last executing test programs: 17.708214422s ago: executing program 1 (id=22709): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000002000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 17.57467915s ago: executing program 1 (id=22712): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 17.468325089s ago: executing program 2 (id=22714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2256f44aa803588ccf14bcf8fbd3402b67963b4a4400023444fa564b44243bc061254ab38e3b", 0x26}], 0x1}}], 0x1, 0x58855) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17.396322153s ago: executing program 1 (id=22717): socket$kcm(0x10, 0x2, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008080) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x400c3ff) 17.356613682s ago: executing program 2 (id=22718): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) 17.171703949s ago: executing program 2 (id=22721): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000095abfb3003ab2d961000b7125e", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f000c000000"], 0x28}}, 0x0) close(0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xef9}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NL80211_CMD_GET_MPATH(r12, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) 16.961867485s ago: executing program 3 (id=22723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0xaa) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 16.896276626s ago: executing program 4 (id=22724): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@mpls_newroute={0x85, 0x18, 0x1, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0xfd, 0x3, 0xc8, 0x3, 0xd00}, [@RTA_DST={0x8, 0x1, {0xffff8, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x8}}]}, 0x2c}, 0x1, 0x2000000000000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf257f0000000c009900ff07000060000000970a00f50078e93b1510a100000a00f50050505050505000000a00f500ffffffffffff00000a00340002020202020200000a00f50008021100000000000600480052000000140055006ef52a73aca980d3bdeb00004896eefa0a0034000202020202020000"], 0x84}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 16.894959864s ago: executing program 1 (id=22725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x40) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r4, 0x25, 0x4, @void}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r9 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r9, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r10, 0x0, 0x29, 0x0, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r6}, 0x10) 16.805080642s ago: executing program 4 (id=22726): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x9e429000) 16.793102224s ago: executing program 2 (id=22727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1}, 0x120) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) shutdown(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 16.683827382s ago: executing program 4 (id=22729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async, rerun: 64) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) r4 = socket$netlink(0x10, 0x3, 0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x30, r6, 0xc4fc9e906872338b, 0x1, 0x0, {{0x15}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000001180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x7, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @private1, 0x6}, 0x1c) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x11, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x0, 0x1f0, 0xb8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x35c}, 0x1, 0x0, 0x0, 0x40}, 0x24000010) (rerun: 32) 16.657681033s ago: executing program 1 (id=22730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0xaa) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 16.616822147s ago: executing program 0 (id=22731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @local, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x3, @random="dda55d54b10e", 'ip6gre0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x44, 0x10, 0xc03, 0x6f150000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.531699543s ago: executing program 4 (id=22732): socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x3, 0x6}, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000c4000000b7000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080000000400200c0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b00"], 0x30}}, 0x0) 16.531514439s ago: executing program 0 (id=22733): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000710008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0014000000", 0x28}, {&(0x7f0000000380)="ff1ed8614d03", 0x6}], 0x2}, 0x0) 16.509801595s ago: executing program 3 (id=22734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}}, 0x20000000) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002ee4080027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x24042804}, 0x4044000) 16.431151276s ago: executing program 0 (id=22735): r0 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000193c0)=""/102394, &(0x7f0000000040)=0x18ffa) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) 16.364212779s ago: executing program 3 (id=22736): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) 16.362718379s ago: executing program 4 (id=22737): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001100)=""/263, 0x107}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/123, 0x7b}], 0x7}}], 0x1, 0x40, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) write(r0, &(0x7f0000000780)="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", 0x15b) 16.313219547s ago: executing program 0 (id=22738): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x20}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 16.234512206s ago: executing program 3 (id=22739): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x2000000}, "ffb00afe4e70"}}}}}}}, 0x0) (fail_nth: 2) 16.161301917s ago: executing program 1 (id=22740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='#\'', 0x32060, &(0x7f0000000040)={@_ha_fsid={[0x80, 0x6]}, {0x5, 0x4, 0x7}}, 0xe4, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) sendmsg$nl_route(r2, 0x0, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r1, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 16.160650118s ago: executing program 0 (id=22741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15.875651187s ago: executing program 3 (id=22742): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x28}}, 0x0) close(0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (fail_nth: 4) 15.85765837s ago: executing program 2 (id=22743): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000005c0)=""/166, 0xa6}], 0x6, 0xee2, 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 15.84442424s ago: executing program 4 (id=22744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="31c2d20cce26", 0x6}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x20080058) 15.417919667s ago: executing program 0 (id=22745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x42000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0x4, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) 15.364010509s ago: executing program 3 (id=22746): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @remote, @default, @remote, @remote, @bcast, @netrom, @null]}, &(0x7f0000000080)=0x48) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7f, 0x3, 0x1c0000000, 0x1ac, 0x3, 0x1}, {0x5, 0x7f, 0x9, 0x8000000000000000, 0x836c, 0x5}], ['\x00']}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="067809030c36cbd6087ad450cb8ff8124f948f456eaaab4731ce872dce325dcbd78dc99ca73c86110086cd28c1cbbcfaf4c72c166c76281b31b20749ef7044fb2fae2d1a87db165cc52ec4fe13f4621c4f2bfddd692598a2b7aa3b3d8ff81558ff8a34a2622d0390718fe654c1bd9e239d5d4ce7fc8ae004b083bc043404115b086e1ff63e7bba07db40487e3a04b23884d22cf2b838159ac37f8999b6b91e8864caac8eebdc811fe977773f9d9283d3db8d56dad4fb3f057c0a997d557c15e3cbaa53f77b01eca3f08e8b5fecdb085b4c86805435b2705bef", 0xd9}], 0x1, 0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4023200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xfb}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4004800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000580)={{0x0, 0xe0000000000, 0x6, 0x8000000000000000, 0x4726bfaa, 0xb, 0x8000000000000000, 0x6, 0x10001, 0x81, 0x2, 0x8000000000000000, 0x7ff, 0x7, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40940200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa022}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x3f0f35033c26628) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x164, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0082}, 0x20000801) r6 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000a80)=0x1, 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ce}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c0}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c4}, 0x20000020) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000002240)={0x7, &(0x7f0000002140)=[{0x9, 0xc5, &(0x7f0000000c80)="349f38da3e74686ae75789c0b2c90884781bdbb8ee937561192e60c67d6726613d149b872f98afa66d27a60c67a05f72081aa5ad009ec1558a15b341f0e60695bef08c905f34a11d8e69886e33b1f901c91697339734887d99adad733947fdc8a287d0ffe3b6d9908126371ef84bf1f74b48c53482b85776b1d0bb13567db3d43e17bef2ecd9614a2826e2b6ed565644240bd6ec52f70108c6092ab524f4e022b6aa0e51375f6198ef3010e8b880b5596a4cfab9d4f4cf6e4e47c266c2bb2fd8f9d268d576", 0x0, 0x1}, {0x7, 0x49, &(0x7f0000000d80)="99e3002ac9220ae3c60d58eae2e7773635fdd3ef447f5905ed4e1d29810cda02328e83d9ad48b052b1bcfdaf0d66673ae18628099b3ecd2e16dc122a82911b260a18821cdef08e2a22", 0xc0837ea1f685d26b}, {0x4, 0xc5, &(0x7f0000000e00)="158816e2406b737d01e29eb68bb4002ed19d4ebdf5df6cc15d1d8331b6308a4e4161660088f94eda3f73b8f15f63258f1666bc3a9f5432e7163de946595c6099cfdc767e97f95d7c4c3f623d89bb00dbfa76924c07e1d8d5cf90de163af067143cecaf692194f01078f790bb94ee2bf81ff2d02ae474785b84f6d94c005b784874ead2b03190f99333648e91970db50c1442010baff53711915715a928d151f66325594824c3e24342e22a01dca64901840e3fce911537d463b6e6844eec353b3fb56a966c", 0x1}, {0x81, 0x1000, &(0x7f0000000f00)="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", 0x1}, {0x179, 0x1f, &(0x7f0000001f00)="a18dfda2b929a9f6d568650a63ab8aedcc8c7b15d114220de24b7e44846040", 0x1, 0x1}, {0x60c4, 0xd5, &(0x7f0000001f40)="1868415b66432ad7faf11f39b7178f17e19c6e93cb7b6a4c05e08ef0f148b89df33e835fcf446a793c2bc7da0cd314ed647a3ec96003a7a3354f5bfd512b9b5d28fed481f89afcee60c7a37be77d3e0b11904473681ff1ad027feb66ed78a88eda3bf265c1dbe7bf7e6e6b8f786c4f77fee75d9aaa5be8618a32329af1a8e29b3a9f5ec9940c0f336e02a32f1c0277896ea99d1074d8c8c897bc99e4bf6caeb600249fc0db8078df6f14b03acde632a9a05dfe8a593d5f7f77b4f702595ba7b26d2af3372251939bd4b8414a483aebd64367f45984", 0x1, 0x1}, {0xf84, 0xe5, &(0x7f0000002040)="fef22de2baf40d03d7d7177794305fbaf59e0e731a97047a5f6a52c7065f09a71738228705acc9be3bc290cc98003102fb8b2c49ce5ed12e1f4a06e1fb54f211ded48d68c024631e9eb191c2793c7255e140c77a79850a417ce2053c24dd41f9ce4b4e9f1efd2c841df54c83b4d56fdbc36eddbc3d9bb46d580a3937d53511125f6b16300d3774702d3dd0936cf428d22dda60b1c5dbd39e66b255d7e302ada2c8a76a773aecba1f9e4aa6dda6de8d64bba4b6604338d0cabc52bb64589875c7baeeb66d3c72bb1d70d7032c45ef3575cb99808fc187e21fe35e3484a6ea02fe619a67cade", 0x0, 0x1}]}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x144, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000024c0)=0x5, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002880)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002840)={&(0x7f0000002640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x158, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "a019b3416f574891ffadb3f0ef15f2204a612b2b49bc0e53b54c78bdc42c52cfa81bfafcd202ff5b7444824a1655d77421f5617f32a5a8ba2a85748ec2f62f3a6cd5063fe3d5d3"}, @NFTA_CHAIN_USERDATA={0xca, 0xc, "1c14fd7ae0789b27b82265f5eaa40d941fd3fd451c9eeaa23f84cdfc2dcfe616846c64de8be98ee06ae754ce254887c73f365d16f204cf54eccaecdbcc3c0c73a29fd1dca49b0bf30b07ee76a5a1abb3f3c87db2f84d783dfe8b8155a1d795ffa6fafe7d456aff3b5ecb2a57eea1932ca95aaf2b5643820b1e38854a62fa6c09807fa8304ac48589227a602a1a6c68bab7ca3d68da2ca05ee6ceb2213942b10cb0ab6bc3ff2911d3b4f105e6db80118bf1fc93d45ae079e82018818cb05fd9d1df0cbe0bc457"}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r9 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f00000028c0), 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000002900)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd17}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2c}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x418}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x908}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x359}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.363719707s ago: executing program 2 (id=22747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1260, 0xf, 0x5, 0x201, 0x70bd2c, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@nested={0x124a, 0xb3, 0x0, 0x1, [@generic="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", @generic="f82d8ad393ff3641a12449340675e3c5ec7c5c91a430af4cafdb43eb0faf5ad9cbc3f72127db7c42d4587dc27d6c11b8fe777c71458ebd22baf5c92df8df430fcd6d8c4356c6be78ea5c76b6bcc066e5381e0503bbfeb9808fa10fa1cc434c586ad6ffe7d0aa5a6a9b58701f4376ea157b4fc929effac2499d0e93c7bb93e0796b06c4b80a4a0e4ce4e5a7f9ab11ef", @generic="830f9aec185a96d44696a02af8379ebadbffafa0bdf8b05137f3ffe9827b01ea0c858739b538d817a1e053dfa2e0d24942a23552e26b314ecbdabe36d89dd2bbbe055bfa051bab1a4a311d10780b5546c5c1b9ed545bae8d461cf20d4419fe3a9c1d9761afc194ab32bf072df3ae7f41484ac392bcf3ca08bd684aa271f40cb225e14b38c78d310b6d8417395b624521d3452e8654191fd7095521ab0b4bbd5a737bf2e4679543c89b9a6b43fe498950065f6f4562ce25bea70fc9fd1ac307a862d8624a91858e19c77fa6195409e283ace3386f1950557151", @nested={0x20, 0xf1, 0x0, 0x1, [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @typed={0x8, 0x45, 0x0, 0x0, @pid}]}, @typed={0x4, 0x11d}, @generic="603afc1797d9b79ddde8e269b2b59635c316a55629521ad3d1015b7a9385ade855b65d97016c2169998b092934d3070d836c174ab5577f4190006599cde12ac5b96dbe7c1870706174d39df45d9986f32b58edacf637a02f34e653ec272b387fa1b2cab5378367cf10e0c9fe8edfa5f8823cbc9047d1b5d0af41459b9d69c795a44c06bf8739759312c8f2c49c36aac62f8cffebfd873c0c3da68d4651f27945043237eaf82f", @typed={0x8, 0xfc, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = accept4$netrom(r4, &(0x7f00000000c0)={{0x3, @default}, [@null, @null, @netrom, @netrom, @default, @rose]}, &(0x7f0000000140)=0x48, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000001700), &(0x7f0000000300)=0x68) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x4b) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0xfce) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r7, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x0) 1.135382726s ago: executing program 32 (id=22740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='#\'', 0x32060, &(0x7f0000000040)={@_ha_fsid={[0x80, 0x6]}, {0x5, 0x4, 0x7}}, 0xe4, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) sendmsg$nl_route(r2, 0x0, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r1, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 128.889184ms ago: executing program 33 (id=22745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x42000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0x4, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) 102.080268ms ago: executing program 34 (id=22747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1260, 0xf, 0x5, 0x201, 0x70bd2c, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@nested={0x124a, 0xb3, 0x0, 0x1, [@generic="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", @generic="f82d8ad393ff3641a12449340675e3c5ec7c5c91a430af4cafdb43eb0faf5ad9cbc3f72127db7c42d4587dc27d6c11b8fe777c71458ebd22baf5c92df8df430fcd6d8c4356c6be78ea5c76b6bcc066e5381e0503bbfeb9808fa10fa1cc434c586ad6ffe7d0aa5a6a9b58701f4376ea157b4fc929effac2499d0e93c7bb93e0796b06c4b80a4a0e4ce4e5a7f9ab11ef", @generic="830f9aec185a96d44696a02af8379ebadbffafa0bdf8b05137f3ffe9827b01ea0c858739b538d817a1e053dfa2e0d24942a23552e26b314ecbdabe36d89dd2bbbe055bfa051bab1a4a311d10780b5546c5c1b9ed545bae8d461cf20d4419fe3a9c1d9761afc194ab32bf072df3ae7f41484ac392bcf3ca08bd684aa271f40cb225e14b38c78d310b6d8417395b624521d3452e8654191fd7095521ab0b4bbd5a737bf2e4679543c89b9a6b43fe498950065f6f4562ce25bea70fc9fd1ac307a862d8624a91858e19c77fa6195409e283ace3386f1950557151", @nested={0x20, 0xf1, 0x0, 0x1, [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @typed={0x8, 0x45, 0x0, 0x0, @pid}]}, @typed={0x4, 0x11d}, @generic="603afc1797d9b79ddde8e269b2b59635c316a55629521ad3d1015b7a9385ade855b65d97016c2169998b092934d3070d836c174ab5577f4190006599cde12ac5b96dbe7c1870706174d39df45d9986f32b58edacf637a02f34e653ec272b387fa1b2cab5378367cf10e0c9fe8edfa5f8823cbc9047d1b5d0af41459b9d69c795a44c06bf8739759312c8f2c49c36aac62f8cffebfd873c0c3da68d4651f27945043237eaf82f", @typed={0x8, 0xfc, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = accept4$netrom(r4, &(0x7f00000000c0)={{0x3, @default}, [@null, @null, @netrom, @netrom, @default, @rose]}, &(0x7f0000000140)=0x48, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000001700), &(0x7f0000000300)=0x68) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd"], 0x4b) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0xfce) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r7, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x0) 62.603329ms ago: executing program 35 (id=22746): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @remote, @default, @remote, @remote, @bcast, @netrom, @null]}, &(0x7f0000000080)=0x48) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7f, 0x3, 0x1c0000000, 0x1ac, 0x3, 0x1}, {0x5, 0x7f, 0x9, 0x8000000000000000, 0x836c, 0x5}], ['\x00']}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="067809030c36cbd6087ad450cb8ff8124f948f456eaaab4731ce872dce325dcbd78dc99ca73c86110086cd28c1cbbcfaf4c72c166c76281b31b20749ef7044fb2fae2d1a87db165cc52ec4fe13f4621c4f2bfddd692598a2b7aa3b3d8ff81558ff8a34a2622d0390718fe654c1bd9e239d5d4ce7fc8ae004b083bc043404115b086e1ff63e7bba07db40487e3a04b23884d22cf2b838159ac37f8999b6b91e8864caac8eebdc811fe977773f9d9283d3db8d56dad4fb3f057c0a997d557c15e3cbaa53f77b01eca3f08e8b5fecdb085b4c86805435b2705bef", 0xd9}], 0x1, 0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4023200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xfb}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4004800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000580)={{0x0, 0xe0000000000, 0x6, 0x8000000000000000, 0x4726bfaa, 0xb, 0x8000000000000000, 0x6, 0x10001, 0x81, 0x2, 0x8000000000000000, 0x7ff, 0x7, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40940200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa022}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x3f0f35033c26628) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x164, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0082}, 0x20000801) r6 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000a80)=0x1, 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10001}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ce}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c0}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c4}, 0x20000020) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000002240)={0x7, &(0x7f0000002140)=[{0x9, 0xc5, &(0x7f0000000c80)="349f38da3e74686ae75789c0b2c90884781bdbb8ee937561192e60c67d6726613d149b872f98afa66d27a60c67a05f72081aa5ad009ec1558a15b341f0e60695bef08c905f34a11d8e69886e33b1f901c91697339734887d99adad733947fdc8a287d0ffe3b6d9908126371ef84bf1f74b48c53482b85776b1d0bb13567db3d43e17bef2ecd9614a2826e2b6ed565644240bd6ec52f70108c6092ab524f4e022b6aa0e51375f6198ef3010e8b880b5596a4cfab9d4f4cf6e4e47c266c2bb2fd8f9d268d576", 0x0, 0x1}, {0x7, 0x49, &(0x7f0000000d80)="99e3002ac9220ae3c60d58eae2e7773635fdd3ef447f5905ed4e1d29810cda02328e83d9ad48b052b1bcfdaf0d66673ae18628099b3ecd2e16dc122a82911b260a18821cdef08e2a22", 0xc0837ea1f685d26b}, {0x4, 0xc5, &(0x7f0000000e00)="158816e2406b737d01e29eb68bb4002ed19d4ebdf5df6cc15d1d8331b6308a4e4161660088f94eda3f73b8f15f63258f1666bc3a9f5432e7163de946595c6099cfdc767e97f95d7c4c3f623d89bb00dbfa76924c07e1d8d5cf90de163af067143cecaf692194f01078f790bb94ee2bf81ff2d02ae474785b84f6d94c005b784874ead2b03190f99333648e91970db50c1442010baff53711915715a928d151f66325594824c3e24342e22a01dca64901840e3fce911537d463b6e6844eec353b3fb56a966c", 0x1}, {0x81, 0x1000, &(0x7f0000000f00)="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", 0x1}, {0x179, 0x1f, &(0x7f0000001f00)="a18dfda2b929a9f6d568650a63ab8aedcc8c7b15d114220de24b7e44846040", 0x1, 0x1}, {0x60c4, 0xd5, &(0x7f0000001f40)="1868415b66432ad7faf11f39b7178f17e19c6e93cb7b6a4c05e08ef0f148b89df33e835fcf446a793c2bc7da0cd314ed647a3ec96003a7a3354f5bfd512b9b5d28fed481f89afcee60c7a37be77d3e0b11904473681ff1ad027feb66ed78a88eda3bf265c1dbe7bf7e6e6b8f786c4f77fee75d9aaa5be8618a32329af1a8e29b3a9f5ec9940c0f336e02a32f1c0277896ea99d1074d8c8c897bc99e4bf6caeb600249fc0db8078df6f14b03acde632a9a05dfe8a593d5f7f77b4f702595ba7b26d2af3372251939bd4b8414a483aebd64367f45984", 0x1, 0x1}, {0xf84, 0xe5, &(0x7f0000002040)="fef22de2baf40d03d7d7177794305fbaf59e0e731a97047a5f6a52c7065f09a71738228705acc9be3bc290cc98003102fb8b2c49ce5ed12e1f4a06e1fb54f211ded48d68c024631e9eb191c2793c7255e140c77a79850a417ce2053c24dd41f9ce4b4e9f1efd2c841df54c83b4d56fdbc36eddbc3d9bb46d580a3937d53511125f6b16300d3774702d3dd0936cf428d22dda60b1c5dbd39e66b255d7e302ada2c8a76a773aecba1f9e4aa6dda6de8d64bba4b6604338d0cabc52bb64589875c7baeeb66d3c72bb1d70d7032c45ef3575cb99808fc187e21fe35e3484a6ea02fe619a67cade", 0x0, 0x1}]}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x144, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x29}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000024c0)=0x5, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000002880)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002840)={&(0x7f0000002640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x158, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "a019b3416f574891ffadb3f0ef15f2204a612b2b49bc0e53b54c78bdc42c52cfa81bfafcd202ff5b7444824a1655d77421f5617f32a5a8ba2a85748ec2f62f3a6cd5063fe3d5d3"}, @NFTA_CHAIN_USERDATA={0xca, 0xc, "1c14fd7ae0789b27b82265f5eaa40d941fd3fd451c9eeaa23f84cdfc2dcfe616846c64de8be98ee06ae754ce254887c73f365d16f204cf54eccaecdbcc3c0c73a29fd1dca49b0bf30b07ee76a5a1abb3f3c87db2f84d783dfe8b8155a1d795ffa6fafe7d456aff3b5ecb2a57eea1932ca95aaf2b5643820b1e38854a62fa6c09807fa8304ac48589227a602a1a6c68bab7ca3d68da2ca05ee6ceb2213942b10cb0ab6bc3ff2911d3b4f105e6db80118bf1fc93d45ae079e82018818cb05fd9d1df0cbe0bc457"}]}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r9 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f00000028c0), 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000002900)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd17}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2c}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x418}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x908}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x359}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 36 (id=22744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="31c2d20cce26", 0x6}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x20080058) kernel console output (not intermixed with test programs): 1362.439018][ T788] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 1362.439055][ T788] rtnl_create_link+0x31f/0xd70 [ 1362.439083][ T788] rtnl_newlink_create+0x277/0xb70 [ 1362.439113][ T788] ? __pfx___nla_validate_parse+0x10/0x10 [ 1362.439152][ T788] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1362.439186][ T788] ? __pfx___mutex_lock+0x10/0x10 [ 1362.439231][ T788] ? ns_capable+0x89/0xe0 [ 1362.439262][ T788] rtnl_newlink+0x1666/0x1be0 [ 1362.439306][ T788] ? __pfx_rtnl_newlink+0x10/0x10 [ 1362.439329][ T788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.439388][ T788] ? kasan_quarantine_put+0xbb/0x1f0 [ 1362.439406][ T788] ? lockdep_hardirqs_on+0x7a/0x110 [ 1362.439439][ T788] ? kmem_cache_free+0x187/0x630 [ 1362.439464][ T788] ? nlmon_xmit+0xb0/0x100 [ 1362.439507][ T788] ? __lock_acquire+0x6b5/0x2cf0 [ 1362.439540][ T788] ? __local_bh_enable_ip+0xd0/0x130 [ 1362.439566][ T788] ? lockdep_hardirqs_on+0x7a/0x110 [ 1362.439595][ T788] ? __dev_queue_xmit+0x277/0x3890 [ 1362.439612][ T788] ? __local_bh_enable_ip+0xd0/0x130 [ 1362.439636][ T788] ? __dev_queue_xmit+0x277/0x3890 [ 1362.439682][ T788] ? __pfx_rtnl_newlink+0x10/0x10 [ 1362.439707][ T788] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1362.439737][ T788] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1362.439762][ T788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1362.439785][ T788] ? ref_tracker_free+0x693/0x840 [ 1362.439808][ T788] ? __copy_skb_header+0xa3/0x4a0 [ 1362.439841][ T788] ? __pfx_ref_tracker_free+0x10/0x10 [ 1362.439879][ T788] netlink_rcv_skb+0x232/0x4b0 [ 1362.439904][ T788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1362.439932][ T788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1362.439968][ T788] ? netlink_deliver_tap+0x2e/0x1b0 [ 1362.440002][ T788] netlink_unicast+0x80f/0x9b0 [ 1362.440034][ T788] ? __pfx_netlink_unicast+0x10/0x10 [ 1362.440057][ T788] ? netlink_sendmsg+0x650/0xb40 [ 1362.440080][ T788] ? skb_put+0x11b/0x210 [ 1362.440112][ T788] netlink_sendmsg+0x813/0xb40 [ 1362.440147][ T788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.440175][ T788] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1362.440199][ T788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1362.440224][ T788] ____sys_sendmsg+0x972/0x9f0 [ 1362.440265][ T788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1362.440306][ T788] ? import_iovec+0x73/0xa0 [ 1362.440339][ T788] ___sys_sendmsg+0x2a5/0x360 [ 1362.440377][ T788] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.440452][ T788] ? __fget_files+0x2a/0x420 [ 1362.440482][ T788] ? __fget_files+0x3a0/0x420 [ 1362.440522][ T788] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1362.440556][ T788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1362.440597][ T788] ? __pfx_ksys_write+0x10/0x10 [ 1362.440630][ T788] do_syscall_64+0x14d/0xf80 [ 1362.440660][ T788] ? trace_irq_disable+0x3b/0x150 [ 1362.440690][ T788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.440708][ T788] ? clear_bhb_loop+0x40/0x90 [ 1362.440732][ T788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.440750][ T788] RIP: 0033:0x7fccbcb9c799 [ 1362.440767][ T788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.440783][ T788] RSP: 002b:00007fccbdad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.440802][ T788] RAX: ffffffffffffffda RBX: 00007fccbce15fa0 RCX: 00007fccbcb9c799 [ 1362.440816][ T788] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000006 [ 1362.440828][ T788] RBP: 00007fccbdad0090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.440839][ T788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.440850][ T788] R13: 00007fccbce16038 R14: 00007fccbce15fa0 R15: 00007fff0a5ed688 [ 1362.440883][ T788] [ 1362.441880][ T788] debugfs: out of free dentries, can not create file 'netdev@ffff88807c7b4620' [ 1363.142783][ T821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22067'. [ 1363.242539][ T813]  speed is unknown, defaulting to 1000 [ 1363.547900][ T836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22073'. [ 1363.774221][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22076'. [ 1363.812111][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22076'. [ 1363.852137][ T846] netlink: 'syz.3.22076': attribute type 1 has an invalid length. [ 1364.039637][ T859] batadv_slave_1: entered promiscuous mode [ 1364.091096][ T857] batadv_slave_1: left promiscuous mode [ 1364.329818][ T885] netlink: 'syz.3.22085': attribute type 16 has an invalid length. [ 1364.784176][ T915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.338107][ T962] __nla_validate_parse: 7 callbacks suppressed [ 1365.338129][ T962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22109'. [ 1365.434342][ T969] netlink: 'syz.0.22111': attribute type 10 has an invalid length. [ 1365.484228][ T969] batman_adv: batadv0: Adding interface: netdevsim0 [ 1365.491421][ T969] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.560915][ T969] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1365.589549][ T977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.599782][ T981] netlink: 'syz.1.22118': attribute type 10 has an invalid length. [ 1365.639919][ T979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22116'. [ 1365.655620][ T979] SET target dimension over the limit! [ 1365.730974][ T987] netlink: zone id is out of range [ 1365.748806][ T987] netlink: zone id is out of range [ 1365.753965][ T987] netlink: zone id is out of range [ 1365.760452][ T987] netlink: zone id is out of range [ 1365.766257][ T987] netlink: zone id is out of range [ 1365.771383][ T987] netlink: zone id is out of range [ 1365.782678][ T987] netlink: zone id is out of range [ 1365.796114][ T987] netlink: zone id is out of range [ 1365.801261][ T987] netlink: zone id is out of range [ 1365.809977][ T991] netlink: 828 bytes leftover after parsing attributes in process `syz.0.22123'. [ 1365.811003][ T987] netlink: zone id is out of range [ 1365.833599][ T989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.852403][ T988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.225926][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22130'. [ 1366.229626][ T1013] netlink: 'syz.2.22129': attribute type 7 has an invalid length. [ 1366.235693][ T1011] FAULT_INJECTION: forcing a failure. [ 1366.235693][ T1011] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.244787][ T1013] netlink: 'syz.2.22129': attribute type 8 has an invalid length. [ 1366.256483][ T1011] CPU: 0 UID: 0 PID: 1011 Comm: syz.3.22130 Not tainted syzkaller #0 PREEMPT(full) [ 1366.256508][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1366.256520][ T1011] Call Trace: [ 1366.256527][ T1011] [ 1366.256536][ T1011] dump_stack_lvl+0xe8/0x150 [ 1366.256571][ T1011] should_fail_ex+0x412/0x560 [ 1366.256599][ T1011] should_failslab+0xa8/0x100 [ 1366.256625][ T1011] __kmalloc_cache_noprof+0x88/0x660 [ 1366.256646][ T1011] ? __hw_addr_add_ex+0x1dc/0x650 [ 1366.256684][ T1011] __hw_addr_add_ex+0x1dc/0x650 [ 1366.256725][ T1011] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1366.256763][ T1011] dev_addr_init+0x15e/0x240 [ 1366.256798][ T1011] ? __pfx_dev_addr_init+0x10/0x10 [ 1366.256831][ T1011] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1366.256859][ T1011] alloc_netdev_mqs+0x2b1/0x11b0 [ 1366.256877][ T1011] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 1366.256912][ T1011] rtnl_create_link+0x31f/0xd70 [ 1366.256939][ T1011] rtnl_newlink_create+0x277/0xb70 [ 1366.256976][ T1011] ? __pfx___nla_validate_parse+0x10/0x10 [ 1366.257013][ T1011] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1366.257045][ T1011] ? __pfx___mutex_lock+0x10/0x10 [ 1366.257087][ T1011] ? ns_capable+0x89/0xe0 [ 1366.257116][ T1011] rtnl_newlink+0x1666/0x1be0 [ 1366.257157][ T1011] ? __pfx_rtnl_newlink+0x10/0x10 [ 1366.257180][ T1011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.257234][ T1011] ? kasan_quarantine_put+0xbb/0x1f0 [ 1366.257252][ T1011] ? lockdep_hardirqs_on+0x7a/0x110 [ 1366.257286][ T1011] ? kmem_cache_free+0x187/0x630 [ 1366.257305][ T1011] ? nlmon_xmit+0xb0/0x100 [ 1366.257347][ T1011] ? __lock_acquire+0x6b5/0x2cf0 [ 1366.257379][ T1011] ? __local_bh_enable_ip+0xd0/0x130 [ 1366.257405][ T1011] ? lockdep_hardirqs_on+0x7a/0x110 [ 1366.257433][ T1011] ? __dev_queue_xmit+0x277/0x3890 [ 1366.257449][ T1011] ? __local_bh_enable_ip+0xd0/0x130 [ 1366.257473][ T1011] ? __dev_queue_xmit+0x277/0x3890 [ 1366.257516][ T1011] ? __pfx_rtnl_newlink+0x10/0x10 [ 1366.257541][ T1011] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1366.257569][ T1011] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1366.257593][ T1011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1366.257616][ T1011] ? ref_tracker_free+0x693/0x840 [ 1366.257638][ T1011] ? __copy_skb_header+0xa3/0x4a0 [ 1366.257670][ T1011] ? __pfx_ref_tracker_free+0x10/0x10 [ 1366.257713][ T1011] netlink_rcv_skb+0x232/0x4b0 [ 1366.257739][ T1011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1366.257765][ T1011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1366.257801][ T1011] ? netlink_deliver_tap+0x2e/0x1b0 [ 1366.257833][ T1011] netlink_unicast+0x80f/0x9b0 [ 1366.257863][ T1011] ? __pfx_netlink_unicast+0x10/0x10 [ 1366.257886][ T1011] ? netlink_sendmsg+0x650/0xb40 [ 1366.257908][ T1011] ? skb_put+0x11b/0x210 [ 1366.257939][ T1011] netlink_sendmsg+0x813/0xb40 [ 1366.257973][ T1011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1366.258001][ T1011] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1366.258027][ T1011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1366.258050][ T1011] ____sys_sendmsg+0x972/0x9f0 [ 1366.258090][ T1011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1366.258130][ T1011] ? import_iovec+0x73/0xa0 [ 1366.258163][ T1011] ___sys_sendmsg+0x2a5/0x360 [ 1366.258198][ T1011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1366.258265][ T1011] ? __fget_files+0x2a/0x420 [ 1366.258292][ T1011] ? __fget_files+0x3a0/0x420 [ 1366.258332][ T1011] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1366.258365][ T1011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1366.258405][ T1011] ? __pfx_ksys_write+0x10/0x10 [ 1366.258436][ T1011] do_syscall_64+0x14d/0xf80 [ 1366.258465][ T1011] ? trace_irq_disable+0x3b/0x150 [ 1366.258494][ T1011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.258512][ T1011] ? clear_bhb_loop+0x40/0x90 [ 1366.258536][ T1011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.258555][ T1011] RIP: 0033:0x7fccbcb9c799 [ 1366.258573][ T1011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.258589][ T1011] RSP: 002b:00007fccbdad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.258608][ T1011] RAX: ffffffffffffffda RBX: 00007fccbce15fa0 RCX: 00007fccbcb9c799 [ 1366.258621][ T1011] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000006 [ 1366.258633][ T1011] RBP: 00007fccbdad0090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.258644][ T1011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.258654][ T1011] R13: 00007fccbce16038 R14: 00007fccbce15fa0 R15: 00007fff0a5ed688 [ 1366.258686][ T1011] [ 1366.379956][ T1017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22129'. [ 1366.385746][ T1018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22131'. [ 1366.390128][ T1017] netlink: 'syz.2.22129': attribute type 5 has an invalid length. [ 1366.468199][ T1013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22129'. [ 1366.520671][ T1017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22129'. [ 1366.592915][ T1025] netlink: 828 bytes leftover after parsing attributes in process `syz.1.22134'. [ 1366.751553][ T1027] bond5: entered promiscuous mode [ 1366.779275][ T1029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22135'. [ 1366.821188][ T1027] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1366.854661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 1366.862711][ C1] lec:lec_tx_timeout: lec0 [ 1366.892453][ T1033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1366.899842][ T1033] IPv6: NLM_F_CREATE should be set when creating new route [ 1367.047951][ T1046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.094449][ T1054] validate_nla: 1 callbacks suppressed [ 1367.101480][ T1054] netlink: 'syz.0.22142': attribute type 10 has an invalid length. [ 1367.118693][ T1054] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1368.044427][ T1111] nbd1: detected capacity change from 0 to 127 [ 1368.216695][ T1116] nbd2: detected capacity change from 0 to 127 [ 1368.296903][T19528] block nbd2: Receive control failed (result -104) [ 1368.297386][ T1134] hsr_slave_0 (unregistering): left promiscuous mode [ 1368.309748][ T1030] block nbd1: Receive control failed (result -32) [ 1368.443755][ T1147] netlink: 'syz.3.22163': attribute type 1 has an invalid length. [ 1368.703431][ T1160] vlan3: entered promiscuous mode [ 1368.709949][ T1160] bridge0: entered promiscuous mode [ 1368.766188][ T1162] netlink: 'syz.1.22169': attribute type 72 has an invalid length. [ 1368.844159][ T1166] tipc: Started in network mode [ 1368.865653][T19528] Bluetooth: hci5: command 0x0406 tx timeout [ 1368.877962][ T1166] tipc: Node identity e0000001, cluster identity 4711 [ 1368.885451][ T1166] tipc: Enabling of bearer rejected, failed to enable media [ 1368.908181][ T1168] gtp0: entered promiscuous mode [ 1368.913177][ T1168] gtp0: entered allmulticast mode [ 1368.976250][T23332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1369.172505][ T1188] netlink: 'syz.1.22178': attribute type 10 has an invalid length. [ 1369.198588][ T1188] batman_adv: batadv0: Adding interface: netdevsim0 [ 1369.205387][ T1188] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.266122][ T1188] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1369.361947][ T1197] tipc: Enabling of bearer rejected, failed to enable media [ 1369.424784][T23332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1369.466827][ T1201] netlink: 'syz.1.22181': attribute type 1 has an invalid length. [ 1369.491907][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.531248][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.542813][ T1206] netlink: 'syz.2.22183': attribute type 72 has an invalid length. [ 1369.554465][ T1201] bond0 (unregistering): Released all slaves [ 1369.639867][ T1210] netlink: 'syz.4.22185': attribute type 72 has an invalid length. [ 1369.656512][ T1210] netlink: 'syz.4.22185': attribute type 8 has an invalid length. [ 1369.950570][ T1231] netlink: 'syz.4.22191': attribute type 10 has an invalid length. [ 1369.975156][T23332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1370.107963][ T1245] netlink: 'syz.4.22197': attribute type 72 has an invalid length. [ 1370.173865][ T1242] sit2: entered promiscuous mode [ 1370.179737][ T1242] sit2: entered allmulticast mode [ 1370.399398][ T1262] __nla_validate_parse: 22 callbacks suppressed [ 1370.399416][ T1262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22204'. [ 1370.538840][ T1269] netlink: 892 bytes leftover after parsing attributes in process `syz.3.22206'. [ 1370.562162][ T1270] batman_adv: batadv0: Adding interface: netdevsim0 [ 1370.617089][ T1270] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.660586][ T1270] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1370.683165][ T1277] batman_adv: batadv0: Adding interface: dummy0 [ 1370.698962][ T1277] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.781613][ T1277] batman_adv: batadv0: Interface activated: dummy0 [ 1370.872596][ T1293] IPv6: NLM_F_CREATE should be specified when creating new route [ 1370.881568][ T1293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1370.888835][ T1293] IPv6: NLM_F_CREATE should be set when creating new route [ 1370.896131][ T1293] IPv6: NLM_F_CREATE should be set when creating new route [ 1370.903353][ T1293] IPv6: NLM_F_CREATE should be set when creating new route [ 1370.983185][ T1300] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1371.210332][ T1321] netlink: 164 bytes leftover after parsing attributes in process `syz.2.22224'. [ 1371.311020][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22228'. [ 1371.955331][ T1381] FAULT_INJECTION: forcing a failure. [ 1371.955331][ T1381] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.960114][ T1379] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.22245'. [ 1372.009831][ T1381] CPU: 1 UID: 0 PID: 1381 Comm: syz.3.22246 Not tainted syzkaller #0 PREEMPT(full) [ 1372.009857][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1372.009868][ T1381] Call Trace: [ 1372.009876][ T1381] [ 1372.009885][ T1381] dump_stack_lvl+0xe8/0x150 [ 1372.009920][ T1381] should_fail_ex+0x412/0x560 [ 1372.009949][ T1381] should_failslab+0xa8/0x100 [ 1372.009973][ T1381] ? skb_clone+0x212/0x3a0 [ 1372.010004][ T1381] kmem_cache_alloc_noprof+0x87/0x650 [ 1372.010048][ T1381] skb_clone+0x212/0x3a0 [ 1372.010084][ T1381] __netlink_deliver_tap+0x404/0x850 [ 1372.010121][ T1381] ? netlink_deliver_tap+0x2e/0x1b0 [ 1372.010148][ T1381] netlink_deliver_tap+0x19c/0x1b0 [ 1372.010175][ T1381] netlink_sendskb+0x68/0x140 [ 1372.010199][ T1381] netlink_unicast+0x3a3/0x9b0 [ 1372.010230][ T1381] ? __pfx_netlink_unicast+0x10/0x10 [ 1372.010254][ T1381] ? __alloc_skb+0x4e5/0x7d0 [ 1372.010286][ T1381] ctrl_getfamily+0x4c8/0x5c0 [ 1372.010320][ T1381] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1372.010352][ T1381] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1372.010393][ T1381] genl_family_rcv_msg_doit+0x22a/0x330 [ 1372.010426][ T1381] ? __asan_memcpy+0x40/0x70 [ 1372.010461][ T1381] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1372.010519][ T1381] genl_rcv_msg+0x61c/0x7a0 [ 1372.010557][ T1381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1372.010586][ T1381] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1372.010615][ T1381] ? __lock_acquire+0x6b5/0x2cf0 [ 1372.010655][ T1381] netlink_rcv_skb+0x232/0x4b0 [ 1372.010688][ T1381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1372.010722][ T1381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1372.010767][ T1381] ? down_read+0x272/0x2e0 [ 1372.010784][ T1381] ? genl_rcv+0xd/0x40 [ 1372.010817][ T1381] genl_rcv+0x28/0x40 [ 1372.010846][ T1381] netlink_unicast+0x80f/0x9b0 [ 1372.010878][ T1381] ? __pfx_netlink_unicast+0x10/0x10 [ 1372.010901][ T1381] ? netlink_sendmsg+0x650/0xb40 [ 1372.010925][ T1381] ? skb_put+0x11b/0x210 [ 1372.010957][ T1381] netlink_sendmsg+0x813/0xb40 [ 1372.010993][ T1381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1372.011023][ T1381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1372.011050][ T1381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1372.011069][ T1381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1372.011096][ T1381] __sys_sendto+0x672/0x710 [ 1372.011127][ T1381] ? __pfx___sys_sendto+0x10/0x10 [ 1372.011183][ T1381] ? exc_page_fault+0x6a/0xc0 [ 1372.011217][ T1381] ? do_user_addr_fault+0xc6f/0x1340 [ 1372.011250][ T1381] __x64_sys_sendto+0xde/0x100 [ 1372.011282][ T1381] do_syscall_64+0x14d/0xf80 [ 1372.011311][ T1381] ? trace_irq_disable+0x3b/0x150 [ 1372.011341][ T1381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.011360][ T1381] ? clear_bhb_loop+0x40/0x90 [ 1372.011385][ T1381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.011404][ T1381] RIP: 0033:0x7fccbcb5cfce [ 1372.011422][ T1381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1372.011438][ T1381] RSP: 002b:00007fccbdacee28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1372.011458][ T1381] RAX: ffffffffffffffda RBX: 00007fccbdad06c0 RCX: 00007fccbcb5cfce [ 1372.011472][ T1381] RDX: 0000000000000020 RSI: 00007fccbdacefe0 RDI: 0000000000000004 [ 1372.011484][ T1381] RBP: 0000000000000000 R08: 00007fccbdaceea4 R09: 000000000000000c [ 1372.011494][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1372.011506][ T1381] R13: 00007fccbdaceef8 R14: 00007fccbdacefe0 R15: 0000000000000000 [ 1372.011540][ T1381] [ 1372.364953][ T1380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.851445][ T1406] net_ratelimit: 52 callbacks suppressed [ 1372.851464][ T1406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.008114][ T1414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22259'. [ 1373.149756][ T1412] validate_nla: 9 callbacks suppressed [ 1373.149776][ T1412] netlink: 'syz.3.22258': attribute type 3 has an invalid length. [ 1373.174985][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1373.219940][ T1432] netlink: 'syz.2.22264': attribute type 10 has an invalid length. [ 1373.361209][ T1442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22265'. [ 1373.459334][ T1444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22268'. [ 1373.482664][ T1449] netlink: 'syz.4.22270': attribute type 10 has an invalid length. [ 1373.485182][ T1444] FAULT_INJECTION: forcing a failure. [ 1373.485182][ T1444] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.499958][ T1449] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1373.519863][ T1444] CPU: 1 UID: 0 PID: 1444 Comm: syz.2.22268 Not tainted syzkaller #0 PREEMPT(full) [ 1373.519888][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1373.519898][ T1444] Call Trace: [ 1373.519906][ T1444] [ 1373.519914][ T1444] dump_stack_lvl+0xe8/0x150 [ 1373.519948][ T1444] should_fail_ex+0x412/0x560 [ 1373.519976][ T1444] should_failslab+0xa8/0x100 [ 1373.519999][ T1444] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1373.520041][ T1444] ? __alloc_skb+0x186/0x7d0 [ 1373.520067][ T1444] ? __alloc_skb+0x1d0/0x7d0 [ 1373.520090][ T1444] ? __local_bh_enable_ip+0xd0/0x130 [ 1373.520121][ T1444] __alloc_skb+0x1d0/0x7d0 [ 1373.520146][ T1444] ? netlink_ack_tlv_len+0x6c/0x210 [ 1373.520172][ T1444] netlink_ack+0x146/0xa50 [ 1373.520193][ T1444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1373.520217][ T1444] ? ref_tracker_free+0x693/0x840 [ 1373.520246][ T1444] ? __copy_skb_header+0xa3/0x4a0 [ 1373.520277][ T1444] ? __pfx_ref_tracker_free+0x10/0x10 [ 1373.520310][ T1444] netlink_rcv_skb+0x2b6/0x4b0 [ 1373.520334][ T1444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1373.520361][ T1444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1373.520397][ T1444] ? netlink_deliver_tap+0x2e/0x1b0 [ 1373.520429][ T1444] netlink_unicast+0x80f/0x9b0 [ 1373.520459][ T1444] ? __pfx_netlink_unicast+0x10/0x10 [ 1373.520481][ T1444] ? netlink_sendmsg+0x650/0xb40 [ 1373.520504][ T1444] ? skb_put+0x11b/0x210 [ 1373.520534][ T1444] netlink_sendmsg+0x813/0xb40 [ 1373.520566][ T1444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1373.520594][ T1444] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1373.520619][ T1444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1373.520643][ T1444] ____sys_sendmsg+0x972/0x9f0 [ 1373.520684][ T1444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1373.520723][ T1444] ? import_iovec+0x73/0xa0 [ 1373.520757][ T1444] ___sys_sendmsg+0x2a5/0x360 [ 1373.520794][ T1444] ? __pfx____sys_sendmsg+0x10/0x10 [ 1373.520860][ T1444] ? __fget_files+0x2a/0x420 [ 1373.520892][ T1444] ? __fget_files+0x3a0/0x420 [ 1373.520932][ T1444] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1373.520966][ T1444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1373.521006][ T1444] ? __pfx_ksys_write+0x10/0x10 [ 1373.521045][ T1444] do_syscall_64+0x14d/0xf80 [ 1373.521076][ T1444] ? trace_irq_disable+0x3b/0x150 [ 1373.521106][ T1444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.521124][ T1444] ? clear_bhb_loop+0x40/0x90 [ 1373.521149][ T1444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.521167][ T1444] RIP: 0033:0x7fc7b939c799 [ 1373.521184][ T1444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.521199][ T1444] RSP: 002b:00007fc7ba31e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1373.521218][ T1444] RAX: ffffffffffffffda RBX: 00007fc7b9615fa0 RCX: 00007fc7b939c799 [ 1373.521232][ T1444] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000006 [ 1373.521244][ T1444] RBP: 00007fc7ba31e090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.521256][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1373.521267][ T1444] R13: 00007fc7b9616038 R14: 00007fc7b9615fa0 R15: 00007fffa9c66978 [ 1373.521299][ T1444] [ 1373.897722][ T1454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22272'. [ 1373.920452][ T1456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22273'. [ 1374.081416][ T1464] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1374.165466][ T1467] netlink: 'syz.3.22276': attribute type 10 has an invalid length. [ 1374.376510][ T1480] netlink: 'syz.4.22283': attribute type 1 has an invalid length. [ 1374.623278][ T1498] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1374.913429][ T1508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1374.934084][ T1509] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 1374.948382][ T1509] bond6: (slave vcan1): Error -95 calling set_mac_address [ 1374.960866][T17690] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1374.971404][T17690] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.981279][T17690] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1374.990789][T17690] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.999845][T17690] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.009744][T17690] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.022421][T17690] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.031673][T17690] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.190972][ T1523] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1375.268374][ T1525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.285964][ T1529] FAULT_INJECTION: forcing a failure. [ 1375.285964][ T1529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.313331][ T1529] CPU: 1 UID: 0 PID: 1529 Comm: syz.1.22295 Not tainted syzkaller #0 PREEMPT(full) [ 1375.313358][ T1529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1375.313370][ T1529] Call Trace: [ 1375.313378][ T1529] [ 1375.313386][ T1529] dump_stack_lvl+0xe8/0x150 [ 1375.313420][ T1529] should_fail_ex+0x412/0x560 [ 1375.313449][ T1529] _copy_to_user+0x31/0xb0 [ 1375.313481][ T1529] simple_read_from_buffer+0xe1/0x170 [ 1375.313514][ T1529] proc_fail_nth_read+0x1bb/0x230 [ 1375.313546][ T1529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1375.313577][ T1529] ? rw_verify_area+0x2a6/0x4d0 [ 1375.313595][ T1529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1375.313624][ T1529] vfs_read+0x20c/0xa70 [ 1375.313640][ T1529] ? fdget_pos+0x246/0x320 [ 1375.313673][ T1529] ? __pfx___mutex_lock+0x10/0x10 [ 1375.313707][ T1529] ? __pfx_vfs_read+0x10/0x10 [ 1375.313727][ T1529] ? __fget_files+0x2a/0x420 [ 1375.313760][ T1529] ? __fget_files+0x3a0/0x420 [ 1375.313786][ T1529] ? __fget_files+0x2a/0x420 [ 1375.313824][ T1529] ksys_read+0x150/0x270 [ 1375.313845][ T1529] ? __pfx_ksys_read+0x10/0x10 [ 1375.313877][ T1529] do_syscall_64+0x14d/0xf80 [ 1375.313906][ T1529] ? trace_irq_disable+0x3b/0x150 [ 1375.313935][ T1529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.313954][ T1529] ? clear_bhb_loop+0x40/0x90 [ 1375.313978][ T1529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.313997][ T1529] RIP: 0033:0x7f135eb5cfce [ 1375.314014][ T1529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1375.314029][ T1529] RSP: 002b:00007f135f981fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1375.314049][ T1529] RAX: ffffffffffffffda RBX: 00007f135f9826c0 RCX: 00007f135eb5cfce [ 1375.314062][ T1529] RDX: 000000000000000f RSI: 00007f135f9820a0 RDI: 0000000000000007 [ 1375.314074][ T1529] RBP: 00007f135f982090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.314085][ T1529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1375.314097][ T1529] R13: 00007f135ee16038 R14: 00007f135ee15fa0 R15: 00007ffff77d2ef8 [ 1375.314130][ T1529] [ 1375.532528][ T1525] bridge_slave_0: left allmulticast mode [ 1375.539325][ T1525] bridge_slave_0: left promiscuous mode [ 1375.545773][ T1525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.604380][ T1525] .`: (slave bridge_slave_1): Releasing backup interface [ 1375.631386][ T1525] .`: (slave bond_slave_0): Releasing backup interface [ 1375.655528][ T1525] .`: (slave bond_slave_1): Releasing backup interface [ 1375.671851][ T1525] team0: Port device team_slave_0 removed [ 1375.687930][ T1525] team0: Port device team_slave_1 removed [ 1375.696078][ T1525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.705972][ T1525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.717559][ T1525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.726280][ T1525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.740054][ T1525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1375.838409][ T1548] FAULT_INJECTION: forcing a failure. [ 1375.838409][ T1548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.879242][ T1548] CPU: 0 UID: 0 PID: 1548 Comm: syz.0.22304 Not tainted syzkaller #0 PREEMPT(full) [ 1375.879269][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1375.879281][ T1548] Call Trace: [ 1375.879289][ T1548] [ 1375.879298][ T1548] dump_stack_lvl+0xe8/0x150 [ 1375.879333][ T1548] should_fail_ex+0x412/0x560 [ 1375.879361][ T1548] _copy_from_user+0x2d/0xb0 [ 1375.879393][ T1548] copy_from_sockptr_offset+0x66/0xa0 [ 1375.879551][ T1548] do_tcp_getsockopt+0x1d12/0x2950 [ 1375.879585][ T1548] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1375.879609][ T1548] ? sock_recv_errqueue+0x580/0x590 [ 1375.879637][ T1548] ? __lock_acquire+0x6b5/0x2cf0 [ 1375.879672][ T1548] ? aa_label_sk_perm+0x532/0x6e0 [ 1375.879698][ T1548] ? kstrtoull+0x12f/0x1d0 [ 1375.879721][ T1548] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1375.879742][ T1548] ? kstrtouint+0x6e/0xe0 [ 1375.879769][ T1548] ? get_pid_task+0x20/0x1f0 [ 1375.879793][ T1548] ? __lock_acquire+0x6b5/0x2cf0 [ 1375.879858][ T1548] tcp_getsockopt+0x83/0x130 [ 1375.879881][ T1548] ? sock_recv_errqueue+0x580/0x590 [ 1375.879904][ T1548] ? sock_recv_errqueue+0x580/0x590 [ 1375.879925][ T1548] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1375.879951][ T1548] do_sock_getsockopt+0x2d3/0x3f0 [ 1375.879984][ T1548] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1375.880016][ T1548] ? __fget_files+0x3a0/0x420 [ 1375.880044][ T1548] ? __fget_files+0x2a/0x420 [ 1375.880081][ T1548] __x64_sys_getsockopt+0x1a4/0x240 [ 1375.880120][ T1548] do_syscall_64+0x14d/0xf80 [ 1375.880151][ T1548] ? trace_irq_disable+0x3b/0x150 [ 1375.880181][ T1548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.880200][ T1548] ? clear_bhb_loop+0x40/0x90 [ 1375.880224][ T1548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.880243][ T1548] RIP: 0033:0x7f8982f9c799 [ 1375.880262][ T1548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.880277][ T1548] RSP: 002b:00007f8983efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1375.880298][ T1548] RAX: ffffffffffffffda RBX: 00007f8983215fa0 RCX: 00007f8982f9c799 [ 1375.880311][ T1548] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1375.880322][ T1548] RBP: 00007f8983efa090 R08: 0000200000000000 R09: 0000000000000000 [ 1375.880334][ T1548] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1375.880346][ T1548] R13: 00007f8983216038 R14: 00007f8983215fa0 R15: 00007ffe936dc838 [ 1375.880377][ T1548] [ 1376.197061][ T1555] __nla_validate_parse: 11 callbacks suppressed [ 1376.197081][ T1555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22307'. [ 1376.227185][ T1558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22306'. [ 1376.292096][ T1557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22308'. [ 1376.307764][ T1557] vcan0: entered allmulticast mode [ 1376.435682][ T1567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1376.518338][ T1571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22312'. [ 1376.594386][ T1576] Bluetooth: MGMT ver 1.23 [ 1376.760554][ T1588] FAULT_INJECTION: forcing a failure. [ 1376.760554][ T1588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.781930][ T1588] CPU: 0 UID: 0 PID: 1588 Comm: syz.3.22318 Not tainted syzkaller #0 PREEMPT(full) [ 1376.781957][ T1588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1376.781968][ T1588] Call Trace: [ 1376.781975][ T1588] [ 1376.781983][ T1588] dump_stack_lvl+0xe8/0x150 [ 1376.782017][ T1588] should_fail_ex+0x412/0x560 [ 1376.782044][ T1588] _copy_to_user+0x31/0xb0 [ 1376.782076][ T1588] copy_to_sockptr+0x5e/0xa0 [ 1376.782111][ T1588] do_tcp_getsockopt+0x21d2/0x2950 [ 1376.782145][ T1588] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1376.782167][ T1588] ? sock_recv_errqueue+0x580/0x590 [ 1376.782195][ T1588] ? __lock_acquire+0x6b5/0x2cf0 [ 1376.782221][ T1588] ? aa_label_sk_perm+0x532/0x6e0 [ 1376.782248][ T1588] ? kstrtoull+0x12f/0x1d0 [ 1376.782270][ T1588] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1376.782290][ T1588] ? kstrtouint+0x6e/0xe0 [ 1376.782317][ T1588] ? get_pid_task+0x20/0x1f0 [ 1376.782341][ T1588] ? __lock_acquire+0x6b5/0x2cf0 [ 1376.782403][ T1588] tcp_getsockopt+0x83/0x130 [ 1376.782427][ T1588] ? sock_recv_errqueue+0x580/0x590 [ 1376.782448][ T1588] ? sock_recv_errqueue+0x580/0x590 [ 1376.782468][ T1588] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1376.782492][ T1588] do_sock_getsockopt+0x2d3/0x3f0 [ 1376.782524][ T1588] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1376.782553][ T1588] ? __fget_files+0x3a0/0x420 [ 1376.782581][ T1588] ? __fget_files+0x2a/0x420 [ 1376.782616][ T1588] __x64_sys_getsockopt+0x1a4/0x240 [ 1376.782654][ T1588] do_syscall_64+0x14d/0xf80 [ 1376.782684][ T1588] ? trace_irq_disable+0x3b/0x150 [ 1376.782714][ T1588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.782732][ T1588] ? clear_bhb_loop+0x40/0x90 [ 1376.782756][ T1588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.782774][ T1588] RIP: 0033:0x7fccbcb9c799 [ 1376.782793][ T1588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.782808][ T1588] RSP: 002b:00007fccbdad0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1376.782827][ T1588] RAX: ffffffffffffffda RBX: 00007fccbce15fa0 RCX: 00007fccbcb9c799 [ 1376.782840][ T1588] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1376.782851][ T1588] RBP: 00007fccbdad0090 R08: 0000200000000000 R09: 0000000000000000 [ 1376.782863][ T1588] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1376.782875][ T1588] R13: 00007fccbce16038 R14: 00007fccbce15fa0 R15: 00007fff0a5ed688 [ 1376.782904][ T1588] [ 1377.096750][ T1603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22321'. [ 1377.128740][ T1606] netlink: 'syz.2.22324': attribute type 3 has an invalid length. [ 1377.149555][ T1608] netlink: 'syz.2.22324': attribute type 3 has an invalid length. [ 1377.444354][ T1627] netlink: 'syz.4.22329': attribute type 1 has an invalid length. [ 1377.600718][ T1637] team0: Mode changed to "activebackup" [ 1377.608399][ T1638] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1377.837016][ T1659] openvswitch: netlink: IP tunnel dst address not specified [ 1377.965597][ T1668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.006343][ T1674] No such timeout policy "syz0" [ 1378.398450][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22357'. [ 1378.412723][ T1699] tipc: Enabling of bearer rejected, failed to enable media [ 1378.433851][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22360'. [ 1378.468600][ T1704] netlink: 'syz.3.22360': attribute type 1 has an invalid length. [ 1378.496588][ T1704] netlink: 96 bytes leftover after parsing attributes in process `syz.3.22360'. [ 1378.526612][ T1704] netlink: 658 bytes leftover after parsing attributes in process `syz.3.22360'. [ 1378.579736][ T1704] netlink: 1 bytes leftover after parsing attributes in process `syz.3.22360'. [ 1378.672239][ T1719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1378.810852][ T1732] netlink: 'syz.4.22370': attribute type 20 has an invalid length. [ 1378.857740][ T1732] netlink: 'syz.4.22370': attribute type 20 has an invalid length. [ 1378.866506][T17694] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.882276][T17694] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.901710][ T1739] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 1378.914231][T17694] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.927331][ T1739] netlink: 'syz.4.22370': attribute type 10 has an invalid length. [ 1378.936841][T17694] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1378.950100][ T1739] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1379.568829][ T1777] IPv6: sit1: Disabled Multicast RS [ 1379.581093][ T1777] sit1: entered allmulticast mode [ 1379.893543][ T1803] FAULT_INJECTION: forcing a failure. [ 1379.893543][ T1803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.941226][ T1806] 8021q: VLANs not supported on sit0 [ 1379.949535][ T1803] CPU: 1 UID: 0 PID: 1803 Comm: syz.0.22396 Not tainted syzkaller #0 PREEMPT(full) [ 1379.949559][ T1803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1379.949571][ T1803] Call Trace: [ 1379.949578][ T1803] [ 1379.949587][ T1803] dump_stack_lvl+0xe8/0x150 [ 1379.949618][ T1803] should_fail_ex+0x412/0x560 [ 1379.949645][ T1803] _copy_from_user+0x2d/0xb0 [ 1379.949674][ T1803] ___sys_sendmsg+0x1c6/0x360 [ 1379.949713][ T1803] ? __pfx____sys_sendmsg+0x10/0x10 [ 1379.949748][ T1803] ? kstrtouint+0x6e/0xe0 [ 1379.949794][ T1803] ? __fget_files+0x2a/0x420 [ 1379.949823][ T1803] ? __fget_files+0x3a0/0x420 [ 1379.949860][ T1803] __sys_sendmmsg+0x27c/0x4e0 [ 1379.949896][ T1803] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1379.949934][ T1803] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1379.949991][ T1803] ? ksys_write+0x242/0x270 [ 1379.950012][ T1803] ? __pfx_ksys_write+0x10/0x10 [ 1379.950037][ T1803] __x64_sys_sendmmsg+0xa0/0xc0 [ 1379.950070][ T1803] do_syscall_64+0x14d/0xf80 [ 1379.950100][ T1803] ? trace_irq_disable+0x3b/0x150 [ 1379.950129][ T1803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.950148][ T1803] ? clear_bhb_loop+0x40/0x90 [ 1379.950173][ T1803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.950190][ T1803] RIP: 0033:0x7f8982f9c799 [ 1379.950206][ T1803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.950221][ T1803] RSP: 002b:00007f8983efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1379.950240][ T1803] RAX: ffffffffffffffda RBX: 00007f8983215fa0 RCX: 00007f8982f9c799 [ 1379.950253][ T1803] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 1379.950263][ T1803] RBP: 00007f8983efa090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.950273][ T1803] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 1379.950285][ T1803] R13: 00007f8983216038 R14: 00007f8983215fa0 R15: 00007ffe936dc838 [ 1379.950315][ T1803] [ 1379.992900][ T1808] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1380.211023][ T1812] netlink: 'syz.0.22400': attribute type 6 has an invalid length. [ 1380.323001][ T1821] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1380.722049][T17696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.731062][T17696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.750218][ T1845] IPv6: NLM_F_CREATE should be specified when creating new route [ 1380.751787][ T1840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1380.830207][ T1850] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1380.923645][ T1856]  speed is unknown, defaulting to 1000 [ 1380.960155][ T1863] netlink: Unknown conntrack attr (0) [ 1380.967271][ T1862] netlink: Unknown conntrack attr (0) [ 1381.041648][ T1866] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1381.056579][ T1866] bridge0: entered allmulticast mode [ 1381.335782][ T1879] IPv6: NLM_F_CREATE should be specified when creating new route [ 1381.745960][ T1908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.868220][ T1911] __nla_validate_parse: 43 callbacks suppressed [ 1381.868242][ T1911] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.22430'. [ 1381.897555][ T1911] openvswitch: netlink: Message has 6 unknown bytes. [ 1381.921291][ T1911] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1381.933649][ T1925] IPv6: NLM_F_CREATE should be specified when creating new route [ 1382.100650][ T1936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22439'. [ 1382.138527][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1382.355264][T17694] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.364208][T17694] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.387195][T17694] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.409107][T17694] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.422200][T17694] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.436989][T17694] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.448328][T17694] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.468118][T17694] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.441854][ T1998] netlink: 'syz.0.22456': attribute type 4 has an invalid length. [ 1383.530150][ T2003] netlink: 'syz.1.22459': attribute type 6 has an invalid length. [ 1383.540228][ T2003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22459'. [ 1384.550388][T26016] lec:lec_start_xmit: lec0:No lecd attached [ 1385.746723][ T1965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1385.879728][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22465'. [ 1386.012588][ T2027] FAULT_INJECTION: forcing a failure. [ 1386.012588][ T2027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.031922][ T2034] veth1_macvtap: left promiscuous mode [ 1386.092794][ T2027] CPU: 0 UID: 0 PID: 2027 Comm: syz.1.22466 Not tainted syzkaller #0 PREEMPT(full) [ 1386.092821][ T2027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1386.092832][ T2027] Call Trace: [ 1386.092840][ T2027] [ 1386.092848][ T2027] dump_stack_lvl+0xe8/0x150 [ 1386.092883][ T2027] should_fail_ex+0x412/0x560 [ 1386.092911][ T2027] _copy_from_iter+0x1d3/0x1670 [ 1386.092942][ T2027] ? rcu_is_watching+0x15/0xb0 [ 1386.092978][ T2027] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.093011][ T2027] ? netlink_sendmsg+0x650/0xb40 [ 1386.093036][ T2027] ? skb_put+0x11b/0x210 [ 1386.093066][ T2027] netlink_sendmsg+0x6c0/0xb40 [ 1386.093100][ T2027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1386.093138][ T2027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1386.093164][ T2027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1386.093187][ T2027] ____sys_sendmsg+0x972/0x9f0 [ 1386.093227][ T2027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1386.093267][ T2027] ? import_iovec+0x73/0xa0 [ 1386.093300][ T2027] ___sys_sendmsg+0x2a5/0x360 [ 1386.093337][ T2027] ? __pfx____sys_sendmsg+0x10/0x10 [ 1386.093403][ T2027] ? __fget_files+0x2a/0x420 [ 1386.093432][ T2027] ? __fget_files+0x3a0/0x420 [ 1386.093472][ T2027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1386.093508][ T2027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1386.093549][ T2027] ? __pfx_ksys_write+0x10/0x10 [ 1386.093580][ T2027] do_syscall_64+0x14d/0xf80 [ 1386.093612][ T2027] ? trace_irq_disable+0x3b/0x150 [ 1386.093643][ T2027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.093661][ T2027] ? clear_bhb_loop+0x40/0x90 [ 1386.093686][ T2027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.093703][ T2027] RIP: 0033:0x7f135eb9c799 [ 1386.093721][ T2027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.093737][ T2027] RSP: 002b:00007f135f982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1386.093757][ T2027] RAX: ffffffffffffffda RBX: 00007f135ee15fa0 RCX: 00007f135eb9c799 [ 1386.093770][ T2027] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1386.093782][ T2027] RBP: 00007f135f982090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.093794][ T2027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.093805][ T2027] R13: 00007f135ee16038 R14: 00007f135ee15fa0 R15: 00007ffff77d2ef8 [ 1386.093857][ T2027] [ 1386.341812][ T2041] netlink: 'syz.4.22471': attribute type 4 has an invalid length. [ 1386.350299][ T2041] netlink: 17 bytes leftover after parsing attributes in process `syz.4.22471'. [ 1386.509536][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22472'. [ 1386.522321][ T2053] xt_socket: unknown flags 0x50 [ 1386.614040][ T2061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22476'. [ 1386.635090][ T2061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22476'. [ 1386.696532][ T2066] netlink: 'syz.1.22479': attribute type 1 has an invalid length. [ 1386.704402][ T2066] netlink: 'syz.1.22479': attribute type 11 has an invalid length. [ 1386.752670][ T2072] x_tables: duplicate underflow at hook 3 [ 1386.756550][ T2066] netlink: 224 bytes leftover after parsing attributes in process `syz.1.22479'. [ 1386.840709][ T2062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22479'. [ 1386.922792][T17678] tipc: Subscription rejected, illegal request [ 1386.968292][ T2062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22479'. [ 1387.010561][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22485'. [ 1387.222091][ T2091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22487'. [ 1387.285452][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22489'. [ 1387.483617][ T2103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22493'. [ 1387.497751][ T2103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22493'. [ 1387.604956][ T2105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22494'. [ 1387.627862][ T2108] netlink: 'syz.1.22495': attribute type 1 has an invalid length. [ 1387.640801][ T2105] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1387.678711][ T2105] team0: Port device batadv2 added [ 1387.741508][ T2107] bond0: (slave geneve2): making interface the new active one [ 1387.777786][ T2107] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1387.799449][T17696] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1387.834394][T17696] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1387.916229][ T2129] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.22497'. [ 1388.255228][T17696] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1388.264437][T17696] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1388.423633][ T2143] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1388.578852][ T2149] bridge0: left allmulticast mode [ 1388.629184][ T2151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1388.855011][ T2165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22512'. [ 1388.856911][ T2167] veth0: entered promiscuous mode [ 1388.936436][ T2139] infiniband : set down [ 1388.941012][ T2139] infiniband : added ipvlan0 [ 1388.943348][ T2166] veth0: left promiscuous mode [ 1388.998855][ T2139] RDS/IB: : added [ 1389.003152][ T2139] smc: adding ib device  with port count 1 [ 1389.009670][ T2139] smc: ib device  port 1 has no pnetid [ 1389.053717][ T2177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22515'. [ 1389.122210][ T2185] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1389.236882][ T2190] FAULT_INJECTION: forcing a failure. [ 1389.236882][ T2190] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.310063][ T2190] CPU: 1 UID: 0 PID: 2190 Comm: syz.1.22518 Not tainted syzkaller #0 PREEMPT(full) [ 1389.310090][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1389.310101][ T2190] Call Trace: [ 1389.310109][ T2190] [ 1389.310118][ T2190] dump_stack_lvl+0xe8/0x150 [ 1389.310152][ T2190] should_fail_ex+0x412/0x560 [ 1389.310180][ T2190] should_failslab+0xa8/0x100 [ 1389.310204][ T2190] ? skb_clone+0x212/0x3a0 [ 1389.310236][ T2190] kmem_cache_alloc_noprof+0x87/0x650 [ 1389.310279][ T2190] skb_clone+0x212/0x3a0 [ 1389.310314][ T2190] __netlink_deliver_tap+0x404/0x850 [ 1389.310352][ T2190] ? netlink_deliver_tap+0x2e/0x1b0 [ 1389.310379][ T2190] netlink_deliver_tap+0x19c/0x1b0 [ 1389.310405][ T2190] netlink_sendskb+0x68/0x140 [ 1389.310429][ T2190] netlink_unicast+0x3a3/0x9b0 [ 1389.310459][ T2190] ? __pfx_netlink_unicast+0x10/0x10 [ 1389.310491][ T2190] netlink_rcv_skb+0x2b6/0x4b0 [ 1389.310516][ T2190] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1389.310545][ T2190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1389.310581][ T2190] ? netlink_deliver_tap+0x2e/0x1b0 [ 1389.310614][ T2190] netlink_unicast+0x80f/0x9b0 [ 1389.310642][ T2190] ? __pfx_netlink_unicast+0x10/0x10 [ 1389.310664][ T2190] ? netlink_sendmsg+0x650/0xb40 [ 1389.310687][ T2190] ? skb_put+0x11b/0x210 [ 1389.310719][ T2190] netlink_sendmsg+0x813/0xb40 [ 1389.310754][ T2190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.310783][ T2190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1389.310810][ T2190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1389.310833][ T2190] ____sys_sendmsg+0x972/0x9f0 [ 1389.310874][ T2190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1389.310915][ T2190] ? import_iovec+0x73/0xa0 [ 1389.310948][ T2190] ___sys_sendmsg+0x2a5/0x360 [ 1389.310994][ T2190] ? __pfx____sys_sendmsg+0x10/0x10 [ 1389.311063][ T2190] ? __fget_files+0x2a/0x420 [ 1389.311092][ T2190] ? __fget_files+0x3a0/0x420 [ 1389.311132][ T2190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1389.311166][ T2190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1389.311208][ T2190] ? __pfx_ksys_write+0x10/0x10 [ 1389.311241][ T2190] do_syscall_64+0x14d/0xf80 [ 1389.311271][ T2190] ? trace_irq_disable+0x3b/0x150 [ 1389.311301][ T2190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.311320][ T2190] ? clear_bhb_loop+0x40/0x90 [ 1389.311345][ T2190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.311363][ T2190] RIP: 0033:0x7f135eb9c799 [ 1389.311380][ T2190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.311396][ T2190] RSP: 002b:00007f135f982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.311417][ T2190] RAX: ffffffffffffffda RBX: 00007f135ee15fa0 RCX: 00007f135eb9c799 [ 1389.311430][ T2190] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1389.311442][ T2190] RBP: 00007f135f982090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.311454][ T2190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.311464][ T2190] R13: 00007f135ee16038 R14: 00007f135ee15fa0 R15: 00007ffff77d2ef8 [ 1389.311496][ T2190] [ 1389.787032][ T2201] netlink: 'syz.1.22524': attribute type 1 has an invalid length. [ 1389.894602][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 1389.902669][ C1] lec:lec_tx_timeout: lec0 [ 1390.144065][ T2218] sit0: entered promiscuous mode [ 1390.172911][ T2218] netlink: 'syz.3.22529': attribute type 1 has an invalid length. [ 1390.483019][ T2235] FAULT_INJECTION: forcing a failure. [ 1390.483019][ T2235] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.513449][ T2235] CPU: 0 UID: 0 PID: 2235 Comm: syz.4.22536 Not tainted syzkaller #0 PREEMPT(full) [ 1390.513474][ T2235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1390.513485][ T2235] Call Trace: [ 1390.513492][ T2235] [ 1390.513499][ T2235] dump_stack_lvl+0xe8/0x150 [ 1390.513532][ T2235] should_fail_ex+0x412/0x560 [ 1390.513559][ T2235] should_failslab+0xa8/0x100 [ 1390.513583][ T2235] ? alloc_empty_file+0x55/0x1d0 [ 1390.513609][ T2235] kmem_cache_alloc_noprof+0x87/0x650 [ 1390.513647][ T2235] alloc_empty_file+0x55/0x1d0 [ 1390.513674][ T2235] alloc_file_pseudo+0x155/0x240 [ 1390.513704][ T2235] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1390.513730][ T2235] ? do_raw_spin_unlock+0xf5/0x210 [ 1390.513753][ T2235] ? _raw_spin_unlock+0x28/0x50 [ 1390.513788][ T2235] sock_alloc_file+0xb8/0x2e0 [ 1390.513807][ T2235] ? __sys_socket+0x12b/0x1b0 [ 1390.513843][ T2235] __sys_socket+0x13c/0x1b0 [ 1390.513869][ T2235] __x64_sys_socket+0x7a/0x90 [ 1390.513893][ T2235] do_syscall_64+0x14d/0xf80 [ 1390.513925][ T2235] ? trace_irq_disable+0x3b/0x150 [ 1390.513954][ T2235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.513973][ T2235] ? clear_bhb_loop+0x40/0x90 [ 1390.513997][ T2235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.514015][ T2235] RIP: 0033:0x7ff280f9e007 [ 1390.514033][ T2235] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.514049][ T2235] RSP: 002b:00007ff281e57e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1390.514069][ T2235] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007ff280f9e007 [ 1390.514082][ T2235] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1390.514094][ T2235] RBP: 0000000000000025 R08: 00007ff281e57f70 R09: 0000000000000000 [ 1390.514105][ T2235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.514116][ T2235] R13: 00007ff281e57f90 R14: 00007ff281e57f90 R15: 0000200000000080 [ 1390.514145][ T2235] [ 1390.722857][ T2234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1390.942676][ T2246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.309413][ T2262] chnl_net:caif_netlink_parms(): no params data found [ 1391.707561][ T2289] batman_adv: batadv0: Interface deactivated: dummy0 [ 1391.716571][ T2289] batman_adv: batadv0: Removing interface: dummy0 [ 1391.749806][ T2289] bridge_slave_0: left allmulticast mode [ 1391.766782][ T2289] bridge_slave_0: left promiscuous mode [ 1391.778413][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.798450][ T2289] bridge_slave_1: left allmulticast mode [ 1391.808127][ T2289] bridge_slave_1: left promiscuous mode [ 1391.815637][ T2289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.834264][ T2289] team0: Port device team_slave_0 removed [ 1391.847589][ T2289] team0: Port device team_slave_1 removed [ 1391.856809][ T2289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.871675][ T2289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.880963][ T2289] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1391.914077][ T2292] syzkaller0: entered promiscuous mode [ 1391.929739][ T2292] syzkaller0: entered allmulticast mode [ 1391.974822][ T2292] __nla_validate_parse: 13 callbacks suppressed [ 1391.974843][ T2292] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22556'. [ 1392.338997][ T2314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.22566'. [ 1392.484244][ T2327] netlink: 'syz.4.22570': attribute type 10 has an invalid length. [ 1392.588281][ T2327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22570'. [ 1392.735856][ T2335] bond0: (slave bridge_slave_1): Releasing backup interface [ 1392.744474][ T2335] bond0: (slave bridge_slave_1): the permanent HWaddr of slave - d6:fe:e6:e7:da:56 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1392.812335][ T2335] bond2: (slave veth0_to_bond): Releasing active interface [ 1392.821081][ T2335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1392.895695][ T2343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22577'. [ 1393.003732][ T2345] syzkaller0: entered allmulticast mode [ 1393.239207][ T2355]  speed is unknown, defaulting to 1000 [ 1393.343698][ T2365] batman_adv: batadv0: Adding interface: dummy0 [ 1393.362505][ T2365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.404602][ T2365] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1393.526775][ T2375] netlink: 'syz.0.22589': attribute type 4 has an invalid length. [ 1393.574387][ T2380] block nbd0: reconnected socket [ 1393.574410][ T312] block nbd0: Receive control failed (result -107) [ 1393.728195][ T2388] bond0: (slave bridge_slave_1): Releasing backup interface [ 1393.747276][ T2388] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1393.867897][ T2394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.205739][ T2418] unsupported nla_type 33542 [ 1394.750058][ T2443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22612'. [ 1394.793657][ T2451] netlink: 'syz.2.22614': attribute type 3 has an invalid length. [ 1394.815495][ T2450] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1394.835695][ T2452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22614'. [ 1394.941780][ T2456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22617'. [ 1395.187054][ T2487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22626'. [ 1395.259132][ T2490] netlink: 'syz.2.22627': attribute type 1 has an invalid length. [ 1395.276801][ T2490] netlink: 'syz.2.22627': attribute type 1 has an invalid length. [ 1395.303372][ T2490] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.22627'. [ 1395.671029][ T2536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22639'. [ 1396.121581][ T2572] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1396.733979][ T2634] openvswitch: netlink: Flow actions attr not present in new flow. [ 1396.895223][ T2647] syzkaller0: entered promiscuous mode [ 1396.900739][ T2647] syzkaller0: entered allmulticast mode [ 1396.995329][ T2659] netlink: 'syz.3.22668': attribute type 3 has an invalid length. [ 1397.206207][ T2663] dvmrp6: entered allmulticast mode [ 1397.264392][ T2668] __nla_validate_parse: 2 callbacks suppressed [ 1397.264409][ T2668] netlink: 892 bytes leftover after parsing attributes in process `syz.4.22671'. [ 1397.311920][ T2668] FAULT_INJECTION: forcing a failure. [ 1397.311920][ T2668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.344398][ T2668] CPU: 1 UID: 0 PID: 2668 Comm: syz.4.22671 Not tainted syzkaller #0 PREEMPT(full) [ 1397.344425][ T2668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1397.344436][ T2668] Call Trace: [ 1397.344443][ T2668] [ 1397.344450][ T2668] dump_stack_lvl+0xe8/0x150 [ 1397.344490][ T2668] should_fail_ex+0x412/0x560 [ 1397.344518][ T2668] _copy_to_user+0x31/0xb0 [ 1397.344550][ T2668] simple_read_from_buffer+0xe1/0x170 [ 1397.344592][ T2668] proc_fail_nth_read+0x1bb/0x230 [ 1397.344625][ T2668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1397.344656][ T2668] ? rw_verify_area+0x2a6/0x4d0 [ 1397.344674][ T2668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1397.344704][ T2668] vfs_read+0x20c/0xa70 [ 1397.344720][ T2668] ? fdget_pos+0x246/0x320 [ 1397.344755][ T2668] ? __pfx___mutex_lock+0x10/0x10 [ 1397.344788][ T2668] ? __pfx_vfs_read+0x10/0x10 [ 1397.344809][ T2668] ? __fget_files+0x2a/0x420 [ 1397.344842][ T2668] ? __fget_files+0x3a0/0x420 [ 1397.344870][ T2668] ? __fget_files+0x2a/0x420 [ 1397.344908][ T2668] ksys_read+0x150/0x270 [ 1397.344930][ T2668] ? __pfx_ksys_read+0x10/0x10 [ 1397.344962][ T2668] do_syscall_64+0x14d/0xf80 [ 1397.344992][ T2668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.345012][ T2668] ? clear_bhb_loop+0x40/0x90 [ 1397.345037][ T2668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.345056][ T2668] RIP: 0033:0x7ff280f5cfce [ 1397.345073][ T2668] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1397.345087][ T2668] RSP: 002b:00007ff281e58fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1397.345106][ T2668] RAX: ffffffffffffffda RBX: 00007ff281e596c0 RCX: 00007ff280f5cfce [ 1397.345119][ T2668] RDX: 000000000000000f RSI: 00007ff281e590a0 RDI: 0000000000000005 [ 1397.345130][ T2668] RBP: 00007ff281e59090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.345142][ T2668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.345153][ T2668] R13: 00007ff281216038 R14: 00007ff281215fa0 R15: 00007ffce9c2e348 [ 1397.345183][ T2668] [ 1397.711921][ T2637] lec:lec_atm_send: lec0: Unknown message type 11 [ 1397.922166][ T2636] lec:lec_atm_close: lec0: Shut down! [ 1398.379583][ T2740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22692'. [ 1398.441557][ T2747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22693'. [ 1398.593601][ T2759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22697'. [ 1398.626332][ T2759] bond3: entered promiscuous mode [ 1398.632030][ T2759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1398.640558][ T2762] tipc: New replicast peer: 255.255.255.255 [ 1398.648952][ T2762] tipc: Enabled bearer , priority 10 [ 1398.660594][ T2763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22696'. [ 1398.662208][ T2759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22697'. [ 1398.782351][ T2115] block nbd2: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 30 seconds [ 1398.799371][ T2115] block nbd2: Possible stuck request ffff8880274c0200: control (read@1024,1024B). Runtime 30 seconds [ 1398.812872][ T2115] block nbd2: Possible stuck request ffff8880274c0400: control (read@2048,1024B). Runtime 30 seconds [ 1398.827566][ T2115] block nbd2: Possible stuck request ffff8880274c0600: control (read@3072,1024B). Runtime 30 seconds [ 1398.843199][ T2773] netlink: 52 bytes leftover after parsing attributes in process `syz.0.22700'. [ 1398.871917][ T2774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.882032][ T2774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.895356][ T2775] netlink: 76 bytes leftover after parsing attributes in process `syz.0.22700'. [ 1398.900101][ T2774] batman_adv: batadv0: Interface activated: dummy0 [ 1398.934763][ T2774] batadv0: mtu less than device minimum [ 1398.941189][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1398.953482][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1398.965425][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1398.977154][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1398.988893][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1399.000668][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1399.012394][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1399.024074][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1399.035838][ T2774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1399.073020][ T2774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.222015][ T2774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1399.251613][ T2774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1399.300464][ T2774] veth0_virt_wifi: entered promiscuous mode [ 1399.326269][ T2774] veth1_vlan: left promiscuous mode [ 1399.349295][ T2774] veth0_vlan: left promiscuous mode [ 1399.380466][ T2774] veth0_vlan: entered promiscuous mode [ 1399.400085][ T2774] veth1_vlan: entered promiscuous mode [ 1399.414713][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1399.448146][ T2774] batman_adv: batadv0: Interface activated: netdevsim0 [ 1399.491430][ T2775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.22700'. [ 1399.542619][T17695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.583047][T19528] Bluetooth: hci2: command 0x0406 tx timeout [ 1399.632165][T17695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.661586][T17695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.684417][T17695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.705645][ T2804] tipc: Started in network mode [ 1399.715362][ T2804] tipc: Node identity ce8722eaf81e, cluster identity 4711 [ 1399.735950][ T2804] tipc: Enabled bearer , priority 11 [ 1399.848980][ T2805] netlink: 'syz.3.22708': attribute type 13 has an invalid length. [ 1400.220650][ T2850] syzkaller0: entered promiscuous mode [ 1400.235897][ T2850] syzkaller0: entered allmulticast mode [ 1400.276832][ T2850] netlink: 'syz.2.22721': attribute type 1 has an invalid length. [ 1400.320956][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22721'. [ 1400.541846][ T2868] netlink: 'syz.1.22725': attribute type 11 has an invalid length. [ 1400.626789][ T2876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1400.828793][ T2896] batman_adv: batadv0: Interface deactivated: dummy0 [ 1400.837063][ T2896] batman_adv: batadv0: Removing interface: dummy0 [ 1400.875787][ T6329] tipc: Node number set to 916005610 [ 1400.962572][ T2903] netlink: 'syz.0.22735': attribute type 12 has an invalid length. [ 1400.997468][ T2906] netlink: 'syz.3.22736': attribute type 21 has an invalid length. [ 1401.111920][ T2916] FAULT_INJECTION: forcing a failure. [ 1401.111920][ T2916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.126037][ T2916] CPU: 0 UID: 0 PID: 2916 Comm: syz.3.22739 Not tainted syzkaller #0 PREEMPT(full) [ 1401.126063][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1401.126076][ T2916] Call Trace: [ 1401.126083][ T2916] [ 1401.126092][ T2916] dump_stack_lvl+0xe8/0x150 [ 1401.126126][ T2916] should_fail_ex+0x412/0x560 [ 1401.126155][ T2916] _copy_from_iter+0x1d3/0x1670 [ 1401.126182][ T2916] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1401.126219][ T2916] ? __pfx_policy_nodemask+0x10/0x10 [ 1401.126247][ T2916] ? __pfx__copy_from_iter+0x10/0x10 [ 1401.126281][ T2916] ? set_page_refcounted+0xa0/0x1e0 [ 1401.126305][ T2916] ? page_copy_sane+0x4e/0x270 [ 1401.126333][ T2916] copy_page_from_iter+0xdd/0x170 [ 1401.126363][ T2916] tun_get_user+0x1d4b/0x3dd0 [ 1401.126391][ T2916] ? tun_get_user+0x6ff/0x3dd0 [ 1401.126436][ T2916] ? aa_file_perm+0x50e/0x15e0 [ 1401.126463][ T2916] ? __pfx_tun_get_user+0x10/0x10 [ 1401.126488][ T2916] ? aa_file_perm+0x192/0x15e0 [ 1401.126534][ T2916] ? ref_tracker_alloc+0x35c/0x4c0 [ 1401.126562][ T2916] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1401.126593][ T2916] ? tun_get+0x1c/0x2f0 [ 1401.126625][ T2916] ? tun_get+0x1c/0x2f0 [ 1401.126650][ T2916] ? tun_get+0x1c/0x2f0 [ 1401.126681][ T2916] tun_chr_write_iter+0x113/0x200 [ 1401.126710][ T2916] vfs_write+0x61d/0xb90 [ 1401.126738][ T2916] ? __pfx_vfs_write+0x10/0x10 [ 1401.126769][ T2916] ? __fget_files+0x2a/0x420 [ 1401.126807][ T2916] ksys_write+0x150/0x270 [ 1401.126829][ T2916] ? __pfx_ksys_write+0x10/0x10 [ 1401.126860][ T2916] do_syscall_64+0x14d/0xf80 [ 1401.126891][ T2916] ? trace_irq_disable+0x3b/0x150 [ 1401.126922][ T2916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.126940][ T2916] ? clear_bhb_loop+0x40/0x90 [ 1401.126964][ T2916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.126982][ T2916] RIP: 0033:0x7fccbcb5cfce [ 1401.127000][ T2916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1401.127014][ T2916] RSP: 002b:00007fccbdacffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1401.127035][ T2916] RAX: ffffffffffffffda RBX: 00007fccbdad06c0 RCX: 00007fccbcb5cfce [ 1401.127048][ T2916] RDX: 000000000000004c RSI: 0000200000000140 RDI: 00000000000000c8 [ 1401.127061][ T2916] RBP: 00007fccbdad0090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.127072][ T2916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.127084][ T2916] R13: 00007fccbce16038 R14: 00007fccbce15fa0 R15: 00007fff0a5ed688 [ 1401.127115][ T2916] [ 1401.469399][ T2922] FAULT_INJECTION: forcing a failure. [ 1401.469399][ T2922] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.482124][ T2922] CPU: 0 UID: 0 PID: 2922 Comm: syz.3.22742 Not tainted syzkaller #0 PREEMPT(full) [ 1401.482147][ T2922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1401.482158][ T2922] Call Trace: [ 1401.482175][ T2922] [ 1401.482182][ T2922] dump_stack_lvl+0xe8/0x150 [ 1401.482217][ T2922] should_fail_ex+0x412/0x560 [ 1401.482245][ T2922] should_failslab+0xa8/0x100 [ 1401.482272][ T2922] ? dst_alloc+0x105/0x170 [ 1401.482291][ T2922] kmem_cache_alloc_noprof+0x87/0x650 [ 1401.482334][ T2922] dst_alloc+0x105/0x170 [ 1401.482358][ T2922] ip_route_input_rcu+0x23e5/0x3130 [ 1401.482481][ T2922] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 1401.482522][ T2922] ? ipt_do_table+0x2b2/0x1630 [ 1401.482588][ T2922] ? lock_acquire+0xf0/0x2e0 [ 1401.482622][ T2922] ? ip_route_input_noref+0xad/0x270 [ 1401.482652][ T2922] ip_route_input_noref+0x17c/0x270 [ 1401.482682][ T2922] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1401.482717][ T2922] ? ipt_do_table+0x2b2/0x1630 [ 1401.482737][ T2922] ? __pfx_ipt_do_table+0x10/0x10 [ 1401.482762][ T2922] ip_rcv_finish_core+0x5af/0x1c00 [ 1401.482795][ T2922] ip_rcv_finish+0x14c/0x2a0 [ 1401.482819][ T2922] NF_HOOK+0x336/0x3c0 [ 1401.482842][ T2922] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1401.482862][ T2922] ? NF_HOOK+0x9e/0x3c0 [ 1401.482881][ T2922] ? __pfx_NF_HOOK+0x10/0x10 [ 1401.482904][ T2922] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1401.482932][ T2922] ? netif_receive_skb+0x102/0xc50 [ 1401.482954][ T2922] ? __pfx_ip_rcv+0x10/0x10 [ 1401.482974][ T2922] netif_receive_skb+0x45b/0xc50 [ 1401.483001][ T2922] ? __pfx_netif_receive_skb+0x10/0x10 [ 1401.483020][ T2922] ? __lock_acquire+0x6b5/0x2cf0 [ 1401.483051][ T2922] ? tun_rx_batched+0x185/0x790 [ 1401.483082][ T2922] tun_rx_batched+0x1de/0x790 [ 1401.483107][ T2922] ? __build_skb+0x62/0x440 [ 1401.483139][ T2922] ? __pfx_tun_rx_batched+0x10/0x10 [ 1401.483186][ T2922] ? tun_get_user+0x2354/0x3dd0 [ 1401.483213][ T2922] ? __local_bh_enable_ip+0xd0/0x130 [ 1401.483244][ T2922] ? tun_get_user+0x2669/0x3dd0 [ 1401.483269][ T2922] tun_get_user+0x2a78/0x3dd0 [ 1401.483315][ T2922] ? aa_file_perm+0x50e/0x15e0 [ 1401.483340][ T2922] ? __pfx_tun_get_user+0x10/0x10 [ 1401.483363][ T2922] ? aa_file_perm+0x192/0x15e0 [ 1401.483408][ T2922] ? ref_tracker_alloc+0x35c/0x4c0 [ 1401.483437][ T2922] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1401.483468][ T2922] ? tun_get+0x1c/0x2f0 [ 1401.483499][ T2922] ? tun_get+0x1c/0x2f0 [ 1401.483525][ T2922] ? tun_get+0x1c/0x2f0 [ 1401.483556][ T2922] tun_chr_write_iter+0x113/0x200 [ 1401.483585][ T2922] vfs_write+0x61d/0xb90 [ 1401.483614][ T2922] ? __pfx_vfs_write+0x10/0x10 [ 1401.483645][ T2922] ? __fget_files+0x2a/0x420 [ 1401.483684][ T2922] ksys_write+0x150/0x270 [ 1401.483706][ T2922] ? __pfx_ksys_write+0x10/0x10 [ 1401.483739][ T2922] do_syscall_64+0x14d/0xf80 [ 1401.483770][ T2922] ? trace_irq_disable+0x3b/0x150 [ 1401.483800][ T2922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.483819][ T2922] ? clear_bhb_loop+0x40/0x90 [ 1401.483844][ T2922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.483862][ T2922] RIP: 0033:0x7fccbcb5cfce [ 1401.483880][ T2922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1401.483896][ T2922] RSP: 002b:00007fccbdacffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1401.483915][ T2922] RAX: ffffffffffffffda RBX: 00007fccbdad06c0 RCX: 00007fccbcb5cfce [ 1401.483929][ T2922] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1401.483941][ T2922] RBP: 00007fccbdad0090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.483952][ T2922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.483963][ T2922] R13: 00007fccbce16038 R14: 00007fccbce15fa0 R15: 00007fff0a5ed688 [ 1401.483996][ T2922] [ 1402.925419][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1402.933536][ C1] lec:lec_tx_timeout: lec0 [ 1416.268724][T19528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.279816][T19528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.289278][T19528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.297889][T19528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.308481][T19528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1416.342709][ T2947]  speed is unknown, defaulting to 1000 [ 1416.549587][ T2947] chnl_net:caif_netlink_parms(): no params data found [ 1416.618203][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.625898][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.633181][ T2947] bridge_slave_0: entered allmulticast mode [ 1416.641319][ T2947] bridge_slave_0: entered promiscuous mode [ 1416.649660][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.657038][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.664419][ T2947] bridge_slave_1: entered allmulticast mode [ 1416.673282][ T2947] bridge_slave_1: entered promiscuous mode [ 1416.701313][ T2947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.713669][ T2947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.743059][ T2947] team0: Port device team_slave_0 added [ 1416.751627][ T2947] team0: Port device team_slave_1 added [ 1416.778305][ T2947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.785404][ T2947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.812203][ T2947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.824321][ T2947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.831328][ T2947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.858184][ T2947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.899564][ T2947] hsr_slave_0: entered promiscuous mode [ 1416.906039][ T2947] hsr_slave_1: entered promiscuous mode [ 1416.912177][ T2947] debugfs: 'hsr0' already exists in 'hsr' [ 1416.918573][ T2947] Cannot create hsr debugfs directory [ 1417.366553][ T312] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1417.378085][ T312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1417.395660][ T312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1417.406094][ T312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1417.413814][ T312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1417.512060][ T2959]  speed is unknown, defaulting to 1000 [ 1417.534802][ T312] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1417.550520][ T312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1417.559360][ T312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1417.571672][ T312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1417.587206][ T312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1417.596148][ T312] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1417.608208][ T312] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1417.619019][ T312] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1417.631874][ T2965] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1417.646493][ T2965] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1417.649697][ T312] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1417.665588][ T312] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1417.678794][ T312] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1417.701794][ T312] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1417.709854][ T312] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1417.816457][ T2961]  speed is unknown, defaulting to 1000 [ 1417.849915][ T2963]  speed is unknown, defaulting to 1000 [ 1417.877748][ T2966]  speed is unknown, defaulting to 1000 [ 1418.126301][ T2959] chnl_net:caif_netlink_parms(): no params data found [ 1418.331273][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.340707][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.349108][ T2959] bridge_slave_0: entered allmulticast mode [ 1418.358447][ T2959] bridge_slave_0: entered promiscuous mode [ 1418.377716][T19528] Bluetooth: hci1: command tx timeout [ 1418.397901][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.406346][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.413789][ T2959] bridge_slave_1: entered allmulticast mode [ 1418.423106][ T2959] bridge_slave_1: entered promiscuous mode [ 1418.522607][ T2959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.548778][ T2959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.576608][ T2961] chnl_net:caif_netlink_parms(): no params data found [ 1418.622326][ T2959] team0: Port device team_slave_0 added [ 1418.662861][ T2959] team0: Port device team_slave_1 added [ 1418.727795][ T2959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.735143][ T2959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.761941][ T2959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.798838][ T2959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.806793][ T2959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.833358][ T2959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.885306][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.893064][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.901185][ T2961] bridge_slave_0: entered allmulticast mode [ 1418.908939][ T2961] bridge_slave_0: entered promiscuous mode [ 1418.917820][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.925694][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.933189][ T2961] bridge_slave_1: entered allmulticast mode [ 1418.941622][ T2961] bridge_slave_1: entered promiscuous mode [ 1418.953972][ T2959] hsr_slave_0: entered promiscuous mode [ 1418.960699][ T2959] hsr_slave_1: entered promiscuous mode [ 1418.967532][ T2959] debugfs: 'hsr0' already exists in 'hsr' [ 1418.973248][ T2959] Cannot create hsr debugfs directory [ 1419.037127][ T2961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.103312][ T2961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.177013][ T2963] chnl_net:caif_netlink_parms(): no params data found [ 1419.202159][ T2961] team0: Port device team_slave_0 added [ 1419.217497][ T2961] team0: Port device team_slave_1 added [ 1419.312150][ T2961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.319891][ T2961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.347420][ T2961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.367605][ T2961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.375111][ T2961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.401345][ T2961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.425555][ T2966] chnl_net:caif_netlink_parms(): no params data found [ 1419.495829][T19528] Bluetooth: hci6: command tx timeout [ 1419.549583][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.557257][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.564579][ T2963] bridge_slave_0: entered allmulticast mode [ 1419.571722][ T2963] bridge_slave_0: entered promiscuous mode [ 1419.601764][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.609049][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.617526][ T2963] bridge_slave_1: entered allmulticast mode [ 1419.624927][ T2963] bridge_slave_1: entered promiscuous mode [ 1419.648185][ T2961] hsr_slave_0: entered promiscuous mode [ 1419.658243][ T2961] hsr_slave_1: entered promiscuous mode [ 1419.664621][ T2961] debugfs: 'hsr0' already exists in 'hsr' [ 1419.670394][ T2961] Cannot create hsr debugfs directory [ 1419.735644][T19528] Bluetooth: hci9: command tx timeout [ 1419.741575][T19528] Bluetooth: hci7: command tx timeout [ 1419.748213][ T312] Bluetooth: hci8: command tx timeout [ 1419.751567][ T2963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.772773][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.780528][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.788461][ T2966] bridge_slave_0: entered allmulticast mode [ 1419.797187][ T2966] bridge_slave_0: entered promiscuous mode [ 1419.823596][ T2963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.852121][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.860185][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.867696][ T2966] bridge_slave_1: entered allmulticast mode [ 1419.875311][ T2966] bridge_slave_1: entered promiscuous mode [ 1419.917229][ T2963] team0: Port device team_slave_0 added [ 1419.947694][ T2963] team0: Port device team_slave_1 added [ 1419.956742][ T2966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.969410][ T2966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.031913][ T2963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.039746][ T2963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.066834][ T2963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.103447][ T2963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.110753][ T2963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.143074][ T2963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.157187][ T2966] team0: Port device team_slave_0 added [ 1420.189525][ T2966] team0: Port device team_slave_1 added [ 1420.249719][ T2966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.256968][ T2966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.283589][ T2966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.302759][ T2966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.310621][ T2966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.337604][ T2966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.369307][ T2963] hsr_slave_0: entered promiscuous mode [ 1420.376224][ T2963] hsr_slave_1: entered promiscuous mode [ 1420.382398][ T2963] debugfs: 'hsr0' already exists in 'hsr' [ 1420.388516][ T2963] Cannot create hsr debugfs directory [ 1420.456006][T19528] Bluetooth: hci1: command tx timeout [ 1420.491680][ T2966] hsr_slave_0: entered promiscuous mode [ 1420.498960][ T2966] hsr_slave_1: entered promiscuous mode [ 1420.505979][ T2966] debugfs: 'hsr0' already exists in 'hsr' [ 1420.511699][ T2966] Cannot create hsr debugfs directory [ 1421.576135][T19528] Bluetooth: hci6: command tx timeout [ 1421.815271][T19528] Bluetooth: hci9: command tx timeout [ 1421.815299][ T2965] Bluetooth: hci8: command tx timeout [ 1421.826288][ T312] Bluetooth: hci7: command tx timeout [ 1422.535132][ T312] Bluetooth: hci1: command tx timeout [ 1423.101811][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1423.654844][ T312] Bluetooth: hci6: command tx timeout [ 1423.895110][ T2965] Bluetooth: hci7: command tx timeout [ 1423.895233][T19528] Bluetooth: hci8: command tx timeout [ 1423.901560][ T312] Bluetooth: hci9: command tx timeout [ 1424.615063][ T312] Bluetooth: hci1: command tx timeout [ 1425.735394][ T312] Bluetooth: hci6: command tx timeout [ 1425.975269][T19528] Bluetooth: hci9: command tx timeout [ 1425.975649][ T2965] Bluetooth: hci7: command tx timeout [ 1425.980833][ T312] Bluetooth: hci8: command tx timeout [ 1428.855296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1428.863326][ C1] lec:lec_tx_timeout: lec0 [ 1428.870068][ T2115] block nbd2: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 60 seconds [ 1428.881310][ T2115] block nbd2: Possible stuck request ffff8880274c0200: control (read@1024,1024B). Runtime 60 seconds [ 1428.892413][ T2115] block nbd2: Possible stuck request ffff8880274c0400: control (read@2048,1024B). Runtime 60 seconds [ 1428.904008][ T2115] block nbd2: Possible stuck request ffff8880274c0600: control (read@3072,1024B). Runtime 60 seconds [ 1429.835111][ T5193] udevd[5193]: worker [1109] /devices/virtual/block/nbd1 is taking a long time [ 1429.844169][ T5193] udevd[5193]: worker [1113] /devices/virtual/block/nbd2 is taking a long time [ 1433.335368][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1447.596877][T26016] lec:lec_start_xmit: lec0:No lecd attached [ 1452.854751][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 1452.862789][ C1] lec:lec_tx_timeout: lec0 [ 1458.946975][ T2115] block nbd2: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 90 seconds [ 1458.958245][ T2115] block nbd2: Possible stuck request ffff8880274c0200: control (read@1024,1024B). Runtime 90 seconds [ 1458.969301][ T2115] block nbd2: Possible stuck request ffff8880274c0400: control (read@2048,1024B). Runtime 90 seconds [ 1458.981709][ T2115] block nbd2: Possible stuck request ffff8880274c0600: control (read@3072,1024B). Runtime 90 seconds [ 1474.493103][ T1146] bond1 (unregistering): (slave vti0): Releasing backup interface [ 1474.501965][ T1146] vti0 (unregistering): left promiscuous mode [ 1474.556319][ T1146] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1474.910542][ T1146] team0: Port device bridge7 removed [ 1475.108800][ T1146] bond0 (unregistering): Released all slaves [ 1475.119454][ T1146] bond1 (unregistering): Released all slaves [ 1475.136532][ T1146] bond2 (unregistering): Released all slaves [ 1475.151649][ T1146] bond3 (unregistering): Released all slaves [ 1475.170454][ T1146] bond4 (unregistering): Released all slaves [ 1475.188971][ T1146] bond5 (unregistering): Released all slaves [ 1475.202439][ T1146] bond6 (unregistering): Released all slaves [ 1475.217658][ T1146] bond7 (unregistering): Released all slaves [ 1475.232747][ T1146] bond8 (unregistering): Released all slaves [ 1475.380671][ T1146] tipc: Disabling bearer [ 1475.396835][ T1146] tipc: Left network mode [ 1475.419689][ T1146] IPVS: stopping backup sync thread 23783 ... [ 1475.703307][ T1146] hsr_slave_0: left promiscuous mode [ 1475.710360][ T1146] hsr_slave_1: left promiscuous mode [ 1475.736989][ T1146] pimreg (unregistering): left allmulticast mode [ 1475.972871][ T1146] smc: removing net device team0 with user defined pnetid SYZ2 [ 1476.279603][ T1146] IPVS: stop unused estimator thread 0... [ 1476.346161][ T2965] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1476.354809][ T2965] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1476.363927][ T2965] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1476.372736][ T2965] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1476.383300][ T2965] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1476.417766][ T3003]  speed is unknown, defaulting to 1000 [ 1476.623887][ T3003] chnl_net:caif_netlink_parms(): no params data found [ 1476.688690][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.696457][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.703736][ T3003] bridge_slave_0: entered allmulticast mode [ 1476.711599][ T3003] bridge_slave_0: entered promiscuous mode [ 1476.720577][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.728578][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.736705][ T3003] bridge_slave_1: entered allmulticast mode [ 1476.743805][ T3003] bridge_slave_1: entered promiscuous mode [ 1476.770942][ T3003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.783652][ T3003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.811675][ T3003] team0: Port device team_slave_0 added [ 1476.820576][ T3003] team0: Port device team_slave_1 added [ 1476.843401][ T3003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.851336][ T3003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.879122][ T3003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.891518][ T3003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.898604][ T3003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.925443][ T3003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.965805][ T3003] hsr_slave_0: entered promiscuous mode [ 1476.972332][ T3003] hsr_slave_1: entered promiscuous mode [ 1476.978698][ T3003] debugfs: 'hsr0' already exists in 'hsr' [ 1476.984447][ T3003] Cannot create hsr debugfs directory [ 1477.459778][ T312] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1477.470678][ T1030] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1477.480927][ T312] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1477.481610][ T1030] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1477.499771][ T1030] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1477.508916][ T312] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1477.515431][ T1030] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1477.520108][ T312] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1477.524281][ T1030] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1477.531493][ T312] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1477.597823][ T3013]  speed is unknown, defaulting to 1000 [ 1477.606540][ T3015]  speed is unknown, defaulting to 1000 [ 1477.951670][ T312] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1477.963153][ T312] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1477.972710][ T312] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1477.987074][ T312] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1477.996402][ T312] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1478.152818][ T312] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1478.160283][ T3013] chnl_net:caif_netlink_parms(): no params data found [ 1478.172196][ T312] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1478.181774][ T312] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1478.192646][ T312] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1478.206523][ T312] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1478.246192][ T3020]  speed is unknown, defaulting to 1000 [ 1478.363931][ T3024]  speed is unknown, defaulting to 1000 [ 1478.377997][ T3015] chnl_net:caif_netlink_parms(): no params data found [ 1478.402316][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.410866][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.419724][ T3013] bridge_slave_0: entered allmulticast mode [ 1478.429192][ T3013] bridge_slave_0: entered promiscuous mode [ 1478.455760][ T312] Bluetooth: hci10: command tx timeout [ 1478.473394][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.481433][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.491020][ T3013] bridge_slave_1: entered allmulticast mode [ 1478.501506][ T3013] bridge_slave_1: entered promiscuous mode [ 1478.600753][ T3013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.652906][ T3013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.686457][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.693603][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.703307][ T3015] bridge_slave_0: entered allmulticast mode [ 1478.712803][ T3015] bridge_slave_0: entered promiscuous mode [ 1478.758912][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.768460][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.776984][ T3015] bridge_slave_1: entered allmulticast mode [ 1478.784200][ T3015] bridge_slave_1: entered promiscuous mode [ 1478.793176][ T3013] team0: Port device team_slave_0 added [ 1478.825734][ T3013] team0: Port device team_slave_1 added [ 1478.872235][ T3015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.886986][ T3015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.912650][ T3013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.920543][ T3013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.948099][ T3013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.990340][ T3013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.997775][ T3013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.025148][ T3013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.038586][ T3015] team0: Port device team_slave_0 added [ 1479.069448][ T3015] team0: Port device team_slave_1 added [ 1479.122649][ T3015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.129983][ T3015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.156907][ T3015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.169589][ T3015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.178931][ T3015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.206073][ T3015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.264171][ T3013] hsr_slave_0: entered promiscuous mode [ 1479.271942][ T3013] hsr_slave_1: entered promiscuous mode [ 1479.279706][ T3013] debugfs: 'hsr0' already exists in 'hsr' [ 1479.285742][ T3013] Cannot create hsr debugfs directory [ 1479.433648][ T3015] hsr_slave_0: entered promiscuous mode [ 1479.441492][ T3015] hsr_slave_1: entered promiscuous mode [ 1479.449578][ T3015] debugfs: 'hsr0' already exists in 'hsr' [ 1479.457023][ T3015] Cannot create hsr debugfs directory [ 1479.462926][ T3020] chnl_net:caif_netlink_parms(): no params data found [ 1479.585357][ T2965] Bluetooth: hci12: command tx timeout [ 1479.592124][ T312] Bluetooth: hci11: command tx timeout [ 1480.065544][ T312] Bluetooth: hci13: command tx timeout [ 1480.198092][T17678] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1480.295371][ T312] Bluetooth: hci14: command tx timeout [ 1480.534798][ T312] Bluetooth: hci10: command tx timeout [ 1480.709182][T17678] bond0 (unregistering): Released all slaves [ 1480.719386][T17678] bond1 (unregistering): Released all slaves [ 1480.732255][T17678] bond2 (unregistering): Released all slaves [ 1480.746316][T17678] bond3 (unregistering): Released all slaves [ 1480.760448][T17678] bond4 (unregistering): Released all slaves [ 1480.799570][ T3024] chnl_net:caif_netlink_parms(): no params data found [ 1481.002350][T17678] IPVS: stopping backup sync thread 21761 ... [ 1481.216405][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.223586][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.231829][ T3024] bridge_slave_0: entered allmulticast mode [ 1481.240100][ T3024] bridge_slave_0: entered promiscuous mode [ 1481.248590][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.258542][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.267580][ T3024] bridge_slave_1: entered allmulticast mode [ 1481.275798][ T3024] bridge_slave_1: entered promiscuous mode [ 1481.284456][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.291934][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.300385][ T3020] bridge_slave_0: entered allmulticast mode [ 1481.307726][ T3020] bridge_slave_0: entered promiscuous mode [ 1481.347466][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.355699][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.363417][ T3020] bridge_slave_1: entered allmulticast mode [ 1481.373538][ T3020] bridge_slave_1: entered promiscuous mode [ 1481.428545][ T3024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.478111][ T3024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.511005][ T3020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.558226][ T3020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.640869][ T3024] team0: Port device team_slave_0 added [ 1481.655650][ T312] Bluetooth: hci11: command tx timeout [ 1481.661236][ T2965] Bluetooth: hci12: command tx timeout [ 1481.671907][ T3024] team0: Port device team_slave_1 added [ 1481.733067][ T3020] team0: Port device team_slave_0 added [ 1481.761029][T17678] hsr_slave_0: left promiscuous mode [ 1481.769754][T17678] hsr_slave_1: left promiscuous mode [ 1481.779505][T17678] veth1_macvtap: left promiscuous mode [ 1481.785459][T17678] veth0_macvtap: left promiscuous mode [ 1481.790973][T17678] veth1_vlan: left promiscuous mode [ 1481.797416][T17678] veth0_vlan: left promiscuous mode [ 1482.135616][ T2965] Bluetooth: hci13: command tx timeout [ 1482.191661][ T3020] team0: Port device team_slave_1 added [ 1482.212982][ T3024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.221235][ T3024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.253539][ T3024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.266565][ T3024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.273508][ T3024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.301577][ T3024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.361706][ T3020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.368880][ T3020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.396896][ T2965] Bluetooth: hci14: command tx timeout [ 1482.425301][ T3020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.451725][ T3020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.459474][ T3020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.487577][ T3020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.516390][ T3024] hsr_slave_0: entered promiscuous mode [ 1482.523105][ T3024] hsr_slave_1: entered promiscuous mode [ 1482.607124][ T3020] hsr_slave_0: entered promiscuous mode [ 1482.613807][ T3020] hsr_slave_1: entered promiscuous mode [ 1482.619620][ T2965] Bluetooth: hci10: command tx timeout [ 1482.626590][ T3020] debugfs: 'hsr0' already exists in 'hsr' [ 1482.632313][ T3020] Cannot create hsr debugfs directory [ 1483.735090][ T312] Bluetooth: hci11: command tx timeout [ 1483.738526][ T2965] Bluetooth: hci12: command tx timeout [ 1484.215453][ T2965] Bluetooth: hci13: command tx timeout [ 1484.455269][ T2965] Bluetooth: hci14: command tx timeout [ 1484.540503][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1484.695447][ T2965] Bluetooth: hci10: command tx timeout [ 1485.815738][ T2965] Bluetooth: hci11: command tx timeout [ 1485.818076][ T312] Bluetooth: hci12: command tx timeout [ 1486.294875][ T312] Bluetooth: hci13: command tx timeout [ 1486.534734][ T312] Bluetooth: hci14: command tx timeout [ 1489.015475][ T2115] block nbd2: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 120 seconds [ 1489.028269][ T2115] block nbd2: Possible stuck request ffff8880274c0200: control (read@1024,1024B). Runtime 120 seconds [ 1489.039712][ T2115] block nbd2: Possible stuck request ffff8880274c0400: control (read@2048,1024B). Runtime 120 seconds [ 1489.050757][ T2115] block nbd2: Possible stuck request ffff8880274c0600: control (read@3072,1024B). Runtime 120 seconds [ 1489.849637][ T144] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1489.894675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 1489.902705][ C1] lec:lec_tx_timeout: lec0 [ 1489.910090][ T144] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1490.318926][ T144] bond0 (unregistering): Released all slaves [ 1490.328951][ T144] bond1 (unregistering): Released all slaves [ 1490.341886][ T144] bond2 (unregistering): Released all slaves [ 1490.354402][ T144] bond3 (unregistering): Released all slaves [ 1490.370868][ T144] bond4 (unregistering): Released all slaves [ 1490.387514][ T144] bond5 (unregistering): Released all slaves [ 1490.400184][ T144] bond6 (unregistering): left allmulticast mode [ 1490.407144][ T144] bond6 (unregistering): left promiscuous mode [ 1490.416873][ T144] team0: Port device macvlan2 removed [ 1490.426236][ T144] bond6 (unregistering): Released all slaves [ 1490.560748][ T144] : left promiscuous mode [ 1491.031725][ T144] hsr_slave_0: left promiscuous mode [ 1491.474218][ T144] IPVS: stop unused estimator thread 0... [ 1494.968263][T17674] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 1495.408860][T17674] bond0 (unregistering): Released all slaves [ 1495.420436][T17674] bond1 (unregistering): Released all slaves [ 1495.433013][T17674] bond2 (unregistering): Released all slaves [ 1495.446758][T17674] bond3 (unregistering): Released all slaves [ 1495.460781][T17674] bond4 (unregistering): Released all slaves [ 1495.481529][T17674] bond5 (unregistering): Released all slaves [ 1495.496491][T17674] bond6 (unregistering): Released all slaves [ 1495.513246][T17674] bond7 (unregistering): Released all slaves [ 1495.527313][T17674] bond8 (unregistering): Released all slaves [ 1495.687563][T17674] tipc: Disabling bearer [ 1495.696675][T17674] tipc: Left network mode [ 1496.254254][T17674] hsr_slave_0: left promiscuous mode [ 1496.265218][T17674] hsr_slave_1: left promiscuous mode [ 1496.273345][T17674] veth1_macvtap: left promiscuous mode [ 1496.279120][T17674] veth1_vlan: left promiscuous mode [ 1496.284348][T17674] veth0_vlan: left promiscuous mode [ 1496.556693][T17674] smc: removing net device team0 with user defined pnetid SYZ2 [ 1496.795303][T17674] IPVS: stop unused estimator thread 0... [ 1505.025370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1510.925609][T26016] lec:lec_start_xmit: lec0:No lecd attached [ 1515.935030][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1515.943035][ C1] lec:lec_tx_timeout: lec0 [ 1519.097285][ T2115] block nbd2: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 150 seconds [ 1519.109683][ T2115] block nbd2: Possible stuck request ffff8880274c0200: control (read@1024,1024B). Runtime 150 seconds [ 1519.121134][ T2115] block nbd2: Possible stuck request ffff8880274c0400: control (read@2048,1024B). Runtime 150 seconds [ 1519.132763][ T2115] block nbd2: Possible stuck request ffff8880274c0600: control (read@3072,1024B). Runtime 150 seconds [ 1536.875760][ T2965] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1536.884191][ T2965] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1536.895612][ T2965] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1536.903583][ T2965] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1536.912649][ T2965] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1536.946114][ T3057]  speed is unknown, defaulting to 1000 [ 1537.147730][ T3057] chnl_net:caif_netlink_parms(): no params data found [ 1537.213352][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.221207][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.229204][ T3057] bridge_slave_0: entered allmulticast mode [ 1537.238080][ T3057] bridge_slave_0: entered promiscuous mode [ 1537.246904][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.254022][ T3057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.262404][ T3057] bridge_slave_1: entered allmulticast mode [ 1537.270657][ T3057] bridge_slave_1: entered promiscuous mode [ 1537.300449][ T3057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.316839][ T3057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.397153][ T3057] team0: Port device team_slave_0 added [ 1537.417223][ T3057] team0: Port device team_slave_1 added [ 1537.477481][ T2965] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1537.484125][ T3057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.497383][ T3057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.501183][ T2965] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1537.525981][ T3057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.547398][ T2965] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1537.547556][ T3057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.562758][ T3057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.574020][T19528] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1537.594455][ T3057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.615599][T19528] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1537.622951][T19528] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1537.633027][T19528] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1537.640447][T19528] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1537.649328][T19528] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1537.658123][T19528] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1537.702139][ T3057] hsr_slave_0: entered promiscuous mode [ 1537.709297][ T3057] hsr_slave_1: entered promiscuous mode [ 1537.716469][ T3057] debugfs: 'hsr0' already exists in 'hsr' [ 1537.722238][ T3057] Cannot create hsr debugfs directory [ 1537.786481][ T3069]  speed is unknown, defaulting to 1000 [ 1537.813709][ T3067]  speed is unknown, defaulting to 1000 [ 1537.991260][ T312] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1538.001732][ T312] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1538.011213][ T312] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1538.021332][ T312] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1538.031224][ T312] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1538.112654][ T3072]  speed is unknown, defaulting to 1000 [ 1538.388010][ T3069] chnl_net:caif_netlink_parms(): no params data found [ 1538.607046][ T3069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.614232][ T3069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.622612][ T3069] bridge_slave_0: entered allmulticast mode [ 1538.629994][ T3069] bridge_slave_0: entered promiscuous mode [ 1538.641127][ T3069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.648813][ T3069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.656516][ T3069] bridge_slave_1: entered allmulticast mode [ 1538.663726][ T3069] bridge_slave_1: entered promiscuous mode [ 1538.736072][ T3069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.752876][ T3069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.833773][ T3069] team0: Port device team_slave_0 added [ 1538.853046][ T3069] team0: Port device team_slave_1 added [ 1538.930516][ T3069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.941761][ T312] Bluetooth: hci15: command tx timeout [ 1538.952015][ T3069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.978948][ T3069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.995695][ T1030] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1539.004372][ T1030] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1539.013889][ T3067] chnl_net:caif_netlink_parms(): no params data found [ 1539.023483][ T1030] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1539.034304][ T1030] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1539.034756][ T3069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.049654][ T3069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.050356][ T1030] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1539.076563][ T3069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.198635][ T3072] chnl_net:caif_netlink_parms(): no params data found [ 1539.217205][ T3069] hsr_slave_0: entered promiscuous mode [ 1539.223694][ T3069] hsr_slave_1: entered promiscuous mode [ 1539.230617][ T3069] debugfs: 'hsr0' already exists in 'hsr' [ 1539.236879][ T3069] Cannot create hsr debugfs directory [ 1539.305923][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.313110][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.313568][ T3085]  speed is unknown, defaulting to 1000 [ 1539.321393][ T3067] bridge_slave_0: entered allmulticast mode [ 1539.323281][ T3067] bridge_slave_0: entered promiscuous mode [ 1539.368440][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.376838][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.384422][ T3067] bridge_slave_1: entered allmulticast mode [ 1539.395324][ T3067] bridge_slave_1: entered promiscuous mode [ 1539.510869][ T3067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.553122][ T3067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.590261][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.597782][ T3072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.606823][ T3072] bridge_slave_0: entered allmulticast mode [ 1539.613939][ T3072] bridge_slave_0: entered promiscuous mode [ 1539.647483][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.656976][ T3072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.664348][ T3072] bridge_slave_1: entered allmulticast mode [ 1539.672305][ T3072] bridge_slave_1: entered promiscuous mode [ 1539.696494][ T3067] team0: Port device team_slave_0 added [ 1539.735433][ T312] Bluetooth: hci17: command tx timeout [ 1539.742086][ T312] Bluetooth: hci16: command tx timeout [ 1539.748081][ T3067] team0: Port device team_slave_1 added [ 1539.771184][ T3072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.812170][ T3072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.839276][ T3067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.846854][ T3067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.873622][ T3067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.891301][ T3067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.899299][ T3067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.925933][ T3067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.989749][ T3072] team0: Port device team_slave_0 added [ 1540.029361][ T3072] team0: Port device team_slave_1 added [ 1540.050468][ T3067] hsr_slave_0: entered promiscuous mode [ 1540.058727][ T3067] hsr_slave_1: entered promiscuous mode [ 1540.066865][ T3067] debugfs: 'hsr0' already exists in 'hsr' [ 1540.072623][ T3067] Cannot create hsr debugfs directory [ 1540.118447][ T3072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.126094][ T3072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.153974][ T3072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.155486][ T312] Bluetooth: hci18: command tx timeout [ 1540.189711][ T3072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.197256][ T3072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.227233][ T3072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.302314][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 1540.424042][ T3072] hsr_slave_0: entered promiscuous mode [ 1540.431314][ T3072] hsr_slave_1: entered promiscuous mode [ 1540.438707][ T3072] debugfs: 'hsr0' already exists in 'hsr' [ 1540.446844][ T3072] Cannot create hsr debugfs directory [ 1540.576643][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.583781][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.591961][ T3085] bridge_slave_0: entered allmulticast mode [ 1540.599669][ T3085] bridge_slave_0: entered promiscuous mode [ 1540.628548][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.636076][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.643374][ T3085] bridge_slave_1: entered allmulticast mode [ 1540.651963][ T3085] bridge_slave_1: entered promiscuous mode [ 1540.712016][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.738467][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.813394][ T3085] team0: Port device team_slave_0 added [ 1540.830566][ T3085] team0: Port device team_slave_1 added [ 1540.912100][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.919665][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.946971][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.960346][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.967798][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.995531][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.014997][ T3102] Bluetooth: hci15: command tx timeout [ 1541.051216][ T3085] hsr_slave_0: entered promiscuous mode [ 1541.058836][ T3085] hsr_slave_1: entered promiscuous mode [ 1541.066310][ T3085] debugfs: 'hsr0' already exists in 'hsr' [ 1541.072034][ T3085] Cannot create hsr debugfs directory [ 1541.176314][ T3102] Bluetooth: hci19: command tx timeout [ 1541.818154][ T3102] Bluetooth: hci16: command tx timeout [ 1541.818654][ T3101] Bluetooth: hci17: command tx timeout [ 1542.215145][ T3101] Bluetooth: hci18: command tx timeout [ 1542.940524][ T3103] Bluetooth: hci1: command 0x0406 tx timeout [ 1542.945292][ T3101] Bluetooth: hci7: command 0x0406 tx timeout [ 1542.949972][ T3103] Bluetooth: hci9: command 0x0406 tx timeout [ 1542.952710][ T3102] Bluetooth: hci8: command 0x0406 tx timeout [ 1542.959264][ T3103] Bluetooth: hci6: command 0x0406 tx timeout [ 1543.095924][ T312] Bluetooth: hci15: command tx timeout [ 1543.254759][ T312] Bluetooth: hci19: command tx timeout [ 1543.895916][ T312] Bluetooth: hci17: command tx timeout [ 1543.901898][ T312] Bluetooth: hci16: command tx timeout [ 1544.305457][ T312] Bluetooth: hci18: command tx timeout [ 1545.175302][ T312] Bluetooth: hci15: command tx timeout [ 1545.335572][ T312] Bluetooth: hci19: command tx timeout [ 1545.981667][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1545.983922][ T312] Bluetooth: hci16: command tx timeout [ 1545.988284][T19906] Bluetooth: hci17: command tx timeout [ 1546.374725][T19906] Bluetooth: hci18: command tx timeout [ 1547.415446][T19906] Bluetooth: hci19: command tx timeout [ 1549.008648][ T5193] udevd[5193]: worker [1109] /devices/virtual/block/nbd1 timeout; kill it [ 1549.017700][ T5193] udevd[5193]: seq 48675 '/devices/virtual/block/nbd1' killed [ 1549.025806][ T5193] udevd[5193]: worker [1113] /devices/virtual/block/nbd2 timeout; kill it [ 1549.034384][ T5193] udevd[5193]: seq 48679 '/devices/virtual/block/nbd2' killed [ 1549.178864][ T2115] block nbd2: Possible stuck request ffff8880274c0000: control (read@0,1024B). Runtime 180 seconds [ 1549.189652][ T2115] block nbd2: Possible stuck request ffff8880274c0200: control (read@1024,1024B). Runtime 180 seconds [ 1549.200845][ T2115] block nbd2: Possible stuck request ffff8880274c0400: control (read@2048,1024B). Runtime 180 seconds [ 1549.212462][ T2115] block nbd2: Possible stuck request ffff8880274c0600: control (read@3072,1024B). Runtime 180 seconds [ 1551.004638][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1551.012683][ C1] lec:lec_tx_timeout: lec0 [ 1562.619117][ T31] INFO: task syz.1.22740:2919 blocked for more than 143 seconds. [ 1562.630218][ T31] Not tainted syzkaller #0 [ 1562.636153][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1562.645803][ T31] task:syz.1.22740 state:D stack:26240 pid:2919 tgid:2918 ppid:30242 task_flags:0x480140 flags:0x00080002 [ 1562.658168][ T31] Call Trace: [ 1562.661516][ T31] [ 1562.664780][ T31] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1562.669380][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1562.676391][ T31] ? __pfx___schedule+0x10/0x10 [ 1562.681306][ T31] ? schedule+0x90/0x360 [ 1562.686681][ T31] schedule+0x164/0x360 [ 1562.690890][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1562.715676][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1562.721810][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1562.736571][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1562.742876][ T31] nbd_set_size+0x454/0x680 [ 1562.757472][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1562.762591][ T31] ? nla_memcpy+0x5b/0xc0 [ 1562.768471][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 1562.773841][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1562.780986][ T31] ? rcu_is_watching+0x15/0xb0 [ 1562.787424][ T31] ? trace_kmalloc+0x2a/0x110 [ 1562.792145][ T31] ? __nla_parse+0x40/0x60 [ 1562.797345][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1562.803914][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1562.810227][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1562.816951][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1562.822002][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1562.827389][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1562.832428][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1562.838695][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1562.843652][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1562.849019][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1562.854057][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1562.860548][ T31] ? down_read+0x272/0x2e0 [ 1562.865738][ T31] ? genl_rcv+0xd/0x40 [ 1562.870324][ T31] genl_rcv+0x28/0x40 [ 1562.874336][ T31] netlink_unicast+0x80f/0x9b0 [ 1562.879754][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1562.885852][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1562.890803][ T31] ? skb_put+0x11b/0x210 [ 1562.895676][ T31] netlink_sendmsg+0x813/0xb40 [ 1562.900475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1562.906281][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1562.911260][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1562.917325][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1562.922108][ T31] ? futex_unqueue+0x211/0x240 [ 1562.927359][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1562.932668][ T31] ? import_iovec+0x73/0xa0 [ 1562.938192][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1562.942919][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1562.949000][ T31] ? futex_wait+0x29a/0x380 [ 1562.953534][ T31] ? __fget_files+0x2a/0x420 [ 1562.958787][ T31] ? __fget_files+0x3a0/0x420 [ 1562.963481][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1562.968999][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1562.975977][ T31] ? rcu_is_watching+0x15/0xb0 [ 1562.980904][ T31] do_syscall_64+0x14d/0xf80 [ 1562.986135][ T31] ? trace_irq_disable+0x3b/0x150 [ 1562.991176][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.997783][ T31] ? clear_bhb_loop+0x40/0x90 [ 1563.002470][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.009277][ T31] RIP: 0033:0x7f135eb9c799 [ 1563.013692][ T31] RSP: 002b:00007f135f982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1563.022812][ T31] RAX: ffffffffffffffda RBX: 00007f135ee15fa0 RCX: 00007f135eb9c799 [ 1563.031342][ T31] RDX: 0000000020000004 RSI: 0000200000000280 RDI: 0000000000000004 [ 1563.040001][ T31] RBP: 00007f135ec32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1563.048298][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.056573][ T31] R13: 00007f135ee16038 R14: 00007f135ee15fa0 R15: 00007ffff77d2ef8 [ 1563.065029][ T31] [ 1563.068060][ T31] INFO: task syz.4.22744:2926 blocked for more than 143 seconds. [ 1563.076736][ T31] Not tainted syzkaller #0 [ 1563.081700][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1563.090921][ T31] task:syz.4.22744 state:D stack:27880 pid:2926 tgid:2924 ppid:29533 task_flags:0x400040 flags:0x00080002 [ 1563.103975][ T31] Call Trace: [ 1563.107920][ T31] [ 1563.110872][ T31] __schedule+0x1585/0x5340 [ 1563.115866][ T31] ? __pfx___schedule+0x10/0x10 [ 1563.120750][ T31] ? schedule+0x90/0x360 [ 1563.125944][ T31] schedule+0x164/0x360 [ 1563.130141][ T31] schedule_preempt_disabled+0x13/0x30 [ 1563.136176][ T31] __mutex_lock+0x7fe/0x1300 [ 1563.140814][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1563.146112][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1563.150816][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1563.156726][ T31] ? radix_tree_lookup+0x240/0x290 [ 1563.161849][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1563.166914][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1563.171993][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1563.178270][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1563.183069][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1563.188746][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1563.194048][ T31] ? down_read+0x272/0x2e0 [ 1563.199045][ T31] ? genl_rcv+0xd/0x40 [ 1563.203134][ T31] genl_rcv+0x28/0x40 [ 1563.207647][ T31] netlink_unicast+0x80f/0x9b0 [ 1563.212433][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1563.218447][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1563.223398][ T31] ? skb_put+0x11b/0x210 [ 1563.228267][ T31] netlink_sendmsg+0x813/0xb40 [ 1563.233076][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.238987][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1563.243954][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1563.250146][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.256469][ T31] __sys_sendto+0x672/0x710 [ 1563.261027][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1563.266877][ T31] ? exc_page_fault+0x6a/0xc0 [ 1563.271670][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1563.277990][ T31] __x64_sys_sendto+0xde/0x100 [ 1563.282783][ T31] do_syscall_64+0x14d/0xf80 [ 1563.288001][ T31] ? trace_irq_disable+0x3b/0x150 [ 1563.293078][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.299683][ T31] ? clear_bhb_loop+0x40/0x90 [ 1563.304379][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.311006][ T31] RIP: 0033:0x7ff280f5cfce [ 1563.316103][ T31] RSP: 002b:00007ff281e57e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1563.325015][ T31] RAX: ffffffffffffffda RBX: 00007ff281e596c0 RCX: 00007ff280f5cfce [ 1563.332986][ T31] RDX: 0000000000000020 RSI: 00007ff281e58000 RDI: 0000000000000005 [ 1563.342143][ T31] RBP: 0000000000000000 R08: 00007ff281e57f04 R09: 000000000000000c [ 1563.350699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1563.358947][ T31] R13: 00007ff281e57f58 R14: 00007ff281e58000 R15: 0000000000000000 [ 1563.367603][ T31] [ 1563.370647][ T31] INFO: task syz.0.22745:2932 blocked for more than 144 seconds. [ 1563.380384][ T31] Not tainted syzkaller #0 [ 1563.386082][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1563.395293][ T31] task:syz.0.22745 state:D stack:26120 pid:2932 tgid:2931 ppid:29917 task_flags:0x400140 flags:0x00080002 [ 1563.408352][ T31] Call Trace: [ 1563.411639][ T31] [ 1563.415928][ T31] __schedule+0x1585/0x5340 [ 1563.420648][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1563.426197][ T31] ? __pfx___schedule+0x10/0x10 [ 1563.431061][ T31] ? schedule+0x90/0x360 [ 1563.436011][ T31] schedule+0x164/0x360 [ 1563.440199][ T31] schedule_preempt_disabled+0x13/0x30 [ 1563.446082][ T31] __mutex_lock+0x7fe/0x1300 [ 1563.450710][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1563.456601][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1563.461380][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1563.466651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1563.471692][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1563.477367][ T31] ? radix_tree_lookup+0x240/0x290 [ 1563.482841][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1563.488225][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1563.493297][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1563.499059][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1563.503863][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1563.509418][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1563.515376][ T31] ? down_read+0x272/0x2e0 [ 1563.519818][ T31] ? genl_rcv+0xd/0x40 [ 1563.523883][ T31] genl_rcv+0x28/0x40 [ 1563.528482][ T31] netlink_unicast+0x80f/0x9b0 [ 1563.533256][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1563.539116][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1563.544054][ T31] ? skb_put+0x11b/0x210 [ 1563.548991][ T31] netlink_sendmsg+0x813/0xb40 [ 1563.553766][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.559599][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1563.565071][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1563.570353][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.576325][ T31] __sys_sendto+0x672/0x710 [ 1563.580834][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1563.587080][ T31] ? exc_page_fault+0x6a/0xc0 [ 1563.591794][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1563.597635][ T31] __x64_sys_sendto+0xde/0x100 [ 1563.602409][ T31] do_syscall_64+0x14d/0xf80 [ 1563.607751][ T31] ? trace_irq_disable+0x3b/0x150 [ 1563.612778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.619421][ T31] ? clear_bhb_loop+0x40/0x90 [ 1563.624102][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.630211][ T31] RIP: 0033:0x7f8982f5cfce [ 1563.634914][ T31] RSP: 002b:00007f8983ef8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1563.643317][ T31] RAX: ffffffffffffffda RBX: 00007f8983efa6c0 RCX: 00007f8982f5cfce [ 1563.651386][ T31] RDX: 0000000000000028 RSI: 00007f8983ef9000 RDI: 0000000000000006 [ 1563.663776][ T31] RBP: 0000000000000000 R08: 00007f8983ef8f04 R09: 000000000000000c [ 1563.672432][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1563.680928][ T31] R13: 00007f8983ef8f58 R14: 00007f8983ef9000 R15: 0000000000000000 [ 1563.689693][ T31] [ 1563.692737][ T31] INFO: task syz.3.22746:2935 blocked for more than 144 seconds. [ 1563.702630][ T31] Not tainted syzkaller #0 [ 1563.708289][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1563.717315][ T31] task:syz.3.22746 state:D stack:27880 pid:2935 tgid:2934 ppid:30723 task_flags:0x400040 flags:0x00080002 [ 1563.730145][ T31] Call Trace: [ 1563.733477][ T31] [ 1563.737333][ T31] __schedule+0x1585/0x5340 [ 1563.741915][ T31] ? __pfx___schedule+0x10/0x10 [ 1563.747468][ T31] ? schedule+0x90/0x360 [ 1563.751750][ T31] schedule+0x164/0x360 [ 1563.756617][ T31] schedule_preempt_disabled+0x13/0x30 [ 1563.762082][ T31] __mutex_lock+0x7fe/0x1300 [ 1563.767209][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1563.771982][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1563.777281][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1563.782320][ T31] ? radix_tree_lookup+0x240/0x290 [ 1563.788079][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1563.793019][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1563.798600][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1563.803550][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1563.808785][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1563.813816][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1563.819846][ T31] ? down_read+0x272/0x2e0 [ 1563.824267][ T31] ? genl_rcv+0xd/0x40 [ 1563.828822][ T31] genl_rcv+0x28/0x40 [ 1563.832820][ T31] netlink_unicast+0x80f/0x9b0 [ 1563.838121][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1563.843413][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1563.849024][ T31] ? skb_put+0x11b/0x210 [ 1563.853275][ T31] netlink_sendmsg+0x813/0xb40 [ 1563.858736][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.864070][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1563.869549][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1563.875454][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.880743][ T31] __sys_sendto+0x672/0x710 [ 1563.885822][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1563.891484][ T31] ? exc_page_fault+0x6a/0xc0 [ 1563.897117][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1563.902441][ T31] __x64_sys_sendto+0xde/0x100 [ 1563.908151][ T31] do_syscall_64+0x14d/0xf80 [ 1563.912781][ T31] ? trace_irq_disable+0x3b/0x150 [ 1563.918096][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.924186][ T31] ? clear_bhb_loop+0x40/0x90 [ 1563.929099][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.935251][ T31] RIP: 0033:0x7fccbcb5cfce [ 1563.939669][ T31] RSP: 002b:00007fccbdacee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1563.948605][ T31] RAX: ffffffffffffffda RBX: 00007fccbdad06c0 RCX: 00007fccbcb5cfce [ 1563.957134][ T31] RDX: 0000000000000020 RSI: 00007fccbdacf000 RDI: 0000000000000003 [ 1563.965745][ T31] RBP: 0000000000000000 R08: 00007fccbdacef04 R09: 000000000000000c [ 1563.973713][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1563.983369][ T31] R13: 00007fccbdacef58 R14: 00007fccbdacf000 R15: 0000000000000000 [ 1563.992153][ T31] [ 1563.996297][ T31] INFO: task syz.3.22746:2939 blocked for more than 144 seconds. [ 1564.004025][ T31] Not tainted syzkaller #0 [ 1564.009531][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1564.018780][ T31] task:syz.3.22746 state:D stack:27880 pid:2939 tgid:2934 ppid:30723 task_flags:0x400040 flags:0x00080002 [ 1564.031300][ T31] Call Trace: [ 1564.035421][ T31] [ 1564.038367][ T31] __schedule+0x1585/0x5340 [ 1564.042887][ T31] ? __pfx___schedule+0x10/0x10 [ 1564.048245][ T31] ? schedule+0x90/0x360 [ 1564.052684][ T31] schedule+0x164/0x360 [ 1564.058046][ T31] schedule_preempt_disabled+0x13/0x30 [ 1564.063550][ T31] __mutex_lock+0x7fe/0x1300 [ 1564.068650][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1564.073433][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1564.078779][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1564.083821][ T31] ? radix_tree_lookup+0x240/0x290 [ 1564.089552][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1564.094066][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1564.100024][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.105666][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1564.110493][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1564.116429][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1564.121761][ T31] ? down_read+0x272/0x2e0 [ 1564.126710][ T31] ? genl_rcv+0xd/0x40 [ 1564.130791][ T31] genl_rcv+0x28/0x40 [ 1564.135542][ T31] netlink_unicast+0x80f/0x9b0 [ 1564.140345][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1564.146344][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1564.151292][ T31] ? skb_put+0x11b/0x210 [ 1564.156106][ T31] netlink_sendmsg+0x813/0xb40 [ 1564.160880][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.166762][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1564.171721][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1564.177702][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.183024][ T31] __sys_sendto+0x672/0x710 [ 1564.188119][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1564.193163][ T31] ? fd_install+0x94/0x3d0 [ 1564.198614][ T31] ? fd_install+0x306/0x3d0 [ 1564.203193][ T31] __x64_sys_sendto+0xde/0x100 [ 1564.208479][ T31] do_syscall_64+0x14d/0xf80 [ 1564.213107][ T31] ? trace_irq_disable+0x3b/0x150 [ 1564.218586][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.224783][ T31] ? clear_bhb_loop+0x40/0x90 [ 1564.229485][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.236066][ T31] RIP: 0033:0x7fccbcb5cfce [ 1564.240478][ T31] RSP: 002b:00007fccbdaade88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1564.249524][ T31] RAX: ffffffffffffffda RBX: 00007fccbdaaf6c0 RCX: 00007fccbcb5cfce [ 1564.258063][ T31] RDX: 0000000000000020 RSI: 00007fccbdaae000 RDI: 0000000000000005 [ 1564.266607][ T31] RBP: 0000000000000000 R08: 00007fccbdaadf04 R09: 000000000000000c [ 1564.275246][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1564.283233][ T31] R13: 00007fccbdaadf58 R14: 00007fccbdaae000 R15: 0000000000000000 [ 1564.291732][ T31] [ 1564.295710][ T31] INFO: task syz.3.22746:2941 blocked for more than 145 seconds. [ 1564.303793][ T31] Not tainted syzkaller #0 [ 1564.309316][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1564.318596][ T31] task:syz.3.22746 state:D stack:27880 pid:2941 tgid:2934 ppid:30723 task_flags:0x400040 flags:0x00080002 [ 1564.331019][ T31] Call Trace: [ 1564.334299][ T31] [ 1564.337804][ T31] __schedule+0x1585/0x5340 [ 1564.342333][ T31] ? __pfx___schedule+0x10/0x10 [ 1564.347701][ T31] ? schedule+0x90/0x360 [ 1564.352009][ T31] schedule+0x164/0x360 [ 1564.356876][ T31] schedule_preempt_disabled+0x13/0x30 [ 1564.362348][ T31] __mutex_lock+0x7fe/0x1300 [ 1564.367763][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1564.372544][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1564.378222][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1564.383281][ T31] ? radix_tree_lookup+0x240/0x290 [ 1564.389106][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1564.393627][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1564.399272][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.405032][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1564.409956][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1564.415706][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1564.421149][ T31] ? down_read+0x272/0x2e0 [ 1564.425657][ T31] ? genl_rcv+0xd/0x40 [ 1564.429772][ T31] genl_rcv+0x28/0x40 [ 1564.433749][ T31] netlink_unicast+0x80f/0x9b0 [ 1564.438864][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1564.444148][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1564.450551][ T31] ? skb_put+0x11b/0x210 [ 1564.459668][ T31] netlink_sendmsg+0x813/0xb40 [ 1564.464460][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.469907][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1564.476144][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1564.481464][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.486840][ T31] __sys_sendto+0x672/0x710 [ 1564.491389][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1564.496896][ T31] ? exc_page_fault+0x6a/0xc0 [ 1564.501609][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1564.507625][ T31] __x64_sys_sendto+0xde/0x100 [ 1564.512518][ T31] do_syscall_64+0x14d/0xf80 [ 1564.517499][ T31] ? trace_irq_disable+0x3b/0x150 [ 1564.522537][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.528705][ T31] ? clear_bhb_loop+0x40/0x90 [ 1564.533505][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.540166][ T31] RIP: 0033:0x7fccbcb5cfce [ 1564.544699][ T31] RSP: 002b:00007fccbda8ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1564.553132][ T31] RAX: ffffffffffffffda RBX: 00007fccbda8e6c0 RCX: 00007fccbcb5cfce [ 1564.561441][ T31] RDX: 0000000000000020 RSI: 00007fccbda8d000 RDI: 0000000000000006 [ 1564.570114][ T31] RBP: 0000000000000000 R08: 00007fccbda8cf04 R09: 000000000000000c [ 1564.578215][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1564.586308][ T31] R13: 00007fccbda8cf58 R14: 00007fccbda8d000 R15: 0000000000000000 [ 1564.595668][ T31] [ 1564.598716][ T31] INFO: task syz.3.22746:2942 blocked for more than 145 seconds. [ 1564.606886][ T31] Not tainted syzkaller #0 [ 1564.612185][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1564.621103][ T31] task:syz.3.22746 state:D stack:27880 pid:2942 tgid:2934 ppid:30723 task_flags:0x400040 flags:0x00080002 [ 1564.633603][ T31] Call Trace: [ 1564.637004][ T31] [ 1564.640036][ T31] __schedule+0x1585/0x5340 [ 1564.644637][ T31] ? __pfx___schedule+0x10/0x10 [ 1564.649507][ T31] ? schedule+0x90/0x360 [ 1564.653756][ T31] schedule+0x164/0x360 [ 1564.658381][ T31] schedule_preempt_disabled+0x13/0x30 [ 1564.663854][ T31] __mutex_lock+0x7fe/0x1300 [ 1564.668559][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1564.673345][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1564.678136][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1564.683298][ T31] ? radix_tree_lookup+0x240/0x290 [ 1564.689047][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1564.693572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1564.699254][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.704249][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1564.709902][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1564.715960][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1564.721309][ T31] ? down_read+0x272/0x2e0 [ 1564.725785][ T31] ? genl_rcv+0xd/0x40 [ 1564.729881][ T31] genl_rcv+0x28/0x40 [ 1564.733883][ T31] netlink_unicast+0x80f/0x9b0 [ 1564.738827][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1564.744138][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1564.749499][ T31] ? skb_put+0x11b/0x210 [ 1564.753760][ T31] netlink_sendmsg+0x813/0xb40 [ 1564.758646][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.763963][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1564.769060][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1564.774360][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.780549][ T31] __sys_sendto+0x672/0x710 [ 1564.785403][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1564.790468][ T31] ? exc_page_fault+0x6a/0xc0 [ 1564.795254][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1564.800558][ T31] __x64_sys_sendto+0xde/0x100 [ 1564.805776][ T31] do_syscall_64+0x14d/0xf80 [ 1564.810390][ T31] ? trace_irq_disable+0x3b/0x150 [ 1564.815762][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.821845][ T31] ? clear_bhb_loop+0x40/0x90 [ 1564.826602][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.832510][ T31] RIP: 0033:0x7fccbcb5cfce [ 1564.837545][ T31] RSP: 002b:00007fccbda6be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1564.846109][ T31] RAX: ffffffffffffffda RBX: 00007fccbda6d6c0 RCX: 00007fccbcb5cfce [ 1564.854091][ T31] RDX: 0000000000000020 RSI: 00007fccbda6c000 RDI: 0000000000000006 [ 1564.863114][ T31] RBP: 0000000000000000 R08: 00007fccbda6bf04 R09: 000000000000000c [ 1564.871469][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1564.879551][ T31] R13: 00007fccbda6bf58 R14: 00007fccbda6c000 R15: 0000000000000000 [ 1564.887682][ T31] [ 1564.890806][ T31] INFO: task syz.2.22747:2937 blocked for more than 145 seconds. [ 1564.899014][ T31] Not tainted syzkaller #0 [ 1564.903943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1564.912658][ T31] task:syz.2.22747 state:D stack:26304 pid:2937 tgid:2936 ppid:28751 task_flags:0x400140 flags:0x00080002 [ 1564.925570][ T31] Call Trace: [ 1564.928864][ T31] [ 1564.931787][ T31] __schedule+0x1585/0x5340 [ 1564.936597][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.941566][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 1564.947498][ T31] ? __pfx___schedule+0x10/0x10 [ 1564.952385][ T31] ? schedule+0x90/0x360 [ 1564.957226][ T31] schedule+0x164/0x360 [ 1564.961389][ T31] schedule_preempt_disabled+0x13/0x30 [ 1564.966928][ T31] __mutex_lock+0x7fe/0x1300 [ 1564.971541][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1564.976857][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1564.981671][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1564.986791][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1564.991826][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.996868][ T31] ? radix_tree_lookup+0x240/0x290 [ 1565.002000][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1565.006570][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1565.011616][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1565.017917][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1565.022781][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1565.027874][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1565.033179][ T31] ? down_read+0x272/0x2e0 [ 1565.037651][ T31] ? genl_rcv+0xd/0x40 [ 1565.041771][ T31] genl_rcv+0x28/0x40 [ 1565.046337][ T31] netlink_unicast+0x80f/0x9b0 [ 1565.051223][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1565.056605][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1565.061564][ T31] ? skb_put+0x11b/0x210 [ 1565.066002][ T31] netlink_sendmsg+0x813/0xb40 [ 1565.070813][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.076662][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1565.081612][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1565.087062][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.092404][ T31] __sys_sendto+0x672/0x710 [ 1565.097146][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1565.102219][ T31] ? exc_page_fault+0x6a/0xc0 [ 1565.107507][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1565.112822][ T31] __x64_sys_sendto+0xde/0x100 [ 1565.117698][ T31] do_syscall_64+0x14d/0xf80 [ 1565.122510][ T31] ? trace_irq_disable+0x3b/0x150 [ 1565.127668][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.133840][ T31] ? clear_bhb_loop+0x40/0x90 [ 1565.138985][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.144967][ T31] RIP: 0033:0x7fc7b935cfce [ 1565.149411][ T31] RSP: 002b:00007fc7ba31ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1565.158008][ T31] RAX: ffffffffffffffda RBX: 00007fc7ba31e6c0 RCX: 00007fc7b935cfce [ 1565.166293][ T31] RDX: 0000000000000024 RSI: 00007fc7ba31d000 RDI: 0000000000000004 [ 1565.174270][ T31] RBP: 0000000000000000 R08: 00007fc7ba31cf04 R09: 000000000000000c [ 1565.182844][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1565.190949][ T31] R13: 00007fc7ba31cf58 R14: 00007fc7ba31d000 R15: 0000000000000000 [ 1565.199568][ T31] [ 1565.202686][ T31] INFO: task syz-executor:2947 blocked for more than 145 seconds. [ 1565.210919][ T31] Not tainted syzkaller #0 [ 1565.215938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1565.225588][ T31] task:syz-executor state:D stack:22880 pid:2947 tgid:2947 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1565.237769][ T31] Call Trace: [ 1565.241057][ T31] [ 1565.243976][ T31] __schedule+0x1585/0x5340 [ 1565.248563][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1565.253526][ T31] ? __pfx___schedule+0x10/0x10 [ 1565.259160][ T31] ? schedule+0x90/0x360 [ 1565.263434][ T31] schedule+0x164/0x360 [ 1565.267684][ T31] schedule_preempt_disabled+0x13/0x30 [ 1565.273177][ T31] __mutex_lock+0x7fe/0x1300 [ 1565.277878][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1565.283166][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1565.288454][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1565.293144][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1565.298278][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1565.303235][ T31] ? radix_tree_lookup+0x240/0x290 [ 1565.308449][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1565.312986][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1565.318538][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1565.323491][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1565.328586][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1565.333646][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1565.339185][ T31] ? down_read+0x272/0x2e0 [ 1565.343627][ T31] ? genl_rcv+0xd/0x40 [ 1565.348202][ T31] genl_rcv+0x28/0x40 [ 1565.352474][ T31] netlink_unicast+0x80f/0x9b0 [ 1565.357322][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1565.362623][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1565.367629][ T31] ? skb_put+0x11b/0x210 [ 1565.371896][ T31] netlink_sendmsg+0x813/0xb40 [ 1565.377089][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.382379][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1565.387517][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1565.392812][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.398447][ T31] __sys_sendto+0x672/0x710 [ 1565.402977][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1565.408494][ T31] ? fd_install+0x94/0x3d0 [ 1565.412949][ T31] ? fd_install+0x306/0x3d0 [ 1565.417780][ T31] __x64_sys_sendto+0xde/0x100 [ 1565.423483][ T31] do_syscall_64+0x14d/0xf80 [ 1565.428493][ T31] ? trace_irq_disable+0x3b/0x150 [ 1565.433557][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.440208][ T31] ? clear_bhb_loop+0x40/0x90 [ 1565.444984][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.450917][ T31] RIP: 0033:0x7f316795cfce [ 1565.455423][ T31] RSP: 002b:00007ffeeaf98678 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1565.464120][ T31] RAX: ffffffffffffffda RBX: 0000555578572500 RCX: 00007f316795cfce [ 1565.472539][ T31] RDX: 0000000000000020 RSI: 00007f3168744670 RDI: 0000000000000005 [ 1565.480601][ T31] RBP: 0000000000000001 R08: 00007ffeeaf986f4 R09: 000000000000000c [ 1565.488607][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1565.499682][ T31] R13: 00007ffeeaf98748 R14: 00007f3168744670 R15: 0000000000000000 [ 1565.507916][ T31] [ 1565.511015][ T31] [ 1565.511015][ T31] Showing all locks held in the system: [ 1565.518974][ T31] 1 lock held by khungtaskd/31: [ 1565.523871][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1565.534425][ T31] 2 locks held by getty/5574: [ 1565.539189][ T31] #0: ffff8880382ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1565.549159][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1565.559887][ T31] 1 lock held by udevd/1109: [ 1565.564473][ T31] #0: ffff888026f37358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1565.573909][ T31] 1 lock held by udevd/1113: [ 1565.578680][ T31] #0: ffff888026ffb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1565.588254][ T31] 6 locks held by syz.1.22740/2919: [ 1565.593452][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.601765][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.611200][ T31] #2: ffff888026ff1a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 1565.622163][ T31] #3: ffff888026fabff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1565.631639][ T31] #4: ffff888026fab990 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1565.644053][ T31] #5: ffff888026fab9c8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1565.657115][ T31] 2 locks held by syz.4.22744/2926: [ 1565.662420][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.670719][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.679823][ T31] 2 locks held by syz.0.22745/2932: [ 1565.685609][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.693838][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.702957][ T31] 2 locks held by syz.3.22746/2935: [ 1565.708219][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.716847][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.725948][ T31] 2 locks held by syz.3.22746/2939: [ 1565.731145][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.739806][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.749197][ T31] 2 locks held by syz.3.22746/2941: [ 1565.754547][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.762782][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.771868][ T31] 2 locks held by syz.3.22746/2942: [ 1565.777381][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.785635][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.794705][ T31] 2 locks held by syz.2.22747/2937: [ 1565.799942][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.808797][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.818029][ T31] 2 locks held by syz-executor/2947: [ 1565.823323][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.831623][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.841174][ T31] 2 locks held by syz-executor/2959: [ 1565.846562][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.854846][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.863855][ T31] 2 locks held by syz-executor/2961: [ 1565.869630][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.877897][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.886950][ T31] 2 locks held by syz-executor/2963: [ 1565.892223][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.901365][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.910426][ T31] 2 locks held by syz-executor/2966: [ 1565.915776][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.923985][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.933494][ T31] 2 locks held by syz-executor/3003: [ 1565.938850][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.947680][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.957117][ T31] 2 locks held by syz-executor/3013: [ 1565.962396][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.970618][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1565.979774][ T31] 2 locks held by syz-executor/3015: [ 1565.985600][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1565.993829][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.003030][ T31] 2 locks held by syz-executor/3020: [ 1566.008457][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.017127][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.026169][ T31] 2 locks held by syz-executor/3024: [ 1566.031620][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.039879][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.049721][ T31] 2 locks held by syz-executor/3057: [ 1566.055565][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.063861][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.072964][ T31] 2 locks held by syz-executor/3067: [ 1566.078576][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.086859][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.095922][ T31] 2 locks held by syz-executor/3069: [ 1566.101458][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.110186][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.119289][ T31] 2 locks held by syz-executor/3072: [ 1566.124656][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.132884][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.142347][ T31] 2 locks held by syz-executor/3085: [ 1566.147953][ T31] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1566.156261][ T31] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1566.165830][ T31] [ 1566.168309][ T31] ============================================= [ 1566.168309][ T31] [ 1566.176851][ T31] NMI backtrace for cpu 1 [ 1566.176867][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1566.176884][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.176893][ T31] Call Trace: [ 1566.176900][ T31] [ 1566.176907][ T31] dump_stack_lvl+0xe8/0x150 [ 1566.176940][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1566.176962][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1566.176989][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1566.177015][ T31] sys_info+0x135/0x170 [ 1566.177033][ T31] watchdog+0xfd9/0x1030 [ 1566.177095][ T31] ? watchdog+0x21a/0x1030 [ 1566.177133][ T31] kthread+0x388/0x470 [ 1566.177149][ T31] ? __pfx_watchdog+0x10/0x10 [ 1566.177173][ T31] ? __pfx_kthread+0x10/0x10 [ 1566.177192][ T31] ret_from_fork+0x51e/0xb90 [ 1566.177221][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1566.177245][ T31] ? __switch_to+0xc7d/0x1450 [ 1566.177286][ T31] ? __pfx_kthread+0x10/0x10 [ 1566.177306][ T31] ret_from_fork_asm+0x1a/0x30 [ 1566.177353][ T31] [ 1566.177361][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1566.288783][ C0] NMI backtrace for cpu 0 [ 1566.288801][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1566.288818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.288827][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1566.288858][ C0] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1566.288871][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1566.288885][ C0] RAX: 0000000000572ea7 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1566.288896][ C0] RDX: 0000000000000001 RSI: ffffffff8def2c4d RDI: ffffffff8c27aa00 [ 1566.288908][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1566.288919][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901186b0 [ 1566.288930][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1566.288941][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1566.288953][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1566.288964][ C0] CR2: 000055ca70708660 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1566.288979][ C0] Call Trace: [ 1566.288985][ C0] [ 1566.288991][ C0] default_idle+0x9/0x20 [ 1566.289007][ C0] default_idle_call+0x72/0xb0 [ 1566.289025][ C0] do_idle+0x1bd/0x500 [ 1566.289048][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1566.289068][ C0] ? __pfx_do_idle+0x10/0x10 [ 1566.289096][ C0] cpu_startup_entry+0x43/0x60 [ 1566.289125][ C0] rest_init+0x2de/0x300 [ 1566.289144][ C0] start_kernel+0x385/0x3d0 [ 1566.289276][ C0] x86_64_start_reservations+0x24/0x30 [ 1566.289320][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1566.289338][ C0] common_startup_64+0x13e/0x147 [ 1566.289363][ C0] [ 1566.473641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1566.480509][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1566.489868][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.499934][ T31] Call Trace: [ 1566.503205][ T31] [ 1566.506128][ T31] vpanic+0x56c/0xa60 [ 1566.510109][ T31] ? __pfx___schedule+0x10/0x10 [ 1566.514992][ T31] ? __pfx_vpanic+0x10/0x10 [ 1566.519539][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1566.524792][ T31] panic+0xc5/0xd0 [ 1566.528526][ T31] ? __pfx_panic+0x10/0x10 [ 1566.533062][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1566.538434][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1566.544614][ T31] watchdog+0x1023/0x1030 [ 1566.548979][ T31] ? watchdog+0x21a/0x1030 [ 1566.553416][ T31] kthread+0x388/0x470 [ 1566.557591][ T31] ? __pfx_watchdog+0x10/0x10 [ 1566.562374][ T31] ? __pfx_kthread+0x10/0x10 [ 1566.567216][ T31] ret_from_fork+0x51e/0xb90 [ 1566.571816][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1566.576927][ T31] ? __switch_to+0xc7d/0x1450 [ 1566.581615][ T31] ? __pfx_kthread+0x10/0x10 [ 1566.586200][ T31] ret_from_fork_asm+0x1a/0x30 [ 1566.591006][ T31] [ 1566.594336][ T31] Kernel Offset: disabled [ 1566.599510][ T31] Rebooting in 86400 seconds..