last executing test programs: 26.691932963s ago: executing program 0 (id=2975): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) close(r1) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x2}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1fd, 0x6}}]}]}]}, 0x48}}, 0x0) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="3114726850e2524dc5f550feab88f98bc80b8bd366cb57c92796573073137faf12fb7e69f4a15c3cf7f861f52414e00030ab3fe6e3ae437efce9e7135985a97665b6c10003d85288720f5d96bfaacdc307f7aca74ecc7a2a9c6a040803f07379261fda80de263be5a7f54fdbd4d65b32d7b83e4539de924d1d11996bb8c4613db51d936749abcadd310897845339e8ae3c6a26ed644602176f68cb1213be0d049e9b24bc96d86ffe37c3d48a1c88bf5e0af8c4affbc1edf25dd0c9bcd6e0f1047a90d32178b65244cf46db32fc54c9444e50d9d6b30cfe8e413243edf23bb138aa", 0xe1}, {&(0x7f00000005c0)="0369f90c949841a6219823cb41889dc8d1e918a7e6976dc43d88dd936f9dae21e8be5973d2fb7456ec53702ce1152459703fb116f4b0b7a78f137d386d98efdc58a24cd944698c5755e97693c3603ae221a4ec22615ec32dc1cc10f68c8a1d19707559666b32c587eaef7af4eca7dd45ddac86ed3a30adae07783d838a214d339ad183c5a11ba68525f7147bc476b5774b98ee517855c4529d6fc65dc4b1527563182153ffa19547b116f484f4c26dce4f8ae6f0bcdde9ebe80b04dfd71cfb003d00d1a2606df5719c3a19cc01f0984ff40ac8e1b6187d348b0f2ff4ca29a1ee0e2698278ef441088d6f35895240924ad60b90", 0xf3}, {&(0x7f0000000480)="6ac8a737aac48da4fdcd61fc46655d6da4d6c7f6f19d431a72696eb54646f02682a55248d887ed39c9d889b4791e7188336fc27b86de3b6ef47782499ef4cb32c4b0dad069c17b1b1dcc6724fbf07d66645cc0edffb50215da", 0x59}, {&(0x7f0000000500)="e06901f41a8959324c77f2844f84826162df4ef519ed91e6e84a03dd1f6496e37dedc08503a0a8d3a0869da60c75270fc1f9558b12fffbcd6e8d8135aa47bf62dd0f9808e7fd4f4c8d6cab378934275d946dbb6cf7208e9567", 0x59}], 0x4}, 0x4048081) 26.483903068s ago: executing program 0 (id=2977): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 26.253624957s ago: executing program 0 (id=2982): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd6c8165c400101100fc010000000000000000000000000001ff0100000000000000000000000000014e254e2200109078024b00010000000072ede4"], 0x0) 25.499612749s ago: executing program 4 (id=2992): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@get={0x120, 0x13, 0x200, 0x70bd29, 0x25dfdbfb, {{'cbc-serpent-avx\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x3}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 25.472720826s ago: executing program 4 (id=2993): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0xffffffa9, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x2a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x100000000000009c}}], 0x2, 0x4040040) 25.418275125s ago: executing program 4 (id=2994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async, rerun: 64) pipe(&(0x7f0000002740)) (async, rerun: 64) unshare(0x28000600) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000001c0)={{r1, &(0x7f0000000040)='+}-()^@\x00', 0x103080, &(0x7f0000000080)={@align=0x81, {0xb238, 0x0, 0x8, 0x400}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x63c, 0xfff, 0x1, 0xb]}, 0xb, 0x67, &(0x7f0000000140)=""/103}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001740)=0xffffffffffffffff, 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x1, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x1, 0x15, 0x2, 0xffffffffffffffc8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x101}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x2f, 0x5, 0xb, 0x7ff}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5c}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000740)=""/4096, 0x41000, 0x1f, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000001780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000017c0)={0x4, 0x6, 0x8, 0x9e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 25.286771922s ago: executing program 4 (id=2995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x7, 0x40, 0x8, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x64, 0x0, 0x6b, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x7, 0x30, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, r2, 0x936}, 0xc) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x0, @empty}}) 25.24193055s ago: executing program 4 (id=2996): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000003140)={'bond_slave_1\x00', &(0x7f00000030c0)=@ethtool_perm_addr={0x20, 0x6, "12a70e6ddb0a"}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) (async) setsockopt(r6, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00240}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0xf}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a63bf6966e"}, @NL80211_KEY_SEQ={0x11, 0x4, "da525a7478671c42ed205b80ef"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "48296d805fab70aa"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044040}, 0x8890) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaffffffffff081545000014000000000011ad78ac1e0001faffff08aa49391b6704baac615c78b0d4e12254be4c1ae56151d9f83fe9ba6c4b5a76157ea1cc7e3cd1a79245c80c973bbdc977e2efa299e33417b7cb95abc108382b9540ae1820650000000068558560a0708240886e4f3d468deaa80867c06305edd5ce1aba3d929b68f51567585608981647925c37157fbdb372f5a9cb2c424fbc11c8e18c7c5409a8d99938ffe709975ab3aa721b04e68aceedf2c36f6d4b168e68483eb6a21c5c7fd2c2d37c04e5ce5d9c88730b6502e0fac10df4f0fc"], 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaffffffffff081545000014000000000011ad78ac1e0001faffff08aa49391b6704baac615c78b0d4e12254be4c1ae56151d9f83fe9ba6c4b5a76157ea1cc7e3cd1a79245c80c973bbdc977e2efa299e33417b7cb95abc108382b9540ae1820650000000068558560a0708240886e4f3d468deaa80867c06305edd5ce1aba3d929b68f51567585608981647925c37157fbdb372f5a9cb2c424fbc11c8e18c7c5409a8d99938ffe709975ab3aa721b04e68aceedf2c36f6d4b168e68483eb6a21c5c7fd2c2d37c04e5ce5d9c88730b6502e0fac10df4f0fc"], 0x0) 25.118730815s ago: executing program 4 (id=2997): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000080)=@ethtool_cmd={0x4a, 0x1, 0x5f3e, 0x81, 0xee, 0xaf, 0x80, 0x5, 0xc, 0x7f, 0x200, 0x6, 0x3, 0x9, 0xa3, 0x3ad3, [0x1ff, 0xcbc]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 18.967491232s ago: executing program 2 (id=3062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf41, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcd, 0x4, 0xaf4585f225cdc3e8, 0x64, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r6) r9 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb080091f499d93ca3c04d514500001c000000000001907800000000e00000"], 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000640)={{{@in=@local, @in6=@mcast1}}, {{@in6=@mcast2}}}, &(0x7f0000000740)=0xe8) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 18.852230581s ago: executing program 1 (id=3064): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) 18.78695575s ago: executing program 1 (id=3065): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101ed0000003c"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = socket$key(0xf, 0x3, 0x2) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000020, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d3eab0f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55e45c18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x602a28b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb57a}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r9, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="91a00873e630", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x10) connect$inet6(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000008280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000008240)={&(0x7f000000e540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x15b4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x157c, 0x3, 0x0, 0x1, [{0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "ed23e39a14b70909dfa2b443b5ed117b815891cf02548720c15eb7b851d4ea2eb081b6f695e1a688951e9ed8287bfb3bdf176ede37c5cb860774164c2a05c6d7a5939a77a1c993de01e13f952e2ede008d0d26afbed5922e92113a2b807bbc4e19b7495c5db8dc59be305777fa0858cbffacf9757b569361231e008370f9567601cc32ea6457b0363da38ac84e9179a156aa10bac8f53d3fb209a3c18e1f8e7111e05dc893bfd220a90c1554d4a585c679f0357a6c90a57bed50d653320c0b2a6e24514cf612c282c4b7ee757ee7d268857277a933adc6f586183d8f17308c5667862da66e"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, {0x1398, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1328, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xff, 0x1, "f0ff4645021b1a7c673f97a69f63bff14d41152b9380a5172068341c5b31c4c81c472f47b616251a0b8034816d78cec472bcafc950dbad99c2351461e3e8c0e23fd24bbc19191b6e66d829587935fd7b75ea3a906b5276fdb6798c675a55209e2a02d15e5c36e67c3293ba1a34128c96b5b148dea3490576684330c3ec353739244ce905a9e80127c6640273d9d422895fed2fb919ea42cd493a478e9b7c8c9af1d13057f5c1deeb2be37b6a7b18664c57a736c39c6d98e74865bc17662a2e2b0537eab04cb0b404baa6c27e511d37dba353822c96b8fb0061238d0c039605c3f09bf9685f00429c2d17ffcbc151208a765317f5bc12bb29534389"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "ac7b7fb5607c57d16dedc1f32c511a8df3a18e21f1d78b66be848309e0e7b1b8a64c3261adc6894dd2b5ce4e9a192c92de46395daa37601b32603603beaab6f093a39e3552a5666d71a6777e97c97d5b29b3cd4c42938adab88d87dd1547519277eca1f17fbe47acf110fa3bc5ae8cbca34f4390d4cdcd30685be76834882cd01f23ad41fe5025450ae41b3b942c9b81e15e05643bccc3132c33f8a8d6d2d75b80e2a4eff31c7dda3863402b75af7e1e559fbee1973b41d8b749a5651118e4"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "f76dcb944ec8d858aadac61588cf3df9019a84c721314e19f7a3"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3a, 0x1, "fa512315e26fb1ffe19447ac61ee62e261b42c4cc65c87298def5d91dde14586aef7adca3817fcd213838eba41b4132b4625fbef4b03"}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0xfc4, 0xe, 0xa, 0x5, 0x0, 0x0, {0x14, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x420, 0x3, 0x0, 0x1, [{0x41c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x68, 0x1, "51fc96ae9ae7042f32ed35a69fa6be9379bb497270c8901113ff042e9557512e42aec74b6f2ed5b4d4cfe5e05ba1f5aed923dc1d48ad2758a45dde30c587e8b9a4cefd69afe013f82a8e97c6e019c227f56b928b7e9b698c5408bf60908d44649c943d9f"}, @NFTA_DATA_VALUE={0xbe, 0x1, "7d19473d21f5fbb55263683ce5a2cdf7cec1dc91c2733e6c6e25f39551ea1c66ff99a1e711c6b6acca3bfd85e4b4e0e522eee9c12321e63c89117aea09f2e6e164dc994137e0b7bda3b71654092276c0edac40ad620ea38c722b4861e9f4fb5e9550048cdd0ecd6db5ad76814d0b27bfbb0216217adfd6559b901f60b422ec5075d73f169acd47ba60559e6c5db031c28070e17fa1394c34653c107cff89506af6f1d489b9244ec07fd2256fcaa2ff5cb48c2e42b48f278bccdc"}, @NFTA_DATA_VALUE={0xd4, 0x1, "d7aed57c8df63b42f21a47317d3ccf15438000d746abc22aeabd2998d0f97c36cc1f6461ce928c8685b1e6de8c37619de40926eb6453db1406c35d7501ef1bda5d107df8013cd167288c6757dee98031d005e885362290807d7495b655dd4683a8d44203c8d7a82dd3a7702660625b119df9eac5fdf43667acaccf453246a242c784a3150de97d6d661701d77ce7d42b6812d3460b70f8b38fb63aa40f4bd68aec34d23c9cad111ecb79bd8f5962ce6df1ed9ee961f563535e294195619b8bdc391f2a74d800d0b0e84b359c6208275b"}, @NFTA_DATA_VALUE={0xe3, 0x1, "72c168e04df719c9e58f0fd9e5a8c421a9f18f29d91dd78b03554f2e3193c172c3b72d09956a887a3dc2d5ab5a166f01893e9c48126d4eb4c270b8bc9ca1d2f03592ff53f46edb3933a47baf9d3eea1b493992fa2262c9a0fb3a2b4c8ce9c61f8f23342098ea0dbe25974484afe57ede0e2586778ced8615ee2009f268ce2644eb98b398ba3d0cb3b866112ba7de3310466d9dc521bd0ef93a24b46d5b2abc6ca6a5968388831f8bf0f3d77d13adecf360c9f32a4839d1864f62a25811e87aa97ebb0de59d407de6a25244af4ff43c06254a17f7f22047dc42a44bc8c694af"}, @NFTA_DATA_VALUE={0x12, 0x1, "0e7a76c9ce0692d4b0b018a12e8e"}, @NFTA_DATA_VALUE={0x85, 0x1, "adca22e14d96be3d5ac263363e8e48ea8c37787183f99c9c16787f355619908ad33c4f8647b767ae1c1cd88bc211d3e999a654ba0fa28fe07965a48ae376b039f8c4ecccd4f5465625cebca9c6903b043847f7d3376f19ab95e79dbf521e0cfcb4155d2f3e783650ae75a37721eb1a0af12cffd6450d14e00ff65a8f638c0d1bd9"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x33}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb64, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "72c33bb2266374529e0abf7df3f1502bccb32445a2ef1a76070e8c23f5c9857996d968e425e040da86453d1c0505e23ea2a639ec7f018d7218ee61a4d5c5f73f7004580bcfb896e469940fb816e2db13763495d91b049c0b8dfb05f3602227e0d84fc04fad"}, @NFTA_SET_ELEM_USERDATA={0x27, 0x6, 0x1, 0x0, "b7d1cc0d198cc518ddcacff1857d893665fee505221459f44613b49e826a8041e6faf4"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x1d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "5b918fdb24f0f987b16e6296a1dbc2c9235a81a471a26e14429da3f25b291510aa295c6282db53f57ceeba3be11f10578ebfe9ee7a83ab8f6a45dddb480ed0b3dadfed97be083b2b25f7de4b3ca1ed965ed28e64ebc6d32148723ff62d28fe76d1ed3d541dd2c4f3862435c55e4d539f0bce6b3cc3176cc060c968c146f2577afea95c17aec68b2eb7b13a0de7377517c80abcfb15d107d1f983d00cf40a5b0f9307fd707e1e1459b9e3567638c42d9ad5b3f50ecf3d323a71b249e1c6cee8730b8fb6927dde59694ac80ce3d81c580cfba5dec407b7f12d9d831cdfe8e7363886e188d51d224837b263710e5becf6"}, @NFTA_DATA_VALUE={0xdc, 0x1, "eb90ef3c5689db823ef6274474fb95b71ad7aaa1c62fb590a50eb8d137a50610b9c9158c4e79ef91a7ce23eb4b3a5af431f11b04b1f7c351eec1cde1763775ee47f431bf4bdf3fb96a56755673c50c02d378f2a21fe46046c850b6adce661e3e27adadd9a53b8acf8d8ef7698d9fb9b214ed65d30ece93c730be48c33d158944854197d49e928e724135a9adf75c4a55023eccd86d34079b356bae8ae36d9b1a600fba101cdbd80cf49f0c75022f24dc808e4909ac9829e0ad93562190a76f20b6230fba83443b51d608f3a085266d3066b19af7c0d8ea25"}]}, @NFTA_SET_ELEM_DATA={0xa0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x68, 0x1, "e6948c90a8ae636bc98b38b29b6833bb6328d403d4642a322a8ff4be050413b28dc7a69ebf25e8652ba8e9195e82bd4881dfbd910be9d3317a2787d8debda73dee1b79b6e8b8ab483daa8a0e38af5f1b3b3bdc659156b252eb32115b20292f02770129bd"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "8e777a2ca4558c35b1ef671879fa8bfdde03671aeaafa1d7bc"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x714, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x254, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf4, 0x1, "49a288a57513c10cc2ea859d2712645f811fdd7c97802b84f377062eb04ea46c0c6a4547efe0e7e13223d28bac1c96e23edd67099ab53c464029df8e5fbf877dd6e2a397ebb0df0f7d48af70e0e07038cd75edbd3142e9f0f7aa7d95644cf470c96da8e9b4a9094a8e92efa3c906b6d84310bb390cea0bbbffad16063db676249b2392943260f13c1780d5a94dbe14d25d62fc87322e472d0fdfa1af885f6e6ca3ac1ec5a089e2ed43ba44d84d3bae942bcc8334b542fd8c4526434d3c2de1fa3b52187eab21dfa9948edf59c8390865ce93de04f8f0372fa3e9ab45f334c8f6178f4566229614f495b854520365daed"}, @NFTA_DATA_VALUE={0xf8, 0x1, "8b7ebc192ed71475e68bdb6af61026e7a25ae8294b837c7e49c57ebbe4be4f230b1e5618edc369007f98671d55492b216399200dd716e8c16a8044195ee55364e316050fa461d4b5c82f0c1e8afa5fbc46e4b560df039e1a42cbb828b9ab8b8c36057caeaf610bd8a04923f2926f3f5a1db32f9a2c1488954c767f9b45c0c5dae1174b116d12b7dc379f34f09cde6e55bab67c7ab41baa6417210305746dc04cd06baf5526454d3b118aba57a3673caac3f1312032e16c9374cc4bdaa3dbed4602f93454cd290c537e57e9f321f41696606e74da2d69bfd76e25f656ad0b099fd6692ea1e85ee76c8d8178042c4760eebaa9a0d9"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "622d0158e1c5e235a1adbb143b1d9d1a2f4ebf767c9cf93794ab9cfadf5c0914db32e1ee03a79c601d9f5c4eb45fc60725d8757839dfef5275cb5d8b1f49e13ef0d05e0f6fa11d09773356e100159a20b3c2e1e3e72468aed26aa26c3b970a69fed71356cc336e449e594d6407685739202ce3184a1fe7d2f61f567a3e582c50c85b9ec7908e931788f5581879c37d3e4060b3cde34e147d3db8d026e4d2657685e912283ace17f35858429cd0d1a88aff4967dcb71732366ebae85fdba0690cb43571cd585be3abd4a2ad2e971a1666c925872a083ec605de6fb025"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x138, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x12}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'log\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1000}]}}}, {0x4c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xaf}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xf22}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x160, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "58ecd79c1dcd3819eed3f07abd6393a8f0244b29c31e41633209dd071681e9357a189e78965fe67190aad85209e73ea2f553ec7ed47cab2329d52ab65458f707f3d2b3dc9eab7030e7e1ea6fc1daf050c65f28393820a01e4e78381ae51113a3153bb8fdd0419f89117a3fff3a12c1faa2ba042bf2d1e8e8bc403bbe6d97027c361168a25c14790074d07b0112c8e4d9e830bdd279a885cb8b07fd1827345279b5e1d61fa63a5d"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x89, 0x1, "87536190663e02584f1d86f5e64926ad7113f2e3c0da9632ace6481ab911208d1273c5badd1c52149aba84aef403696a5a12293a01c9122c281e7ac8839bfcd12c3b1cb1d2bbfaed0fad4096a2443a3696fe26fd719cea482e978ff2a086a022199c4fc315ec616b1edd541fe7feec685fbed91a71f30f31e011739a91cced0bbd4dedcfaa"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2638}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4004050) 18.73123345s ago: executing program 2 (id=3066): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 18.330357004s ago: executing program 3 (id=3069): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f6, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x48040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 18.131032763s ago: executing program 3 (id=3070): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x20400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r6, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801412070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xf368b7b93669073d}, 0x20008015) 17.95797441s ago: executing program 3 (id=3071): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@delqdisc={0xec, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfffe}, {0x10, 0x9}, {0x5, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x41, 0x6, 0xfffff000, 0x1, 0x10000, 0xf17, 0x5}}, {0xe, 0x2, [0x6, 0x0, 0x6, 0x0, 0x3]}}, {{0x1c, 0x1, {0x2, 0xff, 0x4, 0x9, 0x1, 0x7, 0x9, 0x3}}, {0xa, 0x2, [0x70, 0x9, 0x9ec0]}}, {{0x1c, 0x1, {0x2, 0x2a, 0x6, 0x3, 0x0, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x1, 0x7, 0x753d]}}, {{0x1c, 0x1, {0x8, 0x0, 0x177, 0xa, 0x2, 0x30000000, 0x10, 0x7}}, {0x12, 0x2, [0x0, 0xd, 0x9, 0x4, 0x3, 0x5, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x96}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004092}, 0x40004) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x29f, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) 17.842178788s ago: executing program 3 (id=3072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x10}, 0x1c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}}, 0x20}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001640)={{r2}, r6, 0x10, @inherit={0x68, &(0x7f0000000780)={0x0, 0x4, 0x8, 0x400, {0x3, 0x1, 0x9, 0x200, 0x7fffffffffffffff}, [0x6, 0xebf, 0x7fffffff, 0x8]}}, @subvolid}) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100000000000000d7e00000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280060001400000000008000540000000040900010073797a3000000000090002001d1473797a3200000800000000000000010000000000000000000000000a"], 0x78}}, 0x0) 17.706950089s ago: executing program 2 (id=3073): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2e}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, r6, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 17.669530854s ago: executing program 1 (id=3074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x300, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0) 17.56643561s ago: executing program 0 (id=3075): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="db0593b78e9d9570e91f4e19af9fa3ff7a4ad4340e59e2826bec48b5389c9e889b1601b5953cf4c6cc319e820ac115526e4a855827a2d1b15532eb93049b5ba5eabda82f1b0c2171011b28ae52ce767ea1de25e8a171263222a5ee5c14043b3e978a891ded51ec7ee03c8ef213524308000000000000009bae1fcd416fe3a43b2a5a565b4070b9d1fe3ded45a1d61355258ca829ac", @ANYRES32=0x0, @ANYBLOB], 0x130}}, 0x0) 17.366066694s ago: executing program 2 (id=3076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', r3, 0x2f, 0xd, 0x2, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x80, 0x1, 0x0, 0xff}}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000180)={0x50000018}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x118) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}}, 0xe0}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000500)={r7, 0x6, 0x730e, "aa9e630ef59cbaa49663a489a4d15daf29f508bac42ccdec9ff25bfbe92d1ceb4dd110ba70a6e2aac55ab2c808c30bc01a3be79a9c58994495e4ff9623bd69372b2bd92f729c01d285fa5ac8b6cff9f088020a9e347e450642370575dfc12b90fd459e5b261e262006a7"}) write$tun(r6, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) close(r0) 17.363895286s ago: executing program 1 (id=3077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000a402"], 0x18) 17.363682596s ago: executing program 0 (id=3078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0xffffffad, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.322196177s ago: executing program 1 (id=3079): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001) (rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'perf_event'}, {0x2b, 'net_cls'}]}, 0x15) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) 17.219001921s ago: executing program 0 (id=3080): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4048840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xed}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4048840) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xed}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (async) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) (async) 17.1186761s ago: executing program 1 (id=3081): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, 0x8) (async) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2, 0x6}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) accept$packet(r1, 0x0, &(0x7f00000000c0)) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x3, {{0x8, 0x4, 0x1, 0xe, 0x20, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @loopback, {[@lsrr={0x83, 0xb, 0x6e, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x20, 0x7, 0x218b, 0x8, {{0x28, 0x4, 0x1, 0x7, 0xa0, 0x66, 0x0, 0x8, 0x2f, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x14, 0x3, 0x3, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x2}, {@private=0xa010101, 0x1f}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}]}, @rr={0x7, 0xb, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x1f, 0x8e, [@loopback, @multicast2, @broadcast, @private=0xa010101, @multicast2, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x103, 0xe, "ad0004016be8fd6d33eb64c4"}, @noop, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x6, [0x67d5, 0x9]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xc9, [@empty, @multicast2, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xffff7fff, 0x1, {{0x26, 0x4, 0x1, 0x2, 0x98, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x2b, 0x87, [@remote, @local, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @multicast1, @local, @remote, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0xcf, 0x1, 0x8, [{@multicast2, 0x1}, {@broadcast, 0x7}, {@loopback, 0xfffffff4}, {@local, 0x2}, {@private=0xa010102, 0xffffffff}, {@private=0xa010101, 0x8}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0x8}, {@empty}]}, @generic={0x44, 0x9, "6b75f7f7179a62"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1fc, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x1fc}}, 0x80) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf0, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000ac0)={'ipvlan0\x00'}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r9, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000c40)={'team_slave_1\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x210, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "614a54027280f9bdc00ba2e0bf1c3bbd2c3bd2e61f2bc6543b7c6c92307de5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x95, 0x3, "7ca5b7736e51908b24ad683e99ffa2b623e2fb85b54de1508db1f7e45624afddc69e1cb2dcf417b10ed5b7a0d23561b13c9a82607455bf4ba3742f65215649e9e1e973f463eb790cd022e975363b3189b8d43133126da4cb1e7c14e3f4941b96551ec20e754194b8bd99c22f1686134d1b3bd9c9126269f519d7744927efdd42b6e5000bea5a812836c901ddb636c0489e"}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x200400d1) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r10, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xfffffffffffe0106}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockname$inet6(r1, &(0x7f00000011c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001200)=0x1c) (async) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) setsockopt$sock_timeval(r12, 0x1, 0x0, &(0x7f0000001280)={r13, r14/1000+60000}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 16.980515838s ago: executing program 2 (id=3082): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 16.840005977s ago: executing program 3 (id=3083): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) close(r2) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) getsockopt$inet6_int(r3, 0x29, 0x49, 0x0, &(0x7f00000001c0)) 16.70663352s ago: executing program 3 (id=3084): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x7, 0x7800, 0x80, 0xfffffffd, {{0x5, 0x4, 0x0, 0x23, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @loopback}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x402c041) (async) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @multicast1, r6}, 0xc) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=r2, @ANYBLOB="f5b1020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x24008046}, 0x800) 16.074519934s ago: executing program 2 (id=3085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="38007a80140001005a73e4dbe5df73aae1567bf32865695e0c0003"], 0x54}}, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc0c0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.141691249s ago: executing program 32 (id=3080): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4048840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xed}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4048840) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xed}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (async) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) (async) 2.105808989s ago: executing program 33 (id=3081): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, 0x8) (async) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2, 0x6}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) accept$packet(r1, 0x0, &(0x7f00000000c0)) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4004000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x3, {{0x8, 0x4, 0x1, 0xe, 0x20, 0x68, 0x0, 0x2, 0x2f, 0x0, @remote, @loopback, {[@lsrr={0x83, 0xb, 0x6e, [@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x20, 0x7, 0x218b, 0x8, {{0x28, 0x4, 0x1, 0x7, 0xa0, 0x66, 0x0, 0x8, 0x2f, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x14, 0x3, 0x3, [{@rand_addr=0x64010100, 0x7}, {@remote, 0x2}, {@private=0xa010101, 0x1f}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}]}, @rr={0x7, 0xb, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x1f, 0x8e, [@loopback, @multicast2, @broadcast, @private=0xa010101, @multicast2, @multicast2, @loopback]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @generic={0x103, 0xe, "ad0004016be8fd6d33eb64c4"}, @noop, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x6, [0x67d5, 0x9]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xc9, [@empty, @multicast2, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xffff7fff, 0x1, {{0x26, 0x4, 0x1, 0x2, 0x98, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x2b, 0x87, [@remote, @local, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @multicast1, @local, @remote, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0xcf, 0x1, 0x8, [{@multicast2, 0x1}, {@broadcast, 0x7}, {@loopback, 0xfffffff4}, {@local, 0x2}, {@private=0xa010102, 0xffffffff}, {@private=0xa010101, 0x8}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0x8}, {@empty}]}, @generic={0x44, 0x9, "6b75f7f7179a62"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1fc, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x1fc}}, 0x80) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf0, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000ac0)={'ipvlan0\x00'}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r9, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x40004) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000c40)={'team_slave_1\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000dc0)={0x210, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "614a54027280f9bdc00ba2e0bf1c3bbd2c3bd2e61f2bc6543b7c6c92307de5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x95, 0x3, "7ca5b7736e51908b24ad683e99ffa2b623e2fb85b54de1508db1f7e45624afddc69e1cb2dcf417b10ed5b7a0d23561b13c9a82607455bf4ba3742f65215649e9e1e973f463eb790cd022e975363b3189b8d43133126da4cb1e7c14e3f4941b96551ec20e754194b8bd99c22f1686134d1b3bd9c9126269f519d7744927efdd42b6e5000bea5a812836c901ddb636c0489e"}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x200400d1) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r10, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xfffffffffffe0106}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockname$inet6(r1, &(0x7f00000011c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001200)=0x1c) (async) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) setsockopt$sock_timeval(r12, 0x1, 0x0, &(0x7f0000001280)={r13, r14/1000+60000}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.080478985s ago: executing program 34 (id=3084): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x7, 0x7800, 0x80, 0xfffffffd, {{0x5, 0x4, 0x0, 0x23, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @loopback}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x402c041) (async) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @multicast1, r6}, 0xc) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=r2, @ANYBLOB="f5b1020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x24008046}, 0x800) 0s ago: executing program 35 (id=3085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="38007a80140001005a73e4dbe5df73aae1567bf32865695e0c0003"], 0x54}}, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc0c0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): 7.295169][T13264] netlink_unicast+0x75c/0x8e0 [ 257.295203][T13264] netlink_sendmsg+0x813/0xb40 [ 257.295236][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.295263][T13264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 257.295290][T13264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.295317][T13264] ____sys_sendmsg+0x972/0x9f0 [ 257.295344][T13264] ? __might_fault+0xaf/0x130 [ 257.295370][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.295398][T13264] ? import_iovec+0x73/0xa0 [ 257.295433][T13264] ___sys_sendmsg+0x2a5/0x360 [ 257.295456][T13264] ? __lock_acquire+0x6b5/0x2cf0 [ 257.295477][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.295536][T13264] ? __fget_files+0x2a/0x420 [ 257.295556][T13264] ? __fget_files+0x3a0/0x420 [ 257.295592][T13264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 257.295621][T13264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.295655][T13264] ? __pfx_ksys_write+0x10/0x10 [ 257.295685][T13264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.295702][T13264] do_syscall_64+0x15f/0xf80 [ 257.295723][T13264] ? trace_irq_disable+0x3b/0x140 [ 257.295746][T13264] ? clear_bhb_loop+0x40/0x90 [ 257.295765][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.295780][T13264] RIP: 0033:0x7f9c3899ce59 [ 257.295796][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.295810][T13264] RSP: 002b:00007f9c398e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.295830][T13264] RAX: ffffffffffffffda RBX: 00007f9c38c15fa0 RCX: 00007f9c3899ce59 [ 257.295841][T13264] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 257.295852][T13264] RBP: 00007f9c398e8090 R08: 0000000000000000 R09: 0000000000000000 [ 257.295862][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.295872][T13264] R13: 00007f9c38c16038 R14: 00007f9c38c15fa0 R15: 00007fff9edf3648 [ 257.295898][T13264] [ 257.665351][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.802605][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.812171][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.823111][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.500871][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.517515][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.531154][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.541821][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.733260][T13333] netlink: 'syz.2.2339': attribute type 32 has an invalid length. [ 258.770650][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 258.896238][T13333] bond5: option coupled_control: invalid value (192) [ 258.915613][T13333] bond5 (unregistering): Released all slaves [ 258.922538][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.299521][T13360] netlink: 'syz.2.2349': attribute type 2 has an invalid length. [ 259.352495][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'. [ 259.532399][T13365] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2345'. [ 259.544010][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 259.790493][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 259.862611][T13384] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.944281][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.945166][T13396] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2360'. [ 259.989641][T13390] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 260.067288][T13394] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 260.113846][T13399] lo speed is unknown, defaulting to 1000 [ 260.157943][T13401] »»»»»»: renamed from lo [ 260.192578][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.243541][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.275193][T13399] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 260.300901][T13399] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 260.357170][T13423] netlink: 'syz.2.2363': attribute type 15 has an invalid length. [ 260.364457][T13399] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 260.399247][T13399] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.404689][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 260.425599][T13399] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 260.466109][T13411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.508390][T13431] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2366'. [ 260.544728][ T12] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 260.555656][T13423] netlink: 'syz.2.2363': attribute type 15 has an invalid length. [ 260.564102][ T12] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 260.578350][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 260.591802][T13431] xfrm0: left promiscuous mode [ 260.596917][T13431] xfrm0: left allmulticast mode [ 260.639757][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.648947][ T8833] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 260.668177][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.679481][T13436] : renamed from gretap0 (while UP) [ 260.727336][ T8833] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 260.758483][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.800426][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2369'. [ 260.817056][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.856140][T13399] »»»»»» speed is unknown, defaulting to 1000 [ 260.952644][T13443] syzkaller0: entered promiscuous mode [ 260.967604][T13443] syzkaller0: entered allmulticast mode [ 260.979111][T13449] netlink: 'syz.1.2372': attribute type 33 has an invalid length. [ 260.997553][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.049609][T13449] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 261.072398][T13454] netlink: 'syz.4.2374': attribute type 2 has an invalid length. [ 261.081614][T13454] netlink: 'syz.4.2374': attribute type 8 has an invalid length. [ 261.106596][T13454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2374'. [ 261.631430][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.834124][T13449] bond0 (unregistering): Released all slaves [ 261.882715][T13456] bond0: (slave bond_slave_1): Releasing backup interface [ 261.989718][T13463] netlink: 'syz.4.2377': attribute type 21 has an invalid length. [ 262.018769][T13463] netlink: 'syz.4.2377': attribute type 22 has an invalid length. [ 262.040712][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.053685][T13463] netlink: 'syz.4.2377': attribute type 23 has an invalid length. [ 262.085872][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 262.281794][T13481] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2381'. [ 262.319235][T13481] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2381'. [ 262.406215][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2384'. [ 262.448233][T13490] x_tables: unsorted underflow at hook 2 [ 262.613944][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 262.676420][T13505] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 263.607901][T13517] bond6: (slave gretap2): making interface the new active one [ 263.634420][T13517] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 264.105381][ T810] net_ratelimit: 1 callbacks suppressed [ 264.105400][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.180871][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 60 seconds [ 264.192437][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 60 seconds [ 264.204956][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.221466][T13567] syzkaller1: entered promiscuous mode [ 264.228270][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.242224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.252288][T13567] syzkaller1: entered allmulticast mode [ 264.330296][T13572] tipc: Enabled bearer , priority 0 [ 264.349104][T13572] syzkaller0: entered promiscuous mode [ 264.363803][T13574] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.374738][T13572] syzkaller0: entered allmulticast mode [ 264.405442][T13572] tipc: Resetting bearer [ 264.434300][T13571] tipc: Resetting bearer [ 264.484250][T13571] tipc: Disabling bearer [ 264.797089][T13591] validate_nla: 3 callbacks suppressed [ 264.797110][T13591] netlink: 'syz.1.2417': attribute type 21 has an invalid length. [ 264.821036][T13591] netlink: 'syz.1.2417': attribute type 21 has an invalid length. [ 264.909110][T13593] syzkaller1: entered promiscuous mode [ 264.933373][T13593] syzkaller1: entered allmulticast mode [ 264.999393][T13601] netlink: 'syz.4.2421': attribute type 9 has an invalid length. [ 265.008337][T13601] netlink: 'syz.4.2421': attribute type 6 has an invalid length. [ 265.141539][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.813536][T13638] netlink: 'syz.0.2433': attribute type 20 has an invalid length. [ 265.821659][T13638] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.955377][T13644] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 265.970680][T13644] bond6 (unregistering): Released all slaves [ 266.184692][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.713981][T13696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.833892][T13702] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 266.999139][T13713] __nla_validate_parse: 6 callbacks suppressed [ 266.999162][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'. [ 267.224174][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.301202][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.417556][T13743] netem: change failed [ 267.607950][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 267.610922][T13751] netlink: 'syz.2.2466': attribute type 58 has an invalid length. [ 267.653487][T13751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2466'. [ 267.663081][T13748] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.851419][T13756] syzkaller1: entered promiscuous mode [ 267.871793][T13756] syzkaller1: entered allmulticast mode [ 267.893654][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'. [ 267.950802][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 268.154303][T13775] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2476'. [ 268.290633][T13778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2478'. [ 268.583681][T13802] netlink: 'syz.4.2484': attribute type 15 has an invalid length. [ 268.724310][T13814] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 268.753336][T13817] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2488'. [ 268.937659][ T7195] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 269.016756][T13839] netlink: 'syz.0.2492': attribute type 24 has an invalid length. [ 269.301259][ T24] net_ratelimit: 4 callbacks suppressed [ 269.301279][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.852055][T13878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2501'. [ 269.940550][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.949341][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.958799][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.341360][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.385864][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.771794][T13821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.016727][T13883] bridge4: entered promiscuous mode [ 272.053350][T13883] bridge4: entered allmulticast mode [ 272.126751][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 272.162866][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 272.352580][T13921] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 272.422590][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.649969][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 272.799146][T13936] bond7: entered promiscuous mode [ 272.812391][T13936] bond7: entered allmulticast mode [ 272.985329][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.470884][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.781317][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 180 seconds [ 273.793924][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 180 seconds [ 273.805579][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 180 seconds [ 273.816929][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 180 seconds [ 274.510677][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.101146][T13898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.541150][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.742765][T14008] netlink: 'syz.2.2536': attribute type 21 has an invalid length. [ 275.775018][T14008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2536'. [ 275.821201][T14015] netlink: 'syz.2.2536': attribute type 21 has an invalid length. [ 275.852201][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'. [ 275.869055][T14008] netlink: 'syz.2.2536': attribute type 4 has an invalid length. [ 275.883975][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 275.899101][T14015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2536'. [ 275.912850][T14020] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 275.931817][T14008] netlink: 'syz.2.2536': attribute type 5 has an invalid length. [ 275.951730][T14008] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2536'. [ 275.993166][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2540'. [ 276.000385][T14022] ip6gretap1: entered promiscuous mode [ 276.007753][T14022] ip6gretap1: entered allmulticast mode [ 276.020943][T12392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.032994][T14015] netlink: 'syz.2.2536': attribute type 4 has an invalid length. [ 276.042661][T14015] netlink: 'syz.2.2536': attribute type 5 has an invalid length. [ 276.052395][T14015] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2536'. [ 276.276346][T14036] bond2: entered allmulticast mode [ 276.343988][T14036] dvmrp8: entered allmulticast mode [ 276.364848][T14043] netlink: 'syz.0.2548': attribute type 9 has an invalid length. [ 276.524992][T14035] bond2: left allmulticast mode [ 276.581353][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.266513][T14092] FAULT_INJECTION: forcing a failure. [ 277.266513][T14092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.310616][T14092] CPU: 1 UID: 0 PID: 14092 Comm: syz.2.2564 Not tainted syzkaller #0 PREEMPT(full) [ 277.310644][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.310655][T14092] Call Trace: [ 277.310663][T14092] [ 277.310671][T14092] dump_stack_lvl+0xe8/0x150 [ 277.310699][T14092] should_fail_ex+0x412/0x560 [ 277.310729][T14092] _copy_to_user+0x31/0xb0 [ 277.310758][T14092] simple_read_from_buffer+0xe1/0x170 [ 277.310785][T14092] proc_fail_nth_read+0x1bb/0x230 [ 277.310809][T14092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.310835][T14092] ? rw_verify_area+0x2a6/0x4d0 [ 277.310859][T14092] ? tun_chr_write_iter+0x18a/0x200 [ 277.310881][T14092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.310906][T14092] vfs_read+0x20c/0xa70 [ 277.310937][T14092] ? __pfx___mutex_lock+0x10/0x10 [ 277.310956][T14092] ? __pfx_vfs_read+0x10/0x10 [ 277.310982][T14092] ? __fget_files+0x2a/0x420 [ 277.311009][T14092] ? __fget_files+0x3a0/0x420 [ 277.311030][T14092] ? __fget_files+0x2a/0x420 [ 277.311057][T14092] ksys_read+0x150/0x270 [ 277.311085][T14092] ? __pfx_ksys_read+0x10/0x10 [ 277.311118][T14092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.311139][T14092] do_syscall_64+0x15f/0xf80 [ 277.311165][T14092] ? trace_irq_disable+0x3b/0x140 [ 277.311192][T14092] ? clear_bhb_loop+0x40/0x90 [ 277.311215][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.311233][T14092] RIP: 0033:0x7f1923f5d68e [ 277.311252][T14092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.311268][T14092] RSP: 002b:00007f1924e53fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.311287][T14092] RAX: ffffffffffffffda RBX: 00007f1924e546c0 RCX: 00007f1923f5d68e [ 277.311301][T14092] RDX: 000000000000000f RSI: 00007f1924e540a0 RDI: 0000000000000004 [ 277.311314][T14092] RBP: 00007f1924e54090 R08: 0000000000000000 R09: 0000000000000000 [ 277.311325][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.311336][T14092] R13: 00007f1924216038 R14: 00007f1924215fa0 R15: 00007ffd8c9f89a8 [ 277.311368][T14092] [ 277.566726][T14101] __nla_validate_parse: 3 callbacks suppressed [ 277.566755][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'. [ 277.623706][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.717782][T14111] tunl0: entered promiscuous mode [ 277.723654][T14111] netlink: 'syz.1.2571': attribute type 3 has an invalid length. [ 277.732321][T14111] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2571'. [ 278.007644][T14134] bridge_slave_0: default FDB implementation only supports local addresses [ 278.077769][T14139] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2580'. [ 278.158092][T14139] syzkaller0: entered promiscuous mode [ 278.164511][T14139] syzkaller0: entered allmulticast mode [ 278.660786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.060970][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.700366][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.741897][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.802782][T14127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.037820][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 281.052015][T14159] team0: No ports can be present during mode change [ 281.176129][T14166] bond7: entered promiscuous mode [ 281.191732][T14166] bond7: entered allmulticast mode [ 281.207342][T14175] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2589'. [ 281.223195][T14171] IPVS: Error joining to the multicast group [ 281.764200][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 281.790955][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.880000][T14208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2598'. [ 281.937099][T14210] netlink: 'syz.0.2599': attribute type 3 has an invalid length. [ 281.947105][T14210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2599'. [ 282.105202][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.187237][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2603'. [ 282.198762][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2603'. [ 282.209719][T14183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.216770][T14183] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 282.247163][T14183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.254447][T14183] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 282.287828][T14183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.295323][T14183] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 282.318165][T14183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.324420][T14183] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 282.576581][T14235] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 282.595950][T14235] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2606'. [ 282.794793][T14241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2607'. [ 282.820395][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.046730][T14256] Cannot find set identified by id 65534 to match [ 283.393741][T14270] netlink: 'syz.3.2616': attribute type 8 has an invalid length. [ 283.499250][T14273] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.2618'. [ 283.695224][T14282] bridge_slave_0: default FDB implementation only supports local addresses [ 283.860203][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.072848][T14307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2626'. [ 284.911945][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.016261][T14325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.141293][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.940993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.982678][T14337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 285.994036][T14337] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.092468][T14347] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 286.177649][T14353] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2639'. [ 286.287392][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'. [ 286.291506][T14354] block nbd2: server does not support multiple connections per device. [ 286.321258][T14354] block nbd2: shutting down sockets [ 286.488019][T14369] netlink: 'syz.1.2642': attribute type 39 has an invalid length. [ 286.747300][ T29] audit: type=1804 audit(1779671536.210:9): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2646" name="/newroot/555/cgroup.controllers" dev="tmpfs" ino=2834 res=1 errno=0 [ 286.801872][ T29] audit: type=1800 audit(1779671536.210:10): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2646" name="cgroup.controllers" dev="tmpfs" ino=2834 res=0 errno=0 [ 286.844809][T14390] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2647'. [ 286.877305][ T29] audit: type=1800 audit(1779671536.210:11): pid=14386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2646" name="cgroup.controllers" dev="tmpfs" ino=2834 res=0 errno=0 [ 286.928208][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2647'. [ 286.986307][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.167972][T14398] netlink: 'syz.2.2650': attribute type 2 has an invalid length. [ 287.219261][T14400] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2650'. [ 287.252303][T14398] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2650'. [ 287.778478][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2660'. [ 288.020969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.103006][T14454] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 288.180155][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.225331][T14463] netlink: 'syz.2.2669': attribute type 4 has an invalid length. [ 288.235285][T14463] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2669'. [ 288.244810][T14454] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 288.244838][T14454] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 288.274711][T14454] bond0: (slave ip6gre2): making interface the new active one [ 288.297032][T14454] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 288.321569][T14466] tipc: Enabling of bearer rejected, failed to enable media [ 288.395478][T14472] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2669'. [ 288.493975][T14476] netlink: 'syz.1.2671': attribute type 27 has an invalid length. [ 288.513396][T14480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2673'. [ 288.522603][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2671'. [ 288.590427][T14484] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2673'. [ 288.645215][T14480] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 289.185766][T14518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2681'. [ 289.191981][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'. [ 289.249283][T14516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.294066][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2684'. [ 289.509180][T14528] bond6: entered promiscuous mode [ 289.523190][T14528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.778612][T14557] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2690'. [ 290.481257][T14601] set match dimension is over the limit! [ 290.568941][T14606] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 290.965295][T14628] netlink: 'syz.1.2709': attribute type 39 has an invalid length. [ 292.757498][T14700] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 292.869813][T14692] bond9 (unregistering): Released all slaves [ 292.887975][T14711] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 293.137260][T14724] __nla_validate_parse: 6 callbacks suppressed [ 293.137284][T14724] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2730'. [ 293.403280][T14732] lo speed is unknown, defaulting to 1000 [ 293.696249][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2737'. [ 293.974729][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 294.023491][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'. [ 294.123033][T14775] FAULT_INJECTION: forcing a failure. [ 294.123033][T14775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.185143][T14777] netem: incorrect ge model size [ 294.200798][T14775] CPU: 0 UID: 0 PID: 14775 Comm: syz.4.2741 Not tainted syzkaller #0 PREEMPT(full) [ 294.200825][T14775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.200837][T14775] Call Trace: [ 294.200844][T14775] [ 294.200853][T14775] dump_stack_lvl+0xe8/0x150 [ 294.200881][T14775] should_fail_ex+0x412/0x560 [ 294.200910][T14775] _copy_to_user+0x31/0xb0 [ 294.200939][T14775] simple_read_from_buffer+0xe1/0x170 [ 294.200969][T14775] proc_fail_nth_read+0x1bb/0x230 [ 294.201006][T14775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.201033][T14775] ? rw_verify_area+0x2a6/0x4d0 [ 294.201057][T14775] ? tun_chr_write_iter+0xe0/0x200 [ 294.201080][T14775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.201105][T14775] vfs_read+0x20c/0xa70 [ 294.201135][T14775] ? __pfx___mutex_lock+0x10/0x10 [ 294.201155][T14775] ? __pfx_vfs_read+0x10/0x10 [ 294.201182][T14775] ? __fget_files+0x2a/0x420 [ 294.201208][T14775] ? __fget_files+0x3a0/0x420 [ 294.201229][T14775] ? __fget_files+0x2a/0x420 [ 294.201259][T14775] ksys_read+0x150/0x270 [ 294.201286][T14775] ? __pfx_ksys_read+0x10/0x10 [ 294.201320][T14775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.201341][T14775] do_syscall_64+0x15f/0xf80 [ 294.201366][T14775] ? trace_irq_disable+0x3b/0x140 [ 294.201393][T14775] ? clear_bhb_loop+0x40/0x90 [ 294.201418][T14775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.201436][T14775] RIP: 0033:0x7f68ccf5d68e [ 294.201454][T14775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.201471][T14775] RSP: 002b:00007f68cde0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.201491][T14775] RAX: ffffffffffffffda RBX: 00007f68cde0d6c0 RCX: 00007f68ccf5d68e [ 294.201505][T14775] RDX: 000000000000000f RSI: 00007f68cde0d0a0 RDI: 0000000000000004 [ 294.201517][T14775] RBP: 00007f68cde0d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.201528][T14775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.201539][T14775] R13: 00007f68cd216038 R14: 00007f68cd215fa0 R15: 00007ffc23ca3d98 [ 294.201571][T14775] [ 294.210177][T14777] netem: change failed [ 294.281179][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 90 seconds [ 294.397213][T14782] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2744'. [ 294.401768][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 90 seconds [ 294.490627][T14732] »»»»»» speed is unknown, defaulting to 1000 [ 294.529456][T14779] syzkaller1: entered promiscuous mode [ 294.552377][T14779] syzkaller1: entered allmulticast mode [ 294.980267][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'. [ 295.247940][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2753'. [ 295.793499][T14867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2761'. [ 295.833332][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 295.878360][ T29] audit: type=1107 audit(1779671545.340:12): pid=14865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ž‚MrsËnIñ!¶(%¢C%j A»›Ç&!P½†á;&Â{6Sõc4ÆOqGöòê1¶;ˆ‰ÑËVš¤Ââ' [ 296.326358][T14889] Bluetooth: MGMT ver 1.23 [ 296.453495][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.469200][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.479266][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.495214][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.504959][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.526194][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.531232][T14894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2768'. [ 296.543529][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.551757][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.565485][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.574826][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.138136][T14921] netlink: 'syz.4.2770': attribute type 11 has an invalid length. [ 297.191449][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.317699][T14927] bridge_slave_0 (unregistering): left allmulticast mode [ 297.345527][T14927] bridge_slave_0 (unregistering): left promiscuous mode [ 297.383035][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.797735][T14890] lo speed is unknown, defaulting to 1000 [ 297.856522][T14961] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 298.418499][T14890] »»»»»» speed is unknown, defaulting to 1000 [ 298.659981][ T50] Bluetooth: hci5: command tx timeout [ 298.720745][T15008] __nla_validate_parse: 5 callbacks suppressed [ 298.720769][T15008] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.2792'. [ 298.935522][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'. [ 299.381416][T15051] bond3 (unregistering): Released all slaves [ 299.642055][T15071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.757541][T14890] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.794505][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.829292][T14890] bridge_slave_0: entered allmulticast mode [ 299.852432][T14890] bridge_slave_0: entered promiscuous mode [ 299.880634][T14890] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.913212][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.947782][T14890] bridge_slave_1: entered allmulticast mode [ 299.975592][T14890] bridge_slave_1: entered promiscuous mode [ 300.056678][T15048] ip_vti0: entered promiscuous mode [ 300.071523][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 300.124182][T14890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.147347][T14890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.270849][T14890] team0: Port device team_slave_0 added [ 300.300895][T14890] team0: Port device team_slave_1 added [ 300.351823][T14890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.359052][T15097] netlink: 'syz.4.2811': attribute type 1 has an invalid length. [ 300.368247][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.396939][T14890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.487611][T15098] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.500860][T15098] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 300.525086][T14890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.533622][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.548336][T15107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2814'. [ 300.562115][T14890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.598072][T15102] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 300.622346][T15104] bond8 (unregistering): Released all slaves [ 300.656225][T15108] bond3: (slave gretap1): making interface the new active one [ 300.676908][T15108] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 300.740435][ T50] Bluetooth: hci5: command tx timeout [ 300.755921][T15112] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2815'. [ 300.797682][T14890] hsr_slave_0: entered promiscuous mode [ 300.811628][T14890] hsr_slave_1: entered promiscuous mode [ 300.822932][T14890] debugfs: 'hsr0' already exists in 'hsr' [ 300.829166][T14890] Cannot create hsr debugfs directory [ 300.941405][T15114] netlink: 'syz.3.2816': attribute type 4 has an invalid length. [ 301.427807][T14890] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.466628][T14890] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 301.491293][T14890] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.494690][T15158] netlink: 'syz.0.2828': attribute type 64 has an invalid length. [ 301.557487][T15158] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2828'. [ 301.639599][T14890] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.671219][T14890] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 301.691528][T14890] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.692558][T15170] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 301.785497][T14890] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.812569][T14890] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 301.832623][T14890] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.844901][T15179] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2832'. [ 301.906109][T14890] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.923226][T14890] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 301.934386][T14890] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.970955][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 302.001246][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 302.047503][T15193] bond0: entered promiscuous mode [ 302.070684][T15193] bond_slave_0: entered promiscuous mode [ 302.102829][T15193] bond0: left promiscuous mode [ 302.108056][T15193] bond_slave_0: left promiscuous mode [ 302.292785][T15206] tipc: Enabling of bearer rejected, failed to enable media [ 302.328012][T15205] syzkaller0: entered promiscuous mode [ 302.341119][T15205] syzkaller0: entered allmulticast mode [ 302.362138][T14890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 302.364424][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.377089][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.383965][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.390780][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.397540][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.404405][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.411216][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.417980][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.424826][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.431659][T15205] tc action pedit offset must be on 32 bit boundaries [ 302.438426][T15205] TC_ACT_REPEAT abuse ? [ 302.453858][T15211] openvswitch: netlink: Tunnel attr 9480 out of range max 16 [ 302.463390][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.471771][T14890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.487050][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.496283][T14890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.527552][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.614182][T15218] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.629000][T14890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.661381][T14890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.794618][T14890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.806872][T15231] netlink: zone id is out of range [ 302.821051][ T50] Bluetooth: hci5: command tx timeout [ 302.830334][T15231] netlink: zone id is out of range [ 302.845989][T14890] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.848032][T15231] netlink: zone id is out of range [ 302.859460][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.866647][ T7195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.872875][T15235] FAULT_INJECTION: forcing a failure. [ 302.872875][T15235] name failslab, interval 1, probability 0, space 0, times 0 [ 302.886741][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.886852][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.908599][T15231] netlink: zone id is out of range [ 302.927310][T15231] netlink: zone id is out of range [ 302.942935][T15231] netlink: zone id is out of range [ 302.956419][T15235] CPU: 0 UID: 0 PID: 15235 Comm: syz.1.2849 Not tainted syzkaller #0 PREEMPT(full) [ 302.956446][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.956470][T15235] Call Trace: [ 302.956478][T15235] [ 302.956486][T15235] dump_stack_lvl+0xe8/0x150 [ 302.956515][T15235] should_fail_ex+0x412/0x560 [ 302.956545][T15235] should_failslab+0xa8/0x100 [ 302.956575][T15235] __kmalloc_cache_noprof+0x88/0x660 [ 302.956598][T15235] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 302.956626][T15235] ? sctp_add_bind_addr+0x8c/0x370 [ 302.956657][T15235] sctp_add_bind_addr+0x8c/0x370 [ 302.956687][T15235] sctp_copy_local_addr_list+0x314/0x4f0 [ 302.956715][T15235] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 302.956742][T15235] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 302.956774][T15235] ? sctp_v4_is_any+0x35/0x60 [ 302.956792][T15235] ? sctp_copy_one_addr+0x93/0x360 [ 302.956821][T15235] sctp_bind_addr_copy+0xb3/0x3c0 [ 302.956849][T15235] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 302.956877][T15235] sctp_connect_new_asoc+0x2ff/0x6b0 [ 302.956902][T15235] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 302.956929][T15235] ? __local_bh_enable_ip+0xd0/0x130 [ 302.956947][T15235] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 302.956972][T15235] ? security_sctp_bind_connect+0x7e/0x2c0 [ 302.956997][T15235] sctp_sendmsg+0x1576/0x2c50 [ 302.957031][T15235] ? __pfx_sctp_sendmsg+0x10/0x10 [ 302.957053][T15235] ? aa_sk_perm+0x6d5/0x900 [ 302.957091][T15235] ? __might_fault+0xaf/0x130 [ 302.957120][T15235] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.957146][T15235] ? sock_rps_record_flow+0x19/0x350 [ 302.957169][T15235] ? inet_sendmsg+0x2f4/0x370 [ 302.957191][T15235] ____sys_sendmsg+0x80a/0x9f0 [ 302.957238][T15235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.957274][T15235] ? import_iovec+0x73/0xa0 [ 302.957304][T15235] ___sys_sendmsg+0x2a5/0x360 [ 302.957328][T15235] ? __lock_acquire+0x6b5/0x2cf0 [ 302.957353][T15235] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.957415][T15235] ? __fget_files+0x2a/0x420 [ 302.957436][T15235] ? __fget_files+0x3a0/0x420 [ 302.957471][T15235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.957500][T15235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.957543][T15235] ? __pfx_ksys_write+0x10/0x10 [ 302.957576][T15235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.957595][T15235] do_syscall_64+0x15f/0xf80 [ 302.957621][T15235] ? trace_irq_disable+0x3b/0x140 [ 302.957648][T15235] ? clear_bhb_loop+0x40/0x90 [ 302.957671][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.957689][T15235] RIP: 0033:0x7f3dc599ce59 [ 302.957707][T15235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.957723][T15235] RSP: 002b:00007f3dc3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.957752][T15235] RAX: ffffffffffffffda RBX: 00007f3dc5c15fa0 RCX: 00007f3dc599ce59 [ 302.957766][T15235] RDX: 0000000024008051 RSI: 00002000000000c0 RDI: 0000000000000003 [ 302.957778][T15235] RBP: 00007f3dc3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.957789][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.957800][T15235] R13: 00007f3dc5c16038 R14: 00007f3dc5c15fa0 R15: 00007ffce8186e38 [ 302.957830][T15235] [ 303.026473][T15231] netlink: zone id is out of range [ 303.080987][T15245] netlink: 'syz.4.2851': attribute type 12 has an invalid length. [ 303.286810][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 303.296343][T15245] netlink: 'syz.4.2851': attribute type 29 has an invalid length. [ 303.357935][T15245] netlink: 'syz.4.2851': attribute type 1 has an invalid length. [ 303.366473][T15245] netlink: 'syz.4.2851': attribute type 2 has an invalid length. [ 303.873333][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 210 seconds [ 303.887014][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 210 seconds [ 303.898407][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 210 seconds [ 303.909740][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 210 seconds [ 304.112794][T14890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.244805][T14890] veth0_vlan: entered promiscuous mode [ 304.269707][T14890] veth1_vlan: entered promiscuous mode [ 304.323597][T14890] veth0_macvtap: entered promiscuous mode [ 304.338779][T14890] veth1_macvtap: entered promiscuous mode [ 304.368744][T14890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.408599][T15306] FAULT_INJECTION: forcing a failure. [ 304.408599][T15306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.411369][T14890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.435742][T15306] CPU: 0 UID: 0 PID: 15306 Comm: syz.1.2866 Not tainted syzkaller #0 PREEMPT(full) [ 304.435776][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.435789][T15306] Call Trace: [ 304.435796][T15306] [ 304.435804][T15306] dump_stack_lvl+0xe8/0x150 [ 304.435832][T15306] should_fail_ex+0x412/0x560 [ 304.435857][T15306] _copy_from_user+0x2d/0xb0 [ 304.435883][T15306] ___sys_sendmsg+0x1c6/0x360 [ 304.435908][T15306] ? __lock_acquire+0x6b5/0x2cf0 [ 304.435933][T15306] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.435994][T15306] ? __fget_files+0x2a/0x420 [ 304.436015][T15306] ? __fget_files+0x3a0/0x420 [ 304.436047][T15306] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.436076][T15306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.436110][T15306] ? __pfx_ksys_write+0x10/0x10 [ 304.436145][T15306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.436165][T15306] do_syscall_64+0x15f/0xf80 [ 304.436191][T15306] ? trace_irq_disable+0x3b/0x140 [ 304.436226][T15306] ? clear_bhb_loop+0x40/0x90 [ 304.436249][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.436267][T15306] RIP: 0033:0x7f3dc599ce59 [ 304.436285][T15306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.436307][T15306] RSP: 002b:00007f3dc3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.436328][T15306] RAX: ffffffffffffffda RBX: 00007f3dc5c15fa0 RCX: 00007f3dc599ce59 [ 304.436348][T15306] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 304.436360][T15306] RBP: 00007f3dc3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.436371][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.436382][T15306] R13: 00007f3dc5c16038 R14: 00007f3dc5c15fa0 R15: 00007ffce8186e38 [ 304.436412][T15306] [ 304.470245][ T8833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.748664][ T8833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.774301][ T8833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.798658][ T8833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.810993][T15315] __nla_validate_parse: 5 callbacks suppressed [ 304.811012][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'. [ 304.845921][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2867'. [ 304.910790][ T50] Bluetooth: hci5: command tx timeout [ 305.028423][ T3273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.042815][ T3273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.114677][ T8833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.124878][ T8833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.252428][T15336] Cannot find add_set index 65532 as target [ 305.296632][T15343] netlink: 'syz.2.2765': attribute type 7 has an invalid length. [ 305.306645][T15343] netlink: 'syz.2.2765': attribute type 23 has an invalid length. [ 306.057692][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.064686][T15389] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 306.074333][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.087097][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.105677][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.114375][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.170060][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 306.615366][T15404] FAULT_INJECTION: forcing a failure. [ 306.615366][T15404] name failslab, interval 1, probability 0, space 0, times 0 [ 306.615792][T15402] netlink: 'syz.3.2890': attribute type 13 has an invalid length. [ 306.636758][T15404] CPU: 1 UID: 0 PID: 15404 Comm: syz.0.2891 Not tainted syzkaller #0 PREEMPT(full) [ 306.636782][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.636793][T15404] Call Trace: [ 306.636801][T15404] [ 306.636809][T15404] dump_stack_lvl+0xe8/0x150 [ 306.636836][T15404] should_fail_ex+0x412/0x560 [ 306.636862][T15404] should_failslab+0xa8/0x100 [ 306.636898][T15404] __kmalloc_cache_noprof+0x88/0x660 [ 306.636918][T15404] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 306.636941][T15404] ? sctp_add_bind_addr+0x8c/0x370 [ 306.636969][T15404] sctp_add_bind_addr+0x8c/0x370 [ 306.636995][T15404] sctp_copy_local_addr_list+0x314/0x4f0 [ 306.637020][T15404] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 306.637044][T15404] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 306.637074][T15404] ? sctp_v4_is_any+0x35/0x60 [ 306.637089][T15404] ? sctp_copy_one_addr+0x93/0x360 [ 306.637115][T15404] sctp_bind_addr_copy+0xb3/0x3c0 [ 306.637140][T15404] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 306.637165][T15404] sctp_connect_new_asoc+0x2ff/0x6b0 [ 306.637185][T15404] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 306.637208][T15404] ? __local_bh_enable_ip+0xd0/0x130 [ 306.637224][T15404] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 306.637247][T15404] ? security_sctp_bind_connect+0x7e/0x2c0 [ 306.637268][T15404] sctp_sendmsg+0x1576/0x2c50 [ 306.637301][T15404] ? __pfx_sctp_sendmsg+0x10/0x10 [ 306.637324][T15404] ? aa_sk_perm+0x6d5/0x900 [ 306.637343][T15404] ? __might_fault+0xaf/0x130 [ 306.637370][T15404] ? __pfx_aa_sk_perm+0x10/0x10 [ 306.637394][T15404] ? sock_rps_record_flow+0x19/0x350 [ 306.637415][T15404] ? inet_sendmsg+0x2f4/0x370 [ 306.637436][T15404] ____sys_sendmsg+0x80a/0x9f0 [ 306.637468][T15404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.637500][T15404] ? import_iovec+0x73/0xa0 [ 306.637529][T15404] ___sys_sendmsg+0x2a5/0x360 [ 306.637549][T15404] ? __lock_acquire+0x6b5/0x2cf0 [ 306.637569][T15404] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.637625][T15404] ? __fget_files+0x2a/0x420 [ 306.637644][T15404] ? __fget_files+0x3a0/0x420 [ 306.637686][T15404] __x64_sys_sendmsg+0x1bd/0x2a0 [ 306.637714][T15404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.637746][T15404] ? __pfx_ksys_write+0x10/0x10 [ 306.637774][T15404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.637791][T15404] do_syscall_64+0x15f/0xf80 [ 306.637815][T15404] ? trace_irq_disable+0x3b/0x140 [ 306.637836][T15404] ? clear_bhb_loop+0x40/0x90 [ 306.637856][T15404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.637873][T15404] RIP: 0033:0x7f9c3899ce59 [ 306.637898][T15404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.637913][T15404] RSP: 002b:00007f9c398e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.637931][T15404] RAX: ffffffffffffffda RBX: 00007f9c38c15fa0 RCX: 00007f9c3899ce59 [ 306.637942][T15404] RDX: 0000000024008051 RSI: 00002000000000c0 RDI: 0000000000000003 [ 306.637952][T15404] RBP: 00007f9c398e8090 R08: 0000000000000000 R09: 0000000000000000 [ 306.637963][T15404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.637973][T15404] R13: 00007f9c38c16038 R14: 00007f9c38c15fa0 R15: 00007fff9edf3648 [ 306.638001][T15404] [ 306.968953][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 306.979208][T15406] veth0: entered promiscuous mode [ 307.000814][ T43] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.037787][ T43] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.105312][T15401] veth0: left promiscuous mode [ 307.111125][ T43] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.167645][ T43] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.182399][T15409] FAULT_INJECTION: forcing a failure. [ 307.182399][T15409] name failslab, interval 1, probability 0, space 0, times 0 [ 307.212380][T15409] CPU: 1 UID: 0 PID: 15409 Comm: syz.0.2892 Not tainted syzkaller #0 PREEMPT(full) [ 307.212408][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.212419][T15409] Call Trace: [ 307.212426][T15409] [ 307.212434][T15409] dump_stack_lvl+0xe8/0x150 [ 307.212461][T15409] should_fail_ex+0x412/0x560 [ 307.212487][T15409] should_failslab+0xa8/0x100 [ 307.212512][T15409] ? dst_alloc+0x105/0x170 [ 307.212531][T15409] kmem_cache_alloc_noprof+0x87/0x650 [ 307.212554][T15409] ? __pfx_find_exception+0x10/0x10 [ 307.212571][T15409] ? fib_lookup+0x76/0x440 [ 307.212590][T15409] dst_alloc+0x105/0x170 [ 307.212613][T15409] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 307.212641][T15409] ? ip_route_output_key_hash+0xd8/0x2a0 [ 307.212662][T15409] ip_route_output_key_hash+0x18d/0x2a0 [ 307.212683][T15409] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 307.212718][T15409] ip_route_output_flow+0x2a/0x150 [ 307.212743][T15409] ? security_sk_classify_flow+0x6d/0x150 [ 307.212765][T15409] raw_sendmsg+0x1199/0x1a50 [ 307.212795][T15409] ? __pfx_raw_sendmsg+0x10/0x10 [ 307.212824][T15409] ? aa_sk_perm+0x6d5/0x900 [ 307.212853][T15409] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.212880][T15409] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 307.212909][T15409] ? sock_rps_record_flow+0x19/0x350 [ 307.212930][T15409] ? inet_sendmsg+0x2f4/0x370 [ 307.212947][T15409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.212972][T15409] ____sys_sendmsg+0x80a/0x9f0 [ 307.213003][T15409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.213033][T15409] ? import_iovec+0x73/0xa0 [ 307.213059][T15409] ___sys_sendmsg+0x2a5/0x360 [ 307.213083][T15409] ? __lock_acquire+0x6b5/0x2cf0 [ 307.213103][T15409] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.213159][T15409] ? __fget_files+0x2a/0x420 [ 307.213179][T15409] ? __fget_files+0x3a0/0x420 [ 307.213209][T15409] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.213237][T15409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.213272][T15409] ? __pfx_ksys_write+0x10/0x10 [ 307.213305][T15409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.213324][T15409] do_syscall_64+0x15f/0xf80 [ 307.213348][T15409] ? trace_irq_disable+0x3b/0x140 [ 307.213376][T15409] ? clear_bhb_loop+0x40/0x90 [ 307.213397][T15409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.213415][T15409] RIP: 0033:0x7f9c3899ce59 [ 307.213434][T15409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.213450][T15409] RSP: 002b:00007f9c398e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.213469][T15409] RAX: ffffffffffffffda RBX: 00007f9c38c15fa0 RCX: 00007f9c3899ce59 [ 307.213481][T15409] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 307.213493][T15409] RBP: 00007f9c398e8090 R08: 0000000000000000 R09: 0000000000000000 [ 307.213503][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.213514][T15409] R13: 00007f9c38c16038 R14: 00007f9c38c15fa0 R15: 00007fff9edf3648 [ 307.213544][T15409] [ 307.682174][T15419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.688835][T15384] lo speed is unknown, defaulting to 1000 [ 307.710972][T15420] net_ratelimit: 5 callbacks suppressed [ 307.710997][T15420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.729638][T15424] netlink: 'syz.2.2896': attribute type 1 has an invalid length. [ 307.767190][T15420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.776030][T15420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.797220][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 307.830917][T15424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2896'. [ 307.867296][T15432] Bluetooth: MGMT ver 1.23 [ 308.058885][T15440] FAULT_INJECTION: forcing a failure. [ 308.058885][T15440] name failslab, interval 1, probability 0, space 0, times 0 [ 308.103733][T15440] CPU: 1 UID: 0 PID: 15440 Comm: syz.3.2902 Not tainted syzkaller #0 PREEMPT(full) [ 308.103761][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.103773][T15440] Call Trace: [ 308.103781][T15440] [ 308.103789][T15440] dump_stack_lvl+0xe8/0x150 [ 308.103818][T15440] should_fail_ex+0x412/0x560 [ 308.103850][T15440] should_failslab+0xa8/0x100 [ 308.103882][T15440] __kmalloc_cache_noprof+0x88/0x660 [ 308.103907][T15440] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 308.103938][T15440] ? sctp_add_bind_addr+0x8c/0x370 [ 308.103970][T15440] sctp_add_bind_addr+0x8c/0x370 [ 308.104002][T15440] sctp_copy_local_addr_list+0x314/0x4f0 [ 308.104041][T15440] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 308.104067][T15440] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 308.104098][T15440] ? sctp_v4_is_any+0x35/0x60 [ 308.104114][T15440] ? sctp_copy_one_addr+0x93/0x360 [ 308.104144][T15440] sctp_bind_addr_copy+0xb3/0x3c0 [ 308.104171][T15440] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 308.104199][T15440] sctp_connect_new_asoc+0x2ff/0x6b0 [ 308.104224][T15440] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 308.104251][T15440] ? __local_bh_enable_ip+0xd0/0x130 [ 308.104268][T15440] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 308.104293][T15440] ? security_sctp_bind_connect+0x7e/0x2c0 [ 308.104318][T15440] sctp_sendmsg+0x1576/0x2c50 [ 308.104352][T15440] ? __pfx_sctp_sendmsg+0x10/0x10 [ 308.104375][T15440] ? aa_sk_perm+0x6d5/0x900 [ 308.104396][T15440] ? __might_fault+0xaf/0x130 [ 308.104426][T15440] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.104451][T15440] ? sock_rps_record_flow+0x19/0x350 [ 308.104475][T15440] ? inet_sendmsg+0x2f4/0x370 [ 308.104497][T15440] ____sys_sendmsg+0x80a/0x9f0 [ 308.104535][T15440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.104577][T15440] ? import_iovec+0x73/0xa0 [ 308.104607][T15440] ___sys_sendmsg+0x2a5/0x360 [ 308.104633][T15440] ? __lock_acquire+0x6b5/0x2cf0 [ 308.104659][T15440] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.104722][T15440] ? __fget_files+0x2a/0x420 [ 308.104744][T15440] ? __fget_files+0x3a0/0x420 [ 308.104778][T15440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.104808][T15440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.104854][T15440] ? __pfx_ksys_write+0x10/0x10 [ 308.104893][T15440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.104915][T15440] do_syscall_64+0x15f/0xf80 [ 308.104941][T15440] ? trace_irq_disable+0x3b/0x140 [ 308.104966][T15440] ? clear_bhb_loop+0x40/0x90 [ 308.104989][T15440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.105008][T15440] RIP: 0033:0x7fa78039ce59 [ 308.105033][T15440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.105050][T15440] RSP: 002b:00007fa7812e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.105071][T15440] RAX: ffffffffffffffda RBX: 00007fa780615fa0 RCX: 00007fa78039ce59 [ 308.105085][T15440] RDX: 0000000024008051 RSI: 00002000000000c0 RDI: 0000000000000003 [ 308.105096][T15440] RBP: 00007fa7812e9090 R08: 0000000000000000 R09: 0000000000000000 [ 308.105108][T15440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.105119][T15440] R13: 00007fa780616038 R14: 00007fa780615fa0 R15: 00007ffd39bf1fc8 [ 308.105151][T15440] [ 308.162306][T15384] »»»»»» speed is unknown, defaulting to 1000 [ 308.233287][T15446] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 308.270560][ T50] Bluetooth: hci0: command tx timeout [ 308.507607][T15454] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 308.525918][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 308.562695][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 308.572251][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 308.680353][T15467] xt_l2tp: missing protocol rule (udp|l2tpip) [ 308.701608][T15465] netlink: 'syz.4.2910': attribute type 39 has an invalid length. [ 308.721604][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 308.852635][T15471] netlink: 'syz.2.2911': attribute type 2 has an invalid length. [ 309.023962][T15476] netlink: 'syz.4.2913': attribute type 1 has an invalid length. [ 309.293193][T15490] macvtap1: entered promiscuous mode [ 309.298884][T15490] macvtap1: entered allmulticast mode [ 309.306083][T15490] veth1_vlan: entered allmulticast mode [ 309.344113][T15490] macvtap2: entered promiscuous mode [ 309.349610][T15490] macvtap2: entered allmulticast mode [ 309.403478][T15502] netlink: 'syz.0.2919': attribute type 5 has an invalid length. [ 309.485677][T15507] xt_hashlimit: size too large, truncated to 1048576 [ 309.593519][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.629123][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.647663][T15384] bridge_slave_0: entered allmulticast mode [ 309.662307][T15384] bridge_slave_0: entered promiscuous mode [ 309.681536][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.710017][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.724627][T15384] bridge_slave_1: entered allmulticast mode [ 309.745682][T15384] bridge_slave_1: entered promiscuous mode [ 309.945759][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.994105][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.115184][T15384] team0: Port device team_slave_0 added [ 310.137629][T15384] team0: Port device team_slave_1 added [ 310.271568][T15545] __nla_validate_parse: 3 callbacks suppressed [ 310.271588][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 310.275663][T15554] netlink: zone id is out of range [ 310.319722][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.323642][T15554] netlink: zone id is out of range [ 310.329904][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.373258][T15557] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20001 [ 310.381561][ T5743] IPVS: starting estimator thread 0... [ 310.395982][T15552] netlink: set zone limit has 4 unknown bytes [ 310.407018][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.425981][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.435761][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.449541][T15554] IPVS: fo: FWM 3 0x00000003 - no destination available [ 310.466129][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.483167][T15560] IPVS: using max 32 ests per chain, 76800 per kthread [ 310.501198][ T50] Bluetooth: hci0: command tx timeout [ 310.552425][T15384] hsr_slave_0: entered promiscuous mode [ 310.559366][T15384] hsr_slave_1: entered promiscuous mode [ 310.566366][T15384] debugfs: 'hsr0' already exists in 'hsr' [ 310.573645][T15384] Cannot create hsr debugfs directory [ 311.025208][T15577] syzkaller0: entered promiscuous mode [ 311.031751][T15577] syzkaller0: entered allmulticast mode [ 311.180820][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 311.278522][T15589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2947'. [ 312.584083][ T50] Bluetooth: hci0: command tx timeout [ 313.048018][T15586] netlink: 'syz.4.2946': attribute type 1 has an invalid length. [ 313.064531][T15586] netlink: 'syz.4.2946': attribute type 2 has an invalid length. [ 313.283410][T15607] xt_HMARK: spi-set and port-set can't be combined [ 313.283553][T15600] syzkaller0: entered promiscuous mode [ 313.306567][T15607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2952'. [ 313.309389][T15600] syzkaller0: entered allmulticast mode [ 313.355117][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2953'. [ 313.464350][T15612] bond1 (unregistering): Released all slaves [ 313.489000][T15616] netlink: 'syz.0.2955': attribute type 1 has an invalid length. [ 313.508192][T15616] netlink: 'syz.0.2955': attribute type 2 has an invalid length. [ 313.563917][T15384] team0: Port device netdevsim1 removed [ 313.828433][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 313.830398][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 314.186116][T15384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.206808][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.225106][T15384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.232307][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 314.248904][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.251295][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2970'. [ 314.268132][T15384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.288924][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.317766][T15384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.358312][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.367447][T15659] netlink: 'syz.0.2972': attribute type 1 has an invalid length. [ 314.432036][T15660] ip6gretap1: entered promiscuous mode [ 314.438268][T15660] ip6gretap1: entered allmulticast mode [ 314.466205][T15666] ip6gretap1: entered promiscuous mode [ 314.472430][T15666] ip6gretap1: entered allmulticast mode [ 314.525206][T15671] syzkaller0: entered promiscuous mode [ 314.532073][T15671] syzkaller0: entered allmulticast mode [ 314.660024][ T50] Bluetooth: hci0: command tx timeout [ 314.713693][T15683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2976'. [ 314.796760][T15641] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 314.852810][T15384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.908964][T15384] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.941681][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.948873][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.042132][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.049362][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.053870][T15700] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 315.358851][T15715] __nla_validate_parse: 33 callbacks suppressed [ 315.358872][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'. [ 315.510697][T15721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2987'. [ 315.825718][T15384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.904755][T15384] veth0_vlan: entered promiscuous mode [ 315.923034][T15384] veth1_vlan: entered promiscuous mode [ 315.968376][T15384] veth0_macvtap: entered promiscuous mode [ 315.983629][T15384] veth1_macvtap: entered promiscuous mode [ 316.013559][T15384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.051738][T15384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.076194][ T7194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.085709][ T7194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.097728][ T7194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.109223][ T7194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.246048][ T8833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.274448][ T8833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.687347][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.711661][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.740906][ T50] Bluetooth: hci0: command 0x0c20 tx timeout [ 317.096814][T15780] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2881'. [ 317.160636][T15787] openvswitch: netlink: IP tunnel dst address not specified [ 317.307292][T15792] netlink: 'syz.3.3003': attribute type 11 has an invalid length. [ 317.307544][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.324484][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.367802][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.409061][T15795] netlink: 'syz.3.3003': attribute type 16 has an invalid length. [ 317.417332][T15795] netlink: 'syz.3.3003': attribute type 17 has an invalid length. [ 317.444881][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.534905][T15792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3003'. [ 317.598958][T15795] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.606335][T15795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.622521][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.629747][T15795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.671878][T15795] veth0_macvtap: left allmulticast mode [ 317.707119][T15795] bond1: left promiscuous mode [ 317.722536][T15795] bond2: left promiscuous mode [ 317.733652][T15795] 8021q: adding VLAN 0 to HW filter on device eth0 [ 317.744048][T15795] 8021q: adding VLAN 0 to HW filter on device eth1 [ 317.754282][T15795] 8021q: adding VLAN 0 to HW filter on device eth2 [ 317.765813][T15795] 8021q: adding VLAN 0 to HW filter on device eth3 [ 317.777244][T15795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 317.788281][T15795] bond5: left promiscuous mode [ 317.794936][T15795] bond5: left allmulticast mode [ 317.802849][T15795] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.813678][T15795] gretap2: left promiscuous mode [ 317.818639][T15795] gretap2: left allmulticast mode [ 317.828475][T15795] vlan3: left allmulticast mode [ 317.834438][T15795] bond0: left allmulticast mode [ 317.839460][T15795] bond_slave_0: left allmulticast mode [ 317.860339][T15795] bond_slave_1: left allmulticast mode [ 317.879172][T15795] bridge4: left promiscuous mode [ 317.888948][T15795] bridge4: left allmulticast mode [ 317.918824][ T5743] »»»»»» speed is unknown, defaulting to 1000 [ 317.933436][ T5743] syú2: Port: 1 Link ACTIVE [ 317.952270][T15801] vxcan1: Master is either lo or non-ether device [ 318.474157][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'. [ 318.734913][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 319.293201][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.304000][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.312684][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.325709][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.336791][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.409510][T15862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3025'. [ 319.851837][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'. [ 319.882824][T15883] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3028'. [ 319.923428][T15883] xt_nfacct: accounting object `syz1' does not exist [ 320.044279][T15854] lo speed is unknown, defaulting to 1000 [ 320.115930][T15898] netlink: 'syz.3.3033': attribute type 11 has an invalid length. [ 320.125113][T15898] netlink: 'syz.3.3033': attribute type 4 has an invalid length. [ 320.135618][T15898] netlink: 'syz.3.3033': attribute type 6 has an invalid length. [ 320.145715][T15898] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.3033'. [ 320.267995][T15854] »»»»»» speed is unknown, defaulting to 1000 [ 320.393615][T15909] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 320.425339][T15909] vlan2: entered allmulticast mode [ 320.430585][T15909] veth0_to_hsr: entered allmulticast mode [ 320.593469][T15854] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.601424][T15854] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.608816][T15854] bridge_slave_0: entered allmulticast mode [ 320.617186][T15854] bridge_slave_0: entered promiscuous mode [ 320.625216][T15854] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.632854][T15854] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.640484][T15854] bridge_slave_1: entered allmulticast mode [ 320.647502][T15854] bridge_slave_1: entered promiscuous mode [ 320.687008][T15854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.699670][T15854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.766242][T15854] team0: Port device team_slave_0 added [ 320.775509][T15854] team0: Port device team_slave_1 added [ 320.795645][T15920] rdma_rxe: rxe_newlink: failed to add lo [ 320.811867][T15920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.817226][T15854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.828047][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.857711][T15854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.871455][T15854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.878501][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.913633][T15854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.937006][T15926] netlink: 'syz.1.3041': attribute type 3 has an invalid length. [ 320.958794][T15926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3041'. [ 320.981265][T15854] hsr_slave_0: entered promiscuous mode [ 320.988160][T15854] hsr_slave_1: entered promiscuous mode [ 320.995669][T15854] debugfs: 'hsr0' already exists in 'hsr' [ 321.002084][T15854] Cannot create hsr debugfs directory [ 321.146975][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 321.251080][T15947] netlink: 'syz.3.3046': attribute type 1 has an invalid length. [ 321.320696][T15947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.329182][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3047'. [ 321.381980][ T50] Bluetooth: hci1: command tx timeout [ 321.586279][T15854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.611531][T15962] veth1_macvtap: left promiscuous mode [ 321.625362][T15962] macsec0: entered promiscuous mode [ 321.647426][T15962] macsec0: entered allmulticast mode [ 321.666209][T15968] veth1_macvtap: entered promiscuous mode [ 321.687791][T15968] veth1_macvtap: entered allmulticast mode [ 321.696144][T15968] macsec0: left promiscuous mode [ 321.704939][T15968] macsec0: left allmulticast mode [ 321.710686][T15968] veth1_macvtap: left allmulticast mode [ 321.740841][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 321.769759][T15854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.825283][T15973] veth0_macvtap: left promiscuous mode [ 321.925965][T15854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.024076][T15977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3056'. [ 322.065491][T15988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3058'. [ 322.110563][T15854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.124938][T15988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3058'. [ 322.270764][T16000] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3060'. [ 322.448072][T16006] netlink: 'syz.1.3064': attribute type 21 has an invalid length. [ 322.458898][T16006] netlink: 'syz.1.3064': attribute type 1 has an invalid length. [ 322.527655][T15854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.554714][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.572596][T15854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.587284][T16011] netlink: 'syz.1.3065': attribute type 1 has an invalid length. [ 322.608156][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.617200][T15854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.633268][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.668830][T16011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.679181][T15854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.691284][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.711289][T16015] bond1: (slave geneve2): making interface the new active one [ 322.724081][T16015] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 322.972749][T15854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.001997][T16033] netlink: 'syz.3.3069': attribute type 9 has an invalid length. [ 323.022135][T15854] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.037322][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.044643][ T7195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.076948][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.084181][ T7195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.196289][T16039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3070'. [ 323.260400][T16042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3070'. [ 323.460315][ T50] Bluetooth: hci1: command tx timeout [ 324.050689][T16080] syzkaller1: entered promiscuous mode [ 324.070429][T16080] syzkaller1: entered allmulticast mode [ 324.104775][T16080] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 324.175095][T16062] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 324.258071][T15854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.593777][T15854] veth0_vlan: entered promiscuous mode [ 324.607015][T15854] veth1_vlan: entered promiscuous mode [ 324.636756][T15854] veth0_macvtap: entered promiscuous mode [ 324.647959][T15854] veth1_macvtap: entered promiscuous mode [ 324.666922][T15854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.683810][T15854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.698137][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.708358][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.718074][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.727931][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.980558][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 120 seconds [ 324.991926][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 120 seconds [ 325.540666][ T50] Bluetooth: hci1: command tx timeout [ 327.630397][ T50] Bluetooth: hci1: command tx timeout [ 328.229624][ T4994] udevd[4994]: worker [5628] /devices/virtual/block/nbd0 timeout; kill it [ 328.238366][ T4994] udevd[4994]: seq 10674 '/devices/virtual/block/nbd0' killed [ 328.247010][ T4994] udevd[4994]: worker [7199] /devices/virtual/block/nbd1 is taking a long time [ 333.940447][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 240 seconds [ 333.951588][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 240 seconds [ 333.962881][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 240 seconds [ 333.973995][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 240 seconds [ 339.287193][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.304753][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.315768][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.320949][ T4944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.323983][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.338228][ T4944] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.339569][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.356752][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.373444][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.382343][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.732731][T16126] lo speed is unknown, defaulting to 1000 [ 339.864577][T16126] »»»»»» speed is unknown, defaulting to 1000 [ 339.864577][T16128] lo speed is unknown, defaulting to 1000 [ 340.088469][T16128] »»»»»» speed is unknown, defaulting to 1000 [ 340.203424][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.214009][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.225815][T16126] bridge_slave_0: entered allmulticast mode [ 340.234317][T16126] bridge_slave_0: entered promiscuous mode [ 340.251579][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.258781][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.266282][T16126] bridge_slave_1: entered allmulticast mode [ 340.274273][T16126] bridge_slave_1: entered promiscuous mode [ 340.352214][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.364721][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.372882][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.381683][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.383819][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.395000][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.401494][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.473315][T16126] team0: Port device team_slave_0 added [ 340.488599][T16126] team0: Port device team_slave_1 added [ 340.526314][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.534049][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.561096][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.588729][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.596199][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.631866][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.726080][T16126] hsr_slave_0: entered promiscuous mode [ 340.733144][T16126] hsr_slave_1: entered promiscuous mode [ 340.739596][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 340.746724][T16126] Cannot create hsr debugfs directory [ 340.866493][T16128] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.874806][T16128] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.883292][T16128] bridge_slave_0: entered allmulticast mode [ 340.890835][T16128] bridge_slave_0: entered promiscuous mode [ 340.906360][T16128] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.915612][T16128] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.924043][T16128] bridge_slave_1: entered allmulticast mode [ 340.932207][T16128] bridge_slave_1: entered promiscuous mode [ 340.979911][T16155] lo speed is unknown, defaulting to 1000 [ 340.992302][T16128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.021656][T16128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.103048][T16128] team0: Port device team_slave_0 added [ 341.121659][T16128] team0: Port device team_slave_1 added [ 341.184171][T16128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.192054][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.218610][T16128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.235198][T16128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.247401][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.278455][T16128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.304873][T16155] »»»»»» speed is unknown, defaulting to 1000 [ 341.380451][ T5630] Bluetooth: hci4: command tx timeout [ 341.432801][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 341.445586][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 341.457636][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 341.464978][ T4944] Bluetooth: hci6: command tx timeout [ 341.472495][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 341.485892][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 341.504195][T16128] hsr_slave_0: entered promiscuous mode [ 341.512947][T16128] hsr_slave_1: entered promiscuous mode [ 341.519462][T16128] debugfs: 'hsr0' already exists in 'hsr' [ 341.526088][T16128] Cannot create hsr debugfs directory [ 341.977815][T16155] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.985182][T16155] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.992645][T16155] bridge_slave_0: entered allmulticast mode [ 341.999781][T16155] bridge_slave_0: entered promiscuous mode [ 342.008105][T16155] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.016089][T16155] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.025145][T16155] bridge_slave_1: entered allmulticast mode [ 342.033544][T16155] bridge_slave_1: entered promiscuous mode [ 342.068355][T16172] lo speed is unknown, defaulting to 1000 [ 342.072749][T16155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.087434][T16155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.133682][T16155] team0: Port device team_slave_0 added [ 342.143303][T16155] team0: Port device team_slave_1 added [ 342.183828][T16155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.191344][T16155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.218170][T16155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.231990][T16155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.238956][T16155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.267496][T16155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.304563][T16172] »»»»»» speed is unknown, defaulting to 1000 [ 342.332813][T16155] hsr_slave_0: entered promiscuous mode [ 342.339148][T16155] hsr_slave_1: entered promiscuous mode [ 342.346105][T16155] debugfs: 'hsr0' already exists in 'hsr' [ 342.352584][T16155] Cannot create hsr debugfs directory [ 342.500374][ T5630] Bluetooth: hci7: command tx timeout [ 342.700661][T16172] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.707888][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.715836][T16172] bridge_slave_0: entered allmulticast mode [ 342.725753][T16172] bridge_slave_0: entered promiscuous mode [ 342.733914][T16172] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.742157][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.749423][T16172] bridge_slave_1: entered allmulticast mode [ 342.757199][T16172] bridge_slave_1: entered promiscuous mode [ 342.787815][T16172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.799455][T16172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.828027][T16172] team0: Port device team_slave_0 added [ 342.836981][T16172] team0: Port device team_slave_1 added [ 342.861378][T16172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.868397][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.895453][T16172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.918050][T16172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.926201][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.952992][T16172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.996064][T16172] hsr_slave_0: entered promiscuous mode [ 343.002615][T16172] hsr_slave_1: entered promiscuous mode [ 343.008730][T16172] debugfs: 'hsr0' already exists in 'hsr' [ 343.015963][T16172] Cannot create hsr debugfs directory [ 343.460701][ T5630] Bluetooth: hci4: command tx timeout [ 343.541933][ T5625] Bluetooth: hci6: command tx timeout [ 343.541930][ T5630] Bluetooth: hci8: command tx timeout [ 344.580185][ T5625] Bluetooth: hci7: command tx timeout [ 345.540219][ T5625] Bluetooth: hci4: command tx timeout [ 345.620580][ T5630] Bluetooth: hci8: command tx timeout [ 345.623828][ T5625] Bluetooth: hci6: command tx timeout [ 346.660364][ T5625] Bluetooth: hci7: command tx timeout [ 347.621376][ T5625] Bluetooth: hci4: command tx timeout [ 347.700266][ T5625] Bluetooth: hci6: command tx timeout [ 347.700275][ T5630] Bluetooth: hci8: command tx timeout [ 348.740393][ T5625] Bluetooth: hci7: command tx timeout [ 349.780180][ T5625] Bluetooth: hci8: command tx timeout [ 355.061056][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 150 seconds [ 355.072164][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 150 seconds [ 364.020488][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 270 seconds [ 364.031398][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 270 seconds [ 364.042734][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 270 seconds [ 364.053846][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 270 seconds [ 378.742785][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749267][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.423075][ T5630] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 379.434215][ T5630] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 379.442633][ T5630] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 379.452022][ T5630] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 379.459608][ T5630] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 379.675464][T16200] lo speed is unknown, defaulting to 1000 [ 379.795024][T16200] »»»»»» speed is unknown, defaulting to 1000 [ 379.985189][T16200] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.992526][T16200] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.000328][T16200] bridge_slave_0: entered allmulticast mode [ 380.007494][T16200] bridge_slave_0: entered promiscuous mode [ 380.015826][T16200] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.024450][T16200] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.032171][T16200] bridge_slave_1: entered allmulticast mode [ 380.039322][T16200] bridge_slave_1: entered promiscuous mode [ 380.067822][T16200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.079750][T16200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.109514][T16200] team0: Port device team_slave_0 added [ 380.117210][T16200] team0: Port device team_slave_1 added [ 380.141201][T16200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.148192][T16200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.174518][T16200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.186579][T16200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.193572][T16200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.219722][T16200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.260901][T16200] hsr_slave_0: entered promiscuous mode [ 380.267209][T16200] hsr_slave_1: entered promiscuous mode [ 380.273617][T16200] debugfs: 'hsr0' already exists in 'hsr' [ 380.279338][T16200] Cannot create hsr debugfs directory [ 380.406410][T16200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.498271][T16200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.574357][T16200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.665411][T16200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.540060][ T5625] Bluetooth: hci9: command tx timeout [ 383.620056][ T5625] Bluetooth: hci9: command tx timeout [ 383.810411][ T4994] udevd[4994]: worker [7199] /devices/virtual/block/nbd1 timeout; kill it [ 383.819140][ T4994] udevd[4994]: seq 14414 '/devices/virtual/block/nbd1' killed [ 385.144165][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 180 seconds [ 385.155333][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 180 seconds [ 385.700696][ T5625] Bluetooth: hci9: command tx timeout [ 387.780059][ T5625] Bluetooth: hci9: command tx timeout [ 394.120205][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 300 seconds [ 394.131374][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 300 seconds [ 394.142473][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 300 seconds [ 394.153489][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 300 seconds [ 399.504191][ T5630] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 399.515743][ T5630] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 399.530193][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 399.543505][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 399.549106][ T4944] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 399.553443][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 399.563226][ T4944] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 399.571113][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 399.593371][ T4944] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 399.603014][ T4944] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 399.951096][T16220] lo speed is unknown, defaulting to 1000 [ 400.081302][T16222] lo speed is unknown, defaulting to 1000 [ 400.081811][T16220] »»»»»» speed is unknown, defaulting to 1000 [ 400.291658][T16222] »»»»»» speed is unknown, defaulting to 1000 [ 400.458265][T16220] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.466366][T16220] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.474721][T16220] bridge_slave_0: entered allmulticast mode [ 400.484550][T16220] bridge_slave_0: entered promiscuous mode [ 400.509582][T16220] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.517509][T16220] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.526019][T16220] bridge_slave_1: entered allmulticast mode [ 400.534643][T16220] bridge_slave_1: entered promiscuous mode [ 400.546028][ T5630] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 400.556999][ T5630] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 400.569227][ T5630] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 400.582511][ T5630] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 400.591988][ T5630] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 400.623874][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.647094][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.719714][T16220] team0: Port device team_slave_0 added [ 400.728527][T16220] team0: Port device team_slave_1 added [ 400.779613][T16220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.800038][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.826994][T16220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.839751][T16220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.849211][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.875995][T16220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.019015][T16220] hsr_slave_0: entered promiscuous mode [ 401.027175][T16220] hsr_slave_1: entered promiscuous mode [ 401.034166][T16220] debugfs: 'hsr0' already exists in 'hsr' [ 401.040596][T16220] Cannot create hsr debugfs directory [ 401.061491][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.068669][T16222] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.076255][T16222] bridge_slave_0: entered allmulticast mode [ 401.083667][T16222] bridge_slave_0: entered promiscuous mode [ 401.094562][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.101944][T16222] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.109212][T16222] bridge_slave_1: entered allmulticast mode [ 401.117097][T16222] bridge_slave_1: entered promiscuous mode [ 401.201923][T16222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.216657][T16222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.217590][T16249] lo speed is unknown, defaulting to 1000 [ 401.287319][T16222] team0: Port device team_slave_0 added [ 401.313727][T16222] team0: Port device team_slave_1 added [ 401.407237][T16222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.415029][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.441963][T16222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.455205][T16222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.463994][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.498125][T16222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.519131][T16249] »»»»»» speed is unknown, defaulting to 1000 [ 401.621320][ T5630] Bluetooth: hci11: command tx timeout [ 401.621885][ T50] Bluetooth: hci10: command tx timeout [ 401.637947][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 401.652560][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 401.670553][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 401.684377][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 401.695059][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 401.742235][T16222] hsr_slave_0: entered promiscuous mode [ 401.749124][T16222] hsr_slave_1: entered promiscuous mode [ 401.758029][T16222] debugfs: 'hsr0' already exists in 'hsr' [ 401.765979][T16222] Cannot create hsr debugfs directory [ 402.175363][T16266] lo speed is unknown, defaulting to 1000 [ 402.445711][T16249] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.453471][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.461191][T16249] bridge_slave_0: entered allmulticast mode [ 402.468281][T16249] bridge_slave_0: entered promiscuous mode [ 402.477937][T16249] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.478289][T16266] »»»»»» speed is unknown, defaulting to 1000 [ 402.485957][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.498896][T16249] bridge_slave_1: entered allmulticast mode [ 402.506807][T16249] bridge_slave_1: entered promiscuous mode [ 402.564385][T16249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.591140][T16249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.642307][T16249] team0: Port device team_slave_0 added [ 402.655160][T16249] team0: Port device team_slave_1 added [ 402.670073][ T50] Bluetooth: hci12: command tx timeout [ 402.688621][T16249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.695730][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.723559][T16249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.747363][T16249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.754561][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.781641][T16249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.882316][T16249] hsr_slave_0: entered promiscuous mode [ 402.889045][T16249] hsr_slave_1: entered promiscuous mode [ 402.895658][T16249] debugfs: 'hsr0' already exists in 'hsr' [ 402.902611][T16249] Cannot create hsr debugfs directory [ 403.155023][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.162383][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.169708][T16266] bridge_slave_0: entered allmulticast mode [ 403.177618][T16266] bridge_slave_0: entered promiscuous mode [ 403.192849][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.201260][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.208596][T16266] bridge_slave_1: entered allmulticast mode [ 403.216507][T16266] bridge_slave_1: entered promiscuous mode [ 403.264432][T16266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.276634][T16266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.307969][T16266] team0: Port device team_slave_0 added [ 403.315953][T16266] team0: Port device team_slave_1 added [ 403.339635][T16266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.346885][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.373142][T16266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.390030][T16266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.397012][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.425781][T16266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.476886][T16266] hsr_slave_0: entered promiscuous mode [ 403.483865][T16266] hsr_slave_1: entered promiscuous mode [ 403.492352][T16266] debugfs: 'hsr0' already exists in 'hsr' [ 403.498119][T16266] Cannot create hsr debugfs directory [ 403.702897][ T4944] Bluetooth: hci10: command tx timeout [ 403.708898][ T50] Bluetooth: hci11: command tx timeout [ 403.780737][ T50] Bluetooth: hci13: command tx timeout [ 404.740662][ T50] Bluetooth: hci12: command tx timeout [ 405.780656][ T50] Bluetooth: hci11: command tx timeout [ 405.780953][ T4944] Bluetooth: hci10: command tx timeout [ 405.860268][ T4944] Bluetooth: hci13: command tx timeout [ 406.820732][ T4944] Bluetooth: hci12: command tx timeout [ 407.860372][ T4944] Bluetooth: hci11: command tx timeout [ 407.860394][ T50] Bluetooth: hci10: command tx timeout [ 407.940406][ T4944] Bluetooth: hci13: command tx timeout [ 408.900038][ T4944] Bluetooth: hci12: command tx timeout [ 410.020455][ T4944] Bluetooth: hci13: command tx timeout [ 415.222581][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 210 seconds [ 415.233534][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 210 seconds [ 421.781494][ T4944] Bluetooth: hci5: command 0x0406 tx timeout [ 424.190678][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 330 seconds [ 424.202030][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 330 seconds [ 424.213179][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 330 seconds [ 424.224212][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 330 seconds [ 439.634878][ T4944] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 439.645179][ T4944] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 439.655770][ T4944] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 439.668746][ T4944] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 439.680918][ T4944] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 439.900769][T16294] lo speed is unknown, defaulting to 1000 [ 440.018318][T16294] »»»»»» speed is unknown, defaulting to 1000 [ 440.188869][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.195705][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.225343][T16294] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.233590][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.241412][T16294] bridge_slave_0: entered allmulticast mode [ 440.248601][T16294] bridge_slave_0: entered promiscuous mode [ 440.259222][T16294] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.268006][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.275704][T16294] bridge_slave_1: entered allmulticast mode [ 440.283584][T16294] bridge_slave_1: entered promiscuous mode [ 440.311782][T16294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.324111][T16294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.354873][T16294] team0: Port device team_slave_0 added [ 440.363635][T16294] team0: Port device team_slave_1 added [ 440.387951][T16294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.395211][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.422313][T16294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.435528][T16294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.442560][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.469258][T16294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.512440][T16294] hsr_slave_0: entered promiscuous mode [ 440.518826][T16294] hsr_slave_1: entered promiscuous mode [ 440.525336][T16294] debugfs: 'hsr0' already exists in 'hsr' [ 440.531442][T16294] Cannot create hsr debugfs directory [ 441.700414][ T5625] Bluetooth: hci14: command tx timeout [ 442.260073][ T5625] Bluetooth: hci0: command 0x0c20 tx timeout [ 442.260750][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 443.780435][ T4944] Bluetooth: hci14: command tx timeout [ 445.309346][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 240 seconds [ 445.320930][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 240 seconds [ 445.860772][ T4944] Bluetooth: hci14: command tx timeout [ 447.940229][ T4944] Bluetooth: hci14: command tx timeout [ 454.262140][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 360 seconds [ 454.273027][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 360 seconds [ 454.284538][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 360 seconds [ 454.295801][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 360 seconds [ 459.736941][ T5630] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 459.741236][ T5625] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 459.749504][ T5630] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 459.762908][ T5625] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 459.765620][ T5630] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 459.771328][ T5625] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 459.792063][ T5625] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 459.800399][ T5630] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 459.801365][ T5625] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 459.811889][ T5630] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 460.203284][T16314] lo speed is unknown, defaulting to 1000 [ 460.319270][T16314] »»»»»» speed is unknown, defaulting to 1000 [ 460.319338][T16315] lo speed is unknown, defaulting to 1000 [ 460.531764][T16315] »»»»»» speed is unknown, defaulting to 1000 [ 460.722407][T16314] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.730380][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.737836][T16314] bridge_slave_0: entered allmulticast mode [ 460.746492][T16314] bridge_slave_0: entered promiscuous mode [ 460.768473][T16314] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.776763][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.784626][T16314] bridge_slave_1: entered allmulticast mode [ 460.793911][T16314] bridge_slave_1: entered promiscuous mode [ 460.813954][ T4944] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 460.827741][ T4944] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 460.838989][ T4944] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 460.851146][ T4944] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 460.861521][ T4944] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 460.874320][T16314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.902696][T16314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.973964][T16314] team0: Port device team_slave_0 added [ 460.987895][T16314] team0: Port device team_slave_1 added [ 461.035272][T16314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.046542][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.073650][T16314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.108324][T16314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.116085][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.147797][T16314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.273347][T16315] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.280783][T16315] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.288166][T16315] bridge_slave_0: entered allmulticast mode [ 461.298515][T16315] bridge_slave_0: entered promiscuous mode [ 461.314380][T16314] hsr_slave_0: entered promiscuous mode [ 461.323087][T16314] hsr_slave_1: entered promiscuous mode [ 461.329564][T16314] debugfs: 'hsr0' already exists in 'hsr' [ 461.335445][T16314] Cannot create hsr debugfs directory [ 461.341421][T16315] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.349675][T16315] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.357726][T16315] bridge_slave_1: entered allmulticast mode [ 461.365283][T16315] bridge_slave_1: entered promiscuous mode [ 461.404792][T16315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.430448][T16315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.445724][T16343] lo speed is unknown, defaulting to 1000 [ 461.536011][T16315] team0: Port device team_slave_0 added [ 461.565389][T16315] team0: Port device team_slave_1 added [ 461.631357][T16315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.638385][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.665366][T16315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.678872][T16315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.687437][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.721631][T16315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.760948][T16343] »»»»»» speed is unknown, defaulting to 1000 [ 461.845775][ T5630] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 461.861029][ T50] Bluetooth: hci15: command tx timeout [ 461.870776][ T50] Bluetooth: hci16: command tx timeout [ 461.870878][ T5630] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 461.885291][ T5630] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 461.895540][ T5630] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 461.903468][T16315] hsr_slave_0: entered promiscuous mode [ 461.903496][ T5630] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 461.911247][T16315] hsr_slave_1: entered promiscuous mode [ 461.923711][T16315] debugfs: 'hsr0' already exists in 'hsr' [ 461.932652][T16315] Cannot create hsr debugfs directory [ 462.387017][T16360] lo speed is unknown, defaulting to 1000 [ 462.638645][T16360] »»»»»» speed is unknown, defaulting to 1000 [ 462.638784][T16343] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.653406][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.661790][T16343] bridge_slave_0: entered allmulticast mode [ 462.669003][T16343] bridge_slave_0: entered promiscuous mode [ 462.681923][T16343] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.689221][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.697058][T16343] bridge_slave_1: entered allmulticast mode [ 462.704571][T16343] bridge_slave_1: entered promiscuous mode [ 462.740192][ T5630] Bluetooth: hci7: command 0x0406 tx timeout [ 462.746430][ T4944] Bluetooth: hci4: command 0x0406 tx timeout [ 462.746456][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 462.817678][T16343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.837997][T16343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.890434][T16343] team0: Port device team_slave_0 added [ 462.925692][T16343] team0: Port device team_slave_1 added [ 462.980794][ T5625] Bluetooth: hci17: command tx timeout [ 462.987091][T16343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.987109][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.987128][T16343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.057192][T16343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.064461][T16343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.092124][T16343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.216621][T16343] hsr_slave_0: entered promiscuous mode [ 463.226195][T16343] hsr_slave_1: entered promiscuous mode [ 463.234994][T16343] debugfs: 'hsr0' already exists in 'hsr' [ 463.240804][T16343] Cannot create hsr debugfs directory [ 463.334382][T16360] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.341672][T16360] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.348919][T16360] bridge_slave_0: entered allmulticast mode [ 463.356882][T16360] bridge_slave_0: entered promiscuous mode [ 463.385918][T16360] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.393402][T16360] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.401066][T16360] bridge_slave_1: entered allmulticast mode [ 463.408183][T16360] bridge_slave_1: entered promiscuous mode [ 463.487599][T16360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.511281][T16360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.574664][T16360] team0: Port device team_slave_0 added [ 463.587923][T16360] team0: Port device team_slave_1 added [ 463.641620][T16360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.648581][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.675433][T16360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.688151][T16360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.695446][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.722072][T16360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.783316][T16360] hsr_slave_0: entered promiscuous mode [ 463.790205][T16360] hsr_slave_1: entered promiscuous mode [ 463.796464][T16360] debugfs: 'hsr0' already exists in 'hsr' [ 463.804998][T16360] Cannot create hsr debugfs directory [ 463.941566][ T5625] Bluetooth: hci16: command tx timeout [ 463.941686][ T5636] Bluetooth: hci15: command tx timeout [ 463.953299][T11017] Bluetooth: hci18: command tx timeout [ 465.060831][ T5636] Bluetooth: hci17: command tx timeout [ 466.020207][T11017] Bluetooth: hci16: command tx timeout [ 466.020590][ T5625] Bluetooth: hci15: command tx timeout [ 466.025843][ T50] Bluetooth: hci18: command tx timeout [ 467.140085][ T50] Bluetooth: hci17: command tx timeout [ 467.860528][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 468.100190][ T50] Bluetooth: hci16: command tx timeout [ 468.105730][T11017] Bluetooth: hci15: command tx timeout [ 468.112851][ T5636] Bluetooth: hci18: command tx timeout [ 469.220600][ T50] Bluetooth: hci17: command tx timeout [ 470.179992][ T50] Bluetooth: hci18: command tx timeout [ 475.381005][ T11] block nbd1: Possible stuck request ffff888027307000: control (read@0,1024B). Runtime 270 seconds [ 475.392767][ T11] block nbd1: Possible stuck request ffff8880273071c0: control (read@1024,1024B). Runtime 270 seconds [ 481.780423][ T30] INFO: task udevd:5628 blocked in I/O wait for more than 143 seconds. [ 481.789028][ T30] Not tainted syzkaller #0 [ 481.794350][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 481.803455][ T30] task:udevd state:D stack:22088 pid:5628 tgid:5628 ppid:4994 task_flags:0x400140 flags:0x00080002 [ 481.815636][ T30] Call Trace: [ 481.818984][ T30] [ 481.822063][ T30] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 481.826588][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 481.832780][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 481.838219][ T30] ? __pfx___schedule+0x10/0x10 [ 481.843864][ T30] ? schedule+0x90/0x360 [ 481.848185][ T30] schedule+0x164/0x360 [ 481.852539][ T30] io_schedule+0x7f/0xd0 [ 481.856823][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 481.862745][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 481.891303][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 481.897196][ T30] ? filemap_read_folio+0x23e/0x3b0 [ 481.905672][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 481.919584][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 481.925694][ T30] do_read_cache_folio+0x1ad/0x590 [ 481.933983][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 481.939539][ T30] read_part_sector+0xb6/0x2b0 [ 481.946463][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 481.954051][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 481.961615][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 481.967230][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 481.973410][ T30] bdev_disk_changed+0x817/0x1770 [ 481.978485][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 481.984392][ T30] blkdev_get_whole+0x380/0x510 [ 481.989271][ T30] bdev_open+0x31e/0xd30 [ 481.993751][ T30] blkdev_open+0x470/0x610 [ 481.998229][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 482.003379][ T30] do_dentry_open+0x785/0x14e0 [ 482.008236][ T30] vfs_open+0x3b/0x340 [ 482.013047][ T30] ? path_openat+0x2df0/0x3860 [ 482.017894][ T30] path_openat+0x2e08/0x3860 [ 482.022983][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 482.028409][ T30] ? stack_depot_save_flags+0x33/0x810 [ 482.034837][ T30] ? __pfx_path_openat+0x10/0x10 [ 482.040372][ T30] ? __x64_sys_openat+0x138/0x170 [ 482.045425][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 482.050734][ T30] do_file_open+0x23e/0x4a0 [ 482.055372][ T30] ? __pfx_do_file_open+0x10/0x10 [ 482.060826][ T30] ? _raw_spin_unlock+0x28/0x50 [ 482.065808][ T30] ? alloc_fd+0x64b/0x6c0 [ 482.070824][ T30] do_sys_openat2+0x113/0x200 [ 482.075538][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 482.081112][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.086325][ T30] ? rcu_is_watching+0x15/0xb0 [ 482.091284][ T30] __x64_sys_openat+0x138/0x170 [ 482.096167][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.102965][ T30] do_syscall_64+0x15f/0xf80 [ 482.107729][ T30] ? clear_bhb_loop+0x40/0x90 [ 482.112627][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.118555][ T30] RIP: 0033:0x7f8a91ea7407 [ 482.123163][ T30] RSP: 002b:00007ffc93298d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 482.132271][ T30] RAX: ffffffffffffffda RBX: 00007f8a9258f880 RCX: 00007f8a91ea7407 [ 482.141226][ T30] RDX: 00000000000a0800 RSI: 000055b2b07e1920 RDI: ffffffffffffff9c [ 482.149328][ T30] RBP: 000055b2b07b9910 R08: 0000000000000000 R09: 0000000000000000 [ 482.157492][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b2b07cdba0 [ 482.165835][ T30] R13: 000055b2b07c7190 R14: 0000000000000000 R15: 000055b2b07cdba0 [ 482.174109][ T30] [ 482.177247][ T30] INFO: task syz-executor:15854 blocked for more than 143 seconds. [ 482.185377][ T30] Not tainted syzkaller #0 [ 482.191035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.199962][ T30] task:syz-executor state:D stack:22072 pid:15854 tgid:15854 ppid:1 task_flags:0x400140 flags:0x00080002 [ 482.212052][ T30] Call Trace: [ 482.215340][ T30] [ 482.218258][ T30] __schedule+0x1821/0x5740 [ 482.223371][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 482.228370][ T30] ? __pfx___schedule+0x10/0x10 [ 482.233499][ T30] ? schedule+0x90/0x360 [ 482.237796][ T30] schedule+0x164/0x360 [ 482.242959][ T30] schedule_preempt_disabled+0x13/0x30 [ 482.248453][ T30] __mutex_lock+0x7f7/0x1550 [ 482.253631][ T30] ? __mutex_lock+0x608/0x1550 [ 482.258603][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 482.264082][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 482.269152][ T30] ? radix_tree_lookup+0x240/0x290 [ 482.274565][ T30] genl_rcv_msg+0x10b/0x7a0 [ 482.279122][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.284739][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 482.290288][ T30] netlink_rcv_skb+0x232/0x4b0 [ 482.295092][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.300198][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.305593][ T30] ? down_read+0x270/0x2e0 [ 482.310713][ T30] ? genl_rcv+0xd/0x40 [ 482.314816][ T30] genl_rcv+0x28/0x40 [ 482.318790][ T30] netlink_unicast+0x75c/0x8e0 [ 482.323728][ T30] netlink_sendmsg+0x813/0xb40 [ 482.328529][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.334003][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 482.338979][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.345565][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.351049][ T30] __sys_sendto+0x672/0x710 [ 482.355584][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 482.360704][ T30] ? fd_install+0x94/0x3d0 [ 482.365130][ T30] ? fd_install+0x306/0x3d0 [ 482.369622][ T30] __x64_sys_sendto+0xde/0x100 [ 482.374927][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.381099][ T30] do_syscall_64+0x15f/0xf80 [ 482.385794][ T30] ? clear_bhb_loop+0x40/0x90 [ 482.390734][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.396659][ T30] RIP: 0033:0x7f3710d5d68e [ 482.401645][ T30] RSP: 002b:00007ffcd5dcff18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 482.410314][ T30] RAX: ffffffffffffffda RBX: 0000555593947500 RCX: 00007f3710d5d68e [ 482.418323][ T30] RDX: 0000000000000028 RSI: 00007f3711b44670 RDI: 0000000000000003 [ 482.426718][ T30] RBP: 0000000000000001 R08: 00007ffcd5dcff94 R09: 000000000000000c [ 482.435532][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 482.444558][ T30] R13: 00007ffcd5dcffe8 R14: 00007f3711b44670 R15: 0000000000000000 [ 482.452840][ T30] [ 482.455927][ T30] INFO: task syz.0.3080:16088 blocked for more than 144 seconds. [ 482.464272][ T30] Not tainted syzkaller #0 [ 482.469224][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.478106][ T30] task:syz.0.3080 state:D stack:26328 pid:16088 tgid:16087 ppid:5626 task_flags:0x480140 flags:0x00080002 [ 482.490509][ T30] Call Trace: [ 482.493804][ T30] [ 482.496725][ T30] __schedule+0x1821/0x5740 [ 482.501693][ T30] ? __pfx___schedule+0x10/0x10 [ 482.506591][ T30] ? schedule+0x90/0x360 [ 482.510983][ T30] schedule+0x164/0x360 [ 482.515179][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 482.521307][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 482.527390][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 482.533888][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 482.540163][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 482.547064][ T30] nbd_set_size+0x454/0x680 [ 482.552262][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 482.557388][ T30] ? nla_memcpy+0x5b/0xc0 [ 482.561875][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 482.567194][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 482.573073][ T30] ? rcu_is_watching+0x15/0xb0 [ 482.577868][ T30] ? trace_kmalloc+0x2a/0xf0 [ 482.583264][ T30] ? __nla_parse+0x40/0x60 [ 482.587712][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 482.594400][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 482.600853][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 482.606410][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 482.612963][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 482.617974][ T30] genl_rcv_msg+0x61c/0x7a0 [ 482.622579][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.627613][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 482.633518][ T30] netlink_rcv_skb+0x232/0x4b0 [ 482.638315][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.643913][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.650172][ T30] ? down_read+0x270/0x2e0 [ 482.654627][ T30] ? genl_rcv+0xd/0x40 [ 482.658686][ T30] genl_rcv+0x28/0x40 [ 482.662947][ T30] netlink_unicast+0x75c/0x8e0 [ 482.667749][ T30] netlink_sendmsg+0x813/0xb40 [ 482.673024][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.678326][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 482.683359][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.688653][ T30] ____sys_sendmsg+0x972/0x9f0 [ 482.693594][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.698921][ T30] ? import_iovec+0x73/0xa0 [ 482.703835][ T30] ___sys_sendmsg+0x2a5/0x360 [ 482.708511][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 482.713603][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.718836][ T30] ? futex_wake+0x4ac/0x580 [ 482.723560][ T30] ? __fget_files+0x2a/0x420 [ 482.728180][ T30] ? __fget_files+0x3a0/0x420 [ 482.733416][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 482.738380][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.744236][ T30] ? rcu_is_watching+0x15/0xb0 [ 482.749025][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.756032][ T30] do_syscall_64+0x15f/0xf80 [ 482.761299][ T30] ? trace_irq_disable+0x3b/0x140 [ 482.766373][ T30] ? clear_bhb_loop+0x40/0x90 [ 482.771265][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.777193][ T30] RIP: 0033:0x7f9c3899ce59 [ 482.781777][ T30] RSP: 002b:00007f9c398e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.790773][ T30] RAX: ffffffffffffffda RBX: 00007f9c38c15fa0 RCX: 00007f9c3899ce59 [ 482.798763][ T30] RDX: 0000000004000000 RSI: 00002000000004c0 RDI: 0000000000000007 [ 482.806828][ T30] RBP: 00007f9c38a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 482.814972][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.823824][ T30] R13: 00007f9c38c16038 R14: 00007f9c38c15fa0 R15: 00007fff9edf3648 [ 482.832147][ T30] [ 482.835300][ T30] INFO: task syz.0.3080:16095 blocked for more than 144 seconds. [ 482.843510][ T30] Not tainted syzkaller #0 [ 482.848492][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.857712][ T30] task:syz.0.3080 state:D stack:28760 pid:16095 tgid:16087 ppid:5626 task_flags:0x400040 flags:0x00080002 [ 482.870080][ T30] Call Trace: [ 482.873403][ T30] [ 482.876356][ T30] __schedule+0x1821/0x5740 [ 482.881345][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 482.886340][ T30] ? __pfx___schedule+0x10/0x10 [ 482.891592][ T30] ? schedule+0x90/0x360 [ 482.895896][ T30] schedule+0x164/0x360 [ 482.900584][ T30] schedule_preempt_disabled+0x13/0x30 [ 482.906089][ T30] __mutex_lock+0x7f7/0x1550 [ 482.912320][ T30] ? kernel_text_address+0xa5/0xe0 [ 482.917479][ T30] ? __mutex_lock+0x608/0x1550 [ 482.922317][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 482.926998][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 482.932225][ T30] ? stack_trace_save+0xa9/0x100 [ 482.937205][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 482.942445][ T30] ? radix_tree_lookup+0x240/0x290 [ 482.947560][ T30] genl_rcv_msg+0x10b/0x7a0 [ 482.952300][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.957369][ T30] netlink_rcv_skb+0x232/0x4b0 [ 482.962177][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 482.967220][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.972962][ T30] ? down_read+0x270/0x2e0 [ 482.977425][ T30] ? genl_rcv+0xd/0x40 [ 482.981769][ T30] genl_rcv+0x28/0x40 [ 482.985792][ T30] netlink_unicast+0x75c/0x8e0 [ 482.991008][ T30] netlink_sendmsg+0x813/0xb40 [ 482.995834][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.001473][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.006439][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.012030][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.017347][ T30] __sys_sendto+0x672/0x710 [ 483.022147][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 483.027231][ T30] ? exc_page_fault+0x6a/0xc0 [ 483.032296][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 483.037595][ T30] __x64_sys_sendto+0xde/0x100 [ 483.042422][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.048495][ T30] do_syscall_64+0x15f/0xf80 [ 483.053208][ T30] ? trace_irq_disable+0x3b/0x140 [ 483.058288][ T30] ? clear_bhb_loop+0x40/0x90 [ 483.064017][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.070021][ T30] RIP: 0033:0x7f9c3895d68e [ 483.074454][ T30] RSP: 002b:00007f9c398c5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.083003][ T30] RAX: ffffffffffffffda RBX: 00007f9c398c76c0 RCX: 00007f9c3895d68e [ 483.091391][ T30] RDX: 0000000000000028 RSI: 00007f9c398c6000 RDI: 0000000000000004 [ 483.099399][ T30] RBP: 0000000000000000 R08: 00007f9c398c5f04 R09: 000000000000000c [ 483.107447][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 483.115502][ T30] R13: 00007f9c398c5f58 R14: 00007f9c398c6000 R15: 0000000000000000 [ 483.123814][ T30] [ 483.126868][ T30] INFO: task syz.1.3081:16092 blocked for more than 144 seconds. [ 483.134917][ T30] Not tainted syzkaller #0 [ 483.140280][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.148971][ T30] task:syz.1.3081 state:D stack:27904 pid:16092 tgid:16091 ppid:15384 task_flags:0x400040 flags:0x00080002 [ 483.161330][ T30] Call Trace: [ 483.164640][ T30] [ 483.167560][ T30] __schedule+0x1821/0x5740 [ 483.172303][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 483.177296][ T30] ? __pfx___schedule+0x10/0x10 [ 483.182203][ T30] ? schedule+0x90/0x360 [ 483.186466][ T30] schedule+0x164/0x360 [ 483.190999][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.196477][ T30] __mutex_lock+0x7f7/0x1550 [ 483.201129][ T30] ? __mutex_lock+0x608/0x1550 [ 483.205901][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 483.210700][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.215760][ T30] ? radix_tree_lookup+0x240/0x290 [ 483.221410][ T30] genl_rcv_msg+0x10b/0x7a0 [ 483.225959][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.231028][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.236454][ T30] netlink_rcv_skb+0x232/0x4b0 [ 483.241452][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.246517][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.252209][ T30] ? down_read+0x270/0x2e0 [ 483.256661][ T30] ? genl_rcv+0xd/0x40 [ 483.260998][ T30] genl_rcv+0x28/0x40 [ 483.264994][ T30] netlink_unicast+0x75c/0x8e0 [ 483.269839][ T30] netlink_sendmsg+0x813/0xb40 [ 483.274666][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.280250][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.285192][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.290610][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.295932][ T30] __sys_sendto+0x672/0x710 [ 483.306107][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 483.311503][ T30] ? exc_page_fault+0x6a/0xc0 [ 483.316204][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 483.321648][ T30] __x64_sys_sendto+0xde/0x100 [ 483.326431][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.332638][ T30] do_syscall_64+0x15f/0xf80 [ 483.337260][ T30] ? trace_irq_disable+0x3b/0x140 [ 483.342572][ T30] ? clear_bhb_loop+0x40/0x90 [ 483.347251][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.353272][ T30] RIP: 0033:0x7ff80f55d68e [ 483.357750][ T30] RSP: 002b:00007ff810480e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.366250][ T30] RAX: ffffffffffffffda RBX: 00007ff8104826c0 RCX: 00007ff80f55d68e [ 483.374524][ T30] RDX: 0000000000000020 RSI: 00007ff810481000 RDI: 0000000000000004 [ 483.382807][ T30] RBP: 0000000000000000 R08: 00007ff810480f04 R09: 000000000000000c [ 483.390888][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 483.398884][ T30] R13: 00007ff810480f58 R14: 00007ff810481000 R15: 0000000000000000 [ 483.407184][ T30] [ 483.410315][ T30] INFO: task syz.1.3081:16094 blocked for more than 144 seconds. [ 483.418036][ T30] Not tainted syzkaller #0 [ 483.423039][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.431941][ T30] task:syz.1.3081 state:D stack:27904 pid:16094 tgid:16091 ppid:15384 task_flags:0x400040 flags:0x00080002 [ 483.443942][ T30] Call Trace: [ 483.447226][ T30] [ 483.450221][ T30] __schedule+0x1821/0x5740 [ 483.454749][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 483.459690][ T30] ? __pfx___schedule+0x10/0x10 [ 483.465263][ T30] ? schedule+0x90/0x360 [ 483.469577][ T30] schedule+0x164/0x360 [ 483.473817][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.479299][ T30] __mutex_lock+0x7f7/0x1550 [ 483.483947][ T30] ? __mutex_lock+0x608/0x1550 [ 483.488723][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 483.493704][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.498831][ T30] ? radix_tree_lookup+0x240/0x290 [ 483.504035][ T30] genl_rcv_msg+0x10b/0x7a0 [ 483.508558][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.513681][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.519097][ T30] netlink_rcv_skb+0x232/0x4b0 [ 483.524181][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.529208][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.534608][ T30] ? down_read+0x270/0x2e0 [ 483.539042][ T30] ? genl_rcv+0xd/0x40 [ 483.543310][ T30] genl_rcv+0x28/0x40 [ 483.547310][ T30] netlink_unicast+0x75c/0x8e0 [ 483.552417][ T30] netlink_sendmsg+0x813/0xb40 [ 483.557196][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.562569][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.567523][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.573029][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.578385][ T30] __sys_sendto+0x672/0x710 [ 483.583191][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 483.588249][ T30] ? fd_install+0x94/0x3d0 [ 483.592710][ T30] ? fd_install+0x306/0x3d0 [ 483.597227][ T30] __x64_sys_sendto+0xde/0x100 [ 483.602088][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.608165][ T30] do_syscall_64+0x15f/0xf80 [ 483.613056][ T30] ? trace_irq_disable+0x3b/0x140 [ 483.618096][ T30] ? clear_bhb_loop+0x40/0x90 [ 483.623041][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.629129][ T30] RIP: 0033:0x7ff80f55d68e [ 483.633655][ T30] RSP: 002b:00007ff81045fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.642381][ T30] RAX: ffffffffffffffda RBX: 00007ff8104616c0 RCX: 00007ff80f55d68e [ 483.650439][ T30] RDX: 0000000000000020 RSI: 00007ff810460000 RDI: 0000000000000005 [ 483.658517][ T30] RBP: 0000000000000000 R08: 00007ff81045ff04 R09: 000000000000000c [ 483.666580][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 483.675025][ T30] R13: 00007ff81045ff58 R14: 00007ff810460000 R15: 0000000000000000 [ 483.683290][ T30] [ 483.686353][ T30] INFO: task syz.3.3084:16114 blocked for more than 145 seconds. [ 483.694798][ T30] Not tainted syzkaller #0 [ 483.700356][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.709075][ T30] task:syz.3.3084 state:D stack:27904 pid:16114 tgid:16113 ppid:5659 task_flags:0x400040 flags:0x00080002 [ 483.721107][ T30] Call Trace: [ 483.724404][ T30] [ 483.727327][ T30] __schedule+0x1821/0x5740 [ 483.732128][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 483.737096][ T30] ? __pfx___schedule+0x10/0x10 [ 483.742012][ T30] ? schedule+0x90/0x360 [ 483.746272][ T30] schedule+0x164/0x360 [ 483.750568][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.756081][ T30] __mutex_lock+0x7f7/0x1550 [ 483.761066][ T30] ? __mutex_lock+0x608/0x1550 [ 483.765855][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 483.770611][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.775648][ T30] ? radix_tree_lookup+0x240/0x290 [ 483.780945][ T30] genl_rcv_msg+0x10b/0x7a0 [ 483.785478][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.790993][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.796435][ T30] netlink_rcv_skb+0x232/0x4b0 [ 483.801372][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.806407][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.811867][ T30] ? down_read+0x270/0x2e0 [ 483.816292][ T30] ? genl_rcv+0xd/0x40 [ 483.820655][ T30] genl_rcv+0x28/0x40 [ 483.824635][ T30] netlink_unicast+0x75c/0x8e0 [ 483.829387][ T30] netlink_sendmsg+0x813/0xb40 [ 483.834288][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.839695][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.844696][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.850247][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.855533][ T30] __sys_sendto+0x672/0x710 [ 483.860559][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 483.865697][ T30] ? exc_page_fault+0x6a/0xc0 [ 483.870494][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 483.875806][ T30] __x64_sys_sendto+0xde/0x100 [ 483.880882][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.886941][ T30] do_syscall_64+0x15f/0xf80 [ 483.891585][ T30] ? trace_irq_disable+0x3b/0x140 [ 483.896640][ T30] ? clear_bhb_loop+0x40/0x90 [ 483.901522][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.907451][ T30] RIP: 0033:0x7fa78035d68e [ 483.912237][ T30] RSP: 002b:00007fa7812e7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.920724][ T30] RAX: ffffffffffffffda RBX: 00007fa7812e96c0 RCX: 00007fa78035d68e [ 483.928709][ T30] RDX: 0000000000000020 RSI: 00007fa7812e8000 RDI: 0000000000000003 [ 483.936748][ T30] RBP: 0000000000000000 R08: 00007fa7812e7f04 R09: 000000000000000c [ 483.945472][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 483.954028][ T30] R13: 00007fa7812e7f58 R14: 00007fa7812e8000 R15: 0000000000000000 [ 483.962101][ T30] [ 483.965137][ T30] INFO: task syz.3.3084:16116 blocked for more than 145 seconds. [ 483.973218][ T30] Not tainted syzkaller #0 [ 483.978238][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.986980][ T30] task:syz.3.3084 state:D stack:26752 pid:16116 tgid:16113 ppid:5659 task_flags:0x400040 flags:0x00080002 [ 483.999068][ T30] Call Trace: [ 484.002653][ T30] [ 484.005601][ T30] __schedule+0x1821/0x5740 [ 484.010495][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 484.015473][ T30] ? __pfx___schedule+0x10/0x10 [ 484.021146][ T30] ? schedule+0x90/0x360 [ 484.025448][ T30] schedule+0x164/0x360 [ 484.029616][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.035396][ T30] __mutex_lock+0x7f7/0x1550 [ 484.040147][ T30] ? __mutex_lock+0x608/0x1550 [ 484.044929][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 484.049601][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.054702][ T30] ? radix_tree_lookup+0x240/0x290 [ 484.060116][ T30] genl_rcv_msg+0x10b/0x7a0 [ 484.064660][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.069696][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 484.075208][ T30] netlink_rcv_skb+0x232/0x4b0 [ 484.080095][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.085142][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.090817][ T30] ? down_read+0x270/0x2e0 [ 484.095248][ T30] ? genl_rcv+0xd/0x40 [ 484.099311][ T30] genl_rcv+0x28/0x40 [ 484.103613][ T30] netlink_unicast+0x75c/0x8e0 [ 484.108524][ T30] netlink_sendmsg+0x813/0xb40 [ 484.113358][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.118677][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.124070][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.129387][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.134754][ T30] __sys_sendto+0x672/0x710 [ 484.139273][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 484.144384][ T30] ? fd_install+0x94/0x3d0 [ 484.148816][ T30] ? fd_install+0x306/0x3d0 [ 484.153643][ T30] __x64_sys_sendto+0xde/0x100 [ 484.158423][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.164577][ T30] do_syscall_64+0x15f/0xf80 [ 484.169192][ T30] ? trace_irq_disable+0x3b/0x140 [ 484.174296][ T30] ? clear_bhb_loop+0x40/0x90 [ 484.178981][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.185406][ T30] RIP: 0033:0x7fa78035d68e [ 484.191168][ T30] RSP: 002b:00007fa7812a5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.199638][ T30] RAX: ffffffffffffffda RBX: 00007fa7812a76c0 RCX: 00007fa78035d68e [ 484.208468][ T30] RDX: 0000000000000020 RSI: 00007fa7812a6000 RDI: 0000000000000008 [ 484.216833][ T30] RBP: 0000000000000000 R08: 00007fa7812a5f04 R09: 000000000000000c [ 484.225006][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 484.233681][ T30] R13: 00007fa7812a5f58 R14: 00007fa7812a6000 R15: 0000000000000000 [ 484.241867][ T30] [ 484.244950][ T30] INFO: task syz.2.3085:16119 blocked for more than 145 seconds. [ 484.252913][ T30] Not tainted syzkaller #0 [ 484.257884][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.267525][ T30] task:syz.2.3085 state:D stack:27904 pid:16119 tgid:16118 ppid:14890 task_flags:0x400040 flags:0x00080002 [ 484.279579][ T30] Call Trace: [ 484.283045][ T30] [ 484.286704][ T30] __schedule+0x1821/0x5740 [ 484.291842][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 484.296822][ T30] ? __pfx___schedule+0x10/0x10 [ 484.301925][ T30] ? schedule+0x90/0x360 [ 484.306216][ T30] schedule+0x164/0x360 [ 484.310527][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.316024][ T30] __mutex_lock+0x7f7/0x1550 [ 484.321468][ T30] ? __mutex_lock+0x608/0x1550 [ 484.326287][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 484.331198][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.336300][ T30] ? radix_tree_lookup+0x240/0x290 [ 484.342328][ T30] genl_rcv_msg+0x10b/0x7a0 [ 484.346885][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.352601][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 484.358049][ T30] netlink_rcv_skb+0x232/0x4b0 [ 484.360241][ T11] block nbd0: Possible stuck request ffff8880272e5080: control (read@0,1024B). Runtime 390 seconds [ 484.363571][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.374964][ T11] block nbd0: Possible stuck request ffff8880272e5240: control (read@1024,1024B). Runtime 390 seconds [ 484.379457][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.391970][ T11] block nbd0: Possible stuck request ffff8880272e5400: control (read@2048,1024B). Runtime 390 seconds [ 484.398388][ T30] ? down_read+0x270/0x2e0 [ 484.408117][ T11] block nbd0: Possible stuck request ffff8880272e55c0: control (read@3072,1024B). Runtime 390 seconds [ 484.413893][ T30] ? genl_rcv+0xd/0x40 [ 484.428394][ T30] genl_rcv+0x28/0x40 [ 484.432631][ T30] netlink_unicast+0x75c/0x8e0 [ 484.437438][ T30] netlink_sendmsg+0x813/0xb40 [ 484.442424][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.447889][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.453588][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.458924][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.464884][ T30] __sys_sendto+0x672/0x710 [ 484.469440][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 484.474782][ T30] ? exc_page_fault+0x6a/0xc0 [ 484.479511][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 484.485681][ T30] __x64_sys_sendto+0xde/0x100 [ 484.490950][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.497104][ T30] do_syscall_64+0x15f/0xf80 [ 484.502241][ T30] ? trace_irq_disable+0x3b/0x140 [ 484.507375][ T30] ? clear_bhb_loop+0x40/0x90 [ 484.512209][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.518139][ T30] RIP: 0033:0x7efe8175d68e [ 484.522630][ T30] RSP: 002b:00007efe8267fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.531296][ T30] RAX: ffffffffffffffda RBX: 00007efe826816c0 RCX: 00007efe8175d68e [ 484.539336][ T30] RDX: 0000000000000020 RSI: 00007efe82680000 RDI: 0000000000000004 [ 484.547542][ T30] RBP: 0000000000000000 R08: 00007efe8267ff04 R09: 000000000000000c [ 484.555683][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 484.564016][ T30] R13: 00007efe8267ff58 R14: 00007efe82680000 R15: 0000000000000000 [ 484.572239][ T30] [ 484.575330][ T30] INFO: task syz.2.3085:16120 blocked for more than 146 seconds. [ 484.583333][ T30] Not tainted syzkaller #0 [ 484.588364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.597456][ T30] task:syz.2.3085 state:D stack:27904 pid:16120 tgid:16118 ppid:14890 task_flags:0x400040 flags:0x00080002 [ 484.609476][ T30] Call Trace: [ 484.612827][ T30] [ 484.615767][ T30] __schedule+0x1821/0x5740 [ 484.620592][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 484.625737][ T30] ? __pfx___schedule+0x10/0x10 [ 484.630662][ T30] ? schedule+0x90/0x360 [ 484.634976][ T30] schedule+0x164/0x360 [ 484.639143][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.644662][ T30] __mutex_lock+0x7f7/0x1550 [ 484.649361][ T30] ? __mutex_lock+0x608/0x1550 [ 484.654508][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 484.659186][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.664588][ T30] ? radix_tree_lookup+0x240/0x290 [ 484.669785][ T30] genl_rcv_msg+0x10b/0x7a0 [ 484.674304][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.679333][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 484.685172][ T30] netlink_rcv_skb+0x232/0x4b0 [ 484.690649][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.696667][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.702310][ T30] ? down_read+0x270/0x2e0 [ 484.706762][ T30] ? genl_rcv+0xd/0x40 [ 484.711075][ T30] genl_rcv+0x28/0x40 [ 484.715080][ T30] netlink_unicast+0x75c/0x8e0 [ 484.720402][ T30] netlink_sendmsg+0x813/0xb40 [ 484.725213][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.730643][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.735706][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.741295][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.746621][ T30] __sys_sendto+0x672/0x710 [ 484.751426][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 484.756467][ T30] ? exc_page_fault+0x6a/0xc0 [ 484.761296][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 484.766626][ T30] __x64_sys_sendto+0xde/0x100 [ 484.771678][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.777798][ T30] do_syscall_64+0x15f/0xf80 [ 484.782732][ T30] ? trace_irq_disable+0x3b/0x140 [ 484.787787][ T30] ? clear_bhb_loop+0x40/0x90 [ 484.792646][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.798582][ T30] RIP: 0033:0x7efe8175d68e [ 484.803070][ T30] RSP: 002b:00007efe8265ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.811751][ T30] RAX: ffffffffffffffda RBX: 00007efe826606c0 RCX: 00007efe8175d68e [ 484.822896][ T30] RDX: 0000000000000020 RSI: 00007efe8265f000 RDI: 0000000000000003 [ 484.831210][ T30] RBP: 0000000000000000 R08: 00007efe8265ef04 R09: 000000000000000c [ 484.839214][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 484.847739][ T30] R13: 00007efe8265ef58 R14: 00007efe8265f000 R15: 0000000000000000 [ 484.856068][ T30] [ 484.859119][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 484.868375][ T30] INFO: task syz.2.3085:16121 blocked for more than 146 seconds. [ 484.877729][ T30] Not tainted syzkaller #0 [ 484.882888][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.891729][ T30] task:syz.2.3085 state:D stack:27904 pid:16121 tgid:16118 ppid:14890 task_flags:0x400040 flags:0x00080002 [ 484.904701][ T30] Call Trace: [ 484.908016][ T30] [ 484.911139][ T30] __schedule+0x1821/0x5740 [ 484.915686][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 484.920700][ T30] ? __pfx___schedule+0x10/0x10 [ 484.925677][ T30] ? schedule+0x90/0x360 [ 484.930380][ T30] schedule+0x164/0x360 [ 484.934611][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.940197][ T30] __mutex_lock+0x7f7/0x1550 [ 484.944809][ T30] ? __mutex_lock+0x608/0x1550 [ 484.949581][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 484.954399][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.959466][ T30] ? radix_tree_lookup+0x240/0x290 [ 484.965005][ T30] genl_rcv_msg+0x10b/0x7a0 [ 484.969544][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.974715][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 484.980495][ T30] netlink_rcv_skb+0x232/0x4b0 [ 484.985537][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.991071][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.996433][ T30] ? down_read+0x270/0x2e0 [ 485.000924][ T30] ? genl_rcv+0xd/0x40 [ 485.005016][ T30] genl_rcv+0x28/0x40 [ 485.009193][ T30] netlink_unicast+0x75c/0x8e0 [ 485.014175][ T30] netlink_sendmsg+0x813/0xb40 [ 485.019002][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.024585][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 485.029555][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.035072][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.040435][ T30] __sys_sendto+0x672/0x710 [ 485.044938][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 485.050382][ T30] ? exc_page_fault+0x6a/0xc0 [ 485.055104][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 485.060676][ T30] __x64_sys_sendto+0xde/0x100 [ 485.065523][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.071719][ T30] do_syscall_64+0x15f/0xf80 [ 485.076355][ T30] ? trace_irq_disable+0x3b/0x140 [ 485.081740][ T30] ? clear_bhb_loop+0x40/0x90 [ 485.086437][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.092461][ T30] RIP: 0033:0x7efe8175d68e [ 485.096912][ T30] RSP: 002b:00007efe8263de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.105395][ T30] RAX: ffffffffffffffda RBX: 00007efe8263f6c0 RCX: 00007efe8175d68e [ 485.113733][ T30] RDX: 0000000000000020 RSI: 00007efe8263e000 RDI: 0000000000000005 [ 485.121967][ T30] RBP: 0000000000000000 R08: 00007efe8263df04 R09: 000000000000000c [ 485.130041][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 485.138186][ T30] R13: 00007efe8263df58 R14: 00007efe8263e000 R15: 0000000000000000 [ 485.146697][ T30] [ 485.149783][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 485.158906][ T30] [ 485.158906][ T30] Showing all locks held in the system: [ 485.167144][ T30] 1 lock held by khungtaskd/30: [ 485.172178][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 485.182116][ T30] 2 locks held by getty/5379: [ 485.186907][ T30] #0: ffff888031baa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 485.196799][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 485.207163][ T30] 1 lock held by udevd/5628: [ 485.211871][ T30] #0: ffff88802719d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 485.221363][ T30] 1 lock held by udevd/7199: [ 485.226007][ T30] #0: ffff8880272a2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 485.235669][ T30] 2 locks held by syz-executor/15854: [ 485.241110][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.249307][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.258358][ T30] 6 locks held by syz.0.3080/16088: [ 485.263724][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.272012][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.281081][ T30] #2: ffff8880271daa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 485.291766][ T30] #3: ffff888026a563b8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 485.301396][ T30] #4: ffff888026a55d80 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 485.313549][ T30] #5: ffff888026a55db8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 485.326173][ T30] 2 locks held by syz.0.3080/16095: [ 485.331463][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.339682][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.348817][ T30] 2 locks held by syz.1.3081/16092: [ 485.354419][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.362668][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.371705][ T30] 2 locks held by syz.1.3081/16094: [ 485.376905][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.389277][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.398569][ T30] 2 locks held by syz.3.3084/16114: [ 485.404165][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.413809][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.423123][ T30] 2 locks held by syz.3.3084/16116: [ 485.428335][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.436876][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.446359][ T30] 2 locks held by syz.2.3085/16119: [ 485.452308][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.461156][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.470858][ T30] 2 locks held by syz.2.3085/16120: [ 485.476181][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.484645][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.493802][ T30] 2 locks held by syz.2.3085/16121: [ 485.499171][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.507955][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.517937][ T30] 2 locks held by syz-executor/16126: [ 485.523537][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.532136][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.541527][ T30] 2 locks held by syz-executor/16128: [ 485.546925][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.555274][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.564599][ T30] 2 locks held by syz-executor/16155: [ 485.570339][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.578586][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.587840][ T30] 2 locks held by syz-executor/16172: [ 485.593780][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.602167][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.611405][ T30] 2 locks held by syz-executor/16200: [ 485.616799][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.626904][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.636185][ T30] 2 locks held by syz-executor/16220: [ 485.641651][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.650565][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.659595][ T30] 2 locks held by syz-executor/16222: [ 485.665130][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.673437][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.682858][ T30] 2 locks held by syz-executor/16249: [ 485.688226][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.696693][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.705971][ T30] 2 locks held by syz-executor/16266: [ 485.712052][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.720991][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.730416][ T30] 2 locks held by syz-executor/16294: [ 485.735822][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.744750][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.753987][ T30] 2 locks held by syz-executor/16314: [ 485.759375][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.768156][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.777910][ T30] 2 locks held by syz-executor/16315: [ 485.783589][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.792093][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.801737][ T30] 2 locks held by syz-executor/16343: [ 485.807141][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.815499][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.824937][ T30] 2 locks held by syz-executor/16360: [ 485.831684][ T30] #0: ffffffff8fe40d28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 485.840104][ T30] #1: ffffffff8fe40b60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 485.849142][ T30] [ 485.852303][ T30] ============================================= [ 485.852303][ T30] [ 485.861660][ T30] NMI backtrace for cpu 0 [ 485.861680][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 485.861693][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.861700][ T30] Call Trace: [ 485.861704][ T30] [ 485.861710][ T30] dump_stack_lvl+0xe8/0x150 [ 485.861727][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 485.861742][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 485.861754][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 485.861768][ T30] sys_info+0x135/0x170 [ 485.861778][ T30] watchdog+0xfd3/0x1030 [ 485.861797][ T30] ? watchdog+0x1c9/0x1030 [ 485.861814][ T30] kthread+0x389/0x470 [ 485.861833][ T30] ? __pfx_watchdog+0x10/0x10 [ 485.861851][ T30] ? __pfx_kthread+0x10/0x10 [ 485.861868][ T30] ret_from_fork+0x514/0xb70 [ 485.861887][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 485.861900][ T30] ? __switch_to+0xc79/0x1410 [ 485.861917][ T30] ? __pfx_kthread+0x10/0x10 [ 485.861930][ T30] ret_from_fork_asm+0x1a/0x30 [ 485.861949][ T30] [ 485.861954][ T30] Sending NMI from CPU 0 to CPUs 1: [ 485.974736][ C1] NMI backtrace for cpu 1 [ 485.974759][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 485.974777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.974787][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 485.974820][ C1] Code: 7b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 485.974841][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 485.974857][ C1] RAX: 0000000000257c53 RBX: ffffffff819a958a RCX: 0000000080000001 [ 485.974870][ C1] RDX: 0000000000000001 RSI: ffffffff8dface83 RDI: ffffffff8c28b660 [ 485.974881][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 485.974893][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 485.974905][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000 [ 485.974916][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 485.974929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.974941][ C1] CR2: 0000559879eaaee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 485.974955][ C1] Call Trace: [ 485.974963][ C1] [ 485.974969][ C1] default_idle+0x9/0x20 [ 485.974986][ C1] default_idle_call+0x72/0xb0 [ 485.975005][ C1] do_idle+0x36a/0x5f0 [ 485.975023][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 485.975045][ C1] ? __pfx_do_idle+0x10/0x10 [ 485.975075][ C1] cpu_startup_entry+0x43/0x60 [ 485.975094][ C1] start_secondary+0x101/0x110 [ 485.975109][ C1] common_startup_64+0x13e/0x147 [ 485.975140][ C1] [ 486.144148][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 486.151153][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 486.160287][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.170344][ T30] Call Trace: [ 486.173616][ T30] [ 486.176533][ T30] vpanic+0x56c/0xa60 [ 486.180504][ T30] ? __pfx___schedule+0x10/0x10 [ 486.185357][ T30] ? __pfx_vpanic+0x10/0x10 [ 486.189873][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 486.196071][ T30] panic+0xc5/0xd0 [ 486.199818][ T30] ? __pfx_panic+0x10/0x10 [ 486.204227][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 486.209590][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 486.215742][ T30] watchdog+0x102c/0x1030 [ 486.220073][ T30] ? watchdog+0x1c9/0x1030 [ 486.224489][ T30] kthread+0x389/0x470 [ 486.228555][ T30] ? __pfx_watchdog+0x10/0x10 [ 486.233220][ T30] ? __pfx_kthread+0x10/0x10 [ 486.237805][ T30] ret_from_fork+0x514/0xb70 [ 486.242392][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 486.247497][ T30] ? __switch_to+0xc79/0x1410 [ 486.252172][ T30] ? __pfx_kthread+0x10/0x10 [ 486.256887][ T30] ret_from_fork_asm+0x1a/0x30 [ 486.261658][ T30] [ 486.265196][ T30] Kernel Offset: disabled [ 486.269519][ T30] Rebooting in 86400 seconds..