last executing test programs: 18.545178586s ago: executing program 4 (id=819): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x40008c1, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x9, 0x6, @broadcast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r9, &(0x7f00000002c0)=0x3, r8, 0x0, 0xfffffffffffffff7, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f0000000340)={r10}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 17.897285795s ago: executing program 4 (id=831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x2000}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.73277155s ago: executing program 4 (id=835): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a000000911150000000000095000000000000000ee60f022d5f0590c70c863bf7c8cd0f12d8b6f1393af1ee80b0ed5c0d2521fc57d942a63f58519c94301060f4a435ade4d05aaf757adbe8fcc4ab51f3287292b9925c937420341fceb8e5c8f32205ad916138e9bfcf54992bbcc9abaabbf9c07b54fd462ba4acb3dab1911cd081e7be1e50633c3ccb239a3f532c6f56be3f0993142f047acf4979cc927fd7a65160d240f85b343ea657926475a1c028ff69fe2ac36c13569d7e3a30573269007cb8b2"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 17.547117981s ago: executing program 3 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 17.545303078s ago: executing program 0 (id=839): socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfdfff00c}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (fail_nth: 1) 17.487933669s ago: executing program 1 (id=840): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 17.177300499s ago: executing program 3 (id=842): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c229307c4f54d7eb11ae380c7173dff3f093fc", 0x30) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x35, 0x0, &(0x7f0000000c40), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x1bc, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x164, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50e8f6d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b58b07}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x101dcb3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31d3d8cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd12defd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e2bec7c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c01e838}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13bcfa2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdc691e9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x361db478}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13820860}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eb4e58}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5005f29e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x121aecb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf0d1726}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1003aad4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbab78e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682b078a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31e94445}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0) 17.16921073s ago: executing program 0 (id=843): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa8}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 17.166667529s ago: executing program 1 (id=844): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000180)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000000340)=""/144, 0x90}], 0x7}, 0x0) 17.080380298s ago: executing program 0 (id=845): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061127b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 17.001442475s ago: executing program 4 (id=846): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @local, 0x3f096d47}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "751b3a5054b25e3ad3efb5b662a743dd52bacca09240fdeb292bffd4050ef6cf", "0a1819733e1d64dbd19cb1e02bb39bb7a20e10a3459692faa0a8df09016daa6e", "44c1d129371e13cc3bcc669fd833c7391408ffdfa30285a5aa48141142ce5700", "242f28691b9da04dd4ff5e98d4030eb9000000000000000300", "9ca5fb02099a024df59efd8c9a8ef6c3649beea9eddf6b4cd2134dbf00", "858a1ba8d3f4dccddf00"}}) ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000000)={0x2, 0x4000, '\x00\x00\b', 0x2}) 16.993672039s ago: executing program 3 (id=847): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) accept$ax25(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x9840, 0x8, 0xfff, 0x8}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) 16.901381366s ago: executing program 4 (id=849): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r4, 0x4}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000380)) bind$packet(r1, &(0x7f0000000140)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r6 = socket(0x11, 0x80a, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) syz_emit_ethernet(0x1f, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffafaaaaaaaa1c001142bc365776d4b5e03c6557c6273fe310b79e44a02a16e3d1690e46bbbfba2ca59230d4bd6c452346ca5c4ecbc31b61b7b92e41af708e8c5cb9350dbc29fb5e9c6e11f2f653f33b6c83db5cda2ba40a7735ef32a40a72be4aafb6950ff46476856fe144e541fbacf8440cc738a451750215b71f7af7e7"], 0x0) 16.851033004s ago: executing program 4 (id=850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 16.850690712s ago: executing program 0 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 16.759220963s ago: executing program 0 (id=852): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 16.679186772s ago: executing program 2 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0x100}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16.677955768s ago: executing program 0 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bind$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x10, 0xff, 0x3, 0x5}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xfffffffb, 0x8, 0x7, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140), 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffea0d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 16.589544314s ago: executing program 2 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 16.565231445s ago: executing program 2 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 16.42182117s ago: executing program 2 (id=857): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x1, 0x1, 0x80000001}, {0x35}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0x14, &(0x7f0000000180)={&(0x7f0000000100)}, 0x1, 0x0, 0x0, 0x4004840}, 0x22000045) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd700004400000060003"], 0x30}}, 0x8040) 16.336754918s ago: executing program 2 (id=858): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@llc_tr={0x11, {@llc={0x42, 0xbc, '6', "5776d4b5e03c6557c6273fe39513"}}}}}, 0x0) 16.33586147s ago: executing program 2 (id=859): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r4, 0x1, 0x27, &(0x7f0000000080)=""/45, &(0x7f0000000180)=0x2d) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x20000800) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0020000f5abebea1be16c5f36e022d3c5cf9f840b99daa1468c9889e1336aea5992b1d987442c1d1404774b7bfdd4255a580654af8f6e80a85f55310cbfa84ec4ad7fe566de02", @ANYRES16=r2, @ANYBLOB="050004000000fedbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="44000e0080000000080211000001ffffffffffff0802110000000000000000000000000004000000000601010101010125030103083c0401073c0271070101000101f00818000e8005000300d9000000070002006378e400040001001a009100c8224f47d85607c510c6726dc3afd7cfd80e59d720df000004008000080026006c09000008000c006400000008000d0000000000"], 0xb0}}, 0x0) mmap(&(0x7f000086e000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x62465000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x40071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f00007c6000/0x1000)=nil, 0x1000, 0x100000a, 0x10010, r4, 0x8f743000) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xd2, 0x1}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 16.219590664s ago: executing program 1 (id=860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 16.161590398s ago: executing program 1 (id=861): r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000580)="b8359e233a") connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x180000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x200, 0x1, 0x6}, 0x10) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) 16.117047915s ago: executing program 1 (id=862): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x400c804, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 16.06659088s ago: executing program 3 (id=863): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) 16.033600844s ago: executing program 1 (id=864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000200)="c8bb0100bde70100aa8f650008000c0075acd2df", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x4a, 0x1, 0x0, 0x800000, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000ffdbdf250900e3ff04003500000000000500380000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 15.976325855s ago: executing program 3 (id=865): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) 15.889330285s ago: executing program 3 (id=866): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_1\x00', {'veth0_to_bond\x00'}, 0x49dd}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_1\x00', {'veth0_to_bond\x00'}, 0x49dd}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000d) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x200}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x263f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.182426778s ago: executing program 32 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bind$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x10, 0xff, 0x3, 0x5}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xfffffffb, 0x8, 0x7, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140), 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffea0d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.141717504s ago: executing program 33 (id=859): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r4, 0x1, 0x27, &(0x7f0000000080)=""/45, &(0x7f0000000180)=0x2d) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x20000800) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0020000f5abebea1be16c5f36e022d3c5cf9f840b99daa1468c9889e1336aea5992b1d987442c1d1404774b7bfdd4255a580654af8f6e80a85f55310cbfa84ec4ad7fe566de02", @ANYRES16=r2, @ANYBLOB="050004000000fedbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="44000e0080000000080211000001ffffffffffff0802110000000000000000000000000004000000000601010101010125030103083c0401073c0271070101000101f00818000e8005000300d9000000070002006378e400040001001a009100c8224f47d85607c510c6726dc3afd7cfd80e59d720df000004008000080026006c09000008000c006400000008000d0000000000"], 0xb0}}, 0x0) mmap(&(0x7f000086e000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x62465000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x40071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f00007c6000/0x1000)=nil, 0x1000, 0x100000a, 0x10010, r4, 0x8f743000) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xd2, 0x1}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 1.104630951s ago: executing program 34 (id=850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 41.357689ms ago: executing program 35 (id=864): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000200)="c8bb0100bde70100aa8f650008000c0075acd2df", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x4a, 0x1, 0x0, 0x800000, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000129bd7000ffdbdf250900e3ff04003500000000000500380000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 0s ago: executing program 36 (id=866): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_1\x00', {'veth0_to_bond\x00'}, 0x49dd}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_1\x00', {'veth0_to_bond\x00'}, 0x49dd}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000d) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x200}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x263f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) kernel console output (not intermixed with test programs): command tx timeout [ 74.392314][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.402249][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.477365][ T5946] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 74.492597][ T5946] bond1 (unregistering): Released all slaves [ 74.526432][ T5838] veth0_macvtap: entered promiscuous mode [ 74.543334][ T5840] Bluetooth: hci1: command tx timeout [ 74.559265][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.590711][ T5838] veth1_macvtap: entered promiscuous mode [ 74.640052][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.652011][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.670536][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.708176][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717983][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.738401][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.749294][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.757304][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.773298][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.784155][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.831102][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.861828][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863045][ T5840] Bluetooth: hci4: command tx timeout [ 74.876746][ T52] Bluetooth: hci2: command tx timeout [ 74.876766][ T5829] Bluetooth: hci3: command tx timeout [ 74.890040][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.893384][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.899022][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.915380][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.947395][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.958259][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.963294][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.091285][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.117426][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.244182][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.273727][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.317859][ T5959] syzkaller0: entered promiscuous mode [ 75.324167][ T5959] syzkaller0: entered allmulticast mode [ 75.344736][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.375044][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.446992][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.455907][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.470689][ T5959] tipc: Started in network mode [ 75.495912][ T5959] tipc: Node identity 6e2b99725534, cluster identity 4711 [ 75.504656][ T5959] tipc: Enabled bearer , priority 0 [ 75.534523][ T5973] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10'. [ 75.555370][ T5957] tipc: Resetting bearer [ 75.615001][ T5957] tipc: Disabling bearer [ 75.878730][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.952012][ T5988] geneve2: entered promiscuous mode [ 76.463212][ T5829] Bluetooth: hci0: command tx timeout [ 76.550195][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.623399][ T5829] Bluetooth: hci1: command tx timeout [ 76.719762][ T6014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.878922][ T6021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.946538][ T5829] Bluetooth: hci4: command tx timeout [ 76.951974][ T5829] Bluetooth: hci3: command tx timeout [ 76.956629][ T5840] Bluetooth: hci2: command tx timeout [ 77.024655][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 77.067840][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 77.073827][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 77.088968][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 77.107759][ T6031] nbd: socks must be embedded in a SOCK_ITEM attr [ 77.193872][ T6035] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 77.356721][ T6031] netlink: 88 bytes leftover after parsing attributes in process `syz.0.27'. [ 78.256633][ T6067] nbd0: detected capacity change from 0 to 127 [ 78.489784][ T52] block nbd0: Receive control failed (result -104) [ 79.070694][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 79.178525][ T6128] syzkaller1: entered promiscuous mode [ 79.210384][ T6128] syzkaller1: entered allmulticast mode [ 79.364568][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.437116][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 79.670981][ T6163] Zero length message leads to an empty skb [ 79.813243][ T6103] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.853900][ T6103] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.912081][ T6103] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.931795][ T6103] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.763847][ T6213] __nla_validate_parse: 7 callbacks suppressed [ 80.763865][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 81.535130][ T918] cfg80211: failed to load regulatory.db [ 83.532254][ T6237] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 84.001322][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 84.151284][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.234549][ T6272] team_slave_0: entered promiscuous mode [ 84.240400][ T6272] team_slave_1: entered promiscuous mode [ 84.344473][ T6272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.374597][ T6277] syzkaller0: entered promiscuous mode [ 84.381292][ T6277] syzkaller0: entered allmulticast mode [ 85.323608][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 85.445189][ T6305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.285168][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 86.491247][ T6362] xt_CT: No such helper "netbios-ns" [ 86.628167][ T6372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.664849][ T6372] team0: Failed to send options change via netlink (err -105) [ 86.679181][ T6372] team0: Port device bond0 added [ 86.753688][ T6372] team0: Failed to send port change of device bond0 via netlink (err -105) [ 86.804744][ T6372] team0: Failed to send options change via netlink (err -105) [ 86.838339][ T6372] team0: Failed to send port change of device bond0 via netlink (err -105) [ 86.846119][ T6387] sctp: [Deprecated]: syz.2.144 (pid 6387) Use of int in max_burst socket option deprecated. [ 86.846119][ T6387] Use struct sctp_assoc_value instead [ 86.857633][ T6372] team0: Port device bond0 removed [ 87.868160][ T6435] netlink: 'syz.2.168': attribute type 5 has an invalid length. [ 88.082166][ T6447] netlink: 'syz.2.172': attribute type 29 has an invalid length. [ 88.184254][ T6453] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 88.208028][ T6453] netlink: 2 bytes leftover after parsing attributes in process `syz.4.176'. [ 88.228783][ T6453] bond0: entered promiscuous mode [ 88.239489][ T6453] bond_slave_0: entered promiscuous mode [ 88.253756][ T6453] bond_slave_1: entered promiscuous mode [ 88.266768][ T6453] bridge0: port 3(bond0) entered blocking state [ 88.287501][ T6453] bridge0: port 3(bond0) entered disabled state [ 88.313720][ T6453] bond0: entered allmulticast mode [ 88.319335][ T6453] bond_slave_0: entered allmulticast mode [ 88.330921][ T6453] bond_slave_1: entered allmulticast mode [ 88.345167][ T6453] bridge0: port 3(bond0) entered blocking state [ 88.351709][ T6453] bridge0: port 3(bond0) entered forwarding state [ 89.780282][ T6536] warning: `syz.2.214' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.266320][ T6559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.225'. [ 90.277024][ T6559] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 90.316696][ T6561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.226'. [ 90.588941][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.615411][ T6573] team0: Port device bond0 added [ 92.448045][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 92.596437][ T6677] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 92.730977][ T6687] netlink: 3288 bytes leftover after parsing attributes in process `syz.0.283'. [ 92.776914][ T6689] FAULT_INJECTION: forcing a failure. [ 92.776914][ T6689] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.792488][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) [ 92.792509][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.792524][ T6689] Call Trace: [ 92.792531][ T6689] [ 92.792539][ T6689] dump_stack_lvl+0x189/0x250 [ 92.792566][ T6689] ? __pfx____ratelimit+0x10/0x10 [ 92.792587][ T6689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.792609][ T6689] ? __pfx__printk+0x10/0x10 [ 92.792626][ T6689] ? __might_fault+0xb0/0x130 [ 92.792659][ T6689] should_fail_ex+0x414/0x560 [ 92.792687][ T6689] _copy_from_user+0x2d/0xb0 [ 92.792708][ T6689] __sys_bpf+0x1e3/0x860 [ 92.792728][ T6689] ? __pfx___sys_bpf+0x10/0x10 [ 92.792760][ T6689] ? ksys_write+0x22a/0x250 [ 92.792783][ T6689] ? __pfx_ksys_write+0x10/0x10 [ 92.792815][ T6689] __x64_sys_bpf+0x7c/0x90 [ 92.792838][ T6689] do_syscall_64+0xfa/0xfa0 [ 92.792858][ T6689] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.792881][ T6689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.792897][ T6689] ? clear_bhb_loop+0x60/0xb0 [ 92.792917][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.792933][ T6689] RIP: 0033:0x7f9817b8f6c9 [ 92.792948][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.792966][ T6689] RSP: 002b:00007f9818a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.792985][ T6689] RAX: ffffffffffffffda RBX: 00007f9817de5fa0 RCX: 00007f9817b8f6c9 [ 92.792997][ T6689] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 92.793008][ T6689] RBP: 00007f9818a25090 R08: 0000000000000000 R09: 0000000000000000 [ 92.793018][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.793027][ T6689] R13: 00007f9817de6038 R14: 00007f9817de5fa0 R15: 00007ffe87430558 [ 92.793054][ T6689] [ 93.031647][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 93.300222][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.294'. [ 93.382550][ T6103] nci: nci_rx_work: unknown MT 0x7 [ 93.388662][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 93.405884][ T6713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.294'. [ 94.027860][ T6744] netlink: 'syz.3.308': attribute type 8 has an invalid length. [ 94.703438][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 94.779548][ T6740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 95.312544][ T6810] batadv1: entered promiscuous mode [ 95.342872][ T6810] batadv1: entered allmulticast mode [ 95.459139][ T6823] x_tables: duplicate underflow at hook 1 [ 95.767171][ T6841] FAULT_INJECTION: forcing a failure. [ 95.767171][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.805961][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT(full) [ 95.805984][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.805994][ T6841] Call Trace: [ 95.806001][ T6841] [ 95.806008][ T6841] dump_stack_lvl+0x189/0x250 [ 95.806034][ T6841] ? __pfx____ratelimit+0x10/0x10 [ 95.806056][ T6841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.806077][ T6841] ? __pfx__printk+0x10/0x10 [ 95.806107][ T6841] should_fail_ex+0x414/0x560 [ 95.806135][ T6841] _copy_to_user+0x31/0xb0 [ 95.806158][ T6841] simple_read_from_buffer+0xe1/0x170 [ 95.806186][ T6841] proc_fail_nth_read+0x1b3/0x220 [ 95.806210][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.806233][ T6841] ? rw_verify_area+0x2a6/0x4d0 [ 95.806254][ T6841] ? __lock_acquire+0xab9/0xd20 [ 95.806269][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.806291][ T6841] vfs_read+0x200/0xa30 [ 95.806311][ T6841] ? fdget_pos+0x247/0x320 [ 95.806331][ T6841] ? __pfx___mutex_lock+0x10/0x10 [ 95.806361][ T6841] ? __pfx_vfs_read+0x10/0x10 [ 95.806384][ T6841] ? __fget_files+0x2a/0x420 [ 95.806403][ T6841] ? __fget_files+0x3a0/0x420 [ 95.806417][ T6841] ? __fget_files+0x2a/0x420 [ 95.806442][ T6841] ksys_read+0x145/0x250 [ 95.806465][ T6841] ? __pfx_ksys_read+0x10/0x10 [ 95.806491][ T6841] ? do_syscall_64+0xbe/0xfa0 [ 95.806514][ T6841] do_syscall_64+0xfa/0xfa0 [ 95.806532][ T6841] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.806553][ T6841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.806569][ T6841] ? clear_bhb_loop+0x60/0xb0 [ 95.806588][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.806603][ T6841] RIP: 0033:0x7f9e4eb8e0dc [ 95.806619][ T6841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.806632][ T6841] RSP: 002b:00007f9e4f990030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.806649][ T6841] RAX: ffffffffffffffda RBX: 00007f9e4ede5fa0 RCX: 00007f9e4eb8e0dc [ 95.806661][ T6841] RDX: 000000000000000f RSI: 00007f9e4f9900a0 RDI: 0000000000000004 [ 95.806671][ T6841] RBP: 00007f9e4f990090 R08: 0000000000000000 R09: 0000000000000000 [ 95.806681][ T6841] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 95.806691][ T6841] R13: 00007f9e4ede6038 R14: 00007f9e4ede5fa0 R15: 00007ffeef5e2be8 [ 95.806719][ T6841] [ 96.165971][ T6859] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.401150][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.366'. [ 96.411579][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 96.435343][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 96.439699][ T6873] dummy0: entered promiscuous mode [ 96.473234][ T6873] macvtap1: entered promiscuous mode [ 96.478794][ T6873] macvtap1: entered allmulticast mode [ 96.496082][ T6873] dummy0: entered allmulticast mode [ 96.546751][ T6871] netlink: 52 bytes leftover after parsing attributes in process `syz.1.366'. [ 97.099151][ T6907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.340033][ T6897] bond1 (unregistering): Released all slaves [ 97.991959][ T6945] __nla_validate_parse: 1 callbacks suppressed [ 97.991975][ T6945] netlink: 68 bytes leftover after parsing attributes in process `syz.3.398'. [ 98.024700][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 98.124251][ T6948] veth3: entered promiscuous mode [ 98.338408][ T6963] sctp: [Deprecated]: syz.3.402 (pid 6963) Use of int in max_burst socket option deprecated. [ 98.338408][ T6963] Use struct sctp_assoc_value instead [ 98.376921][ T6965] FAULT_INJECTION: forcing a failure. [ 98.376921][ T6965] name failslab, interval 1, probability 0, space 0, times 1 [ 98.415676][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(full) [ 98.415696][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.415705][ T6965] Call Trace: [ 98.415712][ T6965] [ 98.415720][ T6965] dump_stack_lvl+0x189/0x250 [ 98.415747][ T6965] ? __pfx____ratelimit+0x10/0x10 [ 98.415772][ T6965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.415794][ T6965] ? __pfx__printk+0x10/0x10 [ 98.415817][ T6965] ? __pfx___might_resched+0x10/0x10 [ 98.415834][ T6965] ? fs_reclaim_acquire+0x7d/0x100 [ 98.415863][ T6965] should_fail_ex+0x414/0x560 [ 98.415892][ T6965] should_failslab+0xa8/0x100 [ 98.415911][ T6965] __kmalloc_noprof+0xcb/0x7f0 [ 98.415932][ T6965] ? bpf_test_init+0x9f/0x150 [ 98.415961][ T6965] bpf_test_init+0x9f/0x150 [ 98.415988][ T6965] bpf_prog_test_run_skb+0x206/0x1550 [ 98.416013][ T6965] ? __fget_files+0x2a/0x420 [ 98.416035][ T6965] ? __fget_files+0x2a/0x420 [ 98.416055][ T6965] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 98.416080][ T6965] bpf_prog_test_run+0x2c7/0x340 [ 98.416102][ T6965] __sys_bpf+0x562/0x860 [ 98.416120][ T6965] ? __pfx___sys_bpf+0x10/0x10 [ 98.416152][ T6965] ? ksys_write+0x22a/0x250 [ 98.416177][ T6965] ? __pfx_ksys_write+0x10/0x10 [ 98.416203][ T6965] __x64_sys_bpf+0x7c/0x90 [ 98.416227][ T6965] do_syscall_64+0xfa/0xfa0 [ 98.416247][ T6965] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.416267][ T6965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.416283][ T6965] ? clear_bhb_loop+0x60/0xb0 [ 98.416302][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.416317][ T6965] RIP: 0033:0x7f545958f6c9 [ 98.416332][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.416345][ T6965] RSP: 002b:00007f545a348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.416362][ T6965] RAX: ffffffffffffffda RBX: 00007f54597e5fa0 RCX: 00007f545958f6c9 [ 98.416374][ T6965] RDX: 000000000000004c RSI: 0000200000000600 RDI: 000000000000000a [ 98.416384][ T6965] RBP: 00007f545a348090 R08: 0000000000000000 R09: 0000000000000000 [ 98.416394][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.416404][ T6965] R13: 00007f54597e6038 R14: 00007f54597e5fa0 R15: 00007ffec0fa6588 [ 98.416436][ T6965] [ 99.243514][ T7003] FAULT_INJECTION: forcing a failure. [ 99.243514][ T7003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.292920][ T7003] CPU: 1 UID: 0 PID: 7003 Comm: syz.0.420 Not tainted syzkaller #0 PREEMPT(full) [ 99.292942][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.292952][ T7003] Call Trace: [ 99.292959][ T7003] [ 99.292966][ T7003] dump_stack_lvl+0x189/0x250 [ 99.292992][ T7003] ? __pfx____ratelimit+0x10/0x10 [ 99.293013][ T7003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.293034][ T7003] ? __pfx__printk+0x10/0x10 [ 99.293064][ T7003] should_fail_ex+0x414/0x560 [ 99.293096][ T7003] _copy_from_user+0x2d/0xb0 [ 99.293136][ T7003] bpf_test_init+0xd8/0x150 [ 99.293163][ T7003] bpf_prog_test_run_skb+0x206/0x1550 [ 99.293187][ T7003] ? __fget_files+0x2a/0x420 [ 99.293208][ T7003] ? __fget_files+0x2a/0x420 [ 99.293228][ T7003] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 99.293252][ T7003] bpf_prog_test_run+0x2c7/0x340 [ 99.293274][ T7003] __sys_bpf+0x562/0x860 [ 99.293292][ T7003] ? __pfx___sys_bpf+0x10/0x10 [ 99.293323][ T7003] ? ksys_write+0x22a/0x250 [ 99.293348][ T7003] ? __pfx_ksys_write+0x10/0x10 [ 99.293374][ T7003] __x64_sys_bpf+0x7c/0x90 [ 99.293398][ T7003] do_syscall_64+0xfa/0xfa0 [ 99.293419][ T7003] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.293440][ T7003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.293461][ T7003] ? clear_bhb_loop+0x60/0xb0 [ 99.293482][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.293498][ T7003] RIP: 0033:0x7fe08838f6c9 [ 99.293514][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.293528][ T7003] RSP: 002b:00007fe089175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.293550][ T7003] RAX: ffffffffffffffda RBX: 00007fe0885e5fa0 RCX: 00007fe08838f6c9 [ 99.293562][ T7003] RDX: 000000000000004c RSI: 0000200000000600 RDI: 000000000000000a [ 99.293573][ T7003] RBP: 00007fe089175090 R08: 0000000000000000 R09: 0000000000000000 [ 99.293583][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.293593][ T7003] R13: 00007fe0885e6038 R14: 00007fe0885e5fa0 R15: 00007ffd7eec04b8 [ 99.293622][ T7003] [ 99.560195][ T7008] team0: Port device bond0 removed [ 99.904373][ T7023] syzkaller0: entered promiscuous mode [ 99.909874][ T7023] syzkaller0: entered allmulticast mode [ 99.963507][ T7023] tipc: Enabled bearer , priority 0 [ 99.978107][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 99.987902][ T7023] netlink: 52 bytes leftover after parsing attributes in process `syz.3.430'. [ 100.005579][ T7022] tipc: Resetting bearer [ 100.068920][ T7037] FAULT_INJECTION: forcing a failure. [ 100.068920][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 100.083123][ T7022] tipc: Disabling bearer [ 100.130976][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 100.130998][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.131008][ T7037] Call Trace: [ 100.131014][ T7037] [ 100.131022][ T7037] dump_stack_lvl+0x189/0x250 [ 100.131047][ T7037] ? __pfx____ratelimit+0x10/0x10 [ 100.131075][ T7037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.131097][ T7037] ? __pfx__printk+0x10/0x10 [ 100.131119][ T7037] ? __pfx___might_resched+0x10/0x10 [ 100.131137][ T7037] ? fs_reclaim_acquire+0x7d/0x100 [ 100.131165][ T7037] should_fail_ex+0x414/0x560 [ 100.131193][ T7037] should_failslab+0xa8/0x100 [ 100.131212][ T7037] __kmalloc_noprof+0xcb/0x7f0 [ 100.131233][ T7037] ? sk_prot_alloc+0xe7/0x220 [ 100.131255][ T7037] sk_prot_alloc+0xe7/0x220 [ 100.131275][ T7037] ? sk_alloc+0x26/0x410 [ 100.131293][ T7037] sk_alloc+0x39/0x410 [ 100.131308][ T7037] ? bpf_ctx_init+0x167/0x1d0 [ 100.131327][ T7037] bpf_prog_test_run_skb+0x313/0x1550 [ 100.131358][ T7037] ? __fget_files+0x2a/0x420 [ 100.131379][ T7037] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 100.131402][ T7037] bpf_prog_test_run+0x2c7/0x340 [ 100.131423][ T7037] __sys_bpf+0x562/0x860 [ 100.131442][ T7037] ? __pfx___sys_bpf+0x10/0x10 [ 100.131473][ T7037] ? ksys_write+0x22a/0x250 [ 100.131496][ T7037] ? __pfx_ksys_write+0x10/0x10 [ 100.131522][ T7037] __x64_sys_bpf+0x7c/0x90 [ 100.131545][ T7037] do_syscall_64+0xfa/0xfa0 [ 100.131564][ T7037] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.131584][ T7037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.131598][ T7037] ? clear_bhb_loop+0x60/0xb0 [ 100.131616][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.131632][ T7037] RIP: 0033:0x7f9cdc18f6c9 [ 100.131646][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.131658][ T7037] RSP: 002b:00007f9cdd0ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.131675][ T7037] RAX: ffffffffffffffda RBX: 00007f9cdc3e5fa0 RCX: 00007f9cdc18f6c9 [ 100.131684][ T7037] RDX: 000000000000004c RSI: 0000200000000600 RDI: 000000000000000a [ 100.131694][ T7037] RBP: 00007f9cdd0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 100.131704][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.131713][ T7037] R13: 00007f9cdc3e6038 R14: 00007f9cdc3e5fa0 R15: 00007ffecc372cb8 [ 100.131740][ T7037] [ 100.494750][ T7045] bond2: entered promiscuous mode [ 100.512059][ T7045] bond2: entered allmulticast mode [ 100.518149][ T7045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.819481][ T7045] bond2 (unregistering): Released all slaves [ 100.966213][ T7070] netlink: 'syz.2.445': attribute type 12 has an invalid length. [ 100.986634][ T7070] syzkaller0: entered promiscuous mode [ 100.992127][ T7070] syzkaller0: entered allmulticast mode [ 101.039726][ T7070] Bluetooth: MGMT ver 1.23 [ 101.070320][ T7068] syzkaller0: entered promiscuous mode [ 101.078353][ T7068] syzkaller0: entered allmulticast mode [ 101.220082][ T7082] FAULT_INJECTION: forcing a failure. [ 101.220082][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 101.242833][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.1.452 Not tainted syzkaller #0 PREEMPT(full) [ 101.242856][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.242866][ T7082] Call Trace: [ 101.242873][ T7082] [ 101.242881][ T7082] dump_stack_lvl+0x189/0x250 [ 101.242911][ T7082] ? __pfx____ratelimit+0x10/0x10 [ 101.242933][ T7082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.242954][ T7082] ? __pfx__printk+0x10/0x10 [ 101.242978][ T7082] ? __pfx___might_resched+0x10/0x10 [ 101.242995][ T7082] ? fs_reclaim_acquire+0x7d/0x100 [ 101.243025][ T7082] should_fail_ex+0x414/0x560 [ 101.243053][ T7082] should_failslab+0xa8/0x100 [ 101.243073][ T7082] __kmalloc_noprof+0xcb/0x7f0 [ 101.243095][ T7082] ? security_sk_alloc+0x52/0x390 [ 101.243119][ T7082] security_sk_alloc+0x52/0x390 [ 101.243140][ T7082] sk_prot_alloc+0x101/0x220 [ 101.243156][ T7082] ? sk_alloc+0x26/0x410 [ 101.243175][ T7082] sk_alloc+0x39/0x410 [ 101.243191][ T7082] ? bpf_ctx_init+0x167/0x1d0 [ 101.243217][ T7082] bpf_prog_test_run_skb+0x313/0x1550 [ 101.243250][ T7082] ? __fget_files+0x2a/0x420 [ 101.243272][ T7082] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 101.243297][ T7082] bpf_prog_test_run+0x2c7/0x340 [ 101.243319][ T7082] __sys_bpf+0x562/0x860 [ 101.243338][ T7082] ? __pfx___sys_bpf+0x10/0x10 [ 101.243371][ T7082] ? ksys_write+0x22a/0x250 [ 101.243396][ T7082] ? __pfx_ksys_write+0x10/0x10 [ 101.243424][ T7082] __x64_sys_bpf+0x7c/0x90 [ 101.243448][ T7082] do_syscall_64+0xfa/0xfa0 [ 101.243469][ T7082] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.243491][ T7082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.243508][ T7082] ? clear_bhb_loop+0x60/0xb0 [ 101.243529][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.243545][ T7082] RIP: 0033:0x7f9817b8f6c9 [ 101.243562][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.243576][ T7082] RSP: 002b:00007f9818a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.243594][ T7082] RAX: ffffffffffffffda RBX: 00007f9817de5fa0 RCX: 00007f9817b8f6c9 [ 101.243607][ T7082] RDX: 000000000000004c RSI: 0000200000000600 RDI: 000000000000000a [ 101.243618][ T7082] RBP: 00007f9818a25090 R08: 0000000000000000 R09: 0000000000000000 [ 101.243628][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.243638][ T7082] R13: 00007f9817de6038 R14: 00007f9817de5fa0 R15: 00007ffe87430558 [ 101.243668][ T7082] [ 101.994296][ T7090] netlink: 200 bytes leftover after parsing attributes in process `syz.1.453'. [ 102.087518][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.453'. [ 104.040473][ T7124] FAULT_INJECTION: forcing a failure. [ 104.040473][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.130374][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.4.466 Not tainted syzkaller #0 PREEMPT(full) [ 104.130396][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.130404][ T7124] Call Trace: [ 104.130411][ T7124] [ 104.130418][ T7124] dump_stack_lvl+0x189/0x250 [ 104.130444][ T7124] ? __pfx____ratelimit+0x10/0x10 [ 104.130465][ T7124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.130486][ T7124] ? __pfx__printk+0x10/0x10 [ 104.130514][ T7124] should_fail_ex+0x414/0x560 [ 104.130543][ T7124] _copy_to_user+0x31/0xb0 [ 104.130565][ T7124] bpf_test_finish+0x1ab/0x700 [ 104.130589][ T7124] ? __pfx_bpf_test_finish+0x10/0x10 [ 104.130617][ T7124] bpf_prog_test_run_skb+0xef8/0x1550 [ 104.130657][ T7124] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 104.130681][ T7124] bpf_prog_test_run+0x2c7/0x340 [ 104.130702][ T7124] __sys_bpf+0x562/0x860 [ 104.130721][ T7124] ? __pfx___sys_bpf+0x10/0x10 [ 104.130753][ T7124] ? ksys_write+0x22a/0x250 [ 104.130786][ T7124] ? __pfx_ksys_write+0x10/0x10 [ 104.130814][ T7124] __x64_sys_bpf+0x7c/0x90 [ 104.130836][ T7124] do_syscall_64+0xfa/0xfa0 [ 104.130856][ T7124] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.130878][ T7124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.130894][ T7124] ? clear_bhb_loop+0x60/0xb0 [ 104.130912][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.130927][ T7124] RIP: 0033:0x7f545958f6c9 [ 104.130942][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.130955][ T7124] RSP: 002b:00007f545a348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.130973][ T7124] RAX: ffffffffffffffda RBX: 00007f54597e5fa0 RCX: 00007f545958f6c9 [ 104.130984][ T7124] RDX: 000000000000004c RSI: 0000200000000600 RDI: 000000000000000a [ 104.130995][ T7124] RBP: 00007f545a348090 R08: 0000000000000000 R09: 0000000000000000 [ 104.131004][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.131013][ T7124] R13: 00007f54597e6038 R14: 00007f54597e5fa0 R15: 00007ffec0fa6588 [ 104.131040][ T7124] [ 104.609008][ T7143] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 104.612015][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 104.647907][ T7143] tipc: Started in network mode [ 104.680711][ T7143] tipc: Node identity e27461fc7c18, cluster identity 4711 [ 104.693531][ T7143] tipc: Enabled bearer , priority 0 [ 104.707974][ T7152] syzkaller0: entered promiscuous mode [ 104.723575][ T7152] syzkaller0: entered allmulticast mode [ 104.920538][ T7161] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 104.937924][ T7163] netlink: 'syz.1.475': attribute type 21 has an invalid length. [ 105.005538][ T7163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'. [ 105.070002][ T7141] tipc: Resetting bearer [ 105.175394][ T7141] tipc: Disabling bearer [ 105.342942][ T7181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'. [ 105.514291][ T7190] netlink: 128 bytes leftover after parsing attributes in process `syz.2.493'. [ 105.523502][ T7190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 105.842917][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.498'. [ 105.886359][ T7207] netlink: 64 bytes leftover after parsing attributes in process `syz.1.501'. [ 105.907333][ T7208] syzkaller0: entered promiscuous mode [ 105.912922][ T7208] syzkaller0: entered allmulticast mode [ 106.303249][ T7229] FAULT_INJECTION: forcing a failure. [ 106.303249][ T7229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.309582][ T7231] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 106.350487][ T7231] netlink: 160 bytes leftover after parsing attributes in process `syz.1.511'. [ 106.352048][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 106.352068][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.352078][ T7229] Call Trace: [ 106.352084][ T7229] [ 106.352091][ T7229] dump_stack_lvl+0x189/0x250 [ 106.352117][ T7229] ? __pfx____ratelimit+0x10/0x10 [ 106.352138][ T7229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.352159][ T7229] ? __pfx__printk+0x10/0x10 [ 106.352189][ T7229] should_fail_ex+0x414/0x560 [ 106.352217][ T7229] _copy_from_user+0x2d/0xb0 [ 106.352237][ T7229] __copy_msghdr+0x3c5/0x5b0 [ 106.352259][ T7229] ___sys_sendmsg+0x1a5/0x2a0 [ 106.352278][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.352328][ T7229] ? __fget_files+0x2a/0x420 [ 106.352343][ T7229] ? __fget_files+0x3a0/0x420 [ 106.352367][ T7229] __x64_sys_sendmsg+0x19b/0x260 [ 106.352388][ T7229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.352415][ T7229] ? rcu_is_watching+0x15/0xb0 [ 106.352441][ T7229] do_syscall_64+0xfa/0xfa0 [ 106.352461][ T7229] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.352482][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.352498][ T7229] ? clear_bhb_loop+0x60/0xb0 [ 106.352518][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.352533][ T7229] RIP: 0033:0x7f9e4eb8f6c9 [ 106.352547][ T7229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.352561][ T7229] RSP: 002b:00007f9e4f990038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.352579][ T7229] RAX: ffffffffffffffda RBX: 00007f9e4ede5fa0 RCX: 00007f9e4eb8f6c9 [ 106.352590][ T7229] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 106.352601][ T7229] RBP: 00007f9e4f990090 R08: 0000000000000000 R09: 0000000000000000 [ 106.352611][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.352627][ T7229] R13: 00007f9e4ede6038 R14: 00007f9e4ede5fa0 R15: 00007ffeef5e2be8 [ 106.352654][ T7229] [ 106.457092][ T7242] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 106.653242][ T7246] FAULT_INJECTION: forcing a failure. [ 106.653242][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.702369][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT(full) [ 106.702396][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.702405][ T7246] Call Trace: [ 106.702413][ T7246] [ 106.702419][ T7246] dump_stack_lvl+0x189/0x250 [ 106.702446][ T7246] ? __pfx____ratelimit+0x10/0x10 [ 106.702467][ T7246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.702488][ T7246] ? __pfx__printk+0x10/0x10 [ 106.702518][ T7246] should_fail_ex+0x414/0x560 [ 106.702546][ T7246] _copy_to_user+0x31/0xb0 [ 106.702569][ T7246] simple_read_from_buffer+0xe1/0x170 [ 106.702598][ T7246] proc_fail_nth_read+0x1b3/0x220 [ 106.702622][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.702645][ T7246] ? rw_verify_area+0x2a6/0x4d0 [ 106.702666][ T7246] ? __lock_acquire+0xab9/0xd20 [ 106.702688][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.702710][ T7246] vfs_read+0x200/0xa30 [ 106.702730][ T7246] ? fdget_pos+0x247/0x320 [ 106.702748][ T7246] ? __pfx___mutex_lock+0x10/0x10 [ 106.702769][ T7246] ? __pfx_vfs_read+0x10/0x10 [ 106.702790][ T7246] ? __fget_files+0x2a/0x420 [ 106.702808][ T7246] ? __fget_files+0x3a0/0x420 [ 106.702822][ T7246] ? __fget_files+0x2a/0x420 [ 106.702845][ T7246] ksys_read+0x145/0x250 [ 106.702869][ T7246] ? __pfx_ksys_read+0x10/0x10 [ 106.702895][ T7246] ? do_syscall_64+0xbe/0xfa0 [ 106.702919][ T7246] do_syscall_64+0xfa/0xfa0 [ 106.702938][ T7246] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.702959][ T7246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.702975][ T7246] ? clear_bhb_loop+0x60/0xb0 [ 106.702995][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.703009][ T7246] RIP: 0033:0x7f545958e0dc [ 106.703024][ T7246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.703037][ T7246] RSP: 002b:00007f545a348030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.703054][ T7246] RAX: ffffffffffffffda RBX: 00007f54597e5fa0 RCX: 00007f545958e0dc [ 106.703066][ T7246] RDX: 000000000000000f RSI: 00007f545a3480a0 RDI: 0000000000000004 [ 106.703076][ T7246] RBP: 00007f545a348090 R08: 0000000000000000 R09: 0000000000000000 [ 106.703085][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.703095][ T7246] R13: 00007f54597e6038 R14: 00007f54597e5fa0 R15: 00007ffec0fa6588 [ 106.703124][ T7246] [ 106.953556][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 107.328588][ T7263] netlink: 996 bytes leftover after parsing attributes in process `syz.1.520'. [ 107.435974][ T7278] netlink: 128 bytes leftover after parsing attributes in process `syz.2.526'. [ 107.445706][ T7278] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 107.504349][ T7280] FAULT_INJECTION: forcing a failure. [ 107.504349][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 107.549813][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 107.549836][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.549845][ T7280] Call Trace: [ 107.549852][ T7280] [ 107.549860][ T7280] dump_stack_lvl+0x189/0x250 [ 107.549886][ T7280] ? __pfx____ratelimit+0x10/0x10 [ 107.549908][ T7280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.549929][ T7280] ? __pfx__printk+0x10/0x10 [ 107.549953][ T7280] ? __pfx___might_resched+0x10/0x10 [ 107.549969][ T7280] ? fs_reclaim_acquire+0x7d/0x100 [ 107.549998][ T7280] should_fail_ex+0x414/0x560 [ 107.550027][ T7280] should_failslab+0xa8/0x100 [ 107.550046][ T7280] kmem_cache_alloc_node_noprof+0x77/0x710 [ 107.550068][ T7280] ? __alloc_skb+0x112/0x2d0 [ 107.550090][ T7280] __alloc_skb+0x112/0x2d0 [ 107.550110][ T7280] alloc_skb_with_frags+0xca/0x890 [ 107.550126][ T7280] ? ima_match_policy+0x10b/0x2150 [ 107.550159][ T7280] sock_alloc_send_pskb+0x84d/0x980 [ 107.550198][ T7280] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 107.550222][ T7280] ? dev_get_by_index+0x22/0x2e0 [ 107.550242][ T7280] ? dev_get_by_index+0x22/0x2e0 [ 107.550268][ T7280] packet_sendmsg+0x33a0/0x5080 [ 107.550293][ T7280] ? match_mnt_path_str+0xa72/0xb40 [ 107.550326][ T7280] ? __lock_acquire+0xab9/0xd20 [ 107.550346][ T7280] ? __pfx___might_resched+0x10/0x10 [ 107.550383][ T7280] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.550397][ T7280] ? aa_sk_perm+0x81e/0x950 [ 107.550425][ T7280] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 107.550454][ T7280] ? __lock_acquire+0xab9/0xd20 [ 107.550468][ T7280] ? aa_sock_msg_perm+0xf1/0x1d0 [ 107.550493][ T7280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.550510][ T7280] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.550527][ T7280] __sock_sendmsg+0x21c/0x270 [ 107.550558][ T7280] ____sys_sendmsg+0x505/0x830 [ 107.550582][ T7280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.550610][ T7280] ? import_iovec+0x74/0xa0 [ 107.550634][ T7280] ___sys_sendmsg+0x21f/0x2a0 [ 107.550655][ T7280] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.550709][ T7280] ? __fget_files+0x2a/0x420 [ 107.550724][ T7280] ? __fget_files+0x3a0/0x420 [ 107.550750][ T7280] __x64_sys_sendmsg+0x19b/0x260 [ 107.550771][ T7280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.550800][ T7280] ? __pfx_ksys_write+0x10/0x10 [ 107.550826][ T7280] ? do_syscall_64+0xbe/0xfa0 [ 107.550851][ T7280] do_syscall_64+0xfa/0xfa0 [ 107.550871][ T7280] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.550893][ T7280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.550910][ T7280] ? clear_bhb_loop+0x60/0xb0 [ 107.550930][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.550946][ T7280] RIP: 0033:0x7fe08838f6c9 [ 107.550962][ T7280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.550975][ T7280] RSP: 002b:00007fe089175038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.550993][ T7280] RAX: ffffffffffffffda RBX: 00007fe0885e5fa0 RCX: 00007fe08838f6c9 [ 107.551006][ T7280] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 107.551017][ T7280] RBP: 00007fe089175090 R08: 0000000000000000 R09: 0000000000000000 [ 107.551027][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.551037][ T7280] R13: 00007fe0885e6038 R14: 00007fe0885e5fa0 R15: 00007ffd7eec04b8 [ 107.551067][ T7280] [ 108.210325][ T7288] tap0: tun_chr_ioctl cmd 2147767507 [ 108.387032][ T56] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 30 seconds [ 108.398993][ T56] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 30 seconds [ 108.409953][ T56] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 30 seconds [ 108.420913][ T56] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 30 seconds [ 109.938440][ T7388] netlink: 128 bytes leftover after parsing attributes in process `syz.0.570'. [ 109.972875][ T7388] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 110.408967][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 110.508270][ T7405] delete_channel: no stack [ 110.783828][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 110.890941][ T7434] FAULT_INJECTION: forcing a failure. [ 110.890941][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 110.906477][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.1.587 Not tainted syzkaller #0 PREEMPT(full) [ 110.906501][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.906510][ T7434] Call Trace: [ 110.906517][ T7434] [ 110.906524][ T7434] dump_stack_lvl+0x189/0x250 [ 110.906551][ T7434] ? __pfx____ratelimit+0x10/0x10 [ 110.906579][ T7434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.906599][ T7434] ? __pfx__printk+0x10/0x10 [ 110.906620][ T7434] ? __lock_acquire+0xab9/0xd20 [ 110.906643][ T7434] should_fail_ex+0x414/0x560 [ 110.906671][ T7434] should_failslab+0xa8/0x100 [ 110.906689][ T7434] kmem_cache_alloc_noprof+0x74/0x6e0 [ 110.906712][ T7434] ? skb_clone+0x212/0x3a0 [ 110.906736][ T7434] skb_clone+0x212/0x3a0 [ 110.906756][ T7434] __netlink_deliver_tap+0x404/0x850 [ 110.906785][ T7434] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.906803][ T7434] netlink_deliver_tap+0x19c/0x1b0 [ 110.906821][ T7434] netlink_unicast+0x7fa/0x9e0 [ 110.906853][ T7434] ? __pfx_netlink_unicast+0x10/0x10 [ 110.906877][ T7434] ? netlink_sendmsg+0x642/0xb30 [ 110.906892][ T7434] ? skb_put+0x11b/0x210 [ 110.906912][ T7434] netlink_sendmsg+0x805/0xb30 [ 110.906938][ T7434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.906958][ T7434] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.906984][ T7434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.907000][ T7434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.907015][ T7434] __sock_sendmsg+0x21c/0x270 [ 110.907040][ T7434] ____sys_sendmsg+0x505/0x830 [ 110.907064][ T7434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.907092][ T7434] ? import_iovec+0x74/0xa0 [ 110.907116][ T7434] ___sys_sendmsg+0x21f/0x2a0 [ 110.907135][ T7434] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.907182][ T7434] ? __fget_files+0x2a/0x420 [ 110.907196][ T7434] ? __fget_files+0x3a0/0x420 [ 110.907218][ T7434] __x64_sys_sendmsg+0x19b/0x260 [ 110.907237][ T7434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.907262][ T7434] ? __pfx_ksys_write+0x10/0x10 [ 110.907286][ T7434] ? do_syscall_64+0xbe/0xfa0 [ 110.907309][ T7434] do_syscall_64+0xfa/0xfa0 [ 110.907327][ T7434] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.907346][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.907362][ T7434] ? clear_bhb_loop+0x60/0xb0 [ 110.907382][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.907397][ T7434] RIP: 0033:0x7f9817b8f6c9 [ 110.907411][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.907423][ T7434] RSP: 002b:00007f9818a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.907441][ T7434] RAX: ffffffffffffffda RBX: 00007f9817de5fa0 RCX: 00007f9817b8f6c9 [ 110.907451][ T7434] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 110.907461][ T7434] RBP: 00007f9818a25090 R08: 0000000000000000 R09: 0000000000000000 [ 110.907470][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.907479][ T7434] R13: 00007f9817de6038 R14: 00007f9817de5fa0 R15: 00007ffe87430558 [ 110.907508][ T7434] [ 111.479784][ T7447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.592'. [ 111.497973][ T7447] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 111.518807][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 111.820833][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 113.908139][ T7590] FAULT_INJECTION: forcing a failure. [ 113.908139][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 113.908863][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 113.932233][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.2.652 Not tainted syzkaller #0 PREEMPT(full) [ 113.932256][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.932266][ T7590] Call Trace: [ 113.932273][ T7590] [ 113.932280][ T7590] dump_stack_lvl+0x189/0x250 [ 113.932307][ T7590] ? __pfx____ratelimit+0x10/0x10 [ 113.932329][ T7590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.932358][ T7590] ? __pfx__printk+0x10/0x10 [ 113.932381][ T7590] ? __pfx___might_resched+0x10/0x10 [ 113.932399][ T7590] ? fs_reclaim_acquire+0x7d/0x100 [ 113.932426][ T7590] should_fail_ex+0x414/0x560 [ 113.932454][ T7590] should_failslab+0xa8/0x100 [ 113.932472][ T7590] __kvmalloc_node_noprof+0x158/0x910 [ 113.932498][ T7590] ? alloc_netdev_mqs+0xa6/0x11b0 [ 113.932525][ T7590] alloc_netdev_mqs+0xa6/0x11b0 [ 113.932544][ T7590] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 113.932570][ T7590] rtnl_create_link+0x31f/0xd10 [ 113.932598][ T7590] rtnl_newlink_create+0x25c/0xb00 [ 113.932620][ T7590] ? __lock_acquire+0xab9/0xd20 [ 113.932642][ T7590] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 113.932660][ T7590] ? __pfx___mutex_lock+0x10/0x10 [ 113.932692][ T7590] ? ns_capable+0x8a/0xf0 [ 113.932712][ T7590] rtnl_newlink+0x16e4/0x1c80 [ 113.932739][ T7590] ? ____sys_sendmsg+0x505/0x830 [ 113.932765][ T7590] ? __pfx_rtnl_newlink+0x10/0x10 [ 113.932805][ T7590] ? kasan_quarantine_put+0xdd/0x220 [ 113.932826][ T7590] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.932853][ T7590] ? nlmon_xmit+0xb0/0x100 [ 113.932871][ T7590] ? kmem_cache_free+0x19b/0x690 [ 113.932903][ T7590] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.932921][ T7590] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.932943][ T7590] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.932960][ T7590] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 113.932981][ T7590] ? __dev_queue_xmit+0x284/0x3740 [ 113.933003][ T7590] ? __dev_queue_xmit+0x284/0x3740 [ 113.933021][ T7590] ? __dev_queue_xmit+0x1bfb/0x3740 [ 113.933049][ T7590] ? __lock_acquire+0xab9/0xd20 [ 113.933091][ T7590] ? __pfx_rtnl_newlink+0x10/0x10 [ 113.933113][ T7590] rtnetlink_rcv_msg+0x7cf/0xb70 [ 113.933140][ T7590] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 113.933162][ T7590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.933180][ T7590] ? ref_tracker_free+0x63a/0x7d0 [ 113.933195][ T7590] ? __asan_memcpy+0x40/0x70 [ 113.933214][ T7590] ? __pfx_ref_tracker_free+0x10/0x10 [ 113.933239][ T7590] netlink_rcv_skb+0x208/0x470 [ 113.933257][ T7590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.933282][ T7590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.933310][ T7590] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.933334][ T7590] netlink_unicast+0x82f/0x9e0 [ 113.933373][ T7590] ? __pfx_netlink_unicast+0x10/0x10 [ 113.933398][ T7590] ? netlink_sendmsg+0x642/0xb30 [ 113.933413][ T7590] ? skb_put+0x11b/0x210 [ 113.933433][ T7590] netlink_sendmsg+0x805/0xb30 [ 113.933458][ T7590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.933476][ T7590] ? aa_sock_msg_perm+0xf1/0x1d0 [ 113.933499][ T7590] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.933515][ T7590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.933532][ T7590] __sock_sendmsg+0x21c/0x270 [ 113.933557][ T7590] ____sys_sendmsg+0x505/0x830 [ 113.933580][ T7590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.933606][ T7590] ? import_iovec+0x74/0xa0 [ 113.933629][ T7590] ___sys_sendmsg+0x21f/0x2a0 [ 113.933650][ T7590] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.933697][ T7590] ? __fget_files+0x2a/0x420 [ 113.933712][ T7590] ? __fget_files+0x3a0/0x420 [ 113.933738][ T7590] __x64_sys_sendmsg+0x19b/0x260 [ 113.933759][ T7590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.933792][ T7590] ? __pfx_ksys_write+0x10/0x10 [ 113.933819][ T7590] ? do_syscall_64+0xbe/0xfa0 [ 113.933844][ T7590] do_syscall_64+0xfa/0xfa0 [ 113.933863][ T7590] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.933884][ T7590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.933899][ T7590] ? clear_bhb_loop+0x60/0xb0 [ 113.933918][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.933934][ T7590] RIP: 0033:0x7f9cdc18f6c9 [ 113.933950][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.933963][ T7590] RSP: 002b:00007f9cdd0ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.933981][ T7590] RAX: ffffffffffffffda RBX: 00007f9cdc3e5fa0 RCX: 00007f9cdc18f6c9 [ 113.933993][ T7590] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 113.934004][ T7590] RBP: 00007f9cdd0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 113.934014][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.934024][ T7590] R13: 00007f9cdc3e6038 R14: 00007f9cdc3e5fa0 R15: 00007ffecc372cb8 [ 113.934052][ T7590] [ 114.852452][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 114.882100][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 114.891471][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.014056][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.819050][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 115.846951][ T7668] FAULT_INJECTION: forcing a failure. [ 115.846951][ T7668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.860523][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.4.684 Not tainted syzkaller #0 PREEMPT(full) [ 115.860545][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.860554][ T7668] Call Trace: [ 115.860561][ T7668] [ 115.860568][ T7668] dump_stack_lvl+0x189/0x250 [ 115.860594][ T7668] ? __pfx____ratelimit+0x10/0x10 [ 115.860616][ T7668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.860637][ T7668] ? __pfx__printk+0x10/0x10 [ 115.860654][ T7668] ? __might_fault+0xb0/0x130 [ 115.860687][ T7668] should_fail_ex+0x414/0x560 [ 115.860715][ T7668] _copy_from_user+0x2d/0xb0 [ 115.860736][ T7668] ___sys_sendmsg+0x158/0x2a0 [ 115.860757][ T7668] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.860809][ T7668] ? __fget_files+0x2a/0x420 [ 115.860824][ T7668] ? __fget_files+0x3a0/0x420 [ 115.860849][ T7668] __x64_sys_sendmsg+0x19b/0x260 [ 115.860869][ T7668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.860893][ T7668] ? __pfx_ksys_write+0x10/0x10 [ 115.860918][ T7668] ? do_syscall_64+0xbe/0xfa0 [ 115.860942][ T7668] do_syscall_64+0xfa/0xfa0 [ 115.860969][ T7668] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.860990][ T7668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.861006][ T7668] ? clear_bhb_loop+0x60/0xb0 [ 115.861025][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.861041][ T7668] RIP: 0033:0x7f545958f6c9 [ 115.861055][ T7668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.861067][ T7668] RSP: 002b:00007f545a348038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.861083][ T7668] RAX: ffffffffffffffda RBX: 00007f54597e5fa0 RCX: 00007f545958f6c9 [ 115.861094][ T7668] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 115.861104][ T7668] RBP: 00007f545a348090 R08: 0000000000000000 R09: 0000000000000000 [ 115.861114][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.861124][ T7668] R13: 00007f54597e6038 R14: 00007f54597e5fa0 R15: 00007ffec0fa6588 [ 115.861153][ T7668] [ 116.635081][ T7697] netlink: 'syz.0.697': attribute type 14 has an invalid length. [ 117.305305][ T7726] netlink: 332 bytes leftover after parsing attributes in process `syz.2.709'. [ 117.445237][ T7731] tipc: Started in network mode [ 117.450123][ T7731] tipc: Node identity d2b145494646, cluster identity 4711 [ 117.475927][ T7731] tipc: Enabled bearer , priority 0 [ 117.508818][ T7725] syz.3.711 (7725) used greatest stack depth: 17832 bytes left [ 117.544161][ T7731] syzkaller0: entered promiscuous mode [ 117.549667][ T7731] syzkaller0: entered allmulticast mode [ 117.576348][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 117.604218][ T7723] tipc: Resetting bearer [ 117.628386][ T7723] tipc: Disabling bearer [ 118.171301][ T7772] FAULT_INJECTION: forcing a failure. [ 118.171301][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 118.193599][ T7771] netlink: 'syz.4.729': attribute type 2 has an invalid length. [ 118.203730][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.1.728 Not tainted syzkaller #0 PREEMPT(full) [ 118.203752][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.203761][ T7772] Call Trace: [ 118.203768][ T7772] [ 118.203776][ T7772] dump_stack_lvl+0x189/0x250 [ 118.203808][ T7772] ? __pfx____ratelimit+0x10/0x10 [ 118.203829][ T7772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.203851][ T7772] ? __pfx__printk+0x10/0x10 [ 118.203870][ T7772] ? __pfx___might_resched+0x10/0x10 [ 118.203889][ T7772] ? fs_reclaim_acquire+0x7d/0x100 [ 118.203918][ T7772] should_fail_ex+0x414/0x560 [ 118.203950][ T7772] should_failslab+0xa8/0x100 [ 118.203968][ T7772] __kvmalloc_node_noprof+0x158/0x910 [ 118.203991][ T7772] ? __fget_files+0x2a/0x420 [ 118.204006][ T7772] ? vmemdup_user+0x2b/0xd0 [ 118.204023][ T7772] ? __fget_files+0x2a/0x420 [ 118.204044][ T7772] vmemdup_user+0x2b/0xd0 [ 118.204062][ T7772] map_get_next_key+0x1c3/0x630 [ 118.204081][ T7772] ? bpf_lsm_bpf+0x9/0x20 [ 118.204098][ T7772] ? security_bpf+0x7e/0x300 [ 118.204120][ T7772] __sys_bpf+0x63d/0x860 [ 118.204138][ T7772] ? __pfx___sys_bpf+0x10/0x10 [ 118.204169][ T7772] ? ksys_write+0x22a/0x250 [ 118.204193][ T7772] ? __pfx_ksys_write+0x10/0x10 [ 118.204220][ T7772] __x64_sys_bpf+0x7c/0x90 [ 118.204243][ T7772] do_syscall_64+0xfa/0xfa0 [ 118.204264][ T7772] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.204285][ T7772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.204302][ T7772] ? clear_bhb_loop+0x60/0xb0 [ 118.204322][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.204345][ T7772] RIP: 0033:0x7f9817b8f6c9 [ 118.204361][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.204374][ T7772] RSP: 002b:00007f9818a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.204392][ T7772] RAX: ffffffffffffffda RBX: 00007f9817de5fa0 RCX: 00007f9817b8f6c9 [ 118.204405][ T7772] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 118.204416][ T7772] RBP: 00007f9818a25090 R08: 0000000000000000 R09: 0000000000000000 [ 118.204426][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.204436][ T7772] R13: 00007f9817de6038 R14: 00007f9817de5fa0 R15: 00007ffe87430558 [ 118.204465][ T7772] [ 118.494735][ T7771] netlink: 'syz.4.729': attribute type 9 has an invalid length. [ 118.502434][ T7771] netlink: 150196 bytes leftover after parsing attributes in process `syz.4.729'. [ 118.704516][ T7786] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 118.799621][ T7792] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 119.001505][ T7802] netlink: 128 bytes leftover after parsing attributes in process `syz.0.743'. [ 119.064017][ T7802] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.210707][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 119.263382][ T7812] netlink: 128 bytes leftover after parsing attributes in process `syz.4.747'. [ 119.281275][ T7812] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.311692][ T7817] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.496494][ T7828] sctp: [Deprecated]: syz.4.755 (pid 7828) Use of int in max_burst socket option deprecated. [ 119.496494][ T7828] Use struct sctp_assoc_value instead [ 119.678430][ T7839] FAULT_INJECTION: forcing a failure. [ 119.678430][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.706571][ T7840] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 119.716896][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.4.757 Not tainted syzkaller #0 PREEMPT(full) [ 119.716917][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.716927][ T7839] Call Trace: [ 119.716933][ T7839] [ 119.716940][ T7839] dump_stack_lvl+0x189/0x250 [ 119.716966][ T7839] ? __pfx____ratelimit+0x10/0x10 [ 119.716987][ T7839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.717008][ T7839] ? __pfx__printk+0x10/0x10 [ 119.717036][ T7839] should_fail_ex+0x414/0x560 [ 119.717062][ T7839] _copy_from_user+0x2d/0xb0 [ 119.717082][ T7839] vmemdup_user+0x5e/0xd0 [ 119.717099][ T7839] map_get_next_key+0x1c3/0x630 [ 119.717117][ T7839] ? bpf_lsm_bpf+0x9/0x20 [ 119.717133][ T7839] ? security_bpf+0x7e/0x300 [ 119.717155][ T7839] __sys_bpf+0x63d/0x860 [ 119.717172][ T7839] ? __pfx___sys_bpf+0x10/0x10 [ 119.717200][ T7839] ? ksys_write+0x22a/0x250 [ 119.717225][ T7839] ? __pfx_ksys_write+0x10/0x10 [ 119.717250][ T7839] __x64_sys_bpf+0x7c/0x90 [ 119.717272][ T7839] do_syscall_64+0xfa/0xfa0 [ 119.717292][ T7839] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.717313][ T7839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.717330][ T7839] ? clear_bhb_loop+0x60/0xb0 [ 119.717350][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.717364][ T7839] RIP: 0033:0x7f545958f6c9 [ 119.717380][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.717398][ T7839] RSP: 002b:00007f545a348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.717415][ T7839] RAX: ffffffffffffffda RBX: 00007f54597e5fa0 RCX: 00007f545958f6c9 [ 119.717426][ T7839] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 119.717437][ T7839] RBP: 00007f545a348090 R08: 0000000000000000 R09: 0000000000000000 [ 119.717447][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.717456][ T7839] R13: 00007f54597e6038 R14: 00007f54597e5fa0 R15: 00007ffec0fa6588 [ 119.717482][ T7839] [ 119.736006][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.758793][ T7831] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 119.805720][ T7840] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 119.843084][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'. [ 119.938050][ T7843] netlink: 128 bytes leftover after parsing attributes in process `syz.3.759'. [ 120.003843][ T7843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 120.058761][ T7831] batadv0: entered promiscuous mode [ 120.066315][ T7831] batadv0: entered allmulticast mode [ 120.078610][ T7831] bond0: (slave batadv0): Releasing backup interface [ 120.100594][ T7831] bridge0: port 3(batadv0) entered blocking state [ 120.107578][ T7831] bridge0: port 3(batadv0) entered disabled state [ 120.181052][ T7853] netlink: 14 bytes leftover after parsing attributes in process `syz.3.763'. [ 120.200498][ T7850] FAULT_INJECTION: forcing a failure. [ 120.200498][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 120.221062][ T7850] CPU: 1 UID: 0 PID: 7850 Comm: syz.4.760 Not tainted syzkaller #0 PREEMPT(full) [ 120.221085][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.221095][ T7850] Call Trace: [ 120.221101][ T7850] [ 120.221109][ T7850] dump_stack_lvl+0x189/0x250 [ 120.221136][ T7850] ? __pfx____ratelimit+0x10/0x10 [ 120.221158][ T7850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.221179][ T7850] ? __pfx__printk+0x10/0x10 [ 120.221200][ T7850] ? __pfx___might_resched+0x10/0x10 [ 120.221219][ T7850] ? fs_reclaim_acquire+0x7d/0x100 [ 120.221249][ T7850] should_fail_ex+0x414/0x560 [ 120.221278][ T7850] should_failslab+0xa8/0x100 [ 120.221298][ T7850] kmem_cache_alloc_noprof+0x74/0x6e0 [ 120.221320][ T7850] ? security_inode_alloc+0x39/0x330 [ 120.221349][ T7850] security_inode_alloc+0x39/0x330 [ 120.221374][ T7850] inode_init_always_gfp+0x9ed/0xdc0 [ 120.221404][ T7850] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 120.221427][ T7850] alloc_inode+0x82/0x1b0 [ 120.221452][ T7850] new_inode+0x22/0x170 [ 120.221473][ T7850] __debugfs_create_file+0x14d/0x4f0 [ 120.221501][ T7850] debugfs_create_file_full+0x3f/0x60 [ 120.221528][ T7850] ref_tracker_dir_debugfs+0x14e/0x270 [ 120.221546][ T7850] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 120.221592][ T7850] ? trace_kmalloc+0x1f/0xd0 [ 120.221611][ T7850] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 120.221639][ T7850] ? __raw_spin_lock_init+0x45/0x100 [ 120.221664][ T7850] alloc_netdev_mqs+0x272/0x11b0 [ 120.221683][ T7850] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 120.221711][ T7850] rtnl_create_link+0x31f/0xd10 [ 120.221739][ T7850] rtnl_newlink_create+0x25c/0xb00 [ 120.221762][ T7850] ? __mutex_lock+0x5bb/0x1350 [ 120.221790][ T7850] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 120.221812][ T7850] ? __pfx___mutex_lock+0x10/0x10 [ 120.221845][ T7850] ? ns_capable+0x8a/0xf0 [ 120.221868][ T7850] rtnl_newlink+0x16e4/0x1c80 [ 120.221894][ T7850] ? ____sys_sendmsg+0x505/0x830 [ 120.221929][ T7850] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.221975][ T7850] ? kasan_quarantine_put+0xdd/0x220 [ 120.221997][ T7850] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.222025][ T7850] ? nlmon_xmit+0xb0/0x100 [ 120.222044][ T7850] ? kmem_cache_free+0x19b/0x690 [ 120.222076][ T7850] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.222098][ T7850] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.222121][ T7850] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.222139][ T7850] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 120.222161][ T7850] ? __dev_queue_xmit+0x284/0x3740 [ 120.222183][ T7850] ? __dev_queue_xmit+0x284/0x3740 [ 120.222202][ T7850] ? __dev_queue_xmit+0x1bfb/0x3740 [ 120.222230][ T7850] ? __lock_acquire+0xab9/0xd20 [ 120.222273][ T7850] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.222296][ T7850] rtnetlink_rcv_msg+0x7cf/0xb70 [ 120.222324][ T7850] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 120.222347][ T7850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.222368][ T7850] ? ref_tracker_free+0x63a/0x7d0 [ 120.222385][ T7850] ? __asan_memcpy+0x40/0x70 [ 120.222405][ T7850] ? __pfx_ref_tracker_free+0x10/0x10 [ 120.222433][ T7850] netlink_rcv_skb+0x208/0x470 [ 120.222452][ T7850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.222478][ T7850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.222505][ T7850] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.222527][ T7850] netlink_unicast+0x82f/0x9e0 [ 120.222557][ T7850] ? __pfx_netlink_unicast+0x10/0x10 [ 120.222580][ T7850] ? netlink_sendmsg+0x642/0xb30 [ 120.222592][ T7850] ? skb_put+0x11b/0x210 [ 120.222611][ T7850] netlink_sendmsg+0x805/0xb30 [ 120.222638][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.222658][ T7850] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.222683][ T7850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.222700][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.222718][ T7850] __sock_sendmsg+0x21c/0x270 [ 120.222742][ T7850] ____sys_sendmsg+0x505/0x830 [ 120.222763][ T7850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.222789][ T7850] ? import_iovec+0x74/0xa0 [ 120.222812][ T7850] ___sys_sendmsg+0x21f/0x2a0 [ 120.222831][ T7850] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.222886][ T7850] ? __fget_files+0x2a/0x420 [ 120.222901][ T7850] ? __fget_files+0x3a0/0x420 [ 120.222933][ T7850] __x64_sys_sendmsg+0x19b/0x260 [ 120.222953][ T7850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.222982][ T7850] ? __pfx_ksys_write+0x10/0x10 [ 120.223009][ T7850] ? do_syscall_64+0xbe/0xfa0 [ 120.223035][ T7850] do_syscall_64+0xfa/0xfa0 [ 120.223055][ T7850] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.223076][ T7850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.223092][ T7850] ? clear_bhb_loop+0x60/0xb0 [ 120.223113][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.223128][ T7850] RIP: 0033:0x7f545958f6c9 [ 120.223142][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.223154][ T7850] RSP: 002b:00007f54577f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.223172][ T7850] RAX: ffffffffffffffda RBX: 00007f54597e6090 RCX: 00007f545958f6c9 [ 120.223183][ T7850] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 120.223192][ T7850] RBP: 00007f54577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.223202][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.223211][ T7850] R13: 00007f54597e6128 R14: 00007f54597e6090 R15: 00007ffec0fa6588 [ 120.223240][ T7850] [ 120.748326][ T6105] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 120.758037][ T6105] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 120.814607][ T7850] debugfs: out of free dentries, can not create file 'netdev@ffff88807647c618' [ 120.894553][ T7859] FAULT_INJECTION: forcing a failure. [ 120.894553][ T7859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.926694][ T7849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.972035][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.0.765 Not tainted syzkaller #0 PREEMPT(full) [ 120.972062][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.972072][ T7859] Call Trace: [ 120.972078][ T7859] [ 120.972086][ T7859] dump_stack_lvl+0x189/0x250 [ 120.972113][ T7859] ? __pfx____ratelimit+0x10/0x10 [ 120.972137][ T7859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.972159][ T7859] ? __pfx__printk+0x10/0x10 [ 120.972177][ T7859] ? __might_fault+0xb0/0x130 [ 120.972209][ T7859] should_fail_ex+0x414/0x560 [ 120.972237][ T7859] _copy_from_user+0x2d/0xb0 [ 120.972259][ T7859] __sys_bpf+0x1e3/0x860 [ 120.972277][ T7859] ? __pfx___sys_bpf+0x10/0x10 [ 120.972307][ T7859] ? ksys_write+0x22a/0x250 [ 120.972331][ T7859] ? __pfx_ksys_write+0x10/0x10 [ 120.972359][ T7859] __x64_sys_bpf+0x7c/0x90 [ 120.972382][ T7859] do_syscall_64+0xfa/0xfa0 [ 120.972403][ T7859] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.972424][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.972440][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 120.972458][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.972473][ T7859] RIP: 0033:0x7fe08838f6c9 [ 120.972488][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.972500][ T7859] RSP: 002b:00007fe089175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.972516][ T7859] RAX: ffffffffffffffda RBX: 00007fe0885e5fa0 RCX: 00007fe08838f6c9 [ 120.972528][ T7859] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 120.972538][ T7859] RBP: 00007fe089175090 R08: 0000000000000000 R09: 0000000000000000 [ 120.972548][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.972556][ T7859] R13: 00007fe0885e6038 R14: 00007fe0885e5fa0 R15: 00007ffd7eec04b8 [ 120.972584][ T7859] [ 121.368135][ T7867] syzkaller0: entered promiscuous mode [ 121.396326][ T7867] syzkaller0: entered allmulticast mode [ 121.483327][ T7880] netlink: 44 bytes leftover after parsing attributes in process `syz.2.773'. [ 121.855214][ T7908] FAULT_INJECTION: forcing a failure. [ 121.855214][ T7908] name failslab, interval 1, probability 0, space 0, times 0 [ 121.885280][ T7888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.774'. [ 121.895518][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.3.780 Not tainted syzkaller #0 PREEMPT(full) [ 121.895548][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.895558][ T7908] Call Trace: [ 121.895564][ T7908] [ 121.895572][ T7908] dump_stack_lvl+0x189/0x250 [ 121.895598][ T7908] ? __pfx____ratelimit+0x10/0x10 [ 121.895620][ T7908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.895640][ T7908] ? __pfx__printk+0x10/0x10 [ 121.895662][ T7908] ? __lock_acquire+0xab9/0xd20 [ 121.895686][ T7908] should_fail_ex+0x414/0x560 [ 121.895715][ T7908] should_failslab+0xa8/0x100 [ 121.895733][ T7908] kmem_cache_alloc_noprof+0x74/0x6e0 [ 121.895755][ T7908] ? skb_clone+0x212/0x3a0 [ 121.895778][ T7908] skb_clone+0x212/0x3a0 [ 121.895799][ T7908] __netlink_deliver_tap+0x404/0x850 [ 121.895827][ T7908] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.895844][ T7908] netlink_deliver_tap+0x19c/0x1b0 [ 121.895862][ T7908] netlink_unicast+0x7fa/0x9e0 [ 121.895891][ T7908] ? __pfx_netlink_unicast+0x10/0x10 [ 121.895915][ T7908] ? netlink_sendmsg+0x642/0xb30 [ 121.895930][ T7908] ? skb_put+0x11b/0x210 [ 121.895949][ T7908] netlink_sendmsg+0x805/0xb30 [ 121.895975][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.895995][ T7908] ? aa_sock_msg_perm+0xf1/0x1d0 [ 121.896020][ T7908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.896036][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.896054][ T7908] __sock_sendmsg+0x21c/0x270 [ 121.896079][ T7908] ____sys_sendmsg+0x505/0x830 [ 121.896103][ T7908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.896129][ T7908] ? import_iovec+0x74/0xa0 [ 121.896154][ T7908] ___sys_sendmsg+0x21f/0x2a0 [ 121.896175][ T7908] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.896227][ T7908] ? __fget_files+0x2a/0x420 [ 121.896247][ T7908] ? __fget_files+0x3a0/0x420 [ 121.896273][ T7908] __x64_sys_sendmsg+0x19b/0x260 [ 121.896289][ T7908] ? __might_fault+0xb0/0x130 [ 121.896313][ T7908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.896342][ T7908] ? rcu_is_watching+0x15/0xb0 [ 121.896370][ T7908] do_syscall_64+0xfa/0xfa0 [ 121.896390][ T7908] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.896412][ T7908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.896429][ T7908] ? clear_bhb_loop+0x60/0xb0 [ 121.896449][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.896466][ T7908] RIP: 0033:0x7f9e4eb8f6c9 [ 121.896481][ T7908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.896494][ T7908] RSP: 002b:00007f9e4f990038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.896512][ T7908] RAX: ffffffffffffffda RBX: 00007f9e4ede5fa0 RCX: 00007f9e4eb8f6c9 [ 121.896524][ T7908] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 121.896535][ T7908] RBP: 00007f9e4f990090 R08: 0000000000000000 R09: 0000000000000000 [ 121.896553][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.896562][ T7908] R13: 00007f9e4ede6038 R14: 00007f9e4ede5fa0 R15: 00007ffeef5e2be8 [ 121.896590][ T7908] [ 121.896654][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 121.919564][ T7888] netlink: 43 bytes leftover after parsing attributes in process `syz.4.774'. [ 122.404973][ T7921] FAULT_INJECTION: forcing a failure. [ 122.404973][ T7921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.456232][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.1.788 Not tainted syzkaller #0 PREEMPT(full) [ 122.456261][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.456270][ T7921] Call Trace: [ 122.456277][ T7921] [ 122.456284][ T7921] dump_stack_lvl+0x189/0x250 [ 122.456310][ T7921] ? __pfx____ratelimit+0x10/0x10 [ 122.456332][ T7921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.456353][ T7921] ? __pfx__printk+0x10/0x10 [ 122.456382][ T7921] should_fail_ex+0x414/0x560 [ 122.456409][ T7921] _copy_to_user+0x31/0xb0 [ 122.456431][ T7921] simple_read_from_buffer+0xe1/0x170 [ 122.456459][ T7921] proc_fail_nth_read+0x1b3/0x220 [ 122.456482][ T7921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.456505][ T7921] ? rw_verify_area+0x2a6/0x4d0 [ 122.456526][ T7921] ? __lock_acquire+0xab9/0xd20 [ 122.456541][ T7921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.456562][ T7921] vfs_read+0x200/0xa30 [ 122.456582][ T7921] ? fdget_pos+0x247/0x320 [ 122.456602][ T7921] ? __pfx___mutex_lock+0x10/0x10 [ 122.456625][ T7921] ? __pfx_vfs_read+0x10/0x10 [ 122.456648][ T7921] ? __fget_files+0x2a/0x420 [ 122.456668][ T7921] ? __fget_files+0x3a0/0x420 [ 122.456681][ T7921] ? __fget_files+0x2a/0x420 [ 122.456705][ T7921] ksys_read+0x145/0x250 [ 122.456728][ T7921] ? __pfx_ksys_read+0x10/0x10 [ 122.456759][ T7921] ? do_syscall_64+0xbe/0xfa0 [ 122.456783][ T7921] do_syscall_64+0xfa/0xfa0 [ 122.456802][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.456823][ T7921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.456839][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 122.456860][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.456876][ T7921] RIP: 0033:0x7f9817b8e0dc [ 122.456890][ T7921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.456904][ T7921] RSP: 002b:00007f9818a25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.456922][ T7921] RAX: ffffffffffffffda RBX: 00007f9817de5fa0 RCX: 00007f9817b8e0dc [ 122.456934][ T7921] RDX: 000000000000000f RSI: 00007f9818a250a0 RDI: 0000000000000006 [ 122.456944][ T7921] RBP: 00007f9818a25090 R08: 0000000000000000 R09: 0000000000000000 [ 122.456955][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.456964][ T7921] R13: 00007f9817de6038 R14: 00007f9817de5fa0 R15: 00007ffe87430558 [ 122.456994][ T7921] [ 122.742865][ T7888] netlink: 'syz.4.774': attribute type 6 has an invalid length. [ 122.750529][ T7888] netlink: 43 bytes leftover after parsing attributes in process `syz.4.774'. [ 123.310745][ T7943] netlink: 'syz.2.794': attribute type 8 has an invalid length. [ 123.318675][ T7943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.794'. [ 123.506639][ T7964] netlink: 128 bytes leftover after parsing attributes in process `syz.0.802'. [ 123.531862][ T7964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 123.689617][ T7971] netlink: 'syz.2.807': attribute type 21 has an invalid length. [ 123.721832][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 123.731391][ T7971] netlink: 128 bytes leftover after parsing attributes in process `syz.2.807'. [ 123.802300][ T7971] netlink: 'syz.2.807': attribute type 5 has an invalid length. [ 123.825050][ T7971] netlink: 'syz.2.807': attribute type 6 has an invalid length. [ 123.835478][ T7971] netlink: 3 bytes leftover after parsing attributes in process `syz.2.807'. [ 123.850106][ T7981] netlink: 'syz.1.809': attribute type 13 has an invalid length. [ 123.893911][ T7981] netlink: 'syz.1.809': attribute type 17 has an invalid length. [ 123.934041][ T7971] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 123.948910][ T7971] bond3 (unregistering): Released all slaves [ 123.978554][ T7985] bridge_slave_1: left allmulticast mode [ 123.986305][ T7985] bridge_slave_1: left promiscuous mode [ 123.992170][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.032250][ T7985] bridge_slave_0: left allmulticast mode [ 124.044842][ T7985] bridge_slave_0: left promiscuous mode [ 124.057502][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.086143][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.228403][ T7981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.463400][ T8005] netlink: 'syz.4.819': attribute type 16 has an invalid length. [ 124.471214][ T8005] netlink: 'syz.4.819': attribute type 17 has an invalid length. [ 124.610802][ T8005] bridge0: port 3(bond0) entered disabled state [ 124.617528][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.625919][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.701150][ T8005] team_slave_0: left promiscuous mode [ 124.712571][ T8005] team_slave_1: left promiscuous mode [ 124.809759][ T8005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.826830][ T8005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.011889][ T8020] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 125.042242][ T8032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 125.118076][ T7886] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.157518][ T7886] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.302848][ T7886] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.505945][ T8055] FAULT_INJECTION: forcing a failure. [ 125.505945][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.533843][ T8055] CPU: 0 UID: 0 PID: 8055 Comm: syz.0.839 Not tainted syzkaller #0 PREEMPT(full) [ 125.533866][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.533876][ T8055] Call Trace: [ 125.533883][ T8055] [ 125.533890][ T8055] dump_stack_lvl+0x189/0x250 [ 125.533916][ T8055] ? __pfx____ratelimit+0x10/0x10 [ 125.533938][ T8055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.533959][ T8055] ? __pfx__printk+0x10/0x10 [ 125.533976][ T8055] ? __might_fault+0xb0/0x130 [ 125.534008][ T8055] should_fail_ex+0x414/0x560 [ 125.534036][ T8055] _copy_from_user+0x2d/0xb0 [ 125.534058][ T8055] __sys_sendto+0x25c/0x520 [ 125.534077][ T8055] ? __pfx___sys_sendto+0x10/0x10 [ 125.534091][ T8055] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 125.534125][ T8055] ? __fget_files+0x3a0/0x420 [ 125.534150][ T8055] ? ksys_write+0x22a/0x250 [ 125.534174][ T8055] ? __pfx_ksys_write+0x10/0x10 [ 125.534199][ T8055] __x64_sys_sendto+0xde/0x100 [ 125.534218][ T8055] do_syscall_64+0xfa/0xfa0 [ 125.534239][ T8055] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.534260][ T8055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.534277][ T8055] ? clear_bhb_loop+0x60/0xb0 [ 125.534296][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.534312][ T8055] RIP: 0033:0x7fe08838f6c9 [ 125.534327][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.534340][ T8055] RSP: 002b:00007fe089175038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 125.534358][ T8055] RAX: ffffffffffffffda RBX: 00007fe0885e5fa0 RCX: 00007fe08838f6c9 [ 125.534370][ T8055] RDX: 0000000000000014 RSI: 00002000000023c0 RDI: 0000000000000005 [ 125.534381][ T8055] RBP: 00007fe089175090 R08: 0000200000002400 R09: 0000000000000010 [ 125.534392][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.534402][ T8055] R13: 00007fe0885e6038 R14: 00007fe0885e5fa0 R15: 00007ffd7eec04b8 [ 125.534430][ T8055] [ 125.835763][ T7886] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.161339][ T8084] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 126.356575][ T8094] syzkaller0: entered promiscuous mode [ 126.362515][ T8094] syzkaller0: entered allmulticast mode [ 126.889396][ T8114] sctp: [Deprecated]: syz.1.862 (pid 8114) Use of int in max_burst socket option deprecated. [ 126.889396][ T8114] Use struct sctp_assoc_value instead [ 132.707169][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.713657][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.464160][ T56] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 60 seconds [ 138.475565][ T56] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 60 seconds [ 138.486663][ T56] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 60 seconds [ 138.497644][ T56] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 60 seconds [ 139.369102][ T5197] udevd[5197]: worker [5828] /devices/virtual/block/nbd0 is taking a long time [ 142.189938][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.213082][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.221854][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.230679][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.240217][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.275846][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 142.286383][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 142.295028][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 142.309155][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.318033][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.328416][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.336898][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 142.347729][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.355919][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.365743][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.552256][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 142.681469][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.688836][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.696107][ T8131] bridge_slave_0: entered allmulticast mode [ 142.703767][ T8131] bridge_slave_0: entered promiscuous mode [ 142.711604][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.719898][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.727706][ T8131] bridge_slave_1: entered allmulticast mode [ 142.735100][ T8131] bridge_slave_1: entered promiscuous mode [ 142.804231][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.849558][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.030128][ T8131] team0: Port device team_slave_0 added [ 143.056036][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 143.097971][ T8131] team0: Port device team_slave_1 added [ 143.210160][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 143.230017][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.252983][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.302953][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.330026][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 143.345683][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 143.354507][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 143.364630][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 143.374994][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 143.389655][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 143.402030][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 143.410742][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 143.419921][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 143.427257][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.427271][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.427293][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.435983][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 143.605698][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.613318][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.620464][ T8133] bridge_slave_0: entered allmulticast mode [ 143.629037][ T8133] bridge_slave_0: entered promiscuous mode [ 143.637686][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.645324][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.652479][ T8133] bridge_slave_1: entered allmulticast mode [ 143.660243][ T8133] bridge_slave_1: entered promiscuous mode [ 143.689676][ T8131] hsr_slave_0: entered promiscuous mode [ 143.696595][ T8131] hsr_slave_1: entered promiscuous mode [ 143.702594][ T8131] debugfs: 'hsr0' already exists in 'hsr' [ 143.708906][ T8131] Cannot create hsr debugfs directory [ 143.748096][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.755593][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.763592][ T8135] bridge_slave_0: entered allmulticast mode [ 143.770565][ T8135] bridge_slave_0: entered promiscuous mode [ 143.795200][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.822561][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.830221][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.838079][ T8135] bridge_slave_1: entered allmulticast mode [ 143.846134][ T8135] bridge_slave_1: entered promiscuous mode [ 143.869573][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.973751][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.987459][ T8133] team0: Port device team_slave_0 added [ 143.995966][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.039591][ T8133] team0: Port device team_slave_1 added [ 144.085424][ T8135] team0: Port device team_slave_0 added [ 144.126309][ T8135] team0: Port device team_slave_1 added [ 144.132618][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.139791][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.165866][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.181482][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.191206][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.217705][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.299552][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.306777][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.313025][ T5829] Bluetooth: hci5: command tx timeout [ 144.333810][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.352481][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.359876][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.386351][ T5829] Bluetooth: hci6: command tx timeout [ 144.386742][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.451749][ T8133] hsr_slave_0: entered promiscuous mode [ 144.458499][ T8133] hsr_slave_1: entered promiscuous mode [ 144.464618][ T5829] Bluetooth: hci7: command tx timeout [ 144.465988][ T8133] debugfs: 'hsr0' already exists in 'hsr' [ 144.476854][ T8133] Cannot create hsr debugfs directory [ 144.645070][ T8135] hsr_slave_0: entered promiscuous mode [ 144.651649][ T8135] hsr_slave_1: entered promiscuous mode [ 144.658557][ T8135] debugfs: 'hsr0' already exists in 'hsr' [ 144.664400][ T8135] Cannot create hsr debugfs directory [ 144.702617][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 144.819505][ T8154] chnl_net:caif_netlink_parms(): no params data found [ 144.987355][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.994760][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.002025][ T8151] bridge_slave_0: entered allmulticast mode [ 145.010435][ T8151] bridge_slave_0: entered promiscuous mode [ 145.062346][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.069820][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.077469][ T8151] bridge_slave_1: entered allmulticast mode [ 145.085074][ T8151] bridge_slave_1: entered promiscuous mode [ 145.176653][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.184348][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.191438][ T8154] bridge_slave_0: entered allmulticast mode [ 145.199076][ T8154] bridge_slave_0: entered promiscuous mode [ 145.219451][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.231999][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.243619][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.250743][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.258625][ T8154] bridge_slave_1: entered allmulticast mode [ 145.265835][ T8154] bridge_slave_1: entered promiscuous mode [ 145.345633][ T8151] team0: Port device team_slave_0 added [ 145.362358][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.374417][ T8151] team0: Port device team_slave_1 added [ 145.383940][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.423203][ T5829] Bluetooth: hci8: command tx timeout [ 145.459196][ T8154] team0: Port device team_slave_0 added [ 145.473975][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.480921][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.507806][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.520039][ T5829] Bluetooth: hci9: command tx timeout [ 145.523400][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.532517][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.559062][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.571857][ T8154] team0: Port device team_slave_1 added [ 145.619962][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.627418][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.653777][ T8154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.684772][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.691732][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.718379][ T8154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.759815][ T8151] hsr_slave_0: entered promiscuous mode [ 145.766391][ T8151] hsr_slave_1: entered promiscuous mode [ 145.772530][ T8151] debugfs: 'hsr0' already exists in 'hsr' [ 145.778990][ T8151] Cannot create hsr debugfs directory [ 145.835658][ T8154] hsr_slave_0: entered promiscuous mode [ 145.841900][ T8154] hsr_slave_1: entered promiscuous mode [ 145.848413][ T8154] debugfs: 'hsr0' already exists in 'hsr' [ 145.854818][ T8154] Cannot create hsr debugfs directory [ 146.382972][ T5829] Bluetooth: hci5: command tx timeout [ 146.463261][ T5829] Bluetooth: hci6: command tx timeout [ 146.542954][ T5829] Bluetooth: hci7: command tx timeout [ 147.502946][ T5829] Bluetooth: hci8: command tx timeout [ 147.592924][ T5829] Bluetooth: hci9: command tx timeout [ 148.463073][ T5829] Bluetooth: hci5: command tx timeout [ 148.543049][ T5829] Bluetooth: hci6: command tx timeout [ 148.623549][ T5829] Bluetooth: hci7: command tx timeout [ 149.582992][ T5829] Bluetooth: hci8: command tx timeout [ 149.662916][ T5829] Bluetooth: hci9: command tx timeout [ 150.542991][ T5829] Bluetooth: hci5: command tx timeout [ 150.623005][ T5829] Bluetooth: hci6: command tx timeout [ 150.702912][ T5829] Bluetooth: hci7: command tx timeout [ 151.662958][ T5829] Bluetooth: hci8: command tx timeout [ 151.743002][ T5829] Bluetooth: hci9: command tx timeout [ 168.544212][ T56] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 90 seconds [ 168.554899][ T56] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 90 seconds [ 168.566982][ T56] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 90 seconds [ 168.578111][ T56] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 90 seconds [ 191.102925][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 191.106379][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 191.115853][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 194.146751][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155031][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.633434][ T56] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 120 seconds [ 198.644615][ T56] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 120 seconds [ 198.655729][ T56] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 120 seconds [ 198.667879][ T56] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 120 seconds [ 202.772192][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 202.781395][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 202.790718][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 202.804016][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 202.811987][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 202.876548][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 202.889487][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 202.898059][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 202.906865][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 202.915972][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 202.959245][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 202.973506][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 202.981430][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 202.990050][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 202.998323][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 203.169634][ T8183] chnl_net:caif_netlink_parms(): no params data found [ 203.289364][ T8183] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.296738][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.304077][ T8183] bridge_slave_0: entered allmulticast mode [ 203.311161][ T8183] bridge_slave_0: entered promiscuous mode [ 203.352602][ T8183] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.360473][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.368163][ T8183] bridge_slave_1: entered allmulticast mode [ 203.377392][ T8183] bridge_slave_1: entered promiscuous mode [ 203.420367][ T8183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.435448][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 203.465449][ T8183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.666694][ T8183] team0: Port device team_slave_0 added [ 203.749784][ T8183] team0: Port device team_slave_1 added [ 203.824586][ T5840] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 203.835946][ T5840] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 203.844618][ T5840] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 203.865662][ T5840] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 203.876291][ T5840] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 203.940206][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 203.957688][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.964870][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.993673][ T8183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.006905][ T8183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.014138][ T8183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.041674][ T8183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.056462][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 204.063998][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.067485][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 204.071246][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.079632][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 204.086247][ T8185] bridge_slave_0: entered allmulticast mode [ 204.097123][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 204.101900][ T8185] bridge_slave_0: entered promiscuous mode [ 204.107683][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 204.115211][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.126205][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.136420][ T8185] bridge_slave_1: entered allmulticast mode [ 204.145664][ T8185] bridge_slave_1: entered promiscuous mode [ 204.226145][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.240590][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.340805][ T8183] hsr_slave_0: entered promiscuous mode [ 204.347204][ T8183] hsr_slave_1: entered promiscuous mode [ 204.354327][ T8183] debugfs: 'hsr0' already exists in 'hsr' [ 204.360052][ T8183] Cannot create hsr debugfs directory [ 204.417783][ T8185] team0: Port device team_slave_0 added [ 204.429291][ T8185] team0: Port device team_slave_1 added [ 204.436559][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.443945][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.451066][ T8187] bridge_slave_0: entered allmulticast mode [ 204.458368][ T8187] bridge_slave_0: entered promiscuous mode [ 204.470480][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.478117][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.486270][ T8187] bridge_slave_1: entered allmulticast mode [ 204.493933][ T8187] bridge_slave_1: entered promiscuous mode [ 204.604818][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.614967][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.621891][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.647951][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.682086][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.692244][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.699542][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.727242][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.813560][ T8187] team0: Port device team_slave_0 added [ 204.846963][ T8187] team0: Port device team_slave_1 added [ 204.863417][ T5840] Bluetooth: hci10: command tx timeout [ 204.909569][ T8185] hsr_slave_0: entered promiscuous mode [ 204.916219][ T8185] hsr_slave_1: entered promiscuous mode [ 204.922452][ T8185] debugfs: 'hsr0' already exists in 'hsr' [ 204.928259][ T8185] Cannot create hsr debugfs directory [ 204.946173][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.953556][ T5840] Bluetooth: hci11: command tx timeout [ 204.954639][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.986058][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.021120][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.028905][ T5840] Bluetooth: hci12: command tx timeout [ 205.035453][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.063036][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.293793][ T8187] hsr_slave_0: entered promiscuous mode [ 205.300477][ T8187] hsr_slave_1: entered promiscuous mode [ 205.307659][ T8187] debugfs: 'hsr0' already exists in 'hsr' [ 205.313798][ T8187] Cannot create hsr debugfs directory [ 205.352516][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 205.407616][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 205.675735][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.683514][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.690783][ T8206] bridge_slave_0: entered allmulticast mode [ 205.698269][ T8206] bridge_slave_0: entered promiscuous mode [ 205.705720][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.713117][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.720259][ T8208] bridge_slave_0: entered allmulticast mode [ 205.729253][ T8208] bridge_slave_0: entered promiscuous mode [ 205.764992][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.772328][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.781051][ T8206] bridge_slave_1: entered allmulticast mode [ 205.788214][ T8206] bridge_slave_1: entered promiscuous mode [ 205.795539][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.802673][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.810223][ T8208] bridge_slave_1: entered allmulticast mode [ 205.817962][ T8208] bridge_slave_1: entered promiscuous mode [ 205.884924][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.905566][ T5840] Bluetooth: hci13: command tx timeout [ 205.926807][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.939910][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.964112][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.003876][ T8208] team0: Port device team_slave_0 added [ 206.026353][ T8208] team0: Port device team_slave_1 added [ 206.045823][ T8206] team0: Port device team_slave_0 added [ 206.070496][ T8206] team0: Port device team_slave_1 added [ 206.078931][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.087875][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.114487][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.127422][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.134631][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.161836][ T5840] Bluetooth: hci14: command tx timeout [ 206.170010][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.213308][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.220259][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.247560][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.260491][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.268177][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.294277][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.360002][ T8208] hsr_slave_0: entered promiscuous mode [ 206.366867][ T8208] hsr_slave_1: entered promiscuous mode [ 206.374064][ T8208] debugfs: 'hsr0' already exists in 'hsr' [ 206.379799][ T8208] Cannot create hsr debugfs directory [ 206.475714][ T8206] hsr_slave_0: entered promiscuous mode [ 206.482009][ T8206] hsr_slave_1: entered promiscuous mode [ 206.489748][ T8206] debugfs: 'hsr0' already exists in 'hsr' [ 206.496874][ T8206] Cannot create hsr debugfs directory [ 206.943245][ T5840] Bluetooth: hci10: command tx timeout [ 207.023260][ T5840] Bluetooth: hci11: command tx timeout [ 207.113655][ T5840] Bluetooth: hci12: command tx timeout [ 207.982904][ T5840] Bluetooth: hci13: command tx timeout [ 208.223072][ T52] Bluetooth: hci14: command tx timeout [ 209.022980][ T52] Bluetooth: hci10: command tx timeout [ 209.102957][ T52] Bluetooth: hci11: command tx timeout [ 209.193161][ T52] Bluetooth: hci12: command tx timeout [ 210.062905][ T52] Bluetooth: hci13: command tx timeout [ 210.303067][ T52] Bluetooth: hci14: command tx timeout [ 211.102971][ T52] Bluetooth: hci10: command tx timeout [ 211.182905][ T52] Bluetooth: hci11: command tx timeout [ 211.263637][ T52] Bluetooth: hci12: command tx timeout [ 212.142924][ T52] Bluetooth: hci13: command tx timeout [ 212.383006][ T52] Bluetooth: hci14: command tx timeout [ 228.715529][ T56] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 150 seconds [ 228.726348][ T56] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 150 seconds [ 228.737645][ T56] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 150 seconds [ 228.748949][ T56] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 150 seconds [ 255.585899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.592274][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.481221][ T5197] udevd[5197]: worker [5828] /devices/virtual/block/nbd0 timeout; kill it [ 258.491709][ T5197] udevd[5197]: seq 11327 '/devices/virtual/block/nbd0' killed [ 258.783283][ T95] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 180 seconds [ 258.794161][ T95] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 180 seconds [ 258.805233][ T95] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 180 seconds [ 258.816265][ T95] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 180 seconds [ 263.395210][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 263.399907][ T5844] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 263.404610][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 263.413431][ T5844] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 263.418436][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 263.425548][ T5844] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 263.445437][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 263.447147][ T5844] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 263.453448][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 263.461163][ T5844] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 263.520697][ T5844] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 263.531016][ T5844] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 263.539764][ T5844] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 263.548116][ T5844] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 263.556177][ T5844] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 263.871115][ T8235] chnl_net:caif_netlink_parms(): no params data found [ 263.998305][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 264.076868][ T8238] chnl_net:caif_netlink_parms(): no params data found [ 264.144137][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.151264][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.173393][ T8235] bridge_slave_0: entered allmulticast mode [ 264.193026][ T8235] bridge_slave_0: entered promiscuous mode [ 264.214736][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.221872][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.243207][ T8235] bridge_slave_1: entered allmulticast mode [ 264.250958][ T8235] bridge_slave_1: entered promiscuous mode [ 264.490201][ T5829] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 264.494712][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.509897][ T5840] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 264.517420][ T52] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 264.527062][ T52] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 264.527101][ T5840] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 264.537167][ T52] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 264.554906][ T5840] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 264.555166][ T52] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 264.563517][ T5840] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 264.571504][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.580061][ T52] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 264.596979][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.605317][ T8234] bridge_slave_0: entered allmulticast mode [ 264.616259][ T8234] bridge_slave_0: entered promiscuous mode [ 264.629721][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.660708][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.668129][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.675822][ T8234] bridge_slave_1: entered allmulticast mode [ 264.683162][ T8234] bridge_slave_1: entered promiscuous mode [ 264.752374][ T8235] team0: Port device team_slave_0 added [ 264.758691][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.766122][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.773590][ T8238] bridge_slave_0: entered allmulticast mode [ 264.780557][ T8238] bridge_slave_0: entered promiscuous mode [ 264.789656][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.799553][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.807873][ T8238] bridge_slave_1: entered allmulticast mode [ 264.816071][ T8238] bridge_slave_1: entered promiscuous mode [ 264.845914][ T8235] team0: Port device team_slave_1 added [ 264.901367][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.913644][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.940921][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.948284][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.975106][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.991548][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.998920][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.025858][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.039975][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.090178][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.126183][ T8234] team0: Port device team_slave_0 added [ 265.154836][ T8238] team0: Port device team_slave_0 added [ 265.172489][ T8234] team0: Port device team_slave_1 added [ 265.194072][ T8238] team0: Port device team_slave_1 added [ 265.269399][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.276816][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.303717][ T8234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.348054][ T8234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.355459][ T8234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.381459][ T8234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.398721][ T8235] hsr_slave_0: entered promiscuous mode [ 265.405235][ T8235] hsr_slave_1: entered promiscuous mode [ 265.411321][ T8235] debugfs: 'hsr0' already exists in 'hsr' [ 265.417647][ T8235] Cannot create hsr debugfs directory [ 265.425852][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.434611][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.460885][ T8238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.503279][ T5829] Bluetooth: hci16: command tx timeout [ 265.504134][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.509549][ T5844] Bluetooth: hci15: command tx timeout [ 265.517614][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.549071][ T8238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.583168][ T5844] Bluetooth: hci17: command tx timeout [ 265.681759][ T8234] hsr_slave_0: entered promiscuous mode [ 265.689176][ T8234] hsr_slave_1: entered promiscuous mode [ 265.695667][ T8234] debugfs: 'hsr0' already exists in 'hsr' [ 265.701388][ T8234] Cannot create hsr debugfs directory [ 265.741230][ T8238] hsr_slave_0: entered promiscuous mode [ 265.748540][ T8238] hsr_slave_1: entered promiscuous mode [ 265.754989][ T8238] debugfs: 'hsr0' already exists in 'hsr' [ 265.760708][ T8238] Cannot create hsr debugfs directory [ 266.022657][ T8258] chnl_net:caif_netlink_parms(): no params data found [ 266.044304][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 266.320732][ T8258] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.328542][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.335953][ T8258] bridge_slave_0: entered allmulticast mode [ 266.343356][ T8258] bridge_slave_0: entered promiscuous mode [ 266.368979][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.376182][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.384340][ T8259] bridge_slave_0: entered allmulticast mode [ 266.391956][ T8259] bridge_slave_0: entered promiscuous mode [ 266.400368][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.407962][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.416044][ T8259] bridge_slave_1: entered allmulticast mode [ 266.423585][ T8259] bridge_slave_1: entered promiscuous mode [ 266.430984][ T8258] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.438208][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.445810][ T8258] bridge_slave_1: entered allmulticast mode [ 266.454607][ T8258] bridge_slave_1: entered promiscuous mode [ 266.532497][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.547445][ T8258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.561421][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.585644][ T8258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.623833][ T8268] Bluetooth: hci18: command tx timeout [ 266.629751][ T5841] Bluetooth: hci19: command tx timeout [ 266.641879][ T8259] team0: Port device team_slave_0 added [ 266.661974][ T8258] team0: Port device team_slave_0 added [ 266.669833][ T8259] team0: Port device team_slave_1 added [ 266.695811][ T8258] team0: Port device team_slave_1 added [ 266.740116][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.747808][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.775292][ T8259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.788884][ T8259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.797520][ T8259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.824230][ T8259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.836222][ T8258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.843783][ T8258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.871268][ T8258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.892443][ T8258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.899556][ T8258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.925635][ T8258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.023014][ T8258] hsr_slave_0: entered promiscuous mode [ 267.029694][ T8258] hsr_slave_1: entered promiscuous mode [ 267.036979][ T8258] debugfs: 'hsr0' already exists in 'hsr' [ 267.042815][ T8258] Cannot create hsr debugfs directory [ 267.054133][ T8259] hsr_slave_0: entered promiscuous mode [ 267.060485][ T8259] hsr_slave_1: entered promiscuous mode [ 267.068453][ T8259] debugfs: 'hsr0' already exists in 'hsr' [ 267.074798][ T8259] Cannot create hsr debugfs directory [ 267.584566][ T5841] Bluetooth: hci15: command tx timeout [ 267.584706][ T8268] Bluetooth: hci16: command tx timeout [ 267.663102][ T8268] Bluetooth: hci17: command tx timeout [ 267.903140][ T8268] Bluetooth: hci5: command 0x0406 tx timeout [ 267.905040][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 267.910598][ T8268] Bluetooth: hci7: command 0x0406 tx timeout [ 267.916092][ T5841] Bluetooth: hci8: command 0x0406 tx timeout [ 267.922348][ T8268] Bluetooth: hci9: command 0x0406 tx timeout [ 268.703111][ T5840] Bluetooth: hci19: command tx timeout [ 268.707019][ T5844] Bluetooth: hci18: command tx timeout [ 269.663011][ T5840] Bluetooth: hci16: command tx timeout [ 269.665424][ T5844] Bluetooth: hci15: command tx timeout [ 269.742960][ T5844] Bluetooth: hci17: command tx timeout [ 270.783154][ T5844] Bluetooth: hci18: command tx timeout [ 270.783203][ T5840] Bluetooth: hci19: command tx timeout [ 271.743092][ T5840] Bluetooth: hci15: command tx timeout [ 271.752953][ T5840] Bluetooth: hci16: command tx timeout [ 271.823150][ T5840] Bluetooth: hci17: command tx timeout [ 272.863315][ T5840] Bluetooth: hci18: command tx timeout [ 272.872957][ T5840] Bluetooth: hci19: command tx timeout [ 288.223419][ T31] INFO: task syz.4.850:8083 blocked for more than 143 seconds. [ 288.231040][ T31] Not tainted syzkaller #0 [ 288.236101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.244904][ T31] task:syz.4.850 state:D stack:26024 pid:8083 tgid:8082 ppid:5836 task_flags:0x480140 flags:0x00080002 [ 288.256896][ T31] Call Trace: [ 288.260161][ T31] [ 288.264388][ T31] __schedule+0x1798/0x4cc0 [ 288.269001][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.273995][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.278970][ T31] ? __pfx___schedule+0x10/0x10 [ 288.284180][ T31] ? schedule+0x91/0x360 [ 288.288449][ T31] schedule+0x165/0x360 [ 288.292618][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 288.298445][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 288.305330][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 288.311415][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 288.317561][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 288.324187][ T31] nbd_set_size+0x47e/0x6a0 [ 288.328704][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 288.362870][ T31] ? nla_memcpy+0x5b/0xc0 [ 288.370540][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 288.375629][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 288.381104][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 288.387801][ T31] ? bpf_lsm_capable+0x9/0x20 [ 288.392492][ T31] ? security_capable+0x7e/0x2e0 [ 288.397550][ T31] ? radix_tree_lookup+0x240/0x290 [ 288.402730][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 288.408023][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 288.414011][ T31] ? rcu_is_watching+0x15/0xb0 [ 288.418791][ T31] ? __nla_parse+0x40/0x60 [ 288.423446][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 288.429788][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 288.435545][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 288.441626][ T31] ? stack_trace_save+0x9c/0xe0 [ 288.446513][ T31] genl_rcv_msg+0x60e/0x790 [ 288.451027][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.456640][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 288.462393][ T31] netlink_rcv_skb+0x208/0x470 [ 288.468048][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.473347][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.478375][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.483816][ T31] ? down_read+0x1ad/0x2e0 [ 288.488233][ T31] genl_rcv+0x28/0x40 [ 288.492200][ T31] netlink_unicast+0x82f/0x9e0 [ 288.497058][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 288.502350][ T31] ? netlink_sendmsg+0x642/0xb30 [ 288.507354][ T31] ? skb_put+0x11b/0x210 [ 288.511594][ T31] netlink_sendmsg+0x805/0xb30 [ 288.516444][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.521724][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 288.526735][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.532024][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.537592][ T31] __sock_sendmsg+0x21c/0x270 [ 288.542282][ T31] ____sys_sendmsg+0x505/0x830 [ 288.547387][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.552764][ T31] ? import_iovec+0x74/0xa0 [ 288.557266][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 288.561922][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.567860][ T31] ? __fget_files+0x2a/0x420 [ 288.573401][ T31] ? __fget_files+0x3a0/0x420 [ 288.578091][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 288.583184][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.588902][ T31] ? do_syscall_64+0xbe/0xfa0 [ 288.593867][ T31] do_syscall_64+0xfa/0xfa0 [ 288.598379][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.603693][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.609761][ T31] ? clear_bhb_loop+0x60/0xb0 [ 288.614527][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.620415][ T31] RIP: 0033:0x7f545958f6c9 [ 288.625202][ T31] RSP: 002b:00007f545a348038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.633770][ T31] RAX: ffffffffffffffda RBX: 00007f54597e5fa0 RCX: 00007f545958f6c9 [ 288.641736][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 288.649796][ T31] RBP: 00007f5459611f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.657829][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.665853][ T31] R13: 00007f54597e6038 R14: 00007f54597e5fa0 R15: 00007ffec0fa6588 [ 288.674770][ T31] [ 288.677808][ T31] INFO: task syz.0.854:8094 blocked for more than 143 seconds. [ 288.685544][ T31] Not tainted syzkaller #0 [ 288.690476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.699202][ T31] task:syz.0.854 state:D stack:26056 pid:8094 tgid:8093 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 288.711283][ T31] Call Trace: [ 288.715017][ T31] [ 288.717963][ T31] __schedule+0x1798/0x4cc0 [ 288.722485][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.727552][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.732406][ T31] ? __pfx___schedule+0x10/0x10 [ 288.737532][ T31] ? schedule+0x91/0x360 [ 288.741778][ T31] schedule+0x165/0x360 [ 288.745992][ T31] schedule_preempt_disabled+0x13/0x30 [ 288.751452][ T31] __mutex_lock+0x7e6/0x1350 [ 288.756282][ T31] ? __mutex_lock+0x5bb/0x1350 [ 288.761053][ T31] ? genl_rcv_msg+0x10d/0x790 [ 288.765790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 288.770822][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 288.777294][ T31] ? radix_tree_lookup+0x240/0x290 [ 288.782448][ T31] genl_rcv_msg+0x10d/0x790 [ 288.787674][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.792830][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 288.797862][ T31] ? __asan_memcpy+0x40/0x70 [ 288.802434][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 288.807892][ T31] netlink_rcv_skb+0x208/0x470 [ 288.812653][ T31] ? __lock_acquire+0xab9/0xd20 [ 288.817643][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.823045][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.828346][ T31] ? down_read+0x1ad/0x2e0 [ 288.833155][ T31] genl_rcv+0x28/0x40 [ 288.837152][ T31] netlink_unicast+0x82f/0x9e0 [ 288.841928][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 288.847315][ T31] ? netlink_sendmsg+0x642/0xb30 [ 288.852250][ T31] ? skb_put+0x11b/0x210 [ 288.856838][ T31] netlink_sendmsg+0x805/0xb30 [ 288.861616][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.867397][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 288.870076][ T95] block nbd0: Possible stuck request ffff888024b00000: control (read@0,1024B). Runtime 210 seconds [ 288.872351][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.883854][ T95] block nbd0: Possible stuck request ffff888024b001c0: control (read@1024,1024B). Runtime 210 seconds [ 288.883883][ T95] block nbd0: Possible stuck request ffff888024b00380: control (read@2048,1024B). Runtime 210 seconds [ 288.883906][ T95] block nbd0: Possible stuck request ffff888024b00540: control (read@3072,1024B). Runtime 210 seconds [ 288.922646][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.928195][ T31] __sock_sendmsg+0x21c/0x270 [ 288.933047][ T31] __sys_sendto+0x3bd/0x520 [ 288.937576][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 288.942591][ T31] ? count_memcg_event_mm+0x21/0x260 [ 288.948396][ T31] ? exc_page_fault+0x82/0x100 [ 288.953250][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 288.958548][ T31] __x64_sys_sendto+0xde/0x100 [ 288.963496][ T31] do_syscall_64+0xfa/0xfa0 [ 288.968014][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.973305][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.980509][ T31] ? clear_bhb_loop+0x60/0xb0 [ 288.985473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.991372][ T31] RIP: 0033:0x7fe08839155c [ 288.995916][ T31] RSP: 002b:00007fe089173ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 289.004557][ T31] RAX: ffffffffffffffda RBX: 00007fe089173fc0 RCX: 00007fe08839155c [ 289.012529][ T31] RDX: 0000000000000020 RSI: 00007fe089174010 RDI: 000000000000000a [ 289.020595][ T31] RBP: 0000000000000000 R08: 00007fe089173f14 R09: 000000000000000c [ 289.028629][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 289.036676][ T31] R13: 00007fe089173f68 R14: 00007fe089174010 R15: 0000000000000000 [ 289.044847][ T31] [ 289.047860][ T31] INFO: task syz.2.859:8105 blocked for more than 144 seconds. [ 289.058718][ T31] Not tainted syzkaller #0 [ 289.063800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.072459][ T31] task:syz.2.859 state:D stack:28264 pid:8105 tgid:8104 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 289.085459][ T31] Call Trace: [ 289.089008][ T31] [ 289.091921][ T31] __schedule+0x1798/0x4cc0 [ 289.096542][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.101393][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.106583][ T31] ? __pfx___schedule+0x10/0x10 [ 289.111448][ T31] ? schedule+0x91/0x360 [ 289.115808][ T31] schedule+0x165/0x360 [ 289.119967][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.125496][ T31] __mutex_lock+0x7e6/0x1350 [ 289.130090][ T31] ? __mutex_lock+0x5bb/0x1350 [ 289.134916][ T31] ? genl_rcv_msg+0x10d/0x790 [ 289.139596][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.144698][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 289.150068][ T31] ? radix_tree_lookup+0x240/0x290 [ 289.155458][ T31] genl_rcv_msg+0x10d/0x790 [ 289.159968][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.165068][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 289.170086][ T31] ? __asan_memcpy+0x40/0x70 [ 289.174806][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.180179][ T31] netlink_rcv_skb+0x208/0x470 [ 289.186375][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.191237][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.196376][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.201716][ T31] ? down_read+0x1ad/0x2e0 [ 289.206263][ T31] genl_rcv+0x28/0x40 [ 289.210250][ T31] netlink_unicast+0x82f/0x9e0 [ 289.215114][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 289.220410][ T31] ? netlink_sendmsg+0x642/0xb30 [ 289.225441][ T31] ? skb_put+0x11b/0x210 [ 289.229680][ T31] netlink_sendmsg+0x805/0xb30 [ 289.234498][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.239785][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.244804][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.250081][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.255458][ T31] __sock_sendmsg+0x21c/0x270 [ 289.260137][ T31] __sys_sendto+0x3bd/0x520 [ 289.264957][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 289.269978][ T31] ? count_memcg_event_mm+0x21/0x260 [ 289.275397][ T31] ? exc_page_fault+0x82/0x100 [ 289.280179][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 289.286565][ T31] __x64_sys_sendto+0xde/0x100 [ 289.291336][ T31] do_syscall_64+0xfa/0xfa0 [ 289.295916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.301122][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.307288][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.311965][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.317923][ T31] RIP: 0033:0x7f9cdc19155c [ 289.322330][ T31] RSP: 002b:00007f9cdd0eaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 289.330824][ T31] RAX: ffffffffffffffda RBX: 00007f9cdd0eafc0 RCX: 00007f9cdc19155c [ 289.338900][ T31] RDX: 0000000000000020 RSI: 00007f9cdd0eb010 RDI: 0000000000000005 [ 289.347407][ T31] RBP: 0000000000000000 R08: 00007f9cdd0eaf14 R09: 000000000000000c [ 289.355513][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 289.363687][ T31] R13: 00007f9cdd0eaf68 R14: 00007f9cdd0eb010 R15: 0000000000000000 [ 289.371681][ T31] [ 289.375117][ T31] INFO: task syz.1.864:8116 blocked for more than 144 seconds. [ 289.390175][ T31] Not tainted syzkaller #0 [ 289.395556][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.404300][ T31] task:syz.1.864 state:D stack:26088 pid:8116 tgid:8115 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 289.416620][ T31] Call Trace: [ 289.419898][ T31] [ 289.423137][ T31] __schedule+0x1798/0x4cc0 [ 289.427653][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.432493][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.437596][ T31] ? __pfx___schedule+0x10/0x10 [ 289.442461][ T31] ? schedule+0x91/0x360 [ 289.446910][ T31] schedule+0x165/0x360 [ 289.451072][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.456793][ T31] __mutex_lock+0x7e6/0x1350 [ 289.461389][ T31] ? __mutex_lock+0x5bb/0x1350 [ 289.466231][ T31] ? genl_rcv_msg+0x10d/0x790 [ 289.470908][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.476561][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 289.481940][ T31] ? radix_tree_lookup+0x240/0x290 [ 289.487483][ T31] genl_rcv_msg+0x10d/0x790 [ 289.493072][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.498480][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 289.504004][ T31] ? __asan_memcpy+0x40/0x70 [ 289.508611][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.514281][ T31] netlink_rcv_skb+0x208/0x470 [ 289.519043][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.523966][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.528991][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.534432][ T31] ? down_read+0x1ad/0x2e0 [ 289.538850][ T31] genl_rcv+0x28/0x40 [ 289.542864][ T31] netlink_unicast+0x82f/0x9e0 [ 289.547636][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 289.553045][ T31] ? netlink_sendmsg+0x642/0xb30 [ 289.557988][ T31] ? skb_put+0x11b/0x210 [ 289.562217][ T31] netlink_sendmsg+0x805/0xb30 [ 289.567301][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.572592][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.577692][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.583442][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.588736][ T31] __sock_sendmsg+0x21c/0x270 [ 289.594477][ T31] __sys_sendto+0x3bd/0x520 [ 289.598989][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 289.604102][ T31] ? count_memcg_event_mm+0x21/0x260 [ 289.609413][ T31] ? exc_page_fault+0x82/0x100 [ 289.614453][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 289.619758][ T31] __x64_sys_sendto+0xde/0x100 [ 289.624612][ T31] do_syscall_64+0xfa/0xfa0 [ 289.629115][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.634452][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.640515][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.645246][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.651154][ T31] RIP: 0033:0x7f9817b9155c [ 289.655716][ T31] RSP: 002b:00007f9818a23ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 289.664912][ T31] RAX: ffffffffffffffda RBX: 00007f9818a23fc0 RCX: 00007f9817b9155c [ 289.672971][ T31] RDX: 0000000000000020 RSI: 00007f9818a24010 RDI: 0000000000000005 [ 289.680938][ T31] RBP: 0000000000000000 R08: 00007f9818a23f14 R09: 000000000000000c [ 289.688969][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 289.698111][ T31] R13: 00007f9818a23f68 R14: 00007f9818a24010 R15: 0000000000000000 [ 289.706431][ T31] [ 289.709462][ T31] INFO: task syz.3.866:8123 blocked for more than 144 seconds. [ 289.717433][ T31] Not tainted syzkaller #0 [ 289.722381][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.731157][ T31] task:syz.3.866 state:D stack:26088 pid:8123 tgid:8122 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 289.743433][ T31] Call Trace: [ 289.746718][ T31] [ 289.749658][ T31] __schedule+0x1798/0x4cc0 [ 289.754376][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.759240][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.764206][ T31] ? __pfx___schedule+0x10/0x10 [ 289.769067][ T31] ? schedule+0x91/0x360 [ 289.773528][ T31] schedule+0x165/0x360 [ 289.777692][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.783224][ T31] __mutex_lock+0x7e6/0x1350 [ 289.787819][ T31] ? __mutex_lock+0x5bb/0x1350 [ 289.792564][ T31] ? genl_rcv_msg+0x10d/0x790 [ 289.797336][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.803342][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 289.808724][ T31] ? radix_tree_lookup+0x240/0x290 [ 289.814163][ T31] genl_rcv_msg+0x10d/0x790 [ 289.818674][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.823997][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 289.829021][ T31] ? __asan_memcpy+0x40/0x70 [ 289.833703][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.839074][ T31] netlink_rcv_skb+0x208/0x470 [ 289.843951][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.848798][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.853909][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.859199][ T31] ? down_read+0x1ad/0x2e0 [ 289.863698][ T31] genl_rcv+0x28/0x40 [ 289.867678][ T31] netlink_unicast+0x82f/0x9e0 [ 289.872428][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 289.877788][ T31] ? netlink_sendmsg+0x642/0xb30 [ 289.882836][ T31] ? skb_put+0x11b/0x210 [ 289.887103][ T31] netlink_sendmsg+0x805/0xb30 [ 289.891881][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.897278][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.902838][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.908131][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.914464][ T31] __sock_sendmsg+0x21c/0x270 [ 289.919151][ T31] ____sys_sendmsg+0x505/0x830 [ 289.924064][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.929361][ T31] ? import_iovec+0x74/0xa0 [ 289.933934][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 289.938608][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.943861][ T31] ? __fget_files+0x2a/0x420 [ 289.948442][ T31] ? __fget_files+0x3a0/0x420 [ 289.953236][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 289.958177][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.963706][ T31] ? do_syscall_64+0xbe/0xfa0 [ 289.968385][ T31] do_syscall_64+0xfa/0xfa0 [ 289.972950][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.978151][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.985368][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.990052][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.996020][ T31] RIP: 0033:0x7f9e4eb8f6c9 [ 290.000429][ T31] RSP: 002b:00007f9e4f990038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.009935][ T31] RAX: ffffffffffffffda RBX: 00007f9e4ede5fa0 RCX: 00007f9e4eb8f6c9 [ 290.018060][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 290.026119][ T31] RBP: 00007f9e4ec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.034325][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.042290][ T31] R13: 00007f9e4ede6038 R14: 00007f9e4ede5fa0 R15: 00007ffeef5e2be8 [ 290.050313][ T31] [ 290.053380][ T31] INFO: task syz.3.866:8124 blocked for more than 145 seconds. [ 290.060908][ T31] Not tainted syzkaller #0 [ 290.066009][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.074853][ T31] task:syz.3.866 state:D stack:24480 pid:8124 tgid:8122 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 290.086872][ T31] Call Trace: [ 290.090145][ T31] [ 290.093133][ T31] __schedule+0x1798/0x4cc0 [ 290.097645][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.102475][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.108331][ T31] ? __pfx___schedule+0x10/0x10 [ 290.113360][ T31] ? schedule+0x91/0x360 [ 290.117605][ T31] schedule+0x165/0x360 [ 290.121741][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.127249][ T31] __mutex_lock+0x7e6/0x1350 [ 290.131843][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.136666][ T31] ? genl_rcv_msg+0x10d/0x790 [ 290.141345][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.146695][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 290.152071][ T31] ? radix_tree_lookup+0x240/0x290 [ 290.157328][ T31] genl_rcv_msg+0x10d/0x790 [ 290.161843][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.166962][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 290.171985][ T31] ? __asan_memcpy+0x40/0x70 [ 290.176622][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 290.181976][ T31] netlink_rcv_skb+0x208/0x470 [ 290.186793][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.191644][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.196747][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.202040][ T31] ? down_read+0x1ad/0x2e0 [ 290.206503][ T31] genl_rcv+0x28/0x40 [ 290.211210][ T31] netlink_unicast+0x82f/0x9e0 [ 290.216074][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 290.221364][ T31] ? netlink_sendmsg+0x642/0xb30 [ 290.226555][ T31] ? skb_put+0x11b/0x210 [ 290.230797][ T31] netlink_sendmsg+0x805/0xb30 [ 290.235656][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.240939][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.245928][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.251205][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.256715][ T31] __sock_sendmsg+0x21c/0x270 [ 290.261397][ T31] __sys_sendto+0x3bd/0x520 [ 290.265983][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 290.271001][ T31] ? count_memcg_event_mm+0x21/0x260 [ 290.276362][ T31] ? exc_page_fault+0x82/0x100 [ 290.281128][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 290.286500][ T31] __x64_sys_sendto+0xde/0x100 [ 290.291266][ T31] do_syscall_64+0xfa/0xfa0 [ 290.295868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.301079][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.307247][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.312651][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.318668][ T31] RIP: 0033:0x7f9e4eb9155c [ 290.323146][ T31] RSP: 002b:00007f9e4f96dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 290.331538][ T31] RAX: ffffffffffffffda RBX: 00007f9e4f96dfc0 RCX: 00007f9e4eb9155c [ 290.339572][ T31] RDX: 0000000000000020 RSI: 00007f9e4f96e010 RDI: 000000000000000c [ 290.347585][ T31] RBP: 0000000000000000 R08: 00007f9e4f96df14 R09: 000000000000000c [ 290.355608][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 290.363870][ T31] R13: 00007f9e4f96df68 R14: 00007f9e4f96e010 R15: 0000000000000000 [ 290.371849][ T31] [ 290.375001][ T31] [ 290.375001][ T31] Showing all locks held in the system: [ 290.383208][ T31] 1 lock held by khungtaskd/31: [ 290.388055][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.398069][ T31] 2 locks held by getty/5598: [ 290.402877][ T31] #0: ffff88814dd800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.413813][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 290.424272][ T31] 1 lock held by udevd/5828: [ 290.428850][ T31] #0: ffff8881437a0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 290.438139][ T31] 6 locks held by syz.4.850/8083: [ 290.443259][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.451427][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.460459][ T31] #2: ffff888024a63270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 290.470983][ T31] #3: ffff888024a0a478 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 290.480719][ T31] #4: ffff888024a09e18 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 290.492920][ T31] #5: ffff888024a09e50 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 290.505335][ T31] 2 locks held by syz.0.854/8094: [ 290.510344][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.519499][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.528603][ T31] 2 locks held by syz.2.859/8105: [ 290.533746][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.541942][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.551135][ T31] 2 locks held by syz.1.864/8116: [ 290.556255][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.564564][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.573655][ T31] 2 locks held by syz.3.866/8123: [ 290.578676][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.587213][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.596296][ T31] 2 locks held by syz.3.866/8124: [ 290.601294][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.609543][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.619406][ T31] 2 locks held by syz-executor/8131: [ 290.625028][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.633307][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.642294][ T31] 2 locks held by syz-executor/8133: [ 290.647648][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.655910][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.664922][ T31] 2 locks held by syz-executor/8135: [ 290.670192][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.678417][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.687427][ T31] 2 locks held by syz-executor/8151: [ 290.692890][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.701090][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.710646][ T31] 2 locks held by syz-executor/8154: [ 290.716242][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.725517][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.734611][ T31] 2 locks held by syz-executor/8183: [ 290.739892][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.748136][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.757171][ T31] 2 locks held by syz-executor/8185: [ 290.762432][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.770675][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.781060][ T31] 2 locks held by syz-executor/8187: [ 290.786485][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.794752][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.803917][ T31] 2 locks held by syz-executor/8206: [ 290.809198][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.817452][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.827615][ T31] 2 locks held by syz-executor/8208: [ 290.832986][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.841183][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.850203][ T31] 2 locks held by syz-executor/8234: [ 290.855544][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.863798][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.872871][ T31] 2 locks held by syz-executor/8235: [ 290.878146][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.886376][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.895423][ T31] 2 locks held by syz-executor/8238: [ 290.900688][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.908932][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.918106][ T31] 2 locks held by syz-executor/8258: [ 290.923474][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.932423][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.941655][ T31] 2 locks held by syz-executor/8259: [ 290.947234][ T31] #0: ffffffff8f3315f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.955557][ T31] #1: ffffffff8f331408 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.964648][ T31] [ 290.966965][ T31] ============================================= [ 290.966965][ T31] [ 290.975575][ T31] NMI backtrace for cpu 1 [ 290.975590][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 290.975607][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.975616][ T31] Call Trace: [ 290.975622][ T31] [ 290.975629][ T31] dump_stack_lvl+0x189/0x250 [ 290.975654][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.975674][ T31] ? __pfx__printk+0x10/0x10 [ 290.975701][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.975722][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.975740][ T31] ? __pfx__printk+0x10/0x10 [ 290.975758][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.975783][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.975803][ T31] watchdog+0xf60/0xfa0 [ 290.975823][ T31] ? watchdog+0x1e2/0xfa0 [ 290.975845][ T31] kthread+0x711/0x8a0 [ 290.975869][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.975885][ T31] ? __pfx_kthread+0x10/0x10 [ 290.975907][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.975927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.975946][ T31] ? __pfx_kthread+0x10/0x10 [ 290.975967][ T31] ret_from_fork+0x4bc/0x870 [ 290.975988][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.976012][ T31] ? __switch_to_asm+0x39/0x70 [ 290.976025][ T31] ? __switch_to_asm+0x33/0x70 [ 290.976037][ T31] ? __pfx_kthread+0x10/0x10 [ 290.976058][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.976095][ T31] [ 290.976102][ T31] Sending NMI from CPU 1 to CPUs 0: [ 291.121879][ C0] NMI backtrace for cpu 0 [ 291.121894][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 291.121911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.121921][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 291.121945][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 291.121959][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 291.121974][ C0] RAX: 70a4f14e08400000 RBX: ffffffff81967be7 RCX: 70a4f14e08400000 [ 291.121986][ C0] RDX: 0000000000000001 RSI: ffffffff8d70db46 RDI: ffffffff8bbf05e0 [ 291.121997][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 291.122008][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd870 [ 291.122020][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 291.122031][ C0] FS: 0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000 [ 291.122044][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.122054][ C0] CR2: 00007f027b917d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 291.122068][ C0] Call Trace: [ 291.122074][ C0] [ 291.122080][ C0] default_idle+0x13/0x20 [ 291.122094][ C0] default_idle_call+0x73/0xb0 [ 291.122108][ C0] do_idle+0x1e7/0x510 [ 291.122128][ C0] ? __pfx_do_idle+0x10/0x10 [ 291.122143][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.122162][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 291.122181][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.122202][ C0] cpu_startup_entry+0x44/0x60 [ 291.122217][ C0] rest_init+0x2de/0x300 [ 291.122233][ C0] start_kernel+0x3ae/0x410 [ 291.122256][ C0] x86_64_start_reservations+0x24/0x30 [ 291.122273][ C0] x86_64_start_kernel+0x143/0x1c0 [ 291.122290][ C0] common_startup_64+0x13e/0x147 [ 291.122317][ C0]