last executing test programs: 19.642991647s ago: executing program 4 (id=3141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x400004}}, 0x10, 0x0, 0xffffffffffffff4c, 0x0, 0xfffffffffffffdca, 0x880}, 0x20000010) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="44d5050000000000140003006e657464657673696d3000000000000014001680100001800c0003"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) getsockname$tipc(r3, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) 19.381494448s ago: executing program 4 (id=3143): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x9f5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x2, 0xff, 0x0, 0x40, 0x40, 0x3, 0x7}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}}, 0x5, 0x7fbd, 0x8, 0x80, 0x0, 0x80000000, 0x3}, 0x9c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x222}], 0x1}}], 0x2, 0x400c0) 19.226597926s ago: executing program 4 (id=3145): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x1010, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000180)={0x3, @default}) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000180)={0x3, @default}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r7 = socket$rxrpc(0x21, 0x2, 0x2) close(r7) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r8, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(r9, 0x7fffffff) (async) listen(r9, 0x7fffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 18.838142345s ago: executing program 2 (id=3150): r0 = socket$isdn(0x22, 0x2, 0x3) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xee}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000140)="3c705de3bbead4fae4f5dd0ff37aa0fd9a7e2e8da11b1bf1763c253504b1b4bb6d1b18924015ad0c234870ffcee11f3a4bb0") 18.406544874s ago: executing program 2 (id=3153): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee6fe1a3cab7c320"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/245, 0xf5}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x24004002}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x8000000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000280)={r4, 0x2, 0x23, "252fefe65daee60550c994e4dffa88d67c0b976f9d480457e782652a4027433af385fc"}, 0x2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 18.302657405s ago: executing program 4 (id=3156): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x42, @v={0x3, 0x5, 0x6, 0x7, {0x7, 0x5, "60ce65cdee5eb450"}}}, 0x12) 17.397907582s ago: executing program 4 (id=3161): r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f000000cc80)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f000000ccc0)=0xffffffff, r0, 0x0, 0x5, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000001640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @remote, {[@dstopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x7, 0x5e4, [0x9, 0x6, 0xad1000]}}, @padn={0x1, 0x2}, @padn={0x1, 0x5a}]}]}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xd, 0x30, 0x1, 0x952600000000}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e22, 0xfffeffff, @loopback, 0x4}}, [0x8, 0x4, 0x5, 0x800, 0x96, 0xbe85, 0x0, 0x8, 0x4, 0xdc, 0x8, 0xfffffffffffffffa, 0x1, 0xffffffffffffffff, 0x3]}, &(0x7f0000000180)=0x100) 17.334417925s ago: executing program 0 (id=3162): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)=@newtfilter={0x15c, 0x2c, 0xd27, 0x70bd28, 0x2000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x12c, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xb, 0x2, 0x6}, {0xb05f, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0xd}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x212, 0x7, 0x80}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0xfff8, 0x2, 0x2}, {0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0xfff8}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x1}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0xb4fb}, {0x8, 0x7, 0x6, 0x5, 0x3, 0x2, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xe}, {0xfffffff3, 0xfffffe01, 0x7, 0x6}}}]}]}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_ACT={0x40, 0x3, [@m_skbmod={0x3c, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xb}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8d0) 17.207369829s ago: executing program 4 (id=3163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 17.0025467s ago: executing program 0 (id=3165): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 17.001307062s ago: executing program 2 (id=3166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x3, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r3, 0x7fffffff, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, 0xfffffffffffffffe, &(0x7f0000000100)=@udp6, 0x1}, 0x20) 16.894419871s ago: executing program 0 (id=3168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r7], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xff48}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r11, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4105, 0x1009}], 0x1) 16.830792148s ago: executing program 1 (id=3170): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 16.731210967s ago: executing program 3 (id=3171): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000642000/0x3000)=nil, 0x3000, 0x3000004, 0x80010, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x12, &(0x7f000000c280)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x94}}, 0x0) 16.706331279s ago: executing program 1 (id=3172): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x3}, &(0x7f0000000180)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000001c0)=0x61) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xffffffffffffff36, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x4, 0x0, 0x0, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xc0, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x60, 0x2f}, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, {}, 0xfffffffc, 0x6e6bb4}}}, 0xc0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc1, '\x00', 0x0, @sk_msg}, 0xe5) 16.598512643s ago: executing program 2 (id=3173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYBLOB="9743302b229cc1afdb86213860f6fb332c26051ce460802360d35d6ae85b62c3b1c6e526d47a9855da571914fce03c92ecc631565106228165f69ceb0eee7dd03ff86708abe8c4625c5111be0e9258411035d2796fbdd82db5c0f2eb1265e0626f2319e5a446e9efa8ec7b6c384a8aaf6018d55a771d941736b5dca2df208e1bf04080b9381ca3f3f2d50f1651cdf33c356d96ff489c4484021c79a6da143f5d639efcc66458ea2d738199a8aaafbe25f93a7b13dae801dccfdf150945bf7456b031c0cbaee645b98600b4f391055825dd5ca21ce96fd994c72dc218e21cf768ac8af3", @ANYRES32=r1, @ANYRES32, @ANYRESHEX=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg$inet6(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'geneve0\x00'}) recvmsg$qrtr(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x102}, 0x38, 0x2) 16.597457464s ago: executing program 3 (id=3174): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) 16.574775386s ago: executing program 0 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x24db}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x1}}, 0x10, 0x0}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x3, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r5, &(0x7f0000000680)="4eded3380304", 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev, 0x0, 0x4}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) splice(r5, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0) 16.50171968s ago: executing program 0 (id=3176): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='team0\x00', 0x10) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5d}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x8004084) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r0}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) connect$phonet_pipe(r4, &(0x7f0000000480)={0x23, 0x40, 0x7, 0x5}, 0x10) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x3, 0x3, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffff69}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2}}]}, 0x50}}, 0x2400c084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0xc000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000680)={'virt_wifi0\x00', 0x1000}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@delchain={0x3c, 0x65, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0xfff2}, {0xffe6}, {0x8, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x89}, @TCA_RATE={0x6, 0x5, {0x64, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000494}, 0x4) bind$inet(r4, &(0x7f00000007c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) bind$vsock_stream(r4, &(0x7f0000000800)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x44000) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb0, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x1f, 0x10, 0xc, 0xd, {0x4e23, 0x4e23, [0x8, 0xffffffff, 0xf, 0x3], [0x100, 0x0, 0x1000, 0xb989], r1, [0x2b2570cd, 0x3]}, 0x3, 0x5f3}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "68aef467eba4160481dc1712582982421da00ec678"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "42f35756f49173d5a650c8c7b2f0fb5c74ec6123d6afe4b81709932119516e1e428f628233a3"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "2ca3dfae9308c0fc1e260f7934d7586ee9d86905ffe4"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) readv(r9, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/75, 0x4b}, {&(0x7f0000000b80)=""/110, 0x6e}, {&(0x7f0000000c00)=""/205, 0xcd}], 0x3) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_lsm={0x1d, 0x31, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x63}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_query, @ringbuf_query, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000f40)=""/192, 0x41000, 0x31, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001040)={0x0, 0x7, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000001080)=[{0x2, 0x952a, 0x8, 0xa}, {0x3, 0x4, 0x0, 0x5}, {0x5, 0x3, 0x8, 0x1}, {0x0, 0x3, 0xa, 0x6}, {0x0, 0x2, 0xf, 0xc}, {0x1, 0x5, 0xd, 0x6}], 0x10, 0x7}, 0x94) readv(r10, &(0x7f0000002440)=[{&(0x7f00000011c0)=""/5, 0x5}, {&(0x7f0000001200)=""/37, 0x25}, {&(0x7f0000001240)=""/11, 0xb}, {&(0x7f0000001280)=""/254, 0xfe}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f00000013c0)=""/94, 0x5e}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x7) 16.405857586s ago: executing program 1 (id=3177): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$isdn(0x22, 0x2, 0x21) close(r1) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0xfe, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bbc, 0xd, {0x6, 0x32, 0x6, 0x4, 0x0, 0x4, 0x0, @in6=@remote, @in6=@private1}}]}, 0x98}, 0x1, 0x7}, 0x20040841) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create(0xffff) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x8800000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0x8002015}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x48080) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000100)={0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000680)={0x20004000}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000600)={0x0, 0x1, 0x40, "66acf2308c6663a8d71f181fe8c38802b214c7e05fa72b2800582d8d4f5a09d6d7cd4976021c7c67d3077150d88eaaa4c75d78a73c64baeaeb66be2b086b79a7"}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x52}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040081}, 0x8004) unshare(0x20040600) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x80088a02, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf250b00000008000300", @ANYRES32=r11, @ANYBLOB="1c00508004000400050002000000000009000100f8ef3a87de000000"], 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) 16.26303464s ago: executing program 1 (id=3178): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20044890) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a60000000060a0b04661f794a000000000200000034000480300001800b0001006c6f6f6b75700000200002800900010073797a30000000000800054000000000080003400000001d0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0xfffffffe, 0x0, 0x4, 0x1, 0x1, 0x7, 0x2f4}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 16.232796166s ago: executing program 1 (id=3179): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c0, 0x0, 0x1, 0x404, 0x0, 0x0, {0x3}, [@CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffff9908}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xb}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x65}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8001}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x44000}, 0xf8e29bba920643a) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) 16.191527736s ago: executing program 1 (id=3180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd150}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 15.722332193s ago: executing program 2 (id=3181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, 0x0, 0x4040040) 15.698977014s ago: executing program 3 (id=3182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x3}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb701, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb", @ANYRESHEX=r8], 0xfdef) 14.267706544s ago: executing program 2 (id=3183): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/141, 0xe3, 0x8d, 0x1, 0xc}, 0x28) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r5}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r7, 0x101, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4064000) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000140)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x40, 0x34, &(0x7f0000000200)=""/52, 0x41100, 0x2e, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x9, 0x4, 0x7}, 0x10, 0x3f2d, r0, 0x3, &(0x7f0000000640)=[r3, r5, r9, r10], &(0x7f0000000680)=[{0x3, 0x2, 0x6, 0x4}, {0x3, 0x1, 0x9, 0x9}, {0x0, 0x4, 0x9, 0xa}], 0x10, 0x41d}, 0x94) 14.26747876s ago: executing program 3 (id=3184): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x2400c045) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800), 0x10000146}, 0x10884) 14.267058105s ago: executing program 0 (id=3185): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRESHEX=r1], 0x74}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000044) 14.266673573s ago: executing program 3 (id=3186): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}}, 0x4000040) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) close(0x3) 14.250049955s ago: executing program 3 (id=3187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b9f", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[], &(0x7f0000001c40)='syzkaller\x00', 0x8000f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 522.366335ms ago: executing program 32 (id=3185): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRESHEX=r1], 0x74}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000044) 492.72983ms ago: executing program 33 (id=3180): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd150}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 439.717025ms ago: executing program 34 (id=3183): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/141, 0xe3, 0x8d, 0x1, 0xc}, 0x28) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r5}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r7, 0x101, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4064000) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000140)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x40, 0x34, &(0x7f0000000200)=""/52, 0x41100, 0x2e, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x9, 0x4, 0x7}, 0x10, 0x3f2d, r0, 0x3, &(0x7f0000000640)=[r3, r5, r9, r10], &(0x7f0000000680)=[{0x3, 0x2, 0x6, 0x4}, {0x3, 0x1, 0x9, 0x9}, {0x0, 0x4, 0x9, 0xa}], 0x10, 0x41d}, 0x94) 0s ago: executing program 35 (id=3187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b9f", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[], &(0x7f0000001c40)='syzkaller\x00', 0x8000f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) kernel console output (not intermixed with test programs): 92242][T14038] ? lock_acquire+0x5f/0x360 [ 223.092274][T14038] should_fail_ex+0x414/0x560 [ 223.092304][T14038] should_failslab+0xa8/0x100 [ 223.092337][T14038] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 223.092367][T14038] ? __alloc_skb+0x112/0x2d0 [ 223.092400][T14038] __alloc_skb+0x112/0x2d0 [ 223.092442][T14038] netlink_ack+0x146/0xa50 [ 223.092469][T14038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.092491][T14038] ? __kasan_slab_alloc+0x6c/0x80 [ 223.092518][T14038] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 223.092540][T14038] ? __pfx_nl80211_post_doit+0x10/0x10 [ 223.092563][T14038] ? __netlink_lookup+0xbd/0x810 [ 223.092580][T14038] ? rcu_is_watching+0x15/0xb0 [ 223.092608][T14038] netlink_rcv_skb+0x28c/0x470 [ 223.092638][T14038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.092662][T14038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.092699][T14038] ? lock_release+0x4b/0x3e0 [ 223.092732][T14038] ? down_read+0x1ad/0x2e0 [ 223.092753][T14038] genl_rcv+0x28/0x40 [ 223.092774][T14038] netlink_unicast+0x82c/0x9e0 [ 223.092806][T14038] ? __pfx_netlink_unicast+0x10/0x10 [ 223.092835][T14038] ? netlink_sendmsg+0x642/0xb30 [ 223.092865][T14038] ? skb_put+0x11b/0x210 [ 223.092885][T14038] netlink_sendmsg+0x805/0xb30 [ 223.092921][T14038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.092954][T14038] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.092974][T14038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.092996][T14038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.093028][T14038] __sock_sendmsg+0x219/0x270 [ 223.093056][T14038] ____sys_sendmsg+0x505/0x830 [ 223.093080][T14038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.093106][T14038] ? import_iovec+0x74/0xa0 [ 223.093131][T14038] ___sys_sendmsg+0x21f/0x2a0 [ 223.093153][T14038] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.093196][T14038] ? __fget_files+0x2a/0x420 [ 223.093226][T14038] ? __fget_files+0x3a0/0x420 [ 223.093264][T14038] __x64_sys_sendmsg+0x19b/0x260 [ 223.093293][T14038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.093319][T14038] ? __pfx_ksys_write+0x10/0x10 [ 223.093345][T14038] ? rcu_is_watching+0x15/0xb0 [ 223.093368][T14038] ? rcu_is_watching+0x15/0xb0 [ 223.093390][T14038] do_syscall_64+0xfa/0x3b0 [ 223.093427][T14038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.093448][T14038] ? clear_bhb_loop+0x60/0xb0 [ 223.093471][T14038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.093492][T14038] RIP: 0033:0x7f5bccf8ebe9 [ 223.093510][T14038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.093530][T14038] RSP: 002b:00007f5bcb1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.093553][T14038] RAX: ffffffffffffffda RBX: 00007f5bcd1b5fa0 RCX: 00007f5bccf8ebe9 [ 223.093569][T14038] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 223.093582][T14038] RBP: 00007f5bcb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.093596][T14038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.093609][T14038] R13: 00007f5bcd1b6038 R14: 00007f5bcd1b5fa0 R15: 00007ffd0e4004f8 [ 223.093635][T14038] [ 223.470850][T14041] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2396'. [ 223.644386][T14059] tipc: Enabling of bearer rejected, already enabled [ 223.712326][T14068] netlink: 'syz.0.2404': attribute type 23 has an invalid length. [ 223.722184][T14069] netlink: 'syz.0.2404': attribute type 23 has an invalid length. [ 223.961226][T14084] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 223.969571][T14084] bridge0: port 3(syz_tun) entered disabled state [ 223.976401][T14084] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.983957][T14084] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.021609][T14084] bridge0: port 3(syz_tun) entered blocking state [ 224.028236][T14084] bridge0: port 3(syz_tun) entered listening state [ 224.035108][T14084] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.042307][T14084] bridge0: port 2(bridge_slave_1) entered listening state [ 224.049716][T14084] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.056872][T14084] bridge0: port 1(bridge_slave_0) entered listening state [ 224.058749][T14093] netlink: 'syz.1.2412': attribute type 1 has an invalid length. [ 224.077472][T14084] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 224.086647][T14087] FAULT_INJECTION: forcing a failure. [ 224.086647][T14087] name failslab, interval 1, probability 0, space 0, times 0 [ 224.107523][T14087] CPU: 1 UID: 0 PID: 14087 Comm: syz.0.2409 Not tainted syzkaller #0 PREEMPT(full) [ 224.107552][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.107566][T14087] Call Trace: [ 224.107573][T14087] [ 224.107582][T14087] dump_stack_lvl+0x189/0x250 [ 224.107613][T14087] ? __pfx____ratelimit+0x10/0x10 [ 224.107642][T14087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.107668][T14087] ? __pfx__printk+0x10/0x10 [ 224.107697][T14087] ? genl_family_rcv_msg_doit+0x267/0x300 [ 224.107725][T14087] ? __pfx___might_resched+0x10/0x10 [ 224.107745][T14087] ? lock_acquire+0x5f/0x360 [ 224.107778][T14087] should_fail_ex+0x414/0x560 [ 224.107809][T14087] should_failslab+0xa8/0x100 [ 224.107841][T14087] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 224.107871][T14087] ? __alloc_skb+0x112/0x2d0 [ 224.107905][T14087] __alloc_skb+0x112/0x2d0 [ 224.107939][T14087] netlink_ack+0x146/0xa50 [ 224.107967][T14087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.107989][T14087] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 224.108011][T14087] ? __pfx_nl80211_post_doit+0x10/0x10 [ 224.108035][T14087] ? __asan_memcpy+0x40/0x70 [ 224.108065][T14087] ? __pfx_ref_tracker_free+0x10/0x10 [ 224.108100][T14087] netlink_rcv_skb+0x28c/0x470 [ 224.108132][T14087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.108156][T14087] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.108201][T14087] ? lock_release+0x4b/0x3e0 [ 224.108234][T14087] ? down_read+0x1ad/0x2e0 [ 224.108255][T14087] genl_rcv+0x28/0x40 [ 224.108275][T14087] netlink_unicast+0x82c/0x9e0 [ 224.108307][T14087] ? __pfx_netlink_unicast+0x10/0x10 [ 224.108337][T14087] ? netlink_sendmsg+0x642/0xb30 [ 224.108366][T14087] ? skb_put+0x11b/0x210 [ 224.108387][T14087] netlink_sendmsg+0x805/0xb30 [ 224.108423][T14087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.108462][T14087] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.108480][T14087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.108503][T14087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.108535][T14087] __sock_sendmsg+0x219/0x270 [ 224.108563][T14087] ____sys_sendmsg+0x505/0x830 [ 224.108587][T14087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.108612][T14087] ? import_iovec+0x74/0xa0 [ 224.108638][T14087] ___sys_sendmsg+0x21f/0x2a0 [ 224.108660][T14087] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.108701][T14087] ? __fget_files+0x2a/0x420 [ 224.108732][T14087] ? __fget_files+0x3a0/0x420 [ 224.108770][T14087] __x64_sys_sendmsg+0x19b/0x260 [ 224.108793][T14087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.108821][T14087] ? __pfx_ksys_write+0x10/0x10 [ 224.108846][T14087] ? rcu_is_watching+0x15/0xb0 [ 224.108870][T14087] ? rcu_is_watching+0x15/0xb0 [ 224.108892][T14087] do_syscall_64+0xfa/0x3b0 [ 224.108925][T14087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.108946][T14087] ? clear_bhb_loop+0x60/0xb0 [ 224.108969][T14087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.108990][T14087] RIP: 0033:0x7f28ab98ebe9 [ 224.109009][T14087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.109029][T14087] RSP: 002b:00007f28ac875038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.109062][T14087] RAX: ffffffffffffffda RBX: 00007f28abbb5fa0 RCX: 00007f28ab98ebe9 [ 224.109078][T14087] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 224.109091][T14087] RBP: 00007f28ac875090 R08: 0000000000000000 R09: 0000000000000000 [ 224.109105][T14087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.109118][T14087] R13: 00007f28abbb6038 R14: 00007f28abbb5fa0 R15: 00007ffdf72acda8 [ 224.109145][T14087] [ 224.595992][T14101] ip6gre0: Master is either lo or non-ether device [ 224.604921][T14102] netlink: 'syz.0.2415': attribute type 3 has an invalid length. [ 225.587936][T14183] FAULT_INJECTION: forcing a failure. [ 225.587936][T14183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.617707][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz.4.2445 Not tainted syzkaller #0 PREEMPT(full) [ 225.617738][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.617752][T14183] Call Trace: [ 225.617760][T14183] [ 225.617769][T14183] dump_stack_lvl+0x189/0x250 [ 225.617801][T14183] ? __pfx____ratelimit+0x10/0x10 [ 225.617831][T14183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.617854][T14183] ? __pfx__printk+0x10/0x10 [ 225.617882][T14183] ? __might_fault+0xb0/0x130 [ 225.617925][T14183] ? rcu_is_watching+0x15/0xb0 [ 225.617949][T14183] should_fail_ex+0x414/0x560 [ 225.617980][T14183] _copy_from_iter+0x1db/0x16f0 [ 225.618004][T14183] ? rcu_is_watching+0x15/0xb0 [ 225.618025][T14183] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 225.618056][T14183] ? __pfx__copy_from_iter+0x10/0x10 [ 225.618077][T14183] ? __build_skb_around+0x257/0x3e0 [ 225.618112][T14183] ? netlink_sendmsg+0x642/0xb30 [ 225.618160][T14183] ? skb_put+0x11b/0x210 [ 225.618180][T14183] netlink_sendmsg+0x6b2/0xb30 [ 225.618218][T14183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.618252][T14183] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.618273][T14183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.618297][T14183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.618329][T14183] __sock_sendmsg+0x219/0x270 [ 225.618357][T14183] ____sys_sendmsg+0x505/0x830 [ 225.618380][T14183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.618406][T14183] ? import_iovec+0x74/0xa0 [ 225.618430][T14183] ___sys_sendmsg+0x21f/0x2a0 [ 225.618452][T14183] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.618496][T14183] ? __fget_files+0x2a/0x420 [ 225.618527][T14183] ? __fget_files+0x3a0/0x420 [ 225.618564][T14183] __x64_sys_sendmsg+0x19b/0x260 [ 225.618587][T14183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.618615][T14183] ? __pfx_ksys_write+0x10/0x10 [ 225.618640][T14183] ? rcu_is_watching+0x15/0xb0 [ 225.618663][T14183] ? rcu_is_watching+0x15/0xb0 [ 225.618685][T14183] do_syscall_64+0xfa/0x3b0 [ 225.618717][T14183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.618738][T14183] ? clear_bhb_loop+0x60/0xb0 [ 225.618761][T14183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.618782][T14183] RIP: 0033:0x7f5dc598ebe9 [ 225.618801][T14183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.618819][T14183] RSP: 002b:00007f5dc684e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.618842][T14183] RAX: ffffffffffffffda RBX: 00007f5dc5bb5fa0 RCX: 00007f5dc598ebe9 [ 225.618859][T14183] RDX: 0000000000040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 225.618873][T14183] RBP: 00007f5dc684e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.618886][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.618906][T14183] R13: 00007f5dc5bb6038 R14: 00007f5dc5bb5fa0 R15: 00007ffe70823718 [ 225.618932][T14183] [ 225.975566][T14194] __nla_validate_parse: 14 callbacks suppressed [ 225.975588][T14194] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2449'. [ 226.175015][T14210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2455'. [ 226.252067][ T5867] block nbd0: Receive control failed (result -32) [ 226.385266][T14225] FAULT_INJECTION: forcing a failure. [ 226.385266][T14225] name failslab, interval 1, probability 0, space 0, times 0 [ 226.419620][T14225] CPU: 0 UID: 0 PID: 14225 Comm: syz.4.2462 Not tainted syzkaller #0 PREEMPT(full) [ 226.419678][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.419692][T14225] Call Trace: [ 226.419700][T14225] [ 226.419709][T14225] dump_stack_lvl+0x189/0x250 [ 226.419739][T14225] ? __pfx____ratelimit+0x10/0x10 [ 226.419769][T14225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.419802][T14225] ? __pfx__printk+0x10/0x10 [ 226.419840][T14225] should_fail_ex+0x414/0x560 [ 226.419871][T14225] should_failslab+0xa8/0x100 [ 226.419904][T14225] kmem_cache_alloc_noprof+0x73/0x3c0 [ 226.419932][T14225] ? skb_clone+0x212/0x3a0 [ 226.419957][T14225] skb_clone+0x212/0x3a0 [ 226.419982][T14225] __netlink_deliver_tap+0x404/0x850 [ 226.420021][T14225] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.420054][T14225] netlink_deliver_tap+0x19c/0x1b0 [ 226.420085][T14225] netlink_unicast+0x7fa/0x9e0 [ 226.420118][T14225] ? __pfx_netlink_unicast+0x10/0x10 [ 226.420146][T14225] ? netlink_sendmsg+0x642/0xb30 [ 226.420177][T14225] ? skb_put+0x11b/0x210 [ 226.420198][T14225] netlink_sendmsg+0x805/0xb30 [ 226.420234][T14225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.420269][T14225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 226.420290][T14225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.420313][T14225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.420346][T14225] __sock_sendmsg+0x219/0x270 [ 226.420374][T14225] ____sys_sendmsg+0x505/0x830 [ 226.420399][T14225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.420426][T14225] ? import_iovec+0x74/0xa0 [ 226.420451][T14225] ___sys_sendmsg+0x21f/0x2a0 [ 226.420474][T14225] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.420516][T14225] ? __fget_files+0x2a/0x420 [ 226.420548][T14225] ? __fget_files+0x3a0/0x420 [ 226.420586][T14225] __x64_sys_sendmsg+0x19b/0x260 [ 226.420609][T14225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.420637][T14225] ? __pfx_ksys_write+0x10/0x10 [ 226.420663][T14225] ? rcu_is_watching+0x15/0xb0 [ 226.420687][T14225] ? rcu_is_watching+0x15/0xb0 [ 226.420709][T14225] do_syscall_64+0xfa/0x3b0 [ 226.420742][T14225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.420762][T14225] ? clear_bhb_loop+0x60/0xb0 [ 226.420793][T14225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.420814][T14225] RIP: 0033:0x7f5dc598ebe9 [ 226.420833][T14225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.420851][T14225] RSP: 002b:00007f5dc684e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.420875][T14225] RAX: ffffffffffffffda RBX: 00007f5dc5bb5fa0 RCX: 00007f5dc598ebe9 [ 226.420891][T14225] RDX: 0000000000040010 RSI: 0000200000000200 RDI: 0000000000000003 [ 226.420905][T14225] RBP: 00007f5dc684e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.420918][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.420931][T14225] R13: 00007f5dc5bb6038 R14: 00007f5dc5bb5fa0 R15: 00007ffe70823718 [ 226.420957][T14225] [ 226.423495][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'. [ 227.134347][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 227.140883][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.148820][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.156676][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.164711][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.172590][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.180586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.188545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.196547][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.204442][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.227869][T14243] validate_nla: 4 callbacks suppressed [ 227.227890][T14243] netlink: 'syz.0.2466': attribute type 2 has an invalid length. [ 227.313278][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 227.363494][T14253] netlink: 'syz.1.2470': attribute type 1 has an invalid length. [ 227.375310][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 227.427889][T14261] openvswitch: netlink: IPv4 tun info is not correct [ 227.474829][T14264] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 227.481923][T14267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.491132][T14264] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 227.850450][T14295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2480'. [ 228.208301][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'. [ 228.335709][T14324] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 228.430861][T14328] netlink: 'syz.0.2491': attribute type 4 has an invalid length. [ 228.503858][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 228.559700][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 228.621235][T14317] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2486'. [ 229.416015][T14388] gtp1: entered promiscuous mode [ 229.422590][T14388] gtp1: entered allmulticast mode [ 229.525980][T14395] team_slave_0: left promiscuous mode [ 229.607102][ T5867] Bluetooth: hci4: link tx timeout [ 229.613411][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.643314][T14404] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 229.945611][T14414] netlink: 'syz.2.2517': attribute type 4 has an invalid length. [ 230.446797][T14461] veth1_macvtap: left promiscuous mode [ 230.504259][T14461] bond0: entered promiscuous mode [ 230.526999][T14461] bond_slave_0: entered promiscuous mode [ 230.535940][T14461] bridge0: entered promiscuous mode [ 230.545286][T14461] batadv0: entered promiscuous mode [ 230.553832][T14461] hsr1: entered allmulticast mode [ 230.559368][T14461] bond0: entered allmulticast mode [ 230.564741][T14461] bond_slave_0: entered allmulticast mode [ 230.570958][T14461] bridge0: entered allmulticast mode [ 230.576497][T14461] batadv0: entered allmulticast mode [ 230.588577][T14461] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 230.600691][T14461] bond0: left promiscuous mode [ 230.605693][T14461] bond_slave_0: left promiscuous mode [ 230.612689][T14461] bridge0: left promiscuous mode [ 230.621441][T14461] batadv0: left promiscuous mode [ 230.883352][T14483] veth0_to_team: entered promiscuous mode [ 230.898014][T14483] veth0_to_team: entered allmulticast mode [ 231.091809][T14503] tipc: Enabling of bearer rejected, already enabled [ 231.476910][T14530] __nla_validate_parse: 9 callbacks suppressed [ 231.476931][T14530] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2541'. [ 231.688672][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 231.707407][T14545] openvswitch: netlink: Missing key (keys=40, expected=80) [ 231.747884][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 231.805065][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 231.856503][T14558] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2548'. [ 231.913528][T14558] 0ªî{X¹¦: entered promiscuous mode [ 231.927446][T14558] 0ªî{X¹¦: left allmulticast mode [ 231.927511][T14563] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2548'. [ 232.005275][T14563] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 232.026018][T14563] 1ªî{X¹¦: left promiscuous mode [ 232.033605][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 232.044366][T14563] 1ªî{X¹¦: entered allmulticast mode [ 232.051869][T14563] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 232.128242][T14573] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 232.334589][T14592] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.398031][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 232.511583][T14607] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 232.686801][T14621] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 232.712934][T14627] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 232.715943][T14621] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 232.731145][T14627] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2566'. [ 232.831956][T14635] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 232.926802][T14643] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 232.947154][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'. [ 233.162500][T14663] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2580'. [ 233.468293][T14689] hsr0 speed is unknown, defaulting to 1000 [ 233.506563][T14689] lo speed is unknown, defaulting to 1000 [ 233.517991][T14699] ip6gre0: Master is either lo or non-ether device [ 233.695970][T14707] openvswitch: netlink: IP tunnel dst address not specified [ 234.004674][T14728] Unsupported Adiantum instantiation: (cbc(blowfish),sm4,nhpoly1305) [ 234.197570][T14749] : entered promiscuous mode [ 234.294152][T14755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.469779][T14768] netlink: 'syz.3.2610': attribute type 13 has an invalid length. [ 234.581805][T14776] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.865270][T14799] openvswitch: netlink: Missing key (keys=40, expected=100) [ 234.898272][T14797] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 234.900312][T14786] syz.1.2616 (14786) used greatest stack depth: 17136 bytes left [ 234.968662][ C0] syz_tun: tun_net_xmit 86 [ 235.533227][T14841] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 235.605348][T14847] netlink: 'syz.3.2639': attribute type 58 has an invalid length. [ 235.985199][T14877] sctp: [Deprecated]: syz.4.2647 (pid 14877) Use of int in max_burst socket option deprecated. [ 235.985199][T14877] Use struct sctp_assoc_value instead [ 236.072872][T14883] netlink: 'syz.1.2650': attribute type 1 has an invalid length. [ 236.099055][T14883] 8021q: adding VLAN 0 to HW filter on device bond9 [ 236.427801][T14916] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.627130][T14911] bridge0: port 3(syz_tun) entered disabled state [ 236.642098][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.649404][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.787752][T14930] __nla_validate_parse: 17 callbacks suppressed [ 236.787773][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 236.954274][T14911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.111056][T14911] sit1: left promiscuous mode [ 237.120843][T14911] ip6erspan0: left promiscuous mode [ 237.132887][T14911] geneve3: left promiscuous mode [ 237.140530][T14911] gtp1: left promiscuous mode [ 237.156672][ T9498] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.186543][ T9498] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.206997][ T9498] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 237.241994][ T9498] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.267556][ T9498] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.310388][ T9498] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 237.356404][ T9498] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.375714][ T9498] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.386499][ T9498] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 237.439671][ T9498] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.497824][ T9498] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.520698][ T9498] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 237.825113][T15003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2682'. [ 237.836951][T15003] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 237.923744][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2681'. [ 237.950742][T15004] netlink: 'syz.3.2681': attribute type 11 has an invalid length. [ 237.959493][T15004] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2681'. [ 238.130643][T15015] smc: net device erspan0 applied user defined pnetid SYZ0 [ 238.142821][ T9507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.153723][ T9507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.412228][T15043] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 238.511878][T15057] sctp: [Deprecated]: syz.4.2694 (pid 15057) Use of int in max_burst socket option. [ 238.511878][T15057] Use struct sctp_assoc_value instead [ 238.590896][T15063] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2701'. [ 238.660670][T15066] syz_tun: tun_net_xmit 42 [ 238.705573][T15069] netlink: 'syz.1.2703': attribute type 1 has an invalid length. [ 238.717777][T15069] netlink: 'syz.1.2703': attribute type 2 has an invalid length. [ 238.990277][T15082] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2706'. [ 239.265834][T15091] netlink: 'syz.2.2710': attribute type 11 has an invalid length. [ 239.301695][T15091] netlink: 'syz.2.2710': attribute type 11 has an invalid length. [ 239.322163][T15091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2710'. [ 239.688614][ C1] syz_tun: tun_net_xmit 42 [ 239.759956][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 239.810628][T15125] team_slave_0: entered allmulticast mode [ 239.835141][T15120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2718'. [ 239.874234][T15125] hsr0 speed is unknown, defaulting to 1000 [ 239.883501][T15125] lo speed is unknown, defaulting to 1000 [ 239.970107][T15133] hsr0 speed is unknown, defaulting to 1000 [ 240.027957][T15136] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2724'. [ 240.082920][T15136] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 240.095837][T15136] 0ªî{X¹¦: entered allmulticast mode [ 240.102429][T15136] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 240.128736][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.145255][T15133] lo speed is unknown, defaulting to 1000 [ 240.308707][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.347334][T15150] bond10: entered promiscuous mode [ 240.353228][T15150] bond10: entered allmulticast mode [ 240.359573][T15150] 8021q: adding VLAN 0 to HW filter on device bond10 [ 240.675819][T15168] netlink: 'syz.1.2732': attribute type 6 has an invalid length. [ 240.713978][T15168] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 240.728760][ C1] syz_tun: tun_net_xmit 42 [ 240.754677][T15175] tipc: Enabling of bearer rejected, already enabled [ 240.771947][T15175] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 240.802291][T15175] tipc: Resetting bearer [ 241.231689][T15194] nbd1: detected capacity change from 0 to 127 [ 241.320785][ T5867] block nbd2: Receive control failed (result -32) [ 241.342968][ T51] block nbd1: Receive control failed (result -104) [ 241.706671][T15223] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 241.871977][T15235] netlink: 'syz.1.2753': attribute type 1 has an invalid length. [ 242.127063][T15267] __nla_validate_parse: 14 callbacks suppressed [ 242.127085][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 242.144565][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2765'. [ 242.171868][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 242.185380][T15270] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2762'. [ 242.409872][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2768'. [ 242.860709][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2776'. [ 242.883388][T15310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2775'. [ 242.912488][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 242.925739][T15310] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 243.049900][T15321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2780'. [ 243.267411][T15336] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2784'. [ 243.834878][T15366] tipc: Resetting bearer [ 243.905974][T15382] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 243.963293][T15387] Bluetooth: MGMT ver 1.23 [ 244.011899][T15390] bond7: left promiscuous mode [ 244.017052][T15390] bridge0: port 3(bond7) entered disabled state [ 244.056107][T15390] bridge_slave_1: left allmulticast mode [ 244.070448][T15390] bridge_slave_1: left promiscuous mode [ 244.093018][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.133819][T15390] : left allmulticast mode [ 244.149511][T15390] : left promiscuous mode [ 244.161123][T15390] bridge0: port 1() entered disabled state [ 244.469248][T15418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.553251][T15429] unsupported nlmsg_type 40 [ 244.602526][T15433] batadv_slave_1: entered promiscuous mode [ 244.642838][T15433] batadv_slave_0: entered promiscuous mode [ 244.691993][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.735977][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.811141][T15441] lo: entered allmulticast mode [ 244.840198][T15440] lo: left allmulticast mode [ 245.217332][T15471] 8021q: adding VLAN 0 to HW filter on device bond10 [ 245.337387][T15491] netlink: 'syz.1.2825': attribute type 2 has an invalid length. [ 245.528648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.630181][T15502] netlink: 'syz.1.2829': attribute type 7 has an invalid length. [ 246.568636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.170214][T15607] sctp: [Deprecated]: syz.1.2854 (pid 15607) Use of int in max_burst socket option. [ 247.170214][T15607] Use struct sctp_assoc_value instead [ 247.220414][T15607] netlink: 'syz.1.2854': attribute type 10 has an invalid length. [ 247.270958][ T9498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.307713][ T9498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.319846][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.327220][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.336331][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.344302][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.352700][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.386857][T15616] __nla_validate_parse: 33 callbacks suppressed [ 247.386879][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 247.480008][ T9498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.537685][ T9498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.640679][T15613] hsr0 speed is unknown, defaulting to 1000 [ 247.647563][T15613] lo speed is unknown, defaulting to 1000 [ 247.687511][ T9498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.718330][ T9498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.880830][ T9498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.913243][ T9498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.491050][T15665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2865'. [ 249.165146][ T9498] team0: Port device geneve0 removed [ 249.443400][ T9498] bond0 (unregistering): Released all slaves [ 249.449754][ T5867] Bluetooth: hci0: command tx timeout [ 249.461665][ T9498] bond1 (unregistering): Released all slaves [ 249.471960][ T9498] bond2 (unregistering): Released all slaves [ 249.631094][ T9498] : left promiscuous mode [ 249.681746][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'. [ 249.724420][T15613] chnl_net:caif_netlink_parms(): no params data found [ 249.725335][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 249.760865][ T9498] tipc: Left network mode [ 250.073880][T15613] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.112412][T15613] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.142333][T15613] bridge_slave_0: entered allmulticast mode [ 250.183179][T15613] bridge_slave_0: entered promiscuous mode [ 250.210288][T15613] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.225456][T15613] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.250498][T15613] bridge_slave_1: entered allmulticast mode [ 250.317518][T15613] bridge_slave_1: entered promiscuous mode [ 250.514761][ T9498] hsr_slave_0: left promiscuous mode [ 250.533424][ T9498] hsr_slave_1: left promiscuous mode [ 250.560028][ T9498] team_slave_1: left allmulticast mode [ 250.571106][ T9498] team_slave_1: left promiscuous mode [ 250.584697][ T9498] veth0_macvtap: left promiscuous mode [ 250.703476][ T9498] pimreg (unregistering): left allmulticast mode [ 250.967518][ T176] smc: removing ib device syz0 [ 250.993460][T15613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.051443][T15613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.066468][T14923] hsr0 speed is unknown, defaulting to 1000 [ 251.075635][T14923] infiniband syz1: ib_query_port failed (-19) [ 251.117491][T15798] ip6gre1: entered allmulticast mode [ 251.253594][T15801] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.325427][T15613] team0: Port device team_slave_0 added [ 251.350351][T15613] team0: Port device team_slave_1 added [ 251.370546][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 251.528610][ T5867] Bluetooth: hci0: command tx timeout [ 251.585255][T15823] tipc: Enabling of bearer rejected, already enabled [ 251.617463][T15828] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2903'. [ 251.650260][T15613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.681055][T15613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.788904][T15613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.855970][T15834] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 251.879594][T15613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.886643][T15613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.945991][T15613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.262037][T15613] hsr_slave_0: entered promiscuous mode [ 252.270933][T15613] hsr_slave_1: entered promiscuous mode [ 252.279039][T15861] lo: entered allmulticast mode [ 252.296071][T15863] lo: left allmulticast mode [ 252.436960][ T9498] IPVS: stop unused estimator thread 0... [ 252.594051][T15880] netlink: 'syz.4.2913': attribute type 1 has an invalid length. [ 252.704559][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 252.751013][T15886] vlan2: entered allmulticast mode [ 252.760015][T15886] veth0_to_bond: entered allmulticast mode [ 252.813592][T15897] netlink: 'syz.2.2916': attribute type 83 has an invalid length. [ 252.984961][T15613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.005837][T15613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.026503][T15613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.046498][T15613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.114766][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'. [ 253.211757][T15613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.268007][T15613] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.303854][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.311078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.341386][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.348593][ T9498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.569643][T15939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2922'. [ 253.609996][ T5867] Bluetooth: hci0: command tx timeout [ 253.752710][T15613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.868045][T15613] veth0_vlan: entered promiscuous mode [ 253.890933][T15613] veth1_vlan: entered promiscuous mode [ 253.911471][T15960] syz.1.2925: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 253.943421][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 253.953432][T15960] CPU: 0 UID: 0 PID: 15960 Comm: syz.1.2925 Not tainted syzkaller #0 PREEMPT(full) [ 253.953462][T15960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.953488][T15960] Call Trace: [ 253.953497][T15960] [ 253.953507][T15960] dump_stack_lvl+0x189/0x250 [ 253.953540][T15960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.953566][T15960] ? __pfx__printk+0x10/0x10 [ 253.953593][T15960] ? lock_release+0x4b/0x3e0 [ 253.953626][T15960] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 253.953653][T15960] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 253.953679][T15960] warn_alloc+0x214/0x310 [ 253.953712][T15960] ? stack_depot_save_flags+0x40/0x860 [ 253.953743][T15960] ? __pfx_warn_alloc+0x10/0x10 [ 253.953777][T15960] ? kasan_save_track+0x4f/0x80 [ 253.953804][T15960] ? xskq_create+0x56/0x170 [ 253.953832][T15960] ? xsk_init_queue+0xb0/0x110 [ 253.953857][T15960] ? xsk_setsockopt+0x4dc/0x8d0 [ 253.953889][T15960] ? do_sock_setsockopt+0x17c/0x1b0 [ 253.953909][T15960] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 253.953929][T15960] ? do_syscall_64+0xfa/0x3b0 [ 253.953960][T15960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.953986][T15960] __vmalloc_node_range_noprof+0x125/0x12f0 [ 253.954034][T15960] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 253.954065][T15960] ? xsk_setsockopt+0x462/0x8d0 [ 253.954092][T15960] ? __kasan_kmalloc+0x93/0xb0 [ 253.954121][T15960] vmalloc_user_noprof+0xad/0xf0 [ 253.954152][T15960] ? xskq_create+0xbf/0x170 [ 253.954181][T15960] xskq_create+0xbf/0x170 [ 253.954209][T15960] xsk_init_queue+0xb0/0x110 [ 253.954238][T15960] xsk_setsockopt+0x4dc/0x8d0 [ 253.954266][T15960] ? __pfx_xsk_setsockopt+0x10/0x10 [ 253.954290][T15960] ? __pfx_aa_sk_perm+0x10/0x10 [ 253.954321][T15960] ? lock_release+0x4b/0x3e0 [ 253.954351][T15960] ? aa_sock_opt_perm+0xff/0x1b0 [ 253.954371][T15960] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 253.954395][T15960] ? __pfx_xsk_setsockopt+0x10/0x10 [ 253.954422][T15960] do_sock_setsockopt+0x17c/0x1b0 [ 253.954446][T15960] __x64_sys_setsockopt+0x13f/0x1b0 [ 253.954467][T15960] do_syscall_64+0xfa/0x3b0 [ 253.954500][T15960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.954521][T15960] ? clear_bhb_loop+0x60/0xb0 [ 253.954546][T15960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.954569][T15960] RIP: 0033:0x7f5bccf8ebe9 [ 253.954588][T15960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.954609][T15960] RSP: 002b:00007f5bcb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 253.954633][T15960] RAX: ffffffffffffffda RBX: 00007f5bcd1b5fa0 RCX: 00007f5bccf8ebe9 [ 253.954648][T15960] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 253.954661][T15960] RBP: 00007f5bcd011e19 R08: 0000000000000004 R09: 0000000000000000 [ 253.954674][T15960] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.954688][T15960] R13: 00007f5bcd1b6038 R14: 00007f5bcd1b5fa0 R15: 00007ffd0e4004f8 [ 253.954711][T15960] [ 253.955277][T15613] veth0_macvtap: entered promiscuous mode [ 254.035373][T15960] Mem-Info: [ 254.101764][T15613] veth1_macvtap: entered promiscuous mode [ 254.150394][T15960] active_anon:5635 inactive_anon:0 isolated_anon:0 [ 254.150394][T15960] active_file:3865 inactive_file:39899 isolated_file:0 [ 254.150394][T15960] unevictable:768 dirty:91 writeback:0 [ 254.150394][T15960] slab_reclaimable:11758 slab_unreclaimable:108036 [ 254.150394][T15960] mapped:29855 shmem:1373 pagetables:1343 [ 254.150394][T15960] sec_pagetables:0 bounce:0 [ 254.150394][T15960] kernel_misc_reclaimable:0 [ 254.150394][T15960] free:1307121 free_pcp:21566 free_cma:0 [ 254.195663][T15613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.204939][T15960] Node 0 active_anon:22540kB inactive_anon:0kB active_file:15460kB inactive_file:159392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119620kB dirty:360kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14348kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.373475][T15960] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 254.418409][T15613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.441691][ T9502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.451844][ T9502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.505913][ T9502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.534656][T15960] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.586219][T15960] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 254.603702][ T9502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.683293][T15960] Node 0 DMA32 free:1324624kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23292kB inactive_anon:0kB active_file:15460kB inactive_file:157824kB unevictable:1536kB writepending:356kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:66452kB local_pcp:41960kB free_cma:0kB [ 254.769407][T15960] lowmem_reserve[]: 0 0 1 1 1 [ 254.774250][T15960] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 254.819665][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.828108][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.868603][T15960] lowmem_reserve[]: 0 0 0 0 0 [ 254.874712][T15960] Node 1 Normal free:3888956kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18212kB local_pcp:10596kB free_cma:0kB [ 254.909559][ T9506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.950236][ T9506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.989944][T15960] lowmem_reserve[]: 0 0 0 0 0 [ 255.015212][T15960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.065297][T15960] Node 0 DMA32: 1366*4kB (UM) 351*8kB (UME) 305*16kB (UME) 332*32kB (UME) 135*64kB (UME) 102*128kB (UM) 90*256kB (UME) 44*512kB (UME) 10*1024kB (UM) 2*2048kB (UE) 299*4096kB (M) = 1330080kB [ 255.091877][T15960] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 255.104755][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 255.134528][T16001] bridge_slave_1: left allmulticast mode [ 255.178631][T16001] bridge_slave_1: left promiscuous mode [ 255.184467][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.196504][T15960] Node 1 Normal: 213*4kB (UE) 59*8kB (UME) 37*16kB (UME) 72*32kB (UME) 29*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888956kB [ 255.295639][T16001] bridge_slave_0: left allmulticast mode [ 255.301173][T15960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.322409][T16001] bridge_slave_0: left promiscuous mode [ 255.351238][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.378660][T15960] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.409512][T15960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.438618][T15960] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.492509][T15960] 47980 total pagecache pages [ 255.497268][T15960] 0 pages in swap cache [ 255.538642][T15960] Free swap = 124996kB [ 255.542982][T15960] Total swap = 124996kB [ 255.547165][T15960] 2097051 pages RAM [ 255.581643][T15960] 0 pages HighMem/MovableOnly [ 255.591753][T15960] 425660 pages reserved [ 255.603266][T15960] 0 pages cma reserved [ 255.691006][ T5867] Bluetooth: hci0: command tx timeout [ 255.762388][ T5868] syz_tun (unregistering): left allmulticast mode [ 255.774070][ T5868] syz_tun (unregistering): left promiscuous mode [ 255.791200][ T5868] bridge0: port 3(syz_tun) entered disabled state [ 255.807945][T16028] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 255.840997][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 255.859294][T16028] netlink: 'syz.1.2938': attribute type 2 has an invalid length. [ 255.877443][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.899034][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.906376][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.915993][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.924635][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.053379][T16040] netlink: 'syz.3.2941': attribute type 1 has an invalid length. [ 256.068603][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2940'. [ 256.077631][T16042] netlink: 'syz.0.2940': attribute type 7 has an invalid length. [ 256.107609][T16042] netlink: 'syz.0.2940': attribute type 8 has an invalid length. [ 256.117226][T16040] netlink: 'syz.3.2941': attribute type 1 has an invalid length. [ 256.144709][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2940'. [ 256.222713][T16042] gretap0: entered promiscuous mode [ 256.246073][T16042] batadv_slave_1: entered promiscuous mode [ 256.279241][T16042] gretap0: left promiscuous mode [ 256.285601][T16042] batadv_slave_1: left promiscuous mode [ 256.300621][T16057] syz_tun: tun_net_xmit 54 [ 256.339915][T14923] syz_tun: tun_net_xmit 122 [ 256.435616][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 256.482219][T16066] batadv_slave_1: entered promiscuous mode [ 256.492685][T16066] batadv_slave_0: entered promiscuous mode [ 256.499985][T16066] debugfs: 'hsr1' already exists in 'hsr' [ 256.505857][T16066] Cannot create hsr debugfs directory [ 256.515297][T16033] chnl_net:caif_netlink_parms(): no params data found [ 256.712246][T16033] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.737104][T16033] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.773891][T16033] bridge_slave_0: entered allmulticast mode [ 256.804759][T16033] bridge_slave_0: entered promiscuous mode [ 256.839939][T16033] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.859304][T16033] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.891564][T16099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2952'. [ 256.900112][T16033] bridge_slave_1: entered allmulticast mode [ 256.927056][T16033] bridge_slave_1: entered promiscuous mode [ 256.927947][T16102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.973501][T16107] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.057142][T16033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.093858][T16033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.208914][T14923] syz_tun: tun_net_xmit 122 [ 257.315040][T16033] team0: Port device team_slave_0 added [ 257.333013][T16033] team0: Port device team_slave_1 added [ 257.404973][T16033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.418357][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.446147][T16033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.472112][T16033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.485414][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.486504][T16138] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 257.522015][T16033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.667416][T16151] netlink: 'syz.0.2969': attribute type 4 has an invalid length. [ 257.668376][T16033] hsr_slave_0: entered promiscuous mode [ 257.685518][T16033] hsr_slave_1: entered promiscuous mode [ 257.693989][T16033] debugfs: 'hsr0' already exists in 'hsr' [ 257.700646][T16033] Cannot create hsr debugfs directory [ 257.852161][T16157] __nla_validate_parse: 7 callbacks suppressed [ 257.852182][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 258.010809][ T5867] Bluetooth: hci1: command tx timeout [ 258.424682][T16206] netlink: 'syz.4.2989': attribute type 10 has an invalid length. [ 258.460251][T16206] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.477775][T16033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.495973][T16033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.513098][T16033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.532568][T16033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.659136][T16033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.682073][T16033] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.722306][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.729518][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.746249][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.753440][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.122466][T16328] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 259.136145][T16033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.276644][T16033] veth0_vlan: entered promiscuous mode [ 259.300876][T16033] veth1_vlan: entered promiscuous mode [ 259.334879][T16033] veth0_macvtap: entered promiscuous mode [ 259.347847][T16033] veth1_macvtap: entered promiscuous mode [ 259.422044][T16033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.452854][T16033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.497472][ T9502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.519829][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3002'. [ 259.530623][ T9502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.540331][ T9506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.586793][ T9506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.633223][T16354] veth0_to_team: entered promiscuous mode [ 259.657958][T16354] veth0_to_team: entered allmulticast mode [ 259.676695][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 259.807595][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.823929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.853803][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.854569][T16363] syz_tun: tun_net_xmit 62 [ 259.863056][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.942693][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3007'. [ 259.972379][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3008'. [ 259.977469][T16372] bond1: entered promiscuous mode [ 259.987539][T16372] bond1: entered allmulticast mode [ 259.995016][T16372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.022561][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3008'. [ 260.024408][T16380] batadv_slave_1: entered promiscuous mode [ 260.044629][T16380] batadv_slave_0: entered promiscuous mode [ 260.052257][T16380] debugfs: 'hsr1' already exists in 'hsr' [ 260.058255][T16380] Cannot create hsr debugfs directory [ 260.099487][ T5867] Bluetooth: hci1: command tx timeout [ 260.173252][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 260.361938][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 260.407878][T16402] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3013'. [ 260.469084][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 260.497636][T16399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.522855][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.532078][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.546718][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.556644][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.565246][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.573669][T16399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.753996][T16411] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 261.295039][T16407] chnl_net:caif_netlink_parms(): no params data found [ 261.504317][T16433] bridge4: entered promiscuous mode [ 261.513514][T16433] bridge4: entered allmulticast mode [ 261.571968][T16407] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.579355][T16407] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.586819][T16407] bridge_slave_0: entered allmulticast mode [ 261.594443][T16407] bridge_slave_0: entered promiscuous mode [ 261.602948][T16407] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.611701][T16407] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.619599][T16407] bridge_slave_1: entered allmulticast mode [ 261.626670][T16407] bridge_slave_1: entered promiscuous mode [ 261.634057][T16445] tunl0: entered promiscuous mode [ 261.642284][T16445] netlink: 'syz.0.3027': attribute type 3 has an invalid length. [ 261.664671][T16447] openvswitch: netlink: IP tunnel dst address not specified [ 261.692316][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.712600][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 261.801403][T16407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.841487][T16456] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 261.863786][T16407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.975147][T16407] team0: Port device team_slave_0 added [ 261.999709][T16407] team0: Port device team_slave_1 added [ 262.022474][T16472] netlink: 'syz.2.3036': attribute type 10 has an invalid length. [ 262.054906][T16475] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 262.092013][T16407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.109275][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.141524][T16407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.155053][T16472] batadv0: entered promiscuous mode [ 262.169824][ T5867] Bluetooth: hci1: command tx timeout [ 262.178060][T16472] batadv0: entered allmulticast mode [ 262.186324][T16472] bridge0: port 3(batadv0) entered blocking state [ 262.196959][T16472] bridge0: port 3(batadv0) entered disabled state [ 262.207078][T16472] bridge0: port 3(batadv0) entered blocking state [ 262.213692][T16472] bridge0: port 3(batadv0) entered forwarding state [ 262.245292][T16407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.267529][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.295409][ T1217] syz_tun: tun_net_xmit 106 [ 262.307881][T16407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.349209][T14944] syz_tun: tun_net_xmit 106 [ 262.407739][T16407] hsr_slave_0: entered promiscuous mode [ 262.442463][T16407] hsr_slave_1: entered promiscuous mode [ 262.449399][T16407] debugfs: 'hsr0' already exists in 'hsr' [ 262.455190][T16407] Cannot create hsr debugfs directory [ 262.508685][T14944] syz_tun: tun_net_xmit 106 [ 262.648806][ T5867] Bluetooth: hci5: command tx timeout [ 262.664684][T16516] bond0: entered promiscuous mode [ 262.679372][ T71] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 262.689083][ T71] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 262.695881][T16516] bond_slave_0: entered promiscuous mode [ 262.704745][T16516] bond_slave_1: entered promiscuous mode [ 262.717589][T16516] bond0: left promiscuous mode [ 262.722946][T16516] bond_slave_0: left promiscuous mode [ 262.731269][T16516] bond_slave_1: left promiscuous mode [ 262.900785][T16536] __nla_validate_parse: 7 callbacks suppressed [ 262.900807][T16536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3057'. [ 262.923637][T16407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.945995][T16407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.984927][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3059'. [ 262.986711][T16540] tipc: Started in network mode [ 263.000084][T16540] tipc: Node identity 22ff79604793, cluster identity 4711 [ 263.007365][T16540] tipc: Enabled bearer , priority 0 [ 263.021081][T16407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.036350][T16407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.056360][T16540] batadv_slave_0: entered promiscuous mode [ 263.064239][ T30] audit: type=1800 audit(1755869879.166:3): pid=16540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3058" name="memory.events" dev="tmpfs" ino=65 res=0 errno=0 [ 263.076675][T16539] batadv_slave_0: left promiscuous mode [ 263.096007][ T30] audit: type=1804 audit(1755869879.166:4): pid=16540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3058" name="/newroot/9/memory.events" dev="tmpfs" ino=65 res=1 errno=0 [ 263.099507][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3059'. [ 263.146817][T16544] bond11 (unregistering): Released all slaves [ 263.204176][T16407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.228370][T16407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.243912][T16552] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 263.256947][T16539] tipc: Disabling bearer [ 263.266092][T16550] lo: entered promiscuous mode [ 263.272613][T16550] netlink: 'syz.3.3060': attribute type 2 has an invalid length. [ 263.289296][T16550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.384209][T16407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.411793][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3065'. [ 263.420315][T16407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.481244][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 263.511987][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 263.569163][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 263.575221][T16570] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3067'. [ 263.595162][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 263.635787][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 263.686410][T16407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.741042][T16407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.759699][T16407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.810801][T16407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.191475][T16407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.234832][T16407] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.249021][ T5867] Bluetooth: hci1: command tx timeout [ 264.293394][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.300600][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.359568][T16620] netlink: 'syz.0.3080': attribute type 7 has an invalid length. [ 264.367847][T16620] netlink: 'syz.0.3080': attribute type 8 has an invalid length. [ 264.384731][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.392049][ T9498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.407114][T16624] syz_tun: tun_net_xmit 78 [ 264.422162][T16624] syz_tun: tun_net_xmit 78 [ 264.432762][T16624] syz_tun: tun_net_xmit 78 [ 264.452649][T16620] gretap0: entered promiscuous mode [ 264.458982][T16624] syz_tun: tun_net_xmit 78 [ 264.465853][T16620] batadv_slave_1: entered promiscuous mode [ 264.472749][T16624] syz_tun: tun_net_xmit 78 [ 264.477398][T16624] syz_tun: tun_net_xmit 78 [ 264.498955][T16624] syz_tun: tun_net_xmit 78 [ 264.503768][T16624] syz_tun: tun_net_xmit 78 [ 264.504542][T16628] netlink: 'syz.4.3082': attribute type 28 has an invalid length. [ 264.509029][T16624] syz_tun: tun_net_xmit 78 [ 264.516245][T16628] netlink: 'syz.4.3082': attribute type 3 has an invalid length. [ 264.521648][T16624] syz_tun: tun_net_xmit 78 [ 264.533388][T16620] gretap0: left promiscuous mode [ 264.548248][T16620] batadv_slave_1: left promiscuous mode [ 264.556292][T16624] syz_tun: tun_net_xmit 78 [ 264.562351][T16624] syz_tun: tun_net_xmit 78 [ 264.571422][T16624] syz_tun: tun_net_xmit 78 [ 264.576377][T16624] syz_tun: tun_net_xmit 78 [ 264.584756][T16624] syz_tun: tun_net_xmit 78 [ 264.589680][T16624] syz_tun: tun_net_xmit 78 [ 264.594512][T16624] syz_tun: tun_net_xmit 78 [ 264.600074][T16624] syz_tun: tun_net_xmit 78 [ 264.604783][T16624] syz_tun: tun_net_xmit 78 [ 264.611664][T16624] syz_tun: tun_net_xmit 78 [ 264.641763][T16624] syz_tun: tun_net_xmit 78 [ 264.659312][T16624] syz_tun: tun_net_xmit 78 [ 264.672474][T16624] syz_tun: tun_net_xmit 78 [ 264.694816][T16624] syz_tun: tun_net_xmit 78 [ 264.704589][T16624] syz_tun: tun_net_xmit 78 [ 264.729196][ T5867] Bluetooth: hci5: command tx timeout [ 264.734966][T16624] syz_tun: tun_net_xmit 78 [ 264.742030][T16638] syzkaller0: entered promiscuous mode [ 264.748251][T16624] syz_tun: tun_net_xmit 78 [ 264.753302][T16638] syzkaller0: entered allmulticast mode [ 264.772698][T16624] syz_tun: tun_net_xmit 78 [ 264.791423][T16624] syz_tun: tun_net_xmit 78 [ 264.796171][T16624] syz_tun: tun_net_xmit 78 [ 264.801758][T16624] syz_tun: tun_net_xmit 78 [ 264.806508][T16624] syz_tun: tun_net_xmit 78 [ 264.816253][T16624] syz_tun: tun_net_xmit 78 [ 264.821324][T16624] syz_tun: tun_net_xmit 78 [ 264.841583][T16624] syz_tun: tun_net_xmit 78 [ 264.861895][T16624] syz_tun: tun_net_xmit 78 [ 264.873226][T16624] syz_tun: tun_net_xmit 78 [ 264.878258][T16624] syz_tun: tun_net_xmit 78 [ 264.898431][T16624] syz_tun: tun_net_xmit 78 [ 264.903375][T16624] syz_tun: tun_net_xmit 78 [ 264.908289][T16624] syz_tun: tun_net_xmit 78 [ 264.915828][T16624] syz_tun: tun_net_xmit 78 [ 264.921038][T16624] syz_tun: tun_net_xmit 78 [ 264.925645][T16624] syz_tun: tun_net_xmit 78 [ 264.948867][T16624] syz_tun: tun_net_xmit 78 [ 264.953636][T16624] syz_tun: tun_net_xmit 78 [ 264.962939][T16624] syz_tun: tun_net_xmit 78 [ 264.972911][T16624] syz_tun: tun_net_xmit 78 [ 264.977724][T16624] syz_tun: tun_net_xmit 78 [ 264.983371][T16624] syz_tun: tun_net_xmit 78 [ 264.988098][T16624] syz_tun: tun_net_xmit 78 [ 264.994037][T16624] syz_tun: tun_net_xmit 78 [ 264.999641][T16624] syz_tun: tun_net_xmit 78 [ 265.028736][T16624] syz_tun: tun_net_xmit 78 [ 265.041655][T16624] syz_tun: tun_net_xmit 78 [ 265.056522][T16624] syz_tun: tun_net_xmit 78 [ 265.062382][T16624] syz_tun: tun_net_xmit 78 [ 265.074501][T16624] syz_tun: tun_net_xmit 78 [ 265.083087][T16624] syz_tun: tun_net_xmit 78 [ 265.097477][T16624] syz_tun: tun_net_xmit 78 [ 265.125592][T16407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.136338][T16624] syz_tun: tun_net_xmit 78 [ 265.159082][T16624] syz_tun: tun_net_xmit 78 [ 265.175955][T16624] syz_tun: tun_net_xmit 78 [ 265.193156][T16624] syz_tun: tun_net_xmit 78 [ 265.211045][T16624] syz_tun: tun_net_xmit 78 [ 265.219399][T16624] syz_tun: tun_net_xmit 78 [ 265.229182][T16407] veth0_vlan: entered promiscuous mode [ 265.240455][T16624] syz_tun: tun_net_xmit 78 [ 265.245121][T16624] syz_tun: tun_net_xmit 78 [ 265.280801][T16407] veth1_vlan: entered promiscuous mode [ 265.293461][T16624] syz_tun: tun_net_xmit 78 [ 265.303640][T16624] syz_tun: tun_net_xmit 78 [ 265.315131][T16624] syz_tun: tun_net_xmit 78 [ 265.333075][T16676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.345544][T16624] syz_tun: tun_net_xmit 78 [ 265.357447][T16624] syz_tun: tun_net_xmit 78 [ 265.363030][T16676] netlink: 'syz.0.3094': attribute type 21 has an invalid length. [ 265.372056][T16624] syz_tun: tun_net_xmit 78 [ 265.377763][T16407] veth0_macvtap: entered promiscuous mode [ 265.384790][T16624] syz_tun: tun_net_xmit 78 [ 265.401280][T16677] netlink: 'syz.0.3094': attribute type 21 has an invalid length. [ 265.402789][T16407] veth1_macvtap: entered promiscuous mode [ 265.415436][T16624] syz_tun: tun_net_xmit 78 [ 265.420291][T16624] syz_tun: tun_net_xmit 78 [ 265.424942][T16624] syz_tun: tun_net_xmit 78 [ 265.436131][T16624] syz_tun: tun_net_xmit 78 [ 265.448126][T16407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.463102][T16624] syz_tun: tun_net_xmit 78 [ 265.467838][T16624] syz_tun: tun_net_xmit 78 [ 265.495308][T16407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.503409][T16624] syz_tun: tun_net_xmit 78 [ 265.508044][T16624] syz_tun: tun_net_xmit 78 [ 265.519673][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.530411][T16624] syz_tun: tun_net_xmit 78 [ 265.535111][T16624] syz_tun: tun_net_xmit 78 [ 265.543920][T16624] syz_tun: tun_net_xmit 78 [ 265.552234][T16624] syz_tun: tun_net_xmit 78 [ 265.554620][T16684] nbd: nbd2 already in use [ 265.556854][T16624] syz_tun: tun_net_xmit 78 [ 265.557019][T16624] syz_tun: tun_net_xmit 78 [ 265.575947][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.585073][T16624] syz_tun: tun_net_xmit 78 [ 265.585209][T16624] syz_tun: tun_net_xmit 78 [ 265.585347][T16624] syz_tun: tun_net_xmit 78 [ 265.631149][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.643939][T16624] syz_tun: tun_net_xmit 78 [ 265.652453][T16624] syz_tun: tun_net_xmit 78 [ 265.657111][T16624] syz_tun: tun_net_xmit 78 [ 265.660494][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.671215][T16624] syz_tun: tun_net_xmit 78 [ 265.728642][T16624] syz_tun: tun_net_xmit 78 [ 265.735562][T16624] syz_tun: tun_net_xmit 78 [ 265.833073][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.855925][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.886529][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.895865][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.059701][T16720] Unsupported ieee802154 address type: 0 [ 266.157097][T16724] xfrm1: entered promiscuous mode [ 266.165423][T16724] xfrm1: entered allmulticast mode [ 266.192132][T16715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.209812][T16724] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 266.339775][T16737] Bluetooth: MGMT ver 1.23 [ 266.515359][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.536462][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.549961][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.557831][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.591582][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.749743][T16746] chnl_net:caif_netlink_parms(): no params data found [ 266.809357][ T5867] Bluetooth: hci5: command tx timeout [ 266.815545][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.823099][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.830911][T16746] bridge_slave_0: entered allmulticast mode [ 266.837701][T16746] bridge_slave_0: entered promiscuous mode [ 266.845469][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.852854][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.860379][T16746] bridge_slave_1: entered allmulticast mode [ 266.867228][T16746] bridge_slave_1: entered promiscuous mode [ 266.901327][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.923949][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.956042][T16766] netlink: 'syz.4.3121': attribute type 33 has an invalid length. [ 266.983632][T16763] tipc: Enabling of bearer rejected, failed to enable media [ 266.996309][T16746] team0: Port device team_slave_0 added [ 267.019682][T16746] team0: Port device team_slave_1 added [ 267.112166][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.126645][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.154869][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.184522][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.198633][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.235637][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.336905][T16789] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 267.418744][T16746] hsr_slave_0: entered promiscuous mode [ 267.425393][T16746] hsr_slave_1: entered promiscuous mode [ 267.446805][T16746] debugfs: 'hsr0' already exists in 'hsr' [ 267.459945][T16746] Cannot create hsr debugfs directory [ 267.592239][T14944] hid (null): unknown global tag 0xe [ 267.626634][T14944] hid (null): invalid report_size 29289 [ 267.650483][T14944] hid (null): nested delimiters [ 267.714467][T16746] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.736203][T16746] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 267.764733][T16746] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 267.775473][T16746] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 267.839726][T16746] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.898720][T16746] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 267.917029][T16836] __nla_validate_parse: 53 callbacks suppressed [ 267.917049][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 267.933703][T16746] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 267.971413][T16746] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 268.091915][T16746] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.134084][T16746] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 268.161811][T16746] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.192944][T16746] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 268.262632][T16746] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.283166][T16746] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 268.328829][T16746] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.340845][T16746] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 268.354763][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 268.462316][T16746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.477756][T16746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.493056][T16746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.516249][T16746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.651049][ T5867] Bluetooth: hci2: command tx timeout [ 268.679510][T16746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.697073][T16746] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.718673][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.725874][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.884797][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'. [ 268.894656][ T5867] Bluetooth: hci5: command tx timeout [ 268.909097][T16876] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 268.918975][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.926134][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.949252][T16876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.437417][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.512222][T16746] veth0_vlan: entered promiscuous mode [ 269.544526][T16746] veth1_vlan: entered promiscuous mode [ 269.594039][T16746] veth0_macvtap: entered promiscuous mode [ 269.610150][T16746] veth1_macvtap: entered promiscuous mode [ 269.641211][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.667194][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.693857][ T9502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.714010][ T9502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.746934][ T9502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.779495][ T9502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.791859][T14944] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 269.802750][T14944] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 269.811288][T14944] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 269.899467][T16906] netlink: 'syz.0.3159': attribute type 2 has an invalid length. [ 270.123324][ T9507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.142741][ T9507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.192542][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 270.209199][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.217093][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.263497][T16911] veth3: entered allmulticast mode [ 270.379821][T16918] openvswitch: netlink: Missing valid actions attribute. [ 270.397659][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 270.427287][T16918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.471322][T16922] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 270.728754][ T5867] Bluetooth: hci2: command tx timeout [ 270.868831][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'. [ 270.903246][T16942] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 270.931586][T16948] netlink: 'syz.0.3175': attribute type 8 has an invalid length. [ 270.992004][T16953] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3172'. [ 271.077898][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.088269][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.095893][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.105309][T16959] delete_channel: no stack [ 271.105756][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.117866][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.291222][ T55] block nbd1: Possible stuck request ffff88802525e000: control (read@0,1024B). Runtime 30 seconds [ 271.294713][T16956] chnl_net:caif_netlink_parms(): no params data found [ 271.301986][ T55] block nbd1: Possible stuck request ffff88802525e1c0: control (read@1024,1024B). Runtime 30 seconds [ 271.302023][ T55] block nbd1: Possible stuck request ffff88802525e380: control (read@2048,1024B). Runtime 30 seconds [ 271.302059][ T55] block nbd1: Possible stuck request ffff88802525e540: control (read@3072,1024B). Runtime 30 seconds [ 271.394498][T16956] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.401741][T16956] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.409471][T16956] bridge_slave_0: entered allmulticast mode [ 271.416427][T16956] bridge_slave_0: entered promiscuous mode [ 271.425068][T16956] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.432634][T16956] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.440057][T16956] bridge_slave_1: entered allmulticast mode [ 271.447112][T16956] bridge_slave_1: entered promiscuous mode [ 271.475351][T16956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.489812][T16956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.517490][T16956] team0: Port device team_slave_0 added [ 271.525277][T16956] team0: Port device team_slave_1 added [ 271.550541][T16956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.557539][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.584217][T16956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.597463][T16956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.604896][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.631022][T16956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.667281][T16956] hsr_slave_0: entered promiscuous mode [ 271.673668][T16956] hsr_slave_1: entered promiscuous mode [ 271.680046][T16956] debugfs: 'hsr0' already exists in 'hsr' [ 271.685812][T16956] Cannot create hsr debugfs directory [ 271.812268][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3182'. [ 271.932746][T16956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.956955][T16956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.031111][T16956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.045551][T16956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.115166][T16956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.129352][T16956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.202529][T16956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.215650][T16956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.818952][ T51] Bluetooth: hci2: command tx timeout [ 273.128602][ T51] Bluetooth: hci3: command tx timeout [ 274.898637][ T51] Bluetooth: hci2: command tx timeout [ 275.208738][ T51] Bluetooth: hci3: command tx timeout [ 277.289610][ T51] Bluetooth: hci3: command tx timeout [ 279.368794][ T51] Bluetooth: hci3: command tx timeout [ 287.268745][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.276517][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.286684][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.299545][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.307103][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.361594][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.369641][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.376949][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.388884][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.396513][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.425448][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.435741][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.444023][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.452596][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.461651][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.615594][T17005] chnl_net:caif_netlink_parms(): no params data found [ 287.708676][ T5867] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 287.715989][ T5867] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 287.725286][ T5867] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 287.735982][ T5867] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 287.744054][ T5867] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 287.811513][T17005] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.818936][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.826300][T17005] bridge_slave_0: entered allmulticast mode [ 287.833763][T17005] bridge_slave_0: entered promiscuous mode [ 287.852599][T17005] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.862174][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.873562][T17005] bridge_slave_1: entered allmulticast mode [ 287.881254][T17005] bridge_slave_1: entered promiscuous mode [ 287.920575][T17005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.941131][T17007] chnl_net:caif_netlink_parms(): no params data found [ 287.953585][T17005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.005713][T17005] team0: Port device team_slave_0 added [ 288.016251][T17005] team0: Port device team_slave_1 added [ 288.091904][T17005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.100286][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.126875][T17005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.147725][T17005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.154838][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.182523][T17005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.197049][T17010] chnl_net:caif_netlink_parms(): no params data found [ 288.273526][T17005] hsr_slave_0: entered promiscuous mode [ 288.281446][T17005] hsr_slave_1: entered promiscuous mode [ 288.287653][T17005] debugfs: 'hsr0' already exists in 'hsr' [ 288.294222][T17005] Cannot create hsr debugfs directory [ 288.300398][T17007] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.307587][T17007] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.315274][T17007] bridge_slave_0: entered allmulticast mode [ 288.322501][T17007] bridge_slave_0: entered promiscuous mode [ 288.331035][T17007] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.338219][T17007] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.345767][T17007] bridge_slave_1: entered allmulticast mode [ 288.352688][T17007] bridge_slave_1: entered promiscuous mode [ 288.423734][T17007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.436286][T17007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.490516][T17010] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.497759][T17010] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.505314][T17010] bridge_slave_0: entered allmulticast mode [ 288.514320][T17010] bridge_slave_0: entered promiscuous mode [ 288.543788][T17010] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.555180][T17010] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.563017][T17010] bridge_slave_1: entered allmulticast mode [ 288.575890][T17010] bridge_slave_1: entered promiscuous mode [ 288.588852][T17007] team0: Port device team_slave_0 added [ 288.600030][T17007] team0: Port device team_slave_1 added [ 288.618397][T17016] chnl_net:caif_netlink_parms(): no params data found [ 288.672725][T17010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.685034][T17010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.708355][T17007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.715813][T17007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.745673][T17007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.778045][T17007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.788631][T17007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.816425][T17007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.851893][T17010] team0: Port device team_slave_0 added [ 288.876386][T17010] team0: Port device team_slave_1 added [ 288.930817][T17016] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.938117][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.946002][T17016] bridge_slave_0: entered allmulticast mode [ 288.954315][T17016] bridge_slave_0: entered promiscuous mode [ 288.972062][T17007] hsr_slave_0: entered promiscuous mode [ 288.979055][T17007] hsr_slave_1: entered promiscuous mode [ 288.985190][T17007] debugfs: 'hsr0' already exists in 'hsr' [ 288.991747][T17007] Cannot create hsr debugfs directory [ 288.999173][T17010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.006168][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.032648][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.043925][T17016] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.051440][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.058796][T17016] bridge_slave_1: entered allmulticast mode [ 289.065628][T17016] bridge_slave_1: entered promiscuous mode [ 289.093017][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.101717][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.128230][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.164219][T17016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.203664][T17016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.266673][T17016] team0: Port device team_slave_0 added [ 289.276163][T17010] hsr_slave_0: entered promiscuous mode [ 289.284207][T17010] hsr_slave_1: entered promiscuous mode [ 289.291028][T17010] debugfs: 'hsr0' already exists in 'hsr' [ 289.296879][T17010] Cannot create hsr debugfs directory [ 289.309716][T17016] team0: Port device team_slave_1 added [ 289.360735][T17016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.367734][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.395088][ T5867] Bluetooth: hci4: command tx timeout [ 289.397563][T17016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.414651][T17016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.421749][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.449001][T17016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.458812][ T5867] Bluetooth: hci6: command tx timeout [ 289.528902][ T5867] Bluetooth: hci7: command tx timeout [ 289.567140][T17016] hsr_slave_0: entered promiscuous mode [ 289.573705][T17016] hsr_slave_1: entered promiscuous mode [ 289.580788][T17016] debugfs: 'hsr0' already exists in 'hsr' [ 289.586565][T17016] Cannot create hsr debugfs directory [ 289.768942][ T5867] Bluetooth: hci8: command tx timeout [ 291.449108][ T5867] Bluetooth: hci4: command tx timeout [ 291.528882][ T5867] Bluetooth: hci6: command tx timeout [ 291.608878][ T5867] Bluetooth: hci7: command tx timeout [ 291.848689][ T5867] Bluetooth: hci8: command tx timeout [ 293.528991][ T5867] Bluetooth: hci4: command tx timeout [ 293.608674][ T5867] Bluetooth: hci6: command tx timeout [ 293.689542][ T5867] Bluetooth: hci7: command tx timeout [ 293.928666][ T5867] Bluetooth: hci8: command tx timeout [ 295.609692][ T51] Bluetooth: hci4: command tx timeout [ 295.688759][ T51] Bluetooth: hci6: command tx timeout [ 295.778805][ T51] Bluetooth: hci7: command tx timeout [ 296.009007][ T51] Bluetooth: hci8: command tx timeout [ 301.369450][ T55] block nbd1: Possible stuck request ffff88802525e000: control (read@0,1024B). Runtime 60 seconds [ 301.380585][ T55] block nbd1: Possible stuck request ffff88802525e1c0: control (read@1024,1024B). Runtime 60 seconds [ 301.392425][ T55] block nbd1: Possible stuck request ffff88802525e380: control (read@2048,1024B). Runtime 60 seconds [ 301.403614][ T55] block nbd1: Possible stuck request ffff88802525e540: control (read@3072,1024B). Runtime 60 seconds [ 301.752854][ T5234] udevd[5234]: worker [5865] /devices/virtual/block/nbd1 is taking a long time [ 323.133035][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.140577][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 331.173890][ T5867] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 331.181547][ T5867] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 331.190169][ T5867] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 331.198027][ T5867] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 331.206647][ T5867] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 331.322137][T17044] chnl_net:caif_netlink_parms(): no params data found [ 331.380566][T17044] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.387752][T17044] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.396144][T17044] bridge_slave_0: entered allmulticast mode [ 331.403778][T17044] bridge_slave_0: entered promiscuous mode [ 331.412017][T17044] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.420364][T17044] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.427657][T17044] bridge_slave_1: entered allmulticast mode [ 331.434699][T17044] bridge_slave_1: entered promiscuous mode [ 331.457988][ T55] block nbd1: Possible stuck request ffff88802525e000: control (read@0,1024B). Runtime 90 seconds [ 331.469423][ T55] block nbd1: Possible stuck request ffff88802525e1c0: control (read@1024,1024B). Runtime 90 seconds [ 331.478890][T17044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.480470][ T55] block nbd1: Possible stuck request ffff88802525e380: control (read@2048,1024B). Runtime 90 seconds [ 331.501332][ T55] block nbd1: Possible stuck request ffff88802525e540: control (read@3072,1024B). Runtime 90 seconds [ 331.515394][T17044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.542534][T17044] team0: Port device team_slave_0 added [ 331.551792][T17044] team0: Port device team_slave_1 added [ 331.581160][T17044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.588133][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.615082][T17044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.629074][T17044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.636058][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.662078][T17044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.700059][T17044] hsr_slave_0: entered promiscuous mode [ 331.706495][T17044] hsr_slave_1: entered promiscuous mode [ 331.713504][T17044] debugfs: 'hsr0' already exists in 'hsr' [ 331.719399][T17044] Cannot create hsr debugfs directory [ 333.288753][ T51] Bluetooth: hci9: command tx timeout [ 335.368669][ T51] Bluetooth: hci9: command tx timeout [ 337.448881][ T51] Bluetooth: hci9: command tx timeout [ 338.490170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.490504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.529403][ T51] Bluetooth: hci9: command tx timeout [ 347.316440][ T5867] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 347.328272][ T5870] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 347.336159][ T5870] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 347.343410][ T5185] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 347.350926][ T5870] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 347.358379][ T5185] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 347.359652][ T5870] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 347.368746][ T5870] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 347.376573][ T5185] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 347.389880][ T5185] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 347.588761][T17056] chnl_net:caif_netlink_parms(): no params data found [ 347.692648][T17054] chnl_net:caif_netlink_parms(): no params data found [ 347.873492][ T5185] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 347.891976][ T5185] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 347.900836][ T5185] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 347.910217][ T5185] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 347.917813][ T5185] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 347.934453][T17056] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.946740][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.956819][T17056] bridge_slave_0: entered allmulticast mode [ 347.966688][T17056] bridge_slave_0: entered promiscuous mode [ 347.978027][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.994045][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.002984][T17054] bridge_slave_0: entered allmulticast mode [ 348.011318][T17054] bridge_slave_0: entered promiscuous mode [ 348.016303][ T5185] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 348.020065][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.027719][ T5185] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 348.032172][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.039118][ T5185] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 348.053235][T17054] bridge_slave_1: entered allmulticast mode [ 348.054335][ T5185] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 348.067065][ T5185] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 348.069039][T17054] bridge_slave_1: entered promiscuous mode [ 348.086959][T17056] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.094866][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.102831][T17056] bridge_slave_1: entered allmulticast mode [ 348.110024][T17056] bridge_slave_1: entered promiscuous mode [ 348.156789][T17056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.173323][T17056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.186465][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.224587][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.255752][T17056] team0: Port device team_slave_0 added [ 348.267466][T17056] team0: Port device team_slave_1 added [ 348.288379][T17054] team0: Port device team_slave_0 added [ 348.315646][T17054] team0: Port device team_slave_1 added [ 348.347856][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.355543][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.382501][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.394825][T17056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.402642][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.429900][T17056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.444243][T17056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.451333][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.477541][T17056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.497630][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.505847][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.532989][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.632914][T17054] hsr_slave_0: entered promiscuous mode [ 348.639577][T17054] hsr_slave_1: entered promiscuous mode [ 348.646077][T17054] debugfs: 'hsr0' already exists in 'hsr' [ 348.653380][T17054] Cannot create hsr debugfs directory [ 348.664489][T17056] hsr_slave_0: entered promiscuous mode [ 348.671864][T17056] hsr_slave_1: entered promiscuous mode [ 348.678080][T17056] debugfs: 'hsr0' already exists in 'hsr' [ 348.684057][T17056] Cannot create hsr debugfs directory [ 348.944623][T17074] chnl_net:caif_netlink_parms(): no params data found [ 348.978315][T17072] chnl_net:caif_netlink_parms(): no params data found [ 349.067033][T17074] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.076639][T17074] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.084409][T17074] bridge_slave_0: entered allmulticast mode [ 349.092205][T17074] bridge_slave_0: entered promiscuous mode [ 349.101516][T17074] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.109980][T17074] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.117406][T17074] bridge_slave_1: entered allmulticast mode [ 349.124510][T17074] bridge_slave_1: entered promiscuous mode [ 349.161356][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.171421][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.179418][T17072] bridge_slave_0: entered allmulticast mode [ 349.186503][T17072] bridge_slave_0: entered promiscuous mode [ 349.204385][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.212758][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.223443][T17072] bridge_slave_1: entered allmulticast mode [ 349.231708][T17072] bridge_slave_1: entered promiscuous mode [ 349.241252][T17074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.253826][T17074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.296257][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.323133][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.344806][T17074] team0: Port device team_slave_0 added [ 349.366520][T17074] team0: Port device team_slave_1 added [ 349.380068][T17072] team0: Port device team_slave_0 added [ 349.397989][T17072] team0: Port device team_slave_1 added [ 349.427512][T17074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.435150][T17074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.462348][ T51] Bluetooth: hci10: command tx timeout [ 349.467887][ T51] Bluetooth: hci11: command tx timeout [ 349.473652][T17074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.486465][T17074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.493809][T17074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.521866][T17074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.544260][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.551370][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.578207][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.597266][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.604461][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.631622][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.683450][T17074] hsr_slave_0: entered promiscuous mode [ 349.690804][T17074] hsr_slave_1: entered promiscuous mode [ 349.696992][T17074] debugfs: 'hsr0' already exists in 'hsr' [ 349.706393][T17074] Cannot create hsr debugfs directory [ 349.753678][T17072] hsr_slave_0: entered promiscuous mode [ 349.760992][T17072] hsr_slave_1: entered promiscuous mode [ 349.767208][T17072] debugfs: 'hsr0' already exists in 'hsr' [ 349.774513][T17072] Cannot create hsr debugfs directory [ 350.009347][ T51] Bluetooth: hci12: command tx timeout [ 350.088618][ T51] Bluetooth: hci13: command tx timeout [ 351.528705][ T51] Bluetooth: hci11: command tx timeout [ 351.528894][ T5185] Bluetooth: hci10: command tx timeout [ 352.099047][ T5185] Bluetooth: hci12: command tx timeout [ 352.168703][ T5185] Bluetooth: hci13: command tx timeout [ 353.608807][ T5185] Bluetooth: hci11: command tx timeout [ 353.608838][ T51] Bluetooth: hci10: command tx timeout [ 354.168760][ T51] Bluetooth: hci12: command tx timeout [ 354.251688][ T51] Bluetooth: hci13: command tx timeout [ 355.688779][ T51] Bluetooth: hci11: command tx timeout [ 355.688961][ T5185] Bluetooth: hci10: command tx timeout [ 356.248699][ T5185] Bluetooth: hci12: command tx timeout [ 356.328800][ T5185] Bluetooth: hci13: command tx timeout [ 361.531363][ T55] block nbd1: Possible stuck request ffff88802525e000: control (read@0,1024B). Runtime 120 seconds [ 361.543064][ T55] block nbd1: Possible stuck request ffff88802525e1c0: control (read@1024,1024B). Runtime 120 seconds [ 361.554331][ T55] block nbd1: Possible stuck request ffff88802525e380: control (read@2048,1024B). Runtime 120 seconds [ 361.565764][ T55] block nbd1: Possible stuck request ffff88802525e540: control (read@3072,1024B). Runtime 120 seconds [ 371.289283][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 381.528943][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 384.573901][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.582207][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 386.650739][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 391.609905][ T55] block nbd1: Possible stuck request ffff88802525e000: control (read@0,1024B). Runtime 150 seconds [ 391.620865][ T55] block nbd1: Possible stuck request ffff88802525e1c0: control (read@1024,1024B). Runtime 150 seconds [ 391.632267][ T55] block nbd1: Possible stuck request ffff88802525e380: control (read@2048,1024B). Runtime 150 seconds [ 391.643430][ T55] block nbd1: Possible stuck request ffff88802525e540: control (read@3072,1024B). Runtime 150 seconds [ 391.828562][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 391.836026][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 391.844257][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 391.852691][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 391.861108][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 391.979693][T17094] chnl_net:caif_netlink_parms(): no params data found [ 392.035032][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.042387][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.050734][T17094] bridge_slave_0: entered allmulticast mode [ 392.058107][T17094] bridge_slave_0: entered promiscuous mode [ 392.066111][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.073843][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.081788][T17094] bridge_slave_1: entered allmulticast mode [ 392.089074][T17094] bridge_slave_1: entered promiscuous mode [ 392.115009][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.126548][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.154624][T17094] team0: Port device team_slave_0 added [ 392.165192][T17094] team0: Port device team_slave_1 added [ 392.190626][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.197606][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.225294][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.237414][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.244946][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.271725][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.309196][T17094] hsr_slave_0: entered promiscuous mode [ 392.315687][T17094] hsr_slave_1: entered promiscuous mode [ 392.322611][T17094] debugfs: 'hsr0' already exists in 'hsr' [ 392.328366][T17094] Cannot create hsr debugfs directory [ 393.928663][ T51] Bluetooth: hci14: command tx timeout [ 396.008803][ T5185] Bluetooth: hci14: command tx timeout [ 396.891566][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 398.088656][ T51] Bluetooth: hci14: command tx timeout [ 400.178692][ T51] Bluetooth: hci14: command tx timeout [ 402.008728][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 407.435256][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 407.448109][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 407.459664][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 407.468037][ T5867] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 407.475228][ T5870] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 407.475733][ T5870] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 407.492033][ T5867] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 407.502523][ T5867] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 407.513110][ T5867] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 407.522631][ T5867] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 407.715068][T17104] chnl_net:caif_netlink_parms(): no params data found [ 407.767117][T17106] chnl_net:caif_netlink_parms(): no params data found [ 407.812076][T17104] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.819968][T17104] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.827605][T17104] bridge_slave_0: entered allmulticast mode [ 407.835014][T17104] bridge_slave_0: entered promiscuous mode [ 407.853614][T17104] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.861753][T17104] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.869518][T17104] bridge_slave_1: entered allmulticast mode [ 407.876417][T17104] bridge_slave_1: entered promiscuous mode [ 407.914164][T17104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.930490][T17104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.975443][T17106] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.983435][T17106] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.992523][T17106] bridge_slave_0: entered allmulticast mode [ 408.000003][T17106] bridge_slave_0: entered promiscuous mode [ 408.007424][T17106] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.015019][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.022521][T17106] bridge_slave_1: entered allmulticast mode [ 408.030764][T17106] bridge_slave_1: entered promiscuous mode [ 408.039632][T17104] team0: Port device team_slave_0 added [ 408.056154][T17104] team0: Port device team_slave_1 added [ 408.092088][T17104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.099288][T17104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.125714][T17104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.139713][T17106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.149939][T17104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.156993][T17104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.184241][T17104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.203639][T17106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.277413][T17106] team0: Port device team_slave_0 added [ 408.337358][T17104] hsr_slave_0: entered promiscuous mode [ 408.349604][T17104] hsr_slave_1: entered promiscuous mode [ 408.356043][T17104] debugfs: 'hsr0' already exists in 'hsr' [ 408.378703][T17104] Cannot create hsr debugfs directory [ 408.386300][T17106] team0: Port device team_slave_1 added [ 408.486428][T17106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.508525][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.558478][T17106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.613667][T17106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.626139][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.653064][ T5867] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 408.660761][T17106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.671472][ T5867] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 408.684958][ T5867] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 408.696291][ T5185] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 408.696624][ T5870] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 408.713021][ T5870] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 408.720732][ T5185] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 408.729500][ T5185] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 408.747851][ T5870] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 408.756149][ T5870] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 408.814283][T17106] hsr_slave_0: entered promiscuous mode [ 408.821279][T17106] hsr_slave_1: entered promiscuous mode [ 408.827347][T17106] debugfs: 'hsr0' already exists in 'hsr' [ 408.834408][T17106] Cannot create hsr debugfs directory [ 409.145807][T17122] chnl_net:caif_netlink_parms(): no params data found [ 409.197325][T17124] chnl_net:caif_netlink_parms(): no params data found [ 409.254112][T17122] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.261626][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.269529][T17122] bridge_slave_0: entered allmulticast mode [ 409.276710][T17122] bridge_slave_0: entered promiscuous mode [ 409.304043][T17122] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.311926][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.320933][T17122] bridge_slave_1: entered allmulticast mode [ 409.327876][T17122] bridge_slave_1: entered promiscuous mode [ 409.364888][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.372494][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.380469][T17124] bridge_slave_0: entered allmulticast mode [ 409.387477][T17124] bridge_slave_0: entered promiscuous mode [ 409.406810][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.414452][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.423001][T17124] bridge_slave_1: entered allmulticast mode [ 409.431274][T17124] bridge_slave_1: entered promiscuous mode [ 409.441051][T17122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.479288][T17122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.492111][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.505101][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.528897][ T5870] Bluetooth: hci15: command tx timeout [ 409.568040][T17122] team0: Port device team_slave_0 added [ 409.577463][T17122] team0: Port device team_slave_1 added [ 409.584978][T17124] team0: Port device team_slave_0 added [ 409.594072][T17124] team0: Port device team_slave_1 added [ 409.618887][ T5870] Bluetooth: hci16: command tx timeout [ 409.654957][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.662421][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.689681][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.702336][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.709532][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.736683][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.748862][T17122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.755839][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.782361][T17122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.804375][T17122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.811550][T17122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.839321][T17122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.889961][T17122] hsr_slave_0: entered promiscuous mode [ 409.896426][T17122] hsr_slave_1: entered promiscuous mode [ 409.902749][T17122] debugfs: 'hsr0' already exists in 'hsr' [ 409.908886][T17122] Cannot create hsr debugfs directory [ 409.955496][T17124] hsr_slave_0: entered promiscuous mode [ 409.962956][T17124] hsr_slave_1: entered promiscuous mode [ 409.969302][T17124] debugfs: 'hsr0' already exists in 'hsr' [ 409.975065][T17124] Cannot create hsr debugfs directory [ 410.808851][T12859] Bluetooth: hci18: command tx timeout [ 410.808986][T12993] Bluetooth: hci17: command tx timeout [ 411.608903][T12993] Bluetooth: hci15: command tx timeout [ 411.689211][T12993] Bluetooth: hci16: command tx timeout [ 412.249625][T12993] Bluetooth: hci8: command 0x0406 tx timeout [ 412.249695][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 412.255818][T12993] Bluetooth: hci6: command 0x0406 tx timeout [ 412.262516][T12859] Bluetooth: hci7: command 0x0406 tx timeout [ 412.888900][ T5185] Bluetooth: hci18: command tx timeout [ 412.894465][ T5185] Bluetooth: hci17: command tx timeout [ 413.688713][ T5185] Bluetooth: hci15: command tx timeout [ 413.769002][ T5185] Bluetooth: hci16: command tx timeout [ 414.968858][ T5870] Bluetooth: hci18: command tx timeout [ 414.969542][ T5185] Bluetooth: hci17: command tx timeout [ 415.768636][ T5185] Bluetooth: hci15: command tx timeout [ 415.848812][ T5185] Bluetooth: hci16: command tx timeout [ 417.048824][ T5185] Bluetooth: hci17: command tx timeout [ 417.054394][ T5185] Bluetooth: hci18: command tx timeout [ 421.289209][ T5234] udevd[5234]: worker [5865] /devices/virtual/block/nbd1 timeout; kill it [ 421.299862][ T5234] udevd[5234]: seq 21765 '/devices/virtual/block/nbd1' killed [ 421.688997][ T55] block nbd1: Possible stuck request ffff88802525e000: control (read@0,1024B). Runtime 180 seconds [ 421.699994][ T55] block nbd1: Possible stuck request ffff88802525e1c0: control (read@1024,1024B). Runtime 180 seconds [ 421.712060][ T55] block nbd1: Possible stuck request ffff88802525e380: control (read@2048,1024B). Runtime 180 seconds [ 421.723312][ T55] block nbd1: Possible stuck request ffff88802525e540: control (read@3072,1024B). Runtime 180 seconds [ 428.729411][ T31] INFO: task syz-executor:16956 blocked for more than 143 seconds. [ 428.737440][ T31] Not tainted syzkaller #0 [ 428.746457][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.755452][ T31] task:syz-executor state:D stack:22256 pid:16956 tgid:16956 ppid:1 task_flags:0x400140 flags:0x00004004 [ 428.767784][ T31] Call Trace: [ 428.771619][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.775423][ T31] __schedule+0x1798/0x4cc0 [ 428.780241][ T31] ? __pfx___schedule+0x10/0x10 [ 428.785289][ T31] ? schedule+0x91/0x360 [ 428.789684][ T31] ? rcu_is_watching+0x15/0xb0 [ 428.794842][ T31] ? lock_release+0x4b/0x3e0 [ 428.803299][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 428.809835][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 428.828912][ T31] schedule+0x165/0x360 [ 428.833162][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.864328][ T31] __mutex_lock+0x7e6/0x1350 [ 428.872526][ T31] ? __mutex_lock+0x5bb/0x1350 [ 428.878199][ T31] ? genl_rcv_msg+0x10d/0x790 [ 428.883439][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.897187][ T31] ? stack_trace_save+0x9c/0xe0 [ 428.903060][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 428.909263][ T31] ? radix_tree_lookup+0x240/0x290 [ 428.914691][ T31] genl_rcv_msg+0x10d/0x790 [ 428.919643][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.924878][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 428.930144][ T31] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 428.936321][ T31] ? kmalloc_reserve+0xbd/0x290 [ 428.941362][ T31] ? __netlink_lookup+0xbd/0x810 [ 428.946351][ T31] ? rcu_is_watching+0x15/0xb0 [ 428.951476][ T31] netlink_rcv_skb+0x205/0x470 [ 428.956292][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.962220][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.967662][ T31] ? lock_release+0x4b/0x3e0 [ 428.972477][ T31] ? down_read+0x1ad/0x2e0 [ 428.976927][ T31] genl_rcv+0x28/0x40 [ 428.982100][ T31] netlink_unicast+0x82c/0x9e0 [ 428.986967][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 428.992412][ T31] ? netlink_sendmsg+0x642/0xb30 [ 428.997412][ T31] ? skb_put+0x11b/0x210 [ 429.002042][ T31] netlink_sendmsg+0x805/0xb30 [ 429.006847][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.012620][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.017633][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.023050][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.028532][ T31] __sock_sendmsg+0x219/0x270 [ 429.033249][ T31] __sys_sendto+0x3bd/0x520 [ 429.037870][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 429.043415][ T31] ? fd_install+0x97/0x540 [ 429.047889][ T31] ? fd_install+0x30d/0x540 [ 429.052878][ T31] __x64_sys_sendto+0xde/0x100 [ 429.057692][ T31] do_syscall_64+0xfa/0x3b0 [ 429.062449][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.067252][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.073775][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.078716][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.085244][ T31] RIP: 0033:0x7fa701590a7c [ 429.089826][ T31] RSP: 002b:00007ffd52f63d60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.098272][ T31] RAX: ffffffffffffffda RBX: 00007fa7022e4620 RCX: 00007fa701590a7c [ 429.106750][ T31] RDX: 0000000000000020 RSI: 00007fa7022e4670 RDI: 0000000000000005 [ 429.114993][ T31] RBP: 0000000000000000 R08: 00007ffd52f63db4 R09: 000000000000000c [ 429.123120][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 429.132013][ T31] R13: 00007ffd52f63e08 R14: 00007fa7022e4670 R15: 0000000000000000 [ 429.140233][ T31] [ 429.143345][ T31] INFO: task syz.1.3180:16973 blocked for more than 143 seconds. [ 429.151145][ T31] Not tainted syzkaller #0 [ 429.156096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.166668][ T31] task:syz.1.3180 state:D stack:25512 pid:16973 tgid:16972 ppid:16407 task_flags:0x480140 flags:0x00004004 [ 429.178943][ T31] Call Trace: [ 429.182784][ T31] [ 429.185763][ T31] __schedule+0x1798/0x4cc0 [ 429.190796][ T31] ? do_raw_spin_lock+0x121/0x290 [ 429.195869][ T31] ? __pfx___schedule+0x10/0x10 [ 429.200833][ T31] ? schedule+0x91/0x360 [ 429.205087][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.210039][ T31] ? lock_release+0x4b/0x3e0 [ 429.214703][ T31] schedule+0x165/0x360 [ 429.219477][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 429.224984][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 429.231175][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.237282][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 429.243391][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 429.250130][ T31] nbd_set_size+0x47e/0x6a0 [ 429.254688][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 429.259966][ T31] ? nla_memcpy+0x5b/0xc0 [ 429.264341][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 429.269392][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 429.274895][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 429.281385][ T31] ? bpf_lsm_capable+0x9/0x20 [ 429.286777][ T31] ? security_capable+0x7e/0x2e0 [ 429.292163][ T31] ? radix_tree_lookup+0x240/0x290 [ 429.297331][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 429.302752][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 429.308925][ T31] ? __nla_parse+0x40/0x60 [ 429.313529][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 429.320394][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 429.325998][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.332328][ T31] ? stack_trace_save+0x9c/0xe0 [ 429.337313][ T31] genl_rcv_msg+0x60e/0x790 [ 429.342282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.347344][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 429.352567][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 429.358341][ T31] ? __netlink_lookup+0xbd/0x810 [ 429.363607][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.369256][ T31] netlink_rcv_skb+0x205/0x470 [ 429.374240][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.379707][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.385038][ T31] ? lock_release+0x4b/0x3e0 [ 429.390285][ T31] ? down_read+0x1ad/0x2e0 [ 429.394774][ T31] genl_rcv+0x28/0x40 [ 429.399134][ T31] netlink_unicast+0x82c/0x9e0 [ 429.403920][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.409328][ T31] ? netlink_sendmsg+0x642/0xb30 [ 429.414308][ T31] ? skb_put+0x11b/0x210 [ 429.418652][ T31] netlink_sendmsg+0x805/0xb30 [ 429.423462][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.429141][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.434105][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.439620][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.444939][ T31] __sock_sendmsg+0x219/0x270 [ 429.449775][ T31] ____sys_sendmsg+0x505/0x830 [ 429.454575][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.460294][ T31] ? import_iovec+0x74/0xa0 [ 429.464834][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 429.469633][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.474856][ T31] ? futex_wake+0x4b2/0x560 [ 429.479499][ T31] ? __fget_files+0x2a/0x420 [ 429.484141][ T31] ? __fget_files+0x3a0/0x420 [ 429.489813][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 429.494809][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.500411][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.505214][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.510062][ T31] do_syscall_64+0xfa/0x3b0 [ 429.514714][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.521204][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.525917][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.532055][ T31] RIP: 0033:0x7fe40a78ebe9 [ 429.536509][ T31] RSP: 002b:00007fe4089ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.545042][ T31] RAX: ffffffffffffffda RBX: 00007fe40a9b5fa0 RCX: 00007fe40a78ebe9 [ 429.553436][ T31] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 429.561944][ T31] RBP: 00007fe40a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 429.570057][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.578052][ T31] R13: 00007fe40a9b6038 R14: 00007fe40a9b5fa0 R15: 00007ffefcb7fff8 [ 429.586463][ T31] [ 429.589610][ T31] INFO: task syz.2.3183:16989 blocked for more than 144 seconds. [ 429.597899][ T31] Not tainted syzkaller #0 [ 429.602959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.612200][ T31] task:syz.2.3183 state:D stack:26024 pid:16989 tgid:16988 ppid:16033 task_flags:0x400140 flags:0x00004004 [ 429.624282][ T31] Call Trace: [ 429.627591][ T31] [ 429.630607][ T31] __schedule+0x1798/0x4cc0 [ 429.635253][ T31] ? __pfx___schedule+0x10/0x10 [ 429.641068][ T31] ? schedule+0x91/0x360 [ 429.645372][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.650786][ T31] ? lock_release+0x4b/0x3e0 [ 429.655432][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.661532][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.667907][ T31] schedule+0x165/0x360 [ 429.672270][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.677867][ T31] __mutex_lock+0x7e6/0x1350 [ 429.682543][ T31] ? __mutex_lock+0x5bb/0x1350 [ 429.687342][ T31] ? genl_rcv_msg+0x10d/0x790 [ 429.692346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.698308][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 429.704250][ T31] ? radix_tree_lookup+0x240/0x290 [ 429.709745][ T31] genl_rcv_msg+0x10d/0x790 [ 429.714539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.719720][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 429.724795][ T31] ? __asan_memcpy+0x40/0x70 [ 429.729968][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.735473][ T31] netlink_rcv_skb+0x205/0x470 [ 429.740380][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.745549][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.751111][ T31] ? lock_release+0x4b/0x3e0 [ 429.755774][ T31] ? down_read+0x1ad/0x2e0 [ 429.761429][ T31] genl_rcv+0x28/0x40 [ 429.765456][ T31] netlink_unicast+0x82c/0x9e0 [ 429.771408][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.776764][ T31] ? netlink_sendmsg+0x642/0xb30 [ 429.782110][ T31] ? skb_put+0x11b/0x210 [ 429.786381][ T31] netlink_sendmsg+0x805/0xb30 [ 429.791658][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.797836][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.802877][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.808190][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.813643][ T31] __sock_sendmsg+0x219/0x270 [ 429.818356][ T31] __sys_sendto+0x3bd/0x520 [ 429.822937][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 429.828092][ T31] ? count_memcg_event_mm+0x21/0x260 [ 429.833679][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 429.839084][ T31] __x64_sys_sendto+0xde/0x100 [ 429.843886][ T31] do_syscall_64+0xfa/0x3b0 [ 429.848705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.854811][ T31] ? clear_bhb_loop+0x60/0xb0 [ 429.859789][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.865811][ T31] RIP: 0033:0x7fd61f790a7c [ 429.871243][ T31] RSP: 002b:00007fd6205cdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.879903][ T31] RAX: ffffffffffffffda RBX: 00007fd6205cdfc0 RCX: 00007fd61f790a7c [ 429.887962][ T31] RDX: 0000000000000020 RSI: 00007fd6205ce010 RDI: 0000000000000007 [ 429.896113][ T31] RBP: 0000000000000000 R08: 00007fd6205cdf14 R09: 000000000000000c [ 429.905356][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 429.913771][ T31] R13: 00007fd6205cdf68 R14: 00007fd6205ce010 R15: 0000000000000000 [ 429.921862][ T31] [ 429.924920][ T31] INFO: task syz.0.3185:16995 blocked for more than 144 seconds. [ 429.933091][ T31] Not tainted syzkaller #0 [ 429.938096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.946830][ T31] task:syz.0.3185 state:D stack:27144 pid:16995 tgid:16994 ppid:15613 task_flags:0x400140 flags:0x00004004 [ 429.959039][ T31] Call Trace: [ 429.962353][ T31] [ 429.965358][ T31] __schedule+0x1798/0x4cc0 [ 429.969959][ T31] ? __pfx___schedule+0x10/0x10 [ 429.974934][ T31] ? schedule+0x91/0x360 [ 429.979337][ T31] ? rcu_is_watching+0x15/0xb0 [ 429.984255][ T31] ? lock_release+0x4b/0x3e0 [ 429.989208][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.995160][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.002678][ T31] schedule+0x165/0x360 [ 430.006903][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.013853][ T31] __mutex_lock+0x7e6/0x1350 [ 430.018608][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.023427][ T31] ? genl_rcv_msg+0x10d/0x790 [ 430.028143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.033369][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 430.038681][ T31] ? radix_tree_lookup+0x240/0x290 [ 430.043830][ T31] genl_rcv_msg+0x10d/0x790 [ 430.048525][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.053610][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 430.058807][ T31] ? __asan_memcpy+0x40/0x70 [ 430.063522][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.069263][ T31] netlink_rcv_skb+0x205/0x470 [ 430.074166][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.079420][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.084782][ T31] ? lock_release+0x4b/0x3e0 [ 430.089708][ T31] ? down_read+0x1ad/0x2e0 [ 430.094242][ T31] genl_rcv+0x28/0x40 [ 430.098271][ T31] netlink_unicast+0x82c/0x9e0 [ 430.103421][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 430.109754][ T31] ? netlink_sendmsg+0x642/0xb30 [ 430.114754][ T31] ? skb_put+0x11b/0x210 [ 430.119159][ T31] netlink_sendmsg+0x805/0xb30 [ 430.124064][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.129456][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 430.134431][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.139886][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.145218][ T31] __sock_sendmsg+0x219/0x270 [ 430.150076][ T31] __sys_sendto+0x3bd/0x520 [ 430.154660][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 430.159897][ T31] ? count_memcg_event_mm+0x21/0x260 [ 430.165257][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 430.171022][ T31] __x64_sys_sendto+0xde/0x100 [ 430.175842][ T31] do_syscall_64+0xfa/0x3b0 [ 430.181286][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.187406][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.192274][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.198299][ T31] RIP: 0033:0x7f5bdc390a7c [ 430.202980][ T31] RSP: 002b:00007f5bdd205ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 430.212683][ T31] RAX: ffffffffffffffda RBX: 00007f5bdd205fc0 RCX: 00007f5bdc390a7c [ 430.220791][ T31] RDX: 0000000000000020 RSI: 00007f5bdd206010 RDI: 0000000000000005 [ 430.228903][ T31] RBP: 0000000000000000 R08: 00007f5bdd205f14 R09: 000000000000000c [ 430.236917][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 430.245889][ T31] R13: 00007f5bdd205f68 R14: 00007f5bdd206010 R15: 0000000000000000 [ 430.254150][ T31] [ 430.257254][ T31] INFO: task syz.3.3187:17000 blocked for more than 144 seconds. [ 430.265688][ T31] Not tainted syzkaller #0 [ 430.271035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.280002][ T31] task:syz.3.3187 state:D stack:28488 pid:17000 tgid:16999 ppid:16746 task_flags:0x400040 flags:0x00004004 [ 430.292092][ T31] Call Trace: [ 430.295395][ T31] [ 430.298351][ T31] __schedule+0x1798/0x4cc0 [ 430.304000][ T31] ? __pfx___schedule+0x10/0x10 [ 430.309880][ T31] ? schedule+0x91/0x360 [ 430.314191][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.320360][ T31] ? lock_release+0x4b/0x3e0 [ 430.325048][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 430.331381][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.337816][ T31] schedule+0x165/0x360 [ 430.342208][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.347925][ T31] __mutex_lock+0x7e6/0x1350 [ 430.352735][ T31] ? __mutex_lock+0x5bb/0x1350 [ 430.357553][ T31] ? genl_rcv_msg+0x10d/0x790 [ 430.362540][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.367790][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 430.373096][ T31] ? radix_tree_lookup+0x240/0x290 [ 430.378244][ T31] genl_rcv_msg+0x10d/0x790 [ 430.383593][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.388884][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 430.393977][ T31] ? __asan_memcpy+0x40/0x70 [ 430.398672][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 430.404096][ T31] netlink_rcv_skb+0x205/0x470 [ 430.409127][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.415261][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.420866][ T31] ? lock_release+0x4b/0x3e0 [ 430.425510][ T31] ? down_read+0x1ad/0x2e0 [ 430.430213][ T31] genl_rcv+0x28/0x40 [ 430.434412][ T31] netlink_unicast+0x82c/0x9e0 [ 430.439310][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 430.444649][ T31] ? netlink_sendmsg+0x642/0xb30 [ 430.449689][ T31] ? skb_put+0x11b/0x210 [ 430.453984][ T31] netlink_sendmsg+0x805/0xb30 [ 430.458961][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.464291][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 430.469364][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.474676][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.480096][ T31] __sock_sendmsg+0x219/0x270 [ 430.484821][ T31] __sys_sendto+0x3bd/0x520 [ 430.489740][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 430.494906][ T31] ? count_memcg_event_mm+0x21/0x260 [ 430.500342][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 430.505771][ T31] __x64_sys_sendto+0xde/0x100 [ 430.510745][ T31] do_syscall_64+0xfa/0x3b0 [ 430.516059][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.522324][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.527359][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.533393][ T31] RIP: 0033:0x7fc62a790a7c [ 430.540587][ T31] RSP: 002b:00007fc62b603ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 430.549194][ T31] RAX: ffffffffffffffda RBX: 00007fc62b603fc0 RCX: 00007fc62a790a7c [ 430.557219][ T31] RDX: 0000000000000020 RSI: 00007fc62b604010 RDI: 0000000000000005 [ 430.565438][ T31] RBP: 0000000000000000 R08: 00007fc62b603f14 R09: 000000000000000c [ 430.573708][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 430.581828][ T31] R13: 00007fc62b603f68 R14: 00007fc62b604010 R15: 0000000000000000 [ 430.589883][ T31] [ 430.592990][ T31] INFO: lockdep is turned off. [ 430.597769][ T31] NMI backtrace for cpu 1 [ 430.597787][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 430.597804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.597814][ T31] Call Trace: [ 430.597821][ T31] [ 430.597827][ T31] dump_stack_lvl+0x189/0x250 [ 430.597850][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.597869][ T31] ? __pfx__printk+0x10/0x10 [ 430.597895][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 430.597914][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.597932][ T31] ? __pfx__printk+0x10/0x10 [ 430.597954][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.597978][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.597997][ T31] watchdog+0xf93/0xfe0 [ 430.598020][ T31] ? watchdog+0x1de/0xfe0 [ 430.598042][ T31] kthread+0x70e/0x8a0 [ 430.598062][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.598082][ T31] ? __pfx_kthread+0x10/0x10 [ 430.598100][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.598119][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.598139][ T31] ? __pfx_kthread+0x10/0x10 [ 430.598177][ T31] ret_from_fork+0x3f9/0x770 [ 430.598194][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.598211][ T31] ? __switch_to_asm+0x39/0x70 [ 430.598229][ T31] ? __switch_to_asm+0x33/0x70 [ 430.598248][ T31] ? __pfx_kthread+0x10/0x10 [ 430.598266][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.598292][ T31] [ 430.598298][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.747458][ C0] NMI backtrace for cpu 0 [ 430.747478][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 430.747498][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.747510][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 430.747541][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 430.747568][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 430.747586][ C0] RAX: a460d8760d6b1500 RBX: ffffffff819683b8 RCX: a460d8760d6b1500 [ 430.747600][ C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 430.747613][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 430.747627][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38430 [ 430.747640][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 430.747652][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 430.747667][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.747678][ C0] CR2: 0000556a38c08660 CR3: 000000000df36000 CR4: 00000000003526f0 [ 430.747694][ C0] Call Trace: [ 430.747702][ C0] [ 430.747708][ C0] default_idle+0x13/0x20 [ 430.747725][ C0] default_idle_call+0x74/0xb0 [ 430.747742][ C0] do_idle+0x1e8/0x510 [ 430.747762][ C0] ? __pfx_do_idle+0x10/0x10 [ 430.747786][ C0] cpu_startup_entry+0x44/0x60 [ 430.747803][ C0] rest_init+0x2de/0x300 [ 430.747821][ C0] start_kernel+0x3a9/0x410 [ 430.747844][ C0] x86_64_start_reservations+0x24/0x30 [ 430.747870][ C0] x86_64_start_kernel+0x143/0x1c0 [ 430.747894][ C0] common_startup_64+0x13e/0x147 [ 430.747927][ C0] [ 430.748550][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.748570][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 430.748599][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.748615][ T31] Call Trace: [ 430.748625][ T31] [ 430.748636][ T31] dump_stack_lvl+0x99/0x250 [ 430.748669][ T31] ? __asan_memcpy+0x40/0x70 [ 430.748699][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.748728][ T31] ? __pfx__printk+0x10/0x10 [ 430.748771][ T31] vpanic+0x281/0x750 [ 430.748800][ T31] ? __pfx_vpanic+0x10/0x10 [ 430.748828][ T31] ? preempt_schedule+0xae/0xc0 [ 430.748863][ T31] ? preempt_schedule_common+0x83/0xd0 [ 430.748900][ T31] panic+0xb9/0xc0 [ 430.748927][ T31] ? __pfx_panic+0x10/0x10 [ 430.748955][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 430.748997][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 430.749029][ T31] watchdog+0xfd2/0xfe0 [ 430.749066][ T31] ? watchdog+0x1de/0xfe0 [ 430.749101][ T31] kthread+0x70e/0x8a0 [ 430.749134][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.749167][ T31] ? __pfx_kthread+0x10/0x10 [ 430.749198][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.749228][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.749261][ T31] ? __pfx_kthread+0x10/0x10 [ 430.749291][ T31] ret_from_fork+0x3f9/0x770 [ 430.749326][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.749355][ T31] ? __switch_to_asm+0x39/0x70 [ 430.749385][ T31] ? __switch_to_asm+0x33/0x70 [ 430.749416][ T31] ? __pfx_kthread+0x10/0x10 [ 430.749448][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.749489][ T31] [ 431.082897][ T31] Kernel Offset: disabled [ 431.087228][ T31] Rebooting in 86400 seconds..