last executing test programs: 19.796639075s ago: executing program 1 (id=2578): socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000500000008001700", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 19.66165334s ago: executing program 0 (id=2580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000040001101feffffff00000000047c0000040042800c00018006000600800a0000040002"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe2, 0xe2, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {0x4, 0x5}, {0xd}, {0x9, 0x5}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x8}, @restrict={0x1, 0x0, 0x0, 0xb, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x10}, @datasec={0xd, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x6ba6, 0x5}], "b351"}, @enum={0x5, 0xa, 0x0, 0x6, 0x4, [{0xa, 0x5}, {0xf, 0x2}, {0x7, 0x1}, {0x3, 0xe}, {0xe, 0xfffff96d}, {0x5}, {0x1, 0x80000000}, {0x9, 0x4}, {0x1, 0x80000001}, {0x3, 0xfe}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000140)=""/211, 0x102, 0xd3, 0x1, 0xff59}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="19fd9bed22ac2a90d79729758c8eec869f68cc1cb5ef9a2b0f9efd6cf7828e49625b6a74403aa1a11329ff614cfb541aee3bb1de75901f0d44a30d7b651c6cb50594c012cf6cf0d736b1d8071d01c8093f87bd95554dd0832726e46f997c2d55c36a9f5562b9f882c8cd13d63719c6f50fe9f8b568afa7e1c8c4dc2da3e90caa9a72772d3f7058c2c0ee41599cd19d0ef13242b7456d49c487c3aede74eec7e347e07d7e8c0e7578cc5b2c11", 0xac}, {&(0x7f0000000500)="3009e8e4c2c988ca4cd4d6736eacbb5dc9dc23db", 0xffffff0a}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x20, r2, 0x301, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002e40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e00)={&(0x7f0000000a00)={0x23e8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}^@T\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x236c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x71, 0x5, "de69a82f907a24d9c933496990f8f5e576143768b39a0be2bbb4486d56f0f613f97040ea88ce297a9788f1c0f848c669644933d42c5c9b152048758e6d67466fa9aa388df48becc861108960239127950d95261e359781f6abd0c8b2dd243eb6a4b2d16e73b44670be930993e0"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x86, 0x4, "1b00ce2e27313d2455ddc6e2271a10efa74f588e0aec67b54f1bf1d53ac6a85837881105e4518a23bbc3563ecaf8be9ee9ac47ab250dfa239d936a4c5a2919ff385ce80d6b090ebf7118e96b26c9af18d417316b9326e042ce09b3a1a746dd74efe0491f25b5f34bd7fd56feab25fee7b5b6ef0109b91b4433f7f354df69c62d9c21"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "4741885e3affa77c077a76d2074e6aa558af30c997e1a1498f43ac69457bc9d7fbdc30806ed28d9f7b689ae90050175b076e0827e8c22e4637cc5a037208aa5dcc74863dbc0634d31cf3dd86bd7c0416e2278f656fe404aeb1a7e6"}, @ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "03bb82d12bb492a63d5e437805ae87d1f7a477456c6d990a0e0aeb13ccd645ef8c87d462ede1adf607ae8a51b57e3ad2b6ec74edfdaf1c0eb8b42fa0cd6d55b006b2a5996aef08e4501cce90c52021556058917d9381dca45771af613ad3f28f424096d419a1036d0447"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb01}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'sha224\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '![.\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x04!:^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'sha224\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-!#{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'sha224\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc034}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$+-/*:@*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#{[^})p\'\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@V{%,.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x23e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 19.514954624s ago: executing program 1 (id=2582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff20b}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e00}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x1011, &(0x7f0000000300)=""/4113, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004000000080018000aac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 19.465001079s ago: executing program 3 (id=2584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008f000000000000000b00020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100000000019500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090007004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x1019, &(0x7f0000000240)=""/4121, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value=0x700}, 0x94) 19.134897861s ago: executing program 3 (id=2586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x12, &(0x7f0000001e40)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00001100ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702010008000000b50afdff00000000850000000600000095"], &(0x7f0000001f00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 19.096121866s ago: executing program 1 (id=2587): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34fd9}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000054) 19.048506842s ago: executing program 3 (id=2589): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0xfdff, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.045985987s ago: executing program 4 (id=2590): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000800)={0xffffffffffffffff, 0x9, 0x9, 0xffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000840)='IPVS\x00', 0x1, &(0x7f0000000880)={@_ha_fsid={[0x1, 0x8]}, {0x6, 0x101, 0x8001, 0x7}}, 0x5, &(0x7f00000008c0), &(0x7f0000000900)=0x98}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)={0xc0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x100}, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r6, 0xf0480a1984753e5d, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 18.870837085s ago: executing program 3 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000090850000000500000095000000000000009500a50500000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0x29e, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 18.870474979s ago: executing program 1 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '?'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x400c091}, 0x8010) (async, rerun: 32) r2 = socket(0x15, 0x5, 0x0) (rerun: 32) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000080)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000100)=0x38c, 0x4) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x24008088) (async) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) 18.866056164s ago: executing program 0 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0xe7030000}, 0x84) 18.828718551s ago: executing program 4 (id=2594): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140003001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.697046954s ago: executing program 4 (id=2596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000e0000113000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000008008500000005000000bca900000000000035090100200000009500000000000000b7020000000000007b9af8ff00000000b509020001000000dbaaf8ff50000000bf8200000000000004080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000b93e980000000000005608f2ff0000000b8500000007000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.695773201s ago: executing program 3 (id=2597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000ac0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r3, 0xaa0f4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r5, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000b80)={0x0, 0xffffffffffffff14, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000c40)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000840)="89e3b3979f062f080700000088ca79e7dd35ad55db050b0b1c58b3a28ba0d7de1761dbecc5446a7f60fa4df61fb8a33249c66b8c7d4cebef4a6e593dbef4b91353774454aaecd0b0828a", 0x4a}], 0x1) 18.379338404s ago: executing program 0 (id=2599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000fff500000000ffffac141419ff020000000000000000000000000001"], 0x76) 18.378495826s ago: executing program 1 (id=2600): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x1, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/227, 0x1c}], 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="01ac0f0005ac0f008a6baa0d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7a, @remote, 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e22, @empty}], 0x3c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0), 0x4) 18.079911283s ago: executing program 0 (id=2603): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}}, 0x0) 17.954154609s ago: executing program 0 (id=2604): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000800)={0xffffffffffffffff, 0x9, 0x9, 0xffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000840)='IPVS\x00', 0x1, &(0x7f0000000880)={@_ha_fsid={[0x1, 0x8]}, {0x6, 0x101, 0x8001, 0x7}}, 0x5, &(0x7f00000008c0), &(0x7f0000000900)=0x98}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)={0xc0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x100}, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r6, 0xf0480a1984753e5d, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 17.871602588s ago: executing program 2 (id=2605): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r1 = socket$nl_audit(0x10, 0x3, 0x9) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000400)="a4c7db8fcdca7f860a2a6dfb9182d25062912e2c25a623490a5641c8dcd64932c1bce01082d9473e75a7bd222bc9ed20c68d7be4b24fed3af599ed525912d36ce1c5", 0x42}, {0x0}, {&(0x7f0000000500)="2a3134701d0ca41a833691f4ffbf8e45b169803920ef73b468e2b908d5b3b1b4cf1becc1610d775308ed5a7b31656b235e8a31c6a5a3b21bdf8a56f542d98c3fa84488", 0x43}, {0x0}, {0x0}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x0, 0x0}, 0x6) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vlan1\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r5, @ANYBLOB="089805000750050008001300", @ANYRES32=r6, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000009c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x4004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'veth0_vlan\x00', 0x0}) r12 = gettid() r13 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r11, @ANYBLOB="089805000750050008001300", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004c802}, 0x4000010) 17.728504136s ago: executing program 0 (id=2606): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000700000000005800000000009500"/32], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x3, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1}, {0x0, 0xd5984f48ebf4cd84}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c0004"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000b40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x54, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x96df}]}, 0x54}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000e00)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000e80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80000) recvmsg(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xa, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xe, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0xc, &(0x7f0000001380)=ANY=[], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000001480)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 17.678789303s ago: executing program 4 (id=2607): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180300000000000000a000000000000104000000100000f6c500feff0000000a95"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 17.522714876s ago: executing program 4 (id=2608): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x9f3a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000380)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000003c0)=0x28) socketpair(0x1, 0x100000005, 0x0, 0x0) recvmsg(r0, &(0x7f0000001f00)={&(0x7f0000000700)=@nl=@proc, 0x80, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000a00)=""/205, 0xcd}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/41, 0x29}, {&(0x7f0000001b40)=""/84, 0x54}, {0x0}], 0x7, &(0x7f0000001e40)=""/172, 0xac}, 0x22) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)="916a0d0ada05237eaa64b55e60c3925bebe67af7ea083ff6058f4d15eddbec744aec6b45e916beec0c34b736603cb085ae201c8fb506ba8d195fa4c4b4cc5c52cd656f1ed3b0dc38c87e89e59db3ebe351c8547c7e531cc8b719e981815713bd10888522b6325062b7c42f5f27074858336e919185", 0x75) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newnexthop={0x2c, 0x68, 0x401, 0x70bd27, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x1}]}]}, 0x2c}}, 0xa00000000000000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001f40)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.958682647s ago: executing program 2 (id=2609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x27, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x84}, {0x4, 0x7, 0x1}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) socket$inet(0x2, 0x3, 0xfff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2200000004"], 0x48) unshare(0x2a020480) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x288840, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept(r1, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x80) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000600)="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", 0x1000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000000000000081ffffff7f0000000000000008000f"], 0x24}}, 0x0) 15.958237712s ago: executing program 3 (id=2610): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (fail_nth: 14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000054) 15.886990293s ago: executing program 4 (id=2611): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)={0x10, 0x1001, 0x5c01}, 0x10}], 0x1, 0x0, 0x0, 0x440d0}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000cf850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40), &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4018}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000080)='caif0\x00'}) 15.802287188s ago: executing program 1 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) 15.75488252s ago: executing program 2 (id=2613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffef}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01020304"}]}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, '\n\v\f\r'}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0) 15.6355637s ago: executing program 2 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000680)="340000003e000500010000000000400001020000000000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) 15.503197122s ago: executing program 2 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000680)="340000003e000500010000000000000002020f000f0000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) 15.428870909s ago: executing program 2 (id=2616): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000800)={0xffffffffffffffff, 0x9, 0x9, 0xffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000840)='IPVS\x00', 0x1, &(0x7f0000000880)={@_ha_fsid={[0x1, 0x8]}, {0x6, 0x101, 0x8001, 0x7}}, 0x5, &(0x7f00000008c0), &(0x7f0000000900)=0x98}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)={0xc0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x100}, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r6, 0xf0480a1984753e5d, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 2.173139468s ago: executing program 32 (id=2606): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000700000000005800000000009500"/32], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x3, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1}, {0x0, 0xd5984f48ebf4cd84}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c0004"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000b40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x54, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x96df}]}, 0x54}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000e00)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000e80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80000) recvmsg(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xa, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xe, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0xc, &(0x7f0000001380)=ANY=[], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000001480)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 155.351711ms ago: executing program 33 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) 117.605952ms ago: executing program 34 (id=2616): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000800)={0xffffffffffffffff, 0x9, 0x9, 0xffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000840)='IPVS\x00', 0x1, &(0x7f0000000880)={@_ha_fsid={[0x1, 0x8]}, {0x6, 0x101, 0x8001, 0x7}}, 0x5, &(0x7f00000008c0), &(0x7f0000000900)=0x98}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)={0xc0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x100}, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r6, 0xf0480a1984753e5d, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 64.604101ms ago: executing program 35 (id=2610): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (fail_nth: 14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x34, r3, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000054) 0s ago: executing program 36 (id=2611): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)={0x10, 0x1001, 0x5c01}, 0x10}], 0x1, 0x0, 0x0, 0x440d0}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004400) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000cf850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40), &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4018}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000080)='caif0\x00'}) kernel console output (not intermixed with test programs): ing attributes in process `syz.3.2432'. [ 300.132161][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.271204][T12929] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2434'. [ 300.272326][T12929] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.2434'. [ 300.492026][T12943] netlink: 'syz.3.2439': attribute type 4 has an invalid length. [ 300.492046][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 300.777444][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2446'. [ 300.835902][T12964] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2445'. [ 300.835928][T12964] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2445'. [ 300.883149][T12971] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2445'. [ 300.883175][T12971] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2445'. [ 300.945128][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 301.116262][T12992] FAULT_INJECTION: forcing a failure. [ 301.116262][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 301.116292][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.3.2454 Not tainted syzkaller #0 PREEMPT(full) [ 301.116315][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.116327][T12992] Call Trace: [ 301.116335][T12992] [ 301.116343][T12992] dump_stack_lvl+0xe8/0x150 [ 301.116379][T12992] should_fail_ex+0x3eb/0x540 [ 301.116409][T12992] should_failslab+0xa8/0x100 [ 301.116441][T12992] __kmalloc_cache_noprof+0x9e/0x600 [ 301.116467][T12992] ? nf_tables_updchain+0x8d5/0x2250 [ 301.116495][T12992] ? nf_tables_updchain+0x8d5/0x2250 [ 301.116531][T12992] nf_tables_updchain+0x8d5/0x2250 [ 301.116560][T12992] ? __pfx_nft_chain_lookup+0x10/0x10 [ 301.116613][T12992] ? __pfx_nf_tables_updchain+0x10/0x10 [ 301.116647][T12992] ? nft_pernet+0x23/0x240 [ 301.116674][T12992] ? nft_pernet+0x23/0x240 [ 301.116708][T12992] nf_tables_newchain+0xdd3/0x28b0 [ 301.116733][T12992] ? __lock_acquire+0x747/0x2de0 [ 301.116780][T12992] ? __pfx_nf_tables_newchain+0x10/0x10 [ 301.116821][T12992] ? __pfx___nla_validate_parse+0x10/0x10 [ 301.116855][T12992] ? nft_pernet+0x23/0x240 [ 301.116880][T12992] ? nft_pernet+0x23/0x240 [ 301.116907][T12992] ? lock_acquire+0x115/0x350 [ 301.116929][T12992] ? nfnl_pernet+0x23/0x240 [ 301.116963][T12992] ? __nla_parse+0x40/0x60 [ 301.116994][T12992] nfnetlink_rcv+0x1288/0x28c0 [ 301.117054][T12992] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 301.117121][T12992] ? skb_clone+0x246/0x3a0 [ 301.117160][T12992] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.117184][T12992] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.117218][T12992] netlink_unicast+0x8ef/0xa80 [ 301.117263][T12992] netlink_sendmsg+0x7f0/0xb20 [ 301.117298][T12992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.117329][T12992] ? aa_sock_msg_perm+0x144/0x210 [ 301.117356][T12992] ? apparmor_socket_sendmsg+0x98/0x360 [ 301.117383][T12992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.117409][T12992] sock_sendmsg_nosec+0x14e/0x190 [ 301.117437][T12992] ____sys_sendmsg+0x54e/0x850 [ 301.117463][T12992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.117494][T12992] ? import_iovec+0x73/0xa0 [ 301.117522][T12992] ___sys_sendmsg+0x2a5/0x360 [ 301.117541][T12992] ? __lock_acquire+0x747/0x2de0 [ 301.117570][T12992] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.117624][T12992] ? __fget_files+0x3a2/0x420 [ 301.117647][T12992] ? __fget_files+0x2a/0x420 [ 301.117677][T12992] __x64_sys_sendmsg+0x1b1/0x290 [ 301.117700][T12992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.117742][T12992] do_syscall_64+0x166/0x520 [ 301.117764][T12992] ? trace_irq_disable+0x3b/0x140 [ 301.117796][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.117815][T12992] ? clear_bhb_loop+0x70/0xc0 [ 301.117840][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.117860][T12992] RIP: 0033:0x7f233659f559 [ 301.117879][T12992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.117897][T12992] RSP: 002b:00007f23373b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.117917][T12992] RAX: ffffffffffffffda RBX: 00007f2336825fa0 RCX: 00007f233659f559 [ 301.117932][T12992] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 301.117944][T12992] RBP: 00007f23373b5090 R08: 0000000000000000 R09: 0000000000000000 [ 301.117955][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.117965][T12992] R13: 00007f2336826038 R14: 00007f2336825fa0 R15: 00007ffcbafc2a38 [ 301.117997][T12992] [ 301.501258][T13005] netlink: 'syz.0.2460': attribute type 1 has an invalid length. [ 301.572124][T13005] 8021q: adding VLAN 0 to HW filter on device bond14 [ 301.575766][T13010] dummy0: left promiscuous mode [ 301.617642][T13010] bond14: (slave dummy0): making interface the new active one [ 301.625457][T13010] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 301.668351][T13005] netlink: 'syz.0.2460': attribute type 10 has an invalid length. [ 301.707095][T13005] dummy0: entered promiscuous mode [ 301.711801][T13005] bond14: (slave dummy0): Releasing active interface [ 301.737148][ T44] net_ratelimit: 28 callbacks suppressed [ 301.737170][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 301.776042][T13018] tipc: Enabling of bearer rejected, failed to enable media [ 301.848568][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 301.962218][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.068299][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.151857][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 10 > 9 [ 302.151890][ T53] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 302.177092][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.179062][T13039] Bluetooth: hci0: unsupported parameter 5135 [ 302.179081][T13039] Bluetooth: hci0: unsupported parameter 8192 [ 302.179095][T13039] Bluetooth: hci0: unsupported parameter 5135 [ 302.179109][T13039] Bluetooth: hci0: unsupported parameter 8192 [ 302.269031][T13050] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 302.296294][T13053] FAULT_INJECTION: forcing a failure. [ 302.296294][T13053] name failslab, interval 1, probability 0, space 0, times 0 [ 302.296323][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.0.2476 Not tainted syzkaller #0 PREEMPT(full) [ 302.296346][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.296357][T13053] Call Trace: [ 302.296365][T13053] [ 302.296372][T13053] dump_stack_lvl+0xe8/0x150 [ 302.296408][T13053] should_fail_ex+0x3eb/0x540 [ 302.296435][T13053] should_failslab+0xa8/0x100 [ 302.296467][T13053] __kvmalloc_node_noprof+0x171/0x820 [ 302.296494][T13053] ? netdev_alloc_config+0x4f/0xc0 [ 302.296520][T13053] ? netdev_alloc_config+0x4f/0xc0 [ 302.296547][T13053] ? alloc_netdev_mqs+0xd5b/0x1240 [ 302.296571][T13053] ? alloc_netdev_mqs+0xd5b/0x1240 [ 302.296604][T13053] alloc_netdev_mqs+0xd5b/0x1240 [ 302.296641][T13053] internal_dev_create+0x89/0x480 [ 302.296678][T13053] ovs_vport_add+0xea/0x230 [ 302.296703][T13053] new_vport+0x1a/0x190 [ 302.296726][T13053] ovs_dp_cmd_new+0x693/0xb00 [ 302.296762][T13053] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 302.296790][T13053] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 302.296813][T13053] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 302.296844][T13053] genl_family_rcv_msg_doit+0x233/0x340 [ 302.296874][T13053] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.296915][T13053] ? bpf_lsm_capable+0x9/0x20 [ 302.296933][T13053] ? security_capable+0x7e/0x2c0 [ 302.296968][T13053] genl_rcv_msg+0x614/0x7a0 [ 302.296996][T13053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.297017][T13053] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 302.297050][T13053] netlink_rcv_skb+0x226/0x4a0 [ 302.297079][T13053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.297103][T13053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.297147][T13053] ? down_read+0x2b9/0x320 [ 302.297177][T13053] genl_rcv+0x28/0x40 [ 302.297196][T13053] netlink_unicast+0x8ef/0xa80 [ 302.297240][T13053] netlink_sendmsg+0x7f0/0xb20 [ 302.297274][T13053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.297306][T13053] ? aa_sock_msg_perm+0x144/0x210 [ 302.297332][T13053] ? apparmor_socket_sendmsg+0x98/0x360 [ 302.297364][T13053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.297389][T13053] sock_sendmsg_nosec+0x14e/0x190 [ 302.297419][T13053] __sys_sendto+0x408/0x5a0 [ 302.297448][T13053] ? ksys_write+0x1e6/0x270 [ 302.297477][T13053] ? __pfx___sys_sendto+0x10/0x10 [ 302.297502][T13053] ? __mutex_unlock_slowpath+0x731/0x900 [ 302.297537][T13053] ? fdget+0x1ac/0x250 [ 302.297574][T13053] ? __pfx_ksys_write+0x10/0x10 [ 302.297607][T13053] __x64_sys_sendto+0xde/0x100 [ 302.297639][T13053] do_syscall_64+0x166/0x520 [ 302.297660][T13053] ? trace_irq_disable+0x3b/0x140 [ 302.297687][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.297707][T13053] ? clear_bhb_loop+0x70/0xc0 [ 302.297733][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.297753][T13053] RIP: 0033:0x7fd5df79f559 [ 302.297771][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.297789][T13053] RSP: 002b:00007fd5e06df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 302.297812][T13053] RAX: ffffffffffffffda RBX: 00007fd5dfa25fa0 RCX: 00007fd5df79f559 [ 302.297827][T13053] RDX: 0000000000000034 RSI: 0000200000000680 RDI: 0000000000000003 [ 302.297840][T13053] RBP: 00007fd5e06df090 R08: 0000000000000000 R09: 0000000000000000 [ 302.297853][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.297865][T13053] R13: 00007fd5dfa26038 R14: 00007fd5dfa25fa0 R15: 00007ffe50707778 [ 302.297906][T13053] [ 302.298766][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.345100][T13054] netlink: 'syz.1.2474': attribute type 39 has an invalid length. [ 302.449185][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.715729][T13059] tipc: Enabled bearer , priority 10 [ 302.733524][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.838903][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 302.950320][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 303.165657][T13072] 8021q: adding VLAN 0 to HW filter on device bond15 [ 303.481289][T13085] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 303.535114][T13088] netlink: 'syz.0.2489': attribute type 10 has an invalid length. [ 303.589687][T13091] netlink: 'syz.0.2489': attribute type 10 has an invalid length. [ 303.589958][T13092] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 303.594759][T13085] 8021q: adding VLAN 0 to HW filter on device bond22 [ 303.595575][T13088] dummy0: left promiscuous mode [ 303.630272][T13088] team0: Port device dummy0 added [ 303.630549][T13089] dummy0: left promiscuous mode [ 303.630567][T13089] dummy0: left allmulticast mode [ 303.704581][T13089] bond22: (slave dummy0): making interface the new active one [ 303.716108][T13089] bond22: (slave dummy0): Enslaving as an active interface with an up link [ 303.774783][T13091] team0: Port device dummy0 removed [ 303.802841][T13092] dummy0: entered promiscuous mode [ 303.817835][T13092] bond22: (slave dummy0): Releasing active interface [ 303.881048][T13107] FAULT_INJECTION: forcing a failure. [ 303.881048][T13107] name failslab, interval 1, probability 0, space 0, times 0 [ 303.881078][T13107] CPU: 1 UID: 0 PID: 13107 Comm: syz.1.2493 Not tainted syzkaller #0 PREEMPT(full) [ 303.881110][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 303.881122][T13107] Call Trace: [ 303.881130][T13107] [ 303.881141][T13107] dump_stack_lvl+0xe8/0x150 [ 303.881177][T13107] should_fail_ex+0x3eb/0x540 [ 303.881206][T13107] should_failslab+0xa8/0x100 [ 303.881236][T13107] __kvmalloc_node_noprof+0x171/0x820 [ 303.881264][T13107] ? __kvmalloc_node_noprof+0x340/0x820 [ 303.881289][T13107] ? bpf_compute_postorder+0x179/0x9a0 [ 303.881314][T13107] ? bpf_compute_postorder+0x179/0x9a0 [ 303.881349][T13107] bpf_compute_postorder+0x179/0x9a0 [ 303.881377][T13107] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 303.881411][T13107] bpf_check+0x298f/0x34e0 [ 303.881443][T13107] ? ktime_get_with_offset+0x93/0x2d0 [ 303.881470][T13107] ? ktime_get_with_offset+0x93/0x2d0 [ 303.881497][T13107] ? __pfx_bpf_check+0x10/0x10 [ 303.881521][T13107] ? bpf_obj_name_cpy+0x194/0x1e0 [ 303.881549][T13107] bpf_prog_load+0x14da/0x1c60 [ 303.881582][T13107] ? __pfx_bpf_prog_load+0x10/0x10 [ 303.881614][T13107] ? __might_fault+0xaf/0x130 [ 303.881640][T13107] __sys_bpf+0xd86/0xe00 [ 303.881668][T13107] ? __pfx___sys_bpf+0x10/0x10 [ 303.881699][T13107] ? __fget_files+0x2a/0x420 [ 303.881757][T13107] ? ksys_write+0x242/0x270 [ 303.881786][T13107] ? __pfx_ksys_write+0x10/0x10 [ 303.881817][T13107] __x64_sys_bpf+0xba/0xd0 [ 303.881849][T13107] do_syscall_64+0x166/0x520 [ 303.881871][T13107] ? trace_irq_disable+0x3b/0x140 [ 303.881898][T13107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.881918][T13107] ? clear_bhb_loop+0x70/0xc0 [ 303.881944][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.881964][T13107] RIP: 0033:0x7fc717d9f559 [ 303.881984][T13107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.882002][T13107] RSP: 002b:00007fc718d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.882022][T13107] RAX: ffffffffffffffda RBX: 00007fc718025fa0 RCX: 00007fc717d9f559 [ 303.882036][T13107] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 303.882048][T13107] RBP: 00007fc718d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.882059][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.882069][T13107] R13: 00007fc718026038 R14: 00007fc718025fa0 R15: 00007ffec0f6a848 [ 303.882100][T13107] [ 304.261197][T13115] 8021q: adding VLAN 0 to HW filter on device bond16 [ 304.336751][T13121] FAULT_INJECTION: forcing a failure. [ 304.336751][T13121] name failslab, interval 1, probability 0, space 0, times 0 [ 304.336782][T13121] CPU: 1 UID: 0 PID: 13121 Comm: syz.3.2494 Not tainted syzkaller #0 PREEMPT(full) [ 304.336806][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 304.336818][T13121] Call Trace: [ 304.336827][T13121] [ 304.336837][T13121] dump_stack_lvl+0xe8/0x150 [ 304.336875][T13121] should_fail_ex+0x3eb/0x540 [ 304.336901][T13121] ? __alloc_skb+0x1db/0x7a0 [ 304.336929][T13121] should_failslab+0xa8/0x100 [ 304.336958][T13121] ? __alloc_skb+0x1db/0x7a0 [ 304.336984][T13121] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 304.337008][T13121] ? __alloc_skb+0x18d/0x7a0 [ 304.337047][T13121] ? __alloc_skb+0x1db/0x7a0 [ 304.337083][T13121] __alloc_skb+0x1db/0x7a0 [ 304.337116][T13121] __ipv6_ifa_notify+0x1d0/0xc60 [ 304.337165][T13121] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 304.337190][T13121] ? fib6_flush_trees+0x147/0x1a0 [ 304.337219][T13121] ? __pfx_fib6_flush_trees+0x10/0x10 [ 304.337249][T13121] ? __local_bh_enable_ip+0xd6/0x140 [ 304.337282][T13121] add_addr+0x1b8/0x2d0 [ 304.337324][T13121] addrconf_notify+0xb1e/0x1050 [ 304.337357][T13121] notifier_call_chain+0x1a5/0x3d0 [ 304.337390][T13121] netif_state_change+0x27d/0x3a0 [ 304.337418][T13121] ? __pfx___dev_change_flags+0x10/0x10 [ 304.337441][T13121] ? __pfx_netif_state_change+0x10/0x10 [ 304.337477][T13121] ? netif_change_flags+0xde/0x1b0 [ 304.337502][T13121] do_setlink+0x3d64/0x47a0 [ 304.337522][T13121] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.337555][T13121] ? __lock_acquire+0x747/0x2de0 [ 304.337583][T13121] ? __pfx_do_setlink+0x10/0x10 [ 304.337627][T13121] ? do_raw_spin_lock+0x12b/0x2f0 [ 304.337667][T13121] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.337693][T13121] ? __mutex_lock+0x10de/0x15a0 [ 304.337721][T13121] ? __mutex_lock+0x5cd/0x15a0 [ 304.337747][T13121] ? rtnl_newlink+0xc1d/0x1c30 [ 304.337768][T13121] ? __pfx___mutex_lock+0x10/0x10 [ 304.337797][T13121] ? ns_capable+0x84/0xe0 [ 304.337821][T13121] ? rtnl_nets_add+0x16c/0x300 [ 304.337841][T13121] ? refcount_inc+0x46/0x70 [ 304.337868][T13121] rtnl_newlink+0x147c/0x1c30 [ 304.337897][T13121] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.337912][T13121] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 304.337946][T13121] ? netlink_deliver_tap+0x19c/0x1b0 [ 304.337972][T13121] ? netlink_unicast+0x8c1/0xa80 [ 304.337992][T13121] ? netlink_sendmsg+0x7f0/0xb20 [ 304.338023][T13121] ? sock_sendmsg_nosec+0x14e/0x190 [ 304.338046][T13121] ? ____sys_sendmsg+0x54e/0x850 [ 304.338063][T13121] ? ___sys_sendmsg+0x2a5/0x360 [ 304.338079][T13121] ? __x64_sys_sendmsg+0x1b1/0x290 [ 304.338096][T13121] ? do_syscall_64+0x166/0x520 [ 304.338118][T13121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.338177][T13121] ? kasan_quarantine_put+0xbb/0x1f0 [ 304.338200][T13121] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.338223][T13121] ? nlmon_xmit+0xb0/0x100 [ 304.338245][T13121] ? kmem_cache_free+0x182/0x650 [ 304.338279][T13121] ? __lock_acquire+0x747/0x2de0 [ 304.338312][T13121] ? __pfx_hook_capable+0x10/0x10 [ 304.338331][T13121] ? __dev_queue_xmit+0x29b/0x3920 [ 304.338360][T13121] ? __pfx_hook_capable+0x10/0x10 [ 304.338381][T13121] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.338410][T13121] ? lock_acquire+0x115/0x350 [ 304.338434][T13121] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.338465][T13121] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.338483][T13121] rtnetlink_rcv_msg+0x802/0xc00 [ 304.338508][T13121] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 304.338527][T13121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.338550][T13121] ? __copy_skb_header+0xa3/0x4a0 [ 304.338583][T13121] netlink_rcv_skb+0x226/0x4a0 [ 304.338611][T13121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.338633][T13121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.338670][T13121] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.338695][T13121] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.338725][T13121] netlink_unicast+0x8ef/0xa80 [ 304.338769][T13121] netlink_sendmsg+0x7f0/0xb20 [ 304.338802][T13121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.338841][T13121] ? aa_sock_msg_perm+0x144/0x210 [ 304.338866][T13121] ? apparmor_socket_sendmsg+0x98/0x360 [ 304.338895][T13121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.338922][T13121] sock_sendmsg_nosec+0x14e/0x190 [ 304.338951][T13121] ____sys_sendmsg+0x54e/0x850 [ 304.338976][T13121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.339006][T13121] ? import_iovec+0x73/0xa0 [ 304.339043][T13121] ___sys_sendmsg+0x2a5/0x360 [ 304.339062][T13121] ? __lock_acquire+0x747/0x2de0 [ 304.339093][T13121] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.339156][T13121] ? __fget_files+0x3a2/0x420 [ 304.339178][T13121] ? __fget_files+0x2a/0x420 [ 304.339212][T13121] __x64_sys_sendmsg+0x1b1/0x290 [ 304.339237][T13121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.339282][T13121] do_syscall_64+0x166/0x520 [ 304.339304][T13121] ? trace_irq_disable+0x3b/0x140 [ 304.339335][T13121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.339356][T13121] ? clear_bhb_loop+0x70/0xc0 [ 304.339381][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.339401][T13121] RIP: 0033:0x7f233659f559 [ 304.339420][T13121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.339438][T13121] RSP: 002b:00007f2337394028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.339459][T13121] RAX: ffffffffffffffda RBX: 00007f2336826090 RCX: 00007f233659f559 [ 304.339475][T13121] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 304.339488][T13121] RBP: 00007f2337394090 R08: 0000000000000000 R09: 0000000000000000 [ 304.339501][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.339512][T13121] R13: 00007f2336826128 R14: 00007f2336826090 R15: 00007ffcbafc2a38 [ 304.339546][T13121] [ 304.559376][T13121] dummy0: entered promiscuous mode [ 304.559397][T13121] dummy0: entered allmulticast mode [ 304.578784][T13121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.829528][ T2381] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.932342][T13119] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 304.982512][T13134] 8021q: adding VLAN 0 to HW filter on device bond15 [ 305.181640][T13146] veth0_to_bond: entered promiscuous mode [ 305.181667][T13146] veth0_to_bond: entered allmulticast mode [ 305.214756][T13157] FAULT_INJECTION: forcing a failure. [ 305.214756][T13157] name failslab, interval 1, probability 0, space 0, times 0 [ 305.214788][T13157] CPU: 0 UID: 0 PID: 13157 Comm: syz.4.2507 Not tainted syzkaller #0 PREEMPT(full) [ 305.214810][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.214823][T13157] Call Trace: [ 305.214831][T13157] [ 305.214840][T13157] dump_stack_lvl+0xe8/0x150 [ 305.214876][T13157] should_fail_ex+0x3eb/0x540 [ 305.214914][T13157] should_failslab+0xa8/0x100 [ 305.214942][T13157] __kvmalloc_node_noprof+0x171/0x820 [ 305.214969][T13157] ? __kvmalloc_node_noprof+0x340/0x820 [ 305.214992][T13157] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 305.215019][T13157] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 305.215051][T13157] bpf_test_run_xdp_live+0x220/0x1c20 [ 305.215082][T13157] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 305.215119][T13157] ? __mutex_unlock_slowpath+0x731/0x900 [ 305.215147][T13157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.215172][T13157] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 305.215198][T13157] ? 0xffffffffa0405040 [ 305.215261][T13157] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 305.215295][T13157] ? _copy_from_user+0x94/0xb0 [ 305.215318][T13157] ? bpf_test_init+0x113/0x150 [ 305.215342][T13157] ? xdp_convert_md_to_buff+0x5b/0x330 [ 305.215371][T13157] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 305.215412][T13157] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 305.215445][T13157] ? __fget_files+0x2a/0x420 [ 305.215475][T13157] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 305.215504][T13157] bpf_prog_test_run+0x2c5/0x340 [ 305.215530][T13157] __sys_bpf+0xb1e/0xe00 [ 305.215559][T13157] ? __pfx___sys_bpf+0x10/0x10 [ 305.215590][T13157] ? __fget_files+0x2a/0x420 [ 305.215630][T13157] ? ksys_write+0x242/0x270 [ 305.215655][T13157] ? __pfx_ksys_write+0x10/0x10 [ 305.215683][T13157] __x64_sys_bpf+0xba/0xd0 [ 305.215712][T13157] do_syscall_64+0x166/0x520 [ 305.215734][T13157] ? trace_irq_disable+0x3b/0x140 [ 305.215760][T13157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.215780][T13157] ? clear_bhb_loop+0x70/0xc0 [ 305.215803][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.215822][T13157] RIP: 0033:0x7f7715d9f559 [ 305.215839][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.215857][T13157] RSP: 002b:00007f7716c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.215878][T13157] RAX: ffffffffffffffda RBX: 00007f7716025fa0 RCX: 00007f7715d9f559 [ 305.215901][T13157] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 305.215914][T13157] RBP: 00007f7716c91090 R08: 0000000000000000 R09: 0000000000000000 [ 305.215928][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.215941][T13157] R13: 00007f7716026038 R14: 00007f7716025fa0 R15: 00007ffe9b1c3428 [ 305.215972][T13157] [ 305.242985][T13146] vlan0: entered allmulticast mode [ 305.247748][ T2381] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.256397][T13146] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 305.256737][T13146] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 305.351899][T13146] pimreg: entered promiscuous mode [ 305.564529][T13162] __nla_validate_parse: 10 callbacks suppressed [ 305.564551][T13162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2510'. [ 305.616329][T13163] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 305.616360][T13163] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 305.618572][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 305.639085][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2509'. [ 305.724585][T13170] netlink: 'syz.2.2512': attribute type 11 has an invalid length. [ 305.724748][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'. [ 305.725181][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'. [ 305.792207][T13177] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2514'. [ 305.792271][T13177] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz0 [ 305.801695][ T53] Bluetooth: hci2: connection err: -111 [ 305.936137][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2517'. [ 305.936174][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2517'. [ 305.984766][T13187] FAULT_INJECTION: forcing a failure. [ 305.984766][T13187] name failslab, interval 1, probability 0, space 0, times 0 [ 305.984796][T13187] CPU: 0 UID: 0 PID: 13187 Comm: syz.4.2518 Not tainted syzkaller #0 PREEMPT(full) [ 305.984817][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.984829][T13187] Call Trace: [ 305.984837][T13187] [ 305.984845][T13187] dump_stack_lvl+0xe8/0x150 [ 305.984892][T13187] should_fail_ex+0x3eb/0x540 [ 305.984923][T13187] should_failslab+0xa8/0x100 [ 305.984955][T13187] __kmalloc_cache_noprof+0x9e/0x600 [ 305.984982][T13187] ? nf_tables_updobj+0x5d/0x3e0 [ 305.985002][T13187] ? nf_tables_updobj+0x5d/0x3e0 [ 305.985030][T13187] nf_tables_updobj+0x5d/0x3e0 [ 305.985050][T13187] ? nft_obj_type_get+0x26/0x460 [ 305.985069][T13187] ? nft_obj_type_get+0x41a/0x460 [ 305.985089][T13187] ? nft_obj_type_get+0x26/0x460 [ 305.985115][T13187] nf_tables_newobj+0xe1f/0x1e90 [ 305.985162][T13187] ? __pfx_nf_tables_newobj+0x10/0x10 [ 305.985196][T13187] ? __nla_parse+0x40/0x60 [ 305.985226][T13187] nfnetlink_rcv+0x1288/0x28c0 [ 305.985287][T13187] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 305.985362][T13187] ? skb_clone+0x246/0x3a0 [ 305.985397][T13187] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.985422][T13187] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.985454][T13187] netlink_unicast+0x8ef/0xa80 [ 305.985500][T13187] netlink_sendmsg+0x7f0/0xb20 [ 305.985533][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.985565][T13187] ? aa_sock_msg_perm+0x144/0x210 [ 305.985590][T13187] ? apparmor_socket_sendmsg+0x98/0x360 [ 305.985622][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.985649][T13187] sock_sendmsg_nosec+0x14e/0x190 [ 305.985680][T13187] ____sys_sendmsg+0x54e/0x850 [ 305.985709][T13187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.985738][T13187] ? import_iovec+0x73/0xa0 [ 305.985766][T13187] ___sys_sendmsg+0x2a5/0x360 [ 305.985786][T13187] ? __lock_acquire+0x747/0x2de0 [ 305.985817][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.985885][T13187] ? __fget_files+0x3a2/0x420 [ 305.985909][T13187] ? __fget_files+0x2a/0x420 [ 305.985944][T13187] __x64_sys_sendmsg+0x1b1/0x290 [ 305.985970][T13187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.986014][T13187] do_syscall_64+0x166/0x520 [ 305.986036][T13187] ? trace_irq_disable+0x3b/0x140 [ 305.986061][T13187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.986081][T13187] ? clear_bhb_loop+0x70/0xc0 [ 305.986107][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.986127][T13187] RIP: 0033:0x7f7715d9f559 [ 305.986146][T13187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.986163][T13187] RSP: 002b:00007f7716c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.986183][T13187] RAX: ffffffffffffffda RBX: 00007f7716025fa0 RCX: 00007f7715d9f559 [ 305.986199][T13187] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 305.986212][T13187] RBP: 00007f7716c91090 R08: 0000000000000000 R09: 0000000000000000 [ 305.986225][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.986237][T13187] R13: 00007f7716026038 R14: 00007f7716025fa0 R15: 00007ffe9b1c3428 [ 305.986271][T13187] [ 306.194750][T13184] gretap0: left promiscuous mode [ 306.194776][T13184] gretap0: left allmulticast mode [ 306.218736][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2516'. [ 306.305917][T13184] netlink: 988 bytes leftover after parsing attributes in process `syz.1.2517'. [ 306.521380][T13201] 8021q: adding VLAN 0 to HW filter on device bond23 [ 306.758164][ T9429] net_ratelimit: 22 callbacks suppressed [ 306.758185][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 306.762969][T13221] validate_nla: 1 callbacks suppressed [ 306.762986][T13221] netlink: 'syz.3.2527': attribute type 1 has an invalid length. [ 306.883335][T13226] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 306.907098][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.929197][T13228] 8021q: adding VLAN 0 to HW filter on device bond20 [ 306.931760][T13228] bond19: (slave bond20): making interface the new active one [ 306.932375][T13228] bond19: (slave bond20): Enslaving as an active interface with an up link [ 306.998548][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 307.107095][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 307.217853][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 307.327461][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 307.421215][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 307.507028][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 307.617064][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 307.694344][T13264] 8021q: adding VLAN 0 to HW filter on device bond21 [ 307.731783][T13264] ovs-dp0: entered promiscuous mode [ 308.208037][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 308.848743][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.995787][T13328] FAULT_INJECTION: forcing a failure. [ 308.995787][T13328] name failslab, interval 1, probability 0, space 0, times 0 [ 308.995816][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.0.2560 Not tainted syzkaller #0 PREEMPT(full) [ 308.995838][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 308.995849][T13328] Call Trace: [ 308.995857][T13328] [ 308.995866][T13328] dump_stack_lvl+0xe8/0x150 [ 308.995902][T13328] should_fail_ex+0x3eb/0x540 [ 308.995930][T13328] should_failslab+0xa8/0x100 [ 308.995958][T13328] __kmalloc_cache_node_noprof+0xa5/0x620 [ 308.995985][T13328] ? __get_vm_area_node+0x155/0x2f0 [ 308.996003][T13328] ? __get_vm_area_node+0x155/0x2f0 [ 308.996029][T13328] __get_vm_area_node+0x155/0x2f0 [ 308.996055][T13328] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 308.996075][T13328] ? bpf_check+0x14ae/0x34e0 [ 308.996098][T13328] ? lock_acquire+0x115/0x350 [ 308.996126][T13328] ? hook_capable+0x1c3/0x5e0 [ 308.996149][T13328] ? __pfx_hook_capable+0x10/0x10 [ 308.996172][T13328] ? rcu_is_watching+0x16/0xb0 [ 308.996204][T13328] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.996227][T13328] ? apparmor_capable+0x126/0x170 [ 308.996253][T13328] ? bpf_lsm_capable+0x9/0x20 [ 308.996270][T13328] ? security_capable+0x7e/0x2c0 [ 308.996300][T13328] ? bpf_check+0x14ae/0x34e0 [ 308.996317][T13328] __vmalloc_noprof+0xd2/0x120 [ 308.996338][T13328] ? bpf_check+0x14ae/0x34e0 [ 308.996359][T13328] bpf_check+0x14ae/0x34e0 [ 308.996392][T13328] ? ktime_get_with_offset+0x93/0x2d0 [ 308.996420][T13328] ? ktime_get_with_offset+0x93/0x2d0 [ 308.996446][T13328] ? __pfx_bpf_check+0x10/0x10 [ 308.996469][T13328] ? bpf_obj_name_cpy+0x194/0x1e0 [ 308.996498][T13328] bpf_prog_load+0x14da/0x1c60 [ 308.996532][T13328] ? __pfx_bpf_prog_load+0x10/0x10 [ 308.996567][T13328] ? __might_fault+0xaf/0x130 [ 308.996594][T13328] __sys_bpf+0xd86/0xe00 [ 308.996623][T13328] ? __pfx___sys_bpf+0x10/0x10 [ 308.996655][T13328] ? __fget_files+0x2a/0x420 [ 308.996708][T13328] ? ksys_write+0x242/0x270 [ 308.996737][T13328] ? __pfx_ksys_write+0x10/0x10 [ 308.996768][T13328] __x64_sys_bpf+0xba/0xd0 [ 308.996800][T13328] do_syscall_64+0x166/0x520 [ 308.996823][T13328] ? trace_irq_disable+0x3b/0x140 [ 308.996850][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.996871][T13328] ? clear_bhb_loop+0x70/0xc0 [ 308.996892][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.996910][T13328] RIP: 0033:0x7fd5df79f559 [ 308.996929][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.996944][T13328] RSP: 002b:00007fd5e06df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.996965][T13328] RAX: ffffffffffffffda RBX: 00007fd5dfa25fa0 RCX: 00007fd5df79f559 [ 308.996980][T13328] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000005 [ 308.996992][T13328] RBP: 00007fd5e06df090 R08: 0000000000000000 R09: 0000000000000000 [ 308.997005][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.997016][T13328] R13: 00007fd5dfa26038 R14: 00007fd5dfa25fa0 R15: 00007ffe50707778 [ 308.997047][T13328] [ 309.000292][T13328] syz.0.2560: vmalloc error: size 1400, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.000360][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.0.2560 Not tainted syzkaller #0 PREEMPT(full) [ 309.000382][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 309.000394][T13328] Call Trace: [ 309.000402][T13328] [ 309.000410][T13328] dump_stack_lvl+0xe8/0x150 [ 309.000447][T13328] warn_alloc+0x24d/0x270 [ 309.000471][T13328] ? __kasan_kmalloc+0x22/0xb0 [ 309.000500][T13328] ? __pfx_warn_alloc+0x10/0x10 [ 309.000522][T13328] ? __get_vm_area_node+0x155/0x2f0 [ 309.000550][T13328] ? __get_vm_area_node+0x2a9/0x2f0 [ 309.000577][T13328] __vmalloc_node_range_noprof+0x396/0x16f0 [ 309.000606][T13328] ? lock_acquire+0x115/0x350 [ 309.000635][T13328] ? hook_capable+0x1c3/0x5e0 [ 309.000662][T13328] ? __pfx_hook_capable+0x10/0x10 [ 309.000685][T13328] ? rcu_is_watching+0x16/0xb0 [ 309.000724][T13328] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.000748][T13328] ? apparmor_capable+0x126/0x170 [ 309.000775][T13328] ? bpf_lsm_capable+0x9/0x20 [ 309.000791][T13328] ? security_capable+0x7e/0x2c0 [ 309.000822][T13328] ? bpf_check+0x14ae/0x34e0 [ 309.000841][T13328] __vmalloc_noprof+0xd2/0x120 [ 309.000863][T13328] ? bpf_check+0x14ae/0x34e0 [ 309.000885][T13328] bpf_check+0x14ae/0x34e0 [ 309.000917][T13328] ? ktime_get_with_offset+0x93/0x2d0 [ 309.000944][T13328] ? ktime_get_with_offset+0x93/0x2d0 [ 309.000970][T13328] ? __pfx_bpf_check+0x10/0x10 [ 309.000993][T13328] ? bpf_obj_name_cpy+0x194/0x1e0 [ 309.001022][T13328] bpf_prog_load+0x14da/0x1c60 [ 309.001054][T13328] ? __pfx_bpf_prog_load+0x10/0x10 [ 309.001090][T13328] ? __might_fault+0xaf/0x130 [ 309.001116][T13328] __sys_bpf+0xd86/0xe00 [ 309.001145][T13328] ? __pfx___sys_bpf+0x10/0x10 [ 309.001175][T13328] ? __fget_files+0x2a/0x420 [ 309.001233][T13328] ? ksys_write+0x242/0x270 [ 309.001261][T13328] ? __pfx_ksys_write+0x10/0x10 [ 309.001291][T13328] __x64_sys_bpf+0xba/0xd0 [ 309.001321][T13328] do_syscall_64+0x166/0x520 [ 309.001344][T13328] ? trace_irq_disable+0x3b/0x140 [ 309.001370][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.001390][T13328] ? clear_bhb_loop+0x70/0xc0 [ 309.001415][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.001434][T13328] RIP: 0033:0x7fd5df79f559 [ 309.001452][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.001470][T13328] RSP: 002b:00007fd5e06df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.001489][T13328] RAX: ffffffffffffffda RBX: 00007fd5dfa25fa0 RCX: 00007fd5df79f559 [ 309.001504][T13328] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000005 [ 309.001516][T13328] RBP: 00007fd5e06df090 R08: 0000000000000000 R09: 0000000000000000 [ 309.001529][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.001541][T13328] R13: 00007fd5dfa26038 R14: 00007fd5dfa25fa0 R15: 00007ffe50707778 [ 309.001573][T13328] [ 309.001582][T13328] Mem-Info: [ 309.001591][T13328] active_anon:9022 inactive_anon:0 isolated_anon:0 [ 309.001591][T13328] active_file:0 inactive_file:43663 isolated_file:0 [ 309.001591][T13328] unevictable:0 dirty:243 writeback:0 [ 309.001591][T13328] slab_reclaimable:12238 slab_unreclaimable:134460 [ 309.001591][T13328] mapped:32662 shmem:3395 pagetables:1326 [ 309.001591][T13328] sec_pagetables:0 bounce:0 [ 309.001591][T13328] kernel_misc_reclaimable:0 [ 309.001591][T13328] free:1246763 free_pcp:9767 free_cma:0 [ 309.001641][T13328] Node 0 active_anon:36088kB inactive_anon:0kB active_file:0kB inactive_file:174456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130648kB dirty:968kB writeback:0kB shmem:13580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15184kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 309.001696][T13328] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 309.006336][T13328] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.006400][T13328] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 309.006434][T13328] Node 0 DMA32 free:1027692kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36088kB inactive_anon:0kB active_file:0kB inactive_file:174456kB unevictable:0kB writepending:968kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:39044kB local_pcp:17408kB free_cma:0kB [ 309.006493][T13328] lowmem_reserve[]: 0 0 1 1 1 [ 309.006526][T13328] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.006581][T13328] lowmem_reserve[]: 0 0 0 0 0 [ 309.006613][T13328] Node 1 Normal free:3944000kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.006670][T13328] lowmem_reserve[]: 0 0 0 0 0 [ 309.006709][T13328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 309.006819][T13328] Node 0 DMA32: 5*4kB (UME) 263*8kB (UE) 266*16kB (UE) 640*32kB (UE) 196*64kB (UM) 71*128kB (UME) 45*256kB (UME) 16*512kB (UME) 17*1024kB (UM) 6*2048kB (UME) 227*4096kB (UM) = 1027692kB [ 309.006995][T13328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 309.007088][T13328] Node 1 Normal: 5*4kB (UM) 1*8kB (M) 5*16kB (UM) 10*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3944044kB [ 309.007259][T13328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.007275][T13328] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.007290][T13328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.007306][T13328] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.007321][T13328] 47054 total pagecache pages [ 309.007330][T13328] 0 pages in swap cache [ 309.007337][T13328] Free swap = 124996kB [ 309.007345][T13328] Total swap = 124996kB [ 309.007352][T13328] 2097051 pages RAM [ 309.007360][T13328] 0 pages HighMem/MovableOnly [ 309.007367][T13328] 434240 pages reserved [ 309.007374][T13328] 0 pages cma reserved [ 309.650264][T13338] IPVS: Unknown mcast interface: macsec0 [ 309.815075][T13344] netlink: 'syz.0.2565': attribute type 63 has an invalid length. [ 310.131062][T13354] gretap0: entered allmulticast mode [ 310.194596][T13354] syztnl1: entered allmulticast mode [ 310.194760][T13354] bond13: entered allmulticast mode [ 310.196346][T13354] bond14: entered allmulticast mode [ 310.215628][T13354] mac80211_hwsim hwsim38 wlan4: entered allmulticast mode [ 310.215835][T13354] macvlan2: entered allmulticast mode [ 310.232555][T13354] mac80211_hwsim hwsim42 wlan5: entered allmulticast mode [ 310.232724][T13354] bond15: entered allmulticast mode [ 310.233320][T13354] mac80211_hwsim hwsim43 wlan6: entered allmulticast mode [ 310.485406][T13374] netlink: 'syz.2.2574': attribute type 2 has an invalid length. [ 310.644430][T13390] netlink: 'syz.2.2574': attribute type 2 has an invalid length. [ 311.171599][T13418] ovs-dp0: entered promiscuous mode [ 311.390808][T13433] __nla_validate_parse: 20 callbacks suppressed [ 311.390831][T13433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2588'. [ 311.579317][T13446] FAULT_INJECTION: forcing a failure. [ 311.579317][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 311.579345][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.2.2595 Not tainted syzkaller #0 PREEMPT(full) [ 311.579367][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 311.579379][T13446] Call Trace: [ 311.579386][T13446] [ 311.579394][T13446] dump_stack_lvl+0xe8/0x150 [ 311.579430][T13446] should_fail_ex+0x3eb/0x540 [ 311.579459][T13446] should_failslab+0xa8/0x100 [ 311.579490][T13446] __kvmalloc_node_noprof+0x171/0x820 [ 311.579517][T13446] ? bpf_compute_postorder+0x87f/0x9a0 [ 311.579545][T13446] ? bpf_stack_liveness_init+0x29/0x90 [ 311.579568][T13446] ? bpf_stack_liveness_init+0x29/0x90 [ 311.579601][T13446] bpf_stack_liveness_init+0x29/0x90 [ 311.579627][T13446] bpf_check+0x29af/0x34e0 [ 311.579660][T13446] ? ktime_get_with_offset+0x93/0x2d0 [ 311.579688][T13446] ? ktime_get_with_offset+0x93/0x2d0 [ 311.579718][T13446] ? __pfx_bpf_check+0x10/0x10 [ 311.579742][T13446] ? bpf_obj_name_cpy+0x194/0x1e0 [ 311.579771][T13446] bpf_prog_load+0x14da/0x1c60 [ 311.579805][T13446] ? __pfx_bpf_prog_load+0x10/0x10 [ 311.579841][T13446] ? __might_fault+0xaf/0x130 [ 311.579866][T13446] __sys_bpf+0xd86/0xe00 [ 311.579902][T13446] ? __pfx___sys_bpf+0x10/0x10 [ 311.579931][T13446] ? __fget_files+0x2a/0x420 [ 311.579970][T13446] ? ksys_write+0x242/0x270 [ 311.579999][T13446] ? __pfx_ksys_write+0x10/0x10 [ 311.580032][T13446] __x64_sys_bpf+0xba/0xd0 [ 311.580061][T13446] do_syscall_64+0x166/0x520 [ 311.580081][T13446] ? trace_irq_disable+0x3b/0x140 [ 311.580107][T13446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.580124][T13446] ? clear_bhb_loop+0x70/0xc0 [ 311.580144][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.580162][T13446] RIP: 0033:0x7fa2b7d9f559 [ 311.580181][T13446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.580196][T13446] RSP: 002b:00007fa2b8bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.580216][T13446] RAX: ffffffffffffffda RBX: 00007fa2b8025fa0 RCX: 00007fa2b7d9f559 [ 311.580230][T13446] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 311.580243][T13446] RBP: 00007fa2b8bdd090 R08: 0000000000000000 R09: 0000000000000000 [ 311.580255][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.580267][T13446] R13: 00007fa2b8026038 R14: 00007fa2b8025fa0 R15: 00007fff8f61ac18 [ 311.580297][T13446] [ 311.792539][ T67] net_ratelimit: 45 callbacks suppressed [ 311.792560][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 311.875910][ T30] audit: type=1804 audit(1793453367.239:3): pid=13450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2597" name="/newroot/510/cgroup.controllers" dev="tmpfs" ino=2595 res=1 errno=0 [ 311.883648][ T30] audit: type=1800 audit(1793453367.249:4): pid=13450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2597" name="cgroup.controllers" dev="tmpfs" ino=2595 res=0 errno=-22 [ 311.898733][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 312.019707][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.115268][T13450] tipc: Enabled bearer , priority 0 [ 312.117534][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 312.283723][T13450] syzkaller0: entered promiscuous mode [ 312.283748][T13450] syzkaller0: entered allmulticast mode [ 312.289044][T13450] tipc: Resetting bearer [ 312.480122][ T9429] tipc: Resetting bearer [ 312.499202][T13448] tipc: Resetting bearer [ 312.531763][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.691916][T13480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2606'. [ 312.705826][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2605'. [ 312.856208][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2606'. [ 313.040351][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 313.550686][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 314.062969][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 314.271027][T13448] tipc: Disabling bearer [ 314.297685][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 314.447607][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 314.448483][T13501] FAULT_INJECTION: forcing a failure. [ 314.448483][T13501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.448510][T13501] CPU: 1 UID: 0 PID: 13501 Comm: syz.3.2610 Not tainted syzkaller #0 PREEMPT(full) [ 314.448543][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 314.448556][T13501] Call Trace: [ 314.448564][T13501] [ 314.448573][T13501] dump_stack_lvl+0xe8/0x150 [ 314.448610][T13501] should_fail_ex+0x3eb/0x540 [ 314.448640][T13501] prepare_alloc_pages+0x21e/0x5f0 [ 314.448672][T13501] __alloc_frozen_pages_noprof+0x17c/0x410 [ 314.448698][T13501] ? __lock_acquire+0x747/0x2de0 [ 314.448725][T13501] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 314.448756][T13501] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 314.448780][T13501] ? __get_vm_area_node+0x155/0x2f0 [ 314.448798][T13501] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 314.448823][T13501] ? policy_nodemask+0x31b/0x980 [ 314.448851][T13501] ? do_syscall_64+0x166/0x520 [ 314.448873][T13501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.448899][T13501] alloc_pages_mpol+0x21e/0x390 [ 314.448935][T13501] alloc_pages_noprof+0xb1/0x2b0 [ 314.448968][T13501] get_free_pages_noprof+0xf/0x80 [ 314.448992][T13501] __kasan_populate_vmalloc+0x38/0x1c0 [ 314.449015][T13501] ? do_raw_spin_unlock+0xf5/0x200 [ 314.449041][T13501] alloc_vmap_area+0xd10/0x1410 [ 314.449072][T13501] ? __pfx_alloc_vmap_area+0x10/0x10 [ 314.449088][T13501] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 314.449114][T13501] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 314.449139][T13501] ? __get_vm_area_node+0x155/0x2f0 [ 314.449164][T13501] __get_vm_area_node+0x200/0x2f0 [ 314.449193][T13501] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 314.449216][T13501] ? bpf_check+0x14ae/0x34e0 [ 314.449243][T13501] ? lock_acquire+0x115/0x350 [ 314.449271][T13501] ? hook_capable+0x1c3/0x5e0 [ 314.449297][T13501] ? __pfx_hook_capable+0x10/0x10 [ 314.449320][T13501] ? rcu_is_watching+0x16/0xb0 [ 314.449353][T13501] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 314.449377][T13501] ? apparmor_capable+0x126/0x170 [ 314.449403][T13501] ? bpf_lsm_capable+0x9/0x20 [ 314.449422][T13501] ? security_capable+0x7e/0x2c0 [ 314.449453][T13501] ? bpf_check+0x14ae/0x34e0 [ 314.449471][T13501] __vmalloc_noprof+0xd2/0x120 [ 314.449491][T13501] ? bpf_check+0x14ae/0x34e0 [ 314.449514][T13501] bpf_check+0x14ae/0x34e0 [ 314.449554][T13501] ? ktime_get_with_offset+0x93/0x2d0 [ 314.449582][T13501] ? ktime_get_with_offset+0x93/0x2d0 [ 314.449609][T13501] ? __pfx_bpf_check+0x10/0x10 [ 314.449633][T13501] ? bpf_obj_name_cpy+0x194/0x1e0 [ 314.449662][T13501] bpf_prog_load+0x14da/0x1c60 [ 314.449696][T13501] ? __pfx_bpf_prog_load+0x10/0x10 [ 314.449733][T13501] ? __might_fault+0xaf/0x130 [ 314.449759][T13501] __sys_bpf+0xd86/0xe00 [ 314.449785][T13501] ? __pfx___sys_bpf+0x10/0x10 [ 314.449817][T13501] ? __fget_files+0x2a/0x420 [ 314.449857][T13501] ? ksys_write+0x242/0x270 [ 314.449884][T13501] ? __pfx_ksys_write+0x10/0x10 [ 314.449913][T13501] __x64_sys_bpf+0xba/0xd0 [ 314.449942][T13501] do_syscall_64+0x166/0x520 [ 314.449962][T13501] ? trace_irq_disable+0x3b/0x140 [ 314.449988][T13501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.450008][T13501] ? clear_bhb_loop+0x70/0xc0 [ 314.450032][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.450052][T13501] RIP: 0033:0x7f233659f559 [ 314.450071][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.450089][T13501] RSP: 002b:00007f2337394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.450111][T13501] RAX: ffffffffffffffda RBX: 00007f2336826090 RCX: 00007f233659f559 [ 314.450126][T13501] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000005 [ 314.450138][T13501] RBP: 00007f2337394090 R08: 0000000000000000 R09: 0000000000000000 [ 314.450150][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.450161][T13501] R13: 00007f2336826128 R14: 00007f2336826090 R15: 00007ffcbafc2a38 [ 314.450191][T13501] [ 314.777826][T13512] ovs-dp0: left promiscuous mode [ 316.528445][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 316.887414][ T12] net_ratelimit: 26 callbacks suppressed [ 316.887438][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 316.997470][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 317.107091][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 317.137058][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 317.171321][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.227152][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 317.337693][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 317.447650][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 317.557746][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 317.647593][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 317.667586][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 321.957236][ T9429] net_ratelimit: 47 callbacks suppressed [ 321.957259][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.067324][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.177179][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.247117][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.290217][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.397254][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.507166][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.617269][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.727170][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 322.757481][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 325.487777][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.767603][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.047212][ T9429] net_ratelimit: 46 callbacks suppressed [ 327.047234][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.157224][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.267286][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.347104][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 327.387292][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.498075][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.607287][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.717181][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.827263][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 327.857189][ T1123] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 328.049361][ T11] block nbd0: Possible stuck request ffff888028690000: control (read@0,1024B). Runtime 180 seconds [ 328.049403][ T11] block nbd0: Possible stuck request ffff8880286901c0: control (read@1024,1024B). Runtime 180 seconds [ 328.049430][ T11] block nbd0: Possible stuck request ffff888028690380: control (read@2048,1024B). Runtime 180 seconds [ 328.049457][ T11] block nbd0: Possible stuck request ffff888028690540: control (read@3072,1024B). Runtime 180 seconds [ 328.212033][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.212892][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.213490][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.214404][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.215111][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.455517][T13517] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.656653][T13517] lo speed is unknown, defaulting to 1000 [ 328.830179][T13517] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.830299][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.830380][T13517] bridge_slave_0: entered allmulticast mode [ 328.831325][T13517] bridge_slave_0: entered promiscuous mode [ 328.834109][T13517] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.834210][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.834329][T13517] bridge_slave_1: entered allmulticast mode [ 328.835949][T13517] bridge_slave_1: entered promiscuous mode [ 328.900506][T13517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.903171][T13517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.941119][T13517] team0: Port device team_slave_0 added [ 328.943069][T13517] team0: Port device team_slave_1 added [ 328.968174][T13517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.968192][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.968218][T13517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.969571][T13517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.969584][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.969609][T13517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.029002][T13517] hsr_slave_0: entered promiscuous mode [ 329.032975][T13517] hsr_slave_1: entered promiscuous mode [ 329.033782][T13517] debugfs: 'hsr0' already exists in 'hsr' [ 329.033802][T13517] Cannot create hsr debugfs directory [ 330.290212][ T5641] Bluetooth: hci5: command tx timeout [ 330.336380][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.347205][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.349026][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.352853][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.353547][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.545072][ T4954] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.557046][ T5645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.568751][ T4954] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 330.581245][ T5645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.591557][ T5645] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 330.594063][ T5645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.594359][ T4954] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 330.595035][ T4954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.596705][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 330.606317][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 330.622215][ T4954] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 330.641005][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 330.653062][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 330.665584][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 330.681090][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 331.313433][T13538] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.510599][T13543] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.700714][T13542] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.722309][T13538] lo speed is unknown, defaulting to 1000 [ 331.985715][T13546] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.115265][T13543] lo speed is unknown, defaulting to 1000 [ 332.187093][ T1113] net_ratelimit: 42 callbacks suppressed [ 332.187113][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 332.207796][T13538] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.207900][T13538] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.208043][T13538] bridge_slave_0: entered allmulticast mode [ 332.216296][T13538] bridge_slave_0: entered promiscuous mode [ 332.256256][T13538] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.256431][T13538] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.256572][T13538] bridge_slave_1: entered allmulticast mode [ 332.272655][T13538] bridge_slave_1: entered promiscuous mode [ 332.343038][T13538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.367272][ T53] Bluetooth: hci5: command tx timeout [ 332.372139][T13538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.428598][T13538] team0: Port device team_slave_0 added [ 332.429189][T13542] lo speed is unknown, defaulting to 1000 [ 332.447405][ T53] Bluetooth: hci6: command tx timeout [ 332.449398][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.473757][T13538] team0: Port device team_slave_1 added [ 332.564508][T13538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.564527][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.564554][T13538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.586111][T13538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.586129][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.586157][T13538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.687278][ T53] Bluetooth: hci7: command tx timeout [ 332.687949][ T5645] Bluetooth: hci8: command tx timeout [ 332.746323][T13538] hsr_slave_0: entered promiscuous mode [ 332.753239][T13538] hsr_slave_1: entered promiscuous mode [ 332.753977][T13538] debugfs: 'hsr0' already exists in 'hsr' [ 332.753996][T13538] Cannot create hsr debugfs directory [ 332.768361][ T5645] Bluetooth: hci9: command tx timeout [ 332.790275][T13546] lo speed is unknown, defaulting to 1000 [ 332.957338][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 332.977649][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 333.134179][T13543] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.134355][T13543] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.134585][T13543] bridge_slave_0: entered allmulticast mode [ 333.135524][T13543] bridge_slave_0: entered promiscuous mode [ 333.139341][T13543] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.139442][T13543] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.139635][T13543] bridge_slave_1: entered allmulticast mode [ 333.141253][T13543] bridge_slave_1: entered promiscuous mode [ 333.236501][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.236653][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.243205][T13542] bridge_slave_0: entered allmulticast mode [ 333.244904][T13542] bridge_slave_0: entered promiscuous mode [ 333.252241][T13543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.277438][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.277609][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.277761][T13542] bridge_slave_1: entered allmulticast mode [ 333.279687][T13542] bridge_slave_1: entered promiscuous mode [ 333.319371][T13543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.390936][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.393062][T13543] team0: Port device team_slave_0 added [ 333.416270][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.419793][T13543] team0: Port device team_slave_1 added [ 333.467131][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 333.501759][T13543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.501777][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.501797][T13543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.506104][T13542] team0: Port device team_slave_0 added [ 333.558266][T13543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.558283][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.558311][T13543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.577759][T13542] team0: Port device team_slave_1 added [ 333.634940][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.634957][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.635017][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.635804][T13546] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.635999][T13546] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.636127][T13546] bridge_slave_0: entered allmulticast mode [ 333.638443][T13546] bridge_slave_0: entered promiscuous mode [ 333.655149][T13546] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.655280][T13546] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.655400][T13546] bridge_slave_1: entered allmulticast mode [ 333.659372][T13546] bridge_slave_1: entered promiscuous mode [ 333.691229][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.691247][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.691274][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.716369][T13543] hsr_slave_0: entered promiscuous mode [ 333.719880][T13543] hsr_slave_1: entered promiscuous mode [ 333.722696][T13543] debugfs: 'hsr0' already exists in 'hsr' [ 333.722717][T13543] Cannot create hsr debugfs directory [ 333.785732][T13546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.811782][T13542] hsr_slave_0: entered promiscuous mode [ 333.812785][T13542] hsr_slave_1: entered promiscuous mode [ 333.813479][T13542] debugfs: 'hsr0' already exists in 'hsr' [ 333.813497][T13542] Cannot create hsr debugfs directory [ 333.842800][T13546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.900869][T13546] team0: Port device team_slave_0 added [ 333.916348][T13546] team0: Port device team_slave_1 added [ 333.979563][T13546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.979580][T13546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.979604][T13546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.987355][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 334.060139][T13546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.060155][T13546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.060181][T13546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.128367][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 334.214412][T13546] hsr_slave_0: entered promiscuous mode [ 334.215064][T13546] hsr_slave_1: entered promiscuous mode [ 334.215513][T13546] debugfs: 'hsr0' already exists in 'hsr' [ 334.215532][T13546] Cannot create hsr debugfs directory [ 334.417300][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 334.447404][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 334.447643][ T5645] Bluetooth: hci5: command tx timeout [ 334.497209][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 334.527262][ T5645] Bluetooth: hci6: command tx timeout [ 334.767123][ T53] Bluetooth: hci7: command tx timeout [ 334.767160][ T5645] Bluetooth: hci8: command tx timeout [ 334.847104][ T53] Bluetooth: hci9: command tx timeout [ 336.527133][ T53] Bluetooth: hci5: command tx timeout [ 336.607188][ T53] Bluetooth: hci6: command tx timeout [ 336.847101][ T53] Bluetooth: hci8: command tx timeout [ 336.847137][ T53] Bluetooth: hci7: command tx timeout [ 336.927085][ T53] Bluetooth: hci9: command tx timeout [ 337.287075][ T44] net_ratelimit: 30 callbacks suppressed [ 337.287097][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 337.397103][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 337.487582][ T5003] udevd[5003]: worker [6739] /devices/virtual/block/nbd0 timeout; kill it [ 337.488366][ T5003] udevd[5003]: seq 11516 '/devices/virtual/block/nbd0' killed [ 337.513218][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 337.557666][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 337.617043][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 337.727731][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 337.837150][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 337.947153][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 338.057163][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 338.067562][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 338.687176][ T53] Bluetooth: hci6: command tx timeout [ 338.928797][ T53] Bluetooth: hci7: command tx timeout [ 338.928831][ T5645] Bluetooth: hci8: command tx timeout [ 339.007124][ T5645] Bluetooth: hci9: command tx timeout [ 342.367468][ T1123] net_ratelimit: 46 callbacks suppressed [ 342.367493][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.477150][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.587272][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.658166][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 342.697286][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.807589][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.917281][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 343.027240][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 343.137186][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 343.167203][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.437182][ T12] net_ratelimit: 46 callbacks suppressed [ 347.437205][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.547250][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.657398][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.767525][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 347.767609][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.877247][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.987227][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 348.097316][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 348.207536][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 348.277523][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 351.097227][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.497234][ T9429] net_ratelimit: 46 callbacks suppressed [ 352.497257][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.607946][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.717271][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.827327][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.877370][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 352.937366][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.047675][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.157147][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.267209][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.377224][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 357.577355][ T67] net_ratelimit: 46 callbacks suppressed [ 357.577381][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 357.687550][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 357.797234][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 357.907521][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 357.997516][ T1123] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 358.021485][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 358.128657][ T11] block nbd0: Possible stuck request ffff888028690000: control (read@0,1024B). Runtime 210 seconds [ 358.128701][ T11] block nbd0: Possible stuck request ffff8880286901c0: control (read@1024,1024B). Runtime 210 seconds [ 358.128727][ T11] block nbd0: Possible stuck request ffff888028690380: control (read@2048,1024B). Runtime 210 seconds [ 358.128751][ T11] block nbd0: Possible stuck request ffff888028690540: control (read@3072,1024B). Runtime 210 seconds [ 358.131501][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 358.237090][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 358.347190][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 358.457233][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 360.049066][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 361.967233][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 362.587246][ T160] net_ratelimit: 45 callbacks suppressed [ 362.587268][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 362.647279][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 362.757310][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 362.867244][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 362.977341][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.087374][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.099350][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 363.197260][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.307304][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.417280][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 367.607275][ T12] net_ratelimit: 46 callbacks suppressed [ 367.607299][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 367.697646][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 367.721568][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 367.827128][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 367.937141][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.047082][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.157077][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.209450][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 368.267174][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.377151][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 372.667184][ T9429] net_ratelimit: 46 callbacks suppressed [ 372.667208][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 372.777549][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 372.797086][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 372.887155][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 372.997279][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 373.107563][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 373.217156][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 373.307220][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 373.337866][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 373.447364][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 377.757157][ T9429] net_ratelimit: 46 callbacks suppressed [ 377.757180][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 377.867247][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 377.907140][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 377.977214][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.087325][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.197070][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.307245][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.427209][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.427320][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 378.537210][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.609009][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.837312][ T9429] net_ratelimit: 46 callbacks suppressed [ 382.837337][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 382.947265][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.037102][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 383.067204][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.177100][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.287183][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.397222][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.507440][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.547335][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 383.617416][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 387.937376][ T44] net_ratelimit: 46 callbacks suppressed [ 387.937397][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.047382][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.137091][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.161466][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.215944][ T11] block nbd0: Possible stuck request ffff888028690000: control (read@0,1024B). Runtime 240 seconds [ 388.215991][ T11] block nbd0: Possible stuck request ffff8880286901c0: control (read@1024,1024B). Runtime 240 seconds [ 388.216019][ T11] block nbd0: Possible stuck request ffff888028690380: control (read@2048,1024B). Runtime 240 seconds [ 388.216044][ T11] block nbd0: Possible stuck request ffff888028690540: control (read@3072,1024B). Runtime 240 seconds [ 388.267234][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.306851][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 388.308997][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 388.309978][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 388.311104][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 388.311678][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 388.377896][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.487676][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.557283][T13612] rxe_eth0 speed is unknown, defaulting to 1000 [ 388.597418][ T12] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.657346][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.707410][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.774889][T13612] lo speed is unknown, defaulting to 1000 [ 389.069574][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.069806][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.070234][T13612] bridge_slave_0: entered allmulticast mode [ 389.071944][T13612] bridge_slave_0: entered promiscuous mode [ 389.076170][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.076332][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.076464][T13612] bridge_slave_1: entered allmulticast mode [ 389.078707][T13612] bridge_slave_1: entered promiscuous mode [ 389.110900][T13612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.114285][T13612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.143908][T13612] team0: Port device team_slave_0 added [ 389.147894][T13612] team0: Port device team_slave_1 added [ 389.179047][T13612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.179065][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.179092][T13612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.181357][T13612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.181374][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.181408][T13612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.244674][T13612] hsr_slave_0: entered promiscuous mode [ 389.251140][T13612] hsr_slave_1: entered promiscuous mode [ 389.253493][T13612] debugfs: 'hsr0' already exists in 'hsr' [ 389.253514][T13612] Cannot create hsr debugfs directory [ 390.369212][ T5645] Bluetooth: hci10: command tx timeout [ 390.380870][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 390.386677][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 390.394701][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 390.396715][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 390.397837][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 390.458427][ T5645] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 390.460535][ T5645] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 390.463674][ T5645] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 390.465554][ T5645] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 390.466126][ T5645] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 390.790167][T13631] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.948820][T13634] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.147533][T13631] lo speed is unknown, defaulting to 1000 [ 391.363050][T13634] lo speed is unknown, defaulting to 1000 [ 391.559444][ T5645] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 391.562147][ T5645] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 391.563217][ T5645] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 391.564386][ T5645] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 391.565032][ T5645] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 391.678685][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 391.680919][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 391.681619][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 391.682539][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 391.683203][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 391.806788][T13631] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.807185][T13631] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.807322][T13631] bridge_slave_0: entered allmulticast mode [ 391.809593][T13631] bridge_slave_0: entered promiscuous mode [ 391.819758][T13631] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.820210][T13631] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.820341][T13631] bridge_slave_1: entered allmulticast mode [ 391.821901][T13631] bridge_slave_1: entered promiscuous mode [ 391.902926][T13631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.924520][T13631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.003459][T13631] team0: Port device team_slave_0 added [ 392.010947][T13631] team0: Port device team_slave_1 added [ 392.097140][T13631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.097157][T13631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.097183][T13631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.177437][T13631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.177457][T13631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.177483][T13631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.323746][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.325472][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.325606][T13634] bridge_slave_0: entered allmulticast mode [ 392.329804][T13634] bridge_slave_0: entered promiscuous mode [ 392.353214][T13631] hsr_slave_0: entered promiscuous mode [ 392.357894][T13631] hsr_slave_1: entered promiscuous mode [ 392.360943][T13631] debugfs: 'hsr0' already exists in 'hsr' [ 392.360967][T13631] Cannot create hsr debugfs directory [ 392.361444][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.361545][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.361990][T13634] bridge_slave_1: entered allmulticast mode [ 392.368603][T13634] bridge_slave_1: entered promiscuous mode [ 392.448852][ T53] Bluetooth: hci11: command tx timeout [ 392.451189][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.457436][ T53] Bluetooth: hci10: command tx timeout [ 392.498540][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.537499][T13664] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.569851][T13634] team0: Port device team_slave_0 added [ 392.595175][T13634] team0: Port device team_slave_1 added [ 392.607282][ T53] Bluetooth: hci12: command tx timeout [ 392.674367][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.674385][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.674410][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.691641][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.691660][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.691688][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.791876][T13634] hsr_slave_0: entered promiscuous mode [ 392.792931][T13634] hsr_slave_1: entered promiscuous mode [ 392.793653][T13634] debugfs: 'hsr0' already exists in 'hsr' [ 392.793671][T13634] Cannot create hsr debugfs directory [ 392.871923][T13658] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.137177][ T44] net_ratelimit: 29 callbacks suppressed [ 393.137198][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 393.227096][T13664] lo speed is unknown, defaulting to 1000 [ 393.257622][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.457160][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 393.466576][T13658] lo speed is unknown, defaulting to 1000 [ 393.647321][ T53] Bluetooth: hci13: command tx timeout [ 393.724252][T13664] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.724363][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.724650][T13664] bridge_slave_0: entered allmulticast mode [ 393.728636][ T53] Bluetooth: hci14: command tx timeout [ 393.729488][T13664] bridge_slave_0: entered promiscuous mode [ 393.734405][T13664] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.737329][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.737748][T13664] bridge_slave_1: entered allmulticast mode [ 393.741551][T13664] bridge_slave_1: entered promiscuous mode [ 393.795996][ T67] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.830932][T13664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.852447][T13664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.911677][T13664] team0: Port device team_slave_0 added [ 393.936059][T13664] team0: Port device team_slave_1 added [ 393.987236][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.987358][T13658] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.987761][T13658] bridge_slave_0: entered allmulticast mode [ 393.989165][T13658] bridge_slave_0: entered promiscuous mode [ 393.992654][T13664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.992671][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.992696][T13664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.995001][T13664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.995014][T13664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.995040][T13664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.011627][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.011776][T13658] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.011934][T13658] bridge_slave_1: entered allmulticast mode [ 394.013694][T13658] bridge_slave_1: entered promiscuous mode [ 394.081352][T13658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.113848][T13658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.121737][T13664] hsr_slave_0: entered promiscuous mode [ 394.123408][T13664] hsr_slave_1: entered promiscuous mode [ 394.124153][T13664] debugfs: 'hsr0' already exists in 'hsr' [ 394.124172][T13664] Cannot create hsr debugfs directory [ 394.176965][T13658] team0: Port device team_slave_0 added [ 394.185214][T13658] team0: Port device team_slave_1 added [ 394.231833][T13658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.231850][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.231873][T13658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.239044][T13658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.239061][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.239087][T13658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.315721][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.350185][T13658] hsr_slave_0: entered promiscuous mode [ 394.350819][T13658] hsr_slave_1: entered promiscuous mode [ 394.351230][T13658] debugfs: 'hsr0' already exists in 'hsr' [ 394.351250][T13658] Cannot create hsr debugfs directory [ 394.507869][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 394.528053][ T53] Bluetooth: hci10: command tx timeout [ 394.528092][ T53] Bluetooth: hci11: command tx timeout [ 394.621094][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 394.687134][ T5645] Bluetooth: hci12: command tx timeout [ 394.727409][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 394.827206][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.877066][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 395.727125][ T5645] Bluetooth: hci13: command tx timeout [ 395.807117][ T5645] Bluetooth: hci14: command tx timeout [ 396.607158][ T5645] Bluetooth: hci11: command tx timeout [ 396.607193][ T5645] Bluetooth: hci10: command tx timeout [ 396.767126][ T53] Bluetooth: hci12: command tx timeout [ 397.807168][ T53] Bluetooth: hci13: command tx timeout [ 397.897209][ T53] Bluetooth: hci14: command tx timeout [ 398.177135][ T160] net_ratelimit: 35 callbacks suppressed [ 398.177161][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.287233][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.397104][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.407543][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 398.507161][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.617070][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.687135][ T53] Bluetooth: hci11: command tx timeout [ 398.727910][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.837222][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 398.850244][ T53] Bluetooth: hci12: command tx timeout [ 398.917148][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 398.947502][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 399.887305][ T53] Bluetooth: hci13: command tx timeout [ 399.967189][ T53] Bluetooth: hci14: command tx timeout [ 403.268118][ T9429] net_ratelimit: 46 callbacks suppressed [ 403.268144][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.377319][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.488192][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.517409][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 403.597670][ T67] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.707937][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.817299][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.928579][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 404.027205][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 404.041371][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.347160][ T160] net_ratelimit: 46 callbacks suppressed [ 408.347183][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.457073][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.567108][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.617372][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 408.677159][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.787199][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.897408][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 409.007474][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 409.117356][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 409.128533][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.417176][ T1123] net_ratelimit: 46 callbacks suppressed [ 413.417200][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.527195][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.637241][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.730644][ T141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.751560][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.857223][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.967457][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 414.077268][ T141] bond10: (slave syz_tun): failed to get link speed/duplex [ 414.187417][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 414.237523][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 418.287558][ T11] block nbd0: Possible stuck request ffff888028690000: control (read@0,1024B). Runtime 270 seconds [ 418.287600][ T11] block nbd0: Possible stuck request ffff8880286901c0: control (read@1024,1024B). Runtime 270 seconds [ 418.287627][ T11] block nbd0: Possible stuck request ffff888028690380: control (read@2048,1024B). Runtime 270 seconds [ 418.287652][ T11] block nbd0: Possible stuck request ffff888028690540: control (read@3072,1024B). Runtime 270 seconds [ 418.487212][ T44] net_ratelimit: 46 callbacks suppressed [ 418.487238][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 418.607676][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 418.717281][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 418.827270][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 418.827397][ T1123] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 418.937252][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 419.047294][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 419.167438][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 419.277904][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 419.338349][ T141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 419.577141][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 423.577235][ T44] net_ratelimit: 46 callbacks suppressed [ 423.577259][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 423.687204][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 423.797271][ T141] bond10: (slave syz_tun): failed to get link speed/duplex [ 423.907377][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 423.937367][ T141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 424.017291][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 424.127647][ T141] bond10: (slave syz_tun): failed to get link speed/duplex [ 424.237327][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 424.347459][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 424.447713][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 428.657983][ T141] net_ratelimit: 46 callbacks suppressed [ 428.658023][ T141] bond10: (slave syz_tun): failed to get link speed/duplex [ 428.767782][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 428.878798][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 428.987743][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 429.047546][ T141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 429.097629][ T141] bond10: (slave syz_tun): failed to get link speed/duplex [ 429.207951][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 429.317471][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 429.427874][ T141] bond10: (slave syz_tun): failed to get link speed/duplex [ 429.537673][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 429.807696][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.667558][ T44] net_ratelimit: 45 callbacks suppressed [ 433.667581][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 433.777650][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 433.887870][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 433.997567][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 434.107475][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 434.147255][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 434.217291][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 434.327640][ T43] bond10: (slave syz_tun): failed to get link speed/duplex [ 434.437210][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 434.547346][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 434.927626][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 438.727679][ T1123] net_ratelimit: 46 callbacks suppressed [ 438.727703][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 438.737332][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 438.847333][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 438.957256][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 439.067333][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 439.177249][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 439.248096][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 439.287133][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 439.397278][ T1123] bond10: (slave syz_tun): failed to get link speed/duplex [ 439.507379][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 440.048844][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.807997][ T9429] net_ratelimit: 46 callbacks suppressed [ 443.808018][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 443.848013][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 443.917487][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 444.027510][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 444.137505][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 444.247524][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 444.357460][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 444.357770][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 444.467515][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 444.577513][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 448.367496][ T11] block nbd0: Possible stuck request ffff888028690000: control (read@0,1024B). Runtime 300 seconds [ 448.367539][ T11] block nbd0: Possible stuck request ffff8880286901c0: control (read@1024,1024B). Runtime 300 seconds [ 448.367566][ T11] block nbd0: Possible stuck request ffff888028690380: control (read@2048,1024B). Runtime 300 seconds [ 448.367589][ T11] block nbd0: Possible stuck request ffff888028690540: control (read@3072,1024B). Runtime 300 seconds [ 448.897695][ T62] net_ratelimit: 46 callbacks suppressed [ 448.897715][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 448.951196][ T5645] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 448.952439][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 448.955678][ T5645] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 448.956320][ T5645] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 448.966632][ T5645] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 448.980339][ T5645] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 449.014725][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 449.127190][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 449.237882][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 449.246385][T13706] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.349351][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 449.468036][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 449.468735][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 449.481138][T13706] lo speed is unknown, defaulting to 1000 [ 449.577341][ T62] bond10: (slave syz_tun): failed to get link speed/duplex [ 449.684854][T13706] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.684963][T13706] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.685226][T13706] bridge_slave_0: entered allmulticast mode [ 449.686147][T13706] bridge_slave_0: entered promiscuous mode [ 449.688976][T13706] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.689078][T13706] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.689204][T13706] bridge_slave_1: entered allmulticast mode [ 449.690962][T13706] bridge_slave_1: entered promiscuous mode [ 449.735054][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.742483][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.786043][T13706] team0: Port device team_slave_0 added [ 449.789818][T13706] team0: Port device team_slave_1 added [ 449.818353][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.818370][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.818396][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.819581][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.819594][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.819620][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.862674][T13706] hsr_slave_0: entered promiscuous mode [ 449.864245][T13706] hsr_slave_1: entered promiscuous mode [ 449.865043][T13706] debugfs: 'hsr0' already exists in 'hsr' [ 449.865063][T13706] Cannot create hsr debugfs directory [ 449.977314][ T1113] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 450.539468][ T5641] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 450.542033][ T5641] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 450.542743][ T5641] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 450.544455][ T5641] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 450.546512][ T5641] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 450.723925][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 450.726200][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 450.735616][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 450.736982][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 450.737693][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 451.012451][ T53] Bluetooth: hci15: command tx timeout [ 451.054342][T13725] rxe_eth0 speed is unknown, defaulting to 1000 [ 451.226281][T13730] rxe_eth0 speed is unknown, defaulting to 1000 [ 451.499948][T13725] lo speed is unknown, defaulting to 1000 [ 451.572529][ T5641] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 451.573871][ T5641] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 451.574954][ T5641] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 451.576290][ T5641] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 451.586095][ T5641] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 451.908036][T13730] lo speed is unknown, defaulting to 1000 [ 452.181215][ T5641] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 452.184239][ T5641] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 452.184940][ T5641] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 452.186340][ T5641] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 452.189041][ T5641] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 452.367184][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 452.405717][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.405814][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.405972][T13725] bridge_slave_0: entered allmulticast mode [ 452.411599][T13725] bridge_slave_0: entered promiscuous mode [ 452.421980][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.422085][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.422245][T13725] bridge_slave_1: entered allmulticast mode [ 452.427405][T13725] bridge_slave_1: entered promiscuous mode [ 452.515347][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.528355][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.610183][T13725] team0: Port device team_slave_0 added [ 452.610683][T13746] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.613104][T13725] team0: Port device team_slave_1 added [ 452.613296][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.613400][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.613535][T13730] bridge_slave_0: entered allmulticast mode [ 452.636332][T13730] bridge_slave_0: entered promiscuous mode [ 452.668769][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.668883][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.669309][T13730] bridge_slave_1: entered allmulticast mode [ 452.672473][T13730] bridge_slave_1: entered promiscuous mode [ 452.702595][ T5645] Bluetooth: hci16: command tx timeout [ 452.767204][ T5645] Bluetooth: hci17: command tx timeout [ 452.812209][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.812944][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.812957][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.812984][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.883867][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.919671][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.919690][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.919718][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.997142][T13730] team0: Port device team_slave_0 added [ 453.000031][T13730] team0: Port device team_slave_1 added [ 453.070373][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.070392][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.070442][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.118553][ T5645] Bluetooth: hci15: command tx timeout [ 453.153530][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.153548][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.153574][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.167429][T13725] hsr_slave_0: entered promiscuous mode [ 453.170030][T13725] hsr_slave_1: entered promiscuous mode [ 453.172273][T13725] debugfs: 'hsr0' already exists in 'hsr' [ 453.172292][T13725] Cannot create hsr debugfs directory [ 453.190366][T13762] rxe_eth0 speed is unknown, defaulting to 1000 [ 453.352865][T13730] hsr_slave_0: entered promiscuous mode [ 453.355507][T13730] hsr_slave_1: entered promiscuous mode [ 453.356252][T13730] debugfs: 'hsr0' already exists in 'hsr' [ 453.356270][T13730] Cannot create hsr debugfs directory [ 453.433261][T13746] lo speed is unknown, defaulting to 1000 [ 453.647269][ T5645] Bluetooth: hci18: command tx timeout [ 453.797039][T13762] lo speed is unknown, defaulting to 1000 [ 453.947001][ T160] net_ratelimit: 24 callbacks suppressed [ 453.947022][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 454.068189][ T44] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 454.183386][T13746] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.183448][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.183551][T13746] bridge_slave_0: entered allmulticast mode [ 454.184499][T13746] bridge_slave_0: entered promiscuous mode [ 454.239777][T13746] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.239896][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.240066][T13746] bridge_slave_1: entered allmulticast mode [ 454.243761][T13746] bridge_slave_1: entered promiscuous mode [ 454.298071][ T5645] Bluetooth: hci19: command tx timeout [ 454.308137][T13746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.311441][T13746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.360564][T13762] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.360725][T13762] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.360871][T13762] bridge_slave_0: entered allmulticast mode [ 454.362500][T13762] bridge_slave_0: entered promiscuous mode [ 454.365499][T13762] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.365601][T13762] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.365749][T13762] bridge_slave_1: entered allmulticast mode [ 454.367552][T13762] bridge_slave_1: entered promiscuous mode [ 454.420859][T13746] team0: Port device team_slave_0 added [ 454.444678][T13746] team0: Port device team_slave_1 added [ 454.453024][T13762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.470792][T13762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.510553][T13746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.510572][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.510598][T13746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.531684][T13762] team0: Port device team_slave_0 added [ 454.534606][T13746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.534623][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.534650][T13746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.565228][T13762] team0: Port device team_slave_1 added [ 454.600209][ T160] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 454.638736][T13762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.638754][T13762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.638785][T13762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.652419][T13762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.652437][T13762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.652463][T13762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.702539][T13746] hsr_slave_0: entered promiscuous mode [ 454.705158][T13746] hsr_slave_1: entered promiscuous mode [ 454.705854][T13746] debugfs: 'hsr0' already exists in 'hsr' [ 454.705873][T13746] Cannot create hsr debugfs directory [ 454.708529][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 454.777547][ T5645] Bluetooth: hci16: command tx timeout [ 454.791575][T13762] hsr_slave_0: entered promiscuous mode [ 454.792792][T13762] hsr_slave_1: entered promiscuous mode [ 454.793763][T13762] debugfs: 'hsr0' already exists in 'hsr' [ 454.793782][T13762] Cannot create hsr debugfs directory [ 454.817411][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 454.847167][ T53] Bluetooth: hci17: command tx timeout [ 454.957469][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 455.118762][ T43] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 455.143002][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 455.168608][ T53] Bluetooth: hci15: command tx timeout [ 455.248963][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 455.357249][ T1113] bond10: (slave syz_tun): failed to get link speed/duplex [ 455.727392][T13796] Bluetooth: hci18: command tx timeout [ 456.368671][T13796] Bluetooth: hci19: command tx timeout [ 456.847185][T13796] Bluetooth: hci16: command tx timeout [ 456.927199][T13796] Bluetooth: hci17: command tx timeout [ 457.247334][T13796] Bluetooth: hci15: command tx timeout [ 457.499927][T13796] Bluetooth: hci8: command 0x0406 tx timeout [ 457.499973][T13796] Bluetooth: hci9: command 0x0406 tx timeout [ 457.499996][T13796] Bluetooth: hci6: command 0x0406 tx timeout [ 457.500018][T13796] Bluetooth: hci7: command 0x0406 tx timeout [ 457.807206][ T5641] Bluetooth: hci18: command tx timeout [ 458.447169][ T5641] Bluetooth: hci19: command tx timeout [ 458.927196][ T5641] Bluetooth: hci16: command tx timeout [ 459.007612][ T5641] Bluetooth: hci17: command tx timeout [ 459.007893][ T9429] net_ratelimit: 39 callbacks suppressed [ 459.007909][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.117324][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.197284][ T43] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 459.227529][ T43] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.337454][ T43] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.447487][ T9429] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.557339][ T160] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.667587][ T44] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.707226][ T9429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 459.777518][ T43] bond10: (slave syz_tun): failed to get link speed/duplex [ 459.887785][ T5641] Bluetooth: hci18: command tx timeout [ 460.527870][ T5641] Bluetooth: hci19: command tx timeout [ 461.167491][ T32] INFO: tas ** replaying previous printk message ** [ 461.167491][ T32] INFO: task syz.0.2606:13492 blocked for more than 143 seconds. [ 461.167517][ T32] Not tainted syzkaller #0 [ 461.167529][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.167538][ T32] task:syz.0.2606 state:D stack:25760 pid:13492 tgid:13478 ppid:5637 task_flags:0x480140 flags:0x00080002 [ 461.167607][ T32] Call Trace: [ 461.167615][ T32] [ 461.167628][ T32] __schedule+0x17dd/0x5830 [ 461.167657][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.167698][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 461.167737][ T32] ? __pfx___schedule+0x10/0x10 [ 461.167756][ T32] ? lock_acquire+0x115/0x350 [ 461.167791][ T32] ? schedule+0x90/0x2b0 [ 461.167816][ T32] schedule+0x164/0x2b0 [ 461.167838][ T32] blk_mq_freeze_queue_wait+0xfc/0x180 [ 461.167864][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 461.167890][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 461.167934][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 461.167970][ T32] nbd_set_size+0x4c5/0x7d0 [ 461.167993][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 461.168036][ T32] ? nla_memcpy+0x5b/0xc0 [ 461.168074][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 461.168118][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 461.168160][ T32] ? __kmalloc_noprof+0x387/0x710 [ 461.168186][ T32] ? __nla_parse+0x40/0x60 [ 461.168219][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 461.168252][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 461.168287][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.168322][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.168358][ T32] genl_rcv_msg+0x614/0x7a0 [ 461.168390][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.168411][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 461.168448][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.168475][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.168497][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.168533][ T32] ? down_read+0x2b9/0x320 [ 461.168562][ T32] genl_rcv+0x28/0x40 [ 461.168580][ T32] netlink_unicast+0x8ef/0xa80 [ 461.168617][ T32] netlink_sendmsg+0x7f0/0xb20 [ 461.168644][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.168661][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 461.168676][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.170171][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.170188][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 461.170206][ T32] ____sys_sendmsg+0x54e/0x850 [ 461.170221][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.170238][ T32] ? import_iovec+0x73/0xa0 [ 461.170254][ T32] ___sys_sendmsg+0x2a5/0x360 [ 461.170265][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.170282][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.170295][ T32] ? futex_wait+0x2a2/0x390 [ 461.170326][ T32] ? __fget_files+0x3a2/0x420 [ 461.170339][ T32] ? __fget_files+0x2a/0x420 [ 461.170357][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 461.170371][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.170395][ T32] do_syscall_64+0x166/0x520 [ 461.170423][ T32] ? trace_irq_disable+0x3b/0x140 [ 461.170440][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.170451][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.170465][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.170482][ T32] RIP: 0033:0x7fd5df79f559 [ 461.170494][ T32] RSP: 002b:00007fd5e065b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.170506][ T32] RAX: ffffffffffffffda RBX: 00007fd5dfa26360 RCX: 00007fd5df79f559 [ 461.170514][ T32] RDX: 0000000000004004 RSI: 0000200000000a80 RDI: 000000000000000a [ 461.170522][ T32] RBP: 00007fd5df836b50 R08: 0000000000000000 R09: 0000000000000000 [ 461.170529][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.170535][ T32] R13: 00007fd5dfa263f8 R14: 00007fd5dfa26360 R15: 00007ffe50707778 [ 461.170554][ T32] [ 461.170561][ T32] INFO: task syz.3.2610:13499 blocked for more than 143 seconds. [ 461.170570][ T32] Not tainted syzkaller #0 [ 461.170576][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.170581][ T32] task:syz.3.2610 state:D stack:24904 pid:13499 tgid:13498 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 461.170612][ T32] Call Trace: [ 461.170616][ T32] [ 461.170623][ T32] __schedule+0x17dd/0x5830 [ 461.170654][ T32] ? __pfx___schedule+0x10/0x10 [ 461.170670][ T32] ? schedule+0x90/0x2b0 [ 461.170683][ T32] schedule+0x164/0x2b0 [ 461.170695][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.170706][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.170721][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.170736][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 461.170749][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.170762][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 461.170781][ T32] ? radix_tree_lookup+0x240/0x290 [ 461.170794][ T32] genl_rcv_msg+0x10b/0x7a0 [ 461.170809][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.170830][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.170846][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.170858][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.170882][ T32] ? down_read+0x2b9/0x320 [ 461.170897][ T32] genl_rcv+0x28/0x40 [ 461.170908][ T32] netlink_unicast+0x8ef/0xa80 [ 461.170931][ T32] netlink_sendmsg+0x7f0/0xb20 [ 461.170950][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.170967][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 461.170981][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.170998][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.171012][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 461.171028][ T32] __sys_sendto+0x408/0x5a0 [ 461.171049][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 461.171081][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 461.171098][ T32] __x64_sys_sendto+0xde/0x100 [ 461.171116][ T32] do_syscall_64+0x166/0x520 [ 461.171133][ T32] ? trace_irq_disable+0x3b/0x140 [ 461.171148][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.171159][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.171172][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.171183][ T32] RIP: 0033:0x7f233655fd8e [ 461.171193][ T32] RSP: 002b:00007f23373b3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.171203][ T32] RAX: ffffffffffffffda RBX: 00007f23373b56c0 RCX: 00007f233655fd8e [ 461.171211][ T32] RDX: 0000000000000020 RSI: 00007f23373b4000 RDI: 0000000000000007 [ 461.171218][ T32] RBP: 0000000000000000 R08: 00007f23373b3f04 R09: 000000000000000c [ 461.171225][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 461.171232][ T32] R13: 00007f23373b3f58 R14: 00007f23373b4000 R15: 0000000000000000 [ 461.171257][ T32] [ 461.171262][ T32] INFO: task syz.4.2611:13502 blocked for more than 143 seconds. [ 461.171270][ T32] Not tainted syzkaller #0 [ 461.171276][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.171281][ T32] task:syz.4.2611 state:D stack:26544 pid:13502 tgid:13500 ppid:5652 task_flags:0x400140 flags:0x00080002 [ 461.171312][ T32] Call Trace: [ 461.171316][ T32] [ 461.171323][ T32] __schedule+0x17dd/0x5830 [ 461.171350][ T32] ? __pfx___schedule+0x10/0x10 [ 461.171367][ T32] ? schedule+0x90/0x2b0 [ 461.171380][ T32] schedule+0x164/0x2b0 [ 461.171393][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.171404][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.171418][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.171434][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 461.171446][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.171460][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 461.171478][ T32] ? radix_tree_lookup+0x240/0x290 [ 461.171492][ T32] genl_rcv_msg+0x10b/0x7a0 [ 461.171507][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.171528][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.171543][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.171555][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.171579][ T32] ? down_read+0x2b9/0x320 [ 461.171595][ T32] genl_rcv+0x28/0x40 [ 461.171605][ T32] netlink_unicast+0x8ef/0xa80 [ 461.171631][ T32] netlink_sendmsg+0x7f0/0xb20 [ 461.171650][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.171667][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 461.171681][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.171697][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.171712][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 461.171727][ T32] __sys_sendto+0x408/0x5a0 [ 461.171747][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 461.171779][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 461.171795][ T32] __x64_sys_sendto+0xde/0x100 [ 461.171813][ T32] do_syscall_64+0x166/0x520 [ 461.171824][ T32] ? trace_irq_disable+0x3b/0x140 [ 461.171838][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.173106][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.173122][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.173137][ T32] RIP: 0033:0x7f7715d5fd8e [ 461.173146][ T32] RSP: 002b:00007f7716c8fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.173157][ T32] RAX: ffffffffffffffda RBX: 00007f7716c916c0 RCX: 00007f7715d5fd8e [ 461.173165][ T32] RDX: 0000000000000020 RSI: 00007f7716c90000 RDI: 0000000000000004 [ 461.173172][ T32] RBP: 0000000000000000 R08: 00007f7716c8ff04 R09: 000000000000000c [ 461.173179][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 461.173186][ T32] R13: 00007f7716c8ff58 R14: 00007f7716c90000 R15: 0000000000000000 [ 461.173203][ T32] [ 461.173208][ T32] INFO: task syz.4.2611:13505 blocked for more than 143 seconds. [ 461.173216][ T32] Not tainted syzkaller #0 [ 461.173221][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.173226][ T32] task:syz.4.2611 state:D stack:27168 pid:13505 tgid:13500 ppid:5652 task_flags:0x400140 flags:0x00080002 [ 461.173258][ T32] Call Trace: [ 461.173262][ T32] [ 461.173268][ T32] __schedule+0x17dd/0x5830 [ 461.173310][ T32] ? __pfx___schedule+0x10/0x10 [ 461.173327][ T32] ? schedule+0x90/0x2b0 [ 461.173340][ T32] schedule+0x164/0x2b0 [ 461.173352][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.173364][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.173378][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.173394][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 461.173406][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.173419][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 461.173438][ T32] ? radix_tree_lookup+0x240/0x290 [ 461.173451][ T32] genl_rcv_msg+0x10b/0x7a0 [ 461.173467][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.173488][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.173503][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.173516][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.173539][ T32] ? down_read+0x2b9/0x320 [ 461.173555][ T32] genl_rcv+0x28/0x40 [ 461.173565][ T32] netlink_unicast+0x8ef/0xa80 [ 461.173589][ T32] netlink_sendmsg+0x7f0/0xb20 [ 461.173607][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.173625][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 461.173641][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.173657][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.173672][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 461.173687][ T32] __sys_sendto+0x408/0x5a0 [ 461.173707][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 461.173737][ T32] ? fd_install+0x95/0x4e0 [ 461.173754][ T32] __x64_sys_sendto+0xde/0x100 [ 461.173772][ T32] do_syscall_64+0x166/0x520 [ 461.173784][ T32] ? trace_irq_disable+0x3b/0x140 [ 461.173798][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.173808][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.173822][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.173832][ T32] RIP: 0033:0x7f7715d5fd8e [ 461.173841][ T32] RSP: 002b:00007f7716c6ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.173852][ T32] RAX: ffffffffffffffda RBX: 00007f7716c706c0 RCX: 00007f7715d5fd8e [ 461.173859][ T32] RDX: 0000000000000020 RSI: 00007f7716c6f000 RDI: 0000000000000007 [ 461.173866][ T32] RBP: 0000000000000000 R08: 00007f7716c6ef04 R09: 000000000000000c [ 461.173873][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 461.173880][ T32] R13: 00007f7716c6ef58 R14: 00007f7716c6f000 R15: 0000000000000000 [ 461.173897][ T32] [ 461.173902][ T32] INFO: task syz.1.2612:13504 blocked for more than 143 seconds. [ 461.173909][ T32] Not tainted syzkaller #0 [ 461.173915][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.173919][ T32] task:syz.1.2612 state:D stack:26832 pid:13504 tgid:13503 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 461.173950][ T32] Call Trace: [ 461.173954][ T32] [ 461.173960][ T32] __schedule+0x17dd/0x5830 [ 461.173980][ T32] ? __pfx___css_rstat_updated+0x10/0x10 [ 461.174002][ T32] ? __pfx___schedule+0x10/0x10 [ 461.174018][ T32] ? schedule+0x90/0x2b0 [ 461.174031][ T32] schedule+0x164/0x2b0 [ 461.174043][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.174054][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.174069][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.174084][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 461.174096][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.174112][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.174133][ T32] ? radix_tree_lookup+0x240/0x290 [ 461.174146][ T32] genl_rcv_msg+0x10b/0x7a0 [ 461.174161][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.174182][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.174197][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.174210][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.174233][ T32] ? down_read+0x2b9/0x320 [ 461.174248][ T32] genl_rcv+0x28/0x40 [ 461.174258][ T32] netlink_unicast+0x8ef/0xa80 [ 461.174282][ T32] netlink_sendmsg+0x7f0/0xb20 [ 461.174300][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.174317][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 461.174331][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.174347][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.174361][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 461.174377][ T32] __sys_sendto+0x408/0x5a0 [ 461.174396][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 461.174428][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 461.174444][ T32] __x64_sys_sendto+0xde/0x100 [ 461.174462][ T32] do_syscall_64+0x166/0x520 [ 461.174474][ T32] ? trace_irq_disable+0x3b/0x140 [ 461.174488][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.174498][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.174512][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.174522][ T32] RIP: 0033:0x7fc717d5fd8e [ 461.174531][ T32] RSP: 002b:00007fc718d4ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.174541][ T32] RAX: ffffffffffffffda RBX: 00007fc718d4e6c0 RCX: 00007fc717d5fd8e [ 461.174548][ T32] RDX: 0000000000000024 RSI: 00007fc718d4d000 RDI: 0000000000000006 [ 461.174555][ T32] RBP: 0000000000000000 R08: 00007fc718d4cf04 R09: 000000000000000c [ 461.174562][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 461.174568][ T32] R13: 00007fc718d4cf58 R14: 00007fc718d4d000 R15: 0000000000000000 [ 461.174585][ T32] [ 461.174590][ T32] INFO: task syz.2.2616:13514 blocked for more than 143 seconds. [ 461.174598][ T32] Not tainted syzkaller #0 [ 461.174603][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.174608][ T32] task:syz.2.2616 state:D stack:27656 pid:13514 tgid:13513 ppid:5636 task_flags:0x400140 flags:0x00080002 [ 461.174640][ T32] Call Trace: [ 461.174644][ T32] [ 461.174651][ T32] __schedule+0x17dd/0x5830 [ 461.174678][ T32] ? __pfx___schedule+0x10/0x10 [ 461.174695][ T32] ? schedule+0x90/0x2b0 [ 461.174708][ T32] schedule+0x164/0x2b0 [ 461.174724][ T32] schedule_preempt_disabled+0x13/0x30 [ 461.174734][ T32] __mutex_lock+0x7c4/0x15a0 [ 461.174749][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 461.174764][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 461.174777][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 461.174793][ T32] ? __lock_acquire+0x747/0x2de0 [ 461.174809][ T32] ? radix_tree_lookup+0x240/0x290 [ 461.174822][ T32] genl_rcv_msg+0x10b/0x7a0 [ 461.174837][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.174857][ T32] netlink_rcv_skb+0x226/0x4a0 [ 461.174873][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.174885][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.174909][ T32] ? down_read+0x2b9/0x320 [ 461.174924][ T32] genl_rcv+0x28/0x40 [ 461.174935][ T32] netlink_unicast+0x8ef/0xa80 [ 461.174958][ T32] netlink_sendmsg+0x7f0/0xb20 [ 461.174977][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.174994][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 461.175008][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 461.175024][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.175038][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 461.175054][ T32] __sys_sendto+0x408/0x5a0 [ 461.175073][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 461.175105][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 461.175122][ T32] __x64_sys_sendto+0xde/0x100 [ 461.175144][ T32] do_syscall_64+0x166/0x520 [ 461.175155][ T32] ? trace_irq_disable+0x3b/0x140 [ 461.175169][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.175180][ T32] ? clear_bhb_loop+0x70/0xc0 [ 461.175193][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.175204][ T32] RIP: 0033:0x7fa2b7d5fd8e [ 461.175213][ T32] RSP: 002b:00007fa2b8bdbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.175223][ T32] RAX: ffffffffffffffda RBX: 00007fa2b8bdd6c0 RCX: 00007fa2b7d5fd8e [ 461.175231][ T32] RDX: 0000000000000024 RSI: 00007fa2b8bdc000 RDI: 0000000000000006 [ 461.175237][ T32] RBP: 0000000000000000 R08: 00007fa2b8bdbf04 R09: 000000000000000c [ 461.175244][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 461.175251][ T32] R13: 00007fa2b8bdbf58 R14: 00007fa2b8bdc000 R15: 0000000000000000 [ 461.175268][ T32] [ 461.175305][ T32] [ 461.175305][ T32] Showing all locks held in the system: [ 461.175313][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 461.175322][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.175378][ T32] locks held by getty/5394: 2, on CPU#0: [ 461.175385][ T32] #0: ffff8880373fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 461.175413][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 461.175452][ T32] locks held by udevd/6739: 1, on CPU#1: [ 461.175459][ T32] #0: ffff8880284b1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 461.175500][ T32] locks held by syz.0.2606/13492: 6, on CPU#1: [ 461.175507][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175532][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.175556][ T32] #2: ffff888028443218 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 461.175588][ T32] #3: ffff888027a6ed08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 461.175613][ T32] #4: ffff888027a6e6d0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 461.175650][ T32] #5: ffff888027a6e708 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 461.175684][ T32] locks held by syz.3.2610/13499: 2, on CPU#0: [ 461.175691][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175715][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.175740][ T32] locks held by syz.4.2611/13502: 2, on CPU#0: [ 461.175747][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175771][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.175796][ T32] locks held by syz.4.2611/13505: 2, on CPU#1: [ 461.175803][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175827][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.175851][ T32] locks held by syz.1.2612/13504: 2, on CPU#1: [ 461.175859][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175882][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.175907][ T32] locks held by syz.2.2616/13514: 2, on CPU#0: [ 461.175914][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175938][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.175963][ T32] locks held by syz-executor/13517: 2, on CPU#0: [ 461.175971][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.175994][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176021][ T32] locks held by syz-executor/13538: 2, on CPU#1: [ 461.176028][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176052][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176076][ T32] locks held by syz-executor/13542: 2, on CPU#1: [ 461.176084][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176108][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176139][ T32] locks held by syz-executor/13543: 2, on CPU#1: [ 461.176146][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176170][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176195][ T32] locks held by syz-executor/13546: 2, on CPU#0: [ 461.176202][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176226][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176252][ T32] locks held by syz-executor/13612: 2, on CPU#1: [ 461.176260][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176284][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176309][ T32] locks held by syz-executor/13631: 2, on CPU#1: [ 461.176317][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176341][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176365][ T32] locks held by syz-executor/13634: 2, on CPU#1: [ 461.176373][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176397][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176422][ T32] locks held by syz-executor/13658: 2, on CPU#0: [ 461.176429][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176453][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176478][ T32] locks held by syz-executor/13664: 2, on CPU#1: [ 461.176485][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176509][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176535][ T32] locks held by syz-executor/13706: 2, on CPU#1: [ 461.176542][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176571][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176600][ T32] locks held by syz-executor/13725: 2, on CPU#0: [ 461.176608][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176634][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176658][ T32] locks held by syz-executor/13730: 2, on CPU#0: [ 461.176666][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176690][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176715][ T32] locks held by syz-executor/13746: 2, on CPU#0: [ 461.176722][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176746][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176771][ T32] locks held by syz-executor/13762: 2, on CPU#1: [ 461.176778][ T32] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 461.176802][ T32] #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 461.176828][ T32] [ 461.176831][ T32] ============================================= [ 461.176831][ T32] [ 461.176842][ T32] NMI backtrace for cpu 0 [ 461.176852][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 461.176864][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 461.176873][ T32] Call Trace: [ 461.176960][ T32] [ 461.176976][ T32] dump_stack_lvl+0xe8/0x150 [ 461.177009][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 461.177039][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 461.177064][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 461.177096][ T32] sys_info+0x135/0x170 [ 461.177120][ T32] watchdog+0x1073/0x10f0 [ 461.177151][ T32] ? watchdog+0x209/0x10f0 [ 461.177181][ T32] kthread+0x38b/0x480 [ 461.177204][ T32] ? __pfx_watchdog+0x10/0x10 [ 461.177225][ T32] ? __pfx_kthread+0x10/0x10 [ 461.177248][ T32] ret_from_fork+0x514/0xb70 [ 461.177272][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 461.177294][ T32] ? __switch_to+0xc78/0x1410 [ 461.177324][ T32] ? __pfx_kthread+0x10/0x10 [ 461.177346][ T32] ret_from_fork_asm+0x1a/0x30 [ 461.177381][ T32] [ 461.177592][ T32] Sending NMI from CPU 0 to CPUs 1: [ 461.177638][ C1] NMI backtrace for cpu 1 [ 461.177653][ C1] CPU: 1 UID: 0 PID: 1113 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 461.177676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 461.177689][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 461.177716][ C1] RIP: 0010:lock_release+0x270/0x3c0 [ 461.177742][ C1] Code: 89 f6 48 8b 54 24 18 e8 6e 31 00 00 48 8b 5c 24 08 48 c7 c7 a0 d4 92 8e e8 fd 65 5e 0a b8 ff ff ff ff 65 0f c1 05 88 f8 1b 13 <83> f8 01 75 2e 9c 58 a9 00 02 00 00 75 42 f7 c3 00 02 00 00 75 47 [ 461.177760][ C1] RSP: 0018:ffffc90004f4f498 EFLAGS: 00000057 [ 461.177777][ C1] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 8000000000000001 [ 461.177792][ C1] RDX: ffffc90004f4f501 RSI: ffffffff8e92d4a0 RDI: ffffffff8c8e8c80 [ 461.177807][ C1] RBP: ffff888029d9cad0 R08: ffffc90004f4ff38 R09: 0000000000000000 [ 461.177822][ C1] R10: ffffc90004f4f5f8 R11: fffff520009e9ec1 R12: 0000000000000004 [ 461.177836][ C1] R13: 0000000000000004 R14: ffffffff8ff5a320 R15: ffff888029d9be80 [ 461.177851][ C1] FS: 0000000000000000(0000) GS:ffff888123720000(0000) knlGS:0000000000000000 [ 461.177868][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.177882][ C1] CR2: 00007ffc02cc4c40 CR3: 000000000fd48000 CR4: 00000000003526f0 [ 461.177900][ C1] Call Trace: [ 461.177908][ C1] [ 461.177917][ C1] ? unwind_next_frame+0x8f/0x2550 [ 461.177946][ C1] ? unwind_next_frame+0x8f/0x2550 [ 461.177973][ C1] unwind_next_frame+0x1baa/0x2550 [ 461.178004][ C1] ? ret_from_fork+0x514/0xb70 [ 461.178024][ C1] ? unwind_next_frame+0x8f/0x2550 [ 461.178053][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.178080][ C1] arch_stack_walk+0x11b/0x150 [ 461.178122][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 461.178146][ C1] stack_trace_save+0xa9/0x100 [ 461.178171][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 461.178197][ C1] ? stack_depot_save_flags+0x33/0x810 [ 461.178227][ C1] kasan_save_track+0x3e/0x80 [ 461.178253][ C1] ? kasan_save_track+0x3e/0x80 [ 461.178277][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 461.178303][ C1] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 461.178328][ C1] ? __alloc_skb+0x2c1/0x7a0 [ 461.178357][ C1] ? nsim_dev_trap_report_work+0x25f/0xb30 [ 461.178380][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 461.178409][ C1] ? worker_thread+0xa47/0xfb0 [ 461.178437][ C1] ? kthread+0x38b/0x480 [ 461.178458][ C1] ? ret_from_fork+0x514/0xb70 [ 461.178510][ C1] __kasan_kmalloc+0x93/0xb0 [ 461.178538][ C1] __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 461.178565][ C1] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 461.178589][ C1] ? nsim_dev_trap_report_work+0x25f/0xb30 [ 461.178612][ C1] ? nsim_dev_trap_report_work+0x25f/0xb30 [ 461.178642][ C1] __alloc_skb+0x2c1/0x7a0 [ 461.178675][ C1] nsim_dev_trap_report_work+0x25f/0xb30 [ 461.178708][ C1] ? process_scheduled_works+0x97a/0x1630 [ 461.178737][ C1] process_scheduled_works+0xc3d/0x1630 [ 461.178767][ C1] ? trace_contention_end+0x3b/0x160 [ 461.178805][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.178839][ C1] ? assign_work+0x3cf/0x5d0 [ 461.178871][ C1] worker_thread+0xa47/0xfb0 [ 461.178918][ C1] kthread+0x38b/0x480 [ 461.178941][ C1] ? __pfx_worker_thread+0x10/0x10 [ 461.178970][ C1] ? __pfx_kthread+0x10/0x10 [ 461.178993][ C1] ret_from_fork+0x514/0xb70 [ 461.179017][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.179039][ C1] ? __switch_to+0xc78/0x1410 [ 461.179071][ C1] ? __pfx_kthread+0x10/0x10 [ 461.179094][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.179131][ C1] [ 461.181343][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 463.927139][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 463.936239][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 463.946285][ T32] Call Trace: [ 463.949554][ T32] [ 463.952478][ T32] vpanic+0x26f/0x710 [ 463.956455][ T32] panic+0xc5/0xd0 [ 463.960167][ T32] ? __pfx_panic+0x10/0x10 [ 463.964569][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 463.970018][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 463.975388][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 463.981543][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 463.987700][ T32] watchdog+0x10e7/0x10f0 [ 463.992039][ T32] ? watchdog+0x209/0x10f0 [ 463.996458][ T32] kthread+0x38b/0x480 [ 464.000519][ T32] ? __pfx_watchdog+0x10/0x10 [ 464.005203][ T32] ? __pfx_kthread+0x10/0x10 [ 464.009787][ T32] ret_from_fork+0x514/0xb70 [ 464.014376][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 464.019482][ T32] ? __switch_to+0xc78/0x1410 [ 464.024166][ T32] ? __pfx_kthread+0x10/0x10 [ 464.028755][ T32] ret_from_fork_asm+0x1a/0x30 [ 464.033526][ T32] [ 464.036812][ T32] Kernel Offset: disabled [ 464.041128][ T32] Rebooting in 86400 seconds..