last executing test programs: 25.117752733s ago: executing program 1 (id=2667): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000d0a20268fa095d42000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvmsg(r4, 0x0, 0x40000000) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettfilter={0x74, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {0x2, 0xd}, {0xe6cbbc2407a171f9, 0x3}}, [{0x8, 0xb, 0xd4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4374}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xc0000}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048844) sendto$inet6(r0, &(0x7f0000000100)="faa9ca1304194f", 0x7, 0x4008400, &(0x7f0000000140)={0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56459, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) 24.853105325s ago: executing program 1 (id=2673): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x11, &(0x7f0000000580)=""/236, &(0x7f0000000040)=0xec) 24.706135887s ago: executing program 1 (id=2675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 24.692450238s ago: executing program 1 (id=2676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r1, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 24.513937654s ago: executing program 1 (id=2678): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061108800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) listen(r4, 0x7) connect$netrom(r3, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r3, &(0x7f0000000080)={{0x6, @default}, [@bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) 24.431157531s ago: executing program 1 (id=2681): syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r2, &(0x7f00000005c0)={0x2d, 0x0, r13, 0xc}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x41, r13}) 24.222120734s ago: executing program 0 (id=2685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r2, &(0x7f0000000740)='\x00', 0x1, 0x20004090, &(0x7f0000000400)={0x11, 0x1a, r5, 0x1, 0x2, 0x6, @multicast}, 0x14) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r7, 0x0, 0x70bc29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004814}, 0x2000c800) 24.13725226s ago: executing program 0 (id=2687): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r0, 0xf5f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001640), 0x4) sendmsg$unix(r3, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x40) listen(r3, 0x0) getsockname$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(r4, &(0x7f0000000500)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/221, 0xdd}], 0x4, &(0x7f0000000480)=""/66, 0x42}, 0x2) accept(r0, 0x0, 0x0) close(r1) 23.198891024s ago: executing program 0 (id=2697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x3fb, 0x200, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}}, 0x4000000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0xa, 0x5, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) pipe(0x0) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x3, 0x0, 0x81}, 0x50) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000680)={'mangle\x00', 0x0, [0x8, 0x3, 0x4080, 0xc, 0x10001]}, &(0x7f0000000000)=0x54) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={r2, 0x24, "f7bcf9be27ee1302de9cd5e60ed8ca25f8720c46b73b628c2ead26218ddab47588c62abd"}, &(0x7f0000000340)=0x2c) 19.781149607s ago: executing program 3 (id=2721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x814) 19.602037241s ago: executing program 3 (id=2724): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@remote, @remote, @default, @default, @null, @bcast, @null, @bcast]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xd0b, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x30}}, 0x0) 19.586407574s ago: executing program 2 (id=2725): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x2, 0x1) bind$can_j1939(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtclass={0x70, 0x28, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0x1d0ccee52bfdb051}, {0xe, 0x2}, {0xa, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0xc9, 0x1e}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x70}}, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x4, 0xffff}, {0xffe0, 0x3}, {0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40450c0) ioctl$FITHAW(r1, 0xc0045878) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r14, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="000125bd7000ffdbdf25010000000000004c0018000000037500000000000000000000000000000000000000000000000000000000000000000000a3c1d27ede00000000000000000000000000000000000000032f2e009e3390050d8da14343f7f4fc3e051d3e45c718372bd9cb19b2e9b15752ded72ceb22250f9e2939f50547b79a8b848055d783969bccdc277afeb28508216adbdad1c60877ea746d2eda5f3fed307a427b54546a6b84d602547cdc1d510c195c51580856ac16927473243dd93f96587a67a8d94a05daf55622ca85a38756de192e1745aa61d827be2431ec4c3e4326148bde291c9d"], 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) 19.172911607s ago: executing program 3 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e22, 0xb2e, 0x4e20, 0x5, 0xa, 0xa0, 0x20, 0x29, 0x0, r3}, {0x5, 0x1000, 0x3, 0x100, 0x2, 0xd, 0x101, 0x8}, {0x0, 0x9, 0x8c6, 0x7ff}, 0x6e, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x6c}, 0x2, @in6=@remote, 0x0, 0x2, 0x2, 0xa, 0x15d, 0x2, 0xd}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 17.781061178s ago: executing program 4 (id=2735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 17.308461415s ago: executing program 3 (id=2736): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) (async) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r2, 0xffffffffffffffff, 0x18, 0x8}, 0x20) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r8, 0xffffffffffffffff, 0x26}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x1000, 0x6, 0x1000, 0x0, r1, 0x7fff, '\x00', r5, r2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x9, &(0x7f0000000180)=@raw=[@ldst={0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000240)='syzkaller\x00', 0x80, 0xee, &(0x7f0000000740)=""/238, 0x41100, 0x69, '\x00', r5, @fallback=0x24, r9, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xd, 0x10001, 0x6}, 0x10, 0x0, r6, 0x2, &(0x7f0000000480)=[r8, r8, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xc, 0xb}, {0x5, 0x1, 0x4, 0xb}], 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.201272108s ago: executing program 2 (id=2737): syz_emit_ethernet(0x4e, &(0x7f0000000780)={@remote, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@remote, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) (async) 17.088341987s ago: executing program 2 (id=2738): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'batadv_slave_1\x00', {0xfffffffa}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x10b, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x38, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@local}, {@rand_addr=0x64010102, 0x6}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x4, 0x46, 0x0, 0x1}]}}, "bc"}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0d047943aa87"}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10048050) 17.087218772s ago: executing program 3 (id=2739): r0 = socket$kcm(0x10, 0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) (async) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dcdb", 0x2}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) (async) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dcdb", 0x2}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000940)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24251e618294ff0051f60a424b8e6eac7302c1e7b66eeff90584c9f4d4938037e786a6d0001000000e45", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8008) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f00000005c0)=""/96, 0x2e, 0x60, 0x1}, 0x1e) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f00000005c0)=""/96, 0x2e, 0x60, 0x1}, 0x1e) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x4084194) socket(0x21, 0x80000, 0xfffffffb) 17.086456205s ago: executing program 4 (id=2740): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000300)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x10004041) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x40010) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cb, &(0x7f00000012c0)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="0a000100aaaa00"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 16.916869487s ago: executing program 0 (id=2741): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$inet(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.874143329s ago: executing program 2 (id=2742): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 16.709504209s ago: executing program 4 (id=2743): r0 = epoll_create1(0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x64}, {r1, 0x1485}], 0x2, 0x0, 0x0, 0x0) 16.650982221s ago: executing program 2 (id=2744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 16.598034689s ago: executing program 3 (id=2745): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000180)=""/83, &(0x7f00000000c0)=0x53) writev(r0, &(0x7f00000036c0)=[{&(0x7f00000033c0)="930802e2e92ababe629b9d1708f6b674434d3e7988fac958f0c571e29bcb864463833e2ab540404bfd2519450718a2a4ef3eb181523a5d4b4698857198f0d3fddaef40f53e90786d82b39af8cf1e914b17813b123b", 0x55}, {&(0x7f0000003440)="2fd31613d1e3535b456a5c9f3c987e2e66821426", 0x14}, {&(0x7f0000003500)="771d7164ad77fb2db89861fe453b9925974c49cef9dce81f0eeda66928ccb06bcd4305f994b7bd0a319700900e8ab25695151b05938b05ae3e9241c2430fcea34cc3898d142f9ff6bdaa12c83c325a970b6f6d76f73405f2c939b16eed16961eda6827231f8a7b246127fa9ce027b52a6b567b65e187618a61a279fce798dc6d9250ee8e6c3f72fd84b57df58452c15d815b159cff432d6b", 0x98}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x8) 16.596838225s ago: executing program 0 (id=2746): unshare(0x400) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket(0x2, 0x3, 0xff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f0300000400003a000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) bind$netrom(r2, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000200002062cbd7000fedbdf25020094610d0000cc040000000c000c4000000000000000090c000c4000000000ffffffff080017004e22000608000b000800f70008000100ac1e000108000b00000448d0080002007f000001"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40004) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYRES32=r1, @ANYBLOB="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", @ANYRES64=r5, @ANYRES16=r5, @ANYRES8=r4, @ANYRES8=r5], 0x24}}, 0x0) 16.590583687s ago: executing program 4 (id=2747): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@migrate={0x2fc, 0x21, 0x800, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast2, @in6=@loopback, 0x4e22, 0x2dd, 0x4e24, 0x2, 0xa, 0x80, 0x20, 0x84, r2, r3}, 0x6e6bb1}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2a}}, @mark={0xc, 0x15, {0x35075a, 0x80000000}}, @algo_aead={0x131, 0x12, {{'aegis256-aesni\x00'}, 0x728, 0xc0, "d39eeda350a9cafc957d6e9fd00eebba4f2261c8ec21be8b3ecdc8896b06d8b3e10fbad3c2865068e195d7e454d3915916b232ba4cc5d3821f03ca840abe331db39fdb62f89a0238309dbe24fb783f131987d49da80def6877da137fe0c26ffd4b1160efbb900d2eac7a2e2f4deb4a9a780a252ad0fbeb89920d0951b4e17eeb365ff19909ddfbba21d7066cadc544144b4e22f63d68effc01bef5bb5563a40b139b89e281b15dfeef93ea486da9668a537ae1e00bc8e984314d8b6da28daf3b5a8341dae2d67b06819111fd5c09893ed283c08710e5b64ec6afe7bb0b73720bf7feb8a112"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffffc0}, @lifetime_val={0x24, 0x9, {0xffffffffffffffff, 0x6, 0x100, 0x9}}, @tfcpad={0x8, 0x16, 0x3}, @algo_comp={0xa9, 0x3, {{'deflate\x00'}, 0x308, "5970e9ae56284de39770f097c2107a808e168f6475a035bb38159edb9f91bd5601264475f7b237d114f6f6d49aefd20d51894177f35ea65a4f6afbc9ca1d68b9df9e439410096e7d56236f4f6b6c130cf9eafe28a51b85848e8747723c22210710"}}, @sec_ctx={0x79, 0x8, {0x75, 0x8, 0x0, 0x0, 0x6d, "09cedb357a794551adc2b3d97f870b5baa0a5b6de394fa937547e4505ef3a76d17ae4b9ec53a3b79bd58907cbf3e0de16f9f040b709fae7581ba2e2abf1a7ecaa11feec415ec063bcb463e58d853584b17e9ec7f5ba1a07923f385cdf2cfb651bfb20e71b56fe5f92080e6cf40"}}]}, 0x2fc}}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) 16.513544962s ago: executing program 2 (id=2748): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xfe, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0x92a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x10001, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x5, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x6, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xc, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x10000009, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x100000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) socket(0x2c, 0x6, 0xdc63) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 16.451095834s ago: executing program 4 (id=2749): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) 16.349215821s ago: executing program 4 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde10000000000119078000007000000000000004e62001890780400"/58, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000ceb94157152fa00000000000008020000000"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4087, 0xff7}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000000540)=""/4085, 0xff5}], 0x4}, 0x22020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r7 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x26, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x2, 0x200, 0x9, 0xa54, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 15.712300708s ago: executing program 0 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf251a00000000009a000200000000002280000000800000010006000000000000800000010001800000000003000000000000000400050000000000008000002700faffffff00008d000010000000004b0d27bae657bd801a050000000015000004009731cf1971dbf997336df4633701d58ed50000000002050600000000000600ffffffff0c00008000000200faffffffd0fc0600060000000000010000000020000000800000050003000000"], 0x124}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000024) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r4, 0x0, {0x2}, 0xfd}, 0x18) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0x24395579777210}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000004480)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[@ANYBLOB="20000000071647fc00000000076397ff4ae8705b", @ANYRES32=r3, @ANYBLOB="0500540000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.045188459s ago: executing program 32 (id=2748): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xfe, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0x92a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x10001, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x5, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x6, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xc, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x10000009, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x100000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) socket(0x2c, 0x6, 0xdc63) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.015317822s ago: executing program 33 (id=2745): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000180)=""/83, &(0x7f00000000c0)=0x53) writev(r0, &(0x7f00000036c0)=[{&(0x7f00000033c0)="930802e2e92ababe629b9d1708f6b674434d3e7988fac958f0c571e29bcb864463833e2ab540404bfd2519450718a2a4ef3eb181523a5d4b4698857198f0d3fddaef40f53e90786d82b39af8cf1e914b17813b123b", 0x55}, {&(0x7f0000003440)="2fd31613d1e3535b456a5c9f3c987e2e66821426", 0x14}, {&(0x7f0000003500)="771d7164ad77fb2db89861fe453b9925974c49cef9dce81f0eeda66928ccb06bcd4305f994b7bd0a319700900e8ab25695151b05938b05ae3e9241c2430fcea34cc3898d142f9ff6bdaa12c83c325a970b6f6d76f73405f2c939b16eed16961eda6827231f8a7b246127fa9ce027b52a6b567b65e187618a61a279fce798dc6d9250ee8e6c3f72fd84b57df58452c15d815b159cff432d6b", 0x98}], 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x8) 964.393669ms ago: executing program 34 (id=2750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde10000000000119078000007000000000000004e62001890780400"/58, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000ceb94157152fa00000000000008020000000"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4087, 0xff7}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000000540)=""/4085, 0xff5}], 0x4}, 0x22020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r7 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x26, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x2, 0x200, 0x9, 0xa54, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 0s ago: executing program 35 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf251a00000000009a000200000000002280000000800000010006000000000000800000010001800000000003000000000000000400050000000000008000002700faffffff00008d000010000000004b0d27bae657bd801a050000000015000004009731cf1971dbf997336df4633701d58ed50000000002050600000000000600ffffffff0c00008000000200faffffffd0fc0600060000000000010000000020000000800000050003000000"], 0x124}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000024) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r4, 0x0, {0x2}, 0xfd}, 0x18) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0x24395579777210}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000004480)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[@ANYBLOB="20000000071647fc00000000076397ff4ae8705b", @ANYRES32=r3, @ANYBLOB="0500540000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): ap0: left promiscuous mode [ 182.954330][T10036] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.969179][T10036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.223559][T10042] syzkaller0: entered promiscuous mode [ 183.239780][T10042] syzkaller0: entered allmulticast mode [ 183.265983][T10042] tipc: Enabled bearer , priority 0 [ 183.280952][T10041] tipc: Resetting bearer [ 183.296385][T10049] __nla_validate_parse: 12 callbacks suppressed [ 183.296403][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 183.314575][T10041] tipc: Disabling bearer [ 183.334252][T10049] vcan0 (unregistering): left allmulticast mode [ 183.394018][T10053] syzkaller1: entered promiscuous mode [ 183.399737][T10053] syzkaller1: entered allmulticast mode [ 183.408228][T10053] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 183.429201][T10053] openvswitch: netlink: Invalid VLAN frame [ 183.533169][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1086'. [ 183.542828][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1086'. [ 183.602467][T10058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1087'. [ 183.732319][T10066] ipt_rpfilter: unknown options [ 183.738471][T10067] ipt_rpfilter: unknown options [ 183.741307][T10064] veth1_vlan (unregistering): left allmulticast mode [ 183.911283][T10064] tipc: Disabling bearer [ 184.220607][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 184.228707][ C0] lec:lec_tx_timeout: lec0 [ 184.233460][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 184.775867][T10121] netlink: 'syz.4.1108': attribute type 23 has an invalid length. [ 184.824627][T10124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'. [ 185.228656][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 185.247113][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 185.278400][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 185.347204][T10161] pim6reg: entered allmulticast mode [ 185.364295][T10161] pim6reg: left allmulticast mode [ 185.430033][T10164] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1119'. [ 185.463351][T10164] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1119'. [ 185.477662][T10161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.796169][T10187] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.874326][T10196] pimreg: left allmulticast mode [ 186.020414][T10206] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 186.157548][T10214] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 186.215093][T10217] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 186.232137][T10208] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.256866][T10208] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.267745][T10208] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 186.334353][T10209] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.348124][T10209] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 186.737014][T10238] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 186.751255][T10238] netlink: 'syz.1.1138': attribute type 3 has an invalid length. [ 189.249964][T10327] netlink: 'syz.3.1163': attribute type 32 has an invalid length. [ 189.266106][T10327] __nla_validate_parse: 12 callbacks suppressed [ 189.266124][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 189.279801][T10333] netlink: 'syz.4.1166': attribute type 21 has an invalid length. [ 189.311423][T10327] bond5: option coupled_control: invalid value (36) [ 189.325463][T10337] netlink: 'syz.4.1166': attribute type 21 has an invalid length. [ 189.344961][T10327] bond5 (unregistering): Released all slaves [ 189.456787][T10347] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 189.486732][T10333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1166'. [ 189.536493][T10337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1166'. [ 189.617472][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 189.843033][T10371] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 190.111158][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.307712][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 190.340496][T10397] netlink: 'syz.4.1182': attribute type 2 has an invalid length. [ 190.409349][T10405] Cannot find add_set index 2 as target [ 190.570593][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 190.578737][ C0] lec:lec_tx_timeout: lec0 [ 190.583910][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 190.699378][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 192.039594][T10521] veth6: entered promiscuous mode [ 192.100675][T10521] veth6: entered allmulticast mode [ 192.132761][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 192.160288][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 192.200130][T10534] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1202'. [ 192.279169][T10535] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 192.332522][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 192.676841][T10556] netlink: 'syz.4.1209': attribute type 16 has an invalid length. [ 192.685085][T10556] netlink: 'syz.4.1209': attribute type 17 has an invalid length. [ 192.802777][T10556] netdevs: left promiscuous mode [ 192.875727][T10556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.886490][T10556] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.894175][T10566] netlink: 'syz.1.1212': attribute type 2 has an invalid length. [ 192.912475][T10556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.954336][T10566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.025981][T10566] dvmrp6: entered allmulticast mode [ 193.092468][T10572] netlink: 'syz.4.1216': attribute type 21 has an invalid length. [ 193.106700][T10572] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.442052][T10589] veth0_virt_wifi: default FDB implementation only supports local addresses [ 193.863925][T10607] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 193.884979][T10607] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 193.900834][T10607] netlink: 'syz.4.1231': attribute type 8 has an invalid length. [ 193.936995][T10607] netlink: 'syz.4.1231': attribute type 3 has an invalid length. [ 194.556243][T10629] tipc: Enabled bearer , priority 0 [ 194.670456][T10629] syzkaller0: entered promiscuous mode [ 194.676223][T10629] syzkaller0: entered allmulticast mode [ 194.796717][T10642] __nla_validate_parse: 10 callbacks suppressed [ 194.796736][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 194.816561][T10642] openvswitch: netlink: IP tunnel dst address not specified [ 195.132721][T10665] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1247'. [ 196.079841][T10650] tipc: Resetting bearer [ 196.125983][T10624] tipc: Resetting bearer [ 196.171685][T10624] tipc: Disabling bearer [ 196.330571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 196.338664][ C0] lec:lec_tx_timeout: lec0 [ 196.345451][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 196.364349][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1252'. [ 196.422562][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 196.431586][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.543449][T10689] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1256'. [ 196.565689][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1256'. [ 196.576170][T10689] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1256'. [ 196.586629][T10689] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 196.595417][T10689] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1256'. [ 196.630796][T10693] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.767635][T10693] bond6: (slave bridge2): making interface the new active one [ 196.776477][T10693] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 196.936739][T10714] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1264'. [ 196.954603][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 197.162573][T10727] bond6: Invalid ad_actor_system MAC address. [ 197.168694][T10727] bond6: option ad_actor_system: invalid value (1) [ 197.178351][T10727] bond6 (unregistering): Released all slaves [ 197.267421][T10732] syzkaller0: entered promiscuous mode [ 197.273174][T10732] syzkaller0: entered allmulticast mode [ 197.869991][T10756] can: request_module (can-proto-0) failed. [ 199.352410][T10793] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 199.365890][T10793] bond6 (unregistering): Released all slaves [ 199.450264][T10791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 199.459833][T10791] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 199.470694][T10791] team0: Failed to send options change via netlink (err -105) [ 199.488109][T10791] team0: Port device batadv1 added [ 199.537815][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 199.647378][T10813] validate_nla: 3 callbacks suppressed [ 199.647397][T10813] netlink: 'syz.0.1286': attribute type 9 has an invalid length. [ 199.665822][T10813] netlink: 'syz.0.1286': attribute type 11 has an invalid length. [ 199.674302][T10813] netlink: 'syz.0.1286': attribute type 12 has an invalid length. [ 199.867246][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.502889][T10855] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 201.552999][T10855] __nla_validate_parse: 6 callbacks suppressed [ 201.553016][T10855] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1297'. [ 201.798349][T10880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1305'. [ 201.812357][T10881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1307'. [ 201.901192][T10881] syzkaller0: entered promiscuous mode [ 201.906802][T10881] syzkaller0: entered allmulticast mode [ 202.090587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 202.098674][ C0] lec:lec_tx_timeout: lec0 [ 202.104055][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 202.164805][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 202.188003][T10905] netlink: 'syz.2.1309': attribute type 29 has an invalid length. [ 202.214099][T10905] netlink: 'syz.2.1309': attribute type 29 has an invalid length. [ 202.224404][T10904] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 202.234369][T10904] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 202.431764][T10917] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1312'. [ 202.443143][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'. [ 202.711458][T10931] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1320'. [ 202.723107][T10931] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1320'. [ 202.857954][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 202.924076][T10945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.945463][T10947] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 202.976275][T10949] tipc: Enabling of bearer rejected, media not registered [ 202.985983][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 203.792550][T10995] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 203.845744][T11000] nbd: illegal input index -8454144 [ 203.981316][T11009] ipt_REJECT: TCP_RESET invalid for non-tcp [ 204.818060][T11062] x_tables: unsorted underflow at hook 3 [ 204.971465][T11070] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 204.980180][T11070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.607666][T11090] bond7: option all_slaves_active: invalid value (222) [ 205.680949][T11090] bond7 (unregistering): Released all slaves [ 205.711219][T11101] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 205.719038][T11101] NCSI netlink: No device for ifindex 0 [ 206.111278][T11126] veth0: entered promiscuous mode [ 206.145538][T11126] gretap1: entered promiscuous mode [ 206.161972][T11126] gretap1: entered allmulticast mode [ 206.250646][T11133] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 206.258657][T11133] netlink: 'syz.4.1378': attribute type 2 has an invalid length. [ 206.271426][T11133] netlink: 'syz.4.1378': attribute type 2 has an invalid length. [ 206.280192][T11133] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 206.288432][T11133] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 206.296772][T11133] netlink: 'syz.4.1378': attribute type 2 has an invalid length. [ 206.299436][T11126] team0 (unregistering): Port device team_slave_0 removed [ 206.305922][T11133] netlink: 'syz.4.1378': attribute type 2 has an invalid length. [ 206.326536][T11126] team0 (unregistering): Port device team_slave_1 removed [ 206.385553][T11125] veth0: left promiscuous mode [ 206.509561][T11144] netlink: 'syz.4.1383': attribute type 29 has an invalid length. [ 206.525734][T11145] netlink: 'syz.4.1383': attribute type 29 has an invalid length. [ 206.669945][T11161] bond0: entered promiscuous mode [ 206.675295][T11161] bond2: entered promiscuous mode [ 206.682860][T11161] bond0: entered allmulticast mode [ 206.688053][T11161] bond2: entered allmulticast mode [ 206.695389][T11161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.714603][T11161] __nla_validate_parse: 13 callbacks suppressed [ 206.714622][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 206.741654][T11161] openvswitch: netlink: EtherType 50a is less than min 600 [ 206.751100][T11161] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1388'. [ 206.791470][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 206.965920][T11174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.061987][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 207.088542][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 207.110583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 207.118727][ C0] lec:lec_tx_timeout: lec0 [ 207.123444][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.411885][T11197] syzkaller1: entered promiscuous mode [ 207.417421][T11197] syzkaller1: entered allmulticast mode [ 207.454949][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1402'. [ 207.591724][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'. [ 207.742540][T11215] dvmrp0: entered allmulticast mode [ 208.019946][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 208.239689][T11223] openvswitch: netlink: IP tunnel dst address not specified [ 208.874300][T11260] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1422'. [ 208.984132][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 209.066220][T11272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.260392][T11287] wg1: entered promiscuous mode [ 209.265746][T11287] wg1: entered allmulticast mode [ 209.334746][T11290] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.853010][T11360] validate_nla: 9 callbacks suppressed [ 210.853030][T11360] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 210.900964][T11360] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 210.929523][T11363] syzkaller1: entered promiscuous mode [ 210.970938][T11363] syzkaller1: entered allmulticast mode [ 211.176786][T11378] blkio.reset_stats is deprecated [ 211.703740][T11408] dvmrp6: entered allmulticast mode [ 211.793866][T11414] tipc: Enabled bearer , priority 0 [ 211.801295][T11413] __nla_validate_parse: 8 callbacks suppressed [ 211.801313][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 211.874891][T11414] syzkaller0: entered promiscuous mode [ 211.880752][T11414] syzkaller0: entered allmulticast mode [ 211.888163][T11414] tipc: Resetting bearer [ 211.947022][T11419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.080020][T11417] syzkaller0: entered promiscuous mode [ 212.088884][T11417] syzkaller0: entered allmulticast mode [ 212.101215][T11411] tipc: Resetting bearer [ 212.130656][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 212.138801][ C0] lec:lec_tx_timeout: lec0 [ 212.143475][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 212.235586][T11427] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1477'. [ 212.475461][T11432] netlink: 'syz.0.1478': attribute type 12 has an invalid length. [ 212.484172][T11433] netlink: 'syz.0.1478': attribute type 12 has an invalid length. [ 212.493564][T11432] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1478'. [ 212.504008][T11433] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1478'. [ 213.483493][T11411] tipc: Disabling bearer [ 213.735841][T11441] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1480'. [ 213.800736][T11442] netlink: 'syz.3.1480': attribute type 21 has an invalid length. [ 213.808898][T11442] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1480'. [ 214.676366][T11433] netlink: 'syz.0.1478': attribute type 4 has an invalid length. [ 214.684334][T11441] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 214.700967][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 214.727390][T11432] netlink: 'syz.0.1478': attribute type 4 has an invalid length. [ 214.744105][T11442] netlink: 'syz.3.1480': attribute type 5 has an invalid length. [ 214.762002][T11442] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1480'. [ 214.837920][T11448] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1482'. [ 215.091323][T11464] netlink: 'syz.2.1486': attribute type 3 has an invalid length. [ 215.108536][T11464] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1486'. [ 215.607642][T11486] netdevs: entered promiscuous mode [ 215.627959][T11488] delete_channel: no stack [ 215.628691][T11486] gretap0: entered promiscuous mode [ 216.120032][T11521] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 216.736274][T11559] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.777053][T11559] IPv6: Can't replace route, no match found [ 216.836575][T11564] __nla_validate_parse: 10 callbacks suppressed [ 216.836598][T11564] netlink: 8292 bytes leftover after parsing attributes in process `syz.1.1517'. [ 216.864685][T11564] validate_nla: 4 callbacks suppressed [ 216.864703][T11564] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 217.086455][T11570] bond5: (slave ip6gretap1): making interface the new active one [ 217.142605][T11570] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.150938][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 217.158977][ C0] lec:lec_tx_timeout: lec0 [ 217.164302][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 217.201413][T11570] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.212635][T11570] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 217.256482][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1522'. [ 217.343231][T11576] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 217.387043][T11576] bond5 (unregistering): Released all slaves [ 217.473388][T11586] netlink: 'syz.2.1524': attribute type 21 has an invalid length. [ 217.494343][T11586] netlink: 'syz.2.1524': attribute type 6 has an invalid length. [ 217.510765][T11586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1524'. [ 217.543138][T11589] nbd: illegal input index 2958377 [ 217.685604][T11591] netlink: 'syz.3.1526': attribute type 12 has an invalid length. [ 217.693659][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 217.718943][T11591] netlink: 'syz.3.1526': attribute type 12 has an invalid length. [ 217.736892][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 217.766840][T11595] netlink: 'syz.3.1526': attribute type 12 has an invalid length. [ 217.792410][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 217.803017][T11595] netlink: 'syz.3.1526': attribute type 12 has an invalid length. [ 217.811499][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1526'. [ 218.105945][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'. [ 218.377501][T11620] sctp: [Deprecated]: syz.4.1537 (pid 11620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.377501][T11620] Use struct sctp_sack_info instead [ 218.398087][T11618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1536'. [ 218.532255][T11632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1541'. [ 218.873655][T11647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.923381][T11647] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 219.269405][T11675] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 219.328707][T11675] team2: entered promiscuous mode [ 219.335937][T11675] team2: entered allmulticast mode [ 219.531752][T11686] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.563137][T11690] netlink: 'syz.3.1557': attribute type 11 has an invalid length. [ 219.583754][T11686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.664041][T11692] @0Ù: renamed from bond_slave_1 [ 219.773462][T11694] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 219.844196][T11698] netlink: zone id is out of range [ 219.880395][T11698] netlink: zone id is out of range [ 219.899996][T11698] netlink: zone id is out of range [ 219.933663][T11694] bond6: entered promiscuous mode [ 219.957353][T11698] netlink: zone id is out of range [ 219.958608][T11694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.969719][T11698] netlink: zone id is out of range [ 219.975058][T11698] netlink: zone id is out of range [ 219.980404][T11698] netlink: zone id is out of range [ 219.986088][T11698] netlink: zone id is out of range [ 219.991462][T11698] netlink: zone id is out of range [ 219.996851][T11698] netlink: zone id is out of range [ 220.002704][T11694] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 220.094753][T11698] lo speed is unknown, defaulting to 1000 [ 220.105776][T11698] lo speed is unknown, defaulting to 1000 [ 220.132172][T11698] lo speed is unknown, defaulting to 1000 [ 220.727198][T11698] infiniband syz0: set active [ 220.733595][ T5912] lo speed is unknown, defaulting to 1000 [ 220.771031][T11698] infiniband syz0: added lo [ 220.865754][T11698] RDS/IB: syz0: added [ 220.874935][T11698] smc: adding ib device syz0 with port count 1 [ 220.912353][T11698] smc: ib device syz0 port 1 has no pnetid [ 220.932706][ T7677] lo speed is unknown, defaulting to 1000 [ 220.948662][T11698] lo speed is unknown, defaulting to 1000 [ 221.679748][T11698] lo speed is unknown, defaulting to 1000 [ 221.806175][T11777] syzkaller0: entered promiscuous mode [ 221.812403][T11777] syzkaller0: entered allmulticast mode [ 222.083691][T11789] delete_channel: no stack [ 222.170582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 222.178688][ C0] lec:lec_tx_timeout: lec0 [ 222.183491][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 222.350374][T11798] __nla_validate_parse: 8 callbacks suppressed [ 222.350394][T11798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1590'. [ 223.533308][T11698] lo speed is unknown, defaulting to 1000 [ 223.791901][ T29] audit: type=1804 audit(1770930195.208:4): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1594" name="/newroot/358/cgroup.controllers" dev="tmpfs" ino=1851 res=1 errno=0 [ 223.814912][ T29] audit: type=1800 audit(1770930195.218:5): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1594" name="cgroup.controllers" dev="tmpfs" ino=1851 res=0 errno=0 [ 223.935896][T11827] validate_nla: 31 callbacks suppressed [ 223.935919][T11827] netlink: 'syz.2.1592': attribute type 2 has an invalid length. [ 225.365866][T11698] lo speed is unknown, defaulting to 1000 [ 225.576701][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1601'. [ 225.618711][T11861] kthread_run failed with err -4 [ 225.628903][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1601'. [ 225.741571][T11869] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1603'. [ 225.813089][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 225.902519][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 226.009382][T11698] lo speed is unknown, defaulting to 1000 [ 226.053039][T11889] netlink: 'syz.2.1608': attribute type 3 has an invalid length. [ 226.070907][T11889] netlink: 'syz.2.1608': attribute type 3 has an invalid length. [ 226.256951][T11903] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1609'. [ 226.387062][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 226.469770][T11906] macsec1: entered promiscuous mode [ 226.491216][T11906] macsec1: entered allmulticast mode [ 226.496726][T11906] bridge0: entered allmulticast mode [ 226.513291][T11906] bridge0: port 3(macsec1) entered blocking state [ 226.520280][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1613'. [ 226.530832][T11906] bridge0: port 3(macsec1) entered disabled state [ 226.550228][T11912] netlink: 'syz.0.1614': attribute type 9 has an invalid length. [ 226.559390][T11906] bridge0: left allmulticast mode [ 226.713333][T11915] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1615'. [ 226.880461][T11922] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 226.949426][T11936] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 226.957588][T11936] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 226.967170][T11936] netlink: 'syz.3.1621': attribute type 8 has an invalid length. [ 227.190582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 227.198649][ C0] lec:lec_tx_timeout: lec0 [ 227.203521][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.225075][T11955] tipc: Started in network mode [ 227.230008][T11955] tipc: Node identity 4a0c1c935f44, cluster identity 4711 [ 227.240748][T11955] tipc: Enabled bearer , priority 0 [ 227.376918][T11940] syzkaller0: entered promiscuous mode [ 227.383169][T11940] syzkaller0: entered allmulticast mode [ 227.390163][T11940] tipc: Resetting bearer [ 227.420213][T11940] __nla_validate_parse: 3 callbacks suppressed [ 227.420250][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1624'. [ 227.440705][T11939] tipc: Resetting bearer [ 227.537742][T11965] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1628'. [ 228.681076][T11939] tipc: Disabling bearer [ 228.692619][T11959] net_ratelimit: 381 callbacks suppressed [ 228.692634][T11959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.721111][T11964] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 228.772190][ T7685] tipc: Node number set to 357047443 [ 228.800801][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1633'. [ 228.937414][T11979] netlink: 'syz.3.1635': attribute type 6 has an invalid length. [ 229.142057][T11987] netlink: 'syz.0.1640': attribute type 83 has an invalid length. [ 229.205524][T11994] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1642'. [ 229.257832][T11994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1642'. [ 229.363315][T11965] infiniband syz2: set down [ 229.368024][T11965] infiniband syz2: added bond_slave_1 [ 229.424800][T11965] RDS/IB: syz2: added [ 229.430431][T11965] smc: adding ib device syz2 with port count 1 [ 229.437194][T11965] smc: ib device syz2 port 1 has no pnetid [ 229.498382][T12005] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1646'. [ 229.634054][T12008] tipc: Enabled bearer , priority 0 [ 229.651620][T12008] syzkaller0: entered promiscuous mode [ 229.657166][T12008] syzkaller0: entered allmulticast mode [ 229.698684][T12008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1647'. [ 229.721914][T12008] tipc: Resetting bearer [ 229.741165][T12007] tipc: Resetting bearer [ 229.783018][T12007] tipc: Disabling bearer [ 230.313089][T12022] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1649'. [ 230.399924][T12024] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1650'. [ 230.569861][T12029] bond7: Removing last arp target with arp_interval on [ 230.783849][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1656'. [ 231.478870][T12074] netlink: ct family unspecified [ 231.495540][T12074] syzkaller0: entered promiscuous mode [ 231.501395][T12074] syzkaller0: entered allmulticast mode [ 231.824521][T12094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.942132][T12103] netlink: 'syz.1.1672': attribute type 8 has an invalid length. [ 232.198012][T12112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.210678][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 232.221311][ C0] lec:lec_tx_timeout: lec0 [ 232.226128][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 232.257430][ T7677] lo speed is unknown, defaulting to 1000 [ 232.263878][ T7677] syz0: Port: 1 Link DOWN [ 232.269633][ T7677] lo speed is unknown, defaulting to 1000 [ 232.435600][T12131] __nla_validate_parse: 6 callbacks suppressed [ 232.435619][T12131] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1684'. [ 232.452095][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'. [ 232.476604][T12131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'. [ 232.486845][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1684'. [ 232.588203][T12139] ip6t_srh: unknown srh match flags 4000 [ 232.635961][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 233.119207][T12175] x_tables: unsorted underflow at hook 4 [ 233.245300][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 233.293496][T12184] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 233.328231][T12184] tipc: Enabling of bearer rejected, failed to enable media [ 233.357081][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 233.549884][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'. [ 233.827625][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1712'. [ 233.930759][T12223] syzkaller0: entered promiscuous mode [ 233.951100][T12223] syzkaller0: entered allmulticast mode [ 234.014356][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'. [ 235.407370][T12239] tipc: Enabling of bearer rejected, failed to enable media [ 235.432897][T12243] syzkaller0: entered promiscuous mode [ 235.438475][T12243] syzkaller0: entered allmulticast mode [ 235.731929][T12270] nbd3: detected capacity change from 0 to 33558528 [ 235.736161][T12275] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 235.902948][ T51] block nbd3: Receive control failed (result -104) [ 236.141671][T12299] netlink: 'syz.4.1734': attribute type 7 has an invalid length. [ 236.154546][T12299] netlink: 'syz.4.1734': attribute type 8 has an invalid length. [ 236.614474][T12327] netlink: 'syz.1.1743': attribute type 5 has an invalid length. [ 236.691095][T12331] netlink: 'syz.2.1745': attribute type 2 has an invalid length. [ 236.771467][T12334] netlink: 'syz.4.1747': attribute type 12 has an invalid length. [ 236.906832][T12345] bond0: (slave gre0): Error: Device type is different from other slaves [ 236.916754][T12348] syzkaller0: create flow: hash 4088394544 index 1 [ 236.925401][T10489] syzkaller0: tun_net_xmit 76 [ 236.953041][T10489] syzkaller0: tun_net_xmit 48 [ 236.958290][ T5912] syzkaller0: tun_net_xmit 76 [ 237.085754][T12347] syzkaller0: entered promiscuous mode [ 237.094125][T12347] syzkaller0: entered allmulticast mode [ 237.102833][T12357] syzkaller0: delete flow: hash 4088394544 index 1 [ 237.456273][T12375] __nla_validate_parse: 6 callbacks suppressed [ 237.456295][T12375] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1757'. [ 238.012748][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 238.020828][ C0] lec:lec_tx_timeout: lec0 [ 238.025764][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.357688][T12364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1757'. [ 238.387696][T12373] pim6reg: entered allmulticast mode [ 238.397981][T12374] pim6reg: left allmulticast mode [ 238.636359][T12389] openvswitch: netlink: Missing key (keys=40, expected=80) [ 238.781299][T12396] lo speed is unknown, defaulting to 1000 [ 238.795859][T12400] xt_hashlimit: size too large, truncated to 1048576 [ 238.968414][T12405] syzkaller0: entered promiscuous mode [ 239.000736][T12405] syzkaller0: entered allmulticast mode [ 239.376223][T12419] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1770'. [ 239.805904][T12440] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 239.933726][T12452] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 239.955104][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 240.373889][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1784'. [ 240.442029][T12469] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1784'. [ 240.908576][T12488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.936828][T12488] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1790'. [ 240.964477][T12494] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1792'. [ 241.017435][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 241.181843][T12498] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1793'. [ 241.413223][T12520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.492113][T12526] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 241.533342][T12524] erspan0: entered promiscuous mode [ 241.539360][T12528] vcan0: tx drop: invalid sa for name 0x0000000000000006 [ 241.568923][T12533] netlink: 'syz.0.1804': attribute type 3 has an invalid length. [ 241.660946][T12535] veth0: entered promiscuous mode [ 241.708753][T12535] veth0: left promiscuous mode [ 241.892755][T12553] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 241.900004][T12545] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.910394][T12551] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 242.027597][T12564] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 242.068801][T12566] bridge0: port 2(.) entered disabled state [ 242.075323][T12566] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.155645][T12547] syzkaller0: entered promiscuous mode [ 242.173528][T12547] syzkaller0: entered allmulticast mode [ 242.555318][T12591] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.032791][T12617] bond7: option min_links: invalid value (18446744073709551614) [ 243.050854][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 243.058992][ C0] lec:lec_tx_timeout: lec0 [ 243.063845][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 243.075568][T12617] bond7: option min_links: allowed values 0 - 2147483647 [ 243.097043][T12617] bond7 (unregistering): Released all slaves [ 243.236941][T12629] netlink: 'syz.0.1830': attribute type 1 has an invalid length. [ 243.537641][T12650] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 243.549721][T12650] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode [ 243.565073][T12650] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 243.843663][T12669] netlink: 'syz.2.1844': attribute type 10 has an invalid length. [ 243.868386][T12669] veth0_macvtap: left promiscuous mode [ 244.050430][T12677] __nla_validate_parse: 70 callbacks suppressed [ 244.050453][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 244.233056][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 244.553012][T12701] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1856'. [ 244.639514][T12701] bond7: (slave gre0): Device is not bonding slave [ 244.674986][T12701] bond7: option active_slave: invalid value (gre0) [ 244.696832][T12701] bond7 (unregistering): Released all slaves [ 245.089658][T12716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1860'. [ 245.203698][T12716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1860'. [ 245.365892][T12716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1860'. [ 245.533579][T12732] bridge0: port 2(.) entered blocking state [ 245.539799][T12732] bridge0: port 2(.) entered forwarding state [ 245.546467][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.553741][T12732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.619310][T12732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.658148][T12716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1860'. [ 245.726128][T12716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1860'. [ 245.828705][T12716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1860'. [ 245.950499][T12754] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 245.993934][T12757] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20000 [ 246.016110][T12758] netlink: 'syz.2.1869': attribute type 4 has an invalid length. [ 246.043294][T12758] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1869'. [ 246.260286][T12772] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 246.590813][T12791] netlink: 'syz.3.1878': attribute type 17 has an invalid length. [ 246.627304][T12791] gretap0: entered promiscuous mode [ 246.634218][T12791] gretap0: left promiscuous mode [ 246.649096][T12794] netlink: 'syz.0.1880': attribute type 13 has an invalid length. [ 246.804761][T12801] ip6tnl0: Caught tx_queue_len zero misconfig [ 247.021171][T10457] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 247.030047][T10474] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 247.045277][T10474] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 247.070703][T10474] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 247.206997][T12824] netlink: 'syz.2.1890': attribute type 4 has an invalid length. [ 247.234603][T12823] ip6gre1: entered promiscuous mode [ 247.239899][T12823] ip6gre1: entered allmulticast mode [ 247.491452][T12846] netlink: 'syz.1.1898': attribute type 9 has an invalid length. [ 247.672559][T12852] dvmrp8: entered allmulticast mode [ 247.696087][T12852] dvmrp0: left allmulticast mode [ 247.714726][T12852] dvmrp6: left allmulticast mode [ 247.727833][T12852] dvmrp8: left allmulticast mode [ 248.035889][T12877] netlink: 'syz.2.1906': attribute type 1 has an invalid length. [ 248.070555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 248.078626][ C0] lec:lec_tx_timeout: lec0 [ 248.083415][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.137851][T12877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.184546][T12881] pim6reg1: entered promiscuous mode [ 248.230631][T12881] pim6reg1: entered allmulticast mode [ 248.660435][T12896] netlink: 'syz.1.1913': attribute type 75 has an invalid length. [ 248.723156][T12877] bond7: (slave gretap2): making interface the new active one [ 248.760186][T12877] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 248.976806][T12916] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 249.106768][T12916] 8021q: adding VLAN 0 to HW filter on device bond7 [ 249.260362][T12928] __nla_validate_parse: 16 callbacks suppressed [ 249.260382][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 249.281309][T12932] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1920'. [ 249.291076][T12932] netlink: 'syz.1.1920': attribute type 2 has an invalid length. [ 249.488447][T12946] netlink: 'syz.3.1922': attribute type 1 has an invalid length. [ 249.518162][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1922'. [ 249.562917][T12949] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1918'. [ 249.761254][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 250.331286][T12992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1933'. [ 250.385160][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 250.571556][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1940'. [ 250.696051][T13013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1940'. [ 250.817678][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 250.832320][T13029] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 250.878087][T13029] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 250.886225][ T5886] IPVS: starting estimator thread 0... [ 250.986140][T13036] IPVS: using max 26 ests per chain, 62400 per kthread [ 251.325075][T13064] bond2: entered allmulticast mode [ 251.427002][T13061] bond2: left allmulticast mode [ 252.182439][T13132] xt_cgroup: path and classid specified [ 252.331506][T13145] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 252.993836][T13185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.090610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 253.098732][ C0] lec:lec_tx_timeout: lec0 [ 253.103574][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.628174][T13223] syzkaller1: entered promiscuous mode [ 253.645647][T13223] syzkaller1: entered allmulticast mode [ 253.770203][T13242] netlink: 'syz.0.2003': attribute type 21 has an invalid length. [ 253.880855][T13244] netlink: 'syz.4.2004': attribute type 5 has an invalid length. [ 254.065512][T13262] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 254.161029][T13262] lo speed is unknown, defaulting to 1000 [ 254.419736][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.627109][T13294] __nla_validate_parse: 14 callbacks suppressed [ 254.627130][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 255.085314][T13318] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 255.137231][T13316] syzkaller0: entered promiscuous mode [ 255.170652][T13316] syzkaller0: entered allmulticast mode [ 255.289020][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2026'. [ 255.436321][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 255.457243][T13334] netlink: 'syz.2.2029': attribute type 9 has an invalid length. [ 255.657963][T13344] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2031'. [ 255.817428][T13353] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2034'. [ 255.869579][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 256.002212][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 256.070181][T10480] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.157708][T10480] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.185579][T10480] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.215156][T10480] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.351861][T13372] tipc: Enabling of bearer rejected, failed to enable media [ 256.454350][T13378] xt_bpf: check failed: parse error [ 256.741664][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 256.751099][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 256.860968][T13390] block nbd4: server does not support multiple connections per device. [ 256.889554][T13390] block nbd4: shutting down sockets [ 257.265089][T13415] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2056'. [ 257.317426][T13417] 8021q: VLANs not supported on ip6gre0 [ 257.324337][T13420] 8021q: VLANs not supported on ip6gre0 [ 257.436934][T13432] netlink: 'syz.2.2060': attribute type 12 has an invalid length. [ 257.502215][T13432] bond9: option primary_reselect: invalid value (255) [ 257.512261][T13432] bond9 (unregistering): Released all slaves [ 257.978258][T13472] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 258.111198][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 258.119411][ C0] lec:lec_tx_timeout: lec0 [ 258.124663][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 258.366709][T13505] netlink: 'syz.4.2080': attribute type 9 has an invalid length. [ 258.751789][T13528] xt_hashlimit: size too large, truncated to 1048576 [ 259.169014][T13549] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 259.694184][T13580] netlink: 'syz.0.2105': attribute type 10 has an invalid length. [ 259.862723][T13591] netlink: 'syz.1.2108': attribute type 83 has an invalid length. [ 259.877750][T13594] __nla_validate_parse: 12 callbacks suppressed [ 259.877772][T13594] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2109'. [ 259.967300][T13599] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 259.978272][T13599] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2112'. [ 260.000745][T13597] netlink: 'syz.2.2110': attribute type 3 has an invalid length. [ 260.016380][T13597] netlink: 'syz.2.2110': attribute type 1 has an invalid length. [ 260.027901][T13597] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2110'. [ 260.039960][T13597] NCSI netlink: No device for ifindex 813332851 [ 260.049788][T13597] netlink: 'syz.2.2110': attribute type 1 has an invalid length. [ 260.059153][T13597] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2110'. [ 260.069037][T13606] tipc: Can't bind to reserved service type 1 [ 260.070937][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2110'. [ 260.481585][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'. [ 260.595830][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 260.809832][T13659] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2129'. [ 260.835205][T13663] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2129'. [ 260.978729][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.027244][T13671] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2132'. [ 261.551618][T13699] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 261.759643][T13707] vcan0: entered allmulticast mode [ 261.925836][T13711] syzkaller0: entered promiscuous mode [ 261.934198][T13711] syzkaller0: entered allmulticast mode [ 262.544832][T13746] validate_nla: 2 callbacks suppressed [ 262.544851][T13746] netlink: 'syz.2.2154': attribute type 16 has an invalid length. [ 262.558697][T13746] netlink: 'syz.2.2154': attribute type 17 has an invalid length. [ 263.144555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.152692][ C0] lec:lec_tx_timeout: lec0 [ 263.157534][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 263.697980][T13727] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 263.836987][T13746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.864804][T13751] netlink: 'syz.0.2156': attribute type 21 has an invalid length. [ 263.889195][T13751] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.898464][T13751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.905891][T13751] IPv6: NLM_F_CREATE should be set when creating new route [ 263.913269][T13751] IPv6: NLM_F_CREATE should be set when creating new route [ 263.920572][T13751] IPv6: NLM_F_CREATE should be set when creating new route [ 264.094906][T13764] pimreg: entered allmulticast mode [ 264.251162][T13765] pimreg: left allmulticast mode [ 264.393669][ T29] audit: type=1107 audit(1770930235.808:6): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 264.404660][ T29] audit: type=1107 audit(1770930235.828:7): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.123904][T13815] netlink: 'syz.3.2178': attribute type 4 has an invalid length. [ 265.194747][T13819] netlink: 'syz.4.2177': attribute type 83 has an invalid length. [ 265.236106][T13818] __nla_validate_parse: 10 callbacks suppressed [ 265.236131][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'. [ 265.238641][T13815] netlink: 193176 bytes leftover after parsing attributes in process `syz.3.2178'. [ 265.766232][T13858] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 265.992182][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 266.043539][T13866] vxcan2: entered allmulticast mode [ 266.106914][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 30 seconds [ 266.182083][T13887] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2200'. [ 266.241138][T13886] tipc: Enabled bearer , priority 0 [ 266.413907][T13886] syzkaller0: entered promiscuous mode [ 266.428552][T13895] sctp: [Deprecated]: syz.2.2203 (pid 13895) Use of int in max_burst socket option deprecated. [ 266.428552][T13895] Use struct sctp_assoc_value instead [ 266.464172][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 266.481556][T13886] syzkaller0: entered allmulticast mode [ 266.487638][T13898] sctp: [Deprecated]: syz.2.2203 (pid 13898) Use of int in max_burst socket option deprecated. [ 266.487638][T13898] Use struct sctp_assoc_value instead [ 266.512492][T13886] tipc: Resetting bearer [ 266.629039][T10486] tipc: Resetting bearer [ 266.669461][T13882] tipc: Resetting bearer [ 266.832590][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2207'. [ 266.867260][T13918] netlink: 'syz.3.2208': attribute type 1 has an invalid length. [ 266.875240][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2208'. [ 266.894279][T13918] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2208'. [ 266.925341][T13918] netlink: 'syz.3.2208': attribute type 1 has an invalid length. [ 267.093869][T13930] sctp: [Deprecated]: syz.4.2210 (pid 13930) Use of int in max_burst socket option. [ 267.093869][T13930] Use struct sctp_assoc_value instead [ 268.170614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 268.178771][ C0] lec:lec_tx_timeout: lec0 [ 268.183680][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 268.362678][T13882] tipc: Disabling bearer [ 268.372970][T13927] netlink: 'syz.4.2210': attribute type 7 has an invalid length. [ 268.638019][T13952] netlink: 'syz.3.2217': attribute type 12 has an invalid length. [ 268.672307][T13952] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 268.705656][T13952] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2217'. [ 268.719965][T13952] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2217'. [ 268.744583][T13956] bond0: (slave gre0): Error: Device type is different from other slaves [ 268.896106][T13969] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 268.995389][T13977] TCP: TCP_TX_DELAY enabled [ 269.232472][T13996] syzkaller0: entered promiscuous mode [ 269.238083][T13996] syzkaller0: entered allmulticast mode [ 269.314726][T13999] lo speed is unknown, defaulting to 1000 [ 269.597561][T14016] pim6reg: entered allmulticast mode [ 269.605290][T14016] pim6reg: left allmulticast mode [ 269.611024][T14016] vcan0: left allmulticast mode [ 269.844234][T14025] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 269.891548][T14025] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 270.371309][T14055] __nla_validate_parse: 4 callbacks suppressed [ 270.371331][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 270.524763][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 270.579413][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 270.697191][T14067] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 271.192240][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 271.300848][T14089] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 271.342152][T14089] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 271.364828][T14081] xt_CT: No such helper "syz1" [ 271.387083][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.677339][T14109] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 271.705677][T14109] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2265'. [ 271.741967][T14109] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 271.771622][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2265'. [ 271.785784][T14115] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 271.791215][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 271.849084][T14115] 8021q: adding VLAN 0 to HW filter on device bond28 [ 271.949082][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 271.977615][T14122] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2269'. [ 271.986964][T14122] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2269'. [ 272.020329][T14115] bond28: (slave batadv2): Opening slave failed [ 272.149155][T14135] netlink: 'syz.0.2274': attribute type 8 has an invalid length. [ 272.318777][T14146] SET target dimension over the limit! [ 272.548726][T14162] netlink: 'syz.0.2283': attribute type 1 has an invalid length. [ 272.611252][T14165] nbd: couldn't find a device at index 1 [ 272.886312][T14180] syzkaller0: entered allmulticast mode [ 272.960076][T14188] block nbd4: Unsupported socket: should be TCP or UNIX. [ 273.190647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.198869][ C0] lec:lec_tx_timeout: lec0 [ 273.205103][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.436292][T14219] validate_nla: 5 callbacks suppressed [ 273.436314][T14219] netlink: 'syz.2.2299': attribute type 3 has an invalid length. [ 273.473648][T14219] tipc: Enabled bearer , priority 0 [ 273.546933][T14219] syzkaller0: entered promiscuous mode [ 273.553721][T14219] syzkaller0: entered allmulticast mode [ 273.561814][T14219] tipc: Resetting bearer [ 273.593423][T14216] tipc: Resetting bearer [ 275.449364][T14216] tipc: Disabling bearer [ 275.458554][T14234] lo: Caught tx_queue_len zero misconfig [ 275.470863][T14245] syzkaller1: entered promiscuous mode [ 275.476406][T14245] syzkaller1: entered allmulticast mode [ 275.559621][T14263] __nla_validate_parse: 9 callbacks suppressed [ 275.559644][T14263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2307'. [ 275.590915][T14267] team_slave_1: Caught tx_queue_len zero misconfig [ 275.744947][T14274] IPv6: sit1: Disabled Multicast RS [ 275.781532][T14274] sit1: entered allmulticast mode [ 275.812763][T14282] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2311'. [ 275.930091][T14291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2316'. [ 276.005865][T14291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2316'. [ 276.256545][T14313] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2321'. [ 276.281641][T14312] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2321'. [ 276.333450][T14318] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2319'. [ 276.360628][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 276.370131][T14318] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2319'. [ 276.380327][T14318] netlink: 'syz.0.2319': attribute type 2 has an invalid length. [ 276.402280][T14318] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2319'. [ 276.450945][T14321] syzkaller1: entered promiscuous mode [ 276.456723][T14321] syzkaller1: entered allmulticast mode [ 276.551290][T14328] nbd: illegal input index 2958377 [ 276.567918][T14335] tipc: Enabling of bearer rejected, failed to enable media [ 276.654922][T14341] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 276.673501][T14341] bond9 (unregistering): Released all slaves [ 277.509017][T14372] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 278.173352][T14393] ip6gre0: Master is either lo or non-ether device [ 278.220813][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 278.228970][ C0] lec:lec_tx_timeout: lec0 [ 278.234227][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.609026][T14409] syzkaller0: entered promiscuous mode [ 278.620943][T14409] syzkaller0: entered allmulticast mode [ 278.735393][T14424] openvswitch: netlink: EtherType 50a is less than min 600 [ 278.744069][ T7687] IPVS: starting estimator thread 0... [ 278.765523][T14416] 8021q: adding VLAN 0 to HW filter on device bond29 [ 278.817272][T14433] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 278.833696][T14425] IPVS: using max 27 ests per chain, 64800 per kthread [ 278.853372][T14422] 8021q: adding VLAN 0 to HW filter on device bond29 [ 278.869346][T14422] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address [ 278.881672][T14422] bond29: (slave vxcan1): Error -95 calling set_mac_address [ 279.252217][T14452] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 279.261874][T14444] veth5: entered promiscuous mode [ 279.682512][T14478] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 279.830747][T14494] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 280.845975][T14543] __nla_validate_parse: 17 callbacks suppressed [ 280.845996][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2390'. [ 280.868596][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 281.236901][T14558] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 281.473037][T14583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.994887][T14625] netlink: 'syz.2.2411': attribute type 9 has an invalid length. [ 282.031688][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 282.375856][T14633] syzkaller0: entered promiscuous mode [ 282.390238][T14633] syzkaller0: entered allmulticast mode [ 282.428047][T14633] tipc: Enabled bearer , priority 0 [ 283.145213][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2424'. [ 283.218379][T14633] tipc: Resetting bearer [ 283.254714][T14677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2420'. [ 283.307477][T14633] tipc: Disabling bearer [ 283.401045][T14689] sctp: [Deprecated]: syz.0.2427 (pid 14689) Use of int in max_burst socket option. [ 283.401045][T14689] Use struct sctp_assoc_value instead [ 283.553055][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2430'. [ 283.664245][T14705] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 283.822431][T14705] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.892894][T14706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.900137][T14706] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 283.943685][T14706] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 283.955580][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2438'. [ 283.969041][T14733] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2439'. [ 284.010538][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 284.018616][ C0] lec:lec_tx_timeout: lec0 [ 284.024303][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.121803][T14729] syzkaller0: entered promiscuous mode [ 284.137641][T14729] syzkaller0: entered allmulticast mode [ 284.198953][T14737] netlink: 'syz.3.2440': attribute type 11 has an invalid length. [ 284.526563][T14758] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.575461][T14760] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2447'. [ 285.857816][T14741] tunl0: entered promiscuous mode [ 285.870329][T14741] netlink: 'syz.4.2442': attribute type 3 has an invalid length. [ 285.878321][T14741] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2442'. [ 285.906186][T14746] kthread_run failed with err -4 [ 286.079380][T14778] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 286.149774][T14780] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 286.170030][T14782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'. [ 286.305175][T14788] syzkaller0: entered promiscuous mode [ 286.316711][T14792] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2458'. [ 286.326075][T14788] syzkaller0: entered allmulticast mode [ 286.334518][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2459'. [ 286.361026][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2459'. [ 286.370139][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 286.518869][T14792] bond9 (unregistering): Released all slaves [ 286.803917][T14829] bond0: Caught tx_queue_len zero misconfig [ 286.851910][T14833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.217320][T14855] : entered promiscuous mode [ 287.304289][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 287.351881][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 287.420381][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 287.470611][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 287.598345][T14884] netlink: 'syz.3.2485': attribute type 11 has an invalid length. [ 287.843485][T14896] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 289.050954][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 289.058984][ C0] lec:lec_tx_timeout: lec0 [ 289.063751][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.070616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.078695][ C0] lec:lec_tx_timeout: lec0 [ 294.083389][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.171435][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 60 seconds [ 297.082244][ T5189] udevd[5189]: worker [6220] /devices/virtual/block/nbd3 is taking a long time [ 299.090641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.099300][ C0] lec:lec_tx_timeout: lec0 [ 299.104131][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.110616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 304.118715][ C0] lec:lec_tx_timeout: lec0 [ 304.123465][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.130627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 309.138771][ C0] lec:lec_tx_timeout: lec0 [ 309.143554][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 314.150607][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.158689][ C0] lec:lec_tx_timeout: lec0 [ 314.163491][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.170733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.178804][ C0] lec:lec_tx_timeout: lec0 [ 319.183513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.416102][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 324.190626][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 324.198754][ C0] lec:lec_tx_timeout: lec0 [ 324.203410][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 326.252857][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 90 seconds [ 329.210704][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 329.218855][ C0] lec:lec_tx_timeout: lec0 [ 329.223608][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 335.060619][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 335.068683][ C0] lec:lec_tx_timeout: lec0 [ 335.074154][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.080661][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 340.088792][ C0] lec:lec_tx_timeout: lec0 [ 340.093713][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 345.100682][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 345.108834][ C0] lec:lec_tx_timeout: lec0 [ 345.113697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 347.418281][T14917] sctp: [Deprecated]: syz.1.2497 (pid 14917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.418281][T14917] Use struct sctp_sack_info instead [ 348.398220][T14934] __nla_validate_parse: 1 callbacks suppressed [ 348.398241][T14934] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2502'. [ 348.430945][T14941] set match dimension is over the limit! [ 348.461352][T14941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2506'. [ 348.633160][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 348.654820][T14957] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 348.690785][T14960] netlink: 'syz.1.2507': attribute type 16 has an invalid length. [ 348.699994][T14960] netlink: 'syz.1.2507': attribute type 17 has an invalid length. [ 348.805075][T14960] bridge0: port 2(.) entered disabled state [ 348.811354][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.873317][T14960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.891777][T14960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.940308][T14960] veth1_macvtap: left allmulticast mode [ 348.984842][T14965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.013784][T10491] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.031228][T10491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.040373][T10491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.072215][T10491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.131830][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 349.193646][T14974] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.613888][T15005] x_tables: duplicate underflow at hook 2 [ 349.713537][T15010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2526'. [ 350.120689][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 350.128827][ C0] lec:lec_tx_timeout: lec0 [ 350.133530][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 350.143440][T15037] tipc: Enabling of bearer rejected, failed to enable media [ 350.515605][T15059] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 350.645645][T15069] xt_TCPMSS: Only works on TCP SYN packets [ 350.755433][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 350.984108][T15082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2548'. [ 351.034303][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2548'. [ 351.152145][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2551'. [ 351.200638][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2551'. [ 351.347062][T15115] C: renamed from lo [ 351.355805][T15111] netlink: 'syz.1.2557': attribute type 1 has an invalid length. [ 351.379422][T15115] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.596720][T15126] xt_hashlimit: overflow, try lower: 3/0 [ 351.896391][T15143] macsec0 (unregistering): left allmulticast mode [ 351.904526][T15143] macsec0 (unregistering): left promiscuous mode [ 351.912529][T15143] bridge0: port 3(macsec0) entered disabled state [ 352.597939][T15196] openvswitch: netlink: Flow actions attr not present in new flow. [ 352.940434][T15220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.130396][T15230] syzkaller0: entered promiscuous mode [ 353.140752][T15230] syzkaller0: entered allmulticast mode [ 353.266245][T15227] netlink: 'syz.4.2597': attribute type 2 has an invalid length. [ 353.292221][T15227] : entered promiscuous mode [ 353.768112][T15270] vlan3: entered promiscuous mode [ 353.773759][T15270] vlan3: entered allmulticast mode [ 353.778940][T15270] hsr_slave_1: entered allmulticast mode [ 353.808548][T15274] netlink: 'syz.2.2609': attribute type 25 has an invalid length. [ 353.816863][T15274] __nla_validate_parse: 15 callbacks suppressed [ 353.816882][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 353.908968][T15276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2610'. [ 353.920617][T15274] netlink: 'syz.2.2609': attribute type 25 has an invalid length. [ 353.928853][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 353.962739][T15278] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 354.136523][T15288] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2612'. [ 354.188178][T15290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 354.256131][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 354.305170][T15294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2617'. [ 354.388832][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 354.399969][T15298] x_tables: duplicate underflow at hook 3 [ 354.509048][T15305] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2621'. [ 354.572780][T15311] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 354.634592][T15315] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 354.728633][T15311] gretap2: entered promiscuous mode [ 354.833416][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'. [ 355.140673][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 355.148836][ C0] lec:lec_tx_timeout: lec0 [ 355.154029][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 355.212111][T15354] netlink: 'syz.2.2632': attribute type 9 has an invalid length. [ 355.743836][T15377] "syz.2.2641" (15377) uses obsolete ecb(arc4) skcipher [ 355.922029][T15386] batadv_slave_0: entered promiscuous mode [ 356.049919][T15386] batadv_slave_0: left promiscuous mode [ 356.076505][T15394] bridge0: left allmulticast mode [ 356.330995][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 120 seconds [ 356.357505][T15414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.435459][T15414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.465297][T15414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.475296][T15414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.499130][T15414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.636873][T15438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.932928][T15456] netlink: 'syz.2.2663': attribute type 2 has an invalid length. [ 357.124785][T15477] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 357.152862][T15477] netlink: 'syz.2.2669': attribute type 7 has an invalid length. [ 357.161624][T15477] netlink: 'syz.2.2669': attribute type 8 has an invalid length. [ 357.320077][T15485] siw: device registration error -23 [ 357.469764][T15492] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.351081][T15551] bond1: option mode: unable to set because the bond device is up [ 358.793196][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.811035][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.820225][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.829253][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.838594][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.867150][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.875089][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.882940][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.897714][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.905664][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.974827][T15569] lo speed is unknown, defaulting to 1000 [ 359.158184][T15580] netlink: 'syz.4.2696': attribute type 5 has an invalid length. [ 359.193874][T15585] __nla_validate_parse: 15 callbacks suppressed [ 359.193895][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 359.407198][T15592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2700'. [ 359.563670][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 359.587279][T15587] lo speed is unknown, defaulting to 1000 [ 359.688411][T15602] syzkaller0: entered promiscuous mode [ 359.694220][T15602] syzkaller0: entered allmulticast mode [ 359.706908][T15602] netlink: 'syz.4.2703': attribute type 16 has an invalid length. [ 359.731335][T15602] netlink: 'syz.4.2703': attribute type 17 has an invalid length. [ 359.743954][T15602] tunl0: left promiscuous mode [ 359.765816][T15602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.059646][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2705'. [ 360.160523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 360.168633][ C0] lec:lec_tx_timeout: lec0 [ 360.173808][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 360.228476][T15616] tc_dump_action: action bad kind [ 360.450094][T15624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2710'. [ 360.524006][T15625] syzkaller0: entered promiscuous mode [ 360.529553][T15625] syzkaller0: entered allmulticast mode [ 360.973530][ T51] Bluetooth: hci5: command tx timeout [ 361.898849][T15569] chnl_net:caif_netlink_parms(): no params data found [ 362.342183][T15569] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.349652][T15569] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.357550][T15569] bridge_slave_0: entered allmulticast mode [ 362.358140][T15663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2720'. [ 362.419326][T15569] bridge_slave_0: entered promiscuous mode [ 362.443127][T15569] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.450322][T15569] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.461883][T15569] bridge_slave_1: entered allmulticast mode [ 362.507999][T15569] bridge_slave_1: entered promiscuous mode [ 362.802122][T15569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.901347][T15569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.051014][ T51] Bluetooth: hci5: command tx timeout [ 363.164972][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'. [ 363.212353][T15569] team0: Port device team_slave_0 added [ 363.225275][T15569] team0: Port device team_slave_1 added [ 363.233839][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'. [ 363.254473][T15695] xfrm1: entered promiscuous mode [ 363.259623][T15695] xfrm1: entered allmulticast mode [ 364.650245][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 365.022646][T15569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.029668][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.058634][T15569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.081468][T15569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.088476][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.117508][T15569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.145934][ T51] Bluetooth: hci5: command tx timeout [ 365.180534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 365.188609][ C0] lec:lec_tx_timeout: lec0 [ 365.194635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 365.254783][T15739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.277417][T15742] netlink: 'syz.3.2739': attribute type 39 has an invalid length. [ 365.295270][T15743] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 365.312923][T15569] hsr_slave_0: entered promiscuous mode [ 365.319723][T15569] hsr_slave_1: entered promiscuous mode [ 365.363027][T15569] debugfs: 'hsr0' already exists in 'hsr' [ 365.368833][T15569] Cannot create hsr debugfs directory [ 365.409131][T15750] netlink: 'syz.2.2742': attribute type 10 has an invalid length. [ 365.432626][T15750] team0 (unregistering): Port device team_slave_0 removed [ 365.452837][T15750] team0 (unregistering): Port device team_slave_1 removed [ 365.475735][T15753] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 366.038839][T15569] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 367.210911][ T51] Bluetooth: hci5: command tx timeout [ 370.210848][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 370.218946][ C0] lec:lec_tx_timeout: lec0 [ 370.223703][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.010581][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 376.018668][ C0] lec:lec_tx_timeout: lec0 [ 381.389113][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.400235][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.409222][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.418727][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.426694][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.501011][T15784] lo speed is unknown, defaulting to 1000 [ 381.534865][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.544706][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.553064][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.564072][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.574269][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.583535][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.598008][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.606591][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.615210][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.623254][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.786207][T15786] lo speed is unknown, defaulting to 1000 [ 382.018924][T15788] lo speed is unknown, defaulting to 1000 [ 382.248259][T15784] chnl_net:caif_netlink_parms(): no params data found [ 382.470128][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 382.480296][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 382.488791][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 382.497122][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 382.505092][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 382.587231][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.595277][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.603116][T15784] bridge_slave_0: entered allmulticast mode [ 382.611794][T15784] bridge_slave_0: entered promiscuous mode [ 382.625726][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.633093][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.640384][T15784] bridge_slave_1: entered allmulticast mode [ 382.649198][T15784] bridge_slave_1: entered promiscuous mode [ 382.665574][T15796] lo speed is unknown, defaulting to 1000 [ 382.747013][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.792914][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.905184][T15784] team0: Port device team_slave_0 added [ 382.918706][T15784] team0: Port device team_slave_1 added [ 383.019173][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.026330][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.052524][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.069576][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.076667][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.102681][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.279621][T15784] hsr_slave_0: entered promiscuous mode [ 383.288164][T15784] hsr_slave_1: entered promiscuous mode [ 383.301235][T15784] debugfs: 'hsr0' already exists in 'hsr' [ 383.307031][T15784] Cannot create hsr debugfs directory [ 383.328996][T15786] chnl_net:caif_netlink_parms(): no params data found [ 383.451417][ T51] Bluetooth: hci0: command tx timeout [ 383.541876][T15788] chnl_net:caif_netlink_parms(): no params data found [ 383.655621][T15786] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.662964][T15786] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.670417][T15786] bridge_slave_0: entered allmulticast mode [ 383.678585][T15786] bridge_slave_0: entered promiscuous mode [ 383.690825][ T5834] Bluetooth: hci7: command tx timeout [ 383.697206][ T51] Bluetooth: hci6: command tx timeout [ 383.716305][T15786] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.723805][T15786] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.731786][T15786] bridge_slave_1: entered allmulticast mode [ 383.739117][T15786] bridge_slave_1: entered promiscuous mode [ 383.800958][T15786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.839359][T15786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.857600][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 383.873866][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 383.918984][T15788] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.926473][T15788] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.934565][T15788] bridge_slave_0: entered allmulticast mode [ 383.942930][T15788] bridge_slave_0: entered promiscuous mode [ 383.972521][T15786] team0: Port device team_slave_0 added [ 383.979845][T15788] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.987713][T15788] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.995144][T15788] bridge_slave_1: entered allmulticast mode [ 384.003077][T15788] bridge_slave_1: entered promiscuous mode [ 384.021312][T15786] team0: Port device team_slave_1 added [ 384.107674][T15786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.115080][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.141847][T15786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.156037][T15786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.164916][T15786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.191619][T15786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.207941][T15788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.223781][T15788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.280175][T15796] chnl_net:caif_netlink_parms(): no params data found [ 384.304538][T15788] team0: Port device team_slave_0 added [ 384.337594][T15788] team0: Port device team_slave_1 added [ 384.384055][T15786] hsr_slave_0: entered promiscuous mode [ 384.391281][T15786] hsr_slave_1: entered promiscuous mode [ 384.397684][T15786] debugfs: 'hsr0' already exists in 'hsr' [ 384.403584][T15786] Cannot create hsr debugfs directory [ 384.436967][T15788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.444215][T15788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.471015][T15788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.504412][T15788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.511483][T15788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.537914][T15788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.570799][ T51] Bluetooth: hci8: command tx timeout [ 384.605727][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.613044][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.620278][T15796] bridge_slave_0: entered allmulticast mode [ 384.627957][T15796] bridge_slave_0: entered promiscuous mode [ 384.651489][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.658847][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.666968][T15796] bridge_slave_1: entered allmulticast mode [ 384.674574][T15796] bridge_slave_1: entered promiscuous mode [ 384.749230][T15788] hsr_slave_0: entered promiscuous mode [ 384.756569][T15788] hsr_slave_1: entered promiscuous mode [ 384.763564][T15788] debugfs: 'hsr0' already exists in 'hsr' [ 384.769325][T15788] Cannot create hsr debugfs directory [ 384.786976][T15796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.818202][T15796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.907351][T15796] team0: Port device team_slave_0 added [ 384.935743][T15796] team0: Port device team_slave_1 added [ 385.024444][T15796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.031786][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.058458][T15796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.071849][T15796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.078859][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.106009][T15796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.212713][T15796] hsr_slave_0: entered promiscuous mode [ 385.219902][T15796] hsr_slave_1: entered promiscuous mode [ 385.226692][T15796] debugfs: 'hsr0' already exists in 'hsr' [ 385.232681][T15796] Cannot create hsr debugfs directory [ 385.531999][ T51] Bluetooth: hci0: command tx timeout [ 385.770831][ T5834] Bluetooth: hci7: command tx timeout [ 385.776592][ T51] Bluetooth: hci6: command tx timeout [ 386.415286][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 150 seconds [ 386.650932][ T51] Bluetooth: hci8: command tx timeout [ 387.611049][ T51] Bluetooth: hci0: command tx timeout [ 387.850770][ T51] Bluetooth: hci6: command tx timeout [ 387.850789][ T5834] Bluetooth: hci7: command tx timeout [ 388.730756][ T5834] Bluetooth: hci8: command tx timeout [ 389.050736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 389.058788][ C0] lec:lec_tx_timeout: lec0 [ 389.691044][ T5834] Bluetooth: hci0: command tx timeout [ 389.930760][ T5834] Bluetooth: hci6: command tx timeout [ 389.930769][ T51] Bluetooth: hci7: command tx timeout [ 390.810785][ T5834] Bluetooth: hci8: command tx timeout [ 396.091127][ T8062] lec:lec_start_xmit: lec0:No lecd attached [ 401.100599][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 401.109366][ C0] lec:lec_tx_timeout: lec0 [ 416.500879][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 180 seconds [ 418.511714][ T5189] udevd[5189]: worker [6220] /devices/virtual/block/nbd3 timeout; kill it [ 418.520867][ T5189] udevd[5189]: seq 16785 '/devices/virtual/block/nbd3' killed [ 418.851433][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 418.861115][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 418.869651][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 418.879374][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 418.888198][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 418.926342][T15820] lo speed is unknown, defaulting to 1000 [ 419.320932][T15820] chnl_net:caif_netlink_parms(): no params data found [ 419.402730][T15820] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.409934][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.417639][T15820] bridge_slave_0: entered allmulticast mode [ 419.425327][T15820] bridge_slave_0: entered promiscuous mode [ 419.433702][T15820] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.441348][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.448736][T15820] bridge_slave_1: entered allmulticast mode [ 419.456850][T15820] bridge_slave_1: entered promiscuous mode [ 419.490181][T15820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.503055][T15820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.537589][T15820] team0: Port device team_slave_0 added [ 419.546291][T15820] team0: Port device team_slave_1 added [ 419.574546][T15820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.582198][T15820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.608428][T15820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.621311][T15820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.628314][T15820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.655016][T15820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.709846][T15820] hsr_slave_0: entered promiscuous mode [ 419.717160][T15820] hsr_slave_1: entered promiscuous mode [ 419.724099][T15820] debugfs: 'hsr0' already exists in 'hsr' [ 419.729883][T15820] Cannot create hsr debugfs directory [ 420.970641][ T5834] Bluetooth: hci9: command tx timeout [ 423.050771][ T5834] Bluetooth: hci9: command tx timeout [ 425.140870][ T5834] Bluetooth: hci9: command tx timeout [ 427.210842][ T5834] Bluetooth: hci9: command tx timeout [ 441.409014][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 441.420128][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 441.429321][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 441.443143][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 441.451581][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 441.485033][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 441.494324][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 441.504045][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 441.513974][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 441.528017][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 441.534805][T15830] lo speed is unknown, defaulting to 1000 [ 441.697865][T15832] lo speed is unknown, defaulting to 1000 [ 442.125092][T15830] chnl_net:caif_netlink_parms(): no params data found [ 442.269884][T15830] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.277273][T15830] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.284984][T15830] bridge_slave_0: entered allmulticast mode [ 442.292691][T15830] bridge_slave_0: entered promiscuous mode [ 442.302172][T15830] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.320710][T15830] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.328100][T15830] bridge_slave_1: entered allmulticast mode [ 442.338391][T15830] bridge_slave_1: entered promiscuous mode [ 442.386386][T15830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.418687][T15830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.540373][T15830] team0: Port device team_slave_0 added [ 442.567388][ T5834] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 442.578110][ T5834] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 442.588329][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 442.597688][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 442.605708][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 442.639422][T15830] team0: Port device team_slave_1 added [ 442.687479][T15832] chnl_net:caif_netlink_parms(): no params data found [ 442.695531][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 442.707260][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 442.715665][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 442.724687][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 442.740970][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 442.753734][T15830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.769561][T15830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.796124][T15830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.809385][T15830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.816897][T15830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.843156][T15830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.916753][T15844] lo speed is unknown, defaulting to 1000 [ 443.019679][T15830] hsr_slave_0: entered promiscuous mode [ 443.027682][T15830] hsr_slave_1: entered promiscuous mode [ 443.034631][T15830] debugfs: 'hsr0' already exists in 'hsr' [ 443.040752][T15830] Cannot create hsr debugfs directory [ 443.046685][T15832] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.054185][T15832] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.062629][T15832] bridge_slave_0: entered allmulticast mode [ 443.070729][T15832] bridge_slave_0: entered promiscuous mode [ 443.085187][T15832] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.092536][T15832] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.099865][T15832] bridge_slave_1: entered allmulticast mode [ 443.108175][T15832] bridge_slave_1: entered promiscuous mode [ 443.218515][T15832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.237963][T15847] lo speed is unknown, defaulting to 1000 [ 443.252936][T15832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.353910][T15832] team0: Port device team_slave_0 added [ 443.393364][T15832] team0: Port device team_slave_1 added [ 443.475458][T15832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.482808][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.509686][T15832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.524535][T15832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.531767][ T5836] Bluetooth: hci10: command tx timeout [ 443.538633][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.600802][T15832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.621200][ T5836] Bluetooth: hci11: command tx timeout [ 443.715407][T15832] hsr_slave_0: entered promiscuous mode [ 443.723289][T15832] hsr_slave_1: entered promiscuous mode [ 443.729820][T15832] debugfs: 'hsr0' already exists in 'hsr' [ 443.736341][T15832] Cannot create hsr debugfs directory [ 444.301143][T15844] chnl_net:caif_netlink_parms(): no params data found [ 444.387400][T15847] chnl_net:caif_netlink_parms(): no params data found [ 444.466937][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.474387][T15844] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.481976][T15844] bridge_slave_0: entered allmulticast mode [ 444.489720][T15844] bridge_slave_0: entered promiscuous mode [ 444.505561][T15844] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.513541][T15844] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.521076][T15844] bridge_slave_1: entered allmulticast mode [ 444.537728][T15844] bridge_slave_1: entered promiscuous mode [ 444.629002][T15847] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.636352][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.644429][T15847] bridge_slave_0: entered allmulticast mode [ 444.655317][T15847] bridge_slave_0: entered promiscuous mode [ 444.659120][ T5836] Bluetooth: hci12: command tx timeout [ 444.671515][T15844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.681292][T15847] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.688449][T15847] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.696011][T15847] bridge_slave_1: entered allmulticast mode [ 444.704727][T15847] bridge_slave_1: entered promiscuous mode [ 444.714755][T15844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.771728][T15844] team0: Port device team_slave_0 added [ 444.797993][T15844] team0: Port device team_slave_1 added [ 444.806683][T15847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.816888][ T5836] Bluetooth: hci13: command tx timeout [ 444.827592][T15847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.893031][T15844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.900023][T15844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.927070][T15844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.942469][T15847] team0: Port device team_slave_0 added [ 444.949090][T15844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.956613][T15844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.983312][T15844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.996718][T15847] team0: Port device team_slave_1 added [ 445.045409][T15847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.052713][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.079249][T15847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.103302][T15847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.110311][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.136679][T15847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.162860][T15844] hsr_slave_0: entered promiscuous mode [ 445.171028][T15844] hsr_slave_1: entered promiscuous mode [ 445.177617][T15844] debugfs: 'hsr0' already exists in 'hsr' [ 445.184308][T15844] Cannot create hsr debugfs directory [ 445.247760][T15847] hsr_slave_0: entered promiscuous mode [ 445.255004][T15847] hsr_slave_1: entered promiscuous mode [ 445.261750][T15847] debugfs: 'hsr0' already exists in 'hsr' [ 445.267501][T15847] Cannot create hsr debugfs directory [ 445.296214][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.308018][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 445.610685][ T5836] Bluetooth: hci10: command tx timeout [ 445.690790][ T5836] Bluetooth: hci11: command tx timeout [ 446.572487][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 210 seconds [ 446.730885][ T5836] Bluetooth: hci12: command tx timeout [ 446.891103][ T5836] Bluetooth: hci13: command tx timeout [ 447.690827][ T5836] Bluetooth: hci10: command tx timeout [ 447.770827][ T5836] Bluetooth: hci11: command tx timeout [ 448.810760][ T5836] Bluetooth: hci12: command tx timeout [ 448.971233][ T5836] Bluetooth: hci13: command tx timeout [ 449.770792][ T5836] Bluetooth: hci10: command tx timeout [ 449.850774][ T5836] Bluetooth: hci11: command tx timeout [ 450.890719][ T5836] Bluetooth: hci12: command tx timeout [ 451.050787][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 451.052461][ T5836] Bluetooth: hci13: command tx timeout [ 451.058930][ C0] lec:lec_tx_timeout: lec0 [ 460.137484][ T8062] lec:lec_start_xmit: lec0:No lecd attached [ 465.150628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 465.158777][ C0] lec:lec_tx_timeout: lec0 [ 476.654321][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 240 seconds [ 479.411846][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 479.420156][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 479.429221][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 479.438466][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 479.447848][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 479.485714][T15870] lo speed is unknown, defaulting to 1000 [ 479.894244][T15870] chnl_net:caif_netlink_parms(): no params data found [ 479.987091][T15870] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.994483][T15870] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.002544][T15870] bridge_slave_0: entered allmulticast mode [ 480.010862][T15870] bridge_slave_0: entered promiscuous mode [ 480.019366][T15870] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.027214][T15870] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.035693][T15870] bridge_slave_1: entered allmulticast mode [ 480.043599][T15870] bridge_slave_1: entered promiscuous mode [ 480.078669][T15870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.091927][T15870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.126740][T15870] team0: Port device team_slave_0 added [ 480.135772][T15870] team0: Port device team_slave_1 added [ 480.166051][T15870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.173323][T15870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.200370][T15870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.214758][T15870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.222125][T15870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.248941][T15870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.299779][T15870] hsr_slave_0: entered promiscuous mode [ 480.306749][T15870] hsr_slave_1: entered promiscuous mode [ 480.313768][T15870] debugfs: 'hsr0' already exists in 'hsr' [ 480.319643][T15870] Cannot create hsr debugfs directory [ 481.531280][ T5836] Bluetooth: hci14: command tx timeout [ 483.210967][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 483.610886][ T5834] Bluetooth: hci14: command tx timeout [ 485.690813][ T5834] Bluetooth: hci14: command tx timeout [ 487.770723][ T5834] Bluetooth: hci14: command tx timeout [ 501.982539][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 501.992911][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 502.002776][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 502.026925][T15884] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 502.035756][T15884] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 502.035983][T15885] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 502.051565][T15884] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 502.059807][T15884] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 502.076928][T15884] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 502.085253][T15884] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 502.123759][T15880] lo speed is unknown, defaulting to 1000 [ 502.281132][T15882] lo speed is unknown, defaulting to 1000 [ 502.669693][T15880] chnl_net:caif_netlink_parms(): no params data found [ 502.814879][T15880] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.824476][T15880] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.832217][T15880] bridge_slave_0: entered allmulticast mode [ 502.839631][T15880] bridge_slave_0: entered promiscuous mode [ 502.853333][T15880] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.860891][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.868227][T15880] bridge_slave_1: entered allmulticast mode [ 502.876406][T15880] bridge_slave_1: entered promiscuous mode [ 503.002610][T15880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.025297][T15880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.061395][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 503.090696][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 503.101903][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 503.112494][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 503.120321][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 503.173005][T15880] team0: Port device team_slave_0 added [ 503.189260][ T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 503.198675][ T51] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 503.208347][ T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 503.223332][ T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 503.231290][T15880] team0: Port device team_slave_1 added [ 503.240814][ T51] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 503.288837][T15880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.296437][T15880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.323061][T15880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.358243][T15880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.365608][T15880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.392378][T15880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.428484][T15895] lo speed is unknown, defaulting to 1000 [ 503.472472][T15880] hsr_slave_0: entered promiscuous mode [ 503.479543][T15880] hsr_slave_1: entered promiscuous mode [ 503.486349][T15880] debugfs: 'hsr0' already exists in 'hsr' [ 503.492359][T15880] Cannot create hsr debugfs directory [ 503.565353][T15882] chnl_net:caif_netlink_parms(): no params data found [ 503.690698][T15884] Bluetooth: hci0: command 0x0406 tx timeout [ 503.729050][T15897] lo speed is unknown, defaulting to 1000 [ 503.851122][T15882] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.858313][T15882] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.881129][T15882] bridge_slave_0: entered allmulticast mode [ 503.889356][T15882] bridge_slave_0: entered promiscuous mode [ 503.938598][T15882] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.946874][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.954314][T15882] bridge_slave_1: entered allmulticast mode [ 503.962812][T15882] bridge_slave_1: entered promiscuous mode [ 504.054131][T15882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.067663][T15882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.090749][ T5834] Bluetooth: hci15: command tx timeout [ 504.136010][T15882] team0: Port device team_slave_0 added [ 504.145720][T15882] team0: Port device team_slave_1 added [ 504.172023][ T5834] Bluetooth: hci16: command tx timeout [ 504.224739][T15882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.232186][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.259216][T15882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.303775][T15882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.312106][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.338623][T15882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.518709][T15882] hsr_slave_0: entered promiscuous mode [ 504.525685][T15882] hsr_slave_1: entered promiscuous mode [ 504.532748][T15882] debugfs: 'hsr0' already exists in 'hsr' [ 504.538766][T15882] Cannot create hsr debugfs directory [ 504.708268][T15895] chnl_net:caif_netlink_parms(): no params data found [ 504.887730][T15895] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.895441][T15895] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.903106][T15895] bridge_slave_0: entered allmulticast mode [ 504.911981][T15895] bridge_slave_0: entered promiscuous mode [ 504.921178][T15895] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.928457][T15895] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.936299][T15895] bridge_slave_1: entered allmulticast mode [ 504.944402][T15895] bridge_slave_1: entered promiscuous mode [ 505.020268][T15895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.042091][T15895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.107299][T15897] chnl_net:caif_netlink_parms(): no params data found [ 505.122861][T15895] team0: Port device team_slave_0 added [ 505.139124][T15895] team0: Port device team_slave_1 added [ 505.211247][ T5834] Bluetooth: hci17: command tx timeout [ 505.221158][T15895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.228129][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.254704][T15895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.280708][T15895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.287686][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.315323][T15895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.326218][ T5834] Bluetooth: hci18: command tx timeout [ 505.380010][T15897] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.395884][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.403425][T15897] bridge_slave_0: entered allmulticast mode [ 505.418621][T15897] bridge_slave_0: entered promiscuous mode [ 505.445873][T15895] hsr_slave_0: entered promiscuous mode [ 505.453794][T15895] hsr_slave_1: entered promiscuous mode [ 505.460245][T15895] debugfs: 'hsr0' already exists in 'hsr' [ 505.466141][T15895] Cannot create hsr debugfs directory [ 505.471916][T15897] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.479064][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.487103][T15897] bridge_slave_1: entered allmulticast mode [ 505.495321][T15897] bridge_slave_1: entered promiscuous mode [ 505.544394][T15897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.569437][T15897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.622598][T15897] team0: Port device team_slave_0 added [ 505.642916][T15897] team0: Port device team_slave_1 added [ 505.723887][T15897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.731178][T15897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.757369][T15897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.776133][T15897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.783386][T15897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.809601][T15897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.885613][T15897] hsr_slave_0: entered promiscuous mode [ 505.892992][T15897] hsr_slave_1: entered promiscuous mode [ 505.899583][T15897] debugfs: 'hsr0' already exists in 'hsr' [ 505.905554][T15897] Cannot create hsr debugfs directory [ 506.170622][ T5834] Bluetooth: hci15: command tx timeout [ 506.250987][ T5834] Bluetooth: hci16: command tx timeout [ 506.735163][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.744009][ T5154] block nbd3: Possible stuck request ffff8880264d8000: control (read@0,4096B). Runtime 270 seconds [ 506.758735][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 507.290875][ T5834] Bluetooth: hci17: command tx timeout [ 507.371099][ T5834] Bluetooth: hci18: command tx timeout [ 508.250663][ T5834] Bluetooth: hci15: command tx timeout [ 508.330812][ T5834] Bluetooth: hci16: command tx timeout [ 508.814563][ T5834] Bluetooth: hci8: command 0x0406 tx timeout [ 508.815474][T15885] Bluetooth: hci7: command 0x0406 tx timeout [ 508.822113][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 509.370945][T15920] Bluetooth: hci17: command tx timeout [ 509.450801][T15920] Bluetooth: hci18: command tx timeout [ 510.330666][T15920] Bluetooth: hci15: command tx timeout [ 510.411064][T15920] Bluetooth: hci16: command tx timeout [ 511.451026][T15920] Bluetooth: hci17: command tx timeout [ 511.530732][T15920] Bluetooth: hci18: command tx timeout [ 512.010554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 512.018637][ C0] lec:lec_tx_timeout: lec0 [ 513.131018][ T30] INFO: task syz-executor:15569 blocked for more than 143 seconds. [ 513.138998][ T30] Not tainted syzkaller #0 [ 513.145060][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.154028][ T30] task:syz-executor state:D stack:22680 pid:15569 tgid:15569 ppid:1 task_flags:0x400140 flags:0x00080002 [ 513.166207][ T30] Call Trace: [ 513.169612][ T30] [ 513.172779][ T30] __schedule+0x1568/0x5290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.177339][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.182631][ T30] ? __pfx___schedule+0x10/0x10 [ 513.187743][ T30] ? schedule+0x90/0x360 [ 513.192262][ T30] schedule+0x164/0x360 [ 513.196570][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.202830][ T30] __mutex_lock+0x7fe/0x1300 [ 513.207481][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 513.213714][ T30] ? __mutex_lock+0x5ac/0x1300 [ 513.218543][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 513.225078][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.230171][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.235368][ T30] ? radix_tree_lookup+0x240/0x290 [ 513.240735][ T30] genl_rcv_msg+0x10b/0x7a0 [ 513.245304][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.250372][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.255658][ T30] netlink_rcv_skb+0x232/0x4b0 [ 513.260662][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.265762][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.271531][ T30] ? genl_rcv+0x19/0x40 [ 513.275767][ T30] ? down_read+0x272/0x2e0 [ 513.280237][ T30] ? genl_rcv+0xd/0x40 [ 513.284742][ T30] genl_rcv+0x28/0x40 [ 513.288790][ T30] netlink_unicast+0x80f/0x9b0 [ 513.295091][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 513.302272][ T30] ? netlink_sendmsg+0x650/0xb40 [ 513.307265][ T30] ? skb_put+0x11b/0x210 [ 513.313067][ T30] netlink_sendmsg+0x813/0xb40 [ 513.317899][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.324502][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.329502][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.335303][ T30] __sys_sendto+0x709/0x7a0 [ 513.339863][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 513.345676][ T30] ? fd_install+0x94/0x3d0 [ 513.350143][ T30] ? fd_install+0x306/0x3d0 [ 513.355124][ T30] __x64_sys_sendto+0xde/0x100 [ 513.360384][ T30] do_syscall_64+0x14d/0xf80 [ 513.365537][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.372106][ T30] ? trace_irq_disable+0x37/0x100 [ 513.377176][ T30] ? clear_bhb_loop+0x40/0x90 [ 513.382881][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.388836][ T30] RIP: 0033:0x7f0f68b5c84e [ 513.393747][ T30] RSP: 002b:00007ffc851a15e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.402763][ T30] RAX: ffffffffffffffda RBX: 00005555713c3500 RCX: 00007f0f68b5c84e [ 513.411374][ T30] RDX: 0000000000000020 RSI: 00007f0f69944670 RDI: 0000000000000005 [ 513.419567][ T30] RBP: 0000000000000001 R08: 00007ffc851a1664 R09: 000000000000000c [ 513.428248][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 513.436696][ T30] R13: 00007ffc851a16b8 R14: 00007f0f69944670 R15: 0000000000000000 [ 513.445193][ T30] [ 513.448325][ T30] INFO: task syz.3.2745:15760 blocked for more than 143 seconds. [ 513.456591][ T30] Not tainted syzkaller #0 [ 513.462027][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.471449][ T30] task:syz.3.2745 state:D stack:26200 pid:15760 tgid:15758 ppid:5820 task_flags:0x480140 flags:0x00080002 [ 513.483896][ T30] Call Trace: [ 513.487218][ T30] [ 513.490182][ T30] __schedule+0x1568/0x5290 [ 513.495282][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.500295][ T30] ? __pfx___schedule+0x10/0x10 [ 513.505744][ T30] ? schedule+0x90/0x360 [ 513.510047][ T30] schedule+0x164/0x360 [ 513.514858][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 513.520974][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 513.527116][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 513.534205][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 513.540815][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 513.547023][ T30] nbd_set_size+0x516/0x6d0 [ 513.552758][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 513.557851][ T30] ? nla_memcpy+0x5b/0xc0 [ 513.562900][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 513.568256][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 513.574570][ T30] ? rcu_is_watching+0x15/0xb0 [ 513.579395][ T30] ? __nla_parse+0x40/0x60 [ 513.584469][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 513.591132][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 513.596736][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.603690][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.608690][ T30] genl_rcv_msg+0x61c/0x7a0 [ 513.613812][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.618891][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 513.625395][ T30] netlink_rcv_skb+0x232/0x4b0 [ 513.630216][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.635866][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.641664][ T30] ? genl_rcv+0x19/0x40 [ 513.645892][ T30] ? down_read+0x272/0x2e0 [ 513.650828][ T30] ? genl_rcv+0xd/0x40 [ 513.654965][ T30] genl_rcv+0x28/0x40 [ 513.658991][ T30] netlink_unicast+0x80f/0x9b0 [ 513.665207][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 513.671363][ T30] ? netlink_sendmsg+0x650/0xb40 [ 513.676370][ T30] netlink_sendmsg+0x813/0xb40 [ 513.681824][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.687158][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.721021][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.726411][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.747799][ T30] ____sys_sendmsg+0xa68/0xad0 [ 513.756653][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.767820][ T30] ? import_iovec+0x73/0xa0 [ 513.773423][ T30] ___sys_sendmsg+0x2a5/0x360 [ 513.778182][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 513.785540][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.791209][ T30] ? futex_wait+0x29a/0x380 [ 513.795797][ T30] ? __fget_files+0x2a/0x420 [ 513.801004][ T30] ? __fget_files+0x3a0/0x420 [ 513.805747][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 513.811067][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.816598][ T30] ? rcu_is_watching+0x15/0xb0 [ 513.821958][ T30] do_syscall_64+0x14d/0xf80 [ 513.826589][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.832787][ T30] ? trace_irq_disable+0x37/0x100 [ 513.837849][ T30] ? clear_bhb_loop+0x40/0x90 [ 513.842898][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.848868][ T30] RIP: 0033:0x7fd5e7b9bf79 [ 513.853460][ T30] RSP: 002b:00007fd5e89a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.862161][ T30] RAX: ffffffffffffffda RBX: 00007fd5e7e15fa0 RCX: 00007fd5e7b9bf79 [ 513.870173][ T30] RDX: 0000000000000008 RSI: 0000200000000800 RDI: 0000000000000007 [ 513.878259][ T30] RBP: 00007fd5e7c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 513.886473][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.894706][ T30] R13: 00007fd5e7e16038 R14: 00007fd5e7e15fa0 R15: 00007ffdad768608 [ 513.902916][ T30] [ 513.906036][ T30] INFO: task syz.2.2748:15767 blocked for more than 144 seconds. [ 513.913957][ T30] Not tainted syzkaller #0 [ 513.918935][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.927829][ T30] task:syz.2.2748 state:D stack:27840 pid:15767 tgid:15766 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 513.940352][ T30] Call Trace: [ 513.943882][ T30] [ 513.946924][ T30] __schedule+0x1568/0x5290 [ 513.951744][ T30] ? __pfx___schedule+0x10/0x10 [ 513.956667][ T30] ? schedule+0x90/0x360 [ 513.961109][ T30] schedule+0x164/0x360 [ 513.965313][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.970997][ T30] __mutex_lock+0x7fe/0x1300 [ 513.975639][ T30] ? __mutex_lock+0x5ac/0x1300 [ 513.980627][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 513.985458][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.990622][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 513.995782][ T30] ? radix_tree_lookup+0x240/0x290 [ 514.001127][ T30] genl_rcv_msg+0x10b/0x7a0 [ 514.005692][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.011080][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.016070][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.021716][ T30] netlink_rcv_skb+0x232/0x4b0 [ 514.026524][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.031730][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.037056][ T30] ? genl_rcv+0x19/0x40 [ 514.041576][ T30] ? down_read+0x272/0x2e0 [ 514.046053][ T30] ? genl_rcv+0xd/0x40 [ 514.050251][ T30] genl_rcv+0x28/0x40 [ 514.054311][ T30] netlink_unicast+0x80f/0x9b0 [ 514.059102][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 514.064723][ T30] ? netlink_sendmsg+0x650/0xb40 [ 514.069708][ T30] ? skb_put+0x11b/0x210 [ 514.074175][ T30] netlink_sendmsg+0x813/0xb40 [ 514.079019][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.084525][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.089523][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.095129][ T30] __sys_sendto+0x709/0x7a0 [ 514.100039][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 514.105257][ T30] ? exc_page_fault+0x6a/0xc0 [ 514.109956][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 514.115497][ T30] __x64_sys_sendto+0xde/0x100 [ 514.120301][ T30] do_syscall_64+0x14d/0xf80 [ 514.125085][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.131325][ T30] ? trace_irq_disable+0x37/0x100 [ 514.136390][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.141229][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.147209][ T30] RIP: 0033:0x7fa3e975c84e [ 514.151758][ T30] RSP: 002b:00007fa3ea690e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 514.160206][ T30] RAX: ffffffffffffffda RBX: 00007fa3ea6926c0 RCX: 00007fa3e975c84e [ 514.168408][ T30] RDX: 0000000000000020 RSI: 00007fa3ea691000 RDI: 0000000000000003 [ 514.176723][ T30] RBP: 0000000000000000 R08: 00007fa3ea690f04 R09: 000000000000000c [ 514.184903][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 514.193227][ T30] R13: 00007fa3ea690f58 R14: 00007fa3ea691000 R15: 0000000000000000 [ 514.201381][ T30] [ 514.204463][ T30] INFO: task syz.4.2750:15772 blocked for more than 144 seconds. [ 514.212312][ T30] Not tainted syzkaller #0 [ 514.217276][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.226749][ T30] task:syz.4.2750 state:D stack:25888 pid:15772 tgid:15771 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 514.239079][ T30] Call Trace: [ 514.242867][ T30] [ 514.245843][ T30] __schedule+0x1568/0x5290 [ 514.250805][ T30] ? __pfx___schedule+0x10/0x10 [ 514.255828][ T30] ? schedule+0x90/0x360 [ 514.260160][ T30] schedule+0x164/0x360 [ 514.264683][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.270326][ T30] __mutex_lock+0x7fe/0x1300 [ 514.275062][ T30] ? __mutex_lock+0x5ac/0x1300 [ 514.279977][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 514.285007][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.290093][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 514.295339][ T30] ? radix_tree_lookup+0x240/0x290 [ 514.300832][ T30] genl_rcv_msg+0x10b/0x7a0 [ 514.305413][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.310588][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.315772][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.321529][ T30] netlink_rcv_skb+0x232/0x4b0 [ 514.326319][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.331817][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.337226][ T30] ? genl_rcv+0x19/0x40 [ 514.341586][ T30] ? down_read+0x272/0x2e0 [ 514.346245][ T30] ? genl_rcv+0xd/0x40 [ 514.350359][ T30] genl_rcv+0x28/0x40 [ 514.354668][ T30] netlink_unicast+0x80f/0x9b0 [ 514.359486][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 514.364997][ T30] ? netlink_sendmsg+0x650/0xb40 [ 514.370209][ T30] ? skb_put+0x11b/0x210 [ 514.374605][ T30] netlink_sendmsg+0x813/0xb40 [ 514.379519][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.385113][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.390095][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.395780][ T30] __sys_sendto+0x709/0x7a0 [ 514.400325][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 514.405673][ T30] ? exc_page_fault+0x6a/0xc0 [ 514.410386][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 514.416064][ T30] __x64_sys_sendto+0xde/0x100 [ 514.420981][ T30] do_syscall_64+0x14d/0xf80 [ 514.425590][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.431768][ T30] ? trace_irq_disable+0x37/0x100 [ 514.436842][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.441755][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.447700][ T30] RIP: 0033:0x7f48f875c84e [ 514.452256][ T30] RSP: 002b:00007f48f96abe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 514.460878][ T30] RAX: ffffffffffffffda RBX: 00007f48f96ad6c0 RCX: 00007f48f875c84e [ 514.468892][ T30] RDX: 0000000000000020 RSI: 00007f48f96ac000 RDI: 0000000000000009 [ 514.477096][ T30] RBP: 0000000000000000 R08: 00007f48f96abf04 R09: 000000000000000c [ 514.485253][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 514.493361][ T30] R13: 00007f48f96abf58 R14: 00007f48f96ac000 R15: 0000000000000000 [ 514.501658][ T30] [ 514.504747][ T30] INFO: task syz.4.2750:15773 blocked for more than 144 seconds. [ 514.515785][ T30] Not tainted syzkaller #0 [ 514.520931][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.529642][ T30] task:syz.4.2750 state:D stack:25504 pid:15773 tgid:15771 ppid:5822 task_flags:0x400040 flags:0x00080002 [ 514.541777][ T30] Call Trace: [ 514.545096][ T30] [ 514.548035][ T30] __schedule+0x1568/0x5290 [ 514.552932][ T30] ? __pfx___schedule+0x10/0x10 [ 514.557829][ T30] ? schedule+0x90/0x360 [ 514.562256][ T30] schedule+0x164/0x360 [ 514.566523][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.572238][ T30] __mutex_lock+0x7fe/0x1300 [ 514.576890][ T30] ? __mutex_lock+0x5ac/0x1300 [ 514.581840][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 514.586576][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.591764][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 514.596956][ T30] ? radix_tree_lookup+0x240/0x290 [ 514.602272][ T30] genl_rcv_msg+0x10b/0x7a0 [ 514.606821][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.612133][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.617127][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.623089][ T30] netlink_rcv_skb+0x232/0x4b0 [ 514.627900][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.633592][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.638997][ T30] ? genl_rcv+0x19/0x40 [ 514.643330][ T30] ? down_read+0x272/0x2e0 [ 514.647806][ T30] ? genl_rcv+0xd/0x40 [ 514.652230][ T30] genl_rcv+0x28/0x40 [ 514.656309][ T30] netlink_unicast+0x80f/0x9b0 [ 514.661503][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 514.666821][ T30] ? netlink_sendmsg+0x650/0xb40 [ 514.671870][ T30] ? skb_put+0x11b/0x210 [ 514.676155][ T30] netlink_sendmsg+0x813/0xb40 [ 514.681422][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.686779][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.692133][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.697446][ T30] __sys_sendto+0x709/0x7a0 [ 514.702166][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 514.707265][ T30] ? exc_page_fault+0x6a/0xc0 [ 514.712064][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 514.717390][ T30] __x64_sys_sendto+0xde/0x100 [ 514.722493][ T30] do_syscall_64+0x14d/0xf80 [ 514.727125][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.733599][ T30] ? trace_irq_disable+0x37/0x100 [ 514.738672][ T30] ? clear_bhb_loop+0x40/0x90 [ 514.744115][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.750073][ T30] RIP: 0033:0x7f48f875c84e [ 514.754942][ T30] RSP: 002b:00007f48f968ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 514.763525][ T30] RAX: ffffffffffffffda RBX: 00007f48f968c6c0 RCX: 00007f48f875c84e [ 514.771869][ T30] RDX: 0000000000000020 RSI: 00007f48f968b000 RDI: 0000000000000009 [ 514.780028][ T30] RBP: 0000000000000000 R08: 00007f48f968af04 R09: 000000000000000c [ 514.788338][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 514.796564][ T30] R13: 00007f48f968af58 R14: 00007f48f968b000 R15: 0000000000000000 [ 514.804811][ T30] [ 514.807939][ T30] INFO: task syz.0.2751:15776 blocked for more than 145 seconds. [ 514.816493][ T30] Not tainted syzkaller #0 [ 514.821655][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.830359][ T30] task:syz.0.2751 state:D stack:26984 pid:15776 tgid:15775 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 514.842458][ T30] Call Trace: [ 514.845772][ T30] [ 514.848728][ T30] __schedule+0x1568/0x5290 [ 514.853373][ T30] ? __pfx___schedule+0x10/0x10 [ 514.858408][ T30] ? schedule+0x90/0x360 [ 514.862993][ T30] schedule+0x164/0x360 [ 514.867191][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.872761][ T30] __mutex_lock+0x7fe/0x1300 [ 514.877389][ T30] ? __mutex_lock+0x5ac/0x1300 [ 514.882501][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 514.887318][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.892574][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 514.897738][ T30] ? radix_tree_lookup+0x240/0x290 [ 514.903018][ T30] genl_rcv_msg+0x10b/0x7a0 [ 514.907569][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.912718][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 514.917697][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.923184][ T30] netlink_rcv_skb+0x232/0x4b0 [ 514.928006][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.933171][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.938492][ T30] ? genl_rcv+0x19/0x40 [ 514.942837][ T30] ? down_read+0x272/0x2e0 [ 514.947401][ T30] ? genl_rcv+0xd/0x40 [ 514.951709][ T30] genl_rcv+0x28/0x40 [ 514.955746][ T30] netlink_unicast+0x80f/0x9b0 [ 514.960596][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 514.965937][ T30] ? netlink_sendmsg+0x650/0xb40 [ 514.971268][ T30] ? skb_put+0x11b/0x210 [ 514.975570][ T30] netlink_sendmsg+0x813/0xb40 [ 514.980381][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.986078][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.991222][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.996550][ T30] __sys_sendto+0x709/0x7a0 [ 515.001151][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 515.006231][ T30] ? exc_page_fault+0x6a/0xc0 [ 515.011060][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 515.016385][ T30] __x64_sys_sendto+0xde/0x100 [ 515.021323][ T30] do_syscall_64+0x14d/0xf80 [ 515.025964][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.032189][ T30] ? trace_irq_disable+0x37/0x100 [ 515.037252][ T30] ? clear_bhb_loop+0x40/0x90 [ 515.042054][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.048001][ T30] RIP: 0033:0x7f799ad5c84e [ 515.052731][ T30] RSP: 002b:00007f799bc9be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 515.061298][ T30] RAX: ffffffffffffffda RBX: 00007f799bc9d6c0 RCX: 00007f799ad5c84e [ 515.069299][ T30] RDX: 0000000000000024 RSI: 00007f799bc9c000 RDI: 0000000000000006 [ 515.077382][ T30] RBP: 0000000000000000 R08: 00007f799bc9bf04 R09: 000000000000000c [ 515.085545][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 515.093683][ T30] R13: 00007f799bc9bf58 R14: 00007f799bc9c000 R15: 0000000000000000 [ 515.102169][ T30] [ 515.105331][ T30] [ 515.105331][ T30] Showing all locks held in the system: [ 515.113218][ T30] 1 lock held by khungtaskd/30: [ 515.118113][ T30] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.128137][ T30] 1 lock held by klogd/5178: [ 515.133341][ T30] #0: ffff8880b863abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 515.143535][ T30] 2 locks held by getty/5581: [ 515.148248][ T30] #0: ffff888035fab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.158193][ T30] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 515.168586][ T30] 1 lock held by udevd/6220: [ 515.173325][ T30] #0: ffff88802639f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 515.182784][ T30] 2 locks held by syz-executor/15569: [ 515.188168][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.196495][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.205741][ T30] 6 locks held by syz.3.2745/15760: [ 515.211270][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.219670][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.228802][ T30] #2: ffff88802638f278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 515.239346][ T30] #3: ffff88802582b668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 515.248886][ T30] #4: ffff88802582b008 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 515.261302][ T30] #5: ffff88802582b040 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 515.273810][ T30] 2 locks held by syz.2.2748/15767: [ 515.279030][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.287335][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.296709][ T30] 2 locks held by syz.4.2750/15772: [ 515.302385][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.310823][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.320023][ T30] 2 locks held by syz.4.2750/15773: [ 515.325531][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.333861][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.343090][ T30] 2 locks held by syz.0.2751/15776: [ 515.348348][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.357001][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.366475][ T30] 2 locks held by syz-executor/15784: [ 515.372617][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.381462][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.390980][ T30] 2 locks held by syz-executor/15786: [ 515.396395][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.404913][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.414339][ T30] 2 locks held by syz-executor/15788: [ 515.419738][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.428083][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.437459][ T30] 2 locks held by syz-executor/15796: [ 515.443171][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.451788][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.460959][ T30] 2 locks held by syz-executor/15820: [ 515.466377][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.474919][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.484056][ T30] 2 locks held by syz-executor/15830: [ 515.489468][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.497818][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.507057][ T30] 2 locks held by syz-executor/15832: [ 515.512688][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.521292][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.531018][ T30] 2 locks held by syz-executor/15844: [ 515.536437][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.544809][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.554084][ T30] 2 locks held by syz-executor/15847: [ 515.559468][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.567879][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.576978][ T30] 2 locks held by syz-executor/15870: [ 515.582504][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.590830][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.599836][ T30] 2 locks held by syz-executor/15880: [ 515.605323][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.614059][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.623232][ T30] 2 locks held by syz-executor/15882: [ 515.628642][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.636981][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.646080][ T30] 2 locks held by syz-executor/15895: [ 515.651541][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.659780][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.669016][ T30] 2 locks held by syz-executor/15897: [ 515.674495][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.682783][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 515.692166][ T30] [ 515.694571][ T30] ============================================= [ 515.694571][ T30] [ 515.703218][ T30] NMI backtrace for cpu 1 [ 515.703242][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 515.703269][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 515.703282][ T30] Call Trace: [ 515.703291][ T30] [ 515.703300][ T30] dump_stack_lvl+0xe8/0x150 [ 515.703332][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 515.703354][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 515.703380][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 515.703405][ T30] sys_info+0x135/0x170 [ 515.703435][ T30] watchdog+0xf90/0xfe0 [ 515.703473][ T30] ? watchdog+0x209/0xfe0 [ 515.703507][ T30] kthread+0x388/0x470 [ 515.703535][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.703558][ T30] ? __pfx_kthread+0x10/0x10 [ 515.703589][ T30] ret_from_fork+0x51e/0xb90 [ 515.703615][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 515.703637][ T30] ? __switch_to+0xc7d/0x1400 [ 515.703661][ T30] ? __pfx_kthread+0x10/0x10 [ 515.703691][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.703737][ T30] [ 515.703745][ T30] Sending NMI from CPU 1 to CPUs 0: [ 515.814334][ C0] NMI backtrace for cpu 0 [ 515.814353][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 515.814373][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 515.814385][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 515.814413][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 515.814428][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 515.814444][ C0] RAX: 000000000022385d RBX: ffffffff8199661d RCX: 0000000080000001 [ 515.814457][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 515.814469][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 515.814482][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 515.814495][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 515.814507][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 515.814521][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.814533][ C0] CR2: 00005641b4ca0660 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 515.814549][ C0] Call Trace: [ 515.814557][ C0] [ 515.814563][ C0] default_idle+0x9/0x20 [ 515.814589][ C0] default_idle_call+0x72/0xb0 [ 515.814622][ C0] do_idle+0x1bd/0x500 [ 515.814642][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.814667][ C0] ? __pfx_do_idle+0x10/0x10 [ 515.814692][ C0] cpu_startup_entry+0x43/0x60 [ 515.814712][ C0] rest_init+0x2de/0x300 [ 515.814729][ C0] start_kernel+0x380/0x3d0 [ 515.814750][ C0] x86_64_start_reservations+0x24/0x30 [ 515.814783][ C0] x86_64_start_kernel+0x143/0x1c0 [ 515.814808][ C0] common_startup_64+0x13e/0x147 [ 515.814843][ C0] [ 515.996026][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 516.002980][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.012106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 516.022285][ T30] Call Trace: [ 516.025593][ T30] [ 516.028530][ T30] vpanic+0x1e0/0x670 [ 516.032551][ T30] panic+0xc5/0xd0 [ 516.036376][ T30] ? __pfx_panic+0x10/0x10 [ 516.040812][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 516.046223][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 516.052402][ T30] watchdog+0xfda/0xfe0 [ 516.056614][ T30] ? watchdog+0x209/0xfe0 [ 516.060973][ T30] kthread+0x388/0x470 [ 516.065079][ T30] ? __pfx_watchdog+0x10/0x10 [ 516.069798][ T30] ? __pfx_kthread+0x10/0x10 [ 516.074417][ T30] ret_from_fork+0x51e/0xb90 [ 516.079033][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 516.084163][ T30] ? __switch_to+0xc7d/0x1400 [ 516.088951][ T30] ? __pfx_kthread+0x10/0x10 [ 516.093568][ T30] ret_from_fork_asm+0x1a/0x30 [ 516.098379][ T30] [ 516.102021][ T30] Kernel Offset: disabled [ 516.106350][ T30] Rebooting in 86400 seconds..