last executing test programs: 18.81322226s ago: executing program 4 (id=7130): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@remote, @empty, 0x0}, &(0x7f00000005c0)=0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x100, [{0xf, 0x3, 0xff}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000740)=""/240, 0x34, 0xf0, 0x1, 0x80000001, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x215, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000073000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x10000, 0xc6, &(0x7f0000000480)=""/198, 0x41100, 0x50, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r3, r6, r7], 0x0, 0x10, 0x3}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r12) 18.317742474s ago: executing program 1 (id=7137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000010200009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 18.257609749s ago: executing program 4 (id=7138): unshare(0x6a040000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async, rerun: 64) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) (rerun: 64) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010022bd7000ffdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="04002d8024002d8005000100040000000800020003000000080004"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async, rerun: 64) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r11, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x52f578cd, 0x7ff, 0x3, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0x7, 0x8, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) 18.238951745s ago: executing program 2 (id=7139): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000d0603000000000000000000030000039b00010007000000050005000100000012000300626902000000000000006d6163000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000060}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x6f4}}, 0x0) 18.220375658s ago: executing program 1 (id=7140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0xfffffff8, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 18.144721046s ago: executing program 0 (id=7141): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x34, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010804}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000340)=0x401, 0x4) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000880)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x54, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000e50000000044f80000000809aaed", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000040020000000010000000000000004000200040001"], 0x40}, 0x1, 0x0, 0x0, 0x88084}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801200148004000600"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 18.131837939s ago: executing program 2 (id=7142): r0 = socket(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000005140301"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "9c979b32261fbabdae20b34f870e1c46"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc3}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @enum64={0x10, 0x4, 0x0, 0x13, 0x1, 0x2, [{0x10, 0x9, 0x4}, {0x5, 0xf9b6, 0x4}, {0x10, 0x7, 0x9}, {0x1, 0x5, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x5}}]}, {0x0, [0x71, 0x30, 0x30, 0x0]}}, &(0x7f0000000100)=""/140, 0x7e, 0x8c, 0x0, 0xfda, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffff037, '\x00', 0x0, r10, 0x3, 0x5}, 0x50) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8) 18.009309148s ago: executing program 2 (id=7143): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 17.893623838s ago: executing program 2 (id=7144): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000002a4aa60800de07001000010429bd700000", @ANYRES32=0x0, @ANYBLOB="4a000000000000001c0012800b0001006572f03e74123f0330dbb9bf4c73"], 0x50}}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x8, r1, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000680)={0x1, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x3, 0x11, r4, 0xffffe000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair(0x3, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002000400000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) pipe(0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfea650e1f91103a9581e5545f0d1118000000000000000001b00000000aace220000001890780400"/92], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) unshare(0x8000400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000104}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x3e860075c508bca0}, 0x0) unshare(0x6020080) unshare(0x26020480) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xff90}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 17.888517174s ago: executing program 0 (id=7145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd70100600010007000000080009000600000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 17.871013428s ago: executing program 1 (id=7146): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) write(r0, &(0x7f0000000040)="5e9aacd57edd772fd67510c1c3e04a462205fcdeed6e383a4b5a2094facfa96955f1c9b9f520d8b60987be1b19e40f60c5f388dc49d6e4d7ff7288a4bcd3d9231ae3ce90227022b08d11fc98893e3d75d9d4be029313f66c5d56c87dd15757fe058925589fe9dd652026369a8630b002baed07dc5aa0848cd260dd0cd2b02aeb6b2b6073e79de470c692", 0x8a) sendto(0xffffffffffffffff, &(0x7f0000000100)="7a9ed55286ae4462e8dddd09fbb7cf275685786b79f9f2a887f68d07e85f177f008d1ab4818b91a0b63971bf6c9e8c2f2eb44faf56b013489dba36b801f95bb330532050d949590ef865597ae7a5968cb4456658e0cf061bb7a0042ecd1c5e4d98e9f3c94a4b3ce56ecc5b755dc66d3536372ce1d36ae125189082b4c2cf210c470a6894a8280c715b29494a1a1abc4a849f676836cbfd6e41c0439781b4155619043efd4e1dc85fc3d41c32e5a60d414eadef4a9570ebb457989d961b91490c78fae4543e7c1c2606b5d99e7bb4dc8431287af30d4b5703137150d61b2980875db0", 0xe2, 0x4000000, &(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/203, 0xcb}], 0x1, &(0x7f0000000500)=""/236, 0xec}, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000640)=0x1f, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000006c0)={0x5, {0x26, 0x100000001, 0x101, 0x7, 0xb}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000700)={r0, 0x8, 0x6, 0x5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000700)={r0, 0x8, 0x6, 0x5}) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) (async) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000980)) (async) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000980)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x1f, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0x4, 0xb, 0x6, 0x8, 0x1}, @generic={0x1, 0x4, 0x2, 0x2000, 0x49d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='syzkaller\x00', 0xfa8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4, 0x25, r3, 0x8, &(0x7f0000000f00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0xb, 0xa21f, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x1f, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0x4, 0xb, 0x6, 0x8, 0x1}, @generic={0x1, 0x4, 0x2, 0x2000, 0x49d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='syzkaller\x00', 0xfa8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4, 0x25, r3, 0x8, &(0x7f0000000f00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0xb, 0xa21f, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x22, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, [@ldst={0x3, 0x0, 0x3, 0x4, 0x9, 0xa27d8292e848d1cb, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @generic={0x2, 0x4, 0x6, 0x7ff, 0x7}, @map_idx={0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000011c0)='GPL\x00', 0x9, 0x8b, &(0x7f0000001200)=""/139, 0x40f00, 0x32, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000012c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x8, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001380)=[r3, r6, r7, r6, r6], &(0x7f00000013c0)=[{0x5, 0x2, 0xe, 0xa}, {0x3, 0x5, 0x9, 0x6}, {0x2, 0x4, 0x10, 0xb}, {0x4, 0x2, 0x1, 0x5}, {0x5, 0x3, 0xe, 0x9}, {0x4, 0x5, 0xd, 0x1}, {0x0, 0x3, 0xf, 0x9}], 0x10, 0xfff}, 0x94) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001540)={0x3cc, 0x12, 0x8, 0x70bd27, 0x25dfdbfd, {0x1e, 0x18, 0x1, 0x80, {0x4e23, 0x4e23, [0x2, 0x9, 0xc, 0x5], [0x65b, 0x9, 0x6, 0x80000000], r4, [0x1, 0x800]}}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b85b2e4097fb05ea1a116f2e0738124fee650f9f2ba8352ad84b415c7e91d8b40a218d9792e8f814eea4edae2f5481b9c7628268f51c1c39cf68d1961fe13ef8e68c09891d0df1b7eab503eb33800b2db8d1f856b2b4e28949ac2f8081b75f3f6e9ea560fffe2c7679e0ae28ca1cff38362fc95017d7d5c2ed81e2e3d0b7b30673f83e6b6be39b87ee5f6d74c177085a38bab84441a542563d38f5b19f91960dac9b104728c710d0a2"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "cab142543e844e17e9589da1c7381ecd4658c56e507f31ae548a131f88dcb5ca00ada31403da7963fd8d30228b0d0f5ec17eeaa39b33cfd1604493b22ae30e779174b0bef0613aa779"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "14f366a2d3082ca44d906578d4ebbe7a80ce07c8edbdabf6d88414b5e853"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "c9c5e2b9dffe5f749c3e390884f51f613b74715913227431d6e32b0b6d93bca44963407d60e5c2ea81531416c878113cdf8e852161ee5122a837392e46204ad5e91c0f2b97fd5c4749a669f74ed769e6f64253cc829f8df5cb0dba6ea065bcae6409a2b77fe4d36af6d380269121944b841108d3eca7638534462ffa6360eb6636581b66e83fd026e54987cf5b4bef998a4e5ef5fa644bb3ad670b7189f2cd76c269cf8892d3acf09c50f08779d4bb77645ef68c4a50519e6e44c9f15b2c2a2f14d2a5940aeb194dd4"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "2cf07fbbc929ca2738a158bb8b43806f69bea9acdf5b284b56cda826ee9db7670beb483f2a880179ae3547ced294c73163be9d66ee0b2ad7d21e9b5a2c5c3dedf86c0131cb54d16532dd5df85d24a565e0a2374e0639fcafc16b31006257c7ce8f5ec69356523633869b88e894bf80d4407c778a8a0c7b00c150b06f4c7d3485597414c5445570499da3c73742ac59f9f67e882a4ce071437aa4fb623b2767c73e165926bff14f4da50015b5bf1e78ad9ed5a11ef98bd75c677168c73a281c32e4bde80dfef031ebffa66601e70ecae995fa8a4d8b6c7344fadc78840aa9c02197c6d941a44a80548ed36d08a38dec"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "1438b0bf122fbcd14c94e6e2735678e8eb48240eff7431ecfdc86eff741847cb99cb1505fc86e30456f5c3c4a842f7c4c9b3c5ed1e06c7f334f57dd55c6b79ee7f1214983611fc99d3426b45669817c9eb985bf95d2cabb9edda2790939fd1032c9965175dc06b70ef985523d00471f68020f3c96d9f501555be6aa1988a6ae1e6b7ae07725a036862c749c1fe286d620f21"}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x4004}, 0x20000004) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001540)={0x3cc, 0x12, 0x8, 0x70bd27, 0x25dfdbfd, {0x1e, 0x18, 0x1, 0x80, {0x4e23, 0x4e23, [0x2, 0x9, 0xc, 0x5], [0x65b, 0x9, 0x6, 0x80000000], r4, [0x1, 0x800]}}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b85b2e4097fb05ea1a116f2e0738124fee650f9f2ba8352ad84b415c7e91d8b40a218d9792e8f814eea4edae2f5481b9c7628268f51c1c39cf68d1961fe13ef8e68c09891d0df1b7eab503eb33800b2db8d1f856b2b4e28949ac2f8081b75f3f6e9ea560fffe2c7679e0ae28ca1cff38362fc95017d7d5c2ed81e2e3d0b7b30673f83e6b6be39b87ee5f6d74c177085a38bab84441a542563d38f5b19f91960dac9b104728c710d0a2"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "cab142543e844e17e9589da1c7381ecd4658c56e507f31ae548a131f88dcb5ca00ada31403da7963fd8d30228b0d0f5ec17eeaa39b33cfd1604493b22ae30e779174b0bef0613aa779"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "14f366a2d3082ca44d906578d4ebbe7a80ce07c8edbdabf6d88414b5e853"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "c9c5e2b9dffe5f749c3e390884f51f613b74715913227431d6e32b0b6d93bca44963407d60e5c2ea81531416c878113cdf8e852161ee5122a837392e46204ad5e91c0f2b97fd5c4749a669f74ed769e6f64253cc829f8df5cb0dba6ea065bcae6409a2b77fe4d36af6d380269121944b841108d3eca7638534462ffa6360eb6636581b66e83fd026e54987cf5b4bef998a4e5ef5fa644bb3ad670b7189f2cd76c269cf8892d3acf09c50f08779d4bb77645ef68c4a50519e6e44c9f15b2c2a2f14d2a5940aeb194dd4"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "2cf07fbbc929ca2738a158bb8b43806f69bea9acdf5b284b56cda826ee9db7670beb483f2a880179ae3547ced294c73163be9d66ee0b2ad7d21e9b5a2c5c3dedf86c0131cb54d16532dd5df85d24a565e0a2374e0639fcafc16b31006257c7ce8f5ec69356523633869b88e894bf80d4407c778a8a0c7b00c150b06f4c7d3485597414c5445570499da3c73742ac59f9f67e882a4ce071437aa4fb623b2767c73e165926bff14f4da50015b5bf1e78ad9ed5a11ef98bd75c677168c73a281c32e4bde80dfef031ebffa66601e70ecae995fa8a4d8b6c7344fadc78840aa9c02197c6d941a44a80548ed36d08a38dec"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "1438b0bf122fbcd14c94e6e2735678e8eb48240eff7431ecfdc86eff741847cb99cb1505fc86e30456f5c3c4a842f7c4c9b3c5ed1e06c7f334f57dd55c6b79ee7f1214983611fc99d3426b45669817c9eb985bf95d2cabb9edda2790939fd1032c9965175dc06b70ef985523d00471f68020f3c96d9f501555be6aa1988a6ae1e6b7ae07725a036862c749c1fe286d620f21"}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x4004}, 0x20000004) gettid() (async) r8 = gettid() write$cgroup_pid(r3, &(0x7f00000019c0)=r8, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000001a40), 0x0) r9 = epoll_create(0xfffffffc) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000001b80)={0x1, 0x0, 0x1000, 0x10, &(0x7f0000001a80)="0796e6246f656e86a06891c0891eeb4b", 0x93, 0x0, &(0x7f0000001ac0)="9ac52238510beaa42e3a77bee5064129203238fa1d3b8fbd6027bb6e095887438d37ed62f94ed20e4230e57fc26c07f76df7236c852e77cb8a9775a4613e0f8d40c8f06ce23453f8c43ed0b183ddff0358c5fe727f180c2d22b504e63099b31cc88cdd0717104f69facd54d10670184caff15f0214cc7de4cd1ecb77c071938dedcdbdca55e9d8b5f3e25f65e34f412c973094"}) (async) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000001b80)={0x1, 0x0, 0x1000, 0x10, &(0x7f0000001a80)="0796e6246f656e86a06891c0891eeb4b", 0x93, 0x0, &(0x7f0000001ac0)="9ac52238510beaa42e3a77bee5064129203238fa1d3b8fbd6027bb6e095887438d37ed62f94ed20e4230e57fc26c07f76df7236c852e77cb8a9775a4613e0f8d40c8f06ce23453f8c43ed0b183ddff0358c5fe727f180c2d22b504e63099b31cc88cdd0717104f69facd54d10670184caff15f0214cc7de4cd1ecb77c071938dedcdbdca55e9d8b5f3e25f65e34f412c973094"}) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000001c00)=0x7) 17.733492803s ago: executing program 0 (id=7147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x200}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r3, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x4, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xb}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 17.732934942s ago: executing program 1 (id=7148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x200, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20002000}, [@RTA_FLOW={0x8, 0xb, 0xda}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x10, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x13}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040003}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/97, 0x61}], 0x1}, 0x7e1a}], 0x1, 0x142, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x29, 0x0, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'ip6erspan0\x00', 0xa200}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_OCB(r12, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42008}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0xb00, 0x70bd27, 0x10000, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x48018) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r8, 0xc038586c, &(0x7f0000000540)={r1, &(0x7f0000000440)='$\x00', 0x58801, &(0x7f0000000480)={@_ha_fsid={[0x1, 0x2]}, {0x0, 0x7a, 0x400, 0x1}}, 0xfffff845, &(0x7f00000004c0), &(0x7f0000000500)}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) 17.708149581s ago: executing program 2 (id=7149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) getpeername$llc(r2, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) unshare(0x22020400) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x34, &(0x7f0000000040), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r1, r4, 0x37, 0x2000, 0x0, @value, @void, @void, @void, r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x53b, 0x70bd26, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x40044848) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, r0, 0x24, 0x2000, r0, @value, @void, @void, @void, r7}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f, 0xffffffffffffffff, @void, @void, @value, @void, r7}, 0x20) 17.353522949s ago: executing program 0 (id=7152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000d0603000000000000000000030000039b00010007000000050005000100000012000300626902000000000000006d6163000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000060}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e2731c83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 17.351791221s ago: executing program 1 (id=7153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="787adc73137e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ada5e35a8d8c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="159e30270c0d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="875662da620c"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040809}, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x1a8, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 17.24351152s ago: executing program 1 (id=7154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r3, 0x421, 0x78bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48040) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r3, 0x421, 0x78bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48040) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x118, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095874e"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.233978484s ago: executing program 0 (id=7155): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xa25bb844a080a7a5}, 0x3000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/19, 0x13}, 0x4}], 0x1, 0x4000002b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x80, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 17.101610678s ago: executing program 2 (id=7156): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x80000000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20008804) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000a502fdc1496afddc7a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004096) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001f4ffffff00000000000300000a50000000060a010400000000000000000a0000030900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9febf22618000000000000000c0000000c000000020000000100000000000002040000000000"], 0x0, 0x26, 0x0, 0x0, 0x8}, 0x28) socket$netlink(0x10, 0x3, 0x10) 16.691203004s ago: executing program 4 (id=7157): socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004060000000008091b057d9bed00"], 0x30}}, 0x0) 16.668569726s ago: executing program 3 (id=7158): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000001c0)={0x0, 0x80000000, 0x8}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e0003002cbd6a1a8c8cdf2500000000", @ANYRES32=r4, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28001}, 0x4c094) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 16.578461976s ago: executing program 4 (id=7159): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}, 0x2000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 16.500597391s ago: executing program 3 (id=7160): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113600000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000200000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x80}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000040000000000000", 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000000)=0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x0, 0x60045005}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000081100fc020000000000000000000000000000ff02000000000000000000000000000100004e220057462d"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x28}, @mcast2, 0x1, 0x7, 0x9, 0x100, 0x4d, 0x81040211}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYRES32=r7], 0xfdef) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000021"], 0xfce) 16.408431662s ago: executing program 3 (id=7161): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r1, 0x6, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0]}, 0x40) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 16.333704925s ago: executing program 3 (id=7162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004e0001003400000002000a00806e"], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff036}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d1000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x40, 0xd, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESHEX=r5, @ANYBLOB="00001000252155b21c00122b4e000000626f6e64000000000c0002000800010001", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24048851}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x40002100) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000}) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xe8, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in6=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e24, @in6=@local}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, 0x0, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.328065996s ago: executing program 0 (id=7163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xfffffffc}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) 16.177236372s ago: executing program 3 (id=7164): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x9}, 0x4) syz_emit_ethernet(0x9d, &(0x7f0000000780)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x8f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x1c, 0x4, 0x0, 0xc, 0x7, 0x65, 0x5, 0x7f, 0x6, 0x1, @local, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x86, 0x4, '\n\n'}, @lsrr={0x83, 0xb, 0xd3, [@broadcast, @local]}, @ssrr={0x89, 0xb, 0x85, [@remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x8b, [@dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp={0x44, 0x1c, 0xb2, 0x0, 0x8, [0x2, 0xfff, 0xf72, 0x80000000, 0x467, 0x9f]}, @ra={0x94, 0x4, 0x1}]}}, "468987"}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000080000000000000000000000000000000000000000000000009b3e3bd90a1042786d3300f764eee32e277f7a4fad7fef4a236b5d7eacc8dc385d0592c059153f0538ea92707166d4642550393b585c169244c500c553c6fd8c4ec6f90ba1e0a944b062da11a397fe0f74def3a98cfd92a9df96749c47e04cf14b7b7ba5176595cf96c62ddbc9f2e80852e9"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000000540)=""/125}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0xb, 0x1, 0xfffffffe, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket(0x2, 0x3, 0xff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8910, &(0x7f0000000100)={'tunl0\x00', 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local, 'erspan0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r6, 0xfff8, 0x8001, 0x80000000, 0x8, 0x6}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xc2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'veth1_to_batadv\x00'}}, 0x1e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) socket$kcm(0x2d, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="04010000100007000000000000000000fc020000000000000000000000000000e00000020000000000000000000000004e1f0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000000000fd01000000002b0000002001000000000000000000000000000000000000000000000000000000000000020000000000000000000100000000000000001000000000ffffffffffffffff000000000000000000000000080000000000000000000000000020000000000007000000000000000000000000000000000004c06dbc0c0309ba240000000000000000000a000200340000000000000014000e00fe"], 0x104}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0xfffffffc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@local, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee01}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000, 0x0, 0xd}, {0x5, 0x200000, 0x7, 0xd336}, {0x40000, 0x0, 0xae8}, 0x0, 0x3507, 0xa, 0x1, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x40048d0}, 0x0) close(r5) 16.077539834s ago: executing program 3 (id=7165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000d0603000000000000000000030000039b00010007000000050005000100000012000300626902000000000000006d6163000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000060}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 15.762813465s ago: executing program 4 (id=7166): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000200)={0x0, 0x0, "88d86c9f5b90c8cb7e1212266c03c0f0"}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="77eade3fa86122394c723238f56c721378a40f39a033a5a15d507c41ee5b0d70cf262b7f5149d30e4b210b79ea3c1a46b692ff1fc824e0da50fed49ff0305febf6c9cd1a4d2d1332a26179c745c923fe3de6bc982042d0f2ba5ecd870b8b4f372f59ae5cb9f23a", 0x67) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)}, 0x11) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0x1}, {0xe, 0x3}, {0x0, 0xf}}}, 0x24}}, 0x480c0) r4 = socket(0x14, 0x2, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x20040400) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b14, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038480000000c0a01010000000000000000070000000900020073797a310000000009000100737980040002800900090073797a300000000004000180140000001000010000000000000000000084000a00"/220], 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) (async) close(0x4) 15.709402372s ago: executing program 4 (id=7167): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) r3 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x98, @remote, 0x1}, @in6={0xa, 0x4e23, 0x3ff, @loopback, 0xc}], 0x38) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) (async) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24044011}, 0x0) 1.532430937s ago: executing program 32 (id=7154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r3, 0x421, 0x78bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48040) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, r3, 0x421, 0x78bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48040) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x118, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095874e"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.48905575s ago: executing program 33 (id=7156): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x80000000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20008804) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000a502fdc1496afddc7a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004096) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001f4ffffff00000000000300000a50000000060a010400000000000000000a0000030900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9febf22618000000000000000c0000000c000000020000000100000000000002040000000000"], 0x0, 0x26, 0x0, 0x0, 0x8}, 0x28) socket$netlink(0x10, 0x3, 0x10) 1.022025571s ago: executing program 34 (id=7163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xfffffffc}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) 967.669069ms ago: executing program 35 (id=7165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@gettaction={0x3c, 0x32, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}}, 0x24040084) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000000d0603000000000000000000030000039b00010007000000050005000100000012000300626902000000000000006d6163000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000060}, 0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 0s ago: executing program 36 (id=7167): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) r3 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x98, @remote, 0x1}, @in6={0xa, 0x4e23, 0x3ff, @loopback, 0xc}], 0x38) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) (async) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRESDEC=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24044011}, 0x0) kernel console output (not intermixed with test programs): ing): Released all slaves [ 899.898494][ T5831] Bluetooth: hci2: command tx timeout [ 899.912386][ T7759] bond3 (unregistering): (slave veth5): Releasing active interface [ 899.927154][ T7759] bond3 (unregistering): Released all slaves [ 899.940978][ T7759] bond4 (unregistering): Released all slaves [ 899.958026][ T7759] bond5 (unregistering): Released all slaves [ 899.979955][ T7759] team0: Port device bond6 removed [ 899.986153][ T7759] bond6 (unregistering): Released all slaves [ 899.998431][ T7759] bond7 (unregistering): Released all slaves [ 900.015876][ T7759] bond8 (unregistering): Released all slaves [ 900.027856][ T7759] bond9 (unregistering): Released all slaves [ 900.039740][ T7759] bond10 (unregistering): Released all slaves [ 900.063040][T28527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.070019][T28527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.096331][T28527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.188325][T28682] netlink: 'syz.4.6195': attribute type 1 has an invalid length. [ 900.293647][T28690] __nla_validate_parse: 5 callbacks suppressed [ 900.293665][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.330971][T28682] 8021q: adding VLAN 0 to HW filter on device bond12 [ 900.347710][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.354526][T28527] hsr_slave_0: entered promiscuous mode [ 900.374192][T28527] hsr_slave_1: entered promiscuous mode [ 900.380807][T28527] debugfs: 'hsr0' already exists in 'hsr' [ 900.392946][T28527] Cannot create hsr debugfs directory [ 900.396083][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.416426][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.425984][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.435051][ T7759] : left promiscuous mode [ 900.440006][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.453351][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.487917][T28698] netlink: 18700 bytes leftover after parsing attributes in process `syz.4.6198'. [ 900.490935][T28690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6197'. [ 900.498032][T28699] netlink: 18700 bytes leftover after parsing attributes in process `syz.4.6198'. [ 900.520014][ T7759] tipc: Disabling bearer [ 900.535283][ T7759] tipc: Left network mode [ 901.840341][T28527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 901.880274][T28527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.930527][T28527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 901.970675][T28527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 901.986462][ T5831] Bluetooth: hci2: command tx timeout [ 902.100022][T28744] xt_hashlimit: size too large, truncated to 1048576 [ 902.717643][T28785] FAULT_INJECTION: forcing a failure. [ 902.717643][T28785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.731176][T28785] CPU: 1 UID: 0 PID: 28785 Comm: syz.0.6213 Not tainted syzkaller #0 PREEMPT(full) [ 902.731199][T28785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 902.731211][T28785] Call Trace: [ 902.731219][T28785] [ 902.731227][T28785] dump_stack_lvl+0xe8/0x150 [ 902.731262][T28785] should_fail_ex+0x412/0x560 [ 902.731292][T28785] _copy_from_user+0x2d/0xb0 [ 902.731313][T28785] __sys_bind+0x1c6/0x410 [ 902.731334][T28785] ? __pfx___sys_bind+0x10/0x10 [ 902.731365][T28785] ? __pfx_ksys_write+0x10/0x10 [ 902.731392][T28785] __x64_sys_bind+0x7a/0x90 [ 902.731415][T28785] do_syscall_64+0x14d/0xf80 [ 902.731434][T28785] ? trace_irq_disable+0x3b/0x150 [ 902.731459][T28785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.731477][T28785] ? clear_bhb_loop+0x40/0x90 [ 902.731499][T28785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.731517][T28785] RIP: 0033:0x7f49a4f9c799 [ 902.731534][T28785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.731549][T28785] RSP: 002b:00007f49a5ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 902.731566][T28785] RAX: ffffffffffffffda RBX: 00007f49a5215fa0 RCX: 00007f49a4f9c799 [ 902.731579][T28785] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000005 [ 902.731590][T28785] RBP: 00007f49a5ebb090 R08: 0000000000000000 R09: 0000000000000000 [ 902.731600][T28785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.731610][T28785] R13: 00007f49a5216038 R14: 00007f49a5215fa0 R15: 00007ffc4c16beb8 [ 902.731634][T28785] [ 903.019056][ T7759] hsr_slave_0: left promiscuous mode [ 903.030965][ T7759] hsr_slave_1: left promiscuous mode [ 903.076393][ T7759] pim6reg99999999 (unregistering): left allmulticast mode [ 903.519330][T28798] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.527987][T28798] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.558920][T28527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.639982][T28527] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.705325][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.712484][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.741256][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.748451][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.854773][ T7759] IPVS: stop unused estimator thread 0... [ 904.053621][ T5831] Bluetooth: hci2: command tx timeout [ 904.146875][T28527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.241224][T28527] veth0_vlan: entered promiscuous mode [ 904.259411][T28527] veth1_vlan: entered promiscuous mode [ 904.297167][T28527] veth0_macvtap: entered promiscuous mode [ 904.319857][T28527] veth1_macvtap: entered promiscuous mode [ 904.349639][T28527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.377841][T28527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.532117][T19733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.554192][T19733] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.571568][T19733] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.591401][T19733] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.598018][T28771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.746083][ T7760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.773077][ T7760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.874436][ T7760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.902678][ T7760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.061380][T28867] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 906.105202][T28867] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 906.121492][T28873] __nla_validate_parse: 62 callbacks suppressed [ 906.121512][T28873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 906.196886][T28873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6225'. [ 906.573403][T20459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 906.588946][T20459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 906.599738][T20459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 906.615453][T20459] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 906.627069][T20459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 906.712244][T28899] netlink: 'syz.1.6230': attribute type 16 has an invalid length. [ 906.724118][T28899] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6230'. [ 906.950832][T28892] lo speed is unknown, defaulting to 1000 [ 906.969250][T28892] gre0 speed is unknown, defaulting to 1000 [ 907.024057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.456641][T28892] chnl_net:caif_netlink_parms(): no params data found [ 907.619518][T28892] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.631127][T28892] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.638543][T28892] bridge_slave_0: entered allmulticast mode [ 907.645811][T28892] bridge_slave_0: entered promiscuous mode [ 907.653656][T28892] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.661064][T28892] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.670347][T28892] bridge_slave_1: entered allmulticast mode [ 907.677962][T28892] bridge_slave_1: entered promiscuous mode [ 907.701198][T19733] gretap0: left allmulticast mode [ 907.706820][T19733] gretap0: left promiscuous mode [ 907.714076][T19733] bridge0: port 1(gretap0) entered disabled state [ 907.814642][T19733] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 908.036755][T19733] bond1 (unregistering): (slave bridge2): Releasing active interface [ 908.045027][T19733] bridge2 (unregistering): left promiscuous mode [ 908.051361][T19733] bridge2 (unregistering): left allmulticast mode [ 908.140284][T19733] bond11 (unregistering): (slave bridge4): Releasing active interface [ 908.303161][T19733] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 908.312108][T19733] bond0 (unregistering): Released all slaves [ 908.324965][T19733] bond1 (unregistering): Released all slaves [ 908.338433][T19733] bond2 (unregistering): Released all slaves [ 908.350339][T19733] bond3 (unregistering): Released all slaves [ 908.363598][T19733] bond4 (unregistering): Released all slaves [ 908.379625][T19733] bond5 (unregistering): Released all slaves [ 908.409607][T19733] bond6 (unregistering): (slave macvlan3): Releasing backup interface [ 908.418682][T19733] bond6 (unregistering): Released all slaves [ 908.432296][T19733] bond7 (unregistering): Released all slaves [ 908.444879][T19733] bond8 (unregistering): Released all slaves [ 908.458996][T19733] bond9 (unregistering): (slave veth9): Releasing active interface [ 908.470124][T19733] bond9 (unregistering): Released all slaves [ 908.487433][T19733] bond10 (unregistering): Released all slaves [ 908.501300][T19733] bond11 (unregistering): Released all slaves [ 908.514833][T19733] bond12 (unregistering): Released all slaves [ 908.559362][T28892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.577262][T28892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.651152][T28892] team0: Port device team_slave_0 added [ 908.671521][T28892] team0: Port device team_slave_1 added [ 908.707943][T20459] Bluetooth: hci1: command tx timeout [ 908.717761][T19733] !©9: left promiscuous mode [ 908.743834][T28892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.750870][T28892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.781875][T28892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.807168][T19733] tipc: Left network mode [ 908.823431][T28892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.830606][T28892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.858621][T28892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.992488][T28892] hsr_slave_0: entered promiscuous mode [ 909.002895][T28892] hsr_slave_1: entered promiscuous mode [ 909.009301][T28892] debugfs: 'hsr0' already exists in 'hsr' [ 909.020009][T28892] Cannot create hsr debugfs directory [ 909.310676][T28883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.673031][T28936] bridge2: entered promiscuous mode [ 909.685211][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'. [ 910.245061][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6246'. [ 910.364584][T28982] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6248'. [ 910.394533][T28984] openvswitch: netlink: Missing key (keys=40, expected=80) [ 910.710220][T28994] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6250'. [ 910.782940][T20459] Bluetooth: hci1: command tx timeout [ 911.668241][T23960] lo speed is unknown, defaulting to 1000 [ 911.669413][T28980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6245'. [ 911.678432][T23960] infiniband syz2: ib_query_port failed (-19) [ 911.691740][T28987] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 911.719247][T28990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.810320][T28990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.839352][T28991] ip6tnl0: entered promiscuous mode [ 911.855475][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6249'. [ 911.876083][T28994] 0ªX¹¦À: renamed from caif0 [ 911.896387][T28994] 0ªX¹¦À: entered allmulticast mode [ 911.902168][T28994] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 911.929976][T29001] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 912.031573][T29011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 912.042104][T29011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6256'. [ 912.054844][T29011] netlink: 'syz.2.6256': attribute type 18 has an invalid length. [ 912.268330][T28892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 912.315406][T28892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 912.355354][T28892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 912.389795][T29025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6259'. [ 912.453995][T28892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 912.579083][T19733] IPVS: stop unused estimator thread 0... [ 912.728460][T28892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.755048][T28892] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.780945][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.788190][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.841971][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.849262][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.862974][T20459] Bluetooth: hci1: command tx timeout [ 913.177543][T28892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.524921][T29084] syzkaller0: entered promiscuous mode [ 913.535137][T29084] syzkaller0: entered allmulticast mode [ 913.707863][T29101] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6267'. [ 913.942226][T29100] netlink: 'syz.0.6268': attribute type 5 has an invalid length. [ 914.037069][T29110] netlink: 272 bytes leftover after parsing attributes in process `syz.2.6269'. [ 914.070978][T28892] veth0_vlan: entered promiscuous mode [ 914.101310][T28892] veth1_vlan: entered promiscuous mode [ 914.237148][T28892] veth0_macvtap: entered promiscuous mode [ 914.267986][T28892] veth1_macvtap: entered promiscuous mode [ 914.324477][T28892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.357553][T28892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.424271][ T7772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.450237][T29120] syzkaller0: entered promiscuous mode [ 914.455987][T29120] syzkaller0: entered allmulticast mode [ 914.462501][ T7772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.472162][ T7772] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.498809][ T7772] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.553110][T29089] gre0 speed is unknown, defaulting to 1000 [ 914.561054][T29123] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6274'. [ 914.667957][ T7760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.686028][ T7760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.740269][ T7760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.785080][ T7760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.819317][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 914.833166][T29130] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6276'. [ 914.862322][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 914.889875][T29130] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6276'. [ 914.912916][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 914.934179][T20459] Bluetooth: hci1: command tx timeout [ 914.937277][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 914.994225][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 915.002195][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 915.011796][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 915.020899][T29130] netlink: 'syz.2.6276': attribute type 1 has an invalid length. [ 915.154403][T29144] syzkaller0: entered promiscuous mode [ 915.162578][T29144] syzkaller0: entered allmulticast mode [ 915.226026][T29150] netlink: 'syz.1.6283': attribute type 11 has an invalid length. [ 915.343202][T29155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.438648][T29157] sock: sock_timestamping_bind_phc: sock not bind to device [ 915.789958][T29180] Cannot find add_set index 0 as target [ 916.707343][T29201] syzkaller0: entered promiscuous mode [ 916.713025][T29201] syzkaller0: entered allmulticast mode [ 916.736964][T29212] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 916.737372][T29217] xfrm0: entered promiscuous mode [ 916.755898][T29217] xfrm0: entered allmulticast mode [ 916.952167][T29231] __nla_validate_parse: 36 callbacks suppressed [ 916.952185][T29231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6306'. [ 920.150307][T29235] validate_nla: 28 callbacks suppressed [ 920.150326][T29235] netlink: 'syz.3.6305': attribute type 1 has an invalid length. [ 920.161710][T29233] dvmrp1: entered allmulticast mode [ 920.170096][T29237] dvmrp1: left allmulticast mode [ 920.185859][T29235] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6305'. [ 920.288501][T29255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6310'. [ 920.323182][T29255] netlink: 'syz.4.6310': attribute type 12 has an invalid length. [ 920.369273][T29259] netlink: 'syz.3.6313': attribute type 3 has an invalid length. [ 920.404863][T29262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6311'. [ 920.731831][T29282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6319'. [ 921.338816][T29308] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 921.441249][T29318] xt_l2tp: missing protocol rule (udp|l2tpip) [ 921.457759][T29320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6328'. [ 921.474285][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6328'. [ 921.681955][T29333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6332'. [ 921.857689][ T30] audit: type=1800 audit(1774424720.113:11): pid=29347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6336" name="blkio.bfq.time_recursive" dev="tmpfs" ino=101 res=0 errno=0 [ 921.890495][T29344] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 921.925253][T29344] team0 (unregistering): Port device team_slave_0 removed [ 921.989468][T29344] team0 (unregistering): Failed to send options change via netlink (err -105) [ 922.034265][T29344] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 922.062433][T29344] team0 (unregistering): Port device team_slave_1 removed [ 922.321971][T29366] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 922.354984][T29379] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6347'. [ 922.407318][T29383] FAULT_INJECTION: forcing a failure. [ 922.407318][T29383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.456527][T29383] CPU: 1 UID: 0 PID: 29383 Comm: syz.3.6349 Not tainted syzkaller #0 PREEMPT(full) [ 922.456554][T29383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.456573][T29383] Call Trace: [ 922.456580][T29383] [ 922.456587][T29383] dump_stack_lvl+0xe8/0x150 [ 922.456617][T29383] should_fail_ex+0x412/0x560 [ 922.456648][T29383] _copy_from_user+0x2d/0xb0 [ 922.456670][T29383] mptcp_setsockopt+0x20ce/0x36a0 [ 922.456779][T29383] ? aa_sk_perm+0x6d5/0x900 [ 922.456808][T29383] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 922.456835][T29383] ? __pfx_aa_sk_perm+0x10/0x10 [ 922.456858][T29383] ? __fget_files+0x2a/0x420 [ 922.456881][T29383] ? aa_sock_opt_perm+0xff/0x1a0 [ 922.456906][T29383] ? sock_common_setsockopt+0x36/0xc0 [ 922.456930][T29383] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 922.456954][T29383] do_sock_setsockopt+0x17c/0x1b0 [ 922.456976][T29383] __x64_sys_setsockopt+0x13d/0x1b0 [ 922.457001][T29383] do_syscall_64+0x14d/0xf80 [ 922.457020][T29383] ? trace_irq_disable+0x3b/0x150 [ 922.457045][T29383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.457063][T29383] ? clear_bhb_loop+0x40/0x90 [ 922.457085][T29383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.457102][T29383] RIP: 0033:0x7fd0dcf9c799 [ 922.457120][T29383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.457135][T29383] RSP: 002b:00007fd0ddee9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 922.457154][T29383] RAX: ffffffffffffffda RBX: 00007fd0dd215fa0 RCX: 00007fd0dcf9c799 [ 922.457167][T29383] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 922.457178][T29383] RBP: 00007fd0ddee9090 R08: 0000000000000004 R09: 0000000000000000 [ 922.457188][T29383] R10: 0000200000000ec0 R11: 0000000000000246 R12: 0000000000000001 [ 922.457200][T29383] R13: 00007fd0dd216038 R14: 00007fd0dd215fa0 R15: 00007ffdd6551f88 [ 922.457226][T29383] [ 922.687548][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6343'. [ 922.707754][T29395] Bluetooth: MGMT ver 1.23 [ 922.740327][T29399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.783304][T29373] nbd0: detected capacity change from 0 to 63 [ 922.794360][T29406] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.6353'. [ 922.813831][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6353'. [ 922.841349][T20459] block nbd0: Receive control failed (result -104) [ 923.363506][T29439] tls: option downdelay: invalid value (18446744073709547007) [ 923.378698][T29439] tls: option downdelay: allowed values 0 - 2147483647 [ 923.390294][T29439] tls (unregistering): Released all slaves [ 923.589788][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6370'. [ 923.861594][T29431] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.869284][T29431] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.329117][T29482] IPv6: addrconf: prefix option has invalid lifetime [ 924.330220][T29431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.655819][T29448] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 924.759490][ T7760] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.785649][ T7760] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.795330][ T7760] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.830214][ T7760] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.875411][T29490] netlink: 'syz.3.6373': attribute type 4 has an invalid length. [ 924.890172][T29490] netlink: 'syz.3.6373': attribute type 4 has an invalid length. [ 924.976366][T29495] syzkaller0: entered promiscuous mode [ 924.981322][T29493] IPVS: Scheduler module ip_vs_ not found [ 924.981871][T29495] syzkaller0: entered allmulticast mode [ 924.997373][T29493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6375'. [ 925.079995][T29495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6376'. [ 925.096450][T29495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.099631][T29496] sctp: [Deprecated]: syz.4.6375 (pid 29496) Use of int in maxseg socket option. [ 925.099631][T29496] Use struct sctp_assoc_value instead [ 925.397033][T29513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 925.685522][T29541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6388'. [ 925.879264][T29550] tipc: Started in network mode [ 925.889377][T29550] tipc: Node identity ba410f290d02, cluster identity 4711 [ 925.922096][T29550] tipc: Enabled bearer , priority 0 [ 925.926312][T29556] netlink: 'syz.2.6395': attribute type 10 has an invalid length. [ 925.930398][T29550] syzkaller0: entered promiscuous mode [ 925.942929][T29550] syzkaller0: entered allmulticast mode [ 925.957892][T29550] tipc: Resetting bearer [ 926.007501][T29556] veth0_vlan: left promiscuous mode [ 926.019962][T29556] veth0_vlan: entered promiscuous mode [ 926.029617][T29562] netlink: 'syz.4.6392': attribute type 7 has an invalid length. [ 926.039185][T29556] team0: Device veth0_vlan failed to register rx_handler [ 926.042730][T29562] netlink: 'syz.4.6392': attribute type 8 has an invalid length. [ 926.184619][T29568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6398'. [ 926.199321][T29568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6398'. [ 926.245643][T29571] bond0: entered allmulticast mode [ 926.294669][T20459] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 926.692512][T29548] tipc: Resetting bearer [ 926.715810][T29548] tipc: Disabling bearer [ 926.762539][T29621] netlink: 'syz.1.6413': attribute type 2 has an invalid length. [ 926.778582][T29621] : entered promiscuous mode [ 926.842836][T29624] vlan2: entered allmulticast mode [ 926.848239][T29624] gretap0: entered allmulticast mode [ 927.087276][T29621] gre0 speed is unknown, defaulting to 1000 [ 927.407558][T29652] __nla_validate_parse: 4 callbacks suppressed [ 927.407578][T29652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6421'. [ 927.757485][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6431'. [ 927.844046][T29684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6427'. [ 927.890073][T29684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 927.897377][T29684] IPv6: NLM_F_CREATE should be set when creating new route [ 928.284676][T29697] netlink: 'syz.2.6435': attribute type 5 has an invalid length. [ 928.691285][T29722] tipc: Started in network mode [ 928.701866][T29722] tipc: Node identity e2acf801815c, cluster identity 4711 [ 928.729171][T29722] tipc: Enabled bearer , priority 0 [ 928.762133][T29722] veth0_to_team: entered promiscuous mode [ 928.772003][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6444'. [ 928.787521][T29715] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6442'. [ 928.813361][T29715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6442'. [ 928.816596][T29722] veth0_to_team: entered allmulticast mode [ 929.009536][T29735] team0: entered promiscuous mode [ 929.173999][T29735] team_slave_0: entered promiscuous mode [ 929.190450][T29735] team_slave_1: entered promiscuous mode [ 929.221272][T29725] gre0 speed is unknown, defaulting to 1000 [ 929.526329][T29748] --map-set only usable from mangle table [ 929.756141][T29759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6449'. [ 929.767498][T29759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6449'. [ 929.850843][T29485] tipc: Node number set to 1676736513 [ 929.964834][T29737] gre0 speed is unknown, defaulting to 1000 [ 929.974030][T29711] tipc: Disabling bearer [ 930.093512][T29774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6451'. [ 930.200924][T29778] SET target dimension over the limit! [ 930.300374][T29791] netlink: 'syz.3.6455': attribute type 10 has an invalid length. [ 930.333793][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6456'. [ 930.344191][T29791] veth1_macvtap: left promiscuous mode [ 930.351529][T29791] team0: Device veth1_macvtap failed to register rx_handler [ 930.449313][T29789] syzkaller0: entered promiscuous mode [ 930.474939][T29789] syzkaller0: entered allmulticast mode [ 930.526580][T29789] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 930.990243][T29807] netlink: 'syz.3.6460': attribute type 1 has an invalid length. [ 931.164608][T29795] gre0 speed is unknown, defaulting to 1000 [ 931.333614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.362352][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.420878][T29822] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.428254][T29822] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.653667][T29830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 932.206193][T29840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.647813][T29854] __nla_validate_parse: 4 callbacks suppressed [ 932.647832][T29854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6479'. [ 932.677314][T29855] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 932.689833][T29857] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6480'. [ 932.698547][T29855] pim6reg1: entered promiscuous mode [ 932.704309][T29855] pim6reg1: entered allmulticast mode [ 932.802044][T29857] vlan3: entered allmulticast mode [ 932.809565][T29857] erspan0: entered allmulticast mode [ 932.953314][T29866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 932.993977][ T7760] bond0: (slave bond_slave_0): interface is now down [ 933.012308][T29871] bond0: option arp_validate: invalid value (55553) [ 933.034306][ T7760] bond0: (slave bond_slave_1): interface is now down [ 933.051621][T29876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6483'. [ 933.082068][ T7760] bond0: now running without any active interface! [ 933.447166][T29899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6494'. [ 933.603609][T29897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6493'. [ 933.668144][T29916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6497'. [ 933.678125][T29897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6493'. [ 933.680163][T29916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6497'. [ 933.849964][T29920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6500'. [ 933.862153][T29923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6499'. [ 934.191377][T29938] : entered promiscuous mode [ 934.298691][T29942] netlink: 'syz.4.6508': attribute type 3 has an invalid length. [ 934.310718][T29942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 934.345442][T29944] tipc: Started in network mode [ 934.361014][T29944] tipc: Node identity ff, cluster identity 4711 [ 934.369543][T29944] tipc: Enabling of bearer rejected, failed to enable media [ 934.563972][T29956] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20004 [ 934.663928][T29965] netlink: 'syz.3.6516': attribute type 1 has an invalid length. [ 934.905208][T29975] dvmrp1: entered allmulticast mode [ 935.100628][T29990] syz_tun: entered promiscuous mode [ 935.124491][T29990] syz_tun: entered allmulticast mode [ 935.199677][T29994] netlink: zone id is out of range [ 935.228052][T29994] netlink: zone id is out of range [ 935.242692][T29994] netlink: zone id is out of range [ 935.247834][T29994] netlink: zone id is out of range [ 935.296977][T30003] netlink: zone id is out of range [ 935.304941][T29994] netlink: zone id is out of range [ 935.312573][T29994] netlink: zone id is out of range [ 935.540357][T30017] ip6tnl2: entered promiscuous mode [ 935.626966][T30028] hsr0: entered promiscuous mode [ 935.632925][T30028] macvlan2: entered allmulticast mode [ 935.639666][T30028] hsr0: entered allmulticast mode [ 935.647620][T30028] hsr_slave_0: entered allmulticast mode [ 935.654273][T30028] hsr_slave_1: entered allmulticast mode [ 935.665390][T30028] net veth1_virt_wifi ªªªªªOê!|WZB4: renamed from virt_wifi0 [ 935.819466][T30034] gtp1: entered promiscuous mode [ 935.833852][T30034] gtp1: entered allmulticast mode [ 936.096013][T30058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 936.292003][T30064] vlan0: entered promiscuous mode [ 936.325190][T30076] block nbd1: server does not support multiple connections per device. [ 936.342457][T30076] block nbd1: shutting down sockets [ 936.388012][T30022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 936.400772][T30064] netlink: 'syz.2.6549': attribute type 1 has an invalid length. [ 936.671420][T30097] syzkaller0: entered promiscuous mode [ 936.677329][T30097] syzkaller0: entered allmulticast mode [ 936.685726][T30097] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 936.698937][T30097] xt_nat: multiple ranges no longer supported [ 936.702687][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 936.706187][T30097] xt_TCPMSS: Only works on TCP SYN packets [ 936.713100][ C0] lec:lec_tx_timeout: lec0 [ 936.766046][T30104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 936.953668][T30111] syzkaller1: entered promiscuous mode [ 936.987885][T30111] syzkaller1: entered allmulticast mode [ 937.161280][T30118] : entered promiscuous mode [ 937.255492][T30132] netlink: 'syz.2.6570': attribute type 1 has an invalid length. [ 937.274943][T30132] netlink: 'syz.2.6570': attribute type 2 has an invalid length. [ 937.375262][T30141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.489894][T30147] net_ratelimit: 710 callbacks suppressed [ 937.489916][T30147] netlink: zone id is out of range [ 937.497236][T30125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.508615][T30147] netlink: zone id is out of range [ 937.523831][T30147] netlink: get zone limit has 4 unknown bytes [ 937.540049][T30125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.762533][T30148] batadv_slave_1: entered promiscuous mode [ 937.771858][T13034] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.802377][T13034] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.819167][T13034] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.838433][T30161] tipc: MTU too low for tipc bearer [ 937.851831][T13034] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.971974][T30174] tipc: Enabling of bearer rejected, failed to enable media [ 938.039534][T30180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 938.117180][T30182] nbd: must specify at least one socket [ 938.301245][T30142] batadv_slave_1: left promiscuous mode [ 938.641381][T30199] netlink: 'syz.4.6588': attribute type 2 has an invalid length. [ 939.047020][T30189] gre0 speed is unknown, defaulting to 1000 [ 939.232579][T30221] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 939.258306][T30221] netlink: 'syz.0.6595': attribute type 1 has an invalid length. [ 939.489288][T30224] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.497005][T30224] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.516389][T30228] netlink: 'syz.1.6594': attribute type 4 has an invalid length. [ 939.539009][T30224] team0: left promiscuous mode [ 939.544530][T30224] team_slave_0: left promiscuous mode [ 939.550243][T30224] team_slave_1: left promiscuous mode [ 939.594132][T30224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.611453][T30224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.739631][T30224] vlan2: left allmulticast mode [ 939.744564][T30224] gretap0: left allmulticast mode [ 939.749720][T30224] vlan3: left allmulticast mode [ 939.759504][T30224] erspan0: left allmulticast mode [ 939.765222][T30224] gtp1: left promiscuous mode [ 939.769910][T30224] gtp1: left allmulticast mode [ 939.803187][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.830709][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.840577][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.894092][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.139469][T30253] __nla_validate_parse: 18 callbacks suppressed [ 940.139488][T30253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6604'. [ 940.167222][T30249] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 940.202381][T30255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6605'. [ 940.211595][T30249] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 940.232785][T30249] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 940.240552][T30249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6603'. [ 940.258554][T30253] netlink: 'syz.3.6604': attribute type 61 has an invalid length. [ 940.282223][T30249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6603'. [ 940.294330][T30239] gre0 speed is unknown, defaulting to 1000 [ 940.461536][T30269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6608'. [ 940.486194][T30269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6608'. [ 940.824306][T30288] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6614'. [ 940.886863][T30286] tipc: Enabled bearer , priority 0 [ 940.894515][T30286] syzkaller0: entered promiscuous mode [ 940.900757][T30288] xt_connbytes: Forcing CT accounting to be enabled [ 940.909176][T30286] syzkaller0: entered allmulticast mode [ 941.086856][T30292] macsec1: entered promiscuous mode [ 941.100280][T30292] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 941.137199][T30286] tipc: Resetting bearer [ 941.225157][T30285] tipc: Resetting bearer [ 941.254360][T30285] tipc: Disabling bearer [ 941.340740][T30307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6619'. [ 941.521920][T30313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6622'. [ 941.563484][T30313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6622'. [ 941.566594][T30315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 941.640065][T30318] xt_TCPMSS: Only works on TCP SYN packets [ 941.827980][T30333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 941.869185][T30332] validate_nla: 4 callbacks suppressed [ 941.869206][T30332] netlink: 'syz.3.6626': attribute type 9 has an invalid length. [ 941.939427][T30340] netlink: 'syz.1.6628': attribute type 13 has an invalid length. [ 942.458451][T23092] lec:lec_start_xmit: lec0:No lecd attached [ 942.629641][T30365] gre0 speed is unknown, defaulting to 1000 [ 942.690393][T30373] ÿÿÿÿÿÿ: renamed from vlan1 [ 942.901364][T30383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 943.206934][T30401] netlink: 'syz.3.6646': attribute type 4 has an invalid length. [ 943.286148][T30405] FAULT_INJECTION: forcing a failure. [ 943.286148][T30405] name failslab, interval 1, probability 0, space 0, times 0 [ 943.299164][T30405] CPU: 1 UID: 0 PID: 30405 Comm: syz.3.6647 Not tainted syzkaller #0 PREEMPT(full) [ 943.299190][T30405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.299202][T30405] Call Trace: [ 943.299210][T30405] [ 943.299219][T30405] dump_stack_lvl+0xe8/0x150 [ 943.299252][T30405] should_fail_ex+0x412/0x560 [ 943.299283][T30405] should_failslab+0xa8/0x100 [ 943.299308][T30405] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 943.299331][T30405] ? __alloc_skb+0x1d0/0x7d0 [ 943.299351][T30405] ? __local_bh_enable_ip+0xd0/0x130 [ 943.299381][T30405] __alloc_skb+0x1d0/0x7d0 [ 943.299399][T30405] ? netlink_ack_tlv_len+0x6c/0x210 [ 943.299423][T30405] netlink_ack+0x146/0xa50 [ 943.299440][T30405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.299466][T30405] ? __lock_acquire+0x6b5/0x2cf0 [ 943.299501][T30405] netlink_rcv_skb+0x2b6/0x4b0 [ 943.299528][T30405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.299553][T30405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.299589][T30405] ? down_read+0x272/0x2e0 [ 943.299611][T30405] ? genl_rcv+0xd/0x40 [ 943.299635][T30405] genl_rcv+0x28/0x40 [ 943.299657][T30405] netlink_unicast+0x80f/0x9b0 [ 943.299691][T30405] ? __pfx_netlink_unicast+0x10/0x10 [ 943.299720][T30405] ? netlink_sendmsg+0x650/0xb40 [ 943.299737][T30405] ? skb_put+0x11b/0x210 [ 943.299762][T30405] netlink_sendmsg+0x813/0xb40 [ 943.299791][T30405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.299814][T30405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 943.299842][T30405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 943.299867][T30405] ____sys_sendmsg+0x972/0x9f0 [ 943.299899][T30405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.299931][T30405] ? import_iovec+0x73/0xa0 [ 943.299954][T30405] ___sys_sendmsg+0x2a5/0x360 [ 943.299983][T30405] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.300042][T30405] ? __fget_files+0x2a/0x420 [ 943.300069][T30405] ? __fget_files+0x3a0/0x420 [ 943.300104][T30405] __x64_sys_sendmsg+0x1bd/0x2a0 [ 943.300130][T30405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.300162][T30405] ? __pfx_ksys_write+0x10/0x10 [ 943.300195][T30405] do_syscall_64+0x14d/0xf80 [ 943.300216][T30405] ? trace_irq_disable+0x3b/0x150 [ 943.300242][T30405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.300260][T30405] ? clear_bhb_loop+0x40/0x90 [ 943.300283][T30405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.300302][T30405] RIP: 0033:0x7fd0dcf9c799 [ 943.300320][T30405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.300336][T30405] RSP: 002b:00007fd0ddee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.300355][T30405] RAX: ffffffffffffffda RBX: 00007fd0dd215fa0 RCX: 00007fd0dcf9c799 [ 943.300369][T30405] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 943.300381][T30405] RBP: 00007fd0ddee9090 R08: 0000000000000000 R09: 0000000000000000 [ 943.300393][T30405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.300404][T30405] R13: 00007fd0dd216038 R14: 00007fd0dd215fa0 R15: 00007ffdd6551f88 [ 943.300434][T30405] [ 943.713030][T30403] nbd1: detected capacity change from 0 to 63 [ 943.722277][T30400] netlink: 'syz.0.6645': attribute type 1 has an invalid length. [ 943.863415][T20459] block nbd1: Receive control failed (result -104) [ 944.015747][T30419] netlink: 'syz.2.6653': attribute type 1 has an invalid length. [ 944.460085][T30451] vlan1: entered allmulticast mode [ 944.466078][T30451] bridge3: entered allmulticast mode [ 945.085727][T30479] netlink: 'syz.1.6669': attribute type 27 has an invalid length. [ 945.108161][T30479] xfrm0: left promiscuous mode [ 945.113458][T30479] xfrm0: left allmulticast mode [ 945.144585][T30479] vlan2: left promiscuous mode [ 945.149409][T30479] team0: left promiscuous mode [ 945.167388][T30481] __nla_validate_parse: 19 callbacks suppressed [ 945.167407][T30481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6670'. [ 945.201010][T30485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 945.207302][T30479] team_slave_0: left promiscuous mode [ 945.215818][T30479] team_slave_1: left promiscuous mode [ 945.221420][T30479] bridge1: left promiscuous mode [ 945.227333][T30479] vlan2: left allmulticast mode [ 945.232225][T30479] team0: left allmulticast mode [ 945.281040][T30491] netlink: 'syz.3.6673': attribute type 2 has an invalid length. [ 945.309713][T30479] team_slave_0: left allmulticast mode [ 945.320716][T30479] team_slave_1: left allmulticast mode [ 945.335333][T30479] bridge1: left allmulticast mode [ 945.341458][T30479] bridge2: left promiscuous mode [ 945.347167][T30479] bond0: left allmulticast mode [ 945.355668][T30479] vlan1: left allmulticast mode [ 945.360572][T30479] bridge3: left allmulticast mode [ 945.421261][T30487] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.434869][T30487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 945.506513][T30498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6675'. [ 945.686459][T30515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6680'. [ 945.712105][T30508] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 945.765521][T30508] bond1 (unregistering): Released all slaves [ 945.790408][T30524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6683'. [ 945.828892][T30524] netlink: 'syz.0.6683': attribute type 12 has an invalid length. [ 945.855614][T30526] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6684'. [ 945.903425][T30528] netlink: 'syz.3.6685': attribute type 2 has an invalid length. [ 945.927729][T30528] l24): entered promiscuous mode [ 946.092904][T30537] netlink: 'syz.3.6689': attribute type 2 has an invalid length. [ 946.219802][T30539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6690'. [ 946.241227][T30542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6691'. [ 946.519317][T30555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6695'. [ 946.548480][T30553] syzkaller0: entered promiscuous mode [ 946.578781][T30553] syzkaller0: entered allmulticast mode [ 946.731219][T30561] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6697'. [ 946.740647][T30561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.176055][T30588] validate_nla: 3 callbacks suppressed [ 947.176073][T30588] netlink: 'syz.3.6706': attribute type 1 has an invalid length. [ 947.632867][T30592] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 947.652791][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 947.660865][ C0] lec:lec_tx_timeout: lec0 [ 947.674829][T30579] lec:lec_atm_close: lec0: Shut down! [ 947.867383][T30603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.895874][T30603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.061441][T30611] macsec0: entered allmulticast mode [ 948.088893][T30615] veth1_macvtap: entered allmulticast mode [ 948.100932][T30615] macsec0: left allmulticast mode [ 948.107133][T30615] veth1_macvtap: left allmulticast mode [ 948.213145][ T7760] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.232548][ T7760] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.248604][ T7760] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.273767][ T7760] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.666279][T30640] netlink: 'syz.1.6720': attribute type 6 has an invalid length. [ 948.677370][T30640] netlink: 'syz.1.6720': attribute type 5 has an invalid length. [ 948.715458][T30640] netlink: 'syz.1.6720': attribute type 29 has an invalid length. [ 948.757592][T30640] netlink: 'syz.1.6720': attribute type 29 has an invalid length. [ 948.789454][T30640] netlink: 'syz.1.6720': attribute type 32 has an invalid length. [ 948.981575][T30655] syzkaller0: entered promiscuous mode [ 948.987860][T30655] syzkaller0: entered allmulticast mode [ 949.163324][T30666] delete_channel: no stack [ 949.287345][T30672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 949.303879][T30676] pimreg: entered allmulticast mode [ 950.236183][T30735] syzkaller1: entered promiscuous mode [ 950.241775][T30735] syzkaller1: entered allmulticast mode [ 950.313758][T30741] syzkaller1: left promiscuous mode [ 950.319058][T30741] syzkaller1: left allmulticast mode [ 950.583863][ T1919] IPVS: starting estimator thread 0... [ 950.680802][T30756] IPVS: using max 34 ests per chain, 81600 per kthread [ 950.785176][T30760] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 950.792473][T30760] macsec1: left promiscuous mode [ 950.801525][T30748] gre0 speed is unknown, defaulting to 1000 [ 950.833104][T30765] geneve3: entered promiscuous mode [ 950.844000][T19733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.863443][T19733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.885814][T19733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.903850][T19733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.933657][T30770] tipc: Failed to remove unknown binding: 66,0,0/0:509093896/509093897 [ 950.942853][T30770] tipc: Failed to remove unknown binding: 66,0,0/0:509093896/509093897 [ 950.954528][T30770] __nla_validate_parse: 14 callbacks suppressed [ 950.954546][T30770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6761'. [ 950.977018][T30770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6761'. [ 951.283634][T30786] netlink: 'syz.3.6767': attribute type 12 has an invalid length. [ 951.301863][T30786] netlink: 'syz.3.6767': attribute type 29 has an invalid length. [ 951.321622][T30786] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6767'. [ 951.332003][T30786] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6767'. [ 951.475248][T30798] tipc: Enabling of bearer rejected, failed to enable media [ 951.508753][T30802] sctp: [Deprecated]: syz.3.6767 (pid 30802) Use of int in maxseg socket option. [ 951.508753][T30802] Use struct sctp_assoc_value instead [ 951.864968][T30810] bond1: entered allmulticast mode [ 951.870564][T30794] gre0 speed is unknown, defaulting to 1000 [ 951.895053][T30810] netlink: 'syz.1.6772': attribute type 4 has an invalid length. [ 951.910890][T30810] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6772'. [ 951.959417][T30810] bridge4: entered promiscuous mode [ 951.964939][T30810] bridge4: entered allmulticast mode [ 952.124921][T30816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.133682][T30816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.259590][T30817] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 952.267427][T30817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 952.692727][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 952.700834][ C0] lec:lec_tx_timeout: lec0 [ 952.916962][T30832] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6779'. [ 953.012084][T30837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6779'. [ 953.102946][ T2439] block nbd0: Possible stuck request ffff888048d78000: control (read@0,1024B). Runtime 30 seconds [ 953.116365][ T2439] block nbd0: Possible stuck request ffff888048d78200: control (read@1024,1024B). Runtime 30 seconds [ 953.120638][T30839] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 953.127944][ T2439] block nbd0: Possible stuck request ffff888048d78400: control (read@2048,1024B). Runtime 30 seconds [ 953.146432][ T2439] block nbd0: Possible stuck request ffff888048d78600: control (read@3072,1024B). Runtime 30 seconds [ 953.216150][T30842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 953.216293][T30839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 953.223625][T30842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 953.238968][T30842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 953.327807][T30843] bond1: (slave veth3): Enslaving as an active interface with a down link [ 953.365325][T30843] netlink: 'syz.3.6780': attribute type 3 has an invalid length. [ 953.380155][T30839] bond1: (slave veth5): Enslaving as an active interface with a down link [ 953.390029][T30843] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 953.505044][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6782'. [ 953.520298][T30852] netlink: 'syz.3.6780': attribute type 10 has an invalid length. [ 953.534747][T30852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'. [ 953.584129][T30852] dummy0: entered promiscuous mode [ 953.613597][T30852] bond0: (slave dummy0): Releasing backup interface [ 953.638463][T30852] bridge0: port 3(dummy0) entered blocking state [ 953.662820][T30852] bridge0: port 3(dummy0) entered disabled state [ 953.672400][T30852] dummy0: entered allmulticast mode [ 953.896507][T30862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6785'. [ 954.732059][T30902] gre0 speed is unknown, defaulting to 1000 [ 954.770083][T30918] netlink: 'syz.3.6802': attribute type 2 has an invalid length. [ 954.855225][T30921] netlink: 'syz.0.6803': attribute type 2 has an invalid length. [ 954.873176][T30921] 9: entered promiscuous mode [ 955.964304][T30945] __nla_validate_parse: 10 callbacks suppressed [ 955.964318][T30945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6810'. [ 956.032035][T30948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6809'. [ 956.300964][T30964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6815'. [ 957.313172][T30969] gre0 speed is unknown, defaulting to 1000 [ 958.314465][T30934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.434521][T30989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6821'. [ 958.465074][T30989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6821'. [ 958.655149][T30998] syzkaller0: entered promiscuous mode [ 958.660651][T30998] syzkaller0: entered allmulticast mode [ 959.018040][T31015] netlink: 284 bytes leftover after parsing attributes in process `syz.1.6830'. [ 959.158447][T31029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6834'. [ 959.169225][T31029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6834'. [ 959.331933][T31040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6840'. [ 959.344659][T31040] netlink: 'syz.1.6840': attribute type 12 has an invalid length. [ 959.581325][T31055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6842'. [ 959.617763][T31057] x_tables: unsorted underflow at hook 4 [ 960.745129][T31103] netlink: 'syz.4.6852': attribute type 12 has an invalid length. [ 961.008831][T31107] __nla_validate_parse: 5 callbacks suppressed [ 961.008850][T31107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6856'. [ 961.034281][T31107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6856'. [ 961.063125][T31107] netlink: 'syz.2.6856': attribute type 14 has an invalid length. [ 961.205970][ T7760] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.222945][ T7760] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.253149][ T7760] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.266702][ T7760] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.703220][T31120] gre0 speed is unknown, defaulting to 1000 [ 961.961356][T31138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6865'. [ 961.995611][T31138] netlink: 'syz.3.6865': attribute type 12 has an invalid length. [ 962.085331][T31128] gre0 speed is unknown, defaulting to 1000 [ 962.587350][T31161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6875'. [ 962.705708][T31166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6876'. [ 963.037274][T31175] siw: device registration error -23 [ 963.153863][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6879'. [ 963.221229][T31179] netlink: 'syz.4.6879': attribute type 12 has an invalid length. [ 963.358550][T31179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6879'. [ 964.222780][T31234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6897'. [ 964.233678][T31234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6897'. [ 964.329516][T31227] xt_hashlimit: size too large, truncated to 1048576 [ 964.382489][T31231] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 964.479241][T31246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6901'. [ 964.575666][T31251] netlink: 'syz.3.6903': attribute type 12 has an invalid length. [ 964.630447][ T7743] IPVS: starting estimator thread 0... [ 964.732744][T31256] IPVS: using max 28 ests per chain, 67200 per kthread [ 964.939762][T31281] netlink: 'syz.1.6911': attribute type 6 has an invalid length. [ 965.165718][T31291] syzkaller0: entered promiscuous mode [ 965.342247][T31301] netlink: 'syz.3.6918': attribute type 29 has an invalid length. [ 965.373752][T31301] netlink: 'syz.3.6918': attribute type 29 has an invalid length. [ 965.460668][T31303] syzkaller0: entered promiscuous mode [ 965.466398][T31303] syzkaller0: entered allmulticast mode [ 966.201774][T31355] __nla_validate_parse: 7 callbacks suppressed [ 966.201793][T31355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6935'. [ 966.238089][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6935'. [ 966.473927][T31372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6939'. [ 966.504218][T31376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6940'. [ 966.632024][T31382] tipc: Started in network mode [ 966.637980][T31383] netlink: 'syz.0.6943': attribute type 4 has an invalid length. [ 966.642692][T31382] tipc: Node identity , cluster identity 4711 [ 966.646339][T31383] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6943'. [ 966.660863][T31382] tipc: Failed to obtain node identity [ 966.660895][T31382] tipc: Enabling of bearer rejected, failed to enable media [ 966.720883][T31346] gre0 speed is unknown, defaulting to 1000 [ 966.847601][T31389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6945'. [ 967.101565][T31406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6950'. [ 967.144450][T31406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6950'. [ 967.404324][T31422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6955'. [ 967.414763][T31422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6955'. [ 967.446099][T31430] netlink: 'syz.4.6958': attribute type 1 has an invalid length. [ 967.534134][T31430] bond1: entered promiscuous mode [ 967.540801][T31430] bond1: entered allmulticast mode [ 967.556521][T31430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 967.689750][T31438] macvlan2: entered promiscuous mode [ 967.762864][T31438] macvlan2: entered allmulticast mode [ 967.772186][T31438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 968.418761][T31458] bond0: entered promiscuous mode [ 968.425464][T31458] gretap0: entered promiscuous mode [ 968.431817][T31458] gretap0: left promiscuous mode [ 968.465647][T31458] bond0: left promiscuous mode [ 968.592577][T31466] "syz.2.6966" (31466) uses obsolete ecb(arc4) skcipher [ 968.746609][T31476] bridge0: port 3(vlan2) entered blocking state [ 968.753287][T31476] bridge0: port 3(vlan2) entered disabled state [ 968.759869][T31476] vlan2: entered allmulticast mode [ 968.765643][T31476] bond0: entered allmulticast mode [ 968.770887][T31476] bond_slave_0: entered allmulticast mode [ 968.777600][T31476] bond_slave_1: entered allmulticast mode [ 968.785732][T31476] vlan2: entered promiscuous mode [ 968.790868][T31476] bond0: entered promiscuous mode [ 968.796583][T31476] bond_slave_0: entered promiscuous mode [ 968.802562][T31476] bond_slave_1: entered promiscuous mode [ 968.902015][T31480] bond2: entered allmulticast mode [ 968.920912][T31481] bond3: entered allmulticast mode [ 968.995386][T31488] FAULT_INJECTION: forcing a failure. [ 968.995386][T31488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.009390][T31488] CPU: 0 UID: 0 PID: 31488 Comm: syz.4.6973 Not tainted syzkaller #0 PREEMPT(full) [ 969.009415][T31488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.009427][T31488] Call Trace: [ 969.009435][T31488] [ 969.009444][T31488] dump_stack_lvl+0xe8/0x150 [ 969.009478][T31488] should_fail_ex+0x412/0x560 [ 969.009507][T31488] _copy_from_user+0x2d/0xb0 [ 969.009537][T31488] ___sys_sendmsg+0x1c6/0x360 [ 969.009570][T31488] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.009619][T31488] ? __fget_files+0x2a/0x420 [ 969.009643][T31488] ? __fget_files+0x3a0/0x420 [ 969.009675][T31488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 969.009698][T31488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.009729][T31488] ? __pfx_ksys_write+0x10/0x10 [ 969.009759][T31488] do_syscall_64+0x14d/0xf80 [ 969.009783][T31488] ? trace_irq_disable+0x3b/0x150 [ 969.009808][T31488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.009826][T31488] ? clear_bhb_loop+0x40/0x90 [ 969.009848][T31488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.009865][T31488] RIP: 0033:0x7f888f79c799 [ 969.009882][T31488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.009896][T31488] RSP: 002b:00007f88906c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.009914][T31488] RAX: ffffffffffffffda RBX: 00007f888fa15fa0 RCX: 00007f888f79c799 [ 969.009925][T31488] RDX: 0000000000000800 RSI: 0000200000000640 RDI: 000000000000000c [ 969.009935][T31488] RBP: 00007f88906c9090 R08: 0000000000000000 R09: 0000000000000000 [ 969.009945][T31488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.009954][T31488] R13: 00007f888fa16038 R14: 00007f888fa15fa0 R15: 00007fff3cb69b78 [ 969.009985][T31488] [ 969.707979][T31515] netlink: 'syz.1.6981': attribute type 3 has an invalid length. [ 970.207241][T20459] Bluetooth: hci1: link tx timeout [ 970.213961][T20459] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 970.314671][T31539] netlink: 'syz.0.6989': attribute type 21 has an invalid length. [ 970.343639][T31539] netlink: 'syz.0.6989': attribute type 20 has an invalid length. [ 970.436897][T31542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.228746][T31566] __nla_validate_parse: 19 callbacks suppressed [ 971.228773][T31566] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6997'. [ 971.310401][T31573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6999'. [ 971.321173][T31573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6999'. [ 971.636709][T31583] syzkaller0: entered promiscuous mode [ 971.659681][T31583] syzkaller0: entered allmulticast mode [ 971.680383][T31588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7005'. [ 972.026605][T31605] netlink: 'syz.1.7011': attribute type 1 has an invalid length. [ 972.034704][T31605] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7011'. [ 972.295896][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 972.351901][T31619] netlink: 'syz.3.7016': attribute type 1 has an invalid length. [ 972.793840][T31631] gre0 speed is unknown, defaulting to 1000 [ 972.971363][T31654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7027'. [ 973.392341][T31676] netlink: 'syz.0.7033': attribute type 10 has an invalid length. [ 973.432378][T31676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 973.631577][T31684] netlink: 'syz.1.7034': attribute type 4 has an invalid length. [ 973.631623][T31678] bond3: entered allmulticast mode [ 973.640543][T31684] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7034'. [ 973.858455][T31692] IPVS: length: 35 != 92184 [ 973.919142][T31694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 973.928144][T31695] netlink: 'syz.0.7037': attribute type 27 has an invalid length. [ 974.129529][T31697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.172860][T31697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.223984][ T11] block nbd1: Possible stuck request ffff888026f48000: control (read@0,1024B). Runtime 30 seconds [ 974.239187][ T11] block nbd1: Possible stuck request ffff888026f48200: control (read@1024,1024B). Runtime 30 seconds [ 974.252118][ T11] block nbd1: Possible stuck request ffff888026f48400: control (read@2048,1024B). Runtime 30 seconds [ 974.265126][ T11] block nbd1: Possible stuck request ffff888026f48600: control (read@3072,1024B). Runtime 30 seconds [ 974.385603][T31717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7044'. [ 974.564853][T31729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7048'. [ 974.614971][T31735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7049'. [ 974.804535][T31715] gre0 speed is unknown, defaulting to 1000 [ 974.810624][T31744] netlink: 'syz.0.7052': attribute type 1 has an invalid length. [ 974.833379][T31741] syzkaller1: entered promiscuous mode [ 974.839011][T31741] syzkaller1: entered allmulticast mode [ 975.222984][T31760] 0ªX¹¦À: renamed from caif0 [ 975.236442][T31760] 0ªX¹¦À: entered allmulticast mode [ 975.241672][T31760] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 975.364224][T31769] netlink: 'syz.2.7059': attribute type 1 has an invalid length. [ 975.436984][T31769] NCSI netlink: No device for ifindex 0 [ 975.525084][T31775] netlink: 'syz.1.7061': attribute type 2 has an invalid length. [ 976.100373][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.121336][ T7743] IPVS: starting estimator thread 0... [ 976.164500][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.180420][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.199055][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.217599][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.237070][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.248150][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.255828][T31797] IPVS: using max 31 ests per chain, 74400 per kthread [ 976.274547][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.284095][T31801] __nla_validate_parse: 8 callbacks suppressed [ 976.284113][T31801] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7067'. [ 976.316802][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.352843][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.360108][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.413837][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.421366][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.429563][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.444507][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.462123][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.488357][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.511676][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.539226][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.558147][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.575319][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.590814][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.613202][T19733] wlan0: Trigger new scan to find an IBSS to join [ 976.622000][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.641491][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.658594][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.673822][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.710322][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.740415][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.777195][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.800490][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.838796][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.864245][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.893738][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.904221][T31824] netlink: 'syz.3.7073': attribute type 1 has an invalid length. [ 976.918203][T31794] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:8197 [ 976.929707][T31824] netlink: 'syz.3.7073': attribute type 1 has an invalid length. [ 976.945529][T31824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7073'. [ 976.981615][T31824] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 977.001623][T31824] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 977.235912][T31846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7079'. [ 977.247638][T31846] netlink: 'syz.1.7079': attribute type 12 has an invalid length. [ 977.267311][T31846] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.7079'. [ 977.389813][T31853] atomic_op ffff8880532a9198 conn xmit_atomic 0000000000000000 [ 977.401755][T31853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.410939][T31854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7081'. [ 977.591103][T31864] netlink: 'syz.4.7089': attribute type 1 has an invalid length. [ 977.622197][T31864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7089'. [ 977.624856][T31870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7088'. [ 977.651031][T31869] syzkaller0: entered promiscuous mode [ 977.656813][T31869] syzkaller0: entered allmulticast mode [ 977.746630][T31875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7091'. [ 977.760299][T31875] netlink: 'syz.4.7091': attribute type 12 has an invalid length. [ 977.776046][T31878] netlink: 'syz.1.7092': attribute type 7 has an invalid length. [ 977.782211][T31875] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.7091'. [ 977.885662][T31883] bond2: option packets_per_slave: invalid value (1048582) [ 977.893169][T31883] bond2: option packets_per_slave: allowed values 0 - 65535 [ 977.901486][T31883] bond2 (unregistering): Released all slaves [ 978.094273][T31896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7097'. [ 978.452020][T31911] netlink: 'syz.3.7104': attribute type 12 has an invalid length. [ 978.624660][T31919] syz_tun: entered promiscuous mode [ 978.630524][T31919] vlan3: entered promiscuous mode [ 978.883734][T31927] xt_hashlimit: size too large, truncated to 1048576 [ 979.653241][T19733] wlan0: Trigger new scan to find an IBSS to join [ 979.705519][T31983] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 979.716854][T31983] bond2 (unregistering): Released all slaves [ 979.737217][T31986] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 979.923070][T31994] validate_nla: 3 callbacks suppressed [ 979.923083][T31994] netlink: 'syz.2.7133': attribute type 6 has an invalid length. [ 979.937195][T31994] netlink: 'syz.2.7133': attribute type 7 has an invalid length. [ 979.946470][T31994] netlink: 'syz.2.7133': attribute type 8 has an invalid length. [ 979.954765][T31994] netlink: 'syz.2.7133': attribute type 15 has an invalid length. [ 980.246333][T32014] netlink: 'syz.2.7139': attribute type 12 has an invalid length. [ 980.316580][T32017] syzkaller0: entered promiscuous mode [ 980.325796][T32017] syzkaller0: entered allmulticast mode [ 980.588509][T32029] syz_tun: entered allmulticast mode [ 980.607706][T32029] syz_tun: left allmulticast mode [ 980.642320][T32009] gre0 speed is unknown, defaulting to 1000 [ 980.824199][T32040] batadv_slave_1: entered allmulticast mode [ 980.996234][T32043] lo speed is unknown, defaulting to 1000 [ 981.002785][T32043] lo speed is unknown, defaulting to 1000 [ 981.009209][T32043] lo speed is unknown, defaulting to 1000 [ 981.040280][T32043] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 981.149142][T32058] netlink: 'syz.0.7152': attribute type 12 has an invalid length. [ 981.157321][T32043] lo speed is unknown, defaulting to 1000 [ 981.170759][T32043] lo speed is unknown, defaulting to 1000 [ 981.178561][T32043] lo speed is unknown, defaulting to 1000 [ 981.237953][T32043] lo speed is unknown, defaulting to 1000 [ 981.258724][T32043] lo speed is unknown, defaulting to 1000 [ 981.267774][T32043] lo speed is unknown, defaulting to 1000 [ 981.276717][T32043] lo speed is unknown, defaulting to 1000 [ 981.286902][T32043] lo speed is unknown, defaulting to 1000 [ 981.341214][T32072] __nla_validate_parse: 22 callbacks suppressed [ 981.341234][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7155'. [ 981.528654][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7156'. [ 981.797585][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7157'. [ 981.866123][T32080] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 981.879127][T32080] bond2 (unregistering): Released all slaves [ 982.095827][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'. [ 982.109208][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7162'. [ 982.149448][T32090] bond2 (unregistering): Released all slaves [ 982.350163][T32099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7165'. [ 982.360665][T32099] netlink: 'syz.3.7165': attribute type 12 has an invalid length. [ 982.542735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.612728][T19733] wlan0: Trigger new scan to find an IBSS to join [ 983.173828][ T2439] block nbd0: Possible stuck request ffff888048d78000: control (read@0,1024B). Runtime 60 seconds [ 983.184694][ T2439] block nbd0: Possible stuck request ffff888048d78200: control (read@1024,1024B). Runtime 60 seconds [ 983.195865][ T2439] block nbd0: Possible stuck request ffff888048d78400: control (read@2048,1024B). Runtime 60 seconds [ 983.206790][ T2439] block nbd0: Possible stuck request ffff888048d78600: control (read@3072,1024B). Runtime 60 seconds [ 983.544034][ T7760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.612978][T32102] Bluetooth: hci3: command 0x0406 tx timeout [ 987.627710][ T5195] udevd[5195]: worker [29251] /devices/virtual/block/nbd0 is taking a long time [ 992.776638][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 997.041710][T32102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.051712][T32102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.060784][T32102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.070953][T32120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 997.082659][T32121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.085746][T32120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 997.090473][T32121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.105143][T32121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 997.114523][T32120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 997.128000][T32120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 997.263197][T32116] gre0 speed is unknown, defaulting to 1000 [ 997.535322][T32116] lo speed is unknown, defaulting to 1000 [ 997.535334][T32118] gre0 speed is unknown, defaulting to 1000 [ 997.638918][T32102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 997.648510][T32102] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 997.656643][T32102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 997.664806][T32102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 997.672993][T32102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 997.708293][T20459] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 997.718286][T20459] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 997.727390][T20459] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 997.744153][T20459] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 997.763965][T20459] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 997.792929][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 997.800954][ C0] lec:lec_tx_timeout: lec0 [ 997.888317][T32118] lo speed is unknown, defaulting to 1000 [ 997.970214][T32116] chnl_net:caif_netlink_parms(): no params data found [ 998.222812][T32125] gre0 speed is unknown, defaulting to 1000 [ 998.274289][T32116] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.281525][T32116] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.289128][T32116] bridge_slave_0: entered allmulticast mode [ 998.310952][T32116] bridge_slave_0: entered promiscuous mode [ 998.339224][T32116] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.346634][T32116] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.354444][T32116] bridge_slave_1: entered allmulticast mode [ 998.362218][T32116] bridge_slave_1: entered promiscuous mode [ 998.495549][T32116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.535038][T32116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.553439][T32118] chnl_net:caif_netlink_parms(): no params data found [ 998.584908][T32102] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 998.594112][T32102] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 998.603664][T32102] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 998.611578][T32102] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 998.620359][T32102] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 998.656803][T32116] team0: Port device team_slave_0 added [ 998.678443][T32116] team0: Port device team_slave_1 added [ 998.695200][T32125] lo speed is unknown, defaulting to 1000 [ 998.703446][T32127] gre0 speed is unknown, defaulting to 1000 [ 998.731924][T32116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.743178][T32116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.769820][T32116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.800978][T32116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.808067][T32116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.836111][T32116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.956969][T32127] lo speed is unknown, defaulting to 1000 [ 998.987262][T32116] hsr_slave_0: entered promiscuous mode [ 998.994418][T32116] hsr_slave_1: entered promiscuous mode [ 999.000822][T32116] debugfs: 'hsr0' already exists in 'hsr' [ 999.007051][T32116] Cannot create hsr debugfs directory [ 999.013560][T32118] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.020717][T32118] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.029426][T32118] bridge_slave_0: entered allmulticast mode [ 999.037412][T32118] bridge_slave_0: entered promiscuous mode [ 999.046275][T32118] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.054499][T32118] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.061730][T32118] bridge_slave_1: entered allmulticast mode [ 999.069879][T32118] bridge_slave_1: entered promiscuous mode [ 999.103034][T32139] gre0 speed is unknown, defaulting to 1000 [ 999.173264][T32102] Bluetooth: hci6: command tx timeout [ 999.179679][T32102] Bluetooth: hci4: command tx timeout [ 999.199645][T32118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.240680][T32118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.315509][T32139] lo speed is unknown, defaulting to 1000 [ 999.382377][T32118] team0: Port device team_slave_0 added [ 999.396050][T32118] team0: Port device team_slave_1 added [ 999.459724][T32125] chnl_net:caif_netlink_parms(): no params data found [ 999.476407][T32118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.483661][T32118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.510626][T32118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.528117][T32118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.535141][T32118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.561666][T32118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.732919][T32102] Bluetooth: hci7: command tx timeout [ 999.751842][T32125] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.759137][T32125] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.766611][T32125] bridge_slave_0: entered allmulticast mode [ 999.773890][T32125] bridge_slave_0: entered promiscuous mode [ 999.781363][T32125] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.788646][T32125] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.796105][T32125] bridge_slave_1: entered allmulticast mode [ 999.803296][T32125] bridge_slave_1: entered promiscuous mode [ 999.813272][T32102] Bluetooth: hci8: command tx timeout [ 999.831075][T32118] hsr_slave_0: entered promiscuous mode [ 999.837663][T32118] hsr_slave_1: entered promiscuous mode [ 999.844346][T32118] debugfs: 'hsr0' already exists in 'hsr' [ 999.850059][T32118] Cannot create hsr debugfs directory [ 999.917190][T32125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.928619][T32125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.976792][T32102] Bluetooth: hci5: command 0x0406 tx timeout [ 1000.065987][T32139] chnl_net:caif_netlink_parms(): no params data found [ 1000.086616][T32127] chnl_net:caif_netlink_parms(): no params data found [ 1000.098711][T32125] team0: Port device team_slave_0 added [ 1000.106359][T32125] team0: Port device team_slave_1 added [ 1000.168272][T32125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.175441][T32125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.201468][T32125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.214001][T32125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.220952][T32125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.247487][T32125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.409263][T32125] hsr_slave_0: entered promiscuous mode [ 1000.415670][T32125] hsr_slave_1: entered promiscuous mode [ 1000.421657][T32125] debugfs: 'hsr0' already exists in 'hsr' [ 1000.427709][T32125] Cannot create hsr debugfs directory [ 1000.434991][T32139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.442098][T32139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.449732][T32139] bridge_slave_0: entered allmulticast mode [ 1000.459189][T32139] bridge_slave_0: entered promiscuous mode [ 1000.474005][T32127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.481073][T32127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.488418][T32127] bridge_slave_0: entered allmulticast mode [ 1000.495447][T32127] bridge_slave_0: entered promiscuous mode [ 1000.511787][T32139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.519158][T32139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.526948][T32139] bridge_slave_1: entered allmulticast mode [ 1000.534244][T32139] bridge_slave_1: entered promiscuous mode [ 1000.546250][T32127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.554657][T32127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.563208][T32127] bridge_slave_1: entered allmulticast mode [ 1000.570084][T32127] bridge_slave_1: entered promiscuous mode [ 1000.634709][T32139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.646460][T32139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.692980][T20459] Bluetooth: hci9: command tx timeout [ 1000.708545][T32127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.720967][T32127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.738062][T32139] team0: Port device team_slave_0 added [ 1000.770303][T32139] team0: Port device team_slave_1 added [ 1000.821590][T32127] team0: Port device team_slave_0 added [ 1000.830434][T32127] team0: Port device team_slave_1 added [ 1000.851737][T32139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.859074][T32139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.886527][T32139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.922414][T32139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.929610][T32139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.955890][T32139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.001263][T32127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.008301][T32127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.036691][T32127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.067708][T32127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.075447][T32127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.101831][T32127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.151623][T32139] hsr_slave_0: entered promiscuous mode [ 1001.158211][T32139] hsr_slave_1: entered promiscuous mode [ 1001.164662][T32139] debugfs: 'hsr0' already exists in 'hsr' [ 1001.170390][T32139] Cannot create hsr debugfs directory [ 1001.232201][T32127] hsr_slave_0: entered promiscuous mode [ 1001.238914][T32127] hsr_slave_1: entered promiscuous mode [ 1001.245222][T32127] debugfs: 'hsr0' already exists in 'hsr' [ 1001.250939][T32127] Cannot create hsr debugfs directory [ 1001.256414][T20459] Bluetooth: hci6: command tx timeout [ 1001.262996][T20459] Bluetooth: hci4: command tx timeout [ 1001.822843][T20459] Bluetooth: hci7: command tx timeout [ 1001.902975][T20459] Bluetooth: hci8: command tx timeout [ 1002.782786][T20459] Bluetooth: hci9: command tx timeout [ 1003.342894][T32102] Bluetooth: hci6: command tx timeout [ 1003.348354][T20459] Bluetooth: hci4: command tx timeout [ 1003.892701][T20459] Bluetooth: hci7: command tx timeout [ 1003.973177][T20459] Bluetooth: hci8: command tx timeout [ 1004.293069][ T11] block nbd1: Possible stuck request ffff888026f48000: control (read@0,1024B). Runtime 60 seconds [ 1004.303913][ T11] block nbd1: Possible stuck request ffff888026f48200: control (read@1024,1024B). Runtime 60 seconds [ 1004.315026][ T11] block nbd1: Possible stuck request ffff888026f48400: control (read@2048,1024B). Runtime 60 seconds [ 1004.325962][ T11] block nbd1: Possible stuck request ffff888026f48600: control (read@3072,1024B). Runtime 60 seconds [ 1004.542795][ T5195] udevd[5195]: worker [29413] /devices/virtual/block/nbd1 is taking a long time [ 1004.852703][T20459] Bluetooth: hci9: command tx timeout [ 1005.422813][T20459] Bluetooth: hci4: command tx timeout [ 1005.428226][T20459] Bluetooth: hci6: command tx timeout [ 1005.463378][T23092] lec:lec_start_xmit: lec0:No lecd attached [ 1005.982745][T20459] Bluetooth: hci7: command tx timeout [ 1006.062995][T20459] Bluetooth: hci8: command tx timeout [ 1006.932797][T20459] Bluetooth: hci9: command tx timeout [ 1010.702847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 1010.710845][ C0] lec:lec_tx_timeout: lec0 [ 1013.262759][ T2439] block nbd0: Possible stuck request ffff888048d78000: control (read@0,1024B). Runtime 90 seconds [ 1013.273723][ T2439] block nbd0: Possible stuck request ffff888048d78200: control (read@1024,1024B). Runtime 90 seconds [ 1013.284686][ T2439] block nbd0: Possible stuck request ffff888048d78400: control (read@2048,1024B). Runtime 90 seconds [ 1013.295620][ T2439] block nbd0: Possible stuck request ffff888048d78600: control (read@3072,1024B). Runtime 90 seconds [ 1015.812846][ T1341] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1020.452669][T32102] Bluetooth: hci2: command 0x0406 tx timeout [ 1034.374003][ T11] block nbd1: Possible stuck request ffff888026f48000: control (read@0,1024B). Runtime 90 seconds [ 1034.385169][ T11] block nbd1: Possible stuck request ffff888026f48200: control (read@1024,1024B). Runtime 90 seconds [ 1034.396146][ T11] block nbd1: Possible stuck request ffff888026f48400: control (read@2048,1024B). Runtime 90 seconds [ 1034.407357][ T11] block nbd1: Possible stuck request ffff888026f48600: control (read@3072,1024B). Runtime 90 seconds [ 1043.334015][ T2439] block nbd0: Possible stuck request ffff888048d78000: control (read@0,1024B). Runtime 120 seconds [ 1043.344888][ T2439] block nbd0: Possible stuck request ffff888048d78200: control (read@1024,1024B). Runtime 120 seconds [ 1043.356290][ T2439] block nbd0: Possible stuck request ffff888048d78400: control (read@2048,1024B). Runtime 120 seconds [ 1043.367699][ T2439] block nbd0: Possible stuck request ffff888048d78600: control (read@3072,1024B). Runtime 120 seconds [ 1047.173656][ T7773] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1054.216493][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1057.102983][T32102] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1057.113849][T32102] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1057.126094][T32102] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1057.134579][T32102] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1057.146474][T32121] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1057.146650][T32102] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1057.163604][T32102] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1057.186179][T32102] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1057.197293][T32102] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1057.205303][T32102] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1057.328030][T32166] gre0 speed is unknown, defaulting to 1000 [ 1057.545717][T32168] gre0 speed is unknown, defaulting to 1000 [ 1057.554056][T32166] lo speed is unknown, defaulting to 1000 [ 1057.663813][T32102] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1057.675356][T32121] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1057.685466][T32121] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1057.693912][T32121] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1057.701921][T32121] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1057.809163][T32166] chnl_net:caif_netlink_parms(): no params data found [ 1057.860430][T32168] lo speed is unknown, defaulting to 1000 [ 1057.961547][T32166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.968883][T32166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.977432][T32166] bridge_slave_0: entered allmulticast mode [ 1057.985472][T32166] bridge_slave_0: entered promiscuous mode [ 1058.005005][T32166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.012354][T32166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.021355][T32166] bridge_slave_1: entered allmulticast mode [ 1058.029870][T32166] bridge_slave_1: entered promiscuous mode [ 1058.045415][T32171] gre0 speed is unknown, defaulting to 1000 [ 1058.104400][T32166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.125554][T32166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.191041][T32166] team0: Port device team_slave_0 added [ 1058.209772][T32120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1058.221208][T32166] team0: Port device team_slave_1 added [ 1058.221730][T32120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1058.236249][T32120] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1058.244422][T32120] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1058.264120][T32120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1058.318752][T32166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.326225][T32166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.352907][T32166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.366166][T32166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.373992][T32166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.400673][T32166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.417593][T32171] lo speed is unknown, defaulting to 1000 [ 1058.499876][T32166] hsr_slave_0: entered promiscuous mode [ 1058.510311][T32166] hsr_slave_1: entered promiscuous mode [ 1058.517182][T32166] debugfs: 'hsr0' already exists in 'hsr' [ 1058.523777][T32166] Cannot create hsr debugfs directory [ 1058.603834][T32168] chnl_net:caif_netlink_parms(): no params data found [ 1058.705099][T32121] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1058.718138][T32121] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1058.734678][T32121] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1058.750196][T32121] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1058.764304][T32121] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1058.863457][T32181] gre0 speed is unknown, defaulting to 1000 [ 1058.978753][T32171] chnl_net:caif_netlink_parms(): no params data found [ 1059.009256][T32168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.021219][T32168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.029272][T32168] bridge_slave_0: entered allmulticast mode [ 1059.038390][T32168] bridge_slave_0: entered promiscuous mode [ 1059.107055][T32168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.133400][T32168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.140703][T32168] bridge_slave_1: entered allmulticast mode [ 1059.164403][T32168] bridge_slave_1: entered promiscuous mode [ 1059.184425][T32181] lo speed is unknown, defaulting to 1000 [ 1059.225183][T32186] gre0 speed is unknown, defaulting to 1000 [ 1059.252885][T32121] Bluetooth: hci11: command tx timeout [ 1059.254175][T32120] Bluetooth: hci10: command tx timeout [ 1059.295653][T32168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.315299][T32168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.496322][T32186] lo speed is unknown, defaulting to 1000 [ 1059.499175][T32168] team0: Port device team_slave_0 added [ 1059.513388][T32171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.521429][T32171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.530037][T32171] bridge_slave_0: entered allmulticast mode [ 1059.538006][T32171] bridge_slave_0: entered promiscuous mode [ 1059.551415][T32171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.558854][T32171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.566586][T32171] bridge_slave_1: entered allmulticast mode [ 1059.574439][T32171] bridge_slave_1: entered promiscuous mode [ 1059.605912][T32168] team0: Port device team_slave_1 added [ 1059.662690][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 1059.670723][ C0] lec:lec_tx_timeout: lec0 [ 1059.727572][T32171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.736706][T32120] Bluetooth: hci12: command tx timeout [ 1059.746361][T32171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.765706][T32168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.773066][T32168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.799245][T32168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.848084][T32171] team0: Port device team_slave_0 added [ 1059.854746][T32168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.861695][T32168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.888262][T32168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.915822][T32171] team0: Port device team_slave_1 added [ 1060.013351][T32168] hsr_slave_0: entered promiscuous mode [ 1060.019644][T32168] hsr_slave_1: entered promiscuous mode [ 1060.026024][T32168] debugfs: 'hsr0' already exists in 'hsr' [ 1060.031758][T32168] Cannot create hsr debugfs directory [ 1060.051994][T32171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.061492][T32171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.087825][T32171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.099918][T32171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.106954][T32171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.134047][T32171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.249915][T32181] chnl_net:caif_netlink_parms(): no params data found [ 1060.296416][T32171] hsr_slave_0: entered promiscuous mode [ 1060.303768][T32120] Bluetooth: hci13: command tx timeout [ 1060.305015][T32171] hsr_slave_1: entered promiscuous mode [ 1060.315964][T32171] debugfs: 'hsr0' already exists in 'hsr' [ 1060.321683][T32171] Cannot create hsr debugfs directory [ 1060.465732][T32186] chnl_net:caif_netlink_parms(): no params data found [ 1060.539889][T32181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.547243][T32181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.554940][T32181] bridge_slave_0: entered allmulticast mode [ 1060.563253][T32181] bridge_slave_0: entered promiscuous mode [ 1060.592767][T32181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.599893][T32181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.607441][T32181] bridge_slave_1: entered allmulticast mode [ 1060.615207][T32181] bridge_slave_1: entered promiscuous mode [ 1060.693421][T32181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.721980][T32181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.767957][T32186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.775963][T32186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.783621][T32186] bridge_slave_0: entered allmulticast mode [ 1060.790640][T32186] bridge_slave_0: entered promiscuous mode [ 1060.799169][T32186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.806445][T32186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.816749][T32186] bridge_slave_1: entered allmulticast mode [ 1060.824012][T32186] bridge_slave_1: entered promiscuous mode [ 1060.833346][T32181] team0: Port device team_slave_0 added [ 1060.841866][T32181] team0: Port device team_slave_1 added [ 1060.855462][T32120] Bluetooth: hci14: command tx timeout [ 1060.919646][T32186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.933920][T32186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.944393][T32181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.951322][T32181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.977889][T32181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.998299][T32181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.005436][T32181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.031772][T32181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.069751][T32186] team0: Port device team_slave_0 added [ 1061.079626][T32186] team0: Port device team_slave_1 added [ 1061.117749][T32186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.124984][T32186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.151018][T32186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.176797][T32186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.184531][T32186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.211478][T32186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.236220][T32181] hsr_slave_0: entered promiscuous mode [ 1061.243836][T32181] hsr_slave_1: entered promiscuous mode [ 1061.249972][T32181] debugfs: 'hsr0' already exists in 'hsr' [ 1061.256608][T32181] Cannot create hsr debugfs directory [ 1061.317802][T32186] hsr_slave_0: entered promiscuous mode [ 1061.324453][T32186] hsr_slave_1: entered promiscuous mode [ 1061.330486][T32186] debugfs: 'hsr0' already exists in 'hsr' [ 1061.336442][T32120] Bluetooth: hci11: command tx timeout [ 1061.341988][T32186] Cannot create hsr debugfs directory [ 1061.347440][T32120] Bluetooth: hci10: command tx timeout [ 1061.812983][T32120] Bluetooth: hci12: command tx timeout [ 1062.373004][T32120] Bluetooth: hci13: command tx timeout [ 1062.932777][T32120] Bluetooth: hci14: command tx timeout [ 1063.412698][T32120] Bluetooth: hci10: command tx timeout [ 1063.412704][T32121] Bluetooth: hci11: command tx timeout [ 1063.892685][T32121] Bluetooth: hci12: command tx timeout [ 1064.453075][T32120] Bluetooth: hci13: command tx timeout [ 1064.463298][ T11] block nbd1: Possible stuck request ffff888026f48000: control (read@0,1024B). Runtime 120 seconds [ 1064.474191][ T11] block nbd1: Possible stuck request ffff888026f48200: control (read@1024,1024B). Runtime 120 seconds [ 1064.485327][ T11] block nbd1: Possible stuck request ffff888026f48400: control (read@2048,1024B). Runtime 120 seconds [ 1064.497070][ T11] block nbd1: Possible stuck request ffff888026f48600: control (read@3072,1024B). Runtime 120 seconds [ 1065.022793][T32120] Bluetooth: hci14: command tx timeout [ 1065.493276][T32120] Bluetooth: hci11: command tx timeout [ 1065.502793][T32120] Bluetooth: hci10: command tx timeout [ 1065.972708][T32120] Bluetooth: hci12: command tx timeout [ 1066.542765][T32120] Bluetooth: hci13: command tx timeout [ 1067.092737][T32120] Bluetooth: hci14: command tx timeout [ 1070.136484][T23092] lec:lec_start_xmit: lec0:No lecd attached [ 1073.413065][ T2439] block nbd0: Possible stuck request ffff888048d78000: control (read@0,1024B). Runtime 150 seconds [ 1073.423908][ T2439] block nbd0: Possible stuck request ffff888048d78200: control (read@1024,1024B). Runtime 150 seconds [ 1073.435191][ T2439] block nbd0: Possible stuck request ffff888048d78400: control (read@2048,1024B). Runtime 150 seconds [ 1073.446388][ T2439] block nbd0: Possible stuck request ffff888048d78600: control (read@3072,1024B). Runtime 150 seconds [ 1075.662585][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 1075.670601][ C0] lec:lec_tx_timeout: lec0 [ 1079.173005][T19733] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1079.812676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.532815][ T11] block nbd1: Possible stuck request ffff888026f48000: control (read@0,1024B). Runtime 150 seconds [ 1094.543725][ T11] block nbd1: Possible stuck request ffff888026f48200: control (read@1024,1024B). Runtime 150 seconds [ 1094.554851][ T11] block nbd1: Possible stuck request ffff888026f48400: control (read@2048,1024B). Runtime 150 seconds [ 1094.566243][ T11] block nbd1: Possible stuck request ffff888026f48600: control (read@3072,1024B). Runtime 150 seconds [ 1103.493348][ T2439] block nbd0: Possible stuck request ffff888048d78000: control (read@0,1024B). Runtime 180 seconds [ 1103.504223][ T2439] block nbd0: Possible stuck request ffff888048d78200: control (read@1024,1024B). Runtime 180 seconds [ 1103.515354][ T2439] block nbd0: Possible stuck request ffff888048d78400: control (read@2048,1024B). Runtime 180 seconds [ 1103.526390][ T2439] block nbd0: Possible stuck request ffff888048d78600: control (read@3072,1024B). Runtime 180 seconds [ 1104.163142][ T5195] udevd[5195]: worker [29251] /devices/virtual/block/nbd0 timeout; kill it [ 1104.171811][ T5195] udevd[5195]: seq 50810 '/devices/virtual/block/nbd0' killed [ 1111.172706][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1115.656835][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1117.763692][T32121] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1117.776582][T32121] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1117.783052][T20459] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1117.784937][T32121] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1117.799080][T32121] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1117.806900][T32121] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1117.807982][T20459] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1117.838980][T20459] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1117.852937][T20459] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1117.863426][T20459] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1117.870470][T32121] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1117.885447][T20459] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1117.896627][T20459] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1117.908059][T20459] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1117.917984][T20459] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1118.057441][T32217] gre0 speed is unknown, defaulting to 1000 [ 1118.254891][T32217] lo speed is unknown, defaulting to 1000 [ 1118.266833][T32215] gre0 speed is unknown, defaulting to 1000 [ 1118.471614][T32217] chnl_net:caif_netlink_parms(): no params data found [ 1118.561893][T32215] lo speed is unknown, defaulting to 1000 [ 1118.576346][T32219] gre0 speed is unknown, defaulting to 1000 [ 1118.733153][T32217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.740311][T32217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.763201][T32217] bridge_slave_0: entered allmulticast mode [ 1118.787690][T32217] bridge_slave_0: entered promiscuous mode [ 1118.811009][T32217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.818852][T32120] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1118.830425][T32120] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1118.840362][T32120] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1118.848571][T32120] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1118.858045][T32120] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1118.869593][T32217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.887494][T32217] bridge_slave_1: entered allmulticast mode [ 1118.894676][T32120] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1118.903131][T32120] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1118.913449][T32120] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1118.921698][T32120] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1118.931966][T32217] bridge_slave_1: entered promiscuous mode [ 1118.942876][T32120] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1119.013854][T32219] lo speed is unknown, defaulting to 1000 [ 1119.031912][T32217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.044050][T32217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.131807][T32217] team0: Port device team_slave_0 added [ 1119.151274][T32217] team0: Port device team_slave_1 added [ 1119.224688][T32215] chnl_net:caif_netlink_parms(): no params data found [ 1119.239612][T32217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.247496][T32217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.276368][T32217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.307438][T32217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.315033][T32217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.344745][T32217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.366594][T32229] gre0 speed is unknown, defaulting to 1000 [ 1119.568805][T32217] hsr_slave_0: entered promiscuous mode [ 1119.578234][T32217] hsr_slave_1: entered promiscuous mode [ 1119.593477][T32217] debugfs: 'hsr0' already exists in 'hsr' [ 1119.599214][T32217] Cannot create hsr debugfs directory [ 1119.664563][T32215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.671707][T32215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.679089][T32215] bridge_slave_0: entered allmulticast mode [ 1119.686074][T32215] bridge_slave_0: entered promiscuous mode [ 1119.693453][T32232] gre0 speed is unknown, defaulting to 1000 [ 1119.693504][T32229] lo speed is unknown, defaulting to 1000 [ 1119.703523][T32215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.712136][T32215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.720682][T32215] bridge_slave_1: entered allmulticast mode [ 1119.728870][T32215] bridge_slave_1: entered promiscuous mode [ 1119.877673][T32215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.903141][T32120] Bluetooth: hci15: command tx timeout [ 1119.909369][T20459] Bluetooth: hci16: command tx timeout [ 1119.921669][T32215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.934613][T32232] lo speed is unknown, defaulting to 1000 [ 1119.934868][T32219] chnl_net:caif_netlink_parms(): no params data found [ 1119.977955][T20459] Bluetooth: hci17: command tx timeout [ 1120.017263][T32215] team0: Port device team_slave_0 added [ 1120.055086][T32215] team0: Port device team_slave_1 added [ 1120.118882][T32215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.125966][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.153639][T32215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.185542][T32215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.192488][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.219144][T32215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.344596][T32219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.352286][T32219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.359984][T32219] bridge_slave_0: entered allmulticast mode [ 1120.368356][T32219] bridge_slave_0: entered promiscuous mode [ 1120.381510][T32219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.388909][T32219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.396309][T32219] bridge_slave_1: entered allmulticast mode [ 1120.404743][T32219] bridge_slave_1: entered promiscuous mode [ 1120.418885][T32215] hsr_slave_0: entered promiscuous mode [ 1120.425670][T32215] hsr_slave_1: entered promiscuous mode [ 1120.431920][T32215] debugfs: 'hsr0' already exists in 'hsr' [ 1120.437849][T32215] Cannot create hsr debugfs directory [ 1120.541026][T32219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.556712][T32229] chnl_net:caif_netlink_parms(): no params data found [ 1120.587192][T32219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.676112][T32219] team0: Port device team_slave_0 added [ 1120.692645][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1120.700655][ C0] lec:lec_tx_timeout: lec0 [ 1120.720352][T32219] team0: Port device team_slave_1 added [ 1120.821466][T32232] chnl_net:caif_netlink_parms(): no params data found [ 1120.835977][T32219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.852548][T32219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.883172][T32219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.896788][T32219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.903984][T32219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.930362][T32219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.941278][T32255] Bluetooth: hci18: command tx timeout [ 1121.013071][T32255] Bluetooth: hci19: command tx timeout [ 1121.052764][T32229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.059853][T32229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.082932][T32229] bridge_slave_0: entered allmulticast mode [ 1121.090494][T32229] bridge_slave_0: entered promiscuous mode [ 1121.146940][T32229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.154271][T32229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.161704][T32229] bridge_slave_1: entered allmulticast mode [ 1121.169047][T32229] bridge_slave_1: entered promiscuous mode [ 1121.223946][T32219] hsr_slave_0: entered promiscuous mode [ 1121.230296][T32219] hsr_slave_1: entered promiscuous mode [ 1121.236742][T32219] debugfs: 'hsr0' already exists in 'hsr' [ 1121.242457][T32219] Cannot create hsr debugfs directory [ 1121.278883][T32229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.319299][T32229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.351159][T32232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.358543][T32232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.365974][T32232] bridge_slave_0: entered allmulticast mode [ 1121.373095][T32232] bridge_slave_0: entered promiscuous mode [ 1121.380787][T32232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.388000][T32232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.395889][T32232] bridge_slave_1: entered allmulticast mode [ 1121.403721][T32232] bridge_slave_1: entered promiscuous mode [ 1121.455774][T32229] team0: Port device team_slave_0 added [ 1121.465783][T32232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.483600][T32229] team0: Port device team_slave_1 added [ 1121.491261][T32232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.566506][T32229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.573683][T32229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.600350][T32229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.613850][T32232] team0: Port device team_slave_0 added [ 1121.625811][T32229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.632842][T32229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.660478][T32229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.681443][T32232] team0: Port device team_slave_1 added [ 1121.769858][T32232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.777285][T32232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.803905][T32232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.829826][T32229] hsr_slave_0: entered promiscuous mode [ 1121.837347][T32229] hsr_slave_1: entered promiscuous mode [ 1121.843705][T32229] debugfs: 'hsr0' already exists in 'hsr' [ 1121.849415][T32229] Cannot create hsr debugfs directory [ 1121.855834][T32232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.862877][T32232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.889460][T32232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.964075][T32232] hsr_slave_0: entered promiscuous mode [ 1121.970402][T32232] hsr_slave_1: entered promiscuous mode [ 1121.977085][T32232] debugfs: 'hsr0' already exists in 'hsr' [ 1121.983300][T32255] Bluetooth: hci16: command tx timeout [ 1121.988790][T32255] Bluetooth: hci15: command tx timeout [ 1121.992625][T32232] Cannot create hsr debugfs directory [ 1122.053271][T32259] Bluetooth: hci17: command tx timeout [ 1122.856563][T32259] Bluetooth: hci8: command 0x0406 tx timeout [ 1122.856982][T32254] Bluetooth: hci9: command 0x0406 tx timeout [ 1122.864743][T32259] Bluetooth: hci4: command 0x0406 tx timeout [ 1122.871012][T32254] Bluetooth: hci6: command 0x0406 tx timeout [ 1122.875495][T32259] Bluetooth: hci7: command 0x0406 tx timeout [ 1123.012623][ T5831] Bluetooth: hci18: command tx timeout [ 1123.093709][ T5831] Bluetooth: hci19: command tx timeout [ 1124.052680][T20459] Bluetooth: hci16: command tx timeout [ 1124.054653][ T5831] Bluetooth: hci15: command tx timeout [ 1124.132921][ T5831] Bluetooth: hci17: command tx timeout [ 1124.613411][ T11] block nbd1: Possible stuck request ffff888026f48000: control (read@0,1024B). Runtime 180 seconds [ 1124.624719][ T11] block nbd1: Possible stuck request ffff888026f48200: control (read@1024,1024B). Runtime 180 seconds [ 1124.635909][ T11] block nbd1: Possible stuck request ffff888026f48400: control (read@2048,1024B). Runtime 180 seconds [ 1124.646966][ T11] block nbd1: Possible stuck request ffff888026f48600: control (read@3072,1024B). Runtime 180 seconds [ 1125.092706][ T5831] Bluetooth: hci18: command tx timeout [ 1125.182788][ T5831] Bluetooth: hci19: command tx timeout [ 1125.913294][ T5195] udevd[5195]: worker [29413] /devices/virtual/block/nbd1 timeout; kill it [ 1125.921960][ T5195] udevd[5195]: seq 51590 '/devices/virtual/block/nbd1' killed [ 1126.133296][ T5831] Bluetooth: hci16: command tx timeout [ 1126.133323][T20459] Bluetooth: hci15: command tx timeout [ 1126.212876][T20459] Bluetooth: hci17: command tx timeout [ 1127.172715][T20459] Bluetooth: hci18: command tx timeout [ 1127.252730][T20459] Bluetooth: hci19: command tx timeout [ 1129.092842][ T31] INFO: task syz.1.7154:32064 blocked for more than 143 seconds. [ 1129.100600][ T31] Not tainted syzkaller #0 [ 1129.105828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.114696][ T31] task:syz.1.7154 state:D stack:25408 pid:32064 tgid:32063 ppid:27311 task_flags:0x400140 flags:0x00080002 [ 1129.126771][ T31] Call Trace: [ 1129.130049][ T31] [ 1129.133065][ T31] __schedule+0x15dd/0x52d0 [ 1129.137589][ T31] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1129.142558][ T31] ? __pfx___schedule+0x10/0x10 [ 1129.147425][ T31] ? schedule+0x90/0x360 [ 1129.151688][ T31] schedule+0x164/0x360 [ 1129.156470][ T31] schedule_preempt_disabled+0x13/0x30 [ 1129.161953][ T31] __mutex_lock+0x7fe/0x1300 [ 1129.166682][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1129.202732][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1129.212789][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1129.217511][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1129.233409][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.238398][ T31] ? radix_tree_lookup+0x240/0x290 [ 1129.244290][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1129.248823][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1129.254857][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.259804][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1129.264724][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1129.269760][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1129.275521][ T31] ? down_read+0x272/0x2e0 [ 1129.280185][ T31] ? genl_rcv+0xd/0x40 [ 1129.284364][ T31] genl_rcv+0x28/0x40 [ 1129.288356][ T31] netlink_unicast+0x80f/0x9b0 [ 1129.293185][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1129.298605][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1129.304058][ T31] ? skb_put+0x11b/0x210 [ 1129.308321][ T31] netlink_sendmsg+0x813/0xb40 [ 1129.313310][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.318608][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1129.323644][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1129.328939][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.334777][ T31] __sys_sendto+0x672/0x710 [ 1129.339308][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1129.344468][ T31] ? fd_install+0x94/0x3d0 [ 1129.348904][ T31] ? fd_install+0x306/0x3d0 [ 1129.353563][ T31] __x64_sys_sendto+0xde/0x100 [ 1129.358361][ T31] do_syscall_64+0x14d/0xf80 [ 1129.363302][ T31] ? trace_irq_disable+0x3b/0x150 [ 1129.368334][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.374455][ T31] ? clear_bhb_loop+0x40/0x90 [ 1129.379354][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.385389][ T31] RIP: 0033:0x7f63ceb5cfce [ 1129.389808][ T31] RSP: 002b:00007f63cf972e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1129.398535][ T31] RAX: ffffffffffffffda RBX: 00007f63cf9746c0 RCX: 00007f63ceb5cfce [ 1129.406736][ T31] RDX: 000000000000001c RSI: 00007f63cf973000 RDI: 0000000000000008 [ 1129.417535][ T31] RBP: 0000000000000000 R08: 00007f63cf972f04 R09: 000000000000000c [ 1129.425766][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1129.433877][ T31] R13: 00007f63cf972f58 R14: 00007f63cf973000 R15: 0000000000000000 [ 1129.441884][ T31] [ 1129.445206][ T31] INFO: task syz.1.7154:32066 blocked for more than 143 seconds. [ 1129.453042][ T31] Not tainted syzkaller #0 [ 1129.457969][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.466762][ T31] task:syz.1.7154 state:D stack:26120 pid:32066 tgid:32063 ppid:27311 task_flags:0x400140 flags:0x00080002 [ 1129.478839][ T31] Call Trace: [ 1129.482462][ T31] [ 1129.488906][ T31] __schedule+0x15dd/0x52d0 [ 1129.493492][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.498444][ T31] ? __pfx___schedule+0x10/0x10 [ 1129.503382][ T31] ? schedule+0x90/0x360 [ 1129.507634][ T31] schedule+0x164/0x360 [ 1129.511770][ T31] schedule_preempt_disabled+0x13/0x30 [ 1129.517393][ T31] __mutex_lock+0x7fe/0x1300 [ 1129.521992][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1129.527320][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1129.532097][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1129.536968][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1129.542003][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.547028][ T31] ? radix_tree_lookup+0x240/0x290 [ 1129.552154][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1129.556853][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1129.561879][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.566957][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1129.571729][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1129.576921][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1129.582394][ T31] ? down_read+0x272/0x2e0 [ 1129.587165][ T31] ? genl_rcv+0xd/0x40 [ 1129.591270][ T31] genl_rcv+0x28/0x40 [ 1129.595396][ T31] netlink_unicast+0x80f/0x9b0 [ 1129.600195][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1129.605614][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1129.610564][ T31] ? skb_put+0x11b/0x210 [ 1129.614877][ T31] netlink_sendmsg+0x813/0xb40 [ 1129.619648][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.625030][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1129.629979][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1129.635445][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1129.640218][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1129.645713][ T31] ? import_iovec+0x73/0xa0 [ 1129.650232][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1129.655162][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1129.660402][ T31] ? futex_wake+0x4ac/0x580 [ 1129.665131][ T31] ? __fget_files+0x2a/0x420 [ 1129.669762][ T31] ? __fget_files+0x3a0/0x420 [ 1129.674589][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1129.679532][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1129.685117][ T31] ? rcu_is_watching+0x15/0xb0 [ 1129.690123][ T31] do_syscall_64+0x14d/0xf80 [ 1129.694808][ T31] ? trace_irq_disable+0x3b/0x150 [ 1129.699842][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.705965][ T31] ? clear_bhb_loop+0x40/0x90 [ 1129.710647][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.716698][ T31] RIP: 0033:0x7f63ceb9c799 [ 1129.721122][ T31] RSP: 002b:00007f63ccdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.729705][ T31] RAX: ffffffffffffffda RBX: 00007f63cee16090 RCX: 00007f63ceb9c799 [ 1129.737981][ T31] RDX: 0000000000048040 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1129.746063][ T31] RBP: 00007f63cec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1129.754213][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.762172][ T31] R13: 00007f63cee16128 R14: 00007f63cee16090 R15: 00007ffc37392998 [ 1129.770296][ T31] [ 1129.773406][ T31] INFO: task syz.1.7154:32068 blocked for more than 144 seconds. [ 1129.781114][ T31] Not tainted syzkaller #0 [ 1129.786124][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1129.795147][ T31] task:syz.1.7154 state:D stack:26240 pid:32068 tgid:32063 ppid:27311 task_flags:0x480140 flags:0x00080002 [ 1129.807273][ T31] Call Trace: [ 1129.810552][ T31] [ 1129.813626][ T31] __schedule+0x15dd/0x52d0 [ 1129.818141][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.823188][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1129.828221][ T31] ? __pfx___schedule+0x10/0x10 [ 1129.833200][ T31] ? schedule+0x90/0x360 [ 1129.837458][ T31] schedule+0x164/0x360 [ 1129.841622][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1129.847387][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1129.853613][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1129.859696][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1129.866048][ T31] nbd_set_size+0x454/0x680 [ 1129.870564][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1129.875991][ T31] ? nla_memcpy+0x5b/0xc0 [ 1129.880318][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 1129.885842][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1129.891780][ T31] ? rcu_is_watching+0x15/0xb0 [ 1129.896681][ T31] ? trace_kmalloc+0x2a/0x110 [ 1129.901394][ T31] ? __nla_parse+0x40/0x60 [ 1129.905880][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1129.912214][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1129.918685][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1129.924296][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1129.930375][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.935380][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1129.939892][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1129.945000][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1129.950732][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.955802][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1129.960578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1129.965681][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1129.970976][ T31] ? down_read+0x272/0x2e0 [ 1129.975584][ T31] ? genl_rcv+0xd/0x40 [ 1129.979674][ T31] genl_rcv+0x28/0x40 [ 1129.983730][ T31] netlink_unicast+0x80f/0x9b0 [ 1129.988507][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1129.994481][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1129.999436][ T31] ? skb_put+0x11b/0x210 [ 1130.003787][ T31] netlink_sendmsg+0x813/0xb40 [ 1130.008562][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.013881][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.018828][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.024470][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1130.029245][ T31] ? futex_unqueue+0x211/0x240 [ 1130.034100][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.039398][ T31] ? import_iovec+0x73/0xa0 [ 1130.044050][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1130.048744][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.054290][ T31] ? futex_wait+0x29a/0x380 [ 1130.058824][ T31] ? __fget_files+0x2a/0x420 [ 1130.063514][ T31] ? __fget_files+0x3a0/0x420 [ 1130.068217][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1130.074244][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1130.079736][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.084961][ T31] do_syscall_64+0x14d/0xf80 [ 1130.089551][ T31] ? trace_irq_disable+0x3b/0x150 [ 1130.094611][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.101016][ T31] ? clear_bhb_loop+0x40/0x90 [ 1130.105848][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.111752][ T31] RIP: 0033:0x7f63ceb9c799 [ 1130.116517][ T31] RSP: 002b:00007f63ccdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.125100][ T31] RAX: ffffffffffffffda RBX: 00007f63cee16180 RCX: 00007f63ceb9c799 [ 1130.133331][ T31] RDX: 0000000000048040 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1130.141305][ T31] RBP: 00007f63cec32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1130.149543][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.157600][ T31] R13: 00007f63cee16218 R14: 00007f63cee16180 R15: 00007ffc37392998 [ 1130.165706][ T31] [ 1130.168740][ T31] INFO: task syz.2.7156:32070 blocked for more than 144 seconds. [ 1130.177038][ T31] Not tainted syzkaller #0 [ 1130.181981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.190813][ T31] task:syz.2.7156 state:D stack:27272 pid:32070 tgid:32069 ppid:28527 task_flags:0x400040 flags:0x00080002 [ 1130.203238][ T31] Call Trace: [ 1130.206529][ T31] [ 1130.209450][ T31] __schedule+0x15dd/0x52d0 [ 1130.214234][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.219122][ T31] ? schedule+0x90/0x360 [ 1130.223454][ T31] schedule+0x164/0x360 [ 1130.227613][ T31] schedule_preempt_disabled+0x13/0x30 [ 1130.233407][ T31] __mutex_lock+0x7fe/0x1300 [ 1130.238037][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1130.242950][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1130.247641][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1130.252737][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 1130.257861][ T31] ? radix_tree_lookup+0x240/0x290 [ 1130.263282][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1130.267786][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.272868][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.277817][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1130.282695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.287729][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.293535][ T31] ? down_read+0x272/0x2e0 [ 1130.298093][ T31] ? genl_rcv+0xd/0x40 [ 1130.302382][ T31] genl_rcv+0x28/0x40 [ 1130.306505][ T31] netlink_unicast+0x80f/0x9b0 [ 1130.311289][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.316717][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1130.321662][ T31] ? skb_put+0x11b/0x210 [ 1130.326272][ T31] netlink_sendmsg+0x813/0xb40 [ 1130.331036][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.336373][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.341322][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.346685][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.351978][ T31] __sys_sendto+0x672/0x710 [ 1130.356808][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1130.361873][ T31] ? exc_page_fault+0x6a/0xc0 [ 1130.366664][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1130.371993][ T31] __x64_sys_sendto+0xde/0x100 [ 1130.376961][ T31] do_syscall_64+0x14d/0xf80 [ 1130.381558][ T31] ? trace_irq_disable+0x3b/0x150 [ 1130.386870][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.393038][ T31] ? clear_bhb_loop+0x40/0x90 [ 1130.397760][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.404040][ T31] RIP: 0033:0x7f039035cfce [ 1130.408471][ T31] RSP: 002b:00007f03911a6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1130.417176][ T31] RAX: ffffffffffffffda RBX: 00007f03911a86c0 RCX: 00007f039035cfce [ 1130.425239][ T31] RDX: 0000000000000024 RSI: 00007f03911a7000 RDI: 0000000000000003 [ 1130.433333][ T31] RBP: 0000000000000000 R08: 00007f03911a6f04 R09: 000000000000000c [ 1130.441308][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1130.449511][ T31] R13: 00007f03911a6f58 R14: 00007f03911a7000 R15: 0000000000000000 [ 1130.457702][ T31] [ 1130.460727][ T31] INFO: task syz.0.7163:32093 blocked for more than 144 seconds. [ 1130.468586][ T31] Not tainted syzkaller #0 [ 1130.473736][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.482384][ T31] task:syz.0.7163 state:D stack:27880 pid:32093 tgid:32092 ppid:28333 task_flags:0x400040 flags:0x00080002 [ 1130.494486][ T31] Call Trace: [ 1130.497774][ T31] [ 1130.500704][ T31] __schedule+0x15dd/0x52d0 [ 1130.505662][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.510547][ T31] ? schedule+0x90/0x360 [ 1130.514944][ T31] schedule+0x164/0x360 [ 1130.519108][ T31] schedule_preempt_disabled+0x13/0x30 [ 1130.524607][ T31] __mutex_lock+0x7fe/0x1300 [ 1130.529207][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1130.534527][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1130.539225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1130.544371][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 1130.549495][ T31] ? radix_tree_lookup+0x240/0x290 [ 1130.554698][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1130.559212][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.564509][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.569471][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1130.574373][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.579411][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.584757][ T31] ? down_read+0x272/0x2e0 [ 1130.589179][ T31] ? genl_rcv+0xd/0x40 [ 1130.593499][ T31] genl_rcv+0x28/0x40 [ 1130.597474][ T31] netlink_unicast+0x80f/0x9b0 [ 1130.602228][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.607955][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1130.613181][ T31] ? skb_put+0x11b/0x210 [ 1130.617451][ T31] netlink_sendmsg+0x813/0xb40 [ 1130.622235][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.627969][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.633075][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.638376][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.643752][ T31] __sys_sendto+0x672/0x710 [ 1130.648263][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1130.653589][ T31] ? exc_page_fault+0x6a/0xc0 [ 1130.658264][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1130.663615][ T31] __x64_sys_sendto+0xde/0x100 [ 1130.668384][ T31] do_syscall_64+0x14d/0xf80 [ 1130.673060][ T31] ? trace_irq_disable+0x3b/0x150 [ 1130.678101][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.684506][ T31] ? clear_bhb_loop+0x40/0x90 [ 1130.689179][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.695584][ T31] RIP: 0033:0x7f49a4f5cfce [ 1130.700007][ T31] RSP: 002b:00007f49a5eb9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1130.708480][ T31] RAX: ffffffffffffffda RBX: 00007f49a5ebb6c0 RCX: 00007f49a4f5cfce [ 1130.716893][ T31] RDX: 0000000000000020 RSI: 00007f49a5eba000 RDI: 0000000000000005 [ 1130.724956][ T31] RBP: 0000000000000000 R08: 00007f49a5eb9f04 R09: 000000000000000c [ 1130.733036][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1130.740992][ T31] R13: 00007f49a5eb9f58 R14: 00007f49a5eba000 R15: 0000000000000000 [ 1130.749265][ T31] [ 1130.752307][ T31] INFO: task syz.3.7165:32099 blocked for more than 145 seconds. [ 1130.760326][ T31] Not tainted syzkaller #0 [ 1130.765379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.774594][ T31] task:syz.3.7165 state:D stack:25064 pid:32099 tgid:32098 ppid:27721 task_flags:0x400140 flags:0x00080002 [ 1130.786561][ T31] Call Trace: [ 1130.789825][ T31] [ 1130.792887][ T31] __schedule+0x15dd/0x52d0 [ 1130.797411][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.802337][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.807471][ T31] ? schedule+0x90/0x360 [ 1130.811717][ T31] schedule+0x164/0x360 [ 1130.816233][ T31] schedule_preempt_disabled+0x13/0x30 [ 1130.821700][ T31] __mutex_lock+0x7fe/0x1300 [ 1130.826395][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1130.831603][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1130.836609][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1130.841282][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1130.846444][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.851392][ T31] ? radix_tree_lookup+0x240/0x290 [ 1130.857289][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1130.861811][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.867130][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.872072][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1130.876948][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.881983][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.887368][ T31] ? down_read+0x272/0x2e0 [ 1130.891796][ T31] ? genl_rcv+0xd/0x40 [ 1130.896195][ T31] genl_rcv+0x28/0x40 [ 1130.900196][ T31] netlink_unicast+0x80f/0x9b0 [ 1130.905070][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.910366][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1130.915649][ T31] ? skb_put+0x11b/0x210 [ 1130.919907][ T31] netlink_sendmsg+0x813/0xb40 [ 1130.924951][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.930240][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.935399][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.940693][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.946046][ T31] __sys_sendto+0x672/0x710 [ 1130.950556][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1130.955908][ T31] ? exc_page_fault+0x6a/0xc0 [ 1130.960581][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1130.965918][ T31] __x64_sys_sendto+0xde/0x100 [ 1130.970687][ T31] do_syscall_64+0x14d/0xf80 [ 1130.975379][ T31] ? trace_irq_disable+0x3b/0x150 [ 1130.980420][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.986786][ T31] ? clear_bhb_loop+0x40/0x90 [ 1130.991459][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.997385][ T31] RIP: 0033:0x7fd0dcf5cfce [ 1131.001802][ T31] RSP: 002b:00007fd0ddee7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1131.010254][ T31] RAX: ffffffffffffffda RBX: 00007fd0ddee96c0 RCX: 00007fd0dcf5cfce [ 1131.020157][ T31] RDX: 0000000000000020 RSI: 00007fd0ddee8000 RDI: 000000000000000a [ 1131.028328][ T31] RBP: 0000000000000000 R08: 00007fd0ddee7f04 R09: 000000000000000c [ 1131.036369][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1131.044657][ T31] R13: 00007fd0ddee7f58 R14: 00007fd0ddee8000 R15: 0000000000000000 [ 1131.052707][ T31] [ 1131.055735][ T31] INFO: task syz.3.7165:32100 blocked for more than 145 seconds. [ 1131.063606][ T31] Not tainted syzkaller #0 [ 1131.068563][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.077483][ T31] task:syz.3.7165 state:D stack:28824 pid:32100 tgid:32098 ppid:27721 task_flags:0x400040 flags:0x00080002 [ 1131.089529][ T31] Call Trace: [ 1131.093004][ T31] [ 1131.095941][ T31] __schedule+0x15dd/0x52d0 [ 1131.100444][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.105675][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.110538][ T31] ? schedule+0x90/0x360 [ 1131.114832][ T31] schedule+0x164/0x360 [ 1131.118992][ T31] schedule_preempt_disabled+0x13/0x30 [ 1131.124844][ T31] __mutex_lock+0x7fe/0x1300 [ 1131.129448][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1131.134962][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1131.139751][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1131.144563][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1131.149608][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.154674][ T31] ? radix_tree_lookup+0x240/0x290 [ 1131.159799][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1131.164586][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.169606][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.174761][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1131.179538][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.184618][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1131.189918][ T31] ? down_read+0x272/0x2e0 [ 1131.194749][ T31] ? genl_rcv+0xd/0x40 [ 1131.198829][ T31] genl_rcv+0x28/0x40 [ 1131.202945][ T31] netlink_unicast+0x80f/0x9b0 [ 1131.207758][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1131.213110][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1131.218049][ T31] ? skb_put+0x11b/0x210 [ 1131.222506][ T31] netlink_sendmsg+0x813/0xb40 [ 1131.227586][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.233016][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1131.237972][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.243322][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.248618][ T31] __sys_sendto+0x672/0x710 [ 1131.253469][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1131.258501][ T31] ? fd_install+0x94/0x3d0 [ 1131.263046][ T31] ? fd_install+0x306/0x3d0 [ 1131.267573][ T31] __x64_sys_sendto+0xde/0x100 [ 1131.272350][ T31] do_syscall_64+0x14d/0xf80 [ 1131.277040][ T31] ? trace_irq_disable+0x3b/0x150 [ 1131.282065][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.288477][ T31] ? clear_bhb_loop+0x40/0x90 [ 1131.293189][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.299190][ T31] RIP: 0033:0x7fd0dcf5cfce [ 1131.303695][ T31] RSP: 002b:00007fd0ddec6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1131.312111][ T31] RAX: ffffffffffffffda RBX: 00007fd0ddec86c0 RCX: 00007fd0dcf5cfce [ 1131.320422][ T31] RDX: 0000000000000028 RSI: 00007fd0ddec7000 RDI: 000000000000000b [ 1131.328757][ T31] RBP: 0000000000000000 R08: 00007fd0ddec6f04 R09: 000000000000000c [ 1131.336821][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 1131.345012][ T31] R13: 00007fd0ddec6f58 R14: 00007fd0ddec7000 R15: 0000000000000000 [ 1131.353091][ T31] [ 1131.356123][ T31] INFO: task syz.4.7167:32110 blocked for more than 145 seconds. [ 1131.363879][ T31] Not tainted syzkaller #0 [ 1131.368810][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.377763][ T31] task:syz.4.7167 state:D stack:27656 pid:32110 tgid:32109 ppid:28892 task_flags:0x400140 flags:0x00080002 [ 1131.389742][ T31] Call Trace: [ 1131.393173][ T31] [ 1131.396099][ T31] __schedule+0x15dd/0x52d0 [ 1131.400607][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.405858][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.410742][ T31] ? schedule+0x90/0x360 [ 1131.415187][ T31] schedule+0x164/0x360 [ 1131.419356][ T31] schedule_preempt_disabled+0x13/0x30 [ 1131.424911][ T31] __mutex_lock+0x7fe/0x1300 [ 1131.429751][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1131.435250][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1131.440014][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1131.444755][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1131.449793][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.454839][ T31] ? radix_tree_lookup+0x240/0x290 [ 1131.459971][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1131.464751][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.469798][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.474798][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1131.479564][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.484715][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1131.490018][ T31] ? down_read+0x272/0x2e0 [ 1131.494801][ T31] ? genl_rcv+0xd/0x40 [ 1131.498868][ T31] genl_rcv+0x28/0x40 [ 1131.503003][ T31] netlink_unicast+0x80f/0x9b0 [ 1131.507789][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1131.513154][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1131.518092][ T31] ? skb_put+0x11b/0x210 [ 1131.522319][ T31] netlink_sendmsg+0x813/0xb40 [ 1131.527447][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.533225][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1131.538191][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.543571][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.548862][ T31] __sys_sendto+0x672/0x710 [ 1131.553625][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1131.558653][ T31] ? exc_page_fault+0x6a/0xc0 [ 1131.563434][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1131.568731][ T31] __x64_sys_sendto+0xde/0x100 [ 1131.573631][ T31] do_syscall_64+0x14d/0xf80 [ 1131.578230][ T31] ? trace_irq_disable+0x3b/0x150 [ 1131.583585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.589666][ T31] ? clear_bhb_loop+0x40/0x90 [ 1131.594453][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.600351][ T31] RIP: 0033:0x7f888f75cfce [ 1131.604811][ T31] RSP: 002b:00007f88906c7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1131.613461][ T31] RAX: ffffffffffffffda RBX: 00007f88906c96c0 RCX: 00007f888f75cfce [ 1131.621418][ T31] RDX: 0000000000000020 RSI: 00007f88906c8000 RDI: 0000000000000004 [ 1131.629425][ T31] RBP: 0000000000000000 R08: 00007f88906c7f04 R09: 000000000000000c [ 1131.637708][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1131.646009][ T31] R13: 00007f88906c7f58 R14: 00007f88906c8000 R15: 0000000000000000 [ 1131.654378][ T31] [ 1131.657436][ T31] INFO: task syz.4.7167:32111 blocked for more than 145 seconds. [ 1131.665406][ T31] Not tainted syzkaller #0 [ 1131.670344][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.679341][ T31] task:syz.4.7167 state:D stack:28344 pid:32111 tgid:32109 ppid:28892 task_flags:0x400040 flags:0x00080002 [ 1131.691314][ T31] Call Trace: [ 1131.694650][ T31] [ 1131.697568][ T31] __schedule+0x15dd/0x52d0 [ 1131.702065][ T31] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1131.708992][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.713992][ T31] ? __pfx___schedule+0x10/0x10 [ 1131.718843][ T31] ? schedule+0x90/0x360 [ 1131.723210][ T31] schedule+0x164/0x360 [ 1131.727368][ T31] schedule_preempt_disabled+0x13/0x30 [ 1131.733241][ T31] __mutex_lock+0x7fe/0x1300 [ 1131.738044][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1131.743401][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1131.748175][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1131.753006][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1131.758046][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.763282][ T31] ? radix_tree_lookup+0x240/0x290 [ 1131.768391][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1131.772950][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.778007][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1131.783233][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1131.788016][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1131.793333][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1131.798647][ T31] ? down_read+0x272/0x2e0 [ 1131.803165][ T31] ? genl_rcv+0xd/0x40 [ 1131.807242][ T31] genl_rcv+0x28/0x40 [ 1131.811208][ T31] netlink_unicast+0x80f/0x9b0 [ 1131.816223][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1131.821522][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1131.826731][ T31] ? skb_put+0x11b/0x210 [ 1131.830983][ T31] netlink_sendmsg+0x813/0xb40 [ 1131.835919][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.841443][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1131.846462][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1131.851753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.857351][ T31] __sys_sendto+0x672/0x710 [ 1131.861851][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1131.867001][ T31] ? exc_page_fault+0x6a/0xc0 [ 1131.871685][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1131.877029][ T31] __x64_sys_sendto+0xde/0x100 [ 1131.881802][ T31] do_syscall_64+0x14d/0xf80 [ 1131.886648][ T31] ? trace_irq_disable+0x3b/0x150 [ 1131.891669][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.898240][ T31] ? clear_bhb_loop+0x40/0x90 [ 1131.902975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.908880][ T31] RIP: 0033:0x7f888f75cfce [ 1131.913571][ T31] RSP: 002b:00007f88906a6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1131.921975][ T31] RAX: ffffffffffffffda RBX: 00007f88906a86c0 RCX: 00007f888f75cfce [ 1131.930085][ T31] RDX: 0000000000000020 RSI: 00007f88906a7000 RDI: 0000000000000004 [ 1131.938133][ T31] RBP: 0000000000000000 R08: 00007f88906a6f04 R09: 000000000000000c [ 1131.946755][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1131.954801][ T31] R13: 00007f88906a6f58 R14: 00007f88906a7000 R15: 0000000000000000 [ 1131.962863][ T31] [ 1131.965933][ T31] [ 1131.965933][ T31] Showing all locks held in the system: [ 1131.974023][ T31] 1 lock held by khungtaskd/31: [ 1131.978872][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1131.988811][ T31] 2 locks held by getty/5578: [ 1131.993593][ T31] #0: ffff888037bda0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1132.003721][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1132.013888][ T31] 3 locks held by kworker/u9:0/20459: [ 1132.019253][ T31] #0: ffff888057bad148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1132.030097][ T31] #1: ffffc900040f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1132.043088][ T31] #2: ffff88807b810ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1132.053256][ T31] 1 lock held by udevd/29251: [ 1132.057930][ T31] #0: ffff88807d724358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1132.067317][ T31] 1 lock held by udevd/29413: [ 1132.071996][ T31] #0: ffff888026e55358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1132.081610][ T31] 2 locks held by syz.1.7154/32064: [ 1132.086927][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.095194][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.104405][ T31] 2 locks held by syz.1.7154/32066: [ 1132.109582][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.117870][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.126904][ T31] 6 locks held by syz.1.7154/32068: [ 1132.132080][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.140531][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.149761][ T31] #2: ffff888026e69278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 1132.160256][ T31] #3: ffff888026e2b668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1132.169959][ T31] #4: ffff888026e2b008 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1132.182143][ T31] #5: ffff888026e2b040 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1132.194714][ T31] 2 locks held by syz.2.7156/32070: [ 1132.199898][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.208160][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.217224][ T31] 2 locks held by syz.0.7163/32093: [ 1132.222420][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.230987][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.240019][ T31] 2 locks held by syz.3.7165/32099: [ 1132.245245][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.253920][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.263054][ T31] 2 locks held by syz.3.7165/32100: [ 1132.268245][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.276573][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.285725][ T31] 2 locks held by syz.4.7167/32110: [ 1132.290922][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.299539][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.308632][ T31] 2 locks held by syz.4.7167/32111: [ 1132.314088][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.322255][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.331261][ T31] 2 locks held by syz-executor/32116: [ 1132.336756][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.345260][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.354584][ T31] 2 locks held by syz-executor/32118: [ 1132.359963][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.368250][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.377471][ T31] 2 locks held by syz-executor/32125: [ 1132.382977][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.391191][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.400211][ T31] 2 locks held by syz-executor/32127: [ 1132.405739][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.414062][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.423119][ T31] 2 locks held by syz-executor/32139: [ 1132.428483][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.436899][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.445981][ T31] 2 locks held by syz-executor/32166: [ 1132.451558][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.459933][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.469221][ T31] 2 locks held by syz-executor/32168: [ 1132.474677][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.482984][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.491971][ T31] 2 locks held by syz-executor/32171: [ 1132.497681][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.505951][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.514983][ T31] 2 locks held by syz-executor/32181: [ 1132.520343][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.528947][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.538127][ T31] 2 locks held by syz-executor/32186: [ 1132.543571][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.551795][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.561389][ T31] 2 locks held by syz-executor/32215: [ 1132.566813][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.575065][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.584307][ T31] 2 locks held by syz-executor/32217: [ 1132.589664][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.597983][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.607106][ T31] 2 locks held by syz-executor/32219: [ 1132.612478][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.621122][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.630173][ T31] 2 locks held by syz-executor/32229: [ 1132.635636][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.644118][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.653138][ T31] 2 locks held by syz-executor/32232: [ 1132.658709][ T31] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1132.667023][ T31] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1132.676170][ T31] [ 1132.678503][ T31] ============================================= [ 1132.678503][ T31] [ 1132.687048][ T31] NMI backtrace for cpu 0 [ 1132.687062][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1132.687080][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.687090][ T31] Call Trace: [ 1132.687097][ T31] [ 1132.687105][ T31] dump_stack_lvl+0xe8/0x150 [ 1132.687134][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1132.687161][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1132.687185][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1132.687213][ T31] sys_info+0x135/0x170 [ 1132.687235][ T31] watchdog+0xfd9/0x1030 [ 1132.687273][ T31] ? watchdog+0x21a/0x1030 [ 1132.687296][ T31] kthread+0x388/0x470 [ 1132.687320][ T31] ? __pfx_watchdog+0x10/0x10 [ 1132.687335][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.687353][ T31] ret_from_fork+0x51e/0xb90 [ 1132.687382][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.687403][ T31] ? __switch_to+0xc7d/0x1450 [ 1132.687435][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.687454][ T31] ret_from_fork_asm+0x1a/0x30 [ 1132.687493][ T31] [ 1132.687500][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1132.797815][ C1] NMI backtrace for cpu 1 [ 1132.797832][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1132.797852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.797862][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1132.797891][ C1] Code: 4e 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1132.797906][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1132.797923][ C1] RAX: 00000000003c362d RBX: ffffffff819a900a RCX: 0000000080000001 [ 1132.797936][ C1] RDX: 0000000000000001 RSI: ffffffff8df23a17 RDI: ffffffff8c27c180 [ 1132.797948][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1132.797962][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: 0000000000000001 [ 1132.797974][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000 [ 1132.797986][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1132.798001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1132.798014][ C1] CR2: 0000559129371168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1132.798029][ C1] Call Trace: [ 1132.798036][ C1] [ 1132.798042][ C1] default_idle+0x9/0x20 [ 1132.798065][ C1] default_idle_call+0x72/0xb0 [ 1132.798089][ C1] do_idle+0x36a/0x5f0 [ 1132.798115][ C1] ? __pfx_do_idle+0x10/0x10 [ 1132.798143][ C1] cpu_startup_entry+0x43/0x60 [ 1132.798166][ C1] start_secondary+0x101/0x110 [ 1132.798187][ C1] common_startup_64+0x13e/0x147 [ 1132.798212][ C1] [ 1132.959804][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1132.966644][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1132.975733][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.985769][ T31] Call Trace: [ 1132.989031][ T31] [ 1132.991943][ T31] vpanic+0x56c/0xa60 [ 1132.995910][ T31] ? __pfx___schedule+0x10/0x10 [ 1133.000742][ T31] ? __pfx_vpanic+0x10/0x10 [ 1133.005226][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1133.010408][ T31] panic+0xc5/0xd0 [ 1133.014115][ T31] ? __pfx_panic+0x10/0x10 [ 1133.018533][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1133.023898][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1133.030052][ T31] watchdog+0x1023/0x1030 [ 1133.034372][ T31] ? watchdog+0x21a/0x1030 [ 1133.038781][ T31] kthread+0x388/0x470 [ 1133.042836][ T31] ? __pfx_watchdog+0x10/0x10 [ 1133.047503][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.052079][ T31] ret_from_fork+0x51e/0xb90 [ 1133.056662][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1133.061761][ T31] ? __switch_to+0xc7d/0x1450 [ 1133.066432][ T31] ? __pfx_kthread+0x10/0x10 [ 1133.071020][ T31] ret_from_fork_asm+0x1a/0x30 [ 1133.075794][ T31] [ 1133.079057][ T31] Kernel Offset: disabled [ 1133.083365][ T31] Rebooting in 86400 seconds..