last executing test programs: 2m17.8687412s ago: executing program 4 (id=473): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 2m2.588154549s ago: executing program 2 (id=580): socketpair(0x2, 0x2, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) socketpair(0x1f, 0x1, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendto$inet6(r0, &(0x7f0000000080)="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", 0xfc, 0x48041, &(0x7f0000000180)={0xa, 0x4e22, 0x968, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfe}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="369e0f33", 0x4}, {&(0x7f0000000240)="74e64af632080cc7784baed3a557460de6c456685fbb29ce542c14905a96b35ece56fccef90e4bc045d3d0e54f29a5691709ecd5280ccec21b100c4b51d33611fe7a55cb1384368e5bc707a5a8ca4000b047f836edeec77267e47e9aacaef9e2d3270ab704c62f86e72c498be9cc85d268b7fe628b", 0x75}], 0x2, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x20}, 0x20040004) (async) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000380)={'ipvlan1\x00', 0xde}) (async) r4 = getpid() sendmsg$AUDIT_SET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x3e9, 0x203, 0x70bd25, 0x25dfdbfe, {0x20, 0x1, 0x0, r4, 0x50, 0x100, 0x0, 0x6, 0x0, 0x5, 0x6}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x8080) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5b9, 0x38}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x2004c040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={0xffffffffffffffff, &(0x7f0000000600)="93cfcf4d03848c90e14685a39f3ccd64a507b0bcfd83ea0170a57ecc49ce2f6b06b769b0e556d8e662bb1a0cc2eb8d735eb18ee5c7bd2fbe529a3408c63b4d892b748392da75db6d2cadc19abdfee5a810ccc82e4b744ec08526bacabce08fc721033e1b123a340fb76109fe7663bb2266a7fee2f3130812e411f62a7689048bcc1583ae50f42a4acc3aaed9a963350497568ca9af33afabf7bb6679643ac6bae6a7817a4c8600a9a8514e95ddd2", &(0x7f00000006c0)=@buf="220bd03c592e2132eb09", 0x4}, 0x20) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$AUDIT_GET(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3e8, 0x300, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000cc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)={0x3bc, 0x42, 0x1, 0x70bd29, 0x25dfdbfc, {0x1b}, [@nested={0x173, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2e, 0x0, 0x0, @u64=0x3f5}, @typed={0xc, 0x13d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0x4}, @generic="39f2695f522747a1e074739f0ed82e3ea40dd3134d9765a73510ad7f077b2aeceb396e2206281588443dae213a83b9ece183b5bb4dcb914dd463b78ddb48c4c3a73e71e9dc51c1c91b3b0fc526669388787d024739d6e7875aff11da34eb44ec35a38665f3ae753566028878c9e45423970f5c535853a97f59789d9fa88095fdd434d7a101f9bbdddb18ecd054ed7674e8219a01c466c4cf38e8fe8454864a27ff81472f0793502d5deeb18eb07efec35e869ed8d226bac4b87a9652aa9040efeba2bbe6dc086eb0299da6", @generic="51a9bbe6216cc6bfb0b3c2094838cd0f2d6be2c7d8afa68f5e3ba2abe837a4c368eaec0b97ef7822345bae2ebf3145af284b1a449b76dd35579b6a1d60d5d37c84e18d2480ddbe04b62d699da331f1a90c3604df5b5c3ec21bf781aaec1aabb53dc5aaea1e1733d3f144d4b98b6fa7613e84a9c1137cdc500aad600e97c6443d51c2390b"]}, @typed={0x103, 0xbe, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x48, 0x0, 0x0, @pid=r4}, @generic="f58fa785ce32d7d25c865704bcdfb412d27f5c93bbecb729722c523c8d22e2cb4da987836c548e0cbd76694c9010fc08d53803bedd9782850f52fddf4fe810a2516beef924fffd32e44658c800bc044715dbeb061518ae621427f4df198052d66c2e4099cde1d1a334acdcbbe9e1565f24d8841871ba463f1e", @generic="9d901d27f543427765446874363b436013e367ade210e94cb8178020106f19d52f5b8bbe29db959bee24adda89bfe37ff8e8b522bc2116f62ed244f40c3c11f9885b9f6a8777b0e60606a0416c40bdfdb599a94a6803ed3c60132c66ddef172625365ccf2d32cad835d44541714bf88c2a76c7c26340ee962452d4b5fb96b03580285273c58fcebb61c0fc070f7ce1262f55924171773a93a07ae714980671761befb2a557a638e703624df5"]}, 0x3bc}, 0x1, 0x0, 0x0, 0x60000804}, 0x20000800) (async) close(r5) (async) r7 = socket(0x8, 0x4, 0x4687) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r6}, 0x4) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000d40)={0x0, 0x2a9, 0x4, [0x7, 0xc, 0x41f, 0x1dc]}, &(0x7f0000000d80)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000dc0)={r8, 0x7ff}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000e00), &(0x7f0000000e40)=0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r2) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "579256c8b655e0d4b145153afc071a635d074c76c15afd3481"}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x6) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001280)={'sit0\x00', &(0x7f0000001180)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x4, 0xff, {{0x2f, 0x4, 0x3, 0x3a, 0xbc, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x14, 0xd1, 0x1, 0xc, [{@local}, {@multicast1, 0x1}]}, @cipso={0x86, 0x71, 0x1, [{0x2, 0xb, "7c89a1052ca04ff090"}, {0x5, 0x10, "55137271565d962b60c63d4720aa"}, {0x7, 0xb, "7c20d6999fb294d6d0"}, {0x7, 0x7, "eebe58bb30"}, {0x7, 0xb, "6e9f866f8f2091a422"}, {0x1, 0xc, "f7949215b0cec8fb2854"}, {0x5, 0xa, "c3ef559e1d3f1457"}, {0x7, 0x3, "a9"}, {0x7, 0xe, "6eea634fbab8c2272c67e028"}, {0x1, 0xc, "cefa7de15c6be06acf7e"}]}, @lsrr={0x83, 0x7, 0x38, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0xf, 0x1d, [@loopback, @dev={0xac, 0x14, 0x14, 0x21}, @local]}, @rr={0x7, 0x7, 0x60, [@remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40000) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x80, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_LABELS_MASK={0x20, 0x17, [0xcb94, 0x4, 0x203, 0xba, 0xfffffff9, 0x2, 0xb57]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xb9, 0x8, 0x0, 0x8000]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004}, 0x8000) 2m1.836139985s ago: executing program 2 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "1e3beefba9d3097c"}}}}}, 0x2e) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$packet(r5, &(0x7f00000000c0)="12e59fc2015348dc703df5c87660737547faa7bde9f2e432", 0x18, 0x40, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0xf9, 0x6, @broadcast}, 0x14) 1m51.802804477s ago: executing program 4 (id=473): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 1m40.009487357s ago: executing program 2 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "1e3beefba9d3097c"}}}}}, 0x2e) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$packet(r5, &(0x7f00000000c0)="12e59fc2015348dc703df5c87660737547faa7bde9f2e432", 0x18, 0x40, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0xf9, 0x6, @broadcast}, 0x14) 1m30.522482335s ago: executing program 4 (id=473): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 1m15.763992098s ago: executing program 2 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "1e3beefba9d3097c"}}}}}, 0x2e) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$packet(r5, &(0x7f00000000c0)="12e59fc2015348dc703df5c87660737547faa7bde9f2e432", 0x18, 0x40, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0xf9, 0x6, @broadcast}, 0x14) 1m5.744646939s ago: executing program 4 (id=473): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 55.946093877s ago: executing program 2 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "1e3beefba9d3097c"}}}}}, 0x2e) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$packet(r5, &(0x7f00000000c0)="12e59fc2015348dc703df5c87660737547faa7bde9f2e432", 0x18, 0x40, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0xf9, 0x6, @broadcast}, 0x14) 42.851378921s ago: executing program 4 (id=473): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 33.218844845s ago: executing program 2 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "1e3beefba9d3097c"}}}}}, 0x2e) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, &(0x7f0000000080)={0x23, 0x0, 0x10, 0x7}, 0x10) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$packet(r5, &(0x7f00000000c0)="12e59fc2015348dc703df5c87660737547faa7bde9f2e432", 0x18, 0x40, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0xf9, 0x6, @broadcast}, 0x14) 22.276403364s ago: executing program 4 (id=473): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 19.500012927s ago: executing program 0 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05003300988df8d80800340009"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xc, 0x0, 0x9, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.332490405s ago: executing program 0 (id=1211): bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7b59}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r6, 0x104, 0x4, 0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1823fffffdffffff706155f2f75ba9bc1f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) 17.166757621s ago: executing program 0 (id=1218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070700000000000000010200010000e000000100000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb00"/130], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070700000000000000010200010000e000000100000000ac1414aa00000000ac1414bb000000000000000000000000ac1414bb00"/130], 0x0) (async) 17.048474684s ago: executing program 3 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200"], 0x48) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) 16.724416118s ago: executing program 0 (id=1223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r3, 0x267a4e37}, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', r3, 0x40, 0x1, 0x6, 0x7f, {{0x24, 0x4, 0x3, 0x5, 0x90, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x54, 0x77, 0x3, 0x7, [{@private=0xa010102, 0x6}, {@multicast2, 0x7}, {@multicast1, 0x3}, {@empty, 0x6}, {@loopback, 0x3}, {@private=0xa010100, 0x800}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x2}, {@broadcast, 0x8}]}, @rr={0x7, 0xf, 0x39, [@broadcast, @multicast2, @loopback]}, @generic={0x82, 0x3, 'T'}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp={0x44, 0x8, 0x51, 0x0, 0x5, [0x0]}, @end, @rr={0x7, 0x7, 0x58, [@rand_addr=0x64010101]}]}}}}}) accept4(r0, &(0x7f0000000080)=@phonet, &(0x7f0000000000)=0x80, 0x80000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x6d, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe4c0318bd27fdcab}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x13}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x24000805}, 0x24040080) 16.723466732s ago: executing program 3 (id=1224): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) 16.631503487s ago: executing program 3 (id=1225): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ppoll(&(0x7f0000001b00)=[{r0, 0x1}], 0x1, &(0x7f0000001b80), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x103a9}, [@IFLA_IFALIAS={0x0, 0x14, 'tunl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000084}, 0x40) 16.55583774s ago: executing program 0 (id=1226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000002239000000000000000000007301170000000000950000000000000056dcaade5791bf4515fdc411249cb887232e46478cbf570a2cc14234ed102651d1de174ae5aa0da2066e2aa8b43e39b7d5e705a9c2d192b1c8f1060a4453eb014c2c5d16d943018be3a99a88715f9c129bef8abc95dd"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="80010000", @ANYRES16=r1, @ANYBLOB="04002cbd7000fbdbdf251800000008000300", @ANYRES64=r2, @ANYBLOB="60003080540001805000038006000100ffff0000060000000c0004000200aaaaaaaaaaaa06000900000000000800020003000000060001000200000006000300a0aa0000060001000100000005000200000000000c00060002000000020000001800308014000400575379238d822a30420fc13a0ddcb125a00030802400030033e63195ae4bf6b59ce928b003028095e190262cdc7cf74cd5b9c647e55439db05000200980000001400040066e4524b74e7b56a207c980e6180ec52050002000100000014000400c7116269df310a17238d692384705f5124000300d956098c3decdc9f900a40ff4188af91c2949187837ccb8bdf7c7c8aa631897e0500020002000000140004001aa22c01d0c265f7561cf5534714567c0c0006000200000002000000340030800500020005000000280001800c0005000800000000000000f7ff040000000000010000000c0005000600000000000000261a9cde433c2399af1c71bf786c8f8c918b1b99d3a66d947b618a27ce8886d0d0a3253297710dbf522c6bbe2e317b"], 0x180}, 0x1, 0x0, 0x0, 0xc800}, 0x20004041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x2}]}]}}, &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x3e8, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x7, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x3e8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) 16.452400222s ago: executing program 1 (id=1227): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r2, 0x0, &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) r4 = socket(0x1e, 0x1, 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000001200)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f00000012c0)={0x30, 0x0, 0x8, 0x1070bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0xffffff68, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_IP_DADDR={0x0, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0xe7}, @L2TP_ATTR_IP_SADDR={0x0, 0x18, @remote}, @L2TP_ATTR_RECV_TIMEOUT]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x4004004) 16.337856618s ago: executing program 3 (id=1228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010058a67000fedbdf250800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x8840) 16.231673835s ago: executing program 1 (id=1229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f0000000580)) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14012508003c0005000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8cd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000087771e0800000000000000000020"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 16.056340785s ago: executing program 0 (id=1230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r4, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 16.007012589s ago: executing program 1 (id=1231): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000200)="f7e9dd5de8a0ec539102171d8330926f5d6676d1d93b502c8e83bdba7e5969fb2d7da32e781dac0d16e91ec76fdc193c825beb4a6f0cee6e5056dc2fdb33d060a2320c2911372608b5a60fe8f473bbb554d12138a4d2925f8546e552c3c22856f1a6df76637713270c7838ae23da2eb3824a54a37227caf3825df6a6832487732f6891ebcf84e28cf1d35f1f83d67a5976d29400ac3975b221f582566ca56898e4ce99bf876e459fb991ded3d035f2bef0f66c03498296d6", &(0x7f0000000140)=""/65}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x29, 0x7, 0x5, {0x10, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x4e23, 0x4e23, 0xb}, {0x0, @random="11e508bee0e3", 0x9, 0x8, [0x4, 0xffffff90]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x100, 0x14, 0x1, 0x9}, {0x0, @random="204a59a02eaa", 0x6, 0x8, [0x4, 0x7ff]}, 0xfffffffffffffffc, 0x2}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38) 15.875341792s ago: executing program 3 (id=1232): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x5, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) 15.644302949s ago: executing program 1 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x0, 0x1ff, 0x4, {{0x15, 0x4, 0x0, 0x30, 0x54, 0x64, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x88, 0xb, "c94f47305b0508a692"}, @rr={0x7, 0xb, 0x59, [@local, @rand_addr=0x64010100]}, @generic={0x88, 0x5, "027ace"}, @generic={0x94, 0xe, "94a5a9a1de7b6a6e278603a6"}, @timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x4, [{@remote, 0x3}, {@private=0xa010101, 0x1}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_newnexthop={0x44, 0x68, 0x800, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x10000}}, @NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) getsockopt(r0, 0xf90, 0x7, &(0x7f0000000140)=""/129, &(0x7f0000000200)=0x81) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x3, 0x7, 0x6, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0x1, 0x0, 0xa846}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5b, 0x1, 0x3f, 0x3}]}, 0x30}}, 0x0) 15.571717904s ago: executing program 3 (id=1234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000020000380180003801400018005000200000000000800010020000000040001000c00018008000100", @ANYRES32=r6], 0x40}}, 0x0) (async, rerun: 64) bind$bt_hci(r2, 0x0, 0xf) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) 15.4789501s ago: executing program 1 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) (async) sendfile(r2, r1, 0x0, 0xbdc4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000007bf4a179", @ANYRES16=0x0, @ANYBLOB="17090000000000000000010000000500070000000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) ioctl(r3, 0x8b32, &(0x7f0000000040)) (rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r4 = socket$inet6(0xa, 0x4, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$isdn(0x22, 0x3, 0x10) (async) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=0xf7) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) (rerun: 32) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @loopback, 0x1}, 0x1c) (async, rerun: 64) r6 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x21}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "77231c766549241d86f3c3be85dab8fc"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x101}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x440}, @NL80211_ATTR_PMK={0x14, 0xfe, "7fa456db2cf2dbc581e50742c52d7ff2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$rxrpc(0x21, 0x2, 0x2) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="dcfcff21000500f5ff030000800c2b00011c00", @ANYRES16], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'xfrm0\x00'}) 15.192439753s ago: executing program 1 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3801000000000000000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRESHEX=r2], 0x38}}, 0x0) 120.899963ms ago: executing program 32 (id=1230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r4, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 67.663582ms ago: executing program 33 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3801000000000000000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRESHEX=r2], 0x38}}, 0x0) 0s ago: executing program 34 (id=1234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c00000020000380180003801400018005000200000000000800010020000000040001000c00018008000100", @ANYRES32=r6], 0x40}}, 0x0) (async, rerun: 64) bind$bt_hci(r2, 0x0, 0xf) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): kaller0: entered promiscuous mode [ 194.485207][ T9060] syzkaller0: entered allmulticast mode [ 194.496495][ T9060] tipc: Resetting bearer [ 194.522864][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.530968][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.544261][ T8956] bridge_slave_1: entered allmulticast mode [ 194.553027][ T8956] bridge_slave_1: entered promiscuous mode [ 194.613156][ T9051] tipc: Resetting bearer [ 196.480184][ T9051] tipc: Disabling bearer [ 196.511031][ T9068] syzkaller1: entered promiscuous mode [ 196.517592][ T55] Bluetooth: hci3: command tx timeout [ 196.523237][ T9068] syzkaller1: entered allmulticast mode [ 196.595643][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.806'. [ 196.670557][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.751176][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.954805][ T8956] team0: Port device team_slave_0 added [ 196.997374][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 197.031967][ T8956] team0: Port device team_slave_1 added [ 197.284533][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 197.307485][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.328815][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.340878][ T9102] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 197.384807][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.417740][ T9104] xt_l2tp: invalid flags combination: c [ 197.450076][ T9100] bridge0: port 3(vlan4) entered blocking state [ 197.456675][ T9100] bridge0: port 3(vlan4) entered disabled state [ 197.483965][ T9100] vlan4: entered allmulticast mode [ 197.498307][ T9100] vlan4: left allmulticast mode [ 197.537200][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.544204][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.594507][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.678224][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 197.770304][ T9114] No such timeout policy "syz0" [ 197.795044][ T9112] vlan2: entered allmulticast mode [ 197.830432][ T9112] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 197.911950][ T8956] hsr_slave_0: entered promiscuous mode [ 197.948689][ T8956] hsr_slave_1: entered promiscuous mode [ 197.961736][ T8956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.987072][ T8956] Cannot create hsr debugfs directory [ 198.068563][ T9126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.821'. [ 198.123462][ T9126] nbd: couldn't find device at index 65536 [ 198.202860][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.277432][ T9134] netlink: 60 bytes leftover after parsing attributes in process `syz.1.822'. [ 198.294780][ T9129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.822'. [ 198.374736][ T9138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.766175][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 198.858761][ T8732] veth0_vlan: entered promiscuous mode [ 198.968180][ T8732] veth1_vlan: entered promiscuous mode [ 199.226137][ T8732] veth0_macvtap: entered promiscuous mode [ 199.264563][ T8732] veth1_macvtap: entered promiscuous mode [ 199.362579][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.435354][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.458264][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.568729][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.586221][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.605691][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.728340][ T8732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.756412][ T8732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.770594][ T8732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.784975][ T8732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.853138][ T8956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.939443][ T8956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.000697][ T9193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.840'. [ 200.245872][ T8956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.355070][ T8956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.518045][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.562537][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.781040][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.824563][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.299763][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.349212][ T9225] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.417538][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.478656][ T9226] netlink: 'syz.0.848': attribute type 4 has an invalid length. [ 201.499355][ T3536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.585383][ T9225] netlink: 'syz.0.848': attribute type 4 has an invalid length. [ 201.662010][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.669248][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.789861][ T3536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.879932][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.887172][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.011855][ T3536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.142104][ T9239] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 202.311550][ T3536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.463515][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'. [ 202.873571][ T9265] syz_tun: entered promiscuous mode [ 202.919817][ T9265] syz_tun: left promiscuous mode [ 202.927918][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.938041][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.947014][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.959154][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.977079][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.003829][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.861'. [ 203.173622][ T3536] bridge_slave_1: left allmulticast mode [ 203.189215][ T3536] bridge_slave_1: left promiscuous mode [ 203.199892][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.221880][ T3536] bridge_slave_0: left allmulticast mode [ 203.235170][ T3536] bridge_slave_0: left promiscuous mode [ 203.241017][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.267350][ T9282] netlink: 'syz.1.861': attribute type 1 has an invalid length. [ 203.283947][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 203.299862][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 203.977962][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.990750][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.002060][ T3536] bond0 (unregistering): Released all slaves [ 204.464700][ T8956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.006845][ T55] Bluetooth: hci1: command tx timeout [ 205.047536][ T3536] hsr_slave_0: left promiscuous mode [ 205.073485][ T3536] hsr_slave_1: left promiscuous mode [ 205.114038][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.152127][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.214914][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.245230][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.337205][ T3536] veth1_macvtap: left promiscuous mode [ 205.342800][ T3536] veth0_macvtap: left promiscuous mode [ 205.349409][ T3536] veth1_vlan: left promiscuous mode [ 205.354965][ T3536] veth0_vlan: left promiscuous mode [ 205.974536][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 206.032327][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 206.786110][ T9358] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 206.868086][ T9358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.906944][ T9358] .: (slave batadv0): Enslaving as an active interface with an up link [ 207.062782][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.882'. [ 207.075476][ T55] Bluetooth: hci1: command tx timeout [ 207.076576][ T9376] x_tables: duplicate underflow at hook 1 [ 207.124954][ T9269] chnl_net:caif_netlink_parms(): no params data found [ 207.278769][ T9372] x_tables: duplicate underflow at hook 1 [ 207.317319][ T8956] veth0_vlan: entered promiscuous mode [ 207.369217][ T9372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.383445][ T9372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.396841][ T9372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.410385][ T9372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 207.425839][ T9372] geneve1: entered promiscuous mode [ 207.432619][ T9372] geneve1: entered allmulticast mode [ 207.447922][ T9387] FAULT_INJECTION: forcing a failure. [ 207.447922][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 207.468252][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.1.886 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 207.468294][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.468313][ T9387] Call Trace: [ 207.468320][ T9387] [ 207.468329][ T9387] dump_stack_lvl+0x189/0x250 [ 207.468366][ T9387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.468395][ T9387] ? __pfx__printk+0x10/0x10 [ 207.468431][ T9387] should_fail_ex+0x414/0x560 [ 207.468468][ T9387] should_failslab+0xa8/0x100 [ 207.468495][ T9387] __kmalloc_cache_noprof+0x70/0x3d0 [ 207.468520][ T9387] ? sctp_add_bind_addr+0x8c/0x370 [ 207.468546][ T9387] sctp_add_bind_addr+0x8c/0x370 [ 207.468572][ T9387] sctp_copy_local_addr_list+0x30b/0x4e0 [ 207.468597][ T9387] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 207.468618][ T9387] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 207.468644][ T9387] ? sctp_v4_is_any+0x35/0x60 [ 207.468664][ T9387] ? sctp_copy_one_addr+0x93/0x360 [ 207.468689][ T9387] sctp_bind_addr_copy+0xb3/0x3c0 [ 207.468711][ T9387] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 207.468745][ T9387] sctp_connect_new_asoc+0x2e0/0x690 [ 207.468776][ T9387] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 207.468804][ T9387] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 207.468830][ T9387] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 207.468854][ T9387] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 207.468880][ T9387] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 207.468905][ T9387] ? security_sctp_bind_connect+0x7e/0x2e0 [ 207.468938][ T9387] sctp_sendmsg+0x155c/0x2810 [ 207.468977][ T9387] ? __pfx_sctp_sendmsg+0x10/0x10 [ 207.469008][ T9387] ? aa_sk_perm+0x81e/0x950 [ 207.469044][ T9387] ? __pfx_aa_sk_perm+0x10/0x10 [ 207.469078][ T9387] ? sock_rps_record_flow+0x19/0x400 [ 207.469105][ T9387] ? inet_sendmsg+0x2f4/0x370 [ 207.469127][ T9387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.469162][ T9387] __sock_sendmsg+0x19c/0x270 [ 207.469193][ T9387] __sys_sendto+0x3bd/0x520 [ 207.469215][ T9387] ? __pfx___sys_sendto+0x10/0x10 [ 207.469231][ T9387] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 207.469267][ T9387] ? __fget_files+0x3a0/0x420 [ 207.469305][ T9387] ? ksys_write+0x1f0/0x250 [ 207.469339][ T9387] __x64_sys_sendto+0xde/0x100 [ 207.469362][ T9387] do_syscall_64+0xf6/0x210 [ 207.469384][ T9387] ? clear_bhb_loop+0x45/0xa0 [ 207.469409][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.469427][ T9387] RIP: 0033:0x7f163ed8e969 [ 207.469442][ T9387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.469455][ T9387] RSP: 002b:00007f163fc60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 207.469472][ T9387] RAX: ffffffffffffffda RBX: 00007f163efb6080 RCX: 00007f163ed8e969 [ 207.469483][ T9387] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 207.469493][ T9387] RBP: 00007f163fc60090 R08: 0000200000000000 R09: 0000000000000010 [ 207.469503][ T9387] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 207.469513][ T9387] R13: 0000000000000001 R14: 00007f163efb6080 R15: 00007ffd629eeec8 [ 207.469538][ T9387] [ 207.870438][ T8956] veth1_vlan: entered promiscuous mode [ 208.019250][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.057155][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.064872][ T9269] bridge_slave_0: entered allmulticast mode [ 208.091712][ T9269] bridge_slave_0: entered promiscuous mode [ 208.113084][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.121329][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.129524][ T9269] bridge_slave_1: entered allmulticast mode [ 208.138438][ T9269] bridge_slave_1: entered promiscuous mode [ 208.277808][ T9269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.316906][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'. [ 208.330484][ T9402] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 208.341546][ T9269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.459217][ T9402] pim6reg1: entered promiscuous mode [ 208.464764][ T9402] pim6reg1: entered allmulticast mode [ 208.536333][ T9269] team0: Port device team_slave_0 added [ 208.587911][ T9269] team0: Port device team_slave_1 added [ 208.744483][ T8956] veth0_macvtap: entered promiscuous mode [ 208.779366][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.787221][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.814309][ T9269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.834615][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.842615][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.853083][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 208.869692][ T9269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.902550][ T8956] veth1_macvtap: entered promiscuous mode [ 209.006800][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 209.050586][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 209.111392][ T9432] sctp: [Deprecated]: syz.1.899 (pid 9432) Use of int in max_burst socket option. [ 209.111392][ T9432] Use struct sctp_assoc_value instead [ 209.156366][ T55] Bluetooth: hci1: command tx timeout [ 209.207715][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 209.269156][ T9269] hsr_slave_0: entered promiscuous mode [ 209.280000][ T9269] hsr_slave_1: entered promiscuous mode [ 209.288540][ T9269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.296613][ T9269] Cannot create hsr debugfs directory [ 209.308074][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.341746][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.350523][ T9441] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 209.373852][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.384488][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 209.432129][ T9421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 209.487396][ T8956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.515554][ T8956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.535884][ T8956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.544978][ T9441] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.554007][ T9441] tipc: Enabled bearer , priority 10 [ 209.627052][ T9445] FAULT_INJECTION: forcing a failure. [ 209.627052][ T9445] name failslab, interval 1, probability 0, space 0, times 0 [ 209.675475][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.694166][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.1.903 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 209.694197][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.694209][ T9445] Call Trace: [ 209.694217][ T9445] [ 209.694227][ T9445] dump_stack_lvl+0x189/0x250 [ 209.694263][ T9445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.694294][ T9445] ? __pfx__printk+0x10/0x10 [ 209.694330][ T9445] should_fail_ex+0x414/0x560 [ 209.694368][ T9445] should_failslab+0xa8/0x100 [ 209.694397][ T9445] __kmalloc_cache_noprof+0x70/0x3d0 [ 209.694423][ T9445] ? sctp_add_bind_addr+0x8c/0x370 [ 209.694450][ T9445] sctp_add_bind_addr+0x8c/0x370 [ 209.694476][ T9445] sctp_copy_local_addr_list+0x30b/0x4e0 [ 209.694502][ T9445] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 209.694523][ T9445] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 209.694548][ T9445] ? sctp_v4_is_any+0x35/0x60 [ 209.694569][ T9445] ? sctp_copy_one_addr+0x93/0x360 [ 209.694593][ T9445] sctp_bind_addr_copy+0xb3/0x3c0 [ 209.694616][ T9445] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 209.694651][ T9445] sctp_connect_new_asoc+0x2e0/0x690 [ 209.694682][ T9445] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 209.694711][ T9445] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 209.694737][ T9445] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 209.694761][ T9445] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 209.694788][ T9445] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 209.694812][ T9445] ? security_sctp_bind_connect+0x7e/0x2e0 [ 209.694845][ T9445] sctp_sendmsg+0x155c/0x2810 [ 209.694885][ T9445] ? __pfx_sctp_sendmsg+0x10/0x10 [ 209.694915][ T9445] ? aa_sk_perm+0x81e/0x950 [ 209.694951][ T9445] ? __pfx_aa_sk_perm+0x10/0x10 [ 209.694993][ T9445] ? sock_rps_record_flow+0x19/0x400 [ 209.695021][ T9445] ? inet_sendmsg+0x2f4/0x370 [ 209.695043][ T9445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.695069][ T9445] __sock_sendmsg+0x19c/0x270 [ 209.695104][ T9445] __sys_sendto+0x3bd/0x520 [ 209.695126][ T9445] ? __pfx___sys_sendto+0x10/0x10 [ 209.695141][ T9445] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 209.695175][ T9445] ? __fget_files+0x3a0/0x420 [ 209.695214][ T9445] ? ksys_write+0x1f0/0x250 [ 209.695247][ T9445] __x64_sys_sendto+0xde/0x100 [ 209.695271][ T9445] do_syscall_64+0xf6/0x210 [ 209.695292][ T9445] ? clear_bhb_loop+0x45/0xa0 [ 209.695317][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.695335][ T9445] RIP: 0033:0x7f163ed8e969 [ 209.695353][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.695369][ T9445] RSP: 002b:00007f163fc60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 209.695391][ T9445] RAX: ffffffffffffffda RBX: 00007f163efb6080 RCX: 00007f163ed8e969 [ 209.695404][ T9445] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 209.695416][ T9445] RBP: 00007f163fc60090 R08: 0000200000000000 R09: 0000000000000010 [ 209.695429][ T9445] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 209.695441][ T9445] R13: 0000000000000001 R14: 00007f163efb6080 R15: 00007ffd629eeec8 [ 209.695472][ T9445] [ 210.000799][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.192988][ T8956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.204680][ T8956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.214638][ T8956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.223850][ T8956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.412211][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 210.445455][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 210.525308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.567074][ T9457] syzkaller0: entered allmulticast mode [ 210.736209][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.750973][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.873029][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.907059][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.914992][ T9469] x_tables: duplicate underflow at hook 1 [ 210.944628][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 210.969435][ T9472] openvswitch: netlink: Multiple metadata blocks provided [ 210.986137][ T9475] netlink: 'syz.3.911': attribute type 24 has an invalid length. [ 211.061385][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.149153][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.163836][ T9470] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 211.217948][ T9470] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.237208][ T5141] Bluetooth: hci1: command tx timeout [ 211.355934][ T9269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.384103][ T9269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.430027][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.531198][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.565570][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.600351][ T9269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.632941][ T9269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.700505][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.724393][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 211.803008][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.893965][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.914580][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.930155][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.946347][ T9470] xfrm0 speed is unknown, defaulting to 1000 [ 211.989606][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.160039][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.192753][ T9269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.253257][ T9269] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.392154][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.399528][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.409551][ T9496] sctp: [Deprecated]: syz.1.918 (pid 9496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.409551][ T9496] Use struct sctp_sack_info instead [ 212.478138][ T9495] unknown channel width for channel at 909000KHz? [ 212.513070][ T9502] tipc: Started in network mode [ 212.522288][ T9502] tipc: Node identity , cluster identity 4711 [ 212.545695][ T9502] tipc: Failed to set node id, please configure manually [ 212.574009][ T9502] tipc: Enabling of bearer rejected, failed to enable media [ 212.595271][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.657737][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.664921][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.706934][ T13] bridge_slave_1: left allmulticast mode [ 212.725963][ T13] bridge_slave_1: left promiscuous mode [ 212.731790][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.818286][ T13] bridge_slave_0: left allmulticast mode [ 212.824006][ T13] bridge_slave_0: left promiscuous mode [ 212.842200][ T9511] netlink: 'syz.0.921': attribute type 18 has an invalid length. [ 212.866074][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.033515][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.043422][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.060889][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.070420][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.081191][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.605790][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.629471][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.638143][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.660773][ T13] bond0 (unregistering): Released all slaves [ 213.827927][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.925'. [ 213.875934][ T9514] xfrm0 speed is unknown, defaulting to 1000 [ 214.014698][ T9533] netlink: 104 bytes leftover after parsing attributes in process `syz.0.926'. [ 214.675217][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.703765][ T13] hsr_slave_0: left promiscuous mode [ 214.726518][ T13] hsr_slave_1: left promiscuous mode [ 214.746609][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.754072][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.800202][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.814170][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.867153][ T13] veth1_macvtap: left promiscuous mode [ 214.872768][ T13] veth0_macvtap: left promiscuous mode [ 214.879205][ T13] veth1_vlan: left promiscuous mode [ 214.884610][ T13] veth0_vlan: left promiscuous mode [ 215.156123][ T55] Bluetooth: hci3: command tx timeout [ 215.541552][ T13] team0 (unregistering): Port device team_slave_1 removed [ 215.621718][ T13] team0 (unregistering): Port device team_slave_0 removed [ 215.715615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.230767][ T9571] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 216.302151][ T9571] netlink: 220 bytes leftover after parsing attributes in process `syz.1.934'. [ 216.385027][ T9269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.448370][ T9571] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 216.472943][ T9571] netlink: 'syz.1.934': attribute type 11 has an invalid length. [ 216.485693][ T9571] netlink: 220 bytes leftover after parsing attributes in process `syz.1.934'. [ 216.594182][ T9585] netlink: 'syz.3.936': attribute type 11 has an invalid length. [ 216.631840][ T9585] netlink: 228 bytes leftover after parsing attributes in process `syz.3.936'. [ 216.748881][ T9587] syz_tun: entered promiscuous mode [ 216.765319][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.780081][ T9587] syz_tun: left promiscuous mode [ 217.187176][ T9514] chnl_net:caif_netlink_parms(): no params data found [ 217.253623][ T55] Bluetooth: hci3: command tx timeout [ 217.294851][ T9269] veth0_vlan: entered promiscuous mode [ 217.515025][ T9269] veth1_vlan: entered promiscuous mode [ 217.643307][ T9612] No such timeout policy "syz0" [ 217.667811][ T9602] xfrm0 speed is unknown, defaulting to 1000 [ 217.765321][ T9612] No such timeout policy "syz0" [ 217.795352][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.867609][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.882556][ T9514] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.890839][ T9514] bridge_slave_0: entered allmulticast mode [ 217.909088][ T9514] bridge_slave_0: entered promiscuous mode [ 217.963743][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.982614][ T9514] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.997383][ T9514] bridge_slave_1: entered allmulticast mode [ 218.004350][ T9613] Cannot find add_set index 0 as target [ 218.022745][ T9514] bridge_slave_1: entered promiscuous mode [ 218.181891][ T9514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.237515][ T9514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.379186][ T9635] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.629360][ T9639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.947'. [ 218.680718][ T9514] team0: Port device team_slave_0 added [ 218.717140][ T9269] veth0_macvtap: entered promiscuous mode [ 218.762224][ T9514] team0: Port device team_slave_1 added [ 218.801419][ T9269] veth1_macvtap: entered promiscuous mode [ 218.835224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.988325][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.006779][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.043848][ T9514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.060886][ T9269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.074447][ T9269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.090253][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 219.102004][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.116508][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 219.128237][ T9514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.141280][ T9514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.173724][ T9514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.218552][ T9269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.254210][ T9269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.270236][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.306470][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.953'. [ 219.318223][ T55] Bluetooth: hci3: command tx timeout [ 219.333205][ T9269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.343191][ T9269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.352045][ T9269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.361093][ T9269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.410245][ T9514] hsr_slave_0: entered promiscuous mode [ 219.417215][ T9514] hsr_slave_1: entered promiscuous mode [ 219.423645][ T9514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.441657][ T9514] Cannot create hsr debugfs directory [ 219.648193][ T9660] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 219.880877][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.049536][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.094653][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.278380][ T9673] openvswitch: netlink: IP tunnel TTL not specified. [ 220.296964][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.305448][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.669189][ T9686] vlan4: entered promiscuous mode [ 220.925274][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 221.072323][ T9694] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 221.093528][ T9694] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 221.117369][ T9694] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 221.134092][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 221.134870][ T9694] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 221.145377][ T9696] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 221.158693][ T9698] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 221.231254][ T9693] netlink: 200 bytes leftover after parsing attributes in process `syz.0.967'. [ 221.330140][ T9696] .: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.396217][ T55] Bluetooth: hci3: command tx timeout [ 221.473996][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.662927][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.736391][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.780439][ T9514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.809467][ T9514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.849944][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.869805][ T9514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.902314][ T9514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.955247][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.318350][ T9717] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 222.344277][ T36] bridge_slave_1: left allmulticast mode [ 222.350975][ T36] bridge_slave_1: left promiscuous mode [ 222.375803][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.396169][ T36] bridge_slave_0: left allmulticast mode [ 222.401875][ T36] bridge_slave_0: left promiscuous mode [ 222.408317][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.415695][ T9715] nbd0: detected capacity change from 0 to 4096 [ 222.436682][ T55] block nbd0: Receive control failed (result -104) [ 222.730824][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 222.774935][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.788482][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.801025][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.809427][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.817977][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.864046][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 222.996752][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.178926][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.191535][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.203437][ T36] bond0 (unregistering): Released all slaves [ 223.446667][ T9737] netlink: 88 bytes leftover after parsing attributes in process `syz.3.978'. [ 223.459624][ T9729] xfrm0 speed is unknown, defaulting to 1000 [ 223.546160][ T9741] netlink: 'syz.0.980': attribute type 62 has an invalid length. [ 223.589623][ T9514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.925530][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 224.035453][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.134915][ T36] hsr_slave_0: left promiscuous mode [ 224.156299][ T36] hsr_slave_1: left promiscuous mode [ 224.171771][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.181952][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.206593][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.220286][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.294428][ T36] veth1_macvtap: left promiscuous mode [ 224.301213][ T36] veth0_macvtap: left promiscuous mode [ 224.323256][ T36] veth1_vlan: left promiscuous mode [ 224.349440][ T36] veth0_vlan: left promiscuous mode [ 224.919301][ T5141] Bluetooth: hci1: command tx timeout [ 225.033200][ T9774] netlink: 'syz.0.988': attribute type 13 has an invalid length. [ 225.080034][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.238964][ T36] team0 (unregistering): Port device team_slave_1 removed [ 225.285760][ T36] team0 (unregistering): Port device team_slave_0 removed [ 225.942690][ T9514] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.986030][ T9774] veth0_macvtap: left promiscuous mode [ 226.000401][ T9774] macvtap0: entered allmulticast mode [ 226.055847][ T9774] macvtap0: refused to change device tx_queue_len [ 226.103995][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 226.125166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 226.220971][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 226.321673][ T9782] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 226.354660][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.361880][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.411173][ T9729] chnl_net:caif_netlink_parms(): no params data found [ 226.492903][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.500126][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.996028][ T5141] Bluetooth: hci1: command tx timeout [ 227.041048][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.081094][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.119921][ T9729] bridge_slave_0: entered allmulticast mode [ 227.142839][ T9729] bridge_slave_0: entered promiscuous mode [ 227.165373][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.190326][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.212054][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.231809][ T9729] bridge_slave_1: entered allmulticast mode [ 227.258827][ T9729] bridge_slave_1: entered promiscuous mode [ 227.406809][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 227.416243][ T9729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.478335][ T9729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.609633][ T9729] team0: Port device team_slave_0 added [ 227.666898][ T9729] team0: Port device team_slave_1 added [ 227.705704][ T9514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.857743][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.875186][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.948403][ T9729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.967951][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.975430][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.002119][ T9729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.195529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.218467][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 228.344402][ T9729] hsr_slave_0: entered promiscuous mode [ 228.354374][ T9729] hsr_slave_1: entered promiscuous mode [ 228.362294][ T9729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.373234][ T9859] FAULT_INJECTION: forcing a failure. [ 228.373234][ T9859] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 228.386927][ T9729] Cannot create hsr debugfs directory [ 228.387233][ T9858] netlink: 'syz.1.1011': attribute type 15 has an invalid length. [ 228.392501][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.3.1010 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 228.392530][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 228.392544][ T9859] Call Trace: [ 228.392554][ T9859] [ 228.392563][ T9859] dump_stack_lvl+0x189/0x250 [ 228.392598][ T9859] ? __lock_acquire+0xaac/0xd20 [ 228.392631][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.392662][ T9859] ? __pfx__printk+0x10/0x10 [ 228.392684][ T9859] ? __might_fault+0xb0/0x130 [ 228.392724][ T9859] should_fail_ex+0x414/0x560 [ 228.392763][ T9859] _copy_from_user+0x2d/0xb0 [ 228.392793][ T9859] ___sys_recvmsg+0x12e/0x510 [ 228.392825][ T9859] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.392879][ T9859] ? __fget_files+0x3a0/0x420 [ 228.392919][ T9859] do_recvmmsg+0x307/0x760 [ 228.392953][ T9859] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.392991][ T9859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.393034][ T9859] __x64_sys_recvmmsg+0x190/0x240 [ 228.393063][ T9859] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 228.393093][ T9859] ? do_syscall_64+0xba/0x210 [ 228.393119][ T9859] do_syscall_64+0xf6/0x210 [ 228.393142][ T9859] ? clear_bhb_loop+0x45/0xa0 [ 228.393168][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.393189][ T9859] RIP: 0033:0x7f6c7a98e969 [ 228.393208][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.393227][ T9859] RSP: 002b:00007f6c7b725038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 228.393258][ T9859] RAX: ffffffffffffffda RBX: 00007f6c7abb6080 RCX: 00007f6c7a98e969 [ 228.393274][ T9859] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 228.393286][ T9859] RBP: 00007f6c7b725090 R08: 0000000000000000 R09: 0000000000000000 [ 228.393300][ T9859] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 228.393313][ T9859] R13: 0000000000000001 R14: 00007f6c7abb6080 R15: 00007ffc3a378f18 [ 228.393347][ T9859] [ 228.702142][ T9858] gre1: entered promiscuous mode [ 228.755205][ T9858] gre1: entered allmulticast mode [ 228.897793][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1014'. [ 229.019359][ T9878] syz.1.1016 (9878) used greatest stack depth: 19176 bytes left [ 229.075307][ T5141] Bluetooth: hci1: command tx timeout [ 229.235312][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.382662][ T9514] veth0_vlan: entered promiscuous mode [ 229.594202][ T9514] veth1_vlan: entered promiscuous mode [ 229.874370][ T9514] veth0_macvtap: entered promiscuous mode [ 229.882412][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 229.968648][ T9514] veth1_macvtap: entered promiscuous mode [ 230.275656][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 230.713712][ T9929] x_tables: duplicate underflow at hook 2 [ 230.726938][ T9928] x_tables: duplicate underflow at hook 2 [ 230.794481][ T9928] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1031'. [ 230.807147][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1031'. [ 231.155329][ T5141] Bluetooth: hci1: command tx timeout [ 231.318516][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.365388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.410888][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.452187][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.488202][ T9514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.541881][ T9937] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 232.612651][ T9514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.645246][ T9514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.676973][ T9514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.702377][ T9514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.732175][ T9514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.758992][ T9514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.795508][ T9514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.004201][ T9729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.047666][ T9942] xfrm0 speed is unknown, defaulting to 1000 [ 233.069701][ T9729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.118873][ T9729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.189567][ T9729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.363879][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.381468][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.405179][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.538734][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.555255][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.113412][ T9989] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 234.433838][T10002] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 234.441384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.450977][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.527894][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.598651][ T9729] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.636946][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.644246][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.703171][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.759286][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.766509][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.832950][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.951706][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.299766][ T151] bridge_slave_1: left allmulticast mode [ 235.308419][ T151] bridge_slave_1: left promiscuous mode [ 235.314329][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.343239][ T151] bridge_slave_0: left allmulticast mode [ 235.355133][ T151] bridge_slave_0: left promiscuous mode [ 235.360963][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.475178][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 236.199987][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.219127][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.234115][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.243790][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.260031][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.418898][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.430878][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.442925][ T151] bond0 (unregistering): Released all slaves [ 236.515241][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 236.591732][T10033] xfrm0 speed is unknown, defaulting to 1000 [ 236.684369][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.811178][T10042] ipt_REJECT: ECHOREPLY no longer supported. [ 237.327122][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 237.347319][ T151] hsr_slave_0: left promiscuous mode [ 237.417455][ T151] hsr_slave_1: left promiscuous mode [ 237.424789][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.445201][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.456085][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.463557][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.525335][ T151] veth1_macvtap: left promiscuous mode [ 237.530956][ T151] veth0_macvtap: left promiscuous mode [ 237.545381][ T151] veth1_vlan: left promiscuous mode [ 237.550803][ T151] veth0_vlan: left promiscuous mode [ 237.565171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.602086][T10075] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1070'. [ 237.671144][T10077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1070'. [ 237.813071][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 237.880002][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'. [ 238.277287][ T5141] Bluetooth: hci3: command tx timeout [ 238.473866][ T151] team0 (unregistering): Port device team_slave_1 removed [ 238.534225][ T151] team0 (unregistering): Port device team_slave_0 removed [ 238.595413][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.099320][T10075] vlan2: entered allmulticast mode [ 239.104955][T10075] erspan0: entered allmulticast mode [ 239.142115][T10078] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 239.589153][T10091] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1075'. [ 239.593158][ T9729] veth0_vlan: entered promiscuous mode [ 239.635215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.684049][ T9729] veth1_vlan: entered promiscuous mode [ 239.760583][T10033] chnl_net:caif_netlink_parms(): no params data found [ 240.170086][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.192056][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.218291][T10033] bridge_slave_0: entered allmulticast mode [ 240.234278][T10033] bridge_slave_0: entered promiscuous mode [ 240.239568][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 240.323737][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.345771][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.353054][T10033] bridge_slave_1: entered allmulticast mode [ 240.362164][ T5141] Bluetooth: hci3: command tx timeout [ 240.387778][T10033] bridge_slave_1: entered promiscuous mode [ 240.468639][ T9729] veth0_macvtap: entered promiscuous mode [ 240.578285][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.621559][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.675570][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 240.907671][T10145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1087'. [ 240.931402][ T9729] veth1_macvtap: entered promiscuous mode [ 241.091592][T10033] team0: Port device team_slave_0 added [ 241.128399][T10033] team0: Port device team_slave_1 added [ 241.149292][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.178468][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.182177][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'. [ 241.199266][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.231850][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.258999][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.288362][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.398593][ T9729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.413028][ T9729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.452214][ T9729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.470581][ T9729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.715197][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.767900][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.774941][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.885442][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.924183][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.940966][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.010421][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.213200][T10033] hsr_slave_0: entered promiscuous mode [ 242.231874][T10033] hsr_slave_1: entered promiscuous mode [ 242.239323][T10033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.254097][T10033] Cannot create hsr debugfs directory [ 242.309806][T10178] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1096'. [ 242.435166][ T5830] Bluetooth: hci3: command tx timeout [ 242.755341][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.907981][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.914520][T10207] No such timeout policy "syz0" [ 242.938862][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.000478][T10212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.159585][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.198552][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.563256][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1110'. [ 243.588308][T10236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1110'. [ 243.678317][T10240] dvmrp0: entered allmulticast mode [ 243.795249][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.910439][T10243] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 243.929811][T10243] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.204326][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.347366][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.405028][T10033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.448386][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.468216][T10033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.488510][T10033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.508051][T10033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.517460][ T5830] Bluetooth: hci3: command tx timeout [ 244.565337][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.836030][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.847257][ T36] bridge_slave_1: left allmulticast mode [ 244.853052][ T36] bridge_slave_1: left promiscuous mode [ 244.864089][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.877897][ T36] bridge_slave_0: left allmulticast mode [ 244.883667][ T36] bridge_slave_0: left promiscuous mode [ 244.891846][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.918466][T10257] openvswitch: netlink: Message has 8 unknown bytes. [ 245.671795][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.681447][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.691345][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.717054][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.724961][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.876564][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.885401][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 245.902160][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.914116][ T36] bond0 (unregistering): Released all slaves [ 246.054542][T10280] IPv6: Can't replace route, no match found [ 246.250811][T10277] xfrm0 speed is unknown, defaulting to 1000 [ 246.453040][T10288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1124'. [ 246.524994][T10294] netlink: 'syz.1.1125': attribute type 21 has an invalid length. [ 246.556684][T10294] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1125'. [ 246.691966][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.837109][ T36] hsr_slave_0: left promiscuous mode [ 246.853313][ T36] hsr_slave_1: left promiscuous mode [ 246.878126][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.911277][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.918682][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.942867][T10312] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 246.961523][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.962511][T10312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1130'. [ 246.978679][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.036415][ T36] veth1_macvtap: left promiscuous mode [ 247.042024][ T36] veth0_macvtap: left promiscuous mode [ 247.055391][ T36] veth1_vlan: left promiscuous mode [ 247.071054][ T36] veth0_vlan: left promiscuous mode [ 247.800329][ T5830] Bluetooth: hci1: command tx timeout [ 247.877509][ T36] team0 (unregistering): Port device team_slave_1 removed [ 247.947487][ T36] team0 (unregistering): Port device team_slave_0 removed [ 247.955214][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.723702][T10312] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.741279][T10312] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.765191][T10312] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.785232][T10312] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.823223][T10312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.870363][T10312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.890575][T10312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.905521][T10312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.928941][T10312] team0: Port device geneve0 added [ 249.005304][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.025734][T10323] netem: change failed [ 249.138061][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.180697][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.187942][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.355391][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.362596][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.381786][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 249.611157][T10277] chnl_net:caif_netlink_parms(): no params data found [ 249.710597][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1142'. [ 249.876519][ T5830] Bluetooth: hci1: command tx timeout [ 250.035210][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.077528][T10277] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.084824][T10277] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.131773][T10277] bridge_slave_0: entered allmulticast mode [ 250.157074][T10277] bridge_slave_0: entered promiscuous mode [ 250.210302][T10277] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.219539][T10277] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.238745][T10277] bridge_slave_1: entered allmulticast mode [ 250.262091][T10277] bridge_slave_1: entered promiscuous mode [ 250.387641][T10277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.428971][T10374] syzkaller0: entered promiscuous mode [ 250.434502][T10374] syzkaller0: entered allmulticast mode [ 250.470167][T10277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.686087][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'. [ 250.708007][T10277] team0: Port device team_slave_0 added [ 250.798228][T10277] team0: Port device team_slave_1 added [ 250.820187][T10397] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 251.085174][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.129532][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.179631][T10277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.197238][T10277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.266378][T10277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.299322][T10277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.320136][T10277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.351215][T10277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.416948][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 251.487185][T10277] hsr_slave_0: entered promiscuous mode [ 251.509042][T10277] hsr_slave_1: entered promiscuous mode [ 251.529195][T10277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.575480][T10277] Cannot create hsr debugfs directory [ 251.865037][T10429] C: renamed from lo [ 251.965631][ T5830] Bluetooth: hci1: command tx timeout [ 252.018614][T10438] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1166'. [ 252.125200][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 252.525550][ T59] block nbd0: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 30 seconds [ 252.662898][T10033] veth0_vlan: entered promiscuous mode [ 252.700504][T10033] veth1_vlan: entered promiscuous mode [ 252.846116][ T5830] Bluetooth: hci0: command tx timeout [ 252.981563][T10033] veth0_macvtap: entered promiscuous mode [ 253.088374][T10033] veth1_macvtap: entered promiscuous mode [ 253.144901][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.165325][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.186128][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.223697][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.275628][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.305408][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.330957][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.385793][T10497] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 253.411994][T10033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.427720][T10033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.440803][T10033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.452298][T10033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.483272][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 253.507239][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 253.589470][T10511] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 253.758617][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1181'. [ 253.887059][T10277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.923993][T10277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.960757][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.964501][T10277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.985324][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.005559][T10524] Bluetooth: MGMT ver 1.23 [ 254.023421][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 254.035883][ T5830] Bluetooth: hci1: command tx timeout [ 254.044831][T10277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.133373][T10527] syzkaller0: entered allmulticast mode [ 254.186926][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1187'. [ 254.196175][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.282269][T10489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.335240][T10489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.754390][T10551] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 254.815358][T10551] __nla_validate_parse: 1 callbacks suppressed [ 254.815377][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 254.968234][T10277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.978156][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 255.049510][ T151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.154777][T10277] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.235216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.259787][ T151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.367984][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.375287][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.397926][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.405240][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.487223][ T151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.569436][ T151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.719476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.727848][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.840812][ T151] bridge_slave_1: left allmulticast mode [ 255.865176][ T151] bridge_slave_1: left promiscuous mode [ 255.872088][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.915571][ T151] bridge_slave_0: left allmulticast mode [ 255.921414][ T151] bridge_slave_0: left promiscuous mode [ 255.930692][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.285289][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.783197][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.810620][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.858191][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.868113][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.877235][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.885731][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.893677][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.990175][ T151] bond0 (unregistering): Released all slaves [ 257.081027][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.136347][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.162896][T10277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.249872][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.273548][T10589] xfrm0 speed is unknown, defaulting to 1000 [ 257.315787][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.322905][T10582] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 257.434062][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.469026][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.483720][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.566174][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.652667][T10277] veth0_vlan: entered promiscuous mode [ 257.679709][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.734912][T10277] veth1_vlan: entered promiscuous mode [ 257.767703][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.809450][T10582] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.891039][T10277] veth0_macvtap: entered promiscuous mode [ 258.005973][ T151] hsr_slave_0: left promiscuous mode [ 258.012200][ T151] hsr_slave_1: left promiscuous mode [ 258.045492][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.076274][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.088915][T10614] sock: sock_set_timeout: `syz.1.1212' (pid 10614) tries to set negative timeout [ 258.106164][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.113615][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.178763][ T151] veth1_macvtap: left promiscuous mode [ 258.184372][ T151] veth0_macvtap: left promiscuous mode [ 258.205854][ T151] veth1_vlan: left promiscuous mode [ 258.211348][ T151] veth0_vlan: left promiscuous mode [ 258.355290][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.998785][ T5830] Bluetooth: hci3: command tx timeout [ 259.008887][ T151] team0 (unregistering): Port device team_slave_1 removed [ 259.054295][ T151] team0 (unregistering): Port device team_slave_0 removed [ 259.395253][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.681837][T10635] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 259.696747][T10635] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 259.880378][T10277] veth1_macvtap: entered promiscuous mode [ 260.094661][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.099022][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'. [ 260.194824][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.234023][T10277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.435253][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.453636][T10277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.473978][T10277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.486655][T10277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.551074][T10658] vxcan1: entered allmulticast mode [ 260.607034][T10277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.616335][T10277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.625623][T10277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.634907][T10277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.802792][T10589] chnl_net:caif_netlink_parms(): no params data found [ 261.075480][ T5830] Bluetooth: hci3: command tx timeout [ 261.088729][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'. [ 261.110812][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'. [ 261.347199][T10589] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.354358][T10589] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.377105][T10589] bridge_slave_0: entered allmulticast mode [ 261.392860][T10589] bridge_slave_0: entered promiscuous mode [ 261.418219][T10589] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.455985][T10589] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.463302][T10589] bridge_slave_1: entered allmulticast mode [ 261.475700][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.487306][T10589] bridge_slave_1: entered promiscuous mode [ 261.512150][T10489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.539419][T10489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.748790][T10589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.783444][T10589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.903396][T10589] team0: Port device team_slave_0 added [ 261.920867][T10589] team0: Port device team_slave_1 added [ 262.023444][T10589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.032376][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.067109][T10589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.102903][T10589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.110089][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.142457][T10589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.252514][T10589] hsr_slave_0: entered promiscuous mode [ 262.260193][T10589] hsr_slave_1: entered promiscuous mode [ 262.267498][T10589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.277183][T10589] Cannot create hsr debugfs directory [ 262.515351][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.155641][ T5830] Bluetooth: hci3: command tx timeout [ 263.555236][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.595252][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.235466][ T5830] Bluetooth: hci3: command tx timeout [ 265.635252][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.675233][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.715263][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.755267][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.795256][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.835273][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.875250][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.915242][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.955261][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.995273][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.035195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.075144][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.781897][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.790967][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.799945][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.809030][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.821691][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.829254][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.855858][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.864036][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.872757][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.882884][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.936306][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.944881][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.954965][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.967155][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.978314][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.024288][T10719] xfrm0 speed is unknown, defaulting to 1000 [ 278.040212][T10719] virt_wifi0 speed is unknown, defaulting to 1000 [ 278.041404][T10721] xfrm0 speed is unknown, defaulting to 1000 [ 278.081897][T10721] virt_wifi0 speed is unknown, defaulting to 1000 [ 278.115220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.142837][T10723] xfrm0 speed is unknown, defaulting to 1000 [ 278.181385][T10723] virt_wifi0 speed is unknown, defaulting to 1000 [ 278.723161][T10719] chnl_net:caif_netlink_parms(): no params data found [ 278.972241][T10721] chnl_net:caif_netlink_parms(): no params data found [ 279.079631][T10723] chnl_net:caif_netlink_parms(): no params data found [ 279.155156][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.242742][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.258396][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.270933][T10719] bridge_slave_0: entered allmulticast mode [ 279.282544][T10719] bridge_slave_0: entered promiscuous mode [ 279.296510][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.303666][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.311959][T10719] bridge_slave_1: entered allmulticast mode [ 279.320703][T10719] bridge_slave_1: entered promiscuous mode [ 279.454297][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.558193][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.602782][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.616141][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.623466][T10721] bridge_slave_0: entered allmulticast mode [ 279.638635][T10721] bridge_slave_0: entered promiscuous mode [ 279.723675][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.731126][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.747145][T10721] bridge_slave_1: entered allmulticast mode [ 279.761965][T10721] bridge_slave_1: entered promiscuous mode [ 279.816458][T10719] team0: Port device team_slave_0 added [ 279.885529][ T55] Bluetooth: hci5: command tx timeout [ 279.898266][T10719] team0: Port device team_slave_1 added [ 279.913297][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.922763][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.938222][T10723] bridge_slave_0: entered allmulticast mode [ 279.950871][T10723] bridge_slave_0: entered promiscuous mode [ 279.957229][ T55] Bluetooth: hci6: command tx timeout [ 280.032807][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.045272][ T55] Bluetooth: hci7: command tx timeout [ 280.052229][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.061242][T10723] bridge_slave_1: entered allmulticast mode [ 280.076851][T10723] bridge_slave_1: entered promiscuous mode [ 280.134472][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.205206][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.223756][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.243351][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.252057][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.292544][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.310220][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.323100][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.363196][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.380581][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.403941][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.531450][T10721] team0: Port device team_slave_0 added [ 280.561124][T10723] team0: Port device team_slave_0 added [ 280.580874][T10723] team0: Port device team_slave_1 added [ 280.632258][T10721] team0: Port device team_slave_1 added [ 280.764869][T10719] hsr_slave_0: entered promiscuous mode [ 280.771935][T10719] hsr_slave_1: entered promiscuous mode [ 280.779738][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.787998][T10719] Cannot create hsr debugfs directory [ 280.814756][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.822000][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.849264][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.863435][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.870931][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.898540][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.938753][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.946081][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.980985][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.002660][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.011775][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.047591][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.193060][T10721] hsr_slave_0: entered promiscuous mode [ 281.199874][T10721] hsr_slave_1: entered promiscuous mode [ 281.209126][T10721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.217834][T10721] Cannot create hsr debugfs directory [ 281.235225][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.291173][T10723] hsr_slave_0: entered promiscuous mode [ 281.306372][T10723] hsr_slave_1: entered promiscuous mode [ 281.312866][T10723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.331353][T10723] Cannot create hsr debugfs directory [ 281.955735][ T55] Bluetooth: hci5: command tx timeout [ 282.037795][ T55] Bluetooth: hci6: command tx timeout [ 282.116154][ T55] Bluetooth: hci7: command tx timeout [ 282.275159][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.597037][ T59] block nbd0: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 60 seconds [ 283.315224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.035376][ T55] Bluetooth: hci5: command tx timeout [ 284.115387][ T55] Bluetooth: hci6: command tx timeout [ 284.195895][ T55] Bluetooth: hci7: command tx timeout [ 284.355209][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.156480][ T5201] udevd[5201]: worker [5921] /devices/virtual/block/nbd0 is taking a long time [ 285.395205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.115976][ T55] Bluetooth: hci5: command tx timeout [ 286.195455][ T55] Bluetooth: hci6: command tx timeout [ 286.276214][ T55] Bluetooth: hci7: command tx timeout [ 286.435401][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.475226][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.515213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.555213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.595227][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.635210][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.675205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.715212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.755277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.795207][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.835288][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.875232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.915209][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.955183][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.995229][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.035226][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.075232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.125231][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.155219][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.195174][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.248835][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 306.257571][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 306.266085][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 306.274166][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 306.284028][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 306.348064][T10744] xfrm0 speed is unknown, defaulting to 1000 [ 306.361339][T10744] virt_wifi0 speed is unknown, defaulting to 1000 [ 306.639315][T10744] chnl_net:caif_netlink_parms(): no params data found [ 306.845526][T10744] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.852719][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.868187][T10744] bridge_slave_0: entered allmulticast mode [ 306.882160][T10744] bridge_slave_0: entered promiscuous mode [ 306.902575][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.914251][T10744] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.933596][T10744] bridge_slave_1: entered allmulticast mode [ 306.946592][T10744] bridge_slave_1: entered promiscuous mode [ 307.026435][T10744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.050714][T10744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.127096][T10744] team0: Port device team_slave_0 added [ 307.138189][T10744] team0: Port device team_slave_1 added [ 307.180513][T10744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.188381][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.217301][T10744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.231403][T10744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.238469][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.247891][T10744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.274353][T10744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.374006][T10744] hsr_slave_0: entered promiscuous mode [ 307.381303][T10744] hsr_slave_1: entered promiscuous mode [ 307.388485][T10744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.397522][T10744] Cannot create hsr debugfs directory [ 307.648366][T10744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.744305][T10744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.837062][T10744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.933509][T10744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.275164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.356027][ T5830] Bluetooth: hci8: command tx timeout [ 309.315218][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.355241][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.435553][ T5830] Bluetooth: hci8: command tx timeout [ 311.395364][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.435213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.515248][ T5830] Bluetooth: hci8: command tx timeout [ 312.697003][ T59] block nbd0: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 90 seconds [ 313.475218][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.515235][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.596011][ T5830] Bluetooth: hci8: command tx timeout [ 315.555229][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.595228][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.160177][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.166965][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.635182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.994927][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 318.003755][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 318.012063][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 318.021280][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 318.029693][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 318.088409][T10753] xfrm0 speed is unknown, defaulting to 1000 [ 318.104450][T10753] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.388631][T10753] chnl_net:caif_netlink_parms(): no params data found [ 318.624818][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.632894][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.650287][T10753] bridge_slave_0: entered allmulticast mode [ 318.663003][T10753] bridge_slave_0: entered promiscuous mode [ 318.675171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.689396][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.705256][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.712554][T10753] bridge_slave_1: entered allmulticast mode [ 318.730623][T10753] bridge_slave_1: entered promiscuous mode [ 318.819101][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.844978][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.927633][T10753] team0: Port device team_slave_0 added [ 318.947479][T10753] team0: Port device team_slave_1 added [ 319.022937][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.040032][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.075113][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.098541][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.114434][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.151159][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.264909][T10753] hsr_slave_0: entered promiscuous mode [ 319.272755][T10753] hsr_slave_1: entered promiscuous mode [ 319.279218][T10753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.287019][T10753] Cannot create hsr debugfs directory [ 319.715497][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.115619][ T5830] Bluetooth: hci9: command tx timeout [ 320.755225][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.795228][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.203110][ T5830] Bluetooth: hci9: command tx timeout [ 322.835260][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.875202][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 324.275665][ T5830] Bluetooth: hci9: command tx timeout [ 324.915231][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.955206][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.355870][ T5830] Bluetooth: hci9: command tx timeout [ 326.995208][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.035233][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.075209][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.125214][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.155206][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.195199][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.235185][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.275215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 335.315223][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.355418][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.395256][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.396773][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 338.428142][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 338.436833][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 338.445190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.455005][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 338.467069][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 338.638898][T10764] xfrm0 speed is unknown, defaulting to 1000 [ 338.653548][ T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 338.662430][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 338.677834][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 338.681139][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 338.706278][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 338.714592][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 338.715855][T10764] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.722648][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 338.728979][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 338.745014][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 338.754134][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 338.891546][T10766] xfrm0 speed is unknown, defaulting to 1000 [ 338.908831][T10768] xfrm0 speed is unknown, defaulting to 1000 [ 338.915991][T10766] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.939989][T10768] virt_wifi0 speed is unknown, defaulting to 1000 [ 339.399876][T10764] chnl_net:caif_netlink_parms(): no params data found [ 339.475229][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.725261][T10768] chnl_net:caif_netlink_parms(): no params data found [ 339.868784][T10766] chnl_net:caif_netlink_parms(): no params data found [ 339.944863][T10764] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.961725][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.978080][T10764] bridge_slave_0: entered allmulticast mode [ 339.995493][T10764] bridge_slave_0: entered promiscuous mode [ 340.004906][T10764] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.024108][T10764] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.033865][T10764] bridge_slave_1: entered allmulticast mode [ 340.052749][T10764] bridge_slave_1: entered promiscuous mode [ 340.251870][T10764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.282099][T10764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.349046][T10768] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.370631][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.386683][T10768] bridge_slave_0: entered allmulticast mode [ 340.405450][T10768] bridge_slave_0: entered promiscuous mode [ 340.472849][T10768] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.480252][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.488967][T10768] bridge_slave_1: entered allmulticast mode [ 340.497383][T10768] bridge_slave_1: entered promiscuous mode [ 340.515117][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.522873][ T5141] Bluetooth: hci10: command tx timeout [ 340.582952][T10764] team0: Port device team_slave_0 added [ 340.674449][T10764] team0: Port device team_slave_1 added [ 340.720961][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.740078][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.754742][T10766] bridge_slave_0: entered allmulticast mode [ 340.761553][ T5141] Bluetooth: hci11: command tx timeout [ 340.785217][T10766] bridge_slave_0: entered promiscuous mode [ 340.809488][T10768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.847044][ T5141] Bluetooth: hci12: command tx timeout [ 340.848719][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.873226][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.884639][T10766] bridge_slave_1: entered allmulticast mode [ 340.900714][T10766] bridge_slave_1: entered promiscuous mode [ 340.927127][T10768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.937823][T10764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.944808][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.971658][T10764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.034933][T10764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.042969][T10764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.069832][T10764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.118233][T10768] team0: Port device team_slave_0 added [ 341.143901][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.173601][T10768] team0: Port device team_slave_1 added [ 341.204222][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.281918][T10764] hsr_slave_0: entered promiscuous mode [ 341.289966][T10764] hsr_slave_1: entered promiscuous mode [ 341.298385][T10764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.306368][T10764] Cannot create hsr debugfs directory [ 341.408891][T10768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.416167][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.457073][T10768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.484858][T10768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.498993][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.527491][T10768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.543596][T10766] team0: Port device team_slave_0 added [ 341.565216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.652913][T10766] team0: Port device team_slave_1 added [ 341.743288][T10768] hsr_slave_0: entered promiscuous mode [ 341.750533][T10768] hsr_slave_1: entered promiscuous mode [ 341.757490][T10768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.766221][T10768] Cannot create hsr debugfs directory [ 341.813121][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.832276][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.873793][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.929752][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.937764][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.964487][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.181597][T10766] hsr_slave_0: entered promiscuous mode [ 342.189610][T10766] hsr_slave_1: entered promiscuous mode [ 342.198049][T10766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.205739][T10766] Cannot create hsr debugfs directory [ 342.605111][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.613416][ T5141] Bluetooth: hci10: command tx timeout [ 342.761282][ T59] block nbd0: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 120 seconds [ 342.848910][ T5141] Bluetooth: hci11: command tx timeout [ 342.925898][ T5141] Bluetooth: hci12: command tx timeout [ 343.635138][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.675370][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.682873][ T5141] Bluetooth: hci10: command tx timeout [ 344.916010][ T5141] Bluetooth: hci11: command tx timeout [ 344.995470][ T5141] Bluetooth: hci12: command tx timeout [ 345.715205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.755220][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.762849][ T5141] Bluetooth: hci10: command tx timeout [ 346.995792][ T5141] Bluetooth: hci11: command tx timeout [ 347.075729][ T5141] Bluetooth: hci12: command tx timeout [ 347.795211][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.835275][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.875186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.915212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.955213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.998667][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.035219][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.075207][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.115215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.155212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.195211][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.235219][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.275593][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.315297][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.355204][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.395212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.435213][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.475194][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.515193][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.203001][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 367.212979][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 367.226568][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 367.236500][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 367.244710][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 367.313106][T10789] xfrm0 speed is unknown, defaulting to 1000 [ 367.336401][T10789] virt_wifi0 speed is unknown, defaulting to 1000 [ 367.555180][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.714067][T10789] chnl_net:caif_netlink_parms(): no params data found [ 367.970054][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.990562][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.005654][T10789] bridge_slave_0: entered allmulticast mode [ 368.013743][T10789] bridge_slave_0: entered promiscuous mode [ 368.037785][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.050563][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.065349][T10789] bridge_slave_1: entered allmulticast mode [ 368.074234][T10789] bridge_slave_1: entered promiscuous mode [ 368.177166][T10789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.191203][T10789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.270871][T10789] team0: Port device team_slave_0 added [ 368.305489][T10789] team0: Port device team_slave_1 added [ 368.393732][T10789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.405063][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.444980][T10789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.472120][T10789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.480585][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.507243][T10789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.595352][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.618334][T10789] hsr_slave_0: entered promiscuous mode [ 368.636730][T10789] hsr_slave_1: entered promiscuous mode [ 368.645613][T10789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.653296][T10789] Cannot create hsr debugfs directory [ 369.315747][ T5141] Bluetooth: hci13: command tx timeout [ 369.635277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.435688][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 370.675189][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.395327][ T55] Bluetooth: hci13: command tx timeout [ 371.715173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.755188][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.856780][ T59] block nbd0: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 150 seconds [ 373.477522][ T55] Bluetooth: hci13: command tx timeout [ 373.795189][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.835269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.555361][ T55] Bluetooth: hci13: command tx timeout [ 375.875201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.915182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.955297][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.603749][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610710][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.967725][ T5830] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 378.988735][ T5830] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 378.995952][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.004870][ T5830] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 379.013302][ T5830] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 379.021551][ T5830] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 379.093558][T10798] xfrm0 speed is unknown, defaulting to 1000 [ 379.109435][T10798] virt_wifi0 speed is unknown, defaulting to 1000 [ 379.464010][T10798] chnl_net:caif_netlink_parms(): no params data found [ 379.792336][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.816863][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.824475][T10798] bridge_slave_0: entered allmulticast mode [ 379.850883][T10798] bridge_slave_0: entered promiscuous mode [ 379.869960][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.896495][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.903838][T10798] bridge_slave_1: entered allmulticast mode [ 379.925579][T10798] bridge_slave_1: entered promiscuous mode [ 380.035102][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.065326][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.092492][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.209941][T10798] team0: Port device team_slave_0 added [ 380.232508][T10798] team0: Port device team_slave_1 added [ 380.319392][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.339279][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.367616][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.393968][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.402108][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.442816][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.568761][T10798] hsr_slave_0: entered promiscuous mode [ 380.575952][T10798] hsr_slave_1: entered promiscuous mode [ 380.582417][T10798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.590698][T10798] Cannot create hsr debugfs directory [ 380.675570][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 381.075182][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.075276][ T55] Bluetooth: hci14: command tx timeout [ 382.115167][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.155171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.155254][ T55] Bluetooth: hci14: command tx timeout [ 384.195171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.235172][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.235383][ T55] Bluetooth: hci14: command tx timeout [ 386.275201][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.315158][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.317360][ T55] Bluetooth: hci14: command tx timeout [ 388.355166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.395161][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.435177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.475161][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.515178][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.555708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.595203][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.635156][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.675164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.725190][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.755126][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.477500][T10812] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 399.488700][T10812] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 399.498960][T10812] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 399.507447][T10812] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 399.517440][T10812] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 399.517760][T10815] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 399.527912][T10812] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 399.534726][T10815] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 399.540318][T10812] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 399.547250][T10815] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 399.598594][T10809] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 399.615384][T10809] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 399.624003][T10809] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 399.634033][T10809] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 399.646607][T10809] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 399.683809][T10811] xfrm0 speed is unknown, defaulting to 1000 [ 399.735755][T10811] virt_wifi0 speed is unknown, defaulting to 1000 [ 399.772603][T10810] xfrm0 speed is unknown, defaulting to 1000 [ 399.795098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.835982][T10817] xfrm0 speed is unknown, defaulting to 1000 [ 399.842936][T10810] virt_wifi0 speed is unknown, defaulting to 1000 [ 399.896167][T10817] virt_wifi0 speed is unknown, defaulting to 1000 [ 400.526110][T10811] chnl_net:caif_netlink_parms(): no params data found [ 400.700099][T10817] chnl_net:caif_netlink_parms(): no params data found [ 400.801757][T10810] chnl_net:caif_netlink_parms(): no params data found [ 400.835204][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.023897][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.045360][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.052847][T10811] bridge_slave_0: entered allmulticast mode [ 401.077268][T10811] bridge_slave_0: entered promiscuous mode [ 401.165309][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 401.171827][T10809] Bluetooth: hci6: command 0x0406 tx timeout [ 401.172019][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.177955][T10809] Bluetooth: hci7: command 0x0406 tx timeout [ 401.216002][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.223393][T10811] bridge_slave_1: entered allmulticast mode [ 401.248349][T10811] bridge_slave_1: entered promiscuous mode [ 401.363596][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.468626][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.565888][ T5830] Bluetooth: hci16: command tx timeout [ 401.587823][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.596883][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.604480][T10810] bridge_slave_0: entered allmulticast mode [ 401.627716][T10810] bridge_slave_0: entered promiscuous mode [ 401.636907][ T5830] Bluetooth: hci15: command tx timeout [ 401.655832][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.663039][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.685465][T10817] bridge_slave_0: entered allmulticast mode [ 401.692944][T10817] bridge_slave_0: entered promiscuous mode [ 401.715263][ T5830] Bluetooth: hci17: command tx timeout [ 401.729336][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.737479][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.744844][T10810] bridge_slave_1: entered allmulticast mode [ 401.753960][T10810] bridge_slave_1: entered promiscuous mode [ 401.761904][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.770056][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.777823][T10817] bridge_slave_1: entered allmulticast mode [ 401.786714][T10817] bridge_slave_1: entered promiscuous mode [ 401.826455][T10811] team0: Port device team_slave_0 added [ 401.872464][T10811] team0: Port device team_slave_1 added [ 401.878330][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.911135][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.959510][T10810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.990245][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.038837][T10810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.069102][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.077340][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.104067][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.154619][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.163057][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.190858][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.243196][T10817] team0: Port device team_slave_0 added [ 402.279611][T10810] team0: Port device team_slave_0 added [ 402.300535][T10810] team0: Port device team_slave_1 added [ 402.352163][T10817] team0: Port device team_slave_1 added [ 402.449020][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.465074][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.507104][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.536651][T10810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.543650][T10810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.572197][T10810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.637134][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.644133][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.671880][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.686766][T10810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.693780][T10810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.722516][T10810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.827253][T10811] hsr_slave_0: entered promiscuous mode [ 402.839925][T10811] hsr_slave_1: entered promiscuous mode [ 402.857528][T10811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.875883][T10811] Cannot create hsr debugfs directory [ 402.915160][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.923108][ T59] block nbd0: Possible stuck request ffff88802501e000: control (read@0,4096B). Runtime 180 seconds [ 403.064930][T10810] hsr_slave_0: entered promiscuous mode [ 403.087160][T10810] hsr_slave_1: entered promiscuous mode [ 403.093744][T10810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.115198][T10810] Cannot create hsr debugfs directory [ 403.298434][T10817] hsr_slave_0: entered promiscuous mode [ 403.316005][T10817] hsr_slave_1: entered promiscuous mode [ 403.324879][T10817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.333340][T10817] Cannot create hsr debugfs directory [ 403.635705][ T5830] Bluetooth: hci16: command tx timeout [ 403.716060][ T5830] Bluetooth: hci15: command tx timeout [ 403.806585][ T5830] Bluetooth: hci17: command tx timeout [ 403.955146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.995438][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.715557][ T5830] Bluetooth: hci16: command tx timeout [ 405.795647][ T5830] Bluetooth: hci15: command tx timeout [ 405.876008][ T5830] Bluetooth: hci17: command tx timeout [ 406.035171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.075228][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.795506][ T5830] Bluetooth: hci16: command tx timeout [ 407.875828][ T5830] Bluetooth: hci15: command tx timeout [ 407.955614][ T5830] Bluetooth: hci17: command tx timeout [ 408.125240][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.282217][ T5201] udevd[5201]: worker [5921] /devices/virtual/block/nbd0 timeout; kill it [ 408.300246][ T5201] udevd[5201]: seq 15975 '/devices/virtual/block/nbd0' killed [ 409.155210][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.316055][ T31] INFO: task syz-executor:10277 blocked for more than 143 seconds. [ 409.324134][ T31] Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 [ 409.345249][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.354002][ T31] task:syz-executor state:D stack:22008 pid:10277 tgid:10277 ppid:1 task_flags:0x400140 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 409.366581][ T31] Call Trace: [ 409.370686][ T31] [ 409.373684][ T31] __schedule+0x16e2/0x4cd0 [ 409.405082][ T31] ? __lock_acquire+0xaac/0xd20 [ 409.410095][ T31] ? schedule+0x165/0x360 [ 409.414486][ T31] ? __pfx___schedule+0x10/0x10 [ 409.421157][ T31] ? schedule+0x91/0x360 [ 409.445491][ T31] schedule+0x165/0x360 [ 409.449749][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.482805][ T31] __mutex_lock+0x724/0xe80 [ 409.506405][ T31] ? __mutex_lock+0x51b/0xe80 [ 409.511188][ T31] ? genl_rcv_msg+0x10d/0x790 [ 409.525234][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.530347][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 409.551671][ T31] ? radix_tree_lookup+0x240/0x290 [ 409.558998][ T31] genl_rcv_msg+0x10d/0x790 [ 409.563581][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.575160][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 409.580265][ T31] ? __copy_skb_header+0xa7/0x550 [ 409.600599][ T31] netlink_rcv_skb+0x219/0x490 [ 409.615304][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.620524][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.635692][ T31] ? down_read+0x1ad/0x2e0 [ 409.640209][ T31] genl_rcv+0x28/0x40 [ 409.644264][ T31] netlink_unicast+0x758/0x8d0 [ 409.665325][ T31] netlink_sendmsg+0x805/0xb30 [ 409.670216][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.676923][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 409.681983][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.688200][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.693563][ T31] __sock_sendmsg+0x219/0x270 [ 409.699177][ T31] __sys_sendto+0x3bd/0x520 [ 409.703833][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 409.709506][ T31] ? fput_close_sync+0x169/0x200 [ 409.714536][ T31] ? rcu_is_watching+0x15/0xb0 [ 409.720517][ T31] __x64_sys_sendto+0xde/0x100 [ 409.726787][ T31] do_syscall_64+0xf6/0x210 [ 409.731368][ T31] ? clear_bhb_loop+0x45/0xa0 [ 409.736779][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.742808][ T31] RIP: 0033:0x7fc32db907fc [ 409.748286][ T31] RSP: 002b:00007ffd2971ff70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 409.757195][ T31] RAX: ffffffffffffffda RBX: 00007fc32e8e4620 RCX: 00007fc32db907fc [ 409.765569][ T31] RDX: 0000000000000024 RSI: 00007fc32e8e4670 RDI: 0000000000000003 [ 409.773598][ T31] RBP: 0000000000000000 R08: 00007ffd2971ffc4 R09: 000000000000000c [ 409.782483][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 409.792234][ T31] R13: 0000000000000000 R14: 00007fc32e8e4670 R15: 0000000000000000 [ 409.801626][ T31] [ 409.804746][ T31] INFO: task syz-executor:10589 blocked for more than 143 seconds. [ 409.814040][ T31] Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 [ 409.822274][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.831613][ T31] task:syz-executor state:D stack:22072 pid:10589 tgid:10589 ppid:1 task_flags:0x400140 flags:0x00000004 [ 409.845366][ T31] Call Trace: [ 409.848733][ T31] [ 409.851708][ T31] __schedule+0x16e2/0x4cd0 [ 409.857009][ T31] ? __lock_acquire+0xaac/0xd20 [ 409.861938][ T31] ? schedule+0x165/0x360 [ 409.867211][ T31] ? __pfx___schedule+0x10/0x10 [ 409.872142][ T31] ? schedule+0x91/0x360 [ 409.877253][ T31] schedule+0x165/0x360 [ 409.881537][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.887587][ T31] __mutex_lock+0x724/0xe80 [ 409.892156][ T31] ? __mutex_lock+0x51b/0xe80 [ 409.905661][ T31] ? genl_rcv_msg+0x10d/0x790 [ 409.910435][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.925810][ T31] ? stack_depot_save_flags+0x40/0x910 [ 409.931630][ T31] ? radix_tree_lookup+0x240/0x290 [ 409.952915][ T31] genl_rcv_msg+0x10d/0x790 [ 409.974959][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.995403][ T31] ? __lock_acquire+0xaac/0xd20 [ 410.000368][ T31] netlink_rcv_skb+0x219/0x490 [ 410.015414][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.020536][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.035574][ T31] ? down_read+0x1ad/0x2e0 [ 410.040087][ T31] genl_rcv+0x28/0x40 [ 410.044121][ T31] netlink_unicast+0x758/0x8d0 [ 410.065273][ T31] netlink_sendmsg+0x805/0xb30 [ 410.070239][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.085098][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 410.090140][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.095828][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.101171][ T31] __sock_sendmsg+0x219/0x270 [ 410.106279][ T31] __sys_sendto+0x3bd/0x520 [ 410.110829][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 410.117635][ T31] ? fd_install+0x97/0x540 [ 410.122116][ T31] ? fd_install+0x30d/0x540 [ 410.127038][ T31] __x64_sys_sendto+0xde/0x100 [ 410.131876][ T31] do_syscall_64+0xf6/0x210 [ 410.145350][ T31] ? clear_bhb_loop+0x45/0xa0 [ 410.150405][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.165428][ T31] RIP: 0033:0x7fbef77907fc [ 410.169954][ T31] RSP: 002b:00007ffea0d6bb00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 410.193720][ T31] RAX: ffffffffffffffda RBX: 00007fbef84e4620 RCX: 00007fbef77907fc [ 410.202014][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.225668][ T31] RDX: 0000000000000020 RSI: 00007fbef84e4670 RDI: 0000000000000005 [ 410.233734][ T31] RBP: 0000000000000000 R08: 00007ffea0d6bb54 R09: 000000000000000c [ 410.245237][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 410.253289][ T31] R13: 00007ffea0d6bba8 R14: 00007fbef84e4670 R15: 0000000000000000 [ 410.261679][ T31] [ 410.264785][ T31] INFO: task syz.0.1230:10687 blocked for more than 144 seconds. [ 410.285374][ T31] Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 [ 410.293063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.319554][ T31] task:syz.0.1230 state:D stack:26168 pid:10687 tgid:10686 ppid:5833 task_flags:0x480140 flags:0x00000004 [ 410.345081][ T31] Call Trace: [ 410.348479][ T31] [ 410.351490][ T31] __schedule+0x16e2/0x4cd0 [ 410.365117][ T31] ? __lock_acquire+0xaac/0xd20 [ 410.370087][ T31] ? schedule+0x165/0x360 [ 410.374484][ T31] ? __pfx___schedule+0x10/0x10 [ 410.393818][ T31] ? schedule+0x91/0x360 [ 410.404267][ T31] schedule+0x165/0x360 [ 410.410003][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 410.416324][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 410.422556][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 410.429205][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 410.435683][ T31] queue_limits_commit_update_frozen+0x5d/0x300 [ 410.442222][ T31] nbd_set_size+0x496/0x6c0 [ 410.449135][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 410.454229][ T31] ? __mutex_trylock_common+0x153/0x260 [ 410.460429][ T31] ? __mutex_lock+0x330/0xe80 [ 410.465528][ T31] ? nla_memcpy+0x5b/0xc0 [ 410.469965][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 410.474968][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 410.482162][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 410.495460][ T31] ? bpf_lsm_capable+0x9/0x20 [ 410.500236][ T31] ? security_capable+0x7e/0x2e0 [ 410.524056][ T31] ? radix_tree_lookup+0x240/0x290 [ 410.529702][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 410.545133][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 410.550987][ T31] ? __nla_parse+0x40/0x60 [ 410.565416][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 410.571866][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 410.592968][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 410.605308][ T31] ? stack_depot_save_flags+0x40/0x910 [ 410.610875][ T31] genl_rcv_msg+0x60e/0x790 [ 410.625801][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.630916][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 410.637499][ T31] netlink_rcv_skb+0x219/0x490 [ 410.642326][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.648169][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.653550][ T31] ? down_read+0x1ad/0x2e0 [ 410.658907][ T31] genl_rcv+0x28/0x40 [ 410.663030][ T31] netlink_unicast+0x758/0x8d0 [ 410.668577][ T31] netlink_sendmsg+0x805/0xb30 [ 410.673474][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.685065][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 410.690101][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.705508][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.710929][ T31] __sock_sendmsg+0x219/0x270 [ 410.731919][ T31] ____sys_sendmsg+0x505/0x830 [ 410.737144][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.742513][ T31] ? import_iovec+0x74/0xa0 [ 410.748553][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 410.753360][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.759157][ T31] ? __fget_files+0x2a/0x420 [ 410.763792][ T31] ? __fget_files+0x3a0/0x420 [ 410.768645][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 410.773739][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.780670][ T31] ? do_syscall_64+0xba/0x210 [ 410.785851][ T31] do_syscall_64+0xf6/0x210 [ 410.790399][ T31] ? clear_bhb_loop+0x45/0xa0 [ 410.795257][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.801204][ T31] RIP: 0033:0x7f147bb8e969 [ 410.805775][ T31] RSP: 002b:00007f147c942038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.814230][ T31] RAX: ffffffffffffffda RBX: 00007f147bdb5fa0 RCX: 00007f147bb8e969 [ 410.822774][ T31] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 410.830930][ T31] RBP: 00007f147bc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 410.855375][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.863525][ T31] R13: 0000000000000000 R14: 00007f147bdb5fa0 R15: 00007ffe12971528 [ 410.889987][ T31] [ 410.893118][ T31] INFO: task syz.3.1234:10704 blocked for more than 144 seconds. [ 410.915219][ T31] Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 [ 410.922924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.945216][ T31] task:syz.3.1234 state:D stack:28712 pid:10704 tgid:10701 ppid:5836 task_flags:0x400040 flags:0x00000004 [ 410.971979][ T31] Call Trace: [ 410.982550][ T31] [ 410.985879][ T31] __schedule+0x16e2/0x4cd0 [ 410.990462][ T31] ? __lock_acquire+0xaac/0xd20 [ 411.005111][ T31] ? schedule+0x165/0x360 [ 411.009542][ T31] ? __pfx___schedule+0x10/0x10 [ 411.014473][ T31] ? schedule+0x91/0x360 [ 411.035213][ T31] schedule+0x165/0x360 [ 411.039480][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.055669][ T31] __mutex_lock+0x724/0xe80 [ 411.060272][ T31] ? __mutex_lock+0x51b/0xe80 [ 411.075418][ T31] ? genl_rcv_msg+0x10d/0x790 [ 411.080196][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.095276][ T31] ? stack_depot_save_flags+0x40/0x910 [ 411.100930][ T31] ? radix_tree_lookup+0x240/0x290 [ 411.115205][ T31] genl_rcv_msg+0x10d/0x790 [ 411.119805][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.124857][ T31] ? __lock_acquire+0xaac/0xd20 [ 411.130455][ T31] netlink_rcv_skb+0x219/0x490 [ 411.145707][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.150831][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.165180][ T31] ? down_read+0x1ad/0x2e0 [ 411.169702][ T31] genl_rcv+0x28/0x40 [ 411.173744][ T31] netlink_unicast+0x758/0x8d0 [ 411.193179][ T31] netlink_sendmsg+0x805/0xb30 [ 411.198694][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.204068][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 411.210191][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.216138][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.221533][ T31] __sock_sendmsg+0x219/0x270 [ 411.226804][ T31] __sys_sendto+0x3bd/0x520 [ 411.231360][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 411.236902][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.244868][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 411.250689][ T31] __x64_sys_sendto+0xde/0x100 [ 411.255981][ T31] do_syscall_64+0xf6/0x210 [ 411.260781][ T31] ? clear_bhb_loop+0x45/0xa0 [ 411.266409][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.272359][ T31] RIP: 0033:0x7f6c7a9907fc [ 411.277414][ T31] RSP: 002b:00007f6c787f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 411.286351][ T31] RAX: ffffffffffffffda RBX: 00007f6c787f4fc0 RCX: 00007f6c7a9907fc [ 411.294407][ T31] RDX: 0000000000000020 RSI: 00007f6c787f5010 RDI: 000000000000000a [ 411.303347][ T31] RBP: 0000000000000000 R08: 00007f6c787f4f14 R09: 000000000000000c [ 411.311801][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 411.321571][ T31] R13: 00007f6c787f4f68 R14: 00007f6c787f5010 R15: 0000000000000000 [ 411.330699][ T31] [ 411.333848][ T31] INFO: task syz.1.1236:10714 blocked for more than 145 seconds. [ 411.342180][ T31] Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 [ 411.350201][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.361387][ T31] task:syz.1.1236 state:D stack:28520 pid:10714 tgid:10713 ppid:5827 task_flags:0x400040 flags:0x00000004 [ 411.374033][ T31] Call Trace: [ 411.377761][ T31] [ 411.380741][ T31] __schedule+0x16e2/0x4cd0 [ 411.386119][ T31] ? __lock_acquire+0xaac/0xd20 [ 411.391048][ T31] ? schedule+0x165/0x360 [ 411.396511][ T31] ? __pfx___schedule+0x10/0x10 [ 411.401451][ T31] ? schedule+0x91/0x360 [ 411.407103][ T31] schedule+0x165/0x360 [ 411.411340][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.417725][ T31] __mutex_lock+0x724/0xe80 [ 411.422286][ T31] ? __mutex_lock+0x51b/0xe80 [ 411.427584][ T31] ? genl_rcv_msg+0x10d/0x790 [ 411.432333][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.439259][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 411.444448][ T31] ? radix_tree_lookup+0x240/0x290 [ 411.450507][ T31] genl_rcv_msg+0x10d/0x790 [ 411.455512][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.460615][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 411.466366][ T31] ? __copy_skb_header+0xa7/0x550 [ 411.471481][ T31] netlink_rcv_skb+0x219/0x490 [ 411.494515][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.500289][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.516109][ T31] ? down_read+0x1ad/0x2e0 [ 411.520621][ T31] genl_rcv+0x28/0x40 [ 411.524652][ T31] netlink_unicast+0x758/0x8d0 [ 411.543555][ T31] netlink_sendmsg+0x805/0xb30 [ 411.554859][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.565664][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 411.570935][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.585247][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.590641][ T31] __sock_sendmsg+0x219/0x270 [ 411.610202][ T31] __sys_sendto+0x3bd/0x520 [ 411.614812][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 411.625454][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 411.630902][ T31] __x64_sys_sendto+0xde/0x100 [ 411.637624][ T31] do_syscall_64+0xf6/0x210 [ 411.642206][ T31] ? clear_bhb_loop+0x45/0xa0 [ 411.656701][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.662715][ T31] RIP: 0033:0x7f163ed907fc [ 411.675258][ T31] RSP: 002b:00007f163fc7fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 411.683860][ T31] RAX: ffffffffffffffda RBX: 00007f163fc7ffc0 RCX: 00007f163ed907fc [ 411.708806][ T31] RDX: 0000000000000020 RSI: 00007f163fc80010 RDI: 0000000000000004 [ 411.725621][ T31] RBP: 0000000000000000 R08: 00007f163fc7ff14 R09: 000000000000000c [ 411.733687][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 411.755222][ T31] R13: 00007f163fc7ff68 R14: 00007f163fc80010 R15: 0000000000000000 [ 411.763339][ T31] [ 411.782222][ T31] [ 411.782222][ T31] Showing all locks held in the system: [ 411.795462][ T31] 1 lock held by khungtaskd/31: [ 411.800460][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 411.825239][ T31] 2 locks held by kworker/u8:3/53: [ 411.830450][ T31] 2 locks held by getty/5582: [ 411.836313][ T31] #0: ffff888033da10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.861951][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 411.872838][ T31] 1 lock held by udevd/5921: [ 411.879551][ T31] #0: ffff888143790358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 411.889061][ T31] 5 locks held by kworker/0:14/8286: [ 411.894420][ T31] 2 locks held by syz-executor/10277: [ 411.900264][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.908694][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 411.917950][ T31] 3 locks held by kworker/u8:12/10489: [ 411.923446][ T31] 2 locks held by syz-executor/10589: [ 411.929216][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.937636][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 411.946772][ T31] 6 locks held by syz.0.1230/10687: [ 411.951990][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.962326][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 411.971487][ T31] #2: ffff888024ab7198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 411.982257][ T31] #3: ffff888143781a78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a4/0x6c0 [ 411.993361][ T31] #4: ffff888143781428 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x300 [ 412.005720][ T31] #5: ffff888143781460 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x300 [ 412.018334][ T31] 2 locks held by syz.3.1234/10704: [ 412.023605][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.032089][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.041651][ T31] 2 locks held by syz.1.1236/10714: [ 412.047258][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.055686][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.064829][ T31] 2 locks held by syz-executor/10719: [ 412.071745][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.080644][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.089907][ T31] 2 locks held by syz-executor/10721: [ 412.096757][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.115486][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.124579][ T31] 2 locks held by syz-executor/10723: [ 412.145258][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.153570][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.181366][ T31] 2 locks held by syz-executor/10744: [ 412.195825][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.204135][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.225245][ T31] 2 locks held by syz-executor/10753: [ 412.230690][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.239607][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.255417][ T31] 2 locks held by syz-executor/10764: [ 412.260862][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.275146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.282778][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.294333][ T31] 2 locks held by syz-executor/10766: [ 412.305382][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.313677][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.332866][ T31] 2 locks held by syz-executor/10768: [ 412.353537][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.365601][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.374695][ T31] 2 locks held by syz-executor/10789: [ 412.395712][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.404008][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.415427][ T31] 2 locks held by syz-executor/10798: [ 412.420879][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.429897][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.439981][ T31] 2 locks held by syz-executor/10810: [ 412.445799][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.454069][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.463695][ T31] 2 locks held by syz-executor/10811: [ 412.469829][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.478699][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.488164][ T31] 2 locks held by syz-executor/10817: [ 412.493808][ T31] #0: ffffffff8f357330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 412.503133][ T31] #1: ffffffff8f357148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 412.512669][ T31] [ 412.519021][ T31] ============================================= [ 412.519021][ T31] [ 412.528357][ T31] NMI backtrace for cpu 1 [ 412.528384][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 412.528416][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.528428][ T31] Call Trace: [ 412.528436][ T31] [ 412.528482][ T31] dump_stack_lvl+0x189/0x250 [ 412.528521][ T31] ? __wake_up_klogd+0xd9/0x110 [ 412.528548][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.528576][ T31] ? __pfx__printk+0x10/0x10 [ 412.528610][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 412.528641][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.528665][ T31] ? _printk+0xcf/0x120 [ 412.528690][ T31] ? __pfx__printk+0x10/0x10 [ 412.528712][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.528735][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 412.528766][ T31] watchdog+0xfee/0x1030 [ 412.528793][ T31] ? watchdog+0x1de/0x1030 [ 412.528826][ T31] kthread+0x70e/0x8a0 [ 412.528853][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.528876][ T31] ? __pfx_kthread+0x10/0x10 [ 412.528900][ T31] ? __pfx_kthread+0x10/0x10 [ 412.528922][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.528950][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.528981][ T31] ? __pfx_kthread+0x10/0x10 [ 412.529003][ T31] ret_from_fork+0x4b/0x80 [ 412.529022][ T31] ? __pfx_kthread+0x10/0x10 [ 412.529045][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.529080][ T31] [ 412.529087][ T31] Sending NMI from CPU 1 to CPUs 0: [ 412.679598][ C0] NMI backtrace for cpu 0 [ 412.679616][ C0] CPU: 0 UID: 0 PID: 10489 Comm: kworker/u8:12 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 412.679636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.679647][ C0] Workqueue: bat_events batadv_nc_worker [ 412.679676][ C0] RIP: 0010:__local_bh_disable_ip+0xbb/0x190 [ 412.679703][ C0] Code: 8b 74 24 40 fa 65 01 1d 23 5c ef 10 65 8b 05 1c 5c ef 10 31 d8 a9 00 ff 00 00 75 05 e8 ce 44 18 00 48 c7 44 24 20 00 00 00 00 <9c> 8f 44 24 20 f6 44 24 21 02 0f 85 a4 00 00 00 41 f7 c6 00 02 00 [ 412.679718][ C0] RSP: 0018:ffffc900036a7960 EFLAGS: 00000082 [ 412.679731][ C0] RAX: 755f97da230fdf00 RBX: 0000000000000201 RCX: 00000000013b1918 [ 412.679743][ C0] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8b23abb7 [ 412.679754][ C0] RBP: ffffc900036a7a00 R08: ffffffff8f7ebe77 R09: 1ffffffff1efd7ce [ 412.679767][ C0] R10: dffffc0000000000 R11: fffffbfff1efd7cf R12: 1ffff920006d4f2c [ 412.679779][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: dffffc0000000000 [ 412.679791][ C0] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 412.679804][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.679815][ C0] CR2: 0000558a67d2e708 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 412.679830][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.679840][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.679850][ C0] Call Trace: [ 412.679856][ C0] [ 412.679865][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 412.679889][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 412.679914][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 412.679940][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 412.679960][ C0] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 412.679984][ C0] _raw_spin_lock_bh+0x1c/0x50 [ 412.680006][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 412.680031][ C0] batadv_nc_purge_paths+0xe7/0x3b0 [ 412.680064][ C0] batadv_nc_worker+0x328/0x610 [ 412.680087][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 412.680114][ C0] process_scheduled_works+0xadb/0x17a0 [ 412.680154][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.680188][ C0] worker_thread+0x8a0/0xda0 [ 412.680217][ C0] kthread+0x70e/0x8a0 [ 412.680237][ C0] ? __pfx_worker_thread+0x10/0x10 [ 412.680252][ C0] ? __pfx_kthread+0x10/0x10 [ 412.680271][ C0] ? __pfx_kthread+0x10/0x10 [ 412.680288][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.680310][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.680335][ C0] ? __pfx_kthread+0x10/0x10 [ 412.680353][ C0] ret_from_fork+0x4b/0x80 [ 412.680368][ C0] ? __pfx_kthread+0x10/0x10 [ 412.680386][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.680410][ C0] [ 412.680717][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 412.958096][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 412.969909][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.979975][ T31] Call Trace: [ 412.983264][ T31] [ 412.986210][ T31] dump_stack_lvl+0x99/0x250 [ 412.990823][ T31] ? __asan_memcpy+0x40/0x70 [ 412.995509][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.000740][ T31] ? __pfx__printk+0x10/0x10 [ 413.005348][ T31] panic+0x2db/0x790 [ 413.009269][ T31] ? __pfx_panic+0x10/0x10 [ 413.013702][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 413.019527][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 413.024911][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 413.031090][ T31] watchdog+0x102d/0x1030 [ 413.035437][ T31] ? watchdog+0x1de/0x1030 [ 413.039874][ T31] kthread+0x70e/0x8a0 [ 413.043972][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.048664][ T31] ? __pfx_kthread+0x10/0x10 [ 413.053273][ T31] ? __pfx_kthread+0x10/0x10 [ 413.057875][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.063093][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.068349][ T31] ? __pfx_kthread+0x10/0x10 [ 413.072966][ T31] ret_from_fork+0x4b/0x80 [ 413.077394][ T31] ? __pfx_kthread+0x10/0x10 [ 413.082000][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.086790][ T31] [ 413.090186][ T31] Kernel Offset: disabled [ 413.094536][ T31] Rebooting in 86400 seconds..