last executing test programs: 23.01287396s ago: executing program 2 (id=227): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r5}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r8], 0x20) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r4, r6, 0x37, 0x2000, 0x0, @value=r9, @void, @void, @void, r8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r10, r3, 0x24, 0x2000, r3, @value, @void, @void, @void, r8}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r11, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)={@fallback=r10, r6, 0x16, 0x0, 0x0, @void, @value, @void, @void, r8}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0x8, 0x4, 0x8}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r12, r2, 0x14, 0x20, r2, @void, @void, @void, @value=0xffffffffffffffff, r8}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 22.649815306s ago: executing program 2 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 22.396605779s ago: executing program 2 (id=233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000340)="c140b306b2ad9ba935bb848f270efa1571eaa74b36bdd6a142320f6722ea521e100b24626dcee0cb4eb2ad7f7cde8e0dbacd5f37cd548cf072baf1cb6504e02aa5a9531026ab0a516a687d37e0f975821cde34d3ce48bb5147b0a252984b183b2de0565cd1365045eafe201e8ab16d0bc47f1479822fc08856ccaa4ce3e2e9607168c75802fa53d6ec051ef24b1bbc2e6386e3a90e99e8a2df8b", &(0x7f00000002c0)=@udp=r2, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r6, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r4, 0x4}, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000440)={{0x2, 0x5}, 0x10}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) 22.2113153s ago: executing program 2 (id=235): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4000400) (async) unshare(0x4000400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x73e7, 0x8f, 0x5, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xd}, 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket(0x840000000002, 0x3, 0xff) (async) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464000100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4ebebee6335ac4ca8c4e94692a88e9be336877a5d1fd4e3e3457fcdce7d952f3f14089167ab4776819c0d16a38446b235f67df52cadcbe1610c63fbb0294fc77fdc811ebc8e5821c46c2eb3e22861b4bf6fc1d84e26a0345cdbde018f4d7b04cc81f99a3312d8afa8aca7b4dbc389b01af79890140733e23759d96e01dc2f42df84bb36535ae898a060e61052131e4f7b", 0xb3}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) recvmmsg(r11, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r10, 0x40000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) unshare(0x6a040000) 19.273922843s ago: executing program 4 (id=255): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000023000000", 0x18) 19.193804728s ago: executing program 1 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000003140100299d7000ffdbdf2504000280"], 0x38}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001300)}, 0x1, 0x0, 0x0, 0x801}, 0x8000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x5}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r13 = socket(0x40000000015, 0x5, 0x0) unshare(0x6020400) bind$inet6(r13, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe73a}, 0x1c) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x3, [@loopback, @loopback, @multicast2]}, 0x1c) 19.058233846s ago: executing program 4 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x1d4, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x188, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000002000010027bd7000fedbdf250a1480000100000321000300140001002001000000000000000000000000000214000200fc0000000000000000000000000000012c"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x48, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x6}, 0x1c) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$inet(r7, &(0x7f00000004c0)=[{{&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f00000003c0)="f08c39d6418723b5dea27194d5b9077a4087cf0573f2b6127cc7cb7d6980e9e600d2271e70b6f1e289ed2f796a5aa4213217e929bd68c910c6db9741dc1d48108e0a7b5bfc025e4d4d864ee330967e94fe605e865574a2698b78e5df96fd6957c13caeeccc79f4a26ddffb2bfde650978a9cd1953cf4e4cc83cb95879092fb6be8bf41329c9715c7e174b2972c713d14ad5b166047c581f9392c7ceb0196776ec0895d4f426009fee2562f8b0635bf765d15de894d923078b6a42f8523e4daeb129dab1796c747f4cc83532245c48c7400b1c1dc9f5492c3f8c7acd20ef5c0181264d359ef6f5f5f684a99ef0cf2", 0xee}, {&(0x7f00000002c0)="f15e17b19c9b9fd62497bd55f25ccaf82523a01677f7ada8f966c411e9bf85f82b32cba347d000bbc2d0fae6d8bb4893299c113e61cbe20c8bed85f324788ae0620cefbafd83c99b47da164196a5ea0ab10f089f79b1bf63dd143b851257fb9fcc783bd0", 0x64}, {&(0x7f0000000540)="f1432014a1d17676ea654bfe7f69f08d5b82f0b2e41ea981dc522d9e052fa6a3bf557f7fd60cdbb6a3fb0840506f3969dd55d960d35200771ec063ea43871fdcdac7e81b0aa025534abfecb80593f79f6f443294fe083d4fa1efb61133f156475138b53ea630a8efee11fb4d442fb2af86ef63196fde86e86e83b8ea702afcace0860ef16df1d0beed506b74593c87389d4c4a98edcc75dc586ffa384755cde6f7af897efbf4343cf75867a41a4fd15d4dfe779bb40ec606ad809526b888f634157b620c42ce463d3038a873ce86a4c7b3d4bd97e8c8b0a4511ce9c357e1ea0b0bc4280631bfa5e789522f1372894be4315591704413cc196c", 0xf9}, {&(0x7f0000000640)="6953fbb36fba72778931014788d9a2b9c2f478589c62d8f6cea84bb7feba6bbef0367b6c5427ff5a32ce04a95403709e54f6122f91eecfe9d97b2d0dcd8c25c5a9197fff457596b57e1b628f819a1b60eda2d56c6229ab18b2883423b4a845412ca8fd82175423c8916760ff8b50db828b2894c4274c63b324f6c8338bbfa7384128fb357b1c76f3ac6b496ea7b0b5558186f1de21921e3a62aa057d1a03b0b23adb35c1641a374b2f653a3665b6be3d985054af3d273b8fb3ba6b9252d5e2b5364bc788027d849a7f8ef9d9a358982ced007cc3b7699e", 0xd7}, {&(0x7f0000000740)="4246eff21547c7604a9c8f60a6cb8da8e0c2082476d932b7405256a5b334f8b95d0ad8e86ae1af0d292209c813e662a0ddc53e90153f4e6101a3acd67e846148b7f972baa5460192f4331b6c5dbfce89f1dee19bccaa1fbc1988f742acf37faa59e50c60f32b9cd8c0ad776b0510807e6538bfdd94c53f5ad8e3dd59b01bc8d517025bfad5ec23679bc6b0833d4cea28ff1f89ffa7c5ab1c355804070608e63ae83c51b9eee0b231cb5319a6cb3ac0ffad6b2f93fff7a77b92d98a547c4945ade2682f0b9af9dca162cca609ae28db", 0xcf}], 0x5, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xce}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_retopts={{0x118, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x7, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80000001}, {@rand_addr=0x64010101, 0xf}, {@rand_addr=0x64010100, 0x7ff}]}, @generic={0x88, 0x5, "24ae28"}, @cipso={0x86, 0x45, 0x2, [{0x5, 0x12, "63c7f429a78b45d4b6cec74596161f0f"}, {0x1, 0x11, "1b2d74cda55aa808d80445887e2e42"}, {0x0, 0x12, "09c7244c2048ddb22491e3373b7365b5"}, {0x7, 0xa, "244d98d1ace9b5fe"}]}, @timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x9, [{@local, 0x8000}, {@local, 0x6}]}, @cipso={0x86, 0x67, 0xffffffffffffffff, [{0x1, 0x7, "046239d7eb"}, {0x2, 0xf, "c4615d42e890a4b5ee0d7bf854"}, {0x5, 0x9, "64024a6c879bb1"}, {0x5, 0x10, "10abb3f88249e95d43b491fa295e"}, {0x2, 0xb, "9e531ac2b3bff14ba6"}, {0x5, 0x7, "86644ee01e"}, {0x2, 0xa, "751f1712b1c58e47"}, {0x2, 0x12, "9f20a833460ca24aba10fd01202628f9"}, {0x1, 0x4, "0e83"}]}, @timestamp_prespec={0x44, 0x1c, 0x82, 0x3, 0x6, [{@multicast1, 0x7}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010100, 0xfffffe01}]}, @end]}}}], 0x148}}], 0x1, 0x4010) sendto$inet6(r3, 0x0, 0x0, 0x24004010, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r9, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r9, 0x0, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000340)={'sit0\x00', 0xffffffffffffffff}) r11 = getuid() sendmsg$nl_generic(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001080)={0x1134, 0x30, 0x8, 0x70bd2d, 0x25dfdbfb, {0x7}, [@nested={0x10d0, 0x139, 0x0, 0x1, [@generic="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", @generic="132dd2373a7bcacf2f4819bcdf0a71376fd9dbd2e4825fa5e49518d088c32f030b5b2ff7c2b0a1369eaf96f925f7b66d7c8671d9093aa592cd0648dd05e42d895203014019e9154138edd82cfa0e25b976bbf7a0fa6139c89c8dcdd7b8bdece7c72c4a45e97ff81e76bb48f6521739a4433639b38f3d6dbf75c6789ba4f69ac5bda0e0f85667ea9ff9147beaf1f778cc0588ab178490f1f018632caf1ce89f83aa0ef4660b706b6fba32458511d20dca4bc26e7bb2d7a4a9", @typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x47, 0xa2, 0x0, 0x1, [@generic="2e2cb3e4aef63e52555f0e1b2a732f77b4e66fbae1207e0d39bee9eabaa10e83701b3f58933565ebba8b9d4bab0c31794fbab3", @typed={0x5, 0x135, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x1}, @nested={0x4, 0x97}]}, @typed={0x8, 0x10a, 0x0, 0x0, @uid=r11}]}, 0x1134}}, 0x4004050) 18.974265986s ago: executing program 0 (id=261): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080ff1be41ed186ff00000000090000004521453aba180100002024702500000000002020187b1af8ff00000800000701000002000008000000b703000000002300000095000000000000cae27371501301a5c9ff294b71e4515000"/110], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r4 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$inet(r4, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f64172976084d06bab86f8818dbabc6bd9cdf22850db42064ab50a2a36fef3bef5a251d", 0x34}], 0x1}}], 0x1, 0x20000800) 18.807465885s ago: executing program 4 (id=262): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff"], 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 18.746208742s ago: executing program 1 (id=263): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1800002, 0x12, r1, 0x88fa6000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(0x3) 18.609721144s ago: executing program 1 (id=265): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000ac0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 18.532254897s ago: executing program 1 (id=266): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf004ab77f84"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000340)=ANY=[], 0xfdef) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x36, 0x300, 0x70bd2c, 0x25dfdbfb, {0x1a}, [@typed={0x4, 0x132}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b00", 0x20) socket$nl_route(0x10, 0x3, 0x0) 18.47381675s ago: executing program 4 (id=268): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000d20b06000500029adc"], 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) write$cgroup_int(r3, &(0x7f0000000300)=0x8, 0x12) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000000c0)=""/15, &(0x7f00000001c0)=0xf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000100000100fffc0900010073797a30000000002c000000030a010206000000000000000100fffd0900010073797a3000000000090003007b797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300f100000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000200)=""/156, &(0x7f00000002c0)=0x9c) 17.79263241s ago: executing program 3 (id=269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x691, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x80) 17.626657926s ago: executing program 3 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@setlink={0x30, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x60, 0x0, 0x2024, 0x120}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0080c1}, 0x20048000) 17.438609218s ago: executing program 3 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x3, 0x7, 0x61ff7546b754d28, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x762}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01048000000000000000010000030900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b400000000040000480100001800a00010072656469720000002c0001800c00010062697477697365001c0002800800034001000002080001400000001208000240000000120900010073797a3000"], 0xdc}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x0, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x1) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) 17.424555711s ago: executing program 4 (id=272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1805000000000400000000000000a9c2850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) close(0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 17.386041417s ago: executing program 1 (id=273): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r7, &(0x7f0000003cc0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)='i', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="ad", 0x1}], 0x1}}], 0x2, 0x20000000) shutdown(r7, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYBLOB="003ae7728f87dfe64752000000ac97b4da32af28503f38224326000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x95ae, 0xd7, &(0x7f0000000580)=""/215, 0x41100, 0x32, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0x80000000, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[r3, r2, r8, r3, r3, r3, r3], &(0x7f00000004c0)=[{0x2, 0x4, 0x3, 0x5}, {0x0, 0x2, 0x4, 0x1}, {0x5, 0x4, 0x8}, {0x4, 0x3, 0xe, 0x9}, {0x1, 0x4, 0x9, 0x2}, {0x3, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x10, 0x2}, {0x0, 0x2, 0x4, 0xa064accb10fcd7}], 0x10, 0x40}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 17.249031573s ago: executing program 2 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b37, &(0x7f0000000040)) 17.246092046s ago: executing program 3 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r3 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x400, @remote}]}, &(0x7f00000005c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000004a00)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e0101000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000070000000000000000000010000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000000000000440005000a010100000000000000000000000000000000003c00000000000000ffffffff000000000000002fab00000000000000000002"], 0xfc}}, 0x20000088) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000960700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000680)=ANY=[@ANYRES8=0x0, @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095", @ANYRES8=0x0, @ANYRES8=r0], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r6, &(0x7f0000000480), 0x0}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x50) sendmsg$tipc(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x1}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000008c0)="0b90d36aa7136a1d55cf1522adf5d2db80be52ed38349f970b9b7eb176c431dcda41299429558d25cda252447ea4025cf4289ff158d090daaeed0e6a9ee52bcc61be81980a2b58bb9e54b5ecab66d5a43a7c931f6de7adcaf14f70ccbf17f703785633ffbf06fce3ba450517889b360e47773ec33418faf22d755764f9985eb3299f969f06b96934a901f360fb5cf704f81dfd8633a82471807743eb01aaef", 0x9f}, {&(0x7f0000000a40)="452b09326d84a85dd0bda5c00a01b98ab78dd513294ed40fadd41b1006a3dc68cfe4de3066971a7ae9cc7689222e91a7dff75c4ec8a801f9d1858250b56170d3df8436b269b35b3c2e2ff9480ad34331cf5b87e99bb818325f797190288da4e62e7c7d7bcd9d8fdcf82eb18352cfb1ca275bf23a690c5c6e21601406f20450832bcf7a655bb6bf1016df58be057559e378d87fee7f25f3788c1379e6f909a6328758e40947649ee5814f3e69da223faed302e0e3db402196addfe0d239d4ec8ca1116e14661de8bc7fca9f5a5a6fba2af9973bc2b3151ad3de6a", 0xda}, {&(0x7f0000000b40)="15fd4d99eeb4a9d606eb6622df51dcb236aef730c9048f452ac2bf49cbeb540d79b1af7dbdc5ea4f8820054a72ba54ec96d320ffd02b27dd3608b7401178c3701c7f10982818017826891eba687d646b98a8fab7fad9f12d5ca40f96b51eaa47581b4befb20768a3150f092b7fe9541b46e82c15752d3fa8a2648ae4062f52fc000fda50c339eda773dc93a5e25f4b87fccfba", 0x93}], 0x3, &(0x7f0000000700)="06cd1e82df1c0e3948183b7ebc0d0eb1aac1ce1c9d19c78d5ac334be3a9237", 0x1f, 0x8000}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400e50105000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES64=0x0, @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17.16554368s ago: executing program 4 (id=276): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, 0x0, 0x0, 0x24048084) connect$pppoe(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) connect$netlink(r2, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x26}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) accept4(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000429bd7000fcdbeb251100000008000b000800000008003b00ff7f000005002f0001000000080039001dad000008002b000b0000000500300001000000"], 0x44}}, 0x40) 17.096289773s ago: executing program 1 (id=277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (fail_nth: 5) 17.001661095s ago: executing program 2 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="663f8ec395898eb5eca207ac8d1c2797e043151a6ea2e13d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16.949769297s ago: executing program 3 (id=279): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.690625134s ago: executing program 3 (id=280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x691, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x80) 16.208329344s ago: executing program 0 (id=281): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x100, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40049d1}, 0x9bd2e45169aa59f0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f00000001c0)) r5 = socket(0x2b, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000280)=[{r5, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000300)) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) r13 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f00000001c0)={0x3, 'dummy0\x00', {0xdea4}, 0x9}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 15.332111131s ago: executing program 0 (id=282): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090014"], 0x12c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 15.211126879s ago: executing program 0 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x3, 0x7, 0x61ff7546b754d28, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x762}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x44000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01048000000000000000010000030900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b400000000040000480100001800a00010072656469720000002c0001800c00010062697477697365001c0002800800034001000002080001400000001208000240000000120900010073797a3000"], 0xdc}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x0, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x1) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x3f) 15.209432668s ago: executing program 0 (id=284): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) read$alg(r3, &(0x7f0000000040)=""/136, 0x88) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000040)={0xb0000010}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071108d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x286, @mcast2, 0x115}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x6, 0x2, 0x1, 0x80}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000000000000000000aa89010000000000003100c204"], 0x0) 15.162801082s ago: executing program 0 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x27, 0x22, 0x0, &(0x7f0000000240)="f8f7f52cefb53e4139007f7b0800c22d79ce15d6faf711e993e69fad19f8f4cb3f6f", 0x0, 0x8001, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000001c0700000000000000dbdf2502f8ff00", @ANYRES32=0x0, @ANYBLOB="0800bb07060005000300000048000e80050001000700000005000100030000000500010002000000040002003b00010004000000050001000900000005000100e90000000400020005000100e70000000000010001000000140003000600000008000000030000009106000008000b00fe0f00001400030006000000060000000200000000000000"], 0x9c}}, 0x24040850) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x80) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000280)="9adfde7402abcab646e8d8e1280ea60565ca42bd") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000b598ca86ee9f10000ff0f000029bd7010fcdbdf252b00abd10d17fe1022e3616e00fb9830935ad44f6c0000000000b3d1be4bafea95f60537f96e5279748aa3d16a033df7fc51bfc631f28fda4152924ddd9b52f46a62fe52a65a5e62d088b042600dbcf114647f79fb36da513e4dbc86e42f1e5a021805008ee513f1bca475ef0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0xffffffffffffff64, r11, 0x200, 0x70bd27, 0x25dfdbfd}, 0x3c}}, 0x240000b1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000051e0a0000000000ffff000005"], 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 2.014026742s ago: executing program 32 (id=277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (fail_nth: 5) 1.970186141s ago: executing program 33 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="663f8ec395898eb5eca207ac8d1c2797e043151a6ea2e13d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.930686731s ago: executing program 34 (id=276): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, 0x0, 0x0, 0x24048084) connect$pppoe(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x337) connect$netlink(r2, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) r4 = socket(0x15, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x26}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) accept4(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000429bd7000fcdbeb251100000008000b000800000008003b00ff7f000005002f0001000000080039001dad000008002b000b0000000500300001000000"], 0x44}}, 0x40) 1.490791299s ago: executing program 35 (id=280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x691, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x80) 0s ago: executing program 36 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x27, 0x22, 0x0, &(0x7f0000000240)="f8f7f52cefb53e4139007f7b0800c22d79ce15d6faf711e993e69fad19f8f4cb3f6f", 0x0, 0x8001, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000001c0700000000000000dbdf2502f8ff00", @ANYRES32=0x0, @ANYBLOB="0800bb07060005000300000048000e80050001000700000005000100030000000500010002000000040002003b00010004000000050001000900000005000100e90000000400020005000100e70000000000010001000000140003000600000008000000030000009106000008000b00fe0f00001400030006000000060000000200000000000000"], 0x9c}}, 0x24040850) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x80) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000280)="9adfde7402abcab646e8d8e1280ea60565ca42bd") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000b598ca86ee9f10000ff0f000029bd7010fcdbdf252b00abd10d17fe1022e3616e00fb9830935ad44f6c0000000000b3d1be4bafea95f60537f96e5279748aa3d16a033df7fc51bfc631f28fda4152924ddd9b52f46a62fe52a65a5e62d088b042600dbcf114647f79fb36da513e4dbc86e42f1e5a021805008ee513f1bca475ef0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0xffffffffffffff64, r11, 0x200, 0x70bd27, 0x25dfdbfd}, 0x3c}}, 0x240000b1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000051e0a0000000000ffff000005"], 0x48) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 79.881431][ T5807] cgroup: Unknown subsys name 'net' [ 80.032335][ T5807] cgroup: Unknown subsys name 'cpuset' [ 80.041025][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.674452][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.106048][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.115986][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.124289][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.132104][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.141315][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.153953][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.166958][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.180882][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.186038][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.188293][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.203031][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.204100][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.211289][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.224474][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.225444][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.233597][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.246975][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.249469][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.261497][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.261574][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.269832][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.288424][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.296738][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.304904][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.321577][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.823595][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.964037][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.989321][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.108479][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 86.193091][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.200784][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.208389][ T5830] bridge_slave_0: entered allmulticast mode [ 86.215732][ T5830] bridge_slave_0: entered promiscuous mode [ 86.268535][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.276081][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.283229][ T5830] bridge_slave_1: entered allmulticast mode [ 86.290457][ T5830] bridge_slave_1: entered promiscuous mode [ 86.341587][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.348852][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.356843][ T5829] bridge_slave_0: entered allmulticast mode [ 86.363877][ T5829] bridge_slave_0: entered promiscuous mode [ 86.412607][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.419917][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.427834][ T5829] bridge_slave_1: entered allmulticast mode [ 86.435065][ T5829] bridge_slave_1: entered promiscuous mode [ 86.441938][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 86.456907][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.476200][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.483349][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.490733][ T5827] bridge_slave_0: entered allmulticast mode [ 86.497871][ T5827] bridge_slave_0: entered promiscuous mode [ 86.524974][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.534222][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.541858][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.549139][ T5819] bridge_slave_0: entered allmulticast mode [ 86.556428][ T5819] bridge_slave_0: entered promiscuous mode [ 86.564118][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.571666][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.578970][ T5827] bridge_slave_1: entered allmulticast mode [ 86.586109][ T5827] bridge_slave_1: entered promiscuous mode [ 86.616872][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.636799][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.644156][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.651614][ T5819] bridge_slave_1: entered allmulticast mode [ 86.658918][ T5819] bridge_slave_1: entered promiscuous mode [ 86.687418][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.752277][ T5830] team0: Port device team_slave_0 added [ 86.770423][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.800271][ T5830] team0: Port device team_slave_1 added [ 86.808715][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.820260][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.847954][ T5829] team0: Port device team_slave_0 added [ 86.890795][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.922342][ T5829] team0: Port device team_slave_1 added [ 86.980991][ T5827] team0: Port device team_slave_0 added [ 87.005651][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.012903][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.021383][ T5820] bridge_slave_0: entered allmulticast mode [ 87.030699][ T5820] bridge_slave_0: entered promiscuous mode [ 87.039956][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.048841][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.075678][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.109223][ T5827] team0: Port device team_slave_1 added [ 87.133442][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.142283][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.149939][ T5820] bridge_slave_1: entered allmulticast mode [ 87.165680][ T5820] bridge_slave_1: entered promiscuous mode [ 87.177965][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.185523][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.212139][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.225368][ T5819] team0: Port device team_slave_0 added [ 87.243066][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.250118][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.276323][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.305467][ T52] Bluetooth: hci0: command tx timeout [ 87.309608][ T5819] team0: Port device team_slave_1 added [ 87.311234][ T5141] Bluetooth: hci4: command tx timeout [ 87.338690][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.345778][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.372094][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.384986][ T52] Bluetooth: hci3: command tx timeout [ 87.390706][ T52] Bluetooth: hci2: command tx timeout [ 87.396654][ T5141] Bluetooth: hci1: command tx timeout [ 87.401212][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.415687][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.436379][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.443390][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.470106][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.483941][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.491119][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.517331][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.558221][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.565411][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.591434][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.629973][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.637204][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.664095][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.679366][ T5820] team0: Port device team_slave_0 added [ 87.692037][ T5830] hsr_slave_0: entered promiscuous mode [ 87.698689][ T5830] hsr_slave_1: entered promiscuous mode [ 87.732954][ T5820] team0: Port device team_slave_1 added [ 87.804038][ T5827] hsr_slave_0: entered promiscuous mode [ 87.810762][ T5827] hsr_slave_1: entered promiscuous mode [ 87.817257][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 87.823037][ T5827] Cannot create hsr debugfs directory [ 87.834556][ T5829] hsr_slave_0: entered promiscuous mode [ 87.841032][ T5829] hsr_slave_1: entered promiscuous mode [ 87.847374][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 87.853561][ T5829] Cannot create hsr debugfs directory [ 87.869823][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.877088][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.903517][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.964204][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.971465][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.997735][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.022521][ T5819] hsr_slave_0: entered promiscuous mode [ 88.029090][ T5819] hsr_slave_1: entered promiscuous mode [ 88.035376][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 88.041114][ T5819] Cannot create hsr debugfs directory [ 88.226908][ T5820] hsr_slave_0: entered promiscuous mode [ 88.233748][ T5820] hsr_slave_1: entered promiscuous mode [ 88.240688][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 88.246600][ T5820] Cannot create hsr debugfs directory [ 88.607328][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.629910][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.640303][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.651001][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.717829][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.737150][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.748648][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.759089][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.884235][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.911336][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.924520][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.942859][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.018116][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.046146][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.071292][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.084325][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.105655][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.173977][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.194480][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.219950][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.230866][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.242577][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.254244][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.286593][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.293795][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.324628][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.332160][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.348251][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.381596][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.388870][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.396950][ T52] Bluetooth: hci4: command tx timeout [ 89.397794][ T5141] Bluetooth: hci0: command tx timeout [ 89.451775][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.458934][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.468613][ T5141] Bluetooth: hci2: command tx timeout [ 89.469387][ T52] Bluetooth: hci1: command tx timeout [ 89.474031][ T5141] Bluetooth: hci3: command tx timeout [ 89.532701][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.543984][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.630147][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.679788][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.717512][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.777318][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.785450][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.802549][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.809721][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.824615][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.849851][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.857091][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.884011][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.927844][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.935269][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.019619][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.031885][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.100755][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.108363][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.157304][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.164771][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.248184][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.427453][ T5830] veth0_vlan: entered promiscuous mode [ 90.471465][ T5830] veth1_vlan: entered promiscuous mode [ 90.548140][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.566478][ T5827] veth0_vlan: entered promiscuous mode [ 90.606715][ T5827] veth1_vlan: entered promiscuous mode [ 90.637945][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.690788][ T5830] veth0_macvtap: entered promiscuous mode [ 90.743428][ T5830] veth1_macvtap: entered promiscuous mode [ 90.784262][ T5827] veth0_macvtap: entered promiscuous mode [ 90.837871][ T5827] veth1_macvtap: entered promiscuous mode [ 90.860452][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.902250][ T5819] veth0_vlan: entered promiscuous mode [ 90.921996][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.934666][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.961962][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.973383][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.004247][ T5819] veth1_vlan: entered promiscuous mode [ 91.014001][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.064376][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.078809][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.099036][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.109044][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.123696][ T5820] veth0_vlan: entered promiscuous mode [ 91.131560][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.141053][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.169367][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.219740][ T5820] veth1_vlan: entered promiscuous mode [ 91.271868][ T5819] veth0_macvtap: entered promiscuous mode [ 91.311291][ T5819] veth1_macvtap: entered promiscuous mode [ 91.318787][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.327992][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.375713][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.383656][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.402398][ T5829] veth0_vlan: entered promiscuous mode [ 91.452892][ T5820] veth0_macvtap: entered promiscuous mode [ 91.465436][ T5141] Bluetooth: hci0: command tx timeout [ 91.467991][ T5826] Bluetooth: hci4: command tx timeout [ 91.481823][ T5829] veth1_vlan: entered promiscuous mode [ 91.501751][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.509789][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.510527][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.535447][ T5820] veth1_macvtap: entered promiscuous mode [ 91.547589][ T5826] Bluetooth: hci3: command tx timeout [ 91.550181][ T5141] Bluetooth: hci1: command tx timeout [ 91.553034][ T52] Bluetooth: hci2: command tx timeout [ 91.560532][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.591267][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.597311][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.607855][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.702322][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.718077][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.745274][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755748][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.774484][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.790706][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.832277][ T5940] hsr0: entered promiscuous mode [ 91.838436][ T5940] macsec1: entered allmulticast mode [ 91.847250][ T5940] hsr0: entered allmulticast mode [ 91.853600][ T5940] hsr_slave_0: entered allmulticast mode [ 91.859786][ T5940] hsr_slave_1: entered allmulticast mode [ 91.873426][ T5940] hsr0: left allmulticast mode [ 91.878949][ T5940] hsr_slave_0: left allmulticast mode [ 91.884679][ T5940] hsr_slave_1: left allmulticast mode [ 91.907442][ T5829] veth0_macvtap: entered promiscuous mode [ 91.954642][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.964208][ T1579] cfg80211: failed to load regulatory.db [ 91.991388][ T5829] veth1_macvtap: entered promiscuous mode [ 92.049356][ T1125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.066527][ T1125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087055][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 92.104506][ T5947] FAULT_INJECTION: forcing a failure. [ 92.104506][ T5947] name failslab, interval 1, probability 0, space 0, times 1 [ 92.117441][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 92.117465][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 92.117475][ T5947] Call Trace: [ 92.117482][ T5947] [ 92.117490][ T5947] dump_stack_lvl+0xe8/0x150 [ 92.117519][ T5947] should_fail_ex+0x412/0x560 [ 92.117547][ T5947] should_failslab+0xa8/0x100 [ 92.117569][ T5947] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 92.117597][ T5947] ? __alloc_skb+0x1d0/0x7d0 [ 92.117617][ T5947] ? __local_bh_enable_ip+0xd0/0x130 [ 92.117640][ T5947] __alloc_skb+0x1d0/0x7d0 [ 92.117669][ T5947] fdb_notify+0xa6/0x160 [ 92.117699][ T5947] __br_fdb_add+0xd73/0xec0 [ 92.117737][ T5947] br_fdb_add+0x8a1/0xc40 [ 92.117773][ T5947] ? __pfx_br_fdb_add+0x10/0x10 [ 92.117798][ T5947] ? do_raw_spin_lock+0x12b/0x2f0 [ 92.117835][ T5947] rtnl_fdb_add+0x83a/0xba0 [ 92.117870][ T5947] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 92.117928][ T5947] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 92.117952][ T5947] rtnetlink_rcv_msg+0x77e/0xbe0 [ 92.117979][ T5947] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 92.118001][ T5947] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.118022][ T5947] ? ref_tracker_free+0x693/0x840 [ 92.118043][ T5947] ? __copy_skb_header+0xa3/0x4a0 [ 92.118072][ T5947] ? __pfx_ref_tracker_free+0x10/0x10 [ 92.118093][ T5947] ? __skb_clone+0x63/0x7a0 [ 92.118128][ T5947] netlink_rcv_skb+0x232/0x4b0 [ 92.118150][ T5947] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.118175][ T5947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.118210][ T5947] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.118239][ T5947] netlink_unicast+0x80f/0x9b0 [ 92.118268][ T5947] ? __pfx_netlink_unicast+0x10/0x10 [ 92.118289][ T5947] ? netlink_sendmsg+0x650/0xb40 [ 92.118319][ T5947] ? skb_put+0x11b/0x210 [ 92.118346][ T5947] netlink_sendmsg+0x813/0xb40 [ 92.118378][ T5947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.118404][ T5947] ? aa_sock_msg_perm+0xf1/0x1b0 [ 92.118429][ T5947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.118451][ T5947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.118471][ T5947] ____sys_sendmsg+0xa68/0xad0 [ 92.118497][ T5947] ? __might_fault+0xaf/0x130 [ 92.118532][ T5947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.118566][ T5947] ? import_iovec+0x73/0xa0 [ 92.118597][ T5947] ___sys_sendmsg+0x2a5/0x360 [ 92.118622][ T5947] ? __lock_acquire+0x6b5/0x2cf0 [ 92.118653][ T5947] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.118716][ T5947] ? __fget_files+0x2a/0x420 [ 92.118737][ T5947] ? __fget_files+0x3a0/0x420 [ 92.118771][ T5947] __x64_sys_sendmsg+0x1bd/0x2a0 [ 92.118799][ T5947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.118836][ T5947] ? __pfx_ksys_write+0x10/0x10 [ 92.118877][ T5947] do_syscall_64+0xe2/0xf80 [ 92.118902][ T5947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.118919][ T5947] ? trace_irq_disable+0x37/0x100 [ 92.118936][ T5947] ? clear_bhb_loop+0x60/0xb0 [ 92.118960][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.118978][ T5947] RIP: 0033:0x7f860779aeb9 [ 92.118996][ T5947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.119011][ T5947] RSP: 002b:00007f860867b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.119032][ T5947] RAX: ffffffffffffffda RBX: 00007f8607a15fa0 RCX: 00007f860779aeb9 [ 92.119045][ T5947] RDX: 0000000024040040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 92.119058][ T5947] RBP: 00007f860867b090 R08: 0000000000000000 R09: 0000000000000000 [ 92.119070][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.119081][ T5947] R13: 00007f8607a16038 R14: 00007f8607a15fa0 R15: 00007fff4495c3c8 [ 92.119113][ T5947] [ 92.119976][ T5949] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 92.135072][ T1125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518648][ T1125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.650236][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.664184][ T5956] FAULT_INJECTION: forcing a failure. [ 92.664184][ T5956] name failslab, interval 1, probability 0, space 0, times 0 [ 92.714701][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 92.714728][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 92.714739][ T5956] Call Trace: [ 92.714746][ T5956] [ 92.714755][ T5956] dump_stack_lvl+0xe8/0x150 [ 92.714785][ T5956] should_fail_ex+0x412/0x560 [ 92.714815][ T5956] should_failslab+0xa8/0x100 [ 92.714839][ T5956] __kmalloc_cache_noprof+0x83/0x6e0 [ 92.714857][ T5956] ? netlink_lookup+0x30/0x200 [ 92.714877][ T5956] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 92.714903][ T5956] ? genl_start+0x1c9/0x6c0 [ 92.714935][ T5956] genl_start+0x1c9/0x6c0 [ 92.714960][ T5956] ? netlink_lookup+0x30/0x200 [ 92.714988][ T5956] __netlink_dump_start+0x469/0x7e0 [ 92.715019][ T5956] genl_family_rcv_msg_dumpit+0x213/0x310 [ 92.715051][ T5956] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 92.715087][ T5956] ? __pfx_genl_start+0x10/0x10 [ 92.715110][ T5956] ? __pfx_genl_dumpit+0x10/0x10 [ 92.715134][ T5956] ? __pfx_genl_done+0x10/0x10 [ 92.715165][ T5956] ? bpf_lsm_capable+0x9/0x20 [ 92.715188][ T5956] ? security_capable+0x7e/0x2c0 [ 92.715219][ T5956] genl_rcv_msg+0x5e8/0x7a0 [ 92.715254][ T5956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.715279][ T5956] ? __pfx_batadv_dat_cache_dump+0x10/0x10 [ 92.715306][ T5956] ? __pfx_ref_tracker_free+0x10/0x10 [ 92.715329][ T5956] ? __skb_clone+0x63/0x7a0 [ 92.715363][ T5956] netlink_rcv_skb+0x232/0x4b0 [ 92.715386][ T5956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 92.715414][ T5956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.715432][ T5956] ? genl_rcv+0x19/0x40 [ 92.715477][ T5956] ? down_read+0x272/0x2e0 [ 92.715492][ T5956] ? genl_rcv+0xd/0x40 [ 92.715520][ T5956] genl_rcv+0x28/0x40 [ 92.715552][ T5956] netlink_unicast+0x80f/0x9b0 [ 92.715582][ T5956] ? __pfx_netlink_unicast+0x10/0x10 [ 92.715604][ T5956] ? netlink_sendmsg+0x650/0xb40 [ 92.715623][ T5956] ? skb_put+0x11b/0x210 [ 92.715651][ T5956] netlink_sendmsg+0x813/0xb40 [ 92.715684][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.715710][ T5956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 92.715736][ T5956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.715758][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.715777][ T5956] ____sys_sendmsg+0xa68/0xad0 [ 92.715804][ T5956] ? __might_fault+0xaf/0x130 [ 92.715837][ T5956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.715871][ T5956] ? import_iovec+0x73/0xa0 [ 92.715902][ T5956] ___sys_sendmsg+0x2a5/0x360 [ 92.715925][ T5956] ? __lock_acquire+0x6b5/0x2cf0 [ 92.715955][ T5956] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.716020][ T5956] ? __fget_files+0x2a/0x420 [ 92.716041][ T5956] ? __fget_files+0x3a0/0x420 [ 92.716073][ T5956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 92.716101][ T5956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.716137][ T5956] ? __pfx_ksys_write+0x10/0x10 [ 92.716176][ T5956] do_syscall_64+0xe2/0xf80 [ 92.716202][ T5956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.716218][ T5956] ? trace_irq_disable+0x37/0x100 [ 92.716236][ T5956] ? clear_bhb_loop+0x60/0xb0 [ 92.716258][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.716276][ T5956] RIP: 0033:0x7f389c39aeb9 [ 92.716293][ T5956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.716307][ T5956] RSP: 002b:00007f389d1b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.716329][ T5956] RAX: ffffffffffffffda RBX: 00007f389c615fa0 RCX: 00007f389c39aeb9 [ 92.716343][ T5956] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 92.716354][ T5956] RBP: 00007f389d1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 92.716365][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.716376][ T5956] R13: 00007f389c616038 R14: 00007f389c615fa0 R15: 00007ffc37b313e8 [ 92.716408][ T5956] [ 92.745895][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.110262][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.115578][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.179226][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203739][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.261043][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.291335][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.308757][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.348266][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.406944][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.425611][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.506968][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 93.535296][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.543649][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.561803][ T52] Bluetooth: hci0: command tx timeout [ 93.562483][ T5826] Bluetooth: hci4: command tx timeout [ 93.569450][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 93.611552][ T5967] netlink: 'syz.3.13': attribute type 14 has an invalid length. [ 93.625343][ T5826] Bluetooth: hci1: command tx timeout [ 93.625406][ T52] Bluetooth: hci2: command tx timeout [ 93.630805][ T5826] Bluetooth: hci3: command tx timeout [ 93.636443][ T5967] netlink: 'syz.3.13': attribute type 13 has an invalid length. [ 93.658966][ T5972] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 93.664416][ T5969] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 93.808958][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.818487][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.920307][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.950664][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.044763][ T5976] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16'. [ 94.077679][ T5976] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16'. [ 94.120489][ T5976] Zero length message leads to an empty skb [ 94.413947][ T5984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.632234][ T5996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.860015][ T6004] netlink: 124 bytes leftover after parsing attributes in process `syz.3.18'. [ 94.908666][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.001722][ T6012] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.120934][ T6017] netlink: 108 bytes leftover after parsing attributes in process `syz.0.22'. [ 95.151484][ T6020] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 95.185264][ T6020] netlink: 224 bytes leftover after parsing attributes in process `syz.4.25'. [ 96.812868][ T6060] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.078105][ T6058] __nla_validate_parse: 3 callbacks suppressed [ 97.078128][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.136368][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.174909][ T6058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.214383][ T6077] netlink: 220 bytes leftover after parsing attributes in process `syz.1.46'. [ 97.373414][ T6077] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.507143][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.48'. [ 97.588914][ T6086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.49'. [ 97.942423][ T6104] FAULT_INJECTION: forcing a failure. [ 97.942423][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 97.961005][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(full) [ 97.961033][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.961045][ T6104] Call Trace: [ 97.961054][ T6104] [ 97.961063][ T6104] dump_stack_lvl+0xe8/0x150 [ 97.961095][ T6104] should_fail_ex+0x412/0x560 [ 97.961126][ T6104] should_failslab+0xa8/0x100 [ 97.961150][ T6104] __kmalloc_cache_noprof+0x83/0x6e0 [ 97.961167][ T6104] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 97.961191][ T6104] ? sctp_add_bind_addr+0x8c/0x370 [ 97.961220][ T6104] sctp_add_bind_addr+0x8c/0x370 [ 97.961248][ T6104] sctp_copy_local_addr_list+0x314/0x4f0 [ 97.961274][ T6104] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 97.961297][ T6104] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 97.961323][ T6104] ? sctp_v6_is_any+0x64/0x80 [ 97.961348][ T6104] ? sctp_copy_one_addr+0x93/0x360 [ 97.961375][ T6104] sctp_bind_addr_copy+0xb3/0x3c0 [ 97.961399][ T6104] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 97.961424][ T6104] sctp_connect_new_asoc+0x2ff/0x6b0 [ 97.961456][ T6104] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 97.961491][ T6104] ? __local_bh_enable_ip+0xd0/0x130 [ 97.961508][ T6104] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 97.961539][ T6104] ? security_sctp_bind_connect+0x7e/0x2c0 [ 97.961563][ T6104] sctp_sendmsg+0x1528/0x2c10 [ 97.961608][ T6104] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.961632][ T6104] ? aa_sk_perm+0x15a/0x960 [ 97.961657][ T6104] ? aa_sk_perm+0x82d/0x960 [ 97.961677][ T6104] ? __might_fault+0xaf/0x130 [ 97.961713][ T6104] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.961740][ T6104] ? sock_rps_record_flow+0x19/0x400 [ 97.961771][ T6104] ? inet_sendmsg+0x2f4/0x370 [ 97.961804][ T6104] __sys_sendto+0x627/0x7a0 [ 97.961832][ T6104] ? __pfx___sys_sendto+0x10/0x10 [ 97.961854][ T6104] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 97.961898][ T6104] ? __fget_files+0x3a0/0x420 [ 97.961933][ T6104] ? ksys_write+0x242/0x270 [ 97.961965][ T6104] ? __pfx_ksys_write+0x10/0x10 [ 97.961999][ T6104] __x64_sys_sendto+0xde/0x100 [ 97.962035][ T6104] do_syscall_64+0xe2/0xf80 [ 97.962061][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.962079][ T6104] ? trace_irq_disable+0x37/0x100 [ 97.962097][ T6104] ? clear_bhb_loop+0x60/0xb0 [ 97.962121][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.962140][ T6104] RIP: 0033:0x7f860779aeb9 [ 97.962159][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.962174][ T6104] RSP: 002b:00007f860865a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.962195][ T6104] RAX: ffffffffffffffda RBX: 00007f8607a16090 RCX: 00007f860779aeb9 [ 97.962209][ T6104] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000007 [ 97.962221][ T6104] RBP: 00007f860865a090 R08: 000020000005ffe4 R09: 000000000000001c [ 97.962233][ T6104] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 97.962245][ T6104] R13: 00007f8607a16128 R14: 00007f8607a16090 R15: 00007fff4495c3c8 [ 97.962278][ T6104] [ 98.656652][ T6120] netlink: 'syz.2.61': attribute type 30 has an invalid length. [ 99.021218][ T6132] FAULT_INJECTION: forcing a failure. [ 99.021218][ T6132] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.074867][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.2.66 Not tainted syzkaller #0 PREEMPT(full) [ 99.074904][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.074915][ T6132] Call Trace: [ 99.074923][ T6132] [ 99.074931][ T6132] dump_stack_lvl+0xe8/0x150 [ 99.074961][ T6132] should_fail_ex+0x412/0x560 [ 99.074988][ T6132] _copy_from_user+0x2d/0xb0 [ 99.075017][ T6132] ___sys_sendmsg+0x1c6/0x360 [ 99.075041][ T6132] ? __lock_acquire+0x6b5/0x2cf0 [ 99.075072][ T6132] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.075129][ T6132] ? __fget_files+0x2a/0x420 [ 99.075147][ T6132] ? __fget_files+0x3a0/0x420 [ 99.075174][ T6132] __x64_sys_sendmsg+0x1bd/0x2a0 [ 99.075202][ T6132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.075236][ T6132] ? __pfx_ksys_write+0x10/0x10 [ 99.075283][ T6132] do_syscall_64+0xe2/0xf80 [ 99.075308][ T6132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.075324][ T6132] ? trace_irq_disable+0x37/0x100 [ 99.075341][ T6132] ? clear_bhb_loop+0x60/0xb0 [ 99.075364][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.075382][ T6132] RIP: 0033:0x7fa91619aeb9 [ 99.075400][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.075414][ T6132] RSP: 002b:00007fa9170d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.075436][ T6132] RAX: ffffffffffffffda RBX: 00007fa916415fa0 RCX: 00007fa91619aeb9 [ 99.075449][ T6132] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 99.075461][ T6132] RBP: 00007fa9170d6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.075472][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.075483][ T6132] R13: 00007fa916416038 R14: 00007fa916415fa0 R15: 00007ffc9e567458 [ 99.075513][ T6132] [ 99.583508][ T6155] FAULT_INJECTION: forcing a failure. [ 99.583508][ T6155] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.589798][ T6158] ip6tnl0: mtu greater than device maximum [ 99.598181][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT(full) [ 99.598206][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.598215][ T6155] Call Trace: [ 99.598222][ T6155] [ 99.598238][ T6155] dump_stack_lvl+0xe8/0x150 [ 99.598266][ T6155] should_fail_ex+0x412/0x560 [ 99.598292][ T6155] prepare_alloc_pages+0x22a/0x650 [ 99.598319][ T6155] __alloc_frozen_pages_noprof+0x12f/0x380 [ 99.598343][ T6155] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.598366][ T6155] ? __pfx_policy_nodemask+0x10/0x10 [ 99.598386][ T6155] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 99.598417][ T6155] alloc_pages_mpol+0x232/0x4a0 [ 99.598441][ T6155] ___kmalloc_large_node+0x4e/0x150 [ 99.598461][ T6155] __kmalloc_large_noprof+0x1a/0x90 [ 99.598479][ T6155] hidp_connection_add+0x3c6/0x1a10 [ 99.598508][ T6155] hidp_sock_ioctl+0x403/0x650 [ 99.598530][ T6155] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 99.598571][ T6155] ? kasan_quarantine_put+0xbb/0x1f0 [ 99.598613][ T6155] ? do_vfs_ioctl+0x1166/0x1530 [ 99.598649][ T6155] sock_do_ioctl+0x101/0x320 [ 99.598670][ T6155] ? __pfx_sock_do_ioctl+0x10/0x10 [ 99.598684][ T6155] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 99.598723][ T6155] sock_ioctl+0x5c6/0x7f0 [ 99.598742][ T6155] ? __pfx_sock_ioctl+0x10/0x10 [ 99.598759][ T6155] ? __fget_files+0x2a/0x420 [ 99.598777][ T6155] ? __fget_files+0x3a0/0x420 [ 99.598794][ T6155] ? __fget_files+0x2a/0x420 [ 99.598816][ T6155] ? bpf_lsm_file_ioctl+0x9/0x20 [ 99.598836][ T6155] ? __pfx_sock_ioctl+0x10/0x10 [ 99.598852][ T6155] __se_sys_ioctl+0xfc/0x170 [ 99.598877][ T6155] do_syscall_64+0xe2/0xf80 [ 99.598899][ T6155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.598914][ T6155] ? trace_irq_disable+0x37/0x100 [ 99.598930][ T6155] ? clear_bhb_loop+0x60/0xb0 [ 99.598951][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.598967][ T6155] RIP: 0033:0x7fd93c79aeb9 [ 99.598983][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.598996][ T6155] RSP: 002b:00007fd93d616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.599016][ T6155] RAX: ffffffffffffffda RBX: 00007fd93ca15fa0 RCX: 00007fd93c79aeb9 [ 99.599028][ T6155] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000007 [ 99.599039][ T6155] RBP: 00007fd93d616090 R08: 0000000000000000 R09: 0000000000000000 [ 99.599050][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.599060][ T6155] R13: 00007fd93ca16038 R14: 00007fd93ca15fa0 R15: 00007fffa7a17b88 [ 99.599088][ T6155] [ 99.998844][ T6152] block nbd0: server does not support multiple connections per device. [ 100.093671][ T6152] block nbd0: shutting down sockets [ 100.202178][ T6174] syzkaller1: entered promiscuous mode [ 100.230778][ T6174] syzkaller1: entered allmulticast mode [ 101.033501][ T6187] syzkaller0: entered promiscuous mode [ 101.044831][ T6187] syzkaller0: entered allmulticast mode [ 101.082453][ T6187] tipc: Started in network mode [ 101.094828][ T6187] tipc: Node identity 9ea3c853eed6, cluster identity 4711 [ 101.125632][ T6187] tipc: Enabled bearer , priority 0 [ 101.172812][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 101.248247][ T6192] tipc: Resetting bearer [ 101.278675][ T6186] tipc: Resetting bearer [ 101.315694][ T6186] tipc: Disabling bearer [ 101.395396][ T6199] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 101.420435][ T6199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.79'. [ 102.318594][ T6217] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.671398][ T6231] netlink: 220 bytes leftover after parsing attributes in process `syz.2.85'. [ 102.783126][ T6231] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.685836][ T6250] syzkaller1: entered promiscuous mode [ 103.691383][ T6250] syzkaller1: entered allmulticast mode [ 103.906477][ T6258] netlink: 168 bytes leftover after parsing attributes in process `syz.1.93'. [ 103.921212][ T6256] netlink: 220 bytes leftover after parsing attributes in process `syz.2.92'. [ 103.925366][ T6258] netlink: 168 bytes leftover after parsing attributes in process `syz.1.93'. [ 104.002124][ T6256] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.123373][ T6261] syzkaller0: entered promiscuous mode [ 104.138432][ T6261] syzkaller0: entered allmulticast mode [ 104.245631][ T6261] tipc: Started in network mode [ 104.250559][ T6261] tipc: Node identity a6f501a38e08, cluster identity 4711 [ 104.295067][ T6261] tipc: Enabled bearer , priority 0 [ 104.306310][ T6264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.95'. [ 104.317941][ T6260] tipc: Resetting bearer [ 104.370098][ T6260] tipc: Disabling bearer [ 104.404856][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 104.407305][ T6266] veth0: entered promiscuous mode [ 104.427158][ T6266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 104.434396][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 104.458608][ T6264] tipc: Enabling of bearer rejected, failed to enable media [ 104.499541][ T6265] veth0: left promiscuous mode [ 105.849778][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 106.567955][ T6315] netlink: 220 bytes leftover after parsing attributes in process `syz.2.113'. [ 106.656920][ T6315] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.036731][ T6323] block nbd0: server does not support multiple connections per device. [ 107.085519][ T6323] block nbd0: shutting down sockets [ 107.200639][ T6332] syz.2.120 uses old SIOCAX25GETINFO [ 107.230763][ T6332] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 107.890166][ T6350] syzkaller1: entered promiscuous mode [ 107.899297][ T6350] syzkaller1: entered allmulticast mode [ 107.907992][ T6353] __nla_validate_parse: 1 callbacks suppressed [ 107.908011][ T6353] netlink: 220 bytes leftover after parsing attributes in process `syz.0.124'. [ 108.247591][ T6353] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.580617][ T6377] netlink: 220 bytes leftover after parsing attributes in process `syz.1.131'. [ 108.680759][ T6377] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.093563][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 109.100498][ T6395] block nbd0: server does not support multiple connections per device. [ 109.185380][ T6395] block nbd0: shutting down sockets [ 109.208175][ T6397] lo speed is unknown, defaulting to 1000 [ 109.240162][ T6397] lo speed is unknown, defaulting to 1000 [ 109.306854][ T6397] lo speed is unknown, defaulting to 1000 [ 109.377441][ T6397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.426411][ T6397] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.514496][ T6405] netlink: 'syz.2.140': attribute type 32 has an invalid length. [ 109.523353][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 109.538592][ T6397] lo speed is unknown, defaulting to 1000 [ 109.587405][ T6397] lo speed is unknown, defaulting to 1000 [ 109.675189][ T6405] bond2: option coupled_control: invalid value (12) [ 109.711935][ T6405] bond2 (unregistering): Released all slaves [ 109.824413][ T6397] lo speed is unknown, defaulting to 1000 [ 109.861877][ T6397] lo speed is unknown, defaulting to 1000 [ 109.876791][ T6397] lo speed is unknown, defaulting to 1000 [ 110.014542][ T6415] FAULT_INJECTION: forcing a failure. [ 110.014542][ T6415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.035947][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 110.035974][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 110.035985][ T6415] Call Trace: [ 110.035992][ T6415] [ 110.036000][ T6415] dump_stack_lvl+0xe8/0x150 [ 110.036030][ T6415] should_fail_ex+0x412/0x560 [ 110.036059][ T6415] _copy_from_user+0x2d/0xb0 [ 110.036087][ T6415] ___sys_sendmsg+0x1c6/0x360 [ 110.036112][ T6415] ? __lock_acquire+0x6b5/0x2cf0 [ 110.036144][ T6415] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.036208][ T6415] ? __fget_files+0x2a/0x420 [ 110.036228][ T6415] ? __fget_files+0x3a0/0x420 [ 110.036260][ T6415] __x64_sys_sendmsg+0x1bd/0x2a0 [ 110.036307][ T6415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.036344][ T6415] ? __pfx_ksys_write+0x10/0x10 [ 110.036386][ T6415] do_syscall_64+0xe2/0xf80 [ 110.036411][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.036429][ T6415] ? trace_irq_disable+0x37/0x100 [ 110.036447][ T6415] ? clear_bhb_loop+0x60/0xb0 [ 110.036478][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.036496][ T6415] RIP: 0033:0x7fa91619aeb9 [ 110.036514][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.036530][ T6415] RSP: 002b:00007fa9170d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.036551][ T6415] RAX: ffffffffffffffda RBX: 00007fa916415fa0 RCX: 00007fa91619aeb9 [ 110.036564][ T6415] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 110.036576][ T6415] RBP: 00007fa9170d6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.036587][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.036598][ T6415] R13: 00007fa916416038 R14: 00007fa916415fa0 R15: 00007ffc9e567458 [ 110.036630][ T6415] [ 110.486212][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 110.693704][ T6428] syzkaller0: entered promiscuous mode [ 110.714892][ T6428] syzkaller0: entered allmulticast mode [ 110.892451][ T6438] lo speed is unknown, defaulting to 1000 [ 111.007361][ T6443] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 111.075501][ T6442] block nbd0: server does not support multiple connections per device. [ 111.086796][ T6445] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 111.118788][ T6442] block nbd0: shutting down sockets [ 111.173632][ T1209] lo speed is unknown, defaulting to 1000 [ 111.180257][ T1209] syz2: Port: 1 Link DOWN [ 111.325159][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 112.196329][ T6483] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 112.239075][ T6483] team0: Device vxcan1 is of different type [ 112.762349][ T6505] netlink: 'syz.0.165': attribute type 12 has an invalid length. [ 113.089110][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 113.228727][ T6515] lo speed is unknown, defaulting to 1000 [ 113.263457][ T6515] lo speed is unknown, defaulting to 1000 [ 113.290229][ T6519] block nbd0: server does not support multiple connections per device. [ 113.311280][ T6515] lo speed is unknown, defaulting to 1000 [ 113.346876][ T6519] block nbd0: shutting down sockets [ 113.361991][ T6515] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.401113][ T6515] lo speed is unknown, defaulting to 1000 [ 113.426920][ T6515] lo speed is unknown, defaulting to 1000 [ 113.451153][ T6515] lo speed is unknown, defaulting to 1000 [ 113.460551][ T6515] lo speed is unknown, defaulting to 1000 [ 113.470255][ T6515] lo speed is unknown, defaulting to 1000 [ 113.851459][ T6533] netlink: 91 bytes leftover after parsing attributes in process `syz.0.175'. [ 114.025790][ T6537] netlink: 220 bytes leftover after parsing attributes in process `syz.2.177'. [ 114.058146][ T6537] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.214160][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 114.266898][ T6543] FAULT_INJECTION: forcing a failure. [ 114.266898][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 114.313654][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) [ 114.313683][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 114.313694][ T6543] Call Trace: [ 114.313702][ T6543] [ 114.313711][ T6543] dump_stack_lvl+0xe8/0x150 [ 114.313743][ T6543] should_fail_ex+0x412/0x560 [ 114.313774][ T6543] should_failslab+0xa8/0x100 [ 114.313799][ T6543] __kvmalloc_node_noprof+0x166/0x8d0 [ 114.313823][ T6543] ? alloc_netdev_mqs+0xa6/0x11b0 [ 114.313851][ T6543] alloc_netdev_mqs+0xa6/0x11b0 [ 114.313868][ T6543] ? __pfx_macvlan_setup+0x10/0x10 [ 114.313900][ T6543] rtnl_create_link+0x31f/0xd70 [ 114.313929][ T6543] rtnl_newlink_create+0x277/0xb70 [ 114.313955][ T6543] ? __pfx___nla_validate_parse+0x10/0x10 [ 114.313995][ T6543] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 114.314025][ T6543] ? __pfx___mutex_lock+0x10/0x10 [ 114.314066][ T6543] ? ns_capable+0x89/0xe0 [ 114.314089][ T6543] rtnl_newlink+0x1666/0x1be0 [ 114.314133][ T6543] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.314153][ T6543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.314233][ T6543] ? kasan_quarantine_put+0xbb/0x1f0 [ 114.314270][ T6543] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.314301][ T6543] ? kmem_cache_free+0x195/0x610 [ 114.314318][ T6543] ? nlmon_xmit+0xb0/0x100 [ 114.314351][ T6543] ? __lock_acquire+0x6b5/0x2cf0 [ 114.314392][ T6543] ? __local_bh_enable_ip+0xd0/0x130 [ 114.314410][ T6543] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.314435][ T6543] ? __dev_queue_xmit+0x274/0x3850 [ 114.314461][ T6543] ? __local_bh_enable_ip+0xd0/0x130 [ 114.314477][ T6543] ? __dev_queue_xmit+0x274/0x3850 [ 114.314520][ T6543] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 114.314559][ T6543] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.314579][ T6543] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 114.314606][ T6543] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 114.314628][ T6543] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.314649][ T6543] ? ref_tracker_free+0x693/0x840 [ 114.314671][ T6543] ? __copy_skb_header+0xa3/0x4a0 [ 114.314704][ T6543] ? __pfx_ref_tracker_free+0x10/0x10 [ 114.314724][ T6543] ? __skb_clone+0x63/0x7a0 [ 114.314758][ T6543] netlink_rcv_skb+0x232/0x4b0 [ 114.314783][ T6543] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.314807][ T6543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.314844][ T6543] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.314876][ T6543] netlink_unicast+0x80f/0x9b0 [ 114.314907][ T6543] ? __pfx_netlink_unicast+0x10/0x10 [ 114.314930][ T6543] ? netlink_sendmsg+0x650/0xb40 [ 114.314950][ T6543] ? skb_put+0x11b/0x210 [ 114.314979][ T6543] netlink_sendmsg+0x813/0xb40 [ 114.315013][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.315040][ T6543] ? aa_sock_msg_perm+0xf1/0x1b0 [ 114.315067][ T6543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.315091][ T6543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.315110][ T6543] ____sys_sendmsg+0xa68/0xad0 [ 114.315136][ T6543] ? __might_fault+0xaf/0x130 [ 114.315172][ T6543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.315211][ T6543] ? import_iovec+0x73/0xa0 [ 114.315245][ T6543] ___sys_sendmsg+0x2a5/0x360 [ 114.315266][ T6543] ? __lock_acquire+0x6b5/0x2cf0 [ 114.315290][ T6543] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.315362][ T6543] ? __fget_files+0x2a/0x420 [ 114.315382][ T6543] ? __fget_files+0x3a0/0x420 [ 114.315414][ T6543] __x64_sys_sendmsg+0x1bd/0x2a0 [ 114.315443][ T6543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.315480][ T6543] ? __pfx_ksys_write+0x10/0x10 [ 114.315533][ T6543] do_syscall_64+0xe2/0xf80 [ 114.315559][ T6543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.315577][ T6543] ? trace_irq_disable+0x37/0x100 [ 114.315596][ T6543] ? clear_bhb_loop+0x60/0xb0 [ 114.315620][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.315639][ T6543] RIP: 0033:0x7f860779aeb9 [ 114.315658][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.315673][ T6543] RSP: 002b:00007f860867b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.315694][ T6543] RAX: ffffffffffffffda RBX: 00007f8607a15fa0 RCX: 00007f860779aeb9 [ 114.315708][ T6543] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 114.315721][ T6543] RBP: 00007f860867b090 R08: 0000000000000000 R09: 0000000000000000 [ 114.315732][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.315744][ T6543] R13: 00007f8607a16038 R14: 00007f8607a15fa0 R15: 00007fff4495c3c8 [ 114.315780][ T6543] [ 114.856556][ T5974] IPVS: starting estimator thread 0... [ 114.917806][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 114.945247][ T6548] IPVS: using max 23 ests per chain, 55200 per kthread [ 114.995280][ T6545] nbd0: detected capacity change from 0 to 127 [ 115.002132][ T6549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.181'. [ 115.061999][ T6549] FAULT_INJECTION: forcing a failure. [ 115.061999][ T6549] name failslab, interval 1, probability 0, space 0, times 0 [ 115.105161][ T5826] block nbd0: Receive control failed (result -104) [ 115.123531][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) [ 115.123558][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 115.123568][ T6549] Call Trace: [ 115.123576][ T6549] [ 115.123584][ T6549] dump_stack_lvl+0xe8/0x150 [ 115.123615][ T6549] should_fail_ex+0x412/0x560 [ 115.123645][ T6549] should_failslab+0xa8/0x100 [ 115.123670][ T6549] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 115.123701][ T6549] ? __alloc_skb+0x1d0/0x7d0 [ 115.123722][ T6549] ? __local_bh_enable_ip+0xd0/0x130 [ 115.123747][ T6549] __alloc_skb+0x1d0/0x7d0 [ 115.123770][ T6549] ? netlink_ack_tlv_len+0x6c/0x210 [ 115.123795][ T6549] netlink_ack+0x146/0xa50 [ 115.123813][ T6549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.123860][ T6549] netlink_rcv_skb+0x2b6/0x4b0 [ 115.123883][ T6549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.123912][ T6549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.123930][ T6549] ? genl_rcv+0x19/0x40 [ 115.123976][ T6549] ? down_read+0x272/0x2e0 [ 115.123991][ T6549] ? genl_rcv+0xd/0x40 [ 115.124019][ T6549] genl_rcv+0x28/0x40 [ 115.124043][ T6549] netlink_unicast+0x80f/0x9b0 [ 115.124073][ T6549] ? __pfx_netlink_unicast+0x10/0x10 [ 115.124094][ T6549] ? netlink_sendmsg+0x650/0xb40 [ 115.124114][ T6549] ? skb_put+0x11b/0x210 [ 115.124143][ T6549] netlink_sendmsg+0x813/0xb40 [ 115.124176][ T6549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.124202][ T6549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 115.124226][ T6549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.124244][ T6549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.124260][ T6549] ____sys_sendmsg+0xa68/0xad0 [ 115.124280][ T6549] ? __might_fault+0xaf/0x130 [ 115.124313][ T6549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.124351][ T6549] ? import_iovec+0x73/0xa0 [ 115.124384][ T6549] ___sys_sendmsg+0x2a5/0x360 [ 115.124408][ T6549] ? __lock_acquire+0x6b5/0x2cf0 [ 115.124440][ T6549] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.124517][ T6549] ? __fget_files+0x2a/0x420 [ 115.124539][ T6549] ? __fget_files+0x3a0/0x420 [ 115.124574][ T6549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 115.124604][ T6549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.124642][ T6549] ? __pfx_ksys_write+0x10/0x10 [ 115.124684][ T6549] do_syscall_64+0xe2/0xf80 [ 115.124714][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.124730][ T6549] ? trace_irq_disable+0x37/0x100 [ 115.124748][ T6549] ? clear_bhb_loop+0x60/0xb0 [ 115.124771][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.124789][ T6549] RIP: 0033:0x7fa91619aeb9 [ 115.124808][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.124823][ T6549] RSP: 002b:00007fa9170b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.124844][ T6549] RAX: ffffffffffffffda RBX: 00007fa916416090 RCX: 00007fa91619aeb9 [ 115.124858][ T6549] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000008 [ 115.124870][ T6549] RBP: 00007fa9170b5090 R08: 0000000000000000 R09: 0000000000000000 [ 115.124882][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.124893][ T6549] R13: 00007fa916416128 R14: 00007fa916416090 R15: 00007ffc9e567458 [ 115.124928][ T6549] [ 115.753075][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 115.769098][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 115.819810][ T6576] siw: device registration error -23 [ 115.955724][ T6582] xt_hashlimit: size too large, truncated to 1048576 [ 116.307341][ T6594] netlink: 'syz.1.197': attribute type 1 has an invalid length. [ 116.318478][ T6594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.197'. [ 116.377540][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 116.407292][ T6592] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 117.028324][ T6624] xt_hashlimit: size too large, truncated to 1048576 [ 117.295856][ T6633] block nbd1: server does not support multiple connections per device. [ 117.343095][ T6633] block nbd1: shutting down sockets [ 117.714506][ T6643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.852572][ T6647] netlink: 'syz.0.217': attribute type 2 has an invalid length. [ 117.908076][ T6647] : entered promiscuous mode [ 117.958104][ T6647] netlink: 'syz.0.217': attribute type 2 has an invalid length. [ 117.998411][ T6647] : left promiscuous mode [ 118.041162][ T6655] xt_hashlimit: size too large, truncated to 1048576 [ 118.291353][ T6664] xt_hashlimit: size too large, truncated to 1048576 [ 118.649939][ T6673] __nla_validate_parse: 6 callbacks suppressed [ 118.649961][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 118.780160][ T6673] siw: device registration error -23 [ 119.109146][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 119.316790][ T6692] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 119.349091][ T6692] netlink: 224 bytes leftover after parsing attributes in process `syz.1.232'. [ 119.715362][ T6703] lo speed is unknown, defaulting to 1000 [ 119.827240][ T6713] xt_hashlimit: size too large, truncated to 1048576 [ 120.123115][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 120.309499][ T6721] siw: device registration error -23 [ 120.526346][ T6725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.242'. [ 120.632412][ T6728] syzkaller0: entered promiscuous mode [ 120.654846][ T6728] syzkaller0: entered allmulticast mode [ 120.677245][ T6726] tipc: Enabled bearer , priority 0 [ 120.847621][ T6725] lo speed is unknown, defaulting to 1000 [ 120.875697][ T6726] tipc: Resetting bearer [ 120.916622][ T6726] tipc: Disabling bearer [ 121.138492][ T6745] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 121.164807][ T6745] netlink: 224 bytes leftover after parsing attributes in process `syz.1.247'. [ 121.731776][ T6765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 122.041860][ T6752] syzkaller1: entered promiscuous mode [ 122.068734][ T6752] syzkaller1: entered allmulticast mode [ 122.138761][ T6771] xt_hashlimit: size too large, truncated to 1048576 [ 122.483040][ T6781] Cannot find del_set index 2 as target [ 122.578267][ T6784] syzkaller0: entered promiscuous mode [ 122.588241][ T6784] syzkaller0: entered allmulticast mode [ 122.602670][ T6785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.256'. [ 122.845051][ T6793] block nbd1: server does not support multiple connections per device. [ 122.887308][ T6793] block nbd1: shutting down sockets [ 123.255425][ T6812] xt_hashlimit: size too large, truncated to 1048576 [ 124.535132][ T6838] netlink: 'syz.1.277': attribute type 3 has an invalid length. [ 124.558647][ T6838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.277'. [ 124.678004][ T6843] xt_hashlimit: size too large, truncated to 1048576 [ 126.256586][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 126.284064][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.295100][ T6855] bond1: option ad_select: unable to set because the bond device is up [ 132.910540][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.917411][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.743142][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.751517][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.759719][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.767760][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.778139][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.799518][ T5141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.835076][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.843571][ T6873] lo speed is unknown, defaulting to 1000 [ 139.850480][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.860408][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.871279][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.887872][ T5141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.896829][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.907035][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.927905][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.935911][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.987272][ T6875] lo speed is unknown, defaulting to 1000 [ 140.055347][ T6877] lo speed is unknown, defaulting to 1000 [ 140.226191][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 140.234794][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 140.242932][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 140.251445][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 140.259670][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 140.288313][ T6873] chnl_net:caif_netlink_parms(): no params data found [ 140.403413][ T6884] lo speed is unknown, defaulting to 1000 [ 140.477005][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.484202][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.492213][ T6873] bridge_slave_0: entered allmulticast mode [ 140.501515][ T6873] bridge_slave_0: entered promiscuous mode [ 140.515235][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.522374][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.530822][ T6873] bridge_slave_1: entered allmulticast mode [ 140.538242][ T6873] bridge_slave_1: entered promiscuous mode [ 140.572906][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 140.622083][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.657137][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.754065][ T6873] team0: Port device team_slave_0 added [ 140.765959][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 140.790813][ T6873] team0: Port device team_slave_1 added [ 140.845171][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.852148][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.878407][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.902538][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.910049][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.917340][ T6875] bridge_slave_0: entered allmulticast mode [ 140.924405][ T6875] bridge_slave_0: entered promiscuous mode [ 140.932851][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.940692][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.948411][ T6875] bridge_slave_1: entered allmulticast mode [ 140.957012][ T6875] bridge_slave_1: entered promiscuous mode [ 140.964617][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.971660][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.997975][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.118236][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.135271][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.160610][ T6873] hsr_slave_0: entered promiscuous mode [ 141.167890][ T6873] hsr_slave_1: entered promiscuous mode [ 141.173990][ T6873] debugfs: 'hsr0' already exists in 'hsr' [ 141.179935][ T6873] Cannot create hsr debugfs directory [ 141.238298][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.245701][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.252835][ T6877] bridge_slave_0: entered allmulticast mode [ 141.260392][ T6877] bridge_slave_0: entered promiscuous mode [ 141.286941][ T6875] team0: Port device team_slave_0 added [ 141.292900][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.300541][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.308611][ T6877] bridge_slave_1: entered allmulticast mode [ 141.318443][ T6877] bridge_slave_1: entered promiscuous mode [ 141.349347][ T6875] team0: Port device team_slave_1 added [ 141.422191][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.433027][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 141.446956][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.454665][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.483418][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.497300][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.504351][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.532340][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.559812][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.706800][ T6877] team0: Port device team_slave_0 added [ 141.750074][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 141.758642][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 141.767456][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 141.768705][ T6877] team0: Port device team_slave_1 added [ 141.776042][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 141.789217][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 141.859303][ T6875] hsr_slave_0: entered promiscuous mode [ 141.866944][ T6875] hsr_slave_1: entered promiscuous mode [ 141.873122][ T6875] debugfs: 'hsr0' already exists in 'hsr' [ 141.874950][ T52] Bluetooth: hci5: command tx timeout [ 141.879603][ T6875] Cannot create hsr debugfs directory [ 141.933922][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.941247][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.967490][ T52] Bluetooth: hci6: command tx timeout [ 141.975560][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.988643][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.995934][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.022158][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.033628][ T52] Bluetooth: hci7: command tx timeout [ 142.086066][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.093304][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.101212][ T6884] bridge_slave_0: entered allmulticast mode [ 142.110484][ T6884] bridge_slave_0: entered promiscuous mode [ 142.152733][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.160803][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.168272][ T6884] bridge_slave_1: entered allmulticast mode [ 142.175773][ T6884] bridge_slave_1: entered promiscuous mode [ 142.203492][ T6905] lo speed is unknown, defaulting to 1000 [ 142.265630][ T6877] hsr_slave_0: entered promiscuous mode [ 142.272286][ T6877] hsr_slave_1: entered promiscuous mode [ 142.282451][ T6877] debugfs: 'hsr0' already exists in 'hsr' [ 142.288327][ T6877] Cannot create hsr debugfs directory [ 142.314362][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.345613][ T52] Bluetooth: hci8: command tx timeout [ 142.382719][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.512096][ T6884] team0: Port device team_slave_0 added [ 142.528613][ T6884] team0: Port device team_slave_1 added [ 142.607648][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.614623][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.640844][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.655649][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.663768][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.690401][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.873328][ T6884] hsr_slave_0: entered promiscuous mode [ 142.881403][ T6884] hsr_slave_1: entered promiscuous mode [ 142.890308][ T6884] debugfs: 'hsr0' already exists in 'hsr' [ 142.896462][ T6884] Cannot create hsr debugfs directory [ 142.915930][ T6905] chnl_net:caif_netlink_parms(): no params data found [ 143.087450][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.094939][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.102307][ T6905] bridge_slave_0: entered allmulticast mode [ 143.110110][ T6905] bridge_slave_0: entered promiscuous mode [ 143.134241][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.141488][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.149750][ T6905] bridge_slave_1: entered allmulticast mode [ 143.158505][ T6905] bridge_slave_1: entered promiscuous mode [ 143.206919][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.229296][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.278586][ T6905] team0: Port device team_slave_0 added [ 143.291884][ T6905] team0: Port device team_slave_1 added [ 143.341734][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.349515][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.375963][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.403529][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.410952][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.437853][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.506960][ T6905] hsr_slave_0: entered promiscuous mode [ 143.513495][ T6905] hsr_slave_1: entered promiscuous mode [ 143.520297][ T6905] debugfs: 'hsr0' already exists in 'hsr' [ 143.526201][ T6905] Cannot create hsr debugfs directory [ 143.865001][ T52] Bluetooth: hci9: command tx timeout [ 143.945175][ T52] Bluetooth: hci5: command tx timeout [ 144.025248][ T52] Bluetooth: hci6: command tx timeout [ 144.104868][ T52] Bluetooth: hci7: command tx timeout [ 144.424974][ T52] Bluetooth: hci8: command tx timeout [ 145.066187][ T56] block nbd0: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 30 seconds [ 145.078077][ T56] block nbd0: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 30 seconds [ 145.089167][ T56] block nbd0: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 30 seconds [ 145.101096][ T56] block nbd0: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 30 seconds [ 145.945011][ T52] Bluetooth: hci9: command tx timeout [ 146.024833][ T52] Bluetooth: hci5: command tx timeout [ 146.114899][ T52] Bluetooth: hci6: command tx timeout [ 146.184958][ T52] Bluetooth: hci7: command tx timeout [ 146.514880][ T52] Bluetooth: hci8: command tx timeout [ 148.025032][ T52] Bluetooth: hci9: command tx timeout [ 148.105123][ T52] Bluetooth: hci5: command tx timeout [ 148.185012][ T52] Bluetooth: hci6: command tx timeout [ 148.266865][ T52] Bluetooth: hci7: command tx timeout [ 148.584862][ T52] Bluetooth: hci8: command tx timeout [ 150.104972][ T52] Bluetooth: hci9: command tx timeout [ 175.147419][ T56] block nbd0: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 60 seconds [ 175.158221][ T56] block nbd0: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 60 seconds [ 175.169541][ T56] block nbd0: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 60 seconds [ 175.180662][ T56] block nbd0: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 60 seconds [ 176.792208][ T5190] udevd[5190]: worker [5828] /devices/virtual/block/nbd0 is taking a long time [ 194.348409][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355192][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.793207][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 199.803031][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 199.813288][ T5826] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 199.821337][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 199.822944][ T5826] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 199.837261][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 199.838401][ T5826] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 199.846316][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 199.853418][ T5826] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 199.860260][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 199.922620][ T6924] lo speed is unknown, defaulting to 1000 [ 199.934450][ T6922] lo speed is unknown, defaulting to 1000 [ 200.153391][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 200.225701][ T6922] chnl_net:caif_netlink_parms(): no params data found [ 200.383784][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 200.396582][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 200.409006][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 200.424520][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 200.440147][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 200.442186][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 200.458238][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 200.476331][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 200.486368][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 200.500067][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 200.552277][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.560147][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.567810][ T6922] bridge_slave_0: entered allmulticast mode [ 200.575099][ T6922] bridge_slave_0: entered promiscuous mode [ 200.582375][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.590321][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.597709][ T6924] bridge_slave_0: entered allmulticast mode [ 200.605419][ T6924] bridge_slave_0: entered promiscuous mode [ 200.614589][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.622386][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.629763][ T6922] bridge_slave_1: entered allmulticast mode [ 200.637214][ T6922] bridge_slave_1: entered promiscuous mode [ 200.646444][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.653549][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.663060][ T6924] bridge_slave_1: entered allmulticast mode [ 200.673369][ T6924] bridge_slave_1: entered promiscuous mode [ 200.752337][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.767248][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.784057][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.794571][ T6940] lo speed is unknown, defaulting to 1000 [ 200.797518][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.834994][ T6935] lo speed is unknown, defaulting to 1000 [ 200.893189][ T6924] team0: Port device team_slave_0 added [ 200.901025][ T6922] team0: Port device team_slave_0 added [ 200.911175][ T6922] team0: Port device team_slave_1 added [ 200.933706][ T6924] team0: Port device team_slave_1 added [ 200.973892][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.981009][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.007353][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.052380][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.059625][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.087668][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.100445][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.107561][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.136021][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.169310][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.176344][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.202682][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.311450][ T6924] hsr_slave_0: entered promiscuous mode [ 201.319088][ T6924] hsr_slave_1: entered promiscuous mode [ 201.325448][ T6924] debugfs: 'hsr0' already exists in 'hsr' [ 201.331260][ T6924] Cannot create hsr debugfs directory [ 201.367263][ T6922] hsr_slave_0: entered promiscuous mode [ 201.373844][ T6922] hsr_slave_1: entered promiscuous mode [ 201.380674][ T6922] debugfs: 'hsr0' already exists in 'hsr' [ 201.386651][ T6922] Cannot create hsr debugfs directory [ 201.683659][ T6940] chnl_net:caif_netlink_parms(): no params data found [ 201.777850][ T6935] chnl_net:caif_netlink_parms(): no params data found [ 201.858857][ T5826] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 201.868525][ T5826] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 201.877346][ T5826] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 201.898471][ T5826] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 201.906573][ T5826] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 201.944957][ T52] Bluetooth: hci11: command tx timeout [ 201.955587][ T52] Bluetooth: hci10: command tx timeout [ 202.073503][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.080961][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.088410][ T6935] bridge_slave_0: entered allmulticast mode [ 202.096008][ T6935] bridge_slave_0: entered promiscuous mode [ 202.103364][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.110715][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.119417][ T6940] bridge_slave_0: entered allmulticast mode [ 202.127315][ T6940] bridge_slave_0: entered promiscuous mode [ 202.135178][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.144604][ T6951] lo speed is unknown, defaulting to 1000 [ 202.152538][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.161526][ T6935] bridge_slave_1: entered allmulticast mode [ 202.169284][ T6935] bridge_slave_1: entered promiscuous mode [ 202.191995][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.199204][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.207102][ T6940] bridge_slave_1: entered allmulticast mode [ 202.214226][ T6940] bridge_slave_1: entered promiscuous mode [ 202.287878][ T6935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.328304][ T6935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.341898][ T6940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.356230][ T6940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.405292][ T6935] team0: Port device team_slave_0 added [ 202.437294][ T6935] team0: Port device team_slave_1 added [ 202.490656][ T6940] team0: Port device team_slave_0 added [ 202.499419][ T6940] team0: Port device team_slave_1 added [ 202.505284][ T52] Bluetooth: hci12: command tx timeout [ 202.512379][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.519521][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.547349][ T6935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.561580][ T6935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.568842][ T6935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.595941][ T52] Bluetooth: hci13: command tx timeout [ 202.601964][ T6935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.667269][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.674346][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.704606][ T6940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.718242][ T6940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.726114][ T6940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.753062][ T6940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.814641][ T6935] hsr_slave_0: entered promiscuous mode [ 202.821886][ T6935] hsr_slave_1: entered promiscuous mode [ 202.829432][ T6935] debugfs: 'hsr0' already exists in 'hsr' [ 202.837687][ T6935] Cannot create hsr debugfs directory [ 202.968128][ T6940] hsr_slave_0: entered promiscuous mode [ 202.975853][ T6940] hsr_slave_1: entered promiscuous mode [ 202.982047][ T6940] debugfs: 'hsr0' already exists in 'hsr' [ 202.989276][ T6940] Cannot create hsr debugfs directory [ 203.002597][ T6951] chnl_net:caif_netlink_parms(): no params data found [ 203.247598][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.255072][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.263156][ T6951] bridge_slave_0: entered allmulticast mode [ 203.270931][ T6951] bridge_slave_0: entered promiscuous mode [ 203.287489][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.299795][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.310510][ T6951] bridge_slave_1: entered allmulticast mode [ 203.317982][ T6951] bridge_slave_1: entered promiscuous mode [ 203.401679][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.421411][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.490160][ T6951] team0: Port device team_slave_0 added [ 203.499724][ T6951] team0: Port device team_slave_1 added [ 203.551647][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.558749][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.586233][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.598637][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.605665][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.632076][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.686790][ T6951] hsr_slave_0: entered promiscuous mode [ 203.693186][ T6951] hsr_slave_1: entered promiscuous mode [ 203.699554][ T6951] debugfs: 'hsr0' already exists in 'hsr' [ 203.705481][ T6951] Cannot create hsr debugfs directory [ 203.945047][ T52] Bluetooth: hci14: command tx timeout [ 204.024909][ T52] Bluetooth: hci10: command tx timeout [ 204.024926][ T5826] Bluetooth: hci11: command tx timeout [ 204.588751][ T5826] Bluetooth: hci12: command tx timeout [ 204.664986][ T5826] Bluetooth: hci13: command tx timeout [ 205.225306][ T56] block nbd0: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 90 seconds [ 205.236064][ T56] block nbd0: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 90 seconds [ 205.247061][ T56] block nbd0: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 90 seconds [ 205.257990][ T56] block nbd0: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 90 seconds [ 206.024860][ T5826] Bluetooth: hci14: command tx timeout [ 206.104994][ T5826] Bluetooth: hci11: command tx timeout [ 206.110514][ T5826] Bluetooth: hci10: command tx timeout [ 206.664852][ T5826] Bluetooth: hci12: command tx timeout [ 206.745324][ T5826] Bluetooth: hci13: command tx timeout [ 208.105004][ T5826] Bluetooth: hci14: command tx timeout [ 208.184937][ T5826] Bluetooth: hci10: command tx timeout [ 208.184943][ T52] Bluetooth: hci11: command tx timeout [ 208.744869][ T5826] Bluetooth: hci12: command tx timeout [ 208.825113][ T5826] Bluetooth: hci13: command tx timeout [ 210.184883][ T5141] Bluetooth: hci14: command tx timeout [ 211.788986][ T5141] Bluetooth: hci4: command 0x0406 tx timeout [ 211.795218][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.795925][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 211.801243][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 235.319247][ T56] block nbd0: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 120 seconds [ 235.330049][ T56] block nbd0: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 120 seconds [ 235.341121][ T56] block nbd0: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 120 seconds [ 235.352199][ T56] block nbd0: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 120 seconds [ 255.790097][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.801039][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.869306][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 259.880496][ T5826] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 259.892809][ T5826] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 259.902614][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 259.910451][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 259.919354][ T5826] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 259.927216][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 259.934519][ T5837] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 259.935499][ T5826] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 259.943310][ T5837] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 259.958081][ T5826] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 260.013953][ T6974] lo speed is unknown, defaulting to 1000 [ 260.035692][ T6972] lo speed is unknown, defaulting to 1000 [ 260.273576][ T6974] chnl_net:caif_netlink_parms(): no params data found [ 260.352585][ T6972] chnl_net:caif_netlink_parms(): no params data found [ 260.435030][ T5826] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 260.444570][ T5826] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 260.452966][ T5826] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 260.461646][ T5826] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 260.470639][ T5826] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 260.536344][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.543554][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.551900][ T6974] bridge_slave_0: entered allmulticast mode [ 260.560357][ T6974] bridge_slave_0: entered promiscuous mode [ 260.579107][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.586509][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.593849][ T6972] bridge_slave_0: entered allmulticast mode [ 260.604348][ T6972] bridge_slave_0: entered promiscuous mode [ 260.612564][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.619921][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.627252][ T6974] bridge_slave_1: entered allmulticast mode [ 260.634567][ T6974] bridge_slave_1: entered promiscuous mode [ 260.642421][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.649602][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.657322][ T6972] bridge_slave_1: entered allmulticast mode [ 260.664492][ T6972] bridge_slave_1: entered promiscuous mode [ 260.742298][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.758516][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.767800][ T6984] lo speed is unknown, defaulting to 1000 [ 260.778776][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.792318][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.895817][ T6972] team0: Port device team_slave_0 added [ 260.912805][ T6972] team0: Port device team_slave_1 added [ 260.921649][ T6974] team0: Port device team_slave_0 added [ 260.928238][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 260.940931][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 260.949218][ T5839] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 260.959048][ T6974] team0: Port device team_slave_1 added [ 260.976943][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 260.998256][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 261.034761][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.041731][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.069762][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.082233][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.090568][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.117594][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.131589][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.138688][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.165114][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.191833][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.198914][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.226717][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.297096][ T6974] hsr_slave_0: entered promiscuous mode [ 261.303975][ T6974] hsr_slave_1: entered promiscuous mode [ 261.311348][ T6974] debugfs: 'hsr0' already exists in 'hsr' [ 261.317139][ T6974] Cannot create hsr debugfs directory [ 261.414046][ T6992] lo speed is unknown, defaulting to 1000 [ 261.421884][ T6972] hsr_slave_0: entered promiscuous mode [ 261.429497][ T6972] hsr_slave_1: entered promiscuous mode [ 261.436072][ T6972] debugfs: 'hsr0' already exists in 'hsr' [ 261.441796][ T6972] Cannot create hsr debugfs directory [ 261.621644][ T6984] chnl_net:caif_netlink_parms(): no params data found [ 261.895130][ T5839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 261.903712][ T5839] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 261.915270][ T5839] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 261.923662][ T5839] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 261.931981][ T5839] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 261.981271][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.988715][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.996706][ T6984] bridge_slave_0: entered allmulticast mode [ 262.004000][ T6984] bridge_slave_0: entered promiscuous mode [ 262.021071][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.028269][ T5840] Bluetooth: hci15: command tx timeout [ 262.028847][ T5839] Bluetooth: hci16: command tx timeout [ 262.033925][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.048657][ T6984] bridge_slave_1: entered allmulticast mode [ 262.056078][ T6984] bridge_slave_1: entered promiscuous mode [ 262.126220][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.150059][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.199126][ T7002] lo speed is unknown, defaulting to 1000 [ 262.232738][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 262.276413][ T6984] team0: Port device team_slave_0 added [ 262.323703][ T6984] team0: Port device team_slave_1 added [ 262.390827][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.398483][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.425170][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.438410][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.445499][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.471867][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.505106][ T5839] Bluetooth: hci17: command tx timeout [ 262.541261][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.548595][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.556420][ T6992] bridge_slave_0: entered allmulticast mode [ 262.563639][ T6992] bridge_slave_0: entered promiscuous mode [ 262.572737][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.580179][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.587922][ T6992] bridge_slave_1: entered allmulticast mode [ 262.595788][ T6992] bridge_slave_1: entered promiscuous mode [ 262.695518][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.714097][ T6984] hsr_slave_0: entered promiscuous mode [ 262.720610][ T6984] hsr_slave_1: entered promiscuous mode [ 262.727534][ T6984] debugfs: 'hsr0' already exists in 'hsr' [ 262.733267][ T6984] Cannot create hsr debugfs directory [ 262.750086][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.796907][ T6992] team0: Port device team_slave_0 added [ 262.838298][ T6992] team0: Port device team_slave_1 added [ 262.926428][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.933481][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.960454][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.985018][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 262.991079][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 262.994832][ T5840] Bluetooth: hci8: command 0x0406 tx timeout [ 262.997279][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 263.008129][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 263.037875][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.045243][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.066158][ T5826] Bluetooth: hci18: command tx timeout [ 263.079375][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.230700][ T6992] hsr_slave_0: entered promiscuous mode [ 263.239763][ T6992] hsr_slave_1: entered promiscuous mode [ 263.253300][ T6992] debugfs: 'hsr0' already exists in 'hsr' [ 263.259847][ T6992] Cannot create hsr debugfs directory [ 263.351502][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.359678][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.367224][ T7002] bridge_slave_0: entered allmulticast mode [ 263.374761][ T7002] bridge_slave_0: entered promiscuous mode [ 263.414195][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.421837][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.429295][ T7002] bridge_slave_1: entered allmulticast mode [ 263.437564][ T7002] bridge_slave_1: entered promiscuous mode [ 263.527699][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.540908][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.611309][ T7002] team0: Port device team_slave_0 added [ 263.634092][ T7002] team0: Port device team_slave_1 added [ 263.681255][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.688321][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.715375][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.730597][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.737748][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.764008][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.828873][ T7002] hsr_slave_0: entered promiscuous mode [ 263.835977][ T7002] hsr_slave_1: entered promiscuous mode [ 263.842185][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 263.847998][ T7002] Cannot create hsr debugfs directory [ 264.026101][ T5826] Bluetooth: hci19: command tx timeout [ 264.114909][ T5837] Bluetooth: hci15: command tx timeout [ 264.120556][ T5826] Bluetooth: hci16: command tx timeout [ 264.585999][ T5826] Bluetooth: hci17: command tx timeout [ 265.145151][ T5826] Bluetooth: hci18: command tx timeout [ 265.385994][ T56] block nbd0: Possible stuck request ffff888025710000: control (read@0,1024B). Runtime 150 seconds [ 265.397004][ T56] block nbd0: Possible stuck request ffff888025710200: control (read@1024,1024B). Runtime 150 seconds [ 265.408138][ T56] block nbd0: Possible stuck request ffff888025710400: control (read@2048,1024B). Runtime 150 seconds [ 265.420250][ T56] block nbd0: Possible stuck request ffff888025710600: control (read@3072,1024B). Runtime 150 seconds [ 266.104985][ T5826] Bluetooth: hci19: command tx timeout [ 266.184975][ T5831] Bluetooth: hci15: command tx timeout [ 266.190542][ T5826] Bluetooth: hci16: command tx timeout [ 266.665074][ T5826] Bluetooth: hci17: command tx timeout [ 267.225105][ T5826] Bluetooth: hci18: command tx timeout [ 268.104980][ T5826] Bluetooth: hci9: command 0x0406 tx timeout [ 268.184827][ T5837] Bluetooth: hci19: command tx timeout [ 268.264994][ T5837] Bluetooth: hci15: command tx timeout [ 268.265003][ T5826] Bluetooth: hci16: command tx timeout [ 268.745079][ T5826] Bluetooth: hci17: command tx timeout [ 269.304991][ T5826] Bluetooth: hci18: command tx timeout [ 270.264888][ T5826] Bluetooth: hci19: command tx timeout [ 284.585117][ T31] INFO: task syz.4.276:6836 blocked for more than 143 seconds. [ 284.592913][ T31] Not tainted syzkaller #0 [ 284.598042][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.606863][ T31] task:syz.4.276 state:D stack:27832 pid:6836 tgid:6835 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 284.619057][ T31] Call Trace: [ 284.622354][ T31] [ 284.625364][ T31] __schedule+0x14ea/0x5050 [ 284.629911][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 284.634827][ T31] ? schedule+0x90/0x360 [ 284.639713][ T31] schedule+0x164/0x360 [ 284.643926][ T31] schedule_preempt_disabled+0x13/0x30 [ 284.649543][ T31] __mutex_lock+0x7fe/0x1300 [ 284.654211][ T31] ? __mutex_lock+0x5ac/0x1300 [ 284.659301][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 284.664783][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 284.670230][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 284.714705][ T31] ? radix_tree_lookup+0x240/0x290 [ 284.719897][ T31] genl_rcv_msg+0x10b/0x7a0 [ 284.724447][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.745115][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 284.750108][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 284.756017][ T31] ? __skb_clone+0x63/0x7a0 [ 284.760578][ T31] netlink_rcv_skb+0x232/0x4b0 [ 284.765479][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.770527][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.776958][ T31] ? genl_rcv+0x19/0x40 [ 284.781241][ T31] ? down_read+0x272/0x2e0 [ 284.785766][ T31] ? genl_rcv+0xd/0x40 [ 284.789871][ T31] genl_rcv+0x28/0x40 [ 284.793860][ T31] netlink_unicast+0x80f/0x9b0 [ 284.798825][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 284.804172][ T31] ? netlink_sendmsg+0x650/0xb40 [ 284.809196][ T31] ? skb_put+0x11b/0x210 [ 284.813560][ T31] netlink_sendmsg+0x813/0xb40 [ 284.818542][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.823851][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.829062][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.834396][ T31] __sys_sendto+0x709/0x7a0 [ 284.839085][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 284.844180][ T31] ? exc_page_fault+0x6a/0xc0 [ 284.848949][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 284.854265][ T31] __x64_sys_sendto+0xde/0x100 [ 284.859127][ T31] do_syscall_64+0xe2/0xf80 [ 284.863666][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.869838][ T31] ? trace_irq_disable+0x37/0x100 [ 284.875340][ T31] ? clear_bhb_loop+0x60/0xb0 [ 284.880065][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.886015][ T31] RIP: 0033:0x7f9cbff5b78e [ 284.890455][ T31] RSP: 002b:00007f9cc0ecce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 284.898983][ T31] RAX: ffffffffffffffda RBX: 00007f9cc0ece6c0 RCX: 00007f9cbff5b78e [ 284.909966][ T31] RDX: 0000000000000020 RSI: 00007f9cc0ecd000 RDI: 0000000000000009 [ 284.918037][ T31] RBP: 0000000000000000 R08: 00007f9cc0eccf04 R09: 000000000000000c [ 284.926071][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 284.934043][ T31] R13: 00007f9cc0eccf58 R14: 00007f9cc0ecd000 R15: 0000000000000000 [ 284.942142][ T31] [ 284.945307][ T31] INFO: task syz.1.277:6838 blocked for more than 143 seconds. [ 284.952858][ T31] Not tainted syzkaller #0 [ 284.957901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.966681][ T31] task:syz.1.277 state:D stack:25176 pid:6838 tgid:6837 ppid:5819 task_flags:0x480140 flags:0x00080002 [ 284.979214][ T31] Call Trace: [ 284.982542][ T31] [ 284.986172][ T31] __schedule+0x14ea/0x5050 [ 284.990690][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 284.995728][ T31] ? __pfx___schedule+0x10/0x10 [ 285.000605][ T31] ? schedule+0x90/0x360 [ 285.004953][ T31] schedule+0x164/0x360 [ 285.009132][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 285.014780][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 285.020879][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 285.027312][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 285.033423][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 285.039725][ T31] nbd_set_size+0x516/0x6d0 [ 285.044274][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 285.049418][ T31] ? nla_memcpy+0x5b/0xc0 [ 285.053782][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 285.059301][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 285.065127][ T31] ? rcu_is_watching+0x15/0xb0 [ 285.069913][ T31] ? __nla_parse+0x40/0x60 [ 285.074349][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 285.081095][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 285.086734][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.092811][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 285.097868][ T31] genl_rcv_msg+0x61c/0x7a0 [ 285.102398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.107512][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 285.113284][ T31] netlink_rcv_skb+0x232/0x4b0 [ 285.118141][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.123204][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.128612][ T31] ? genl_rcv+0x19/0x40 [ 285.132802][ T31] ? down_read+0x272/0x2e0 [ 285.137306][ T31] ? genl_rcv+0xd/0x40 [ 285.141414][ T31] genl_rcv+0x28/0x40 [ 285.145553][ T31] netlink_unicast+0x80f/0x9b0 [ 285.150361][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 285.155743][ T31] ? netlink_sendmsg+0x650/0xb40 [ 285.160695][ T31] ? skb_put+0x11b/0x210 [ 285.165168][ T31] netlink_sendmsg+0x813/0xb40 [ 285.170046][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.175433][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.180401][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.186036][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.191365][ T31] ____sys_sendmsg+0xa68/0xad0 [ 285.196185][ T31] ? __might_fault+0xaf/0x130 [ 285.200894][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.206287][ T31] ? import_iovec+0x73/0xa0 [ 285.210816][ T31] ___sys_sendmsg+0x2a5/0x360 [ 285.215657][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 285.220621][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.226134][ T31] ? __fget_files+0x2a/0x420 [ 285.230844][ T31] ? __fget_files+0x3a0/0x420 [ 285.235651][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 285.240634][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.246241][ T31] ? __pfx_ksys_write+0x10/0x10 [ 285.251125][ T31] do_syscall_64+0xe2/0xf80 [ 285.255766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.261951][ T31] ? trace_irq_disable+0x37/0x100 [ 285.267025][ T31] ? clear_bhb_loop+0x60/0xb0 [ 285.271724][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.277751][ T31] RIP: 0033:0x7fd93c79aeb9 [ 285.282185][ T31] RSP: 002b:00007fd93d616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.291033][ T31] RAX: ffffffffffffffda RBX: 00007fd93ca15fa0 RCX: 00007fd93c79aeb9 [ 285.299121][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 285.307281][ T31] RBP: 00007fd93d616090 R08: 0000000000000000 R09: 0000000000000000 [ 285.315336][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.323496][ T31] R13: 00007fd93ca16038 R14: 00007fd93ca15fa0 R15: 00007fffa7a17b88 [ 285.331534][ T31] [ 285.334597][ T31] INFO: task syz.2.278:6840 blocked for more than 144 seconds. [ 285.342255][ T31] Not tainted syzkaller #0 [ 285.347336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.356073][ T31] task:syz.2.278 state:D stack:27840 pid:6840 tgid:6839 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 285.368056][ T31] Call Trace: [ 285.371357][ T31] [ 285.374403][ T31] __schedule+0x14ea/0x5050 [ 285.379094][ T31] ? __pfx___schedule+0x10/0x10 [ 285.384002][ T31] ? schedule+0x90/0x360 [ 285.389094][ T31] schedule+0x164/0x360 [ 285.393294][ T31] schedule_preempt_disabled+0x13/0x30 [ 285.398795][ T31] __mutex_lock+0x7fe/0x1300 [ 285.403427][ T31] ? __mutex_lock+0x5ac/0x1300 [ 285.408330][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 285.413036][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 285.418169][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 285.423326][ T31] ? radix_tree_lookup+0x240/0x290 [ 285.428525][ T31] genl_rcv_msg+0x10b/0x7a0 [ 285.433161][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.438260][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 285.443309][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.448759][ T31] ? __skb_clone+0x63/0x7a0 [ 285.453300][ T31] netlink_rcv_skb+0x232/0x4b0 [ 285.458202][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.463249][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.468889][ T31] ? genl_rcv+0x19/0x40 [ 285.473068][ T31] ? down_read+0x272/0x2e0 [ 285.477558][ T31] ? genl_rcv+0xd/0x40 [ 285.481743][ T31] genl_rcv+0x28/0x40 [ 285.485823][ T31] netlink_unicast+0x80f/0x9b0 [ 285.490815][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 285.496313][ T31] ? netlink_sendmsg+0x650/0xb40 [ 285.501368][ T31] ? skb_put+0x11b/0x210 [ 285.505738][ T31] netlink_sendmsg+0x813/0xb40 [ 285.510540][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.515940][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.520907][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.526278][ T31] __sys_sendto+0x709/0x7a0 [ 285.530802][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 285.536038][ T31] ? exc_page_fault+0x6a/0xc0 [ 285.540980][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 285.546525][ T31] __x64_sys_sendto+0xde/0x100 [ 285.551347][ T31] do_syscall_64+0xe2/0xf80 [ 285.555904][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.562085][ T31] ? trace_irq_disable+0x37/0x100 [ 285.567177][ T31] ? clear_bhb_loop+0x60/0xb0 [ 285.571983][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.578000][ T31] RIP: 0033:0x7fa91615b78e [ 285.582430][ T31] RSP: 002b:00007fa9170d4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 285.590928][ T31] RAX: ffffffffffffffda RBX: 00007fa9170d66c0 RCX: 00007fa91615b78e [ 285.599224][ T31] RDX: 0000000000000020 RSI: 00007fa9170d5000 RDI: 0000000000000004 [ 285.607451][ T31] RBP: 0000000000000000 R08: 00007fa9170d4f04 R09: 000000000000000c [ 285.615565][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 285.623557][ T31] R13: 00007fa9170d4f58 R14: 00007fa9170d5000 R15: 0000000000000000 [ 285.631772][ T31] [ 285.634904][ T31] INFO: task syz.3.280:6848 blocked for more than 144 seconds. [ 285.642501][ T31] Not tainted syzkaller #0 [ 285.647556][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.660021][ T31] task:syz.3.280 state:D stack:27840 pid:6848 tgid:6847 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 285.672101][ T31] Call Trace: [ 285.675463][ T31] [ 285.678395][ T31] __schedule+0x14ea/0x5050 [ 285.682920][ T31] ? __pfx___schedule+0x10/0x10 [ 285.687846][ T31] ? schedule+0x90/0x360 [ 285.692116][ T31] schedule+0x164/0x360 [ 285.696643][ T31] schedule_preempt_disabled+0x13/0x30 [ 285.702130][ T31] __mutex_lock+0x7fe/0x1300 [ 285.706883][ T31] ? __mutex_lock+0x5ac/0x1300 [ 285.711670][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 285.716509][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 285.721566][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 285.726758][ T31] ? radix_tree_lookup+0x240/0x290 [ 285.731894][ T31] genl_rcv_msg+0x10b/0x7a0 [ 285.736483][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.741531][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 285.746590][ T31] netlink_rcv_skb+0x232/0x4b0 [ 285.751398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.756500][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.761799][ T31] ? genl_rcv+0x19/0x40 [ 285.766140][ T31] ? down_read+0x272/0x2e0 [ 285.770576][ T31] ? genl_rcv+0xd/0x40 [ 285.774710][ T31] genl_rcv+0x28/0x40 [ 285.778725][ T31] netlink_unicast+0x80f/0x9b0 [ 285.783529][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 285.789492][ T31] ? netlink_sendmsg+0x650/0xb40 [ 285.794546][ T31] ? skb_put+0x11b/0x210 [ 285.799215][ T31] netlink_sendmsg+0x813/0xb40 [ 285.804033][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.809475][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.814530][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.819903][ T31] __sys_sendto+0x709/0x7a0 [ 285.824433][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 285.829672][ T31] ? exc_page_fault+0x6a/0xc0 [ 285.834388][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 285.839753][ T31] __x64_sys_sendto+0xde/0x100 [ 285.844569][ T31] do_syscall_64+0xe2/0xf80 [ 285.849167][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.855323][ T31] ? trace_irq_disable+0x37/0x100 [ 285.860357][ T31] ? clear_bhb_loop+0x60/0xb0 [ 285.865230][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.871259][ T31] RIP: 0033:0x7f389c35b78e [ 285.875788][ T31] RSP: 002b:00007f389d1b3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 285.884243][ T31] RAX: ffffffffffffffda RBX: 00007f389d1b56c0 RCX: 00007f389c35b78e [ 285.892289][ T31] RDX: 0000000000000024 RSI: 00007f389d1b4000 RDI: 0000000000000003 [ 285.900532][ T31] RBP: 0000000000000000 R08: 00007f389d1b3f04 R09: 000000000000000c [ 285.908627][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 285.916698][ T31] R13: 00007f389d1b3f58 R14: 00007f389d1b4000 R15: 0000000000000000 [ 285.924777][ T31] [ 285.927839][ T31] INFO: task syz.0.285:6862 blocked for more than 144 seconds. [ 285.935555][ T31] Not tainted syzkaller #0 [ 285.940527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.953628][ T31] task:syz.0.285 state:D stack:26048 pid:6862 tgid:6861 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 285.965653][ T31] Call Trace: [ 285.968949][ T31] [ 285.971877][ T31] __schedule+0x14ea/0x5050 [ 285.976491][ T31] ? __pfx___schedule+0x10/0x10 [ 285.981390][ T31] ? schedule+0x90/0x360 [ 285.985703][ T31] schedule+0x164/0x360 [ 285.989899][ T31] schedule_preempt_disabled+0x13/0x30 [ 285.995493][ T31] __mutex_lock+0x7fe/0x1300 [ 286.000131][ T31] ? __mutex_lock+0x5ac/0x1300 [ 286.005304][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 286.010042][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.015236][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 286.020504][ T31] ? radix_tree_lookup+0x240/0x290 [ 286.026233][ T31] genl_rcv_msg+0x10b/0x7a0 [ 286.030795][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.036020][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.041003][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.046619][ T31] ? __skb_clone+0x63/0x7a0 [ 286.051187][ T31] netlink_rcv_skb+0x232/0x4b0 [ 286.056042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.061107][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.067815][ T31] ? genl_rcv+0x19/0x40 [ 286.072003][ T31] ? down_read+0x272/0x2e0 [ 286.076503][ T31] ? genl_rcv+0xd/0x40 [ 286.080596][ T31] genl_rcv+0x28/0x40 [ 286.084582][ T31] netlink_unicast+0x80f/0x9b0 [ 286.089468][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 286.094910][ T31] ? netlink_sendmsg+0x650/0xb40 [ 286.099898][ T31] ? skb_put+0x11b/0x210 [ 286.104482][ T31] netlink_sendmsg+0x813/0xb40 [ 286.109458][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.114849][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.119809][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.125201][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.130503][ T31] ____sys_sendmsg+0xa68/0xad0 [ 286.135375][ T31] ? __might_fault+0xaf/0x130 [ 286.140083][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.145493][ T31] ? import_iovec+0x73/0xa0 [ 286.150021][ T31] ___sys_sendmsg+0x2a5/0x360 [ 286.154861][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.159913][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.165264][ T31] ? futex_wait+0x29a/0x380 [ 286.169802][ T31] ? __fget_files+0x2a/0x420 [ 286.174387][ T31] ? __fget_files+0x3a0/0x420 [ 286.179363][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 286.184358][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.190012][ T31] do_syscall_64+0xe2/0xf80 [ 286.194550][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.200734][ T31] ? trace_irq_disable+0x37/0x100 [ 286.206249][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.210968][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.217031][ T31] RIP: 0033:0x7f860779aeb9 [ 286.221556][ T31] RSP: 002b:00007f860867b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.230174][ T31] RAX: ffffffffffffffda RBX: 00007f8607a15fa0 RCX: 00007f860779aeb9 [ 286.238203][ T31] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 286.246288][ T31] RBP: 00007f8607808c1f R08: 0000000000000000 R09: 0000000000000000 [ 286.254327][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.262508][ T31] R13: 00007f8607a16038 R14: 00007f8607a15fa0 R15: 00007fff4495c3c8 [ 286.270665][ T31] [ 286.273695][ T31] INFO: task syz.0.285:6863 blocked for more than 145 seconds. [ 286.281324][ T31] Not tainted syzkaller #0 [ 286.286374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.295341][ T31] task:syz.0.285 state:D stack:28120 pid:6863 tgid:6861 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 286.307338][ T31] Call Trace: [ 286.310813][ T31] [ 286.313765][ T31] __schedule+0x14ea/0x5050 [ 286.318366][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.323332][ T31] ? __pfx___schedule+0x10/0x10 [ 286.328302][ T31] ? schedule+0x90/0x360 [ 286.332581][ T31] schedule+0x164/0x360 [ 286.336906][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.342399][ T31] __mutex_lock+0x7fe/0x1300 [ 286.347302][ T31] ? __mutex_lock+0x5ac/0x1300 [ 286.352093][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 286.356868][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.361918][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.368228][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.373197][ T31] ? radix_tree_lookup+0x240/0x290 [ 286.378508][ T31] genl_rcv_msg+0x10b/0x7a0 [ 286.383044][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.388171][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.393171][ T31] netlink_rcv_skb+0x232/0x4b0 [ 286.398030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.403078][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.408428][ T31] ? genl_rcv+0x19/0x40 [ 286.412836][ T31] ? down_read+0x272/0x2e0 [ 286.417394][ T31] ? genl_rcv+0xd/0x40 [ 286.421500][ T31] genl_rcv+0x28/0x40 [ 286.425717][ T31] netlink_unicast+0x80f/0x9b0 [ 286.430513][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 286.435897][ T31] ? netlink_sendmsg+0x650/0xb40 [ 286.440856][ T31] ? skb_put+0x11b/0x210 [ 286.445193][ T31] netlink_sendmsg+0x813/0xb40 [ 286.449989][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.455407][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.460376][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.465761][ T31] __sys_sendto+0x709/0x7a0 [ 286.470298][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 286.475465][ T31] ? exc_page_fault+0x6a/0xc0 [ 286.480165][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 286.485594][ T31] __x64_sys_sendto+0xde/0x100 [ 286.490472][ T31] do_syscall_64+0xe2/0xf80 [ 286.495128][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.501220][ T31] ? trace_irq_disable+0x37/0x100 [ 286.506438][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.511138][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.517909][ T31] RIP: 0033:0x7f860775b78e [ 286.522350][ T31] RSP: 002b:00007f8608658e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 286.530835][ T31] RAX: ffffffffffffffda RBX: 00007f860865a6c0 RCX: 00007f860775b78e [ 286.539234][ T31] RDX: 0000000000000028 RSI: 00007f8608659000 RDI: 000000000000000c [ 286.547550][ T31] RBP: 0000000000000000 R08: 00007f8608658f04 R09: 000000000000000c [ 286.555779][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 286.563956][ T31] R13: 00007f8608658f58 R14: 00007f8608659000 R15: 0000000000000000 [ 286.572185][ T31] [ 286.575257][ T31] INFO: task syz.0.285:6866 blocked for more than 145 seconds. [ 286.582919][ T31] Not tainted syzkaller #0 [ 286.588267][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.597178][ T31] task:syz.0.285 state:D stack:28184 pid:6866 tgid:6861 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 286.609249][ T31] Call Trace: [ 286.612561][ T31] [ 286.615968][ T31] __schedule+0x14ea/0x5050 [ 286.620872][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.626175][ T31] ? __pfx___schedule+0x10/0x10 [ 286.631057][ T31] ? schedule+0x90/0x360 [ 286.635378][ T31] schedule+0x164/0x360 [ 286.639568][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.645094][ T31] __mutex_lock+0x7fe/0x1300 [ 286.649710][ T31] ? __mutex_lock+0x5ac/0x1300 [ 286.654477][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 286.659235][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.664286][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.670737][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.675757][ T31] ? radix_tree_lookup+0x240/0x290 [ 286.680880][ T31] genl_rcv_msg+0x10b/0x7a0 [ 286.685440][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.690483][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.695538][ T31] netlink_rcv_skb+0x232/0x4b0 [ 286.700332][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.705557][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.710860][ T31] ? genl_rcv+0x19/0x40 [ 286.715118][ T31] ? down_read+0x272/0x2e0 [ 286.719911][ T31] ? genl_rcv+0xd/0x40 [ 286.724008][ T31] genl_rcv+0x28/0x40 [ 286.728095][ T31] netlink_unicast+0x80f/0x9b0 [ 286.732899][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 286.738287][ T31] ? netlink_sendmsg+0x650/0xb40 [ 286.743251][ T31] ? skb_put+0x11b/0x210 [ 286.747741][ T31] netlink_sendmsg+0x813/0xb40 [ 286.752532][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.757908][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.762870][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.768230][ T31] __sys_sendto+0x709/0x7a0 [ 286.772842][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 286.777962][ T31] ? exc_page_fault+0x6a/0xc0 [ 286.782669][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 286.788062][ T31] __x64_sys_sendto+0xde/0x100 [ 286.792852][ T31] do_syscall_64+0xe2/0xf80 [ 286.797409][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.803507][ T31] ? trace_irq_disable+0x37/0x100 [ 286.808639][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.813337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.819526][ T31] RIP: 0033:0x7f860775b78e [ 286.824335][ T31] RSP: 002b:00007f8608637e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 286.833074][ T31] RAX: ffffffffffffffda RBX: 00007f86086396c0 RCX: 00007f860775b78e [ 286.841133][ T31] RDX: 0000000000000028 RSI: 00007f8608638000 RDI: 000000000000000d [ 286.849326][ T31] RBP: 0000000000000000 R08: 00007f8608637f04 R09: 000000000000000c [ 286.857388][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 286.865449][ T31] R13: 00007f8608637f58 R14: 00007f8608638000 R15: 0000000000000000 [ 286.873468][ T31] [ 286.877765][ T31] INFO: task syz.0.285:6867 blocked for more than 145 seconds. [ 286.885475][ T31] Not tainted syzkaller #0 [ 286.890523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.899341][ T31] task:syz.0.285 state:D stack:27840 pid:6867 tgid:6861 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 286.911766][ T31] Call Trace: [ 286.915168][ T31] [ 286.918150][ T31] __schedule+0x14ea/0x5050 [ 286.923129][ T31] ? __pfx___schedule+0x10/0x10 [ 286.928200][ T31] ? schedule+0x90/0x360 [ 286.932495][ T31] schedule+0x164/0x360 [ 286.936833][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.942336][ T31] __mutex_lock+0x7fe/0x1300 [ 286.947052][ T31] ? __mutex_lock+0x5ac/0x1300 [ 286.951861][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 286.956671][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.961757][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 286.967008][ T31] ? radix_tree_lookup+0x240/0x290 [ 286.972155][ T31] genl_rcv_msg+0x10b/0x7a0 [ 286.976801][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.981853][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.990725][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.996246][ T31] ? __skb_clone+0x63/0x7a0 [ 287.000888][ T31] netlink_rcv_skb+0x232/0x4b0 [ 287.005772][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.010837][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.016318][ T31] ? genl_rcv+0x19/0x40 [ 287.020527][ T31] ? down_read+0x272/0x2e0 [ 287.025452][ T31] ? genl_rcv+0xd/0x40 [ 287.029617][ T31] genl_rcv+0x28/0x40 [ 287.033613][ T31] netlink_unicast+0x80f/0x9b0 [ 287.038560][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 287.043872][ T31] ? netlink_sendmsg+0x650/0xb40 [ 287.048881][ T31] ? skb_put+0x11b/0x210 [ 287.053148][ T31] netlink_sendmsg+0x813/0xb40 [ 287.058042][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.063366][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 287.068963][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.074547][ T31] __sys_sendto+0x709/0x7a0 [ 287.079211][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 287.084276][ T31] ? fd_install+0x94/0x3d0 [ 287.088801][ T31] ? fd_install+0x306/0x3d0 [ 287.093344][ T31] __x64_sys_sendto+0xde/0x100 [ 287.098236][ T31] do_syscall_64+0xe2/0xf80 [ 287.102770][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.108906][ T31] ? trace_irq_disable+0x37/0x100 [ 287.113946][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.118745][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.124698][ T31] RIP: 0033:0x7f860775b78e [ 287.129596][ T31] RSP: 002b:00007f8608616e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.138150][ T31] RAX: ffffffffffffffda RBX: 00007f86086186c0 RCX: 00007f860775b78e [ 287.146353][ T31] RDX: 0000000000000020 RSI: 00007f8608617000 RDI: 000000000000000f [ 287.154360][ T31] RBP: 0000000000000000 R08: 00007f8608616f04 R09: 000000000000000c [ 287.162480][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 287.170493][ T31] R13: 00007f8608616f58 R14: 00007f8608617000 R15: 0000000000000000 [ 287.178591][ T31] [ 287.181684][ T31] [ 287.181684][ T31] Showing all locks held in the system: [ 287.189495][ T31] 1 lock held by khungtaskd/31: [ 287.194355][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.204407][ T31] 2 locks held by getty/5579: [ 287.209146][ T31] #0: ffff8880341180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.218969][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 287.229172][ T31] 1 lock held by udevd/5828: [ 287.233957][ T31] #0: ffff888141ba7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 287.243380][ T31] 2 locks held by syz.4.276/6836: [ 287.248500][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.256874][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.265997][ T31] 6 locks held by syz.1.277/6838: [ 287.271039][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.279341][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.288388][ T31] #2: ffff888025595278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 287.298811][ T31] #3: ffff888025565c88 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 287.308346][ T31] #4: ffff888025565628 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 287.320532][ T31] #5: ffff888025565660 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 287.333437][ T31] 2 locks held by syz.2.278/6840: [ 287.338577][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.346873][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.355925][ T31] 2 locks held by syz.3.280/6848: [ 287.360956][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.369331][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.378423][ T31] 2 locks held by syz.0.285/6862: [ 287.383456][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.391838][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.401007][ T31] 2 locks held by syz.0.285/6863: [ 287.406128][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.414359][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.423424][ T31] 2 locks held by syz.0.285/6866: [ 287.428590][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.437191][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.446336][ T31] 2 locks held by syz.0.285/6867: [ 287.451351][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.459632][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.468797][ T31] 2 locks held by syz-executor/6873: [ 287.474217][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.482581][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.491639][ T31] 2 locks held by syz-executor/6875: [ 287.496960][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.505223][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.514195][ T31] 2 locks held by syz-executor/6877: [ 287.519536][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.527819][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.537352][ T31] 2 locks held by syz-executor/6884: [ 287.542655][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.551205][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.560372][ T31] 2 locks held by syz-executor/6905: [ 287.565711][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.573891][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.582921][ T31] 2 locks held by syz-executor/6922: [ 287.588295][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.596646][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.605694][ T31] 2 locks held by syz-executor/6924: [ 287.610965][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.619207][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.628337][ T31] 2 locks held by syz-executor/6935: [ 287.633631][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.642192][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.651396][ T31] 2 locks held by syz-executor/6940: [ 287.656778][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.665106][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.674306][ T31] 2 locks held by syz-executor/6951: [ 287.679729][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.688043][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.697215][ T31] 2 locks held by syz-executor/6972: [ 287.702519][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.711002][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.720062][ T31] 2 locks held by syz-executor/6974: [ 287.725389][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.733699][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.743067][ T31] 2 locks held by syz-executor/6984: [ 287.748434][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.756767][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.765917][ T31] 2 locks held by syz-executor/6992: [ 287.771192][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.779444][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.788605][ T31] 2 locks held by syz-executor/7002: [ 287.793902][ T31] #0: ffffffff8fa19c30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 287.802191][ T31] #1: ffffffff8fa19a48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 287.811363][ T31] [ 287.813701][ T31] ============================================= [ 287.813701][ T31] [ 287.822199][ T31] NMI backtrace for cpu 1 [ 287.822216][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 287.822237][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 287.822248][ T31] Call Trace: [ 287.822264][ T31] [ 287.822272][ T31] dump_stack_lvl+0xe8/0x150 [ 287.822302][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 287.822325][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.822357][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 287.822382][ T31] sys_info+0x135/0x170 [ 287.822396][ T31] watchdog+0xf90/0xfe0 [ 287.822419][ T31] ? watchdog+0x209/0xfe0 [ 287.822445][ T31] kthread+0x726/0x8b0 [ 287.822469][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.822488][ T31] ? __pfx_kthread+0x10/0x10 [ 287.822511][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.822534][ T31] ? __pfx_kthread+0x10/0x10 [ 287.822556][ T31] ret_from_fork+0x51b/0xa40 [ 287.822577][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.822603][ T31] ? __switch_to+0xc82/0x1410 [ 287.822633][ T31] ? __pfx_kthread+0x10/0x10 [ 287.822655][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.822697][ T31] [ 287.822705][ T31] Sending NMI from CPU 1 to CPUs 0: [ 287.942735][ C0] NMI backtrace for cpu 0 [ 287.942753][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 287.942771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 287.942780][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 287.942806][ C0] Code: 08 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 39 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 287.942819][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 287.942835][ C0] RAX: 00000000001ad9d5 RBX: ffffffff8199370d RCX: 0000000080000001 [ 287.942847][ C0] RDX: 0000000000000001 RSI: ffffffff8dcd0e36 RDI: ffffffff8c073a00 [ 287.942858][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 287.942869][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef4b70 [ 287.942880][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 287.942891][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 287.942904][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.942915][ C0] CR2: 00007f28d0347e20 CR3: 000000000e346000 CR4: 00000000003526f0 [ 287.942932][ C0] Call Trace: [ 287.942939][ C0] [ 287.942944][ C0] default_idle+0x9/0x20 [ 287.942959][ C0] default_idle_call+0x72/0xb0 [ 287.942974][ C0] do_idle+0x1bd/0x500 [ 287.942988][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 287.943008][ C0] ? __pfx_do_idle+0x10/0x10 [ 287.943027][ C0] cpu_startup_entry+0x43/0x60 [ 287.943041][ C0] rest_init+0x2de/0x300 [ 287.943058][ C0] start_kernel+0x380/0x3d0 [ 287.943078][ C0] x86_64_start_reservations+0x24/0x30 [ 287.943095][ C0] x86_64_start_kernel+0x143/0x1c0 [ 287.943112][ C0] common_startup_64+0x13e/0x147 [ 287.943139][ C0] [ 288.129201][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.136077][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.145180][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 288.155228][ T31] Call Trace: [ 288.158506][ T31] [ 288.161433][ T31] vpanic+0x1e0/0x670 [ 288.165418][ T31] panic+0xc5/0xd0 [ 288.169134][ T31] ? __pfx_panic+0x10/0x10 [ 288.173542][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 288.178911][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 288.185068][ T31] watchdog+0xfda/0xfe0 [ 288.189278][ T31] ? watchdog+0x209/0xfe0 [ 288.193607][ T31] kthread+0x726/0x8b0 [ 288.197666][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.202335][ T31] ? __pfx_kthread+0x10/0x10 [ 288.207090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.212369][ T31] ? __pfx_kthread+0x10/0x10 [ 288.216951][ T31] ret_from_fork+0x51b/0xa40 [ 288.221626][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.226734][ T31] ? __switch_to+0xc82/0x1410 [ 288.231408][ T31] ? __pfx_kthread+0x10/0x10 [ 288.236000][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.240798][ T31] [ 288.244170][ T31] Kernel Offset: disabled [ 288.248490][ T31] Rebooting in 86400 seconds..