connection, failed to find a fallback [ 151.208144][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 151.216446][ T8286] block nbd1: shutting down sockets [ 151.223598][ T8286] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.234871][ T8286] Buffer I/O error on dev nbd1, logical block 1, async page read [ 151.244285][ T8286] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.255287][ T8286] Buffer I/O error on dev nbd1, logical block 0, async page read [ 151.263774][ T8286] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.273860][ T8286] Buffer I/O error on dev nbd1, logical block 3, async page read [ 151.282528][ T8286] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.295234][ T8286] Buffer I/O error on dev nbd1, logical block 2, async page read [ 151.304785][ T6036] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.316607][ T6036] Buffer I/O error on dev nbd1, logical block 0, async page read [ 151.324928][ T6036] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.335861][ T6036] Buffer I/O error on dev nbd1, logical block 1, async page read [ 151.344198][ T6036] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.354806][ T6036] Buffer I/O error on dev nbd1, logical block 2, async page read [ 151.363333][ T6036] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.373532][ T6036] Buffer I/O error on dev nbd1, logical block 3, async page read [ 151.381784][ T6036] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.392439][ T6036] Buffer I/O error on dev nbd1, logical block 0, async page read [ 151.401544][ T6036] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 151.412580][ T6036] Buffer I/O error on dev nbd1, logical block 1, async page read [ 151.421639][ T6036] ldm_validate_partition_table(): Disk read failed. [ 151.431163][ T6036] Dev nbd1: unable to read RDB block 0 [ 151.438331][ T6036] nbd1: unable to read partition table [ 151.444621][ T8289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.611'. [ 151.472178][ T6036] ldm_validate_partition_table(): Disk read failed. [ 151.498357][ T6036] Dev nbd1: unable to read RDB block 0 [ 151.529566][ T6036] nbd1: unable to read partition table [ 151.915541][ T8325] netlink: 'syz.0.612': attribute type 25 has an invalid length. [ 152.179985][ T8333] netlink: 60 bytes leftover after parsing attributes in process `syz.4.613'. [ 152.964511][ T8355] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 153.028841][ T8355] netlink: 2 bytes leftover after parsing attributes in process `syz.3.618'. [ 153.040436][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 153.090447][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 153.156667][ T8355] team0: entered promiscuous mode [ 153.221806][ T8355] team_slave_0: entered promiscuous mode [ 153.245687][ T8355] team_slave_1: entered promiscuous mode [ 153.311046][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 153.634306][ T8388] netlink: 'syz.2.627': attribute type 58 has an invalid length. [ 153.682495][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 153.831072][ T8399] netlink: 'syz.4.629': attribute type 2 has an invalid length. [ 154.110124][ T8408] macvtap0: Device is already in use. [ 154.333464][ T8418] gtp0: entered promiscuous mode [ 154.446446][ T8430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.727725][ T8441] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 154.752174][ T8441] netlink: 228 bytes leftover after parsing attributes in process `syz.1.639'. [ 155.055392][ T8447] syzkaller1: entered promiscuous mode [ 155.079229][ T8447] syzkaller1: entered allmulticast mode [ 155.381862][ T8469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.559922][ T8478] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 155.579141][ T8478] Bluetooth: MGMT ver 1.23 [ 155.617182][ T8482] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 155.842813][ T8491] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 155.850463][ T8491] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 155.880838][ T8487] openvswitch: netlink: Invalid VLAN frame [ 155.896245][ T8495] __nla_validate_parse: 1 callbacks suppressed [ 155.896266][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 156.046181][ T8500] netlink: 'syz.2.656': attribute type 21 has an invalid length. [ 156.091786][ T8500] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 156.103210][ T8503] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 156.255600][ T8503] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 156.315589][ T8503] nbd: illegal input index 2958377 [ 156.402671][ T8513] pimreg: entered allmulticast mode [ 156.653857][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 157.262815][ T8550] Cannot find add_set index 0 as target [ 157.554696][ T8562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 157.731177][ T8567] macvlan0: entered promiscuous mode [ 157.868736][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.677'. [ 158.032485][ T8578] openvswitch: netlink: Flow key attribute not present in set flow. [ 158.364725][ T8595] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 158.450887][ T8594] tipc: Started in network mode [ 158.459133][ T8594] tipc: Node identity 9ec756d7570a, cluster identity 4711 [ 158.482080][ T8594] tipc: Enabled bearer , priority 0 [ 158.722954][ T8594] syzkaller0: entered promiscuous mode [ 158.730741][ T8594] syzkaller0: entered allmulticast mode [ 158.737403][ T8594] tipc: Resetting bearer [ 158.753419][ T8605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.690'. [ 158.820222][ T8592] tipc: Resetting bearer [ 159.068793][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'. [ 159.081873][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'. [ 160.271887][ T8592] tipc: Disabling bearer [ 160.525970][ T7122] tipc: Node number set to 3385677527 [ 171.409457][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 60 seconds [ 171.420309][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 60 seconds [ 171.431317][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 60 seconds [ 171.442396][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 60 seconds [ 173.406144][ T5197] udevd[5197]: worker [6060] /devices/virtual/block/nbd0 is taking a long time [ 189.177530][ T8657] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.253011][ T8668] Bluetooth: MGMT ver 1.23 [ 189.474120][ T8679] ip6gre1: entered promiscuous mode [ 189.490001][ T8679] ip6gre1: entered allmulticast mode [ 189.739481][ T8694] 8021q: VLANs not supported on sit0 [ 189.769824][ T8696] netlink: 64 bytes leftover after parsing attributes in process `syz.4.718'. [ 189.924776][ T8702] veth1_macvtap: left promiscuous mode [ 189.937309][ T8702] macsec0: entered promiscuous mode [ 189.943890][ T8702] macsec0: entered allmulticast mode [ 189.961911][ T8702] veth1_macvtap: entered promiscuous mode [ 189.977853][ T8702] veth1_macvtap: entered allmulticast mode [ 190.017564][ T8702] macsec0: left promiscuous mode [ 190.040944][ T8702] macsec0: left allmulticast mode [ 190.046262][ T8702] veth1_macvtap: left allmulticast mode [ 190.052375][ T8710] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 190.302913][ T8704] bond4: option miimon: invalid value (18446744073709551585) [ 190.311187][ T8704] bond4: option miimon: allowed values 0 - 2147483647 [ 190.341180][ T8704] bond4 (unregistering): Released all slaves [ 190.438389][ T8723] netlink: 128 bytes leftover after parsing attributes in process `syz.2.726'. [ 190.466498][ T8723] netlink: 128 bytes leftover after parsing attributes in process `syz.2.726'. [ 190.496684][ T8726] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.725'. [ 190.573109][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 190.730907][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.728'. [ 190.776556][ T8750] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 190.817006][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 191.356761][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.738'. [ 191.827292][ T8798] ipt_rpfilter: unknown options [ 191.934974][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 191.945793][ T8805] netlink: 68 bytes leftover after parsing attributes in process `syz.3.745'. [ 191.962437][ T8807] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 192.084248][ T8812] syz.4.747 uses old SIOCAX25GETINFO [ 192.194210][ T8812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.487314][ T8823] openvswitch: netlink: IP tunnel dst address not specified [ 192.623922][ T8835] netlink: 'syz.4.755': attribute type 5 has an invalid length. [ 193.020407][ T8849] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 193.060507][ T8856] netlink: 'syz.3.761': attribute type 15 has an invalid length. [ 193.884980][ T8894] syzkaller0: entered promiscuous mode [ 193.891128][ T8894] syzkaller0: entered allmulticast mode [ 193.960454][ T8894] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.620374][ T8996] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:20003 [ 196.732050][ T9002] pim6reg1: entered promiscuous mode [ 196.737423][ T9002] pim6reg1: entered allmulticast mode [ 197.105557][ T7515] IPVS: starting estimator thread 0... [ 197.194099][ T9021] netlink: 'syz.4.808': attribute type 11 has an invalid length. [ 197.204235][ T9018] IPVS: using max 26 ests per chain, 62400 per kthread [ 197.218307][ T9021] netlink: 'syz.4.808': attribute type 11 has an invalid length. [ 197.239420][ T9021] __nla_validate_parse: 5 callbacks suppressed [ 197.239437][ T9021] netlink: 224 bytes leftover after parsing attributes in process `syz.4.808'. [ 197.621641][ T9038] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 197.635241][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 197.650995][ T9039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.673832][ T9038] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 197.702416][ T9038] netlink: 228 bytes leftover after parsing attributes in process `syz.3.813'. [ 197.791171][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 197.874813][ T9055] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.815'. [ 197.912828][ T9055] openvswitch: netlink: Message has 6 unknown bytes. [ 197.932936][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 198.252631][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.818'. [ 198.281247][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 198.450912][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.820'. [ 198.520193][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 199.184336][ T9115] hsr_slave_1 (unregistering): left promiscuous mode [ 199.245383][ T9119] tipc: Enabled bearer , priority 0 [ 199.276136][ T9124] syzkaller0: entered promiscuous mode [ 199.295706][ T9124] syzkaller0: entered allmulticast mode [ 199.354337][ T9114] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 199.414270][ T9116] tipc: Resetting bearer [ 199.449727][ T9114] netlink: 'syz.0.829': attribute type 11 has an invalid length. [ 199.458790][ T9114] netlink: 'syz.0.829': attribute type 11 has an invalid length. [ 199.540400][ T9113] tipc: Resetting bearer [ 199.575494][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.584251][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 199.630911][ T9113] tipc: Disabling bearer [ 199.920329][ T9146] netlink: 'syz.0.839': attribute type 2 has an invalid length. [ 200.714712][ T9192] netlink: 'syz.3.854': attribute type 23 has an invalid length. [ 201.005095][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.028921][ T9202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.039520][ T9205] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 201.048093][ T9202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.048140][ T9202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.100053][ T9205] netlink: 'syz.3.859': attribute type 2 has an invalid length. [ 201.409809][ T9225] netlink: 'syz.2.864': attribute type 7 has an invalid length. [ 201.443022][ T9225] netlink: 'syz.2.864': attribute type 8 has an invalid length. [ 201.495250][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 90 seconds [ 201.506244][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 90 seconds [ 201.518362][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 90 seconds [ 201.530601][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 90 seconds [ 201.563349][ T9225] gretap0: entered promiscuous mode [ 201.624506][ T9225] batadv_slave_1: entered promiscuous mode [ 201.657594][ T9235] netlink: 'syz.0.868': attribute type 5 has an invalid length. [ 201.671099][ T9225] gretap0: left promiscuous mode [ 201.695857][ T9225] batadv_slave_1: left promiscuous mode [ 201.820678][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.855733][ T9247] : renamed from bond0 (while UP) [ 202.122853][ T9266] xt_hashlimit: size too large, truncated to 1048576 [ 202.684846][ T7150] IPVS: starting estimator thread 0... [ 202.799159][ T9287] IPVS: using max 31 ests per chain, 74400 per kthread [ 203.033381][ T9298] bridge3: entered promiscuous mode [ 203.050568][ T9298] bridge3: entered allmulticast mode [ 203.058835][ T9302] __nla_validate_parse: 11 callbacks suppressed [ 203.058902][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'. [ 203.211901][ T9309] veth0_to_bond: entered allmulticast mode [ 203.296186][ T9315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.333590][ T9315] netlink: 52 bytes leftover after parsing attributes in process `syz.0.893'. [ 203.367710][ T9315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.893'. [ 203.412310][ T9315] netlink: 52 bytes leftover after parsing attributes in process `syz.0.893'. [ 203.634501][ T9323] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 203.643925][ T9335] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 203.723384][ T9341] ip6t_srh: unknown srh match flags 5F28 [ 204.047068][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'. [ 204.075094][ T9355] tipc: Failed to remove unknown binding: 66,0,0/608450932:1965965761/1965965762 [ 204.119124][ T9355] tipc: Failed to remove unknown binding: 66,0,0/608450932:1965965761/1965965762 [ 204.143872][ T9365] syzkaller0: entered promiscuous mode [ 204.151249][ T9365] syzkaller0: entered allmulticast mode [ 204.196968][ T9356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.213938][ T9371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.227755][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 204.388063][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.910'. [ 204.402650][ T9365] hsr_slave_1 (unregistering): left promiscuous mode [ 204.665944][ T9394] netlink: 32 bytes leftover after parsing attributes in process `syz.1.914'. [ 204.685445][ T9391] bridge4: entered promiscuous mode [ 204.692618][ T9391] bridge4: entered allmulticast mode [ 204.956499][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 205.095718][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 205.324552][ T9435] netlink: 'syz.4.923': attribute type 8 has an invalid length. [ 206.878697][ T9484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.896292][ T9505] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 207.109242][ T9514] netlink: 'syz.0.951': attribute type 21 has an invalid length. [ 207.140653][ T9484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.169757][ T9514] netlink: 'syz.0.951': attribute type 3 has an invalid length. [ 207.187926][ T9514] netlink: 'syz.0.951': attribute type 2 has an invalid length. [ 207.230604][ T9518] netlink: 'syz.0.951': attribute type 21 has an invalid length. [ 207.333746][ T9484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.483456][ T9484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.814799][ T5985] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.884463][ T6145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.944540][ T179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.096104][ T6145] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.122693][ T9557] __nla_validate_parse: 12 callbacks suppressed [ 208.122712][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 208.133463][ T9559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.198541][ T9559] netlink: 576 bytes leftover after parsing attributes in process `syz.4.967'. [ 208.396892][ T9569] IPVS: nq: FWM 3 0x00000003 - no destination available [ 208.540173][ T9574] bond4: Unable to set up delay as MII monitoring is disabled [ 208.593236][ T9574] bond4 (unregistering): Released all slaves [ 208.694850][ T9582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.714659][ T9582] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.724976][ T9582] gretap1: entered promiscuous mode [ 208.733434][ T9582] gretap1: entered allmulticast mode [ 208.911676][ T1035] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 208.937994][ T9595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.018211][ T9592] team_slave_0: left promiscuous mode [ 209.037101][ T9592] team0 (unregistering): Port device team_slave_0 removed [ 209.045957][ T9592] team_slave_1: left promiscuous mode [ 209.084404][ T9592] team0 (unregistering): Port device team_slave_1 removed [ 209.412859][ T5840] Bluetooth: hci4: link tx timeout [ 209.423278][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.434314][ T5840] Bluetooth: hci4: link tx timeout [ 209.439678][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.448156][ T5840] Bluetooth: hci4: link tx timeout [ 209.453739][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.461975][ T5840] Bluetooth: hci4: link tx timeout [ 209.467145][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.478117][ T5840] Bluetooth: hci4: link tx timeout [ 209.483899][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.491926][ T5840] Bluetooth: hci4: link tx timeout [ 209.497088][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.505104][ T5840] Bluetooth: hci4: link tx timeout [ 209.510404][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.518218][ T5840] Bluetooth: hci4: link tx timeout [ 209.524896][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.614524][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.986'. [ 210.127330][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.994'. [ 210.321412][ T9658] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 210.329524][ T9661] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 210.381543][ T9661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.402272][ T9665] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1000'. [ 210.533131][ T9666] bond1: (slave veth7): Enslaving as an active interface with a down link [ 210.715030][ T9677] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 211.465354][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 211.490527][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 211.636063][ T9719] syzkaller0: entered promiscuous mode [ 211.642432][ T9719] syzkaller0: entered allmulticast mode [ 211.857265][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 211.894684][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.894711][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 211.894723][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 213.556453][ T9744] tipc: Enabled bearer , priority 0 [ 213.577907][ T9747] syzkaller0: entered promiscuous mode [ 213.600968][ T9747] syzkaller0: entered allmulticast mode [ 213.641320][ T9758] tipc: Resetting bearer [ 213.657500][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 213.749369][ T9742] tipc: Resetting bearer [ 213.798602][ T9772] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 213.967085][ T9742] tipc: Disabling bearer [ 214.019928][ T9779] erspan0: entered promiscuous mode [ 214.155587][ T9794] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.164016][ T9796] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.654065][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 214.667633][ T9819] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 214.698004][ T9819] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1035'. [ 214.771588][ T9819] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1035'. [ 214.785963][ T9828] IPv6: addrconf: prefix option has invalid lifetime [ 215.462735][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 215.509314][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 215.847660][ T9875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.918766][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 215.924813][ T9879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1050'. [ 215.945892][ T9876] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 215.968280][ T9876] netlink: 'syz.1.1051': attribute type 11 has an invalid length. [ 216.016927][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 216.026176][ T9876] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1051'. [ 216.264493][ T9893] bond2: invalid ARP target 0.0.0.0 specified for addition [ 216.284026][ T9893] bond2: option arp_ip_target: invalid value (0) [ 216.350074][ T9893] bond2 (unregistering): Released all slaves [ 216.391919][ T9897] sctp: [Deprecated]: syz.4.1061 (pid 9897) Use of int in maxseg socket option. [ 216.391919][ T9897] Use struct sctp_assoc_value instead [ 216.439327][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 216.499129][ T9909] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 216.519372][ T9909] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 216.545647][ T9910] IPVS: set_ctl: invalid protocol: 103 172.20.20.45:20000 [ 216.566889][ T9910] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 217.156639][ T9939] 8021q: VLANs not supported on ip6tnl0 [ 217.535960][ T9960] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 217.549981][ T9963] veth1_to_bond: entered allmulticast mode [ 217.644583][ T9963] bond0: (slave bond_slave_1): Releasing backup interface [ 217.741224][ T9963] veth1_to_bond (unregistering): left allmulticast mode [ 217.877436][ T9980] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 218.118374][ T9999] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 218.205697][T10007] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 218.282579][T10011] netlink: 'syz.4.1092': attribute type 11 has an invalid length. [ 218.299544][T10011] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 218.448594][T10019] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 218.706592][T10028] netlink: 'syz.2.1101': attribute type 39 has an invalid length. [ 219.485597][T10083] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 219.700775][T10092] __nla_validate_parse: 12 callbacks suppressed [ 219.700796][T10092] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1117'. [ 219.725975][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 219.751189][T10096] netlink: 'syz.3.1116': attribute type 9 has an invalid length. [ 219.767922][T10097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1117'. [ 219.919121][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 220.740585][T10117] macvlan0: entered promiscuous mode [ 220.779982][T10119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1127'. [ 220.899350][T10132] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 220.986142][T10137] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1130'. [ 221.023425][T10142] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1131'. [ 221.559942][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 221.773853][T10195] netlink: 'syz.4.1143': attribute type 12 has an invalid length. [ 221.825763][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 221.862701][T10199] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1144'. [ 221.943963][T10207] xt_connbytes: Forcing CT accounting to be enabled [ 222.017259][T10211] SET target dimension over the limit! [ 222.228616][T10228] openvswitch: netlink: IP tunnel dst address not specified [ 222.263426][T10230] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.384034][T10244] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 222.432540][T10244] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 222.616467][T10257] netem: change failed [ 222.703171][T10272] netlink: 'syz.3.1164': attribute type 12 has an invalid length. [ 222.745874][T10274] lo: entered allmulticast mode [ 222.793672][T10274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.868341][T10274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.949790][T10274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.981660][T10278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 223.002410][T10278] syzkaller0: entered promiscuous mode [ 223.008172][T10278] syzkaller0: entered allmulticast mode [ 223.034059][T10274] bond0: (slave netdevsim0): Releasing backup interface [ 223.045960][T10274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.122356][T10284] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 223.181308][ T1035] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.232351][ T1035] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.266183][ T1035] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.291592][ T2999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.309405][T10273] lo: left allmulticast mode [ 223.471701][T10299] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 88 [ 223.550319][T10302] syzkaller1: entered promiscuous mode [ 223.556232][T10302] syzkaller1: entered allmulticast mode [ 224.232543][T10344] veth1_macvtap: left promiscuous mode [ 224.717811][T10373] bond2 (unregistering): Released all slaves [ 224.991342][T10392] __nla_validate_parse: 53 callbacks suppressed [ 224.991362][T10392] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1192'. [ 225.014195][T10392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.024643][T10392] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 225.069279][T10390] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.084528][T10390] gretap1: entered promiscuous mode [ 225.092861][T10390] gretap1: entered allmulticast mode [ 225.302054][T10409] dvmrp0: entered allmulticast mode [ 225.307747][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 225.320441][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.345827][T10416] syzkaller0: entered promiscuous mode [ 225.353702][T10416] syzkaller0: entered allmulticast mode [ 225.516813][T10416] team0 (unregistering): Port device team_slave_0 removed [ 225.531515][T10416] team0 (unregistering): Port device team_slave_1 removed [ 225.562359][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.615256][T10426] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 225.708493][T10429] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1204'. [ 225.766057][T10429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1204'. [ 225.946066][T10443] lo: entered promiscuous mode [ 225.955906][T10442] can: request_module (can-proto-0) failed. [ 225.980306][T10443] tunl0: entered promiscuous mode [ 226.024762][T10443] gre0: entered promiscuous mode [ 226.057250][T10443] gretap0: entered promiscuous mode [ 226.181981][T10443] erspan0: entered promiscuous mode [ 226.198900][T10443] ip_vti0: entered promiscuous mode [ 226.376765][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 226.427328][T10475] openvswitch: netlink: IP tunnel dst address not specified [ 226.451777][T10473] netlink: 'syz.2.1215': attribute type 15 has an invalid length. [ 226.464925][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 226.485961][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 226.486040][ T8314] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 226.496044][T10473] netlink: 'syz.2.1215': attribute type 15 has an invalid length. [ 226.524434][ T8314] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 226.549821][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 226.563401][ T8314] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 226.584201][ T8314] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 226.806424][T10497] netlink: 'syz.3.1225': attribute type 12 has an invalid length. [ 226.821858][T10499] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 227.054223][T10521] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.067328][T10521] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 227.247487][T10536] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1236'. [ 227.469854][T10546] nbd2: detected capacity change from 0 to 127 [ 227.501869][T10552] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1242'. [ 227.600142][T10558] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 227.606095][T10556] syzkaller0: entered promiscuous mode [ 227.622143][T10556] syzkaller0: entered allmulticast mode [ 227.698180][T10558] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.845385][T10578] netlink: 'syz.4.1247': attribute type 30 has an invalid length. [ 227.924995][T10578] bond9: option arp_missed_max: invalid value (0) [ 227.933844][T10578] bond9: option arp_missed_max: allowed values 1 - 255 [ 227.948767][T10578] bond9 (unregistering): Released all slaves [ 228.178111][ T5835] block nbd2: Receive control failed (result -32) [ 228.951635][T10630] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 229.277972][T10660] netlink: 'syz.2.1275': attribute type 4 has an invalid length. [ 229.861914][T10685] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 229.969960][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.977511][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.317141][T10671] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 230.532573][T10691] hsr_slave_1 (unregistering): left promiscuous mode [ 230.545585][T10693] bpq0: entered promiscuous mode [ 230.623204][T10695] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 230.624283][ T7152] IPVS: starting estimator thread 0... [ 230.739930][T10705] IPVS: using max 27 ests per chain, 64800 per kthread [ 230.862066][T10718] __nla_validate_parse: 5 callbacks suppressed [ 230.862086][T10718] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1293'. [ 230.920431][T10727] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1295'. [ 230.952920][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 231.150802][T10735] tunl0: entered promiscuous mode [ 231.156309][T10735] netlink: 'syz.4.1298': attribute type 3 has an invalid length. [ 231.164653][T10735] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1298'. [ 231.413602][T10756] wireguard: wg2: Could not create IPv4 socket [ 231.434299][T10749] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 231.500080][T10749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.550387][T10766] tipc: Started in network mode [ 231.555382][T10766] tipc: Node identity 2ab9287615ed, cluster identity 4711 [ 231.563478][T10766] tipc: Enabled bearer , priority 0 [ 231.591377][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 120 seconds [ 231.602279][T10766] syzkaller0: entered promiscuous mode [ 231.602631][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 120 seconds [ 231.607805][T10766] syzkaller0: entered allmulticast mode [ 231.625963][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 120 seconds [ 231.637172][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 120 seconds [ 231.729784][T10770] tipc: Resetting bearer [ 231.927961][T10765] tipc: Resetting bearer [ 231.984127][T10765] tipc: Disabling bearer [ 232.031246][T10783] bridge0: port 3(batadv2) entered blocking state [ 232.041098][T10783] bridge0: port 3(batadv2) entered disabled state [ 232.052134][T10783] batadv2: entered allmulticast mode [ 232.062461][T10783] batadv2: entered promiscuous mode [ 232.215397][T10794] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 232.228918][T10794] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.257171][T10794] gretap2: entered promiscuous mode [ 232.262824][T10794] gretap2: entered allmulticast mode [ 232.287593][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 232.401072][T10805] vcan1: entered promiscuous mode [ 232.429218][T10814] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 232.441248][T10814] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 232.453783][T10814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1323'. [ 232.519339][ T8314] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 232.529017][ T8314] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 232.546036][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 232.638319][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 232.687330][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 232.892446][T10833] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 232.932477][T10833] bond4: option packets_per_slave: allowed values 0 - 65535 [ 232.980819][T10833] bond4 (unregistering): Released all slaves [ 233.134449][T10849] netlink: 'syz.1.1335': attribute type 2 has an invalid length. [ 233.142725][T10849] netlink: 'syz.1.1335': attribute type 83 has an invalid length. [ 233.153173][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 233.241437][T10833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.455674][T10870] vlan0: entered promiscuous mode [ 233.474994][T10870] vlan0: entered allmulticast mode [ 233.482151][T10877] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 233.492297][T10870] hsr_slave_1: entered allmulticast mode [ 233.507672][T10880] tipc: Enabled bearer , priority 0 [ 233.609411][T10876] bond2: option xmit_hash_policy: invalid value (64) [ 233.622069][T10876] bond2 (unregistering): Released all slaves [ 233.643140][T10894] netlink: 'syz.2.1346': attribute type 58 has an invalid length. [ 233.658364][T10880] syzkaller0: entered promiscuous mode [ 233.664184][T10880] syzkaller0: entered allmulticast mode [ 233.676392][T10891] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 233.793424][T10869] tipc: Resetting bearer [ 233.833528][T10867] tipc: Resetting bearer [ 233.893280][T10867] tipc: Disabling bearer [ 233.907441][T10908] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 233.943109][T10908] team1: entered promiscuous mode [ 233.948527][T10908] team1: entered allmulticast mode [ 234.320786][ T8314] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.342848][ T8314] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.359425][ T8314] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.396117][ T8314] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.865456][T10970] netlink: 'syz.1.1368': attribute type 39 has an invalid length. [ 235.230003][T10995] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 235.252072][T10995] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.297759][T10995] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.520021][T11009] syzkaller0: entered promiscuous mode [ 235.525601][T11009] syzkaller0: entered allmulticast mode [ 235.564654][T11014] netlink: 'syz.0.1380': attribute type 10 has an invalid length. [ 236.117922][T11038] __nla_validate_parse: 25 callbacks suppressed [ 236.117946][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 236.436053][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1391'. [ 236.603551][T11075] netlink: 'syz.4.1396': attribute type 6 has an invalid length. [ 236.925476][T11089] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 236.951614][T11091] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 237.038377][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 237.054311][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 237.066308][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 237.271667][T11115] xt_cluster: node mask cannot exceed total number of nodes [ 237.367195][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 237.477838][T11127] netlink: 'syz.1.1411': attribute type 12 has an invalid length. [ 237.729884][T11145] syzkaller0: entered promiscuous mode [ 237.735840][T11145] syzkaller0: entered allmulticast mode [ 237.761304][T11148] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 238.193853][T11154] bond3: left promiscuous mode [ 238.199466][T11154] bridge1: left promiscuous mode [ 238.250931][ T8321] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.278741][ T8321] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.371917][T11175] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 238.463850][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 238.480684][ T8321] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.502465][ T8321] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.503128][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 238.520077][ T8321] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.520120][ T8321] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.520159][ T8321] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.520186][ T8321] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.589147][T11184] netlink: 'syz.3.1426': attribute type 3 has an invalid length. [ 238.711296][T11195] netlink: 'syz.1.1430': attribute type 6 has an invalid length. [ 238.753483][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 238.851042][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1432'. [ 238.887046][T11205] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 239.028092][T11213] tipc: Enabled bearer , priority 0 [ 239.063404][T11213] mac80211_hwsim hwsim8 +: renamed from syzkaller0 [ 239.092031][T11213] tipc: Disabling bearer [ 239.199688][T11223] 8021q: VLANs not supported on ip_vti0 [ 239.268643][T11227] bond4: Removing last ns target with arp_interval on [ 239.385911][T11236] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 239.681322][T11258] sctp: [Deprecated]: syz.4.1445 (pid 11258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.681322][T11258] Use struct sctp_sack_info instead [ 240.847827][T11236] netlink: 'syz.2.1441': attribute type 11 has an invalid length. [ 240.869212][T11253] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 240.965833][T11260] syzkaller0: entered promiscuous mode [ 240.984817][T11260] syzkaller0: entered allmulticast mode [ 242.422741][T11292] __nla_validate_parse: 6 callbacks suppressed [ 242.422762][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 242.442038][T11292] netlink: 'syz.4.1454': attribute type 30 has an invalid length. [ 242.460065][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 242.717061][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.741448][ T60] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.782067][ T60] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.818095][ T60] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.944833][T11317] sctp: [Deprecated]: syz.2.1459 (pid 11317) Use of int in maxseg socket option. [ 242.944833][T11317] Use struct sctp_assoc_value instead [ 242.981600][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 243.051213][T11318] syzkaller0: entered promiscuous mode [ 243.057067][T11318] syzkaller0: entered allmulticast mode [ 243.225689][T11329] sctp: [Deprecated]: syz.4.1462 (pid 11329) Use of int in maxseg socket option. [ 243.225689][T11329] Use struct sctp_assoc_value instead [ 243.832991][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1470'. [ 244.045827][T11363] tipc: Enabling of bearer rejected, failed to enable media [ 244.056308][T11363] netlink: 'syz.1.1473': attribute type 3 has an invalid length. [ 244.162147][T11365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1474'. [ 244.406725][T11374] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 244.432148][T11374] bond2 (unregistering): Released all slaves [ 244.688817][T11399] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 244.697765][T11400] openvswitch: netlink: Missing key (keys=40, expected=100) [ 244.713027][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 244.810781][T11399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.908120][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 244.977975][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 244.993622][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 245.011821][T11405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.021958][T11405] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.041294][T11405] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 245.139451][T11416] veth19: entered promiscuous mode [ 245.148747][T11416] bond5: (slave veth19): Enslaving as an active interface with a down link [ 245.168594][T11415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1489'. [ 245.188405][T11424] vlan0: entered allmulticast mode [ 245.193797][T11424] bond5: entered allmulticast mode [ 246.146709][T11475] ipvlan2: entered allmulticast mode [ 246.173192][T11475] batadv_slave_1: entered allmulticast mode [ 246.192004][T11481] openvswitch: netlink: Unknown key attributes 2 [ 246.214794][T11475] batman_adv: batadv0: Adding interface: ipvlan2 [ 246.238576][T11475] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.319134][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.349145][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.387586][T11475] batman_adv: batadv0: Interface activated: ipvlan2 [ 246.461023][T11490] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 246.679791][T11496] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.704327][T11496] bond5: (slave bond6): making interface the new active one [ 246.725358][T11496] bond5: (slave bond6): Enslaving as an active interface with an up link [ 246.738762][T11508] netlink: 'syz.3.1514': attribute type 11 has an invalid length. [ 246.761678][T11509] netlink: 'syz.3.1514': attribute type 11 has an invalid length. [ 246.825342][T11490] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 246.861216][T11512] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.957178][T11501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.125884][T11529] netlink: 'syz.2.1520': attribute type 3 has an invalid length. [ 247.144650][T11529] netlink: 'syz.2.1520': attribute type 3 has an invalid length. [ 248.254822][T11563] netlink: 'syz.2.1528': attribute type 21 has an invalid length. [ 248.273767][T11563] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.297307][T11563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.309894][T11563] IPv6: NLM_F_CREATE should be set when creating new route [ 248.317223][T11563] IPv6: NLM_F_CREATE should be set when creating new route [ 248.324713][T11563] IPv6: NLM_F_CREATE should be set when creating new route [ 249.113851][T11583] tipc: Enabling of bearer rejected, failed to enable media [ 249.148457][T11582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 249.168385][T11590] __nla_validate_parse: 7 callbacks suppressed [ 249.168407][T11590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1536'. [ 249.198032][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 249.228268][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'. [ 249.362612][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 249.407931][T11602] netlink: 'syz.3.1543': attribute type 21 has an invalid length. [ 249.439131][T11602] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1543'. [ 249.522547][T11609] netlink: 'syz.0.1544': attribute type 3 has an invalid length. [ 249.635608][T11616] netlink: 'syz.2.1547': attribute type 24 has an invalid length. [ 249.787833][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 249.881982][T11634] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.907316][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 249.920465][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 249.954578][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 249.967770][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 250.130997][T11648] xt_hashlimit: max too large, truncated to 1048576 [ 250.139540][T11648] netlink: 'syz.2.1557': attribute type 15 has an invalid length. [ 250.177863][T11648] netlink: 'syz.2.1557': attribute type 15 has an invalid length. [ 250.193382][T11647] : entered promiscuous mode [ 250.203651][ T37] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 250.212240][ T37] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 250.231553][ T37] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 250.281372][ T37] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 250.303155][T11654] syzkaller1: entered promiscuous mode [ 250.319658][T11654] syzkaller1: entered allmulticast mode [ 250.735018][T11688] syzkaller0: entered promiscuous mode [ 250.740648][T11688] syzkaller0: entered allmulticast mode [ 250.750214][T11688] netlink: 'syz.4.1569': attribute type 9 has an invalid length. [ 250.790362][T11689] netlink: 'syz.2.1568': attribute type 12 has an invalid length. [ 250.799308][T11689] netlink: 'syz.2.1568': attribute type 29 has an invalid length. [ 251.177729][T11707] netlink: 'syz.0.1573': attribute type 9 has an invalid length. [ 251.374787][T11716] syzkaller0: entered promiscuous mode [ 251.390252][T11716] syzkaller0: entered allmulticast mode [ 252.067449][T11747] syzkaller1: entered promiscuous mode [ 252.112170][T11747] syzkaller1: entered allmulticast mode [ 252.156480][T11747] tipc: New replicast peer: 255.255.255.255 [ 252.170134][T11747] tipc: Enabled bearer , priority 10 [ 252.403264][T11758] bond0: entered promiscuous mode [ 252.408376][T11758] bond0: entered allmulticast mode [ 252.430269][T11758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.447061][T11761] bond0: (slave macvlan0): Opening slave failed [ 252.740291][T11793] netlink: 'syz.3.1596': attribute type 39 has an invalid length. [ 253.169366][ T5946] tipc: Node number set to 1758479639 [ 253.550312][ T60] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.558758][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.609130][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.639141][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.789476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.831565][T11830] bond6: Removing last ns target with arp_interval on [ 254.291404][T11869] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 254.399606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.467031][T11873] __nla_validate_parse: 18 callbacks suppressed [ 254.467052][T11873] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1618'. [ 254.524811][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.566051][T11880] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1620'. [ 254.732779][T11887] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 254.808629][T11890] netlink: zone id is out of range [ 254.816460][T11890] netlink: del zone limit has 4 unknown bytes [ 255.019775][T11904] bond2: option min_links: invalid value (18446744073709551614) [ 255.027620][T11904] bond2: option min_links: allowed values 0 - 2147483647 [ 255.043796][T11904] bond2 (unregistering): Released all slaves [ 255.965007][T11925] validate_nla: 6 callbacks suppressed [ 255.965030][T11925] netlink: 'syz.2.1632': attribute type 5 has an invalid length. [ 256.058403][T11931] netlink: 'syz.4.1634': attribute type 2 has an invalid length. [ 256.152461][T11934] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1635'. [ 256.173855][T11938] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1637'. [ 256.317120][T11948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.355429][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.389128][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.423881][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.465793][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.527225][T11960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1644'. [ 257.203736][T11987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.296776][T11987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.404062][T11995] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 257.580776][ T179] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.592655][ T179] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.611872][ T179] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.673152][ T179] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.732258][T12003] syzkaller0: entered promiscuous mode [ 257.751648][T12003] syzkaller0: entered allmulticast mode [ 258.230790][T12046] bond7: entered promiscuous mode [ 258.236088][T12046] bond7: entered allmulticast mode [ 258.241812][T12046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.477659][T12064] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 258.541926][T12066] netlink: 'syz.1.1672': attribute type 39 has an invalid length. [ 258.971454][T12077] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 258.985306][T12079] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 259.026668][T12082] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 259.080599][T12079] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.095282][T12084] macvlan2: entered promiscuous mode [ 259.103052][T12084] macvlan2: entered allmulticast mode [ 259.119037][T12084] bond8: entered allmulticast mode [ 259.124243][T12084] bond8: entered promiscuous mode [ 259.148653][T12084] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 259.162271][T12084] team0: Port device macvlan2 added [ 259.200125][T12091] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 259.454938][T12108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.462473][T12108] IPv6: NLM_F_CREATE should be set when creating new route [ 259.502950][T12108] netlink: 'syz.0.1685': attribute type 29 has an invalid length. [ 259.511460][T12108] netlink: 'syz.0.1685': attribute type 29 has an invalid length. [ 259.640168][T12115] __nla_validate_parse: 15 callbacks suppressed [ 259.640191][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1687'. [ 259.825063][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 259.842255][T12127] tipc: Enabled bearer , priority 0 [ 259.966946][T12127] syzkaller0: entered promiscuous mode [ 259.975280][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 259.984728][T12127] syzkaller0: entered allmulticast mode [ 259.991832][T12127] tipc: Resetting bearer [ 259.997941][T12132] lo: entered allmulticast mode [ 260.003253][T12132] tunl0: entered allmulticast mode [ 260.008754][T12132] gre0: entered allmulticast mode [ 260.014836][T12132] gretap0: entered allmulticast mode [ 260.024345][T12132] erspan0: entered allmulticast mode [ 260.031676][T12132] ip_vti0: entered allmulticast mode [ 260.038020][T12132] ip6_vti0: entered allmulticast mode [ 260.044008][T12132] sit0: entered allmulticast mode [ 260.049609][T12132] ip6tnl0: entered allmulticast mode [ 260.055350][T12132] ip6gre0: entered allmulticast mode [ 260.061224][T12132] ip6gretap0: entered allmulticast mode [ 260.067211][T12132] bridge0: entered allmulticast mode [ 260.073318][T12132] bond0: entered allmulticast mode [ 260.078738][T12132] team0: entered allmulticast mode [ 260.085366][T12132] dummy0: entered allmulticast mode [ 260.091467][T12132] nlmon0: entered allmulticast mode [ 260.097095][T12132] caif0: entered allmulticast mode [ 260.102735][T12132] batadv0: entered allmulticast mode [ 260.108562][T12132] vxcan0: entered allmulticast mode [ 260.114342][T12132] vxcan1: entered allmulticast mode [ 260.120041][T12132] veth0: entered allmulticast mode [ 260.125658][T12132] veth1: entered allmulticast mode [ 260.132849][T12132] wg1: entered allmulticast mode [ 260.141598][T12132] wg2: entered allmulticast mode [ 260.147000][T12132] veth0_to_bridge: entered allmulticast mode [ 260.153688][T12132] bridge_slave_0: entered allmulticast mode [ 260.160774][T12132] veth1_to_bridge: entered allmulticast mode [ 260.173777][T12132] bridge_slave_1: entered allmulticast mode [ 260.181178][T12132] veth0_to_bond: entered allmulticast mode [ 260.187421][T12132] bond_slave_0: entered allmulticast mode [ 260.194026][T12132] veth1_to_bond: entered allmulticast mode [ 260.200333][T12132] bond_slave_1: entered allmulticast mode [ 260.206526][T12132] veth0_to_team: entered allmulticast mode [ 260.213782][T12132] team_slave_0: entered allmulticast mode [ 260.220161][T12132] veth1_to_team: entered allmulticast mode [ 260.226517][T12132] team_slave_1: entered allmulticast mode [ 260.235156][T12132] veth0_to_batadv: entered allmulticast mode [ 260.242786][T12132] batadv_slave_0: entered allmulticast mode [ 260.250889][T12132] xfrm0: entered allmulticast mode [ 260.256527][T12132] veth0_to_hsr: entered allmulticast mode [ 260.262985][T12132] hsr_slave_0: entered allmulticast mode [ 260.269229][T12132] hsr0: entered allmulticast mode [ 260.274775][T12132] veth1_virt_wifi: entered allmulticast mode [ 260.282100][T12132] veth0_virt_wifi: entered allmulticast mode [ 260.288575][T12132] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 260.297376][T12132] veth1_vlan: entered allmulticast mode [ 260.303616][T12132] veth0_vlan: entered allmulticast mode [ 260.310188][T12132] vlan0: entered allmulticast mode [ 260.315775][T12132] vlan1: entered allmulticast mode [ 260.321521][T12132] macvlan0: entered allmulticast mode [ 260.327306][T12132] macvlan1: entered allmulticast mode [ 260.333106][T12132] ipvlan0: entered allmulticast mode [ 260.338753][T12132] ipvlan1: entered allmulticast mode [ 260.344485][T12132] veth1_macvtap: entered allmulticast mode [ 260.351368][T12132] veth0_macvtap: entered allmulticast mode [ 260.357481][T12132] macvtap0: entered allmulticast mode [ 260.363535][T12132] macsec0: entered allmulticast mode [ 260.369554][T12132] geneve0: entered allmulticast mode [ 260.375135][T12132] geneve1: entered allmulticast mode [ 260.381324][T12132] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 260.388586][T12132] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 260.396024][T12132] ip6tnl1: entered allmulticast mode [ 260.401641][T12132] netdevsim netdevsim1 eth0: entered allmulticast mode [ 260.408833][T12132] netdevsim netdevsim1 eth1: entered allmulticast mode [ 260.416237][T12132] netdevsim netdevsim1 eth2: entered allmulticast mode [ 260.423625][T12132] netdevsim netdevsim1 eth3: entered allmulticast mode [ 260.431341][T12132] vxlan0: entered allmulticast mode [ 260.446993][T12132] macvlan1.0: entered allmulticast mode [ 260.454796][T12132] ip6tnl2: entered allmulticast mode [ 260.460609][T12132] sit1: entered allmulticast mode [ 260.465957][T12132] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 260.473676][T12132] bond1: entered allmulticast mode [ 260.479007][T12132] bond2: entered allmulticast mode [ 260.484529][T12132] bond3: entered allmulticast mode [ 260.490570][T12132] bridge1: entered allmulticast mode [ 260.496390][T12132] syztnl0: entered allmulticast mode [ 260.502264][T12132] mac80211_hwsim hwsim14 wlan3: entered allmulticast mode [ 260.509901][T12132] mac80211_hwsim hwsim15 wlan4: entered allmulticast mode [ 260.517517][T12132] gretap1: entered allmulticast mode [ 260.523336][T12132] ip6tnl3: entered allmulticast mode [ 260.529259][T12132] ip6erspan0: entered allmulticast mode [ 260.536825][T12132] bridge2: entered allmulticast mode [ 260.542800][T12132] geneve2: entered allmulticast mode [ 260.548552][T12132] mac80211_hwsim hwsim19 wlan5: entered allmulticast mode [ 260.557231][T12132] bond4: entered allmulticast mode [ 260.562922][T12132] syztnl2: entered allmulticast mode [ 260.572931][T12132] bond5: entered allmulticast mode [ 260.578261][T12132] bond6: entered allmulticast mode [ 260.602561][T12132] gretap2: entered allmulticast mode [ 260.613165][T12132] : entered allmulticast mode [ 260.618856][T12132] ip6tnl4: entered allmulticast mode [ 260.634243][T12132] bridge3: entered allmulticast mode [ 260.641284][T12132] : entered allmulticast mode [ 260.659856][T12132] bond7: left promiscuous mode [ 260.669430][T12132] bond8: left promiscuous mode [ 260.674594][T12132] macvlan2: left promiscuous mode [ 260.681503][T12125] tipc: Resetting bearer [ 261.014419][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.024902][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 261.659357][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 150 seconds [ 261.670488][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 150 seconds [ 261.681688][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 150 seconds [ 261.692774][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 150 seconds [ 262.120097][T12125] tipc: Disabling bearer [ 262.150298][ T179] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.158772][ T179] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.179041][ T179] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.199130][ T179] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.518198][T12187] netlink: 'syz.1.1707': attribute type 32 has an invalid length. [ 262.576660][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 262.714622][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 262.734012][T12196] bond9: (slave lo): Device is not bonding slave [ 262.759219][T12196] bond9: option active_slave: invalid value (lo) [ 262.766144][T12206] netlink: 'syz.4.1710': attribute type 5 has an invalid length. [ 262.780709][T12206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1710'. [ 262.792173][T12196] bond9 (unregistering): Released all slaves [ 262.848801][T12187] bond9: Setting coupled_control to off (0) [ 262.855407][T12211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1710'. [ 262.994310][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'. [ 263.155714][T12232] netlink: 'syz.0.1715': attribute type 3 has an invalid length. [ 263.253533][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1719'. [ 263.439963][T12247] netlink: 'syz.1.1720': attribute type 1 has an invalid length. [ 263.500345][T12247] bond10: entered promiscuous mode [ 263.514502][T12247] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.614952][T12247] bond10: (slave bridge4): making interface the new active one [ 263.638162][T12247] bridge4: entered promiscuous mode [ 263.676240][T12247] bridge4: left promiscuous mode [ 263.769962][T12271] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1727'. [ 263.831213][T12265] netlink: 'syz.3.1725': attribute type 14 has an invalid length. [ 263.979468][T12275] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 264.002125][T12275] bond7 (unregistering): Released all slaves [ 264.882437][T12334] netlink: 'syz.3.1746': attribute type 39 has an invalid length. [ 265.302187][T12363] __nla_validate_parse: 2 callbacks suppressed [ 265.302207][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 265.740139][T12386] netlink: 'syz.3.1760': attribute type 23 has an invalid length. [ 265.816017][T12390] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1761'. [ 265.900370][T12402] openvswitch: netlink: IPv6 tunnel dst address is zero [ 265.909123][T12402] netlink: 'syz.4.1762': attribute type 11 has an invalid length. [ 265.988329][T12405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1766'. [ 266.041806][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 266.194470][T12416] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 266.305414][T12424] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 266.337465][T12424] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 266.397689][T12416] gretap2: entered promiscuous mode [ 266.423127][T12416] bond2: (slave gretap2): making interface the new active one [ 266.435771][T12416] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 266.479738][T12431] macvlan2: entered promiscuous mode [ 266.503604][T12431] macvlan2: entered allmulticast mode [ 266.528621][T12431] bond2: entered promiscuous mode [ 266.561045][T12431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 266.587509][T12440] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 266.607044][T12431] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 266.670733][T12431] bond2: left promiscuous mode [ 266.717449][T12444] netlink: 'syz.1.1772': attribute type 33 has an invalid length. [ 266.780894][T12450] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1775'. [ 266.795075][T12451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.820629][T12451] netlink: 'syz.2.1776': attribute type 1 has an invalid length. [ 266.846181][T12444] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 266.871034][T12444] bond11 (unregistering): Released all slaves [ 266.873847][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 266.990535][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 267.020075][T12461] x_tables: duplicate underflow at hook 3 [ 267.029170][T12457] nbd: must specify at least one socket [ 267.555446][T12498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1790'. [ 267.664992][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'. [ 267.686189][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 268.114171][T12540] macvlan0: left allmulticast mode [ 268.129360][T12540] validate_nla: 1 callbacks suppressed [ 268.129380][T12540] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 268.163350][T12540] netlink: 'syz.1.1803': attribute type 2 has an invalid length. [ 268.189361][T12543] syzkaller1: entered allmulticast mode [ 269.164643][T12591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.177843][T12589] veth11: entered promiscuous mode [ 269.183405][T12589] veth11: entered allmulticast mode [ 269.357393][T12605] syzkaller0: entered promiscuous mode [ 269.373549][T12605] syzkaller0: entered allmulticast mode [ 269.418419][T12604] bridge4: entered promiscuous mode [ 269.424310][T12604] bridge4: entered allmulticast mode [ 269.546792][T12613] bridge: RTM_NEWNEIGH with invalid ether address [ 269.809127][T12626] netlink: 'syz.4.1826': attribute type 2 has an invalid length. [ 269.955578][T12637] bridge_slave_1: left allmulticast mode [ 269.976173][T12637] bridge_slave_1: left promiscuous mode [ 269.982437][T12637] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.992879][T12637] bridge_slave_0: left allmulticast mode [ 269.998679][T12637] bridge_slave_0: left promiscuous mode [ 270.004687][T12637] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.496229][T12683] __nla_validate_parse: 17 callbacks suppressed [ 270.496255][T12683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1841'. [ 270.528774][T12684] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 270.622789][T12688] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 270.867377][T12707] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 270.917511][T12710] : entered promiscuous mode [ 271.008539][T12715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.097280][T12723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.376068][T12743] netlink: 'syz.4.1862': attribute type 5 has an invalid length. [ 271.525286][T12751] netlink: 'syz.4.1863': attribute type 2 has an invalid length. [ 271.554331][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 271.578540][T12754] netlink: 'syz.4.1863': attribute type 2 has an invalid length. [ 271.596857][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 271.756969][T12761] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1866'. [ 271.766698][T12762] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1866'. [ 271.782075][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1866'. [ 271.858210][T12765] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 271.957734][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 271.990603][T12770] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1871'. [ 272.151868][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 272.162042][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 272.591841][T12819] pim6reg1: entered promiscuous mode [ 272.606800][T12819] pim6reg1: entered allmulticast mode [ 272.972533][T12850] syzkaller0: entered promiscuous mode [ 272.989887][T12850] syzkaller0: entered allmulticast mode [ 273.185028][T12863] xt_hashlimit: size too large, truncated to 1048576 [ 273.247522][T12865] bond4 (unregistering): Released all slaves [ 273.728001][T12888] syzkaller0: entered promiscuous mode [ 273.741553][T12888] syzkaller0: entered allmulticast mode [ 273.755061][T12896] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 275.207126][T12896] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.220024][T12896] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 275.230590][T12896] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 275.272962][T12897] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.285608][T12897] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 275.343517][T12899] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.356301][T12899] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 275.413842][T12918] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 275.655565][T12933] __nla_validate_parse: 12 callbacks suppressed [ 275.655588][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 275.722651][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1917'. [ 275.773793][T12929] syzkaller0: entered promiscuous mode [ 275.782931][T12929] syzkaller0: entered allmulticast mode [ 275.785250][T12935] sctp: [Deprecated]: syz.2.1915 (pid 12935) Use of int in max_burst socket option deprecated. [ 275.785250][T12935] Use struct sctp_assoc_value instead [ 275.837780][T12933] geneve2: entered promiscuous mode [ 275.860739][T12933] geneve2: entered allmulticast mode [ 275.874168][T12943] can: request_module (can-proto-3) failed. [ 275.890570][T12935] netlink: 'syz.2.1915': attribute type 11 has an invalid length. [ 275.898642][T12935] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1915'. [ 276.482833][T12968] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1922'. [ 276.642895][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 276.754886][T12972] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1923'. [ 277.552514][T12970] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 277.715311][T12975] openvswitch: netlink: IPv4 tunnel dst address is zero [ 277.793360][T12990] netlink: 'syz.2.1927': attribute type 4 has an invalid length. [ 277.804701][T12989] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 277.815842][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1926'. [ 277.833005][T12990] netlink: 'syz.2.1927': attribute type 4 has an invalid length. [ 277.841007][T12994] netlink: zone id is out of range [ 277.865430][T12994] netlink: zone id is out of range [ 277.880907][T12994] netlink: zone id is out of range [ 277.909060][T12994] netlink: get zone limit has 4 unknown bytes [ 277.943351][T12995] bond4: (slave geneve4): making interface the new active one [ 277.953254][T12995] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 277.964777][ T8321] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 3] type 2 family 0 port 20004 - 0 [ 277.984085][ T8321] netdevsim netdevsim3 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0 [ 278.006154][ T8321] netdevsim netdevsim3 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0 [ 278.018288][ T8321] netdevsim netdevsim3 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0 [ 278.469840][T13027] sctp: [Deprecated]: syz.3.1938 (pid 13027) Use of int in max_burst socket option. [ 278.469840][T13027] Use struct sctp_assoc_value instead [ 278.809544][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 278.850873][T13048] netlink: 'syz.1.1944': attribute type 10 has an invalid length. [ 278.882889][T13048] bridge_slave_1: left allmulticast mode [ 278.901814][T13048] bridge_slave_1: entered allmulticast mode [ 278.908274][T13048] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 279.277449][T13076] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 279.355204][T13076] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 279.530440][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 279.561668][T13093] smc: net device gre0 applied user defined pnetid SYZ1 [ 279.584112][T13091] : entered promiscuous mode [ 279.601626][T13093] smc: net device gre0 erased user defined pnetid SYZ1 [ 279.627364][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 279.643776][T13096] : left allmulticast mode [ 279.663901][ T1035] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.693302][ T1035] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.703950][ T1035] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.720589][ T1035] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.018717][T13116] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 280.034744][T13116] netlink: 'syz.2.1973': attribute type 4 has an invalid length. [ 280.070427][T13117] xt_TCPMSS: Only works on TCP SYN packets [ 280.191747][T13127] netlink: 'syz.2.1976': attribute type 2 has an invalid length. [ 280.199608][T13127] netlink: 'syz.2.1976': attribute type 8 has an invalid length. [ 280.372023][T13146] openvswitch: netlink: IP tunnel dst address not specified [ 280.652291][T13162] dummy0: entered promiscuous mode [ 280.657553][T13162] dummy0: entered allmulticast mode [ 291.750906][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 180 seconds [ 291.761731][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 180 seconds [ 291.772867][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 180 seconds [ 291.783941][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 180 seconds [ 295.880111][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.900963][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.910121][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.921106][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.928809][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.982505][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.990801][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.001587][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.010045][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.020743][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.027913][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 296.037547][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 296.045235][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.055121][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.062630][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.243543][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 296.252952][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 296.269259][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 296.278913][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 296.287187][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 296.319270][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 296.330729][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 296.338886][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 296.347290][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 296.355868][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 296.644293][T13168] chnl_net:caif_netlink_parms(): no params data found [ 296.741411][T13172] chnl_net:caif_netlink_parms(): no params data found [ 296.876974][T13170] chnl_net:caif_netlink_parms(): no params data found [ 296.979812][T13168] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.987099][T13168] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.995708][T13168] bridge_slave_0: entered allmulticast mode [ 297.003192][T13168] bridge_slave_0: entered promiscuous mode [ 297.036253][T13168] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.043674][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.051262][T13168] bridge_slave_1: entered allmulticast mode [ 297.058661][T13168] bridge_slave_1: entered promiscuous mode [ 297.165223][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.173201][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.180581][T13172] bridge_slave_0: entered allmulticast mode [ 297.187892][T13172] bridge_slave_0: entered promiscuous mode [ 297.235253][T13168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.246845][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.255924][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.263275][T13172] bridge_slave_1: entered allmulticast mode [ 297.270837][T13172] bridge_slave_1: entered promiscuous mode [ 297.302608][T13168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.331185][T13170] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.338613][T13170] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.346642][T13170] bridge_slave_0: entered allmulticast mode [ 297.354346][T13170] bridge_slave_0: entered promiscuous mode [ 297.418381][T13170] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.425712][T13170] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.433984][T13170] bridge_slave_1: entered allmulticast mode [ 297.441389][T13170] bridge_slave_1: entered promiscuous mode [ 297.461603][T13175] chnl_net:caif_netlink_parms(): no params data found [ 297.475960][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.514699][T13168] team0: Port device team_slave_0 added [ 297.535070][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.573567][T13168] team0: Port device team_slave_1 added [ 297.612801][T13170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.665992][T13170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.700446][T13172] team0: Port device team_slave_0 added [ 297.718488][T13177] chnl_net:caif_netlink_parms(): no params data found [ 297.730871][T13168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.737896][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.764209][T13168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.784460][T13172] team0: Port device team_slave_1 added [ 297.810507][T13168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.817505][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.843770][T13168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.875047][T13170] team0: Port device team_slave_0 added [ 297.925444][T13170] team0: Port device team_slave_1 added [ 297.965035][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.972278][ T5843] Bluetooth: hci5: command tx timeout [ 297.978779][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.005062][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.018093][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.025212][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.051702][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.082784][T13175] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.090193][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.097437][T13175] bridge_slave_0: entered allmulticast mode [ 298.104897][T13175] bridge_slave_0: entered promiscuous mode [ 298.129976][ T5843] Bluetooth: hci7: command tx timeout [ 298.130396][ T53] Bluetooth: hci6: command tx timeout [ 298.176105][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.183905][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.191721][T13175] bridge_slave_1: entered allmulticast mode [ 298.199317][T13175] bridge_slave_1: entered promiscuous mode [ 298.223992][T13170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.231673][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.257962][T13170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.311510][T13170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.318593][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.345914][T13170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.369152][ T53] Bluetooth: hci8: command tx timeout [ 298.372903][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.383123][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.390839][T13177] bridge_slave_0: entered allmulticast mode [ 298.398199][T13177] bridge_slave_0: entered promiscuous mode [ 298.411699][T13168] hsr_slave_0: entered promiscuous mode [ 298.418346][T13168] hsr_slave_1: entered promiscuous mode [ 298.424812][T13168] debugfs: 'hsr0' already exists in 'hsr' [ 298.430709][T13168] Cannot create hsr debugfs directory [ 298.439880][T13175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.449220][ T53] Bluetooth: hci9: command tx timeout [ 298.476766][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.484289][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.491739][T13177] bridge_slave_1: entered allmulticast mode [ 298.500286][T13177] bridge_slave_1: entered promiscuous mode [ 298.512459][T13175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.580717][T13172] hsr_slave_0: entered promiscuous mode [ 298.587485][T13172] hsr_slave_1: entered promiscuous mode [ 298.594223][T13172] debugfs: 'hsr0' already exists in 'hsr' [ 298.600293][T13172] Cannot create hsr debugfs directory [ 298.663078][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.682795][T13175] team0: Port device team_slave_0 added [ 298.718472][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.742605][T13175] team0: Port device team_slave_1 added [ 298.753237][T13170] hsr_slave_0: entered promiscuous mode [ 298.760646][T13170] hsr_slave_1: entered promiscuous mode [ 298.768147][T13170] debugfs: 'hsr0' already exists in 'hsr' [ 298.775044][T13170] Cannot create hsr debugfs directory [ 298.875909][T13177] team0: Port device team_slave_0 added [ 298.888439][T13175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.895743][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.922375][T13175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.956481][T13177] team0: Port device team_slave_1 added [ 298.968510][T13175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.976088][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.002695][T13175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.105159][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.112246][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.138523][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.185286][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.192978][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.219643][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.325455][T13175] hsr_slave_0: entered promiscuous mode [ 299.332926][T13175] hsr_slave_1: entered promiscuous mode [ 299.340141][T13175] debugfs: 'hsr0' already exists in 'hsr' [ 299.345935][T13175] Cannot create hsr debugfs directory [ 299.456044][T13177] hsr_slave_0: entered promiscuous mode [ 299.463224][T13177] hsr_slave_1: entered promiscuous mode [ 299.469804][T13177] debugfs: 'hsr0' already exists in 'hsr' [ 299.475776][T13177] Cannot create hsr debugfs directory [ 300.049538][ T53] Bluetooth: hci5: command tx timeout [ 300.209202][ T53] Bluetooth: hci7: command tx timeout [ 300.209247][ T5843] Bluetooth: hci6: command tx timeout [ 300.449271][ T5843] Bluetooth: hci8: command tx timeout [ 300.529156][ T5843] Bluetooth: hci9: command tx timeout [ 302.129325][ T5843] Bluetooth: hci5: command tx timeout [ 302.289298][ T5843] Bluetooth: hci6: command tx timeout [ 302.289305][ T53] Bluetooth: hci7: command tx timeout [ 302.529248][ T53] Bluetooth: hci8: command tx timeout [ 302.609414][ T53] Bluetooth: hci9: command tx timeout [ 304.209512][ T53] Bluetooth: hci5: command tx timeout [ 304.369170][ T53] Bluetooth: hci6: command tx timeout [ 304.379360][ T53] Bluetooth: hci7: command tx timeout [ 304.609416][ T53] Bluetooth: hci8: command tx timeout [ 304.689108][ T53] Bluetooth: hci9: command tx timeout [ 321.810495][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 210 seconds [ 321.821453][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 210 seconds [ 321.832487][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 210 seconds [ 321.843562][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 210 seconds [ 322.451873][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.461096][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 351.899226][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 240 seconds [ 351.910191][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 240 seconds [ 351.921481][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 240 seconds [ 351.932625][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 240 seconds [ 356.448420][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 356.460736][ T5843] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 356.470304][ T5843] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 356.478397][ T5843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 356.486378][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 356.654253][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 356.670128][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 356.679931][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 356.690686][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 356.699488][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 356.783992][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 356.794386][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 356.802680][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 356.820017][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 356.829405][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 356.899818][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.911578][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.919879][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.928141][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.945239][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 357.020551][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 357.030934][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 357.039561][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 357.053798][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 357.080559][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 357.108602][T13216] chnl_net:caif_netlink_parms(): no params data found [ 357.372156][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.380054][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.387301][T13216] bridge_slave_0: entered allmulticast mode [ 357.394796][T13216] bridge_slave_0: entered promiscuous mode [ 357.408793][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.417168][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.424699][T13216] bridge_slave_1: entered allmulticast mode [ 357.433333][T13216] bridge_slave_1: entered promiscuous mode [ 357.588005][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.617932][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.716237][T13222] chnl_net:caif_netlink_parms(): no params data found [ 357.731140][T13216] team0: Port device team_slave_0 added [ 357.786483][T13216] team0: Port device team_slave_1 added [ 357.792640][T13220] chnl_net:caif_netlink_parms(): no params data found [ 357.943378][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.950535][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.978690][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.004264][T13226] chnl_net:caif_netlink_parms(): no params data found [ 358.044220][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.054419][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.082812][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.184934][T13229] chnl_net:caif_netlink_parms(): no params data found [ 358.208519][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.216591][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.224536][T13222] bridge_slave_0: entered allmulticast mode [ 358.233054][T13222] bridge_slave_0: entered promiscuous mode [ 358.286703][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.301437][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.308743][T13222] bridge_slave_1: entered allmulticast mode [ 358.316550][T13222] bridge_slave_1: entered promiscuous mode [ 358.357889][T13216] hsr_slave_0: entered promiscuous mode [ 358.364787][T13216] hsr_slave_1: entered promiscuous mode [ 358.372118][T13216] debugfs: 'hsr0' already exists in 'hsr' [ 358.377896][T13216] Cannot create hsr debugfs directory [ 358.396538][T13220] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.403918][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.411577][T13220] bridge_slave_0: entered allmulticast mode [ 358.419164][T13220] bridge_slave_0: entered promiscuous mode [ 358.459896][T13220] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.467723][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.475150][T13220] bridge_slave_1: entered allmulticast mode [ 358.482660][T13220] bridge_slave_1: entered promiscuous mode [ 358.521594][T13222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.531601][ T5843] Bluetooth: hci10: command tx timeout [ 358.582106][T13222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.604362][T13226] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.612524][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.620181][T13226] bridge_slave_0: entered allmulticast mode [ 358.627640][T13226] bridge_slave_0: entered promiscuous mode [ 358.674175][T13220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.684002][T13226] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.691547][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.698811][T13226] bridge_slave_1: entered allmulticast mode [ 358.706371][T13226] bridge_slave_1: entered promiscuous mode [ 358.754916][T13220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.769649][ T5843] Bluetooth: hci11: command tx timeout [ 358.806164][T13222] team0: Port device team_slave_0 added [ 358.837891][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.845678][T13229] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.853781][T13229] bridge_slave_0: entered allmulticast mode [ 358.860963][ T5843] Bluetooth: hci12: command tx timeout [ 358.865674][T13229] bridge_slave_0: entered promiscuous mode [ 358.882391][T13222] team0: Port device team_slave_1 added [ 358.904795][T13226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.914318][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.921874][T13229] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.930820][T13229] bridge_slave_1: entered allmulticast mode [ 358.938365][T13229] bridge_slave_1: entered promiscuous mode [ 358.965535][T13220] team0: Port device team_slave_0 added [ 358.974271][T13226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.014730][ T5843] Bluetooth: hci13: command tx timeout [ 359.025670][T13220] team0: Port device team_slave_1 added [ 359.063440][T13222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.070801][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.097758][T13222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.137966][T13229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.165150][T13222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.172857][ T5843] Bluetooth: hci14: command tx timeout [ 359.179338][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.205496][T13222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.232328][T13226] team0: Port device team_slave_0 added [ 359.239364][T13220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.246433][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.273963][T13220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.287957][T13229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.319813][T13226] team0: Port device team_slave_1 added [ 359.326482][T13220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.333872][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.360178][T13220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.448536][T13226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.455689][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.482657][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.510260][T13229] team0: Port device team_slave_0 added [ 359.523937][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.531330][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.557666][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.585019][T13229] team0: Port device team_slave_1 added [ 359.626133][T13222] hsr_slave_0: entered promiscuous mode [ 359.633865][T13222] hsr_slave_1: entered promiscuous mode [ 359.641186][T13222] debugfs: 'hsr0' already exists in 'hsr' [ 359.646943][T13222] Cannot create hsr debugfs directory [ 359.700016][T13220] hsr_slave_0: entered promiscuous mode [ 359.706842][T13220] hsr_slave_1: entered promiscuous mode [ 359.714157][T13220] debugfs: 'hsr0' already exists in 'hsr' [ 359.720408][T13220] Cannot create hsr debugfs directory [ 359.742465][T13229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.750645][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.776940][T13229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.806028][T13229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.813559][T13229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.840630][T13229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.919771][T13226] hsr_slave_0: entered promiscuous mode [ 359.926399][T13226] hsr_slave_1: entered promiscuous mode [ 359.933089][T13226] debugfs: 'hsr0' already exists in 'hsr' [ 359.938834][T13226] Cannot create hsr debugfs directory [ 360.111275][T13229] hsr_slave_0: entered promiscuous mode [ 360.117890][T13229] hsr_slave_1: entered promiscuous mode [ 360.124409][T13229] debugfs: 'hsr0' already exists in 'hsr' [ 360.130607][T13229] Cannot create hsr debugfs directory [ 360.609372][ T5843] Bluetooth: hci10: command tx timeout [ 360.849579][ T5843] Bluetooth: hci11: command tx timeout [ 360.929181][ T5843] Bluetooth: hci12: command tx timeout [ 361.092598][ T5843] Bluetooth: hci13: command tx timeout [ 361.249642][ T5843] Bluetooth: hci14: command tx timeout [ 362.699227][ T5843] Bluetooth: hci10: command tx timeout [ 362.929231][ T5843] Bluetooth: hci11: command tx timeout [ 363.009193][ T5843] Bluetooth: hci12: command tx timeout [ 363.179302][ T5843] Bluetooth: hci13: command tx timeout [ 363.339454][ T5843] Bluetooth: hci14: command tx timeout [ 364.769210][ T5843] Bluetooth: hci10: command tx timeout [ 365.009236][ T5843] Bluetooth: hci11: command tx timeout [ 365.089270][ T5843] Bluetooth: hci12: command tx timeout [ 365.249118][ T5843] Bluetooth: hci13: command tx timeout [ 365.409583][ T5843] Bluetooth: hci14: command tx timeout [ 381.971696][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 270 seconds [ 381.982583][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 270 seconds [ 381.994448][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 270 seconds [ 382.005483][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 270 seconds [ 383.892077][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.901199][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 391.089816][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 412.053122][ T8286] block nbd0: Possible stuck request ffff888025320000: control (read@0,1024B). Runtime 300 seconds [ 412.064125][ T8286] block nbd0: Possible stuck request ffff888025320200: control (read@1024,1024B). Runtime 300 seconds [ 412.075340][ T8286] block nbd0: Possible stuck request ffff888025320400: control (read@2048,1024B). Runtime 300 seconds [ 412.086488][ T8286] block nbd0: Possible stuck request ffff888025320600: control (read@3072,1024B). Runtime 300 seconds [ 416.919810][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 416.930148][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 416.939722][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 416.947915][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 416.959155][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 416.982025][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 416.992307][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 417.001527][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 417.021978][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 417.031381][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 417.103956][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 417.115219][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 417.124733][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 417.136191][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 417.144801][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 417.204870][ T5843] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 417.215510][ T5843] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 417.226269][ T5843] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 417.234798][ T5843] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 417.242887][ T5843] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 417.356099][ T5843] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 417.366382][ T5843] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 417.374923][ T5843] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 417.383261][ T5843] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 417.392119][ T5843] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 417.714865][T13268] chnl_net:caif_netlink_parms(): no params data found [ 417.957335][T13272] chnl_net:caif_netlink_parms(): no params data found [ 418.018034][T13269] chnl_net:caif_netlink_parms(): no params data found [ 418.154365][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.161740][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.169182][T13268] bridge_slave_0: entered allmulticast mode [ 418.176782][T13268] bridge_slave_0: entered promiscuous mode [ 418.212681][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.220161][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.227446][T13268] bridge_slave_1: entered allmulticast mode [ 418.235118][T13268] bridge_slave_1: entered promiscuous mode [ 418.258285][T13276] chnl_net:caif_netlink_parms(): no params data found [ 418.413808][T13268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.448013][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.457432][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.465053][T13272] bridge_slave_0: entered allmulticast mode [ 418.472749][T13272] bridge_slave_0: entered promiscuous mode [ 418.483547][T13268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.516504][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.523779][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.531838][T13269] bridge_slave_0: entered allmulticast mode [ 418.540006][T13269] bridge_slave_0: entered promiscuous mode [ 418.547979][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.555430][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.562865][T13272] bridge_slave_1: entered allmulticast mode [ 418.570588][T13272] bridge_slave_1: entered promiscuous mode [ 418.595579][T13274] chnl_net:caif_netlink_parms(): no params data found [ 418.609510][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.616814][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.625568][T13269] bridge_slave_1: entered allmulticast mode [ 418.633572][T13269] bridge_slave_1: entered promiscuous mode [ 418.718322][T13268] team0: Port device team_slave_0 added [ 418.750052][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.763247][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.775649][T13268] team0: Port device team_slave_1 added [ 418.811475][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.823605][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.847095][T13276] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.855182][T13276] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.862672][T13276] bridge_slave_0: entered allmulticast mode [ 418.870561][T13276] bridge_slave_0: entered promiscuous mode [ 418.920223][T13276] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.927472][T13276] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.935055][T13276] bridge_slave_1: entered allmulticast mode [ 418.944248][T13276] bridge_slave_1: entered promiscuous mode [ 418.984838][T13268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.992028][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.018960][ T5843] Bluetooth: hci15: command tx timeout [ 419.025289][T13268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.056608][T13269] team0: Port device team_slave_0 added [ 419.065510][T13272] team0: Port device team_slave_0 added [ 419.073503][T13268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.080707][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.106967][ T5843] Bluetooth: hci16: command tx timeout [ 419.113093][T13268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.151856][T13269] team0: Port device team_slave_1 added [ 419.160709][T13272] team0: Port device team_slave_1 added [ 419.169729][ T53] Bluetooth: hci17: command tx timeout [ 419.183633][T13276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.247267][T13276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.257293][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.265021][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.273035][T13274] bridge_slave_0: entered allmulticast mode [ 419.281098][T13274] bridge_slave_0: entered promiscuous mode [ 419.303831][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.310992][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.337341][ T53] Bluetooth: hci18: command tx timeout [ 419.343155][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.355373][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.362672][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.388843][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.414908][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.422459][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.429840][T13274] bridge_slave_1: entered allmulticast mode [ 419.437235][T13274] bridge_slave_1: entered promiscuous mode [ 419.458199][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.465311][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.492365][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.500655][ T53] Bluetooth: hci19: command tx timeout [ 419.515638][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.523677][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.550418][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.605267][T13268] hsr_slave_0: entered promiscuous mode [ 419.612304][T13268] hsr_slave_1: entered promiscuous mode [ 419.618600][T13268] debugfs: 'hsr0' already exists in 'hsr' [ 419.624477][T13268] Cannot create hsr debugfs directory [ 419.642768][T13276] team0: Port device team_slave_0 added [ 419.679930][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.703320][T13276] team0: Port device team_slave_1 added [ 419.757842][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.845303][T13276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.853248][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.879829][T13276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.902797][T13269] hsr_slave_0: entered promiscuous mode [ 419.909768][T13269] hsr_slave_1: entered promiscuous mode [ 419.916170][T13269] debugfs: 'hsr0' already exists in 'hsr' [ 419.922092][T13269] Cannot create hsr debugfs directory [ 419.932940][T13272] hsr_slave_0: entered promiscuous mode [ 419.940125][T13272] hsr_slave_1: entered promiscuous mode [ 419.946527][T13272] debugfs: 'hsr0' already exists in 'hsr' [ 419.952360][T13272] Cannot create hsr debugfs directory [ 419.972789][T13276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.980033][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.006318][T13276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.038476][T13274] team0: Port device team_slave_0 added [ 420.064468][T13274] team0: Port device team_slave_1 added [ 420.214728][T13274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.222940][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.249171][T13274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.272081][T13276] hsr_slave_0: entered promiscuous mode [ 420.278711][T13276] hsr_slave_1: entered promiscuous mode [ 420.285242][T13276] debugfs: 'hsr0' already exists in 'hsr' [ 420.291273][T13276] Cannot create hsr debugfs directory [ 420.310901][T13274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.317877][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.344435][T13274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.579267][T13274] hsr_slave_0: entered promiscuous mode [ 420.585927][T13274] hsr_slave_1: entered promiscuous mode [ 420.592628][T13274] debugfs: 'hsr0' already exists in 'hsr' [ 420.598367][T13274] Cannot create hsr debugfs directory [ 421.089283][T13308] Bluetooth: hci15: command tx timeout [ 421.169207][T13308] Bluetooth: hci16: command tx timeout [ 421.249252][T13308] Bluetooth: hci17: command tx timeout [ 421.409238][T13308] Bluetooth: hci18: command tx timeout [ 421.569278][T13308] Bluetooth: hci19: command tx timeout [ 421.811557][T13308] Bluetooth: hci7: command 0x0406 tx timeout [ 421.817771][T13308] Bluetooth: hci9: command 0x0406 tx timeout [ 421.838377][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 421.840647][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 421.847454][ T5841] Bluetooth: hci8: command 0x0406 tx timeout [ 423.169206][ T5843] Bluetooth: hci15: command tx timeout [ 423.249093][ T5843] Bluetooth: hci16: command tx timeout [ 423.329173][ T5843] Bluetooth: hci17: command tx timeout [ 423.489304][ T5843] Bluetooth: hci18: command tx timeout [ 423.649658][ T5843] Bluetooth: hci19: command tx timeout [ 425.249397][ T5843] Bluetooth: hci15: command tx timeout [ 425.329136][ T5843] Bluetooth: hci16: command tx timeout [ 425.409255][ T5843] Bluetooth: hci17: command tx timeout [ 425.569227][ T5843] Bluetooth: hci18: command tx timeout [ 425.729294][ T5843] Bluetooth: hci19: command tx timeout [ 431.891740][ T31] INFO: task syz.2.1976:13127 blocked for more than 143 seconds. [ 431.899942][ T31] Not tainted syzkaller #0 [ 431.904896][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.913929][ T31] task:syz.2.1976 state:D stack:24312 pid:13127 tgid:13124 ppid:5825 task_flags:0x480140 flags:0x00080002 [ 431.926226][ T31] Call Trace: [ 431.929598][ T31] [ 431.932555][ T31] __schedule+0x149b/0x4fd0 [ 431.937082][ T31] ? __lock_acquire+0x6b6/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 431.942212][ T31] ? __pfx___schedule+0x10/0x10 [ 431.947118][ T31] ? schedule+0x91/0x360 [ 431.951509][ T31] schedule+0x165/0x360 [ 431.955724][ T31] blk_mq_freeze_queue_wait+0xf1/0x170 [ 431.961375][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 431.967499][ T31] ? queue_limits_commit_update_frozen+0x56/0xd0 [ 431.974826][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 431.981099][ T31] queue_limits_commit_update_frozen+0x56/0xd0 [ 431.987333][ T31] nbd_set_size+0x47e/0x6a0 [ 431.992357][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 431.997459][ T31] ? nla_memcpy+0x5b/0xc0 [ 432.002014][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 432.007018][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 432.012635][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 432.018672][ T31] ? bpf_lsm_capable+0x9/0x20 [ 432.023470][ T31] ? security_capable+0x7e/0x2e0 [ 432.028453][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.033675][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 432.039092][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.060465][ T31] ? rcu_is_watching+0x15/0xb0 [ 432.065322][ T31] ? __nla_parse+0x40/0x60 [ 432.088504][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 432.099808][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 432.105438][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.114784][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.119971][ T31] genl_rcv_msg+0x60e/0x790 [ 432.124532][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.136103][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.142341][ T31] netlink_rcv_skb+0x208/0x470 [ 432.147171][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.152343][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.157686][ T31] ? genl_rcv+0x19/0x40 [ 432.162289][ T31] ? down_read+0x274/0x2e0 [ 432.166766][ T31] ? genl_rcv+0xd/0x40 [ 432.171022][ T31] genl_rcv+0x28/0x40 [ 432.175069][ T31] netlink_unicast+0x82f/0x9e0 [ 432.180112][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.185453][ T31] ? __alloc_skb+0x198/0x3a0 [ 432.190386][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.195374][ T31] ? skb_put+0x11b/0x210 [ 432.199742][ T31] netlink_sendmsg+0x805/0xb30 [ 432.204564][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.210369][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.215337][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.220811][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.226162][ T31] __sock_sendmsg+0x21c/0x270 [ 432.230962][ T31] ____sys_sendmsg+0x505/0x820 [ 432.235793][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.241211][ T31] ? import_iovec+0x74/0xa0 [ 432.245745][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 432.250755][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.255995][ T31] ? futex_wake+0x4b2/0x560 [ 432.260648][ T31] ? __fget_files+0x2a/0x420 [ 432.265375][ T31] ? __fget_files+0x3a0/0x420 [ 432.270193][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 432.275164][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.280706][ T31] ? rcu_is_watching+0x15/0xb0 [ 432.285502][ T31] do_syscall_64+0xec/0xf80 [ 432.290079][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.296254][ T31] ? trace_irq_disable+0x37/0x100 [ 432.301401][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.306131][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.312175][ T31] RIP: 0033:0x7f8d1318f749 [ 432.316639][ T31] RSP: 002b:00007f8d113f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.325416][ T31] RAX: ffffffffffffffda RBX: 00007f8d133e5fa0 RCX: 00007f8d1318f749 [ 432.333450][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000006 [ 432.341514][ T31] RBP: 00007f8d13213f91 R08: 0000000000000000 R09: 0000000000000000 [ 432.349658][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.357642][ T31] R13: 00007f8d133e6038 R14: 00007f8d133e5fa0 R15: 00007ffefcdd1d48 [ 432.365783][ T31] [ 432.368924][ T31] INFO: task syz.1.1978:13133 blocked for more than 143 seconds. [ 432.378163][ T31] Not tainted syzkaller #0 [ 432.383451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.392268][ T31] task:syz.1.1978 state:D stack:28728 pid:13133 tgid:13128 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 432.404389][ T31] Call Trace: [ 432.407708][ T31] [ 432.411002][ T31] __schedule+0x149b/0x4fd0 [ 432.415584][ T31] ? __pfx___schedule+0x10/0x10 [ 432.420651][ T31] ? schedule+0x91/0x360 [ 432.424932][ T31] schedule+0x165/0x360 [ 432.429366][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.434872][ T31] __mutex_lock+0x7e6/0x1350 [ 432.439539][ T31] ? __mutex_lock+0x5bb/0x1350 [ 432.444348][ T31] ? genl_rcv_msg+0x10d/0x790 [ 432.449425][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.454504][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.459483][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 432.464878][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.470097][ T31] genl_rcv_msg+0x10d/0x790 [ 432.474628][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.479895][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.484904][ T31] netlink_rcv_skb+0x208/0x470 [ 432.489769][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.494850][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.500217][ T31] ? genl_rcv+0x19/0x40 [ 432.504419][ T31] ? down_read+0x274/0x2e0 [ 432.509193][ T31] ? genl_rcv+0xd/0x40 [ 432.513321][ T31] genl_rcv+0x28/0x40 [ 432.517354][ T31] netlink_unicast+0x82f/0x9e0 [ 432.522259][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.527574][ T31] ? __alloc_skb+0x198/0x3a0 [ 432.532339][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.537439][ T31] ? skb_put+0x11b/0x210 [ 432.541870][ T31] netlink_sendmsg+0x805/0xb30 [ 432.546691][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.552106][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.557085][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.562439][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.567783][ T31] __sock_sendmsg+0x21c/0x270 [ 432.572524][ T31] __sys_sendto+0x3bd/0x520 [ 432.577041][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.582164][ T31] ? exc_page_fault+0x71/0xd0 [ 432.586874][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 432.592230][ T31] __x64_sys_sendto+0xde/0x100 [ 432.597026][ T31] do_syscall_64+0xec/0xf80 [ 432.601622][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.607707][ T31] ? trace_irq_disable+0x37/0x100 [ 432.612950][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.617759][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.623778][ T31] RIP: 0033:0x7f1bc6f915dc [ 432.628231][ T31] RSP: 002b:00007f1bc7dc0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.636834][ T31] RAX: ffffffffffffffda RBX: 00007f1bc7dc0fc0 RCX: 00007f1bc6f915dc [ 432.644903][ T31] RDX: 0000000000000024 RSI: 00007f1bc7dc1010 RDI: 0000000000000005 [ 432.652932][ T31] RBP: 0000000000000000 R08: 00007f1bc7dc0f14 R09: 000000000000000c [ 432.660977][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 432.669158][ T31] R13: 00007f1bc7dc0f68 R14: 00007f1bc7dc1010 R15: 0000000000000000 [ 432.677204][ T31] [ 432.680384][ T31] INFO: task syz.4.1979:13141 blocked for more than 144 seconds. [ 432.688133][ T31] Not tainted syzkaller #0 [ 432.693162][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.701919][ T31] task:syz.4.1979 state:D stack:28440 pid:13141 tgid:13139 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 432.713970][ T31] Call Trace: [ 432.717258][ T31] [ 432.720223][ T31] __schedule+0x149b/0x4fd0 [ 432.724776][ T31] ? __pfx___schedule+0x10/0x10 [ 432.729753][ T31] ? schedule+0x91/0x360 [ 432.734043][ T31] schedule+0x165/0x360 [ 432.738219][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.744231][ T31] __mutex_lock+0x7e6/0x1350 [ 432.748973][ T31] ? __mutex_lock+0x5bb/0x1350 [ 432.753804][ T31] ? genl_rcv_msg+0x10d/0x790 [ 432.758523][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.763642][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.768668][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 432.774425][ T31] ? radix_tree_lookup+0x240/0x290 [ 432.779640][ T31] genl_rcv_msg+0x10d/0x790 [ 432.784177][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.789295][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 432.794281][ T31] netlink_rcv_skb+0x208/0x470 [ 432.799135][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.804173][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.809547][ T31] ? genl_rcv+0x19/0x40 [ 432.813736][ T31] ? down_read+0x274/0x2e0 [ 432.818232][ T31] ? genl_rcv+0xd/0x40 [ 432.822617][ T31] genl_rcv+0x28/0x40 [ 432.826672][ T31] netlink_unicast+0x82f/0x9e0 [ 432.831527][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.836831][ T31] ? __alloc_skb+0x198/0x3a0 [ 432.841471][ T31] ? netlink_sendmsg+0x642/0xb30 [ 432.846423][ T31] ? skb_put+0x11b/0x210 [ 432.851046][ T31] netlink_sendmsg+0x805/0xb30 [ 432.855870][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.861254][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.866256][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.871666][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.877303][ T31] __sock_sendmsg+0x21c/0x270 [ 432.882076][ T31] __sys_sendto+0x3bd/0x520 [ 432.886645][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.891870][ T31] ? rcu_is_watching+0x15/0xb0 [ 432.896749][ T31] __x64_sys_sendto+0xde/0x100 [ 432.901600][ T31] do_syscall_64+0xec/0xf80 [ 432.906180][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.912308][ T31] ? trace_irq_disable+0x37/0x100 [ 432.917375][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.922105][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.928093][ T31] RIP: 0033:0x7fb6b17915dc [ 432.932659][ T31] RSP: 002b:00007fb6b258bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.941245][ T31] RAX: ffffffffffffffda RBX: 00007fb6b258bfc0 RCX: 00007fb6b17915dc [ 432.949330][ T31] RDX: 0000000000000020 RSI: 00007fb6b258c010 RDI: 0000000000000007 [ 432.957313][ T31] RBP: 0000000000000000 R08: 00007fb6b258bf14 R09: 000000000000000c [ 432.965442][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 432.973531][ T31] R13: 00007fb6b258bf68 R14: 00007fb6b258c010 R15: 0000000000000000 [ 432.981918][ T31] [ 432.985018][ T31] INFO: task syz.0.1981:13144 blocked for more than 144 seconds. [ 432.999583][ T31] Not tainted syzkaller #0 [ 433.004574][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.014020][ T31] task:syz.0.1981 state:D stack:25240 pid:13144 tgid:13143 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 433.026240][ T31] Call Trace: [ 433.029707][ T31] [ 433.032674][ T31] __schedule+0x149b/0x4fd0 [ 433.037224][ T31] ? __pfx___schedule+0x10/0x10 [ 433.042287][ T31] ? schedule+0x91/0x360 [ 433.046557][ T31] schedule+0x165/0x360 [ 433.050866][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.056370][ T31] __mutex_lock+0x7e6/0x1350 [ 433.061224][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.066079][ T31] ? genl_rcv_msg+0x10d/0x790 [ 433.070871][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.075944][ T31] ? radix_tree_lookup+0x240/0x290 [ 433.081343][ T31] genl_rcv_msg+0x10d/0x790 [ 433.085890][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.091530][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 433.096768][ T31] ? __asan_memcpy+0x40/0x70 [ 433.105288][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.111152][ T31] netlink_rcv_skb+0x208/0x470 [ 433.115966][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.121146][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.126483][ T31] ? genl_rcv+0x19/0x40 [ 433.130802][ T31] ? down_read+0x274/0x2e0 [ 433.135253][ T31] ? genl_rcv+0xd/0x40 [ 433.139517][ T31] genl_rcv+0x28/0x40 [ 433.143537][ T31] netlink_unicast+0x82f/0x9e0 [ 433.148352][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 433.153900][ T31] ? __alloc_skb+0x198/0x3a0 [ 433.158532][ T31] ? netlink_sendmsg+0x642/0xb30 [ 433.163660][ T31] ? skb_put+0x11b/0x210 [ 433.167960][ T31] netlink_sendmsg+0x805/0xb30 [ 433.173120][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.178463][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.183770][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.189208][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.194551][ T31] __sock_sendmsg+0x21c/0x270 [ 433.199460][ T31] __sys_sendto+0x3bd/0x520 [ 433.204021][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 433.209356][ T31] ? exc_page_fault+0x71/0xd0 [ 433.214182][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 433.219568][ T31] __x64_sys_sendto+0xde/0x100 [ 433.224381][ T31] do_syscall_64+0xec/0xf80 [ 433.229003][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.235140][ T31] ? trace_irq_disable+0x37/0x100 [ 433.240375][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.245085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.251181][ T31] RIP: 0033:0x7ffa3a1915dc [ 433.255637][ T31] RSP: 002b:00007ffa383ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.264110][ T31] RAX: ffffffffffffffda RBX: 00007ffa383ecfc0 RCX: 00007ffa3a1915dc [ 433.272160][ T31] RDX: 0000000000000024 RSI: 00007ffa383ed010 RDI: 000000000000000c [ 433.280291][ T31] RBP: 0000000000000000 R08: 00007ffa383ecf14 R09: 000000000000000c [ 433.288288][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 433.296627][ T31] R13: 00007ffa383ecf68 R14: 00007ffa383ed010 R15: 0000000000000000 [ 433.304828][ T31] [ 433.307900][ T31] INFO: task syz.0.1981:13147 blocked for more than 144 seconds. [ 433.315684][ T31] Not tainted syzkaller #0 [ 433.320682][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.329807][ T31] task:syz.0.1981 state:D stack:27224 pid:13147 tgid:13143 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 433.341883][ T31] Call Trace: [ 433.345268][ T31] [ 433.348239][ T31] __schedule+0x149b/0x4fd0 [ 433.352840][ T31] ? __pfx___schedule+0x10/0x10 [ 433.357713][ T31] ? schedule+0x91/0x360 [ 433.362053][ T31] schedule+0x165/0x360 [ 433.366241][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.371748][ T31] __mutex_lock+0x7e6/0x1350 [ 433.376352][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.381179][ T31] ? genl_rcv_msg+0x10d/0x790 [ 433.385874][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.390959][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 433.395924][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 433.401471][ T31] ? radix_tree_lookup+0x240/0x290 [ 433.406620][ T31] genl_rcv_msg+0x10d/0x790 [ 433.411346][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.416416][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 433.421461][ T31] netlink_rcv_skb+0x208/0x470 [ 433.426276][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.431476][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.436798][ T31] ? genl_rcv+0x19/0x40 [ 433.441118][ T31] ? down_read+0x274/0x2e0 [ 433.445548][ T31] ? genl_rcv+0xd/0x40 [ 433.449670][ T31] genl_rcv+0x28/0x40 [ 433.453680][ T31] netlink_unicast+0x82f/0x9e0 [ 433.458452][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 433.463797][ T31] ? __alloc_skb+0x198/0x3a0 [ 433.468394][ T31] ? netlink_sendmsg+0x642/0xb30 [ 433.473408][ T31] ? skb_put+0x11b/0x210 [ 433.477665][ T31] netlink_sendmsg+0x805/0xb30 [ 433.482494][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.487796][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.492896][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.498218][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.503575][ T31] __sock_sendmsg+0x21c/0x270 [ 433.508274][ T31] __sys_sendto+0x3bd/0x520 [ 433.512887][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 433.517944][ T31] ? exc_page_fault+0x71/0xd0 [ 433.522703][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 433.528171][ T31] __x64_sys_sendto+0xde/0x100 [ 433.533046][ T31] do_syscall_64+0xec/0xf80 [ 433.537587][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.543825][ T31] ? trace_irq_disable+0x37/0x100 [ 433.548957][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.553678][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.559682][ T31] RIP: 0033:0x7ffa3a1915dc [ 433.564132][ T31] RSP: 002b:00007ffa383cbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.572782][ T31] RAX: ffffffffffffffda RBX: 00007ffa383cbfc0 RCX: 00007ffa3a1915dc [ 433.580837][ T31] RDX: 0000000000000024 RSI: 00007ffa383cc010 RDI: 000000000000000e [ 433.588989][ T31] RBP: 0000000000000000 R08: 00007ffa383cbf14 R09: 000000000000000c [ 433.596989][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 433.605014][ T31] R13: 00007ffa383cbf68 R14: 00007ffa383cc010 R15: 0000000000000000 [ 433.613071][ T31] [ 433.616269][ T31] INFO: task syz.0.1981:13151 blocked for more than 145 seconds. [ 433.624210][ T31] Not tainted syzkaller #0 [ 433.629191][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.637932][ T31] task:syz.0.1981 state:D stack:28024 pid:13151 tgid:13143 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 433.650025][ T31] Call Trace: [ 433.653350][ T31] [ 433.656319][ T31] __schedule+0x149b/0x4fd0 [ 433.660990][ T31] ? __pfx___schedule+0x10/0x10 [ 433.665923][ T31] ? schedule+0x91/0x360 [ 433.670301][ T31] schedule+0x165/0x360 [ 433.674519][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.680078][ T31] __mutex_lock+0x7e6/0x1350 [ 433.684689][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.689581][ T31] ? genl_rcv_msg+0x10d/0x790 [ 433.694395][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 433.699513][ T31] ? radix_tree_lookup+0x240/0x290 [ 433.704660][ T31] genl_rcv_msg+0x10d/0x790 [ 433.709340][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.714392][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 433.719399][ T31] ? __asan_memcpy+0x40/0x70 [ 433.724001][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.729581][ T31] netlink_rcv_skb+0x208/0x470 [ 433.734420][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.739527][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.744905][ T31] ? genl_rcv+0x19/0x40 [ 433.749149][ T31] ? down_read+0x274/0x2e0 [ 433.753607][ T31] ? genl_rcv+0xd/0x40 [ 433.757702][ T31] genl_rcv+0x28/0x40 [ 433.761755][ T31] netlink_unicast+0x82f/0x9e0 [ 433.766539][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 433.771881][ T31] ? __alloc_skb+0x198/0x3a0 [ 433.776490][ T31] ? netlink_sendmsg+0x642/0xb30 [ 433.781513][ T31] ? skb_put+0x11b/0x210 [ 433.785835][ T31] netlink_sendmsg+0x805/0xb30 [ 433.790693][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.795997][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.801113][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.806438][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.812112][ T31] __sock_sendmsg+0x21c/0x270 [ 433.816849][ T31] __sys_sendto+0x3bd/0x520 [ 433.821421][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 433.826476][ T31] ? fd_install+0x95/0x3d0 [ 433.830987][ T31] ? fd_install+0x307/0x3d0 [ 433.835542][ T31] __x64_sys_sendto+0xde/0x100 [ 433.840452][ T31] do_syscall_64+0xec/0xf80 [ 433.844996][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.851161][ T31] ? trace_irq_disable+0x37/0x100 [ 433.856234][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.860985][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.866914][ T31] RIP: 0033:0x7ffa3a1915dc [ 433.871426][ T31] RSP: 002b:00007ffa383aaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.879993][ T31] RAX: ffffffffffffffda RBX: 00007ffa383aafc0 RCX: 00007ffa3a1915dc [ 433.888013][ T31] RDX: 0000000000000024 RSI: 00007ffa383ab010 RDI: 000000000000000d [ 433.896253][ T31] RBP: 0000000000000000 R08: 00007ffa383aaf14 R09: 000000000000000c [ 433.904337][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 433.912399][ T31] R13: 00007ffa383aaf68 R14: 00007ffa383ab010 R15: 0000000000000000 [ 433.920476][ T31] [ 433.923553][ T31] INFO: task syz.3.1984:13161 blocked for more than 145 seconds. [ 433.931526][ T31] Not tainted syzkaller #0 [ 433.936473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.945226][ T31] task:syz.3.1984 state:D stack:27000 pid:13161 tgid:13160 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 433.957403][ T31] Call Trace: [ 433.960855][ T31] [ 433.963825][ T31] __schedule+0x149b/0x4fd0 [ 433.968373][ T31] ? __pfx___schedule+0x10/0x10 [ 433.973343][ T31] ? schedule+0x91/0x360 [ 433.977649][ T31] schedule+0x165/0x360 [ 433.981939][ T31] schedule_preempt_disabled+0x13/0x30 [ 433.987451][ T31] __mutex_lock+0x7e6/0x1350 [ 433.992167][ T31] ? __mutex_lock+0x5bb/0x1350 [ 433.996977][ T31] ? genl_rcv_msg+0x10d/0x790 [ 434.001824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 434.006887][ T31] ? radix_tree_lookup+0x240/0x290 [ 434.012092][ T31] genl_rcv_msg+0x10d/0x790 [ 434.016622][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.021753][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 434.026796][ T31] ? __asan_memcpy+0x40/0x70 [ 434.031455][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 434.036849][ T31] netlink_rcv_skb+0x208/0x470 [ 434.041664][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.046737][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.052430][ T31] ? genl_rcv+0x19/0x40 [ 434.056653][ T31] ? down_read+0x274/0x2e0 [ 434.061291][ T31] ? genl_rcv+0xd/0x40 [ 434.065398][ T31] genl_rcv+0x28/0x40 [ 434.069526][ T31] netlink_unicast+0x82f/0x9e0 [ 434.074369][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 434.079745][ T31] ? __alloc_skb+0x198/0x3a0 [ 434.084384][ T31] ? netlink_sendmsg+0x642/0xb30 [ 434.089423][ T31] ? skb_put+0x11b/0x210 [ 434.093721][ T31] netlink_sendmsg+0x805/0xb30 [ 434.098523][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.103872][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.108831][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.114202][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.119758][ T31] __sock_sendmsg+0x21c/0x270 [ 434.124483][ T31] __sys_sendto+0x3bd/0x520 [ 434.129713][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 434.134838][ T31] ? exc_page_fault+0x71/0xd0 [ 434.139595][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 434.144897][ T31] __x64_sys_sendto+0xde/0x100 [ 434.149722][ T31] do_syscall_64+0xec/0xf80 [ 434.154244][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.160378][ T31] ? trace_irq_disable+0x37/0x100 [ 434.165422][ T31] ? clear_bhb_loop+0x60/0xb0 [ 434.170217][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.176130][ T31] RIP: 0033:0x7f5cd63915dc [ 434.180679][ T31] RSP: 002b:00007f5cd72a8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 434.189174][ T31] RAX: ffffffffffffffda RBX: 00007f5cd72a8fc0 RCX: 00007f5cd63915dc [ 434.197453][ T31] RDX: 0000000000000024 RSI: 00007f5cd72a9010 RDI: 0000000000000008 [ 434.205590][ T31] RBP: 0000000000000000 R08: 00007f5cd72a8f14 R09: 000000000000000c [ 434.213730][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 434.221983][ T31] R13: 00007f5cd72a8f68 R14: 00007f5cd72a9010 R15: 0000000000000000 [ 434.230032][ T31] [ 434.233154][ T31] [ 434.233154][ T31] Showing all locks held in the system: [ 434.240942][ T31] 1 lock held by khungtaskd/31: [ 434.245794][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.255830][ T31] 2 locks held by getty/5583: [ 434.260565][ T31] #0: ffff8880345490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.270454][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 434.280706][ T31] 1 lock held by udevd/6060: [ 434.285308][ T31] #0: ffff888025285358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 434.294785][ T31] 6 locks held by syz.2.1976/13127: [ 434.300059][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.308499][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.317594][ T31] #2: ffff88802528ba78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 434.328136][ T31] #3: ffff888141f96f98 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 434.337642][ T31] #4: ffff888141f96938 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0 [ 434.349776][ T31] #5: ffff888141f96970 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0 [ 434.362161][ T31] 2 locks held by syz.1.1978/13133: [ 434.367395][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.375987][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.385071][ T31] 2 locks held by syz.4.1979/13141: [ 434.390409][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.398665][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.407753][ T31] 2 locks held by syz.0.1981/13144: [ 434.413168][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.421504][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.430646][ T31] 2 locks held by syz.0.1981/13147: [ 434.436121][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.444390][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.453508][ T31] 2 locks held by syz.0.1981/13151: [ 434.458742][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.467001][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.476098][ T31] 2 locks held by syz.3.1984/13161: [ 434.481372][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.489629][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.498611][ T31] 2 locks held by syz-executor/13168: [ 434.504080][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.512326][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.521373][ T31] 2 locks held by syz-executor/13170: [ 434.526779][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.535161][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.544229][ T31] 2 locks held by syz-executor/13172: [ 434.549660][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.557866][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.566880][ T31] 2 locks held by syz-executor/13175: [ 434.572305][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.580566][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.589635][ T31] 2 locks held by syz-executor/13177: [ 434.595030][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.603283][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.612476][ T31] 2 locks held by syz-executor/13216: [ 434.617877][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.626387][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.635440][ T31] 2 locks held by syz-executor/13220: [ 434.640919][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.649262][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.658320][ T31] 2 locks held by syz-executor/13222: [ 434.663861][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.672166][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.681219][ T31] 2 locks held by syz-executor/13226: [ 434.686598][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.694923][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.703947][ T31] 2 locks held by syz-executor/13229: [ 434.709381][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.717622][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.726719][ T31] 2 locks held by syz-executor/13268: [ 434.732140][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.740425][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.749550][ T31] 2 locks held by syz-executor/13269: [ 434.754931][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.763230][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.772474][ T31] 2 locks held by syz-executor/13272: [ 434.777963][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.786381][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.795549][ T31] 2 locks held by syz-executor/13274: [ 434.801003][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.809286][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.818331][ T31] 2 locks held by syz-executor/13276: [ 434.823808][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.832233][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 434.841343][ T31] [ 434.843710][ T31] ============================================= [ 434.843710][ T31] [ 434.852496][ T31] NMI backtrace for cpu 1 [ 434.852524][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.852548][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.852562][ T31] Call Trace: [ 434.852570][ T31] [ 434.852587][ T31] dump_stack_lvl+0xe8/0x150 [ 434.852620][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 434.852650][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.852689][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 434.852721][ T31] sys_info+0x135/0x170 [ 434.852745][ T31] watchdog+0xf95/0xfe0 [ 434.852780][ T31] ? watchdog+0x20a/0xfe0 [ 434.852815][ T31] kthread+0x711/0x8a0 [ 434.852844][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.852871][ T31] ? __pfx_kthread+0x10/0x10 [ 434.852901][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.852932][ T31] ? __pfx_kthread+0x10/0x10 [ 434.852960][ T31] ret_from_fork+0x510/0xa50 [ 434.852984][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.853004][ T31] ? __switch_to+0xc9e/0x1480 [ 434.853036][ T31] ? __pfx_kthread+0x10/0x10 [ 434.853063][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.853109][ T31] [ 434.853117][ T31] Sending NMI from CPU 1 to CPUs 0: [ 434.972952][ C0] NMI backtrace for cpu 0 [ 434.972971][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 434.972992][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.973004][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 434.973027][ C0] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 434.973044][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2 [ 434.973061][ C0] RAX: 00000000001c21a5 RBX: ffffffff819713ee RCX: 0000000080000001 [ 434.973075][ C0] RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0 [ 434.973088][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 434.973102][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270 [ 434.973116][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 434.973128][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 434.973143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.973156][ C0] CR2: 00007ffeefd79ff8 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 434.973174][ C0] Call Trace: [ 434.973182][ C0] [ 434.973189][ C0] default_idle+0x13/0x20 [ 434.973211][ C0] default_idle_call+0x73/0xb0 [ 434.973235][ C0] do_idle+0x1be/0x4d0 [ 434.973259][ C0] ? __pfx_do_idle+0x10/0x10 [ 434.973279][ C0] ? do_idle+0x4a8/0x4d0 [ 434.973301][ C0] cpu_startup_entry+0x44/0x60 [ 434.973322][ C0] rest_init+0x2de/0x300 [ 434.973346][ C0] start_kernel+0x381/0x3d0 [ 434.973376][ C0] x86_64_start_reservations+0x24/0x30 [ 434.973401][ C0] x86_64_start_kernel+0x143/0x1c0 [ 434.973424][ C0] common_startup_64+0x13e/0x147 [ 434.973457][ C0] [ 435.155064][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 435.162012][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 435.171138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.181220][ T31] Call Trace: [ 435.184507][ T31] [ 435.187445][ T31] vpanic+0x1e0/0x670 [ 435.191457][ T31] panic+0xb9/0xc0 [ 435.195230][ T31] ? __pfx_panic+0x10/0x10 [ 435.199665][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 435.205069][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 435.211253][ T31] watchdog+0xfdf/0xfe0 [ 435.215456][ T31] ? watchdog+0x20a/0xfe0 [ 435.219821][ T31] kthread+0x711/0x8a0 [ 435.223916][ T31] ? __pfx_watchdog+0x10/0x10 [ 435.228714][ T31] ? __pfx_kthread+0x10/0x10 [ 435.233333][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.238587][ T31] ? __pfx_kthread+0x10/0x10 [ 435.243205][ T31] ret_from_fork+0x510/0xa50 [ 435.247817][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 435.252976][ T31] ? __switch_to+0xc9e/0x1480 [ 435.257684][ T31] ? __pfx_kthread+0x10/0x10 [ 435.262302][ T31] ret_from_fork_asm+0x1a/0x30 [ 435.267111][ T31] [ 435.270771][ T31] Kernel Offset: disabled [ 435.275107][ T31] Rebooting in 86400 seconds..