last executing test programs: 18.179568235s ago: executing program 0 (id=2223): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x400080, &(0x7f0000000040)={@align=0x5, {0x5, 0x7, 0x3, 0x7}}, 0x100, &(0x7f0000000080), &(0x7f00000000c0)=0x5}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x8a, 0x0, 0x0) 18.114167119s ago: executing program 3 (id=2224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf250200000006000a004e23000014000900fc02000000000000000000000000000108000600ac1e000108000800ac1e01011400090020010000000000000000000000000001080008000000000014000700fe880000"], 0x7c}, 0x1, 0x0, 0x0, 0x8004040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40) accept(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 18.011403165s ago: executing program 4 (id=2226): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x6ee87b7, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x18c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x178, 0x1, [@m_ife={0x174, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x123, 0x6, "50bf5a6645a0cb0c9824d32c8633ac16ee6e19c5929e23373dddd83e09f8848b5092e2a99e94126cef73059e552c0ef9efeef79502d733210fe4140709acc9f04f234955fbbf71d61e5178df21ffa8f4282ad2af4864a3d73e000000000000000000000000000000b5912348a641b7cb1840158c9a88f76eebe9b82d25242c63436c1d15ed3d5247de823279060b6e2573bc462d6f9cefa71b15b9c88635e8748f3d13704d1a3582a868f2316dbda05d7d315ae7f43aa40c1436275495736106ca41d1fc9e66d815c0b8a6fbc9588d27a444cd1e3818c7b3cd2d914fa6904b3cbe6f42abb71686bcd4ea90d49b9b8fcf0315c86a73e19086ff1d09b4bba83c90ffbbddde391ed6865c3e820636c0ed5b9be1504cbcbc000000000000000000"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x0, 0x14, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x0, 0x1, {{0xb23, 0x9, 0x7, 0x6, 0x9}, 0x1}}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @void}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x0, 0x5, @void}]}, @TCA_IFE_DMAC={0x0, 0x3, @broadcast}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x0, 0x5, @val=0xf581}, @IFE_META_TCINDEX={0x0, 0x5, @void}]}, @TCA_IFE_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @TCA_IFE_PARMS={0x0, 0x1, {{0x5, 0x81, 0x20000000, 0xff, 0x10000}, 0x1}}, @TCA_IFE_DMAC, @TCA_IFE_SMAC={0x0, 0x4, @local}, @TCA_IFE_PARMS={0x0, 0x1, {{0x0, 0x6, 0x8, 0x1, 0x100000}, 0x1}}, @TCA_IFE_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x0, 0x6, "2efa37a506a8cbdefb4d25e7bd7f3b21a1c52be56d3e471a73aa395b97536a933cf4b6f02d2a6af51835203e5fec1ca539dad10ad5b3af90ee604559a2a14bcb0605186d9ed37d46b2f85997b0123b539b95f6d97c428174c8c810e3c0c328bb41a52ef0d7e346524b77fc73c344a1de3f25580bbca55f5ff71329cb96687f067d10272385ff5ec56c202e2138957fd23f0977d1748c563c6fe8"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x0, 0x2, {0xffff, 0x9, 0x4, 0x1, 0x5}}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x0, 0x2, {0xc, 0x4, 0x8, 0x0, 0x400}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x4, 0xc}}, @TCA_SKBEDIT_MARK={0x0, 0x5, 0x7}, @TCA_SKBEDIT_PTYPE]}, {0x0, 0x6, "e8654cd117b1c040e3f759fce0488b48323a1e55aa46bf0d3f15dd4743255ce38ebca723d3cd81a5b56a8cc49a347acab3f38f601de7748aca284fa24f0a1ec3b892e8712fa7e6c73d252f232c3e24827a3877fd05284d34605e6580b4e2e215ee9ff9983ea188bd142ce73c4c41c8946988fae875d4280b181e454ce4c3dceef076f6ae53e3aa43d647a25ac2bb592baa03b29ff67285ff5f5a6596b37a074f545d559cb010a1bd5f11871d618e7285942954ff3f71b42780e70c42995344b82853beebe1be58bcf4b53a3b7380aa87aa7ef3f6154d4126bc"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3}}}}, @m_sample={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0xfffffffe, 0xe, 0xffffffffffffffff, 0x7, 0x5}}, @TCA_SAMPLE_TRUNC_SIZE, @TCA_SAMPLE_RATE={0x0, 0x3, 0xfff}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x281c4c94}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0xd3, 0x7, 0x4, 0x6, 0x5}}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x1}]}, {0x0, 0x6, "fafb778e5f24976267c1a921624be6cf6d8c6b3c18acdbbbd372e4e9976dacf65d6aa4ef7f824d506e09d81e7913c3dcc5b381e54058896f70d3cd18aa1a7e32996f0e85ef93a691cd3d6bf1327df00e290f1dc424baef6569024f5f3cb78f1901ca444125d9274864039b9077db7c4c789df884d25e2e098f802d735d8ffce2c22b8d9c4f7288c9acdd4e620ebea39940bac531cfc2696c1b5418d2ff5e4f8e005ee046cedc80feee0c6569bd23e8df58eef886"}, {0x0, 0x7, {0x0, 0x1}}, {0xffffffffffffff69, 0x8, {0x0, 0x1}}}}]}]}, 0x18c}}, 0x0) 18.002164028s ago: executing program 0 (id=2227): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="1600d8f6", @ANYBLOB="6171b8ae6bcfd0da05bc34078bd2398a8069b30972a9e1a3db2717b70d7f294ae98e06e7f73154482052c88a8ed3839082aba5fb1da3b1aa833985545f78f0e47140c248ac12a7d46719119271be7a326a31147324309027b5399e", @ANYBLOB="0a0001"], 0x64}}, 0x0) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) (rerun: 64) 17.758250066s ago: executing program 0 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 17.675981004s ago: executing program 4 (id=2229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14140000013d231000a8d26d3e54c7652beb3834d6d2bc75de0161d7745b979d815eca28236535f843ee1383c0ab1fa9a40b2f", @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 17.618725315s ago: executing program 3 (id=2231): socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001", @ANYRES64=r0], 0xc4}}, 0x20050890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 17.51007569s ago: executing program 3 (id=2232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00'}, 0x94) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xffffffc0}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000040)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="19c8d63e56153f5575ef298bfc67947b6e0669700c6d035619ce495b0da50af71c79bef5cc40a3b377cf7ead515a03a5802f429610cf4c5435cf51067b3fe110abe3dd18e8396b9e8c67000f2f262b8e442aca80077eba32b3372e76c53ba7f14e7e80d45979c968549746228631a6f97f48af31f18e257da935a276208ad456874775", 0x83}, {&(0x7f00000001c0)="26573b908d84f6dadf4d9e3bd677bf2431eb515f462def5b90821cecb265254699549a6c474337dba11664d03b5bed2f6912b1f6bb5d074a8c936b38", 0x3c}, {&(0x7f0000000280)="0ee6e00eb65199305b3312a54dc5904317ea0860b15ccc00154f02add7e604fdcf4e67c24226bba5f0b5a2fa698c6aff795c28209e27509114866f6d82583fe494846b3cfb3ff3f6e940e0022739e9f3c6585d60d78904e3b2e010fed57cd2245d416643ae73661a6a8233d28158dd5de31cecdb15471430d4914a0ca72ea81714d3a2874710dd344ee4ea7001c86292bd8367d7fc8af6d045b870a865c8c32e1778092024d319b703b7f4cd8ee1725d689b000b9bc3ff625f6416edb5d80caf8a50435b7b", 0xc5}], 0x3, &(0x7f0000000500)=[{0x80, 0x114, 0x5, "370f8f52544fa7e96afd6d5f57cc2942d121246dbd5083880b5b9e967719be9c7615349af93078f7c42588c02ef4fd34fef5289bcad6cecaf06fd324425b4eed5202b66c8138d5096648740b91db359566cc60f20038a796459dedfc4a6456856daaa1097edbebed6bf2b35d"}, {0x88, 0x118, 0x3, "86ee505638de1d86130529fb2875218c6e09d47c84dc9eb79c7894e770c3a33dd6a2bba5c9c0b7927de7f9bb22570cf428699f62116625aa62f195fe213de803f175f7e32d3a3c49e2d1f6192ffcdf6637d2fdb347401e78d113f8570187865d64c1277712d5d531316d92d76a80e0bec2fbd46d8b83adb3"}, {0x58, 0x101, 0x90, "304ce8dcfcdf8612ac81ff7a3a313c5fe570f40a09d1f99f0f9f817a7a362e95c7ed67d6875cf6084f9a32f8f875d689db73eff1e226f10d5b57202bd772760dd5b9b1bc197a"}, {0x80, 0x11, 0x3ff, "d47f81a629e28f3a625c1723a7a21eeccbb50c20e6c6138ee25cc92ab3324f522190feab1fdaf2e440597c01513b2d0e4b4e486b4b12e4fe8a7e051a598835dca42b6cf413e04dc1a57dc080ae22421520b5a2a5d945433dc3b98cd84f928bcebe87e0e5aa3be1defdfca9"}, {0x28, 0x110, 0x6, "332672cffd8a60e3793b6c1ed1ce4e0ef2"}, {0xf8, 0x115, 0x10, "d12f74cfe1056b383e75c0fdf3e4fa327298b1404ad09a4a40f5cd55c569e191cfedf628179e79eaebb0128b75d964fdb09f66cd228ab64e5f25a23e274703b28d71a9f629056fc733ebdf945e8a1c7e4f907c1adb685235b0ec42646b4ed0588ce3318dd15bb9808fed602ce5e1693c0d5cd65ab6d3f8dce6252caa45b60907ecb9b5b934e48a09458120150276b9f4f8dd420a33d0de66e4d58551c8c76bdf2c74c05475ec15b9514127dafb5b024883466073aeafd45949f5892dad7837f319bef6c94ccef97b8726c8232ed3f1554a0872393844756b50d2763d8ed532140c4e8f4b"}], 0x300}, 0x4000050) 17.259376443s ago: executing program 3 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 17.257989644s ago: executing program 2 (id=2235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0xfff3, 0x8}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x173ba}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r1, r10, 0x2f, 0x10, r0}, 0x20) 17.256549277s ago: executing program 0 (id=2236): r0 = socket(0x2, 0x800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000040)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) mmap(&(0x7f0000a22000/0x1000)=nil, 0x1000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r7, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r8 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r9, 0x215eb000) r10 = socket(0x14, 0x2, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000200)={'vxcan1\x00', 0x7fff, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x10) socket(0x5, 0x5, 0xfffffff8) 17.256139754s ago: executing program 4 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 17.18567367s ago: executing program 3 (id=2238): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800012200000000fcdbdf2502180000fe0300090012000008000100ac1414"], 0x24}}, 0x8000000) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x2}}}, @sadb_address={0x5, 0x6, 0x33, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}]}, 0xd8}}, 0x40000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) getsockopt$inet_opts(r0, 0x0, 0x6, 0x0, &(0x7f0000000140)) 16.962078781s ago: executing program 3 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8580, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20008051) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x40000005}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a31000000000800ffff000c000b400000000000000005140008000000010000000000000000000700000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r14, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2eb7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x8088) syz_emit_ethernet(0x69, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00333afffe800000000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc01000000000000000000000000000004019595f429ae08a565c95eb1649babac89cc19b5dbb1f3430878221a35a5a1b36c148980500ec91981647a2ed9eea6708eb844750aced35c609f82ea690f80d38bbae592e5c59545b0dea885e1b4555031a10d0abf1a5aed49afc54f44de622064474d2a08408058bc99c09dac7a04ffce768395b5b9faa6d075636fc99377f7d5c332777d235c09e8d400c5f74821647dc58974"], 0x0) 16.718260074s ago: executing program 4 (id=2240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0xf0, 0x1170, 0x200, 0x1398, 0x1398, 0x200, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x13, 0x81}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000001040102000000000000000001000008080004400000fecf4e8ca040f4fe43ead13b99d713"], 0x1c}, 0x1, 0x0, 0x0, 0x240000c4}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) 16.575480498s ago: executing program 2 (id=2241): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) close(r0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (rerun: 64) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x87}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x7c}}, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x9, 0x401, 0x18, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80, 0x10, 0xfffffffe, 0x4}}) (rerun: 64) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, r8, 0x36}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x40, 0x119, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1e}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x24, 0x0, 0xffff, &(0x7f0000000140)=[0x0, 0x0], 0x4000000000000040, 0x0, 0x0, 0x0, 0x0}, 0x40) 16.313224239s ago: executing program 2 (id=2242): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 16.206036938s ago: executing program 4 (id=2243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000080)=0xfffffde0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3bf76b27}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010425bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="7d08020001a20100000000800900110069706970000000ffffffff80040c1300"], 0x38}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) 16.168750623s ago: executing program 2 (id=2244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) clock_gettime(0x0, &(0x7f0000006540)) recvmmsg$unix(r1, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x2}}], 0x2, 0x2001, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x2}}], 0x2, 0x2001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x40, 0x2, 0x48d5, 0xe, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xbea1, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0xfffffffe, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf33, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x401, 0x107, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) 16.02727268s ago: executing program 0 (id=2245): sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48804) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0xa, 0x1, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x10, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, [0x47e128f2bce82ddb, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x5, 0x1, 0x51}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x3, 0x800}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x0, [0x4004, 0x5, 0x0, 0x5, 0x7, 0x7, 0x101, 0x3, 0x7ff, 0x50de, 0x4, 0x5, 0x1000, 0x4, 0xffff], 0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [0x0, 0xff, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0xae, 0xb, 0x6, 0x6}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x25, 0x80}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2001, 0x5, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) (async) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r5}) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3b, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001514010100100000000000000800030005000000080001"], 0x20}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x300, 0x70bd2a, 0x25dfdbff, {0x2, 0x14}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtclass={0x2c, 0x28, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xd}, {0xffe0, 0xfff1}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x10) (async) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x1, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0xff, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510e000006000094350800000000000019000000000000000f000000000000000400000000000000000000000000000000000000000000000000000000000000040000002d0000000100000000000000520a0000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000005cb34f8f66e50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a37f4dd4c48d5fcc222378cfbdba5ab4f3d2c95d311dfa91556b24fd93f3e228b345ee04e5e4a586d6b5a58beb6b9d08e0bb215e450f6f9380bf13378fcf6a9d272bf81ba8dd338fcf2d89d76e09636ed0c3ed74437efdcfd9aa50224508e3516d621dc776a9bffdbd6538bff8cc2e2a70e07a292090b1d148bafe2c440769521379195c8a4cb6556bdf9169b021f7ddec1a01f280d76dac1a"]) 15.982684118s ago: executing program 4 (id=2247): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x79}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) 15.897473246s ago: executing program 2 (id=2248): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000103afffe8000000000fe0000000000000000aa00e9ffe2ffffff00000000000000000186009078002d06009909000032590000"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x8, 0x700, 0xffffffff, 0x1, {{0x16, 0x4, 0x1, 0x11, 0x58, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x18, 0xc3, 0x0, 0x5, [0x25, 0x9, 0x0, 0x1, 0x2]}, @ssrr={0x89, 0xb, 0x26, [@rand_addr=0x64010102, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x14, 0xc9, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x8001}, {@remote, 0x5a1}]}, @noop, @lsrr={0x83, 0xb, 0x4d, [@private=0xa010102, @empty]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000ac0)=0x2, 0x12) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000007c0)={0x470, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "4be70fd2b14539c21448fb5ce2c6185c62c33363c8d936"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffb}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "c370c8ae2d1587d1c7abb46b3bbeeaaedd715fb7230cce1274cda928d3f5e3fdcc34e2494ab9c9d950484c64aeac940f0067fdb7c89a01989910690d4a95070c2f16991bf42d9f817bf7261bdd838944b0e5dd6bc5937abf7ceb671b0459a5eec74f672941b2fcb1da28defd02c8eac763ce49aa48317e52589520da4e589fb29c32c1218ce0278df2d607afa110990d4dffeac83d543f23496a292f61bde837a6c41abefa35c7304cef33f1bad27957afa9c8b0d0"}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "f5711f9d218404ed0961d44e63faf02fe2b08233510bde436bff439b3850d4ba7c881ecdd355716e477831c1f57abace70240aba4e9d34dbea5f73c754f69a8fa26e1c4c1ed31c2443dd96f0a9664dc6be2a6b8a55a45b94cc77219b1a239db2bda7eaa9c4fd4002ae604918faab9832"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "b3e4c17721df8f314e565df535f9d8b8c6cf3148a1437f9a8ae7747b5fbf96be398028371cb25c4440aeae704acdcb93fb99"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "bc648dac2bbeebd551aad58ba84d55026bc661c1627fc5340f0dd580f4dcd90d03796f5fa6314225464989ee7d312a71058160b9c0e55c4ed54e"}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "13ef78638d42e98777506d9097fcbb0368679da1c73bbb0040f1691717254d4c98c1519a10e1d1975a2905ee107ce127cf7a1e1bb50369120ecc35992e3273cf6b1edd4e94527ec76aa999cc8f400af85d036c59c83855d88cbd2cd2aaa291e8a63cf63bd25686fa91d02ed649b956e56264e190922fe21a6a1db4aceaff83ce8917e53d95e92a2874c5ba44abb007dbec50dd049f99113e14e3f5a71b1ded46a1ad6a6ffb07ba4d1c4a01d7e3407bf8d26a3945fc17e05e58dd02d1914e45b98305f5e465"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x256}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x470}, 0x1, 0x0, 0x0, 0xe884}, 0x44044800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 15.804221379s ago: executing program 1 (id=2249): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x200}, {r2, 0x421}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r1, r0, 0x2b, 0x10, 0x0, @void, @value=r2}, 0x20) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.755467085s ago: executing program 0 (id=2250): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x6, 0x5, 0x3, 0x3, 0xfd}, 0x8) 15.753217541s ago: executing program 2 (id=2251): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x3, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}}, 0x404002c) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x9, 0x1, 0x0, @loopback, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x0, 0x0, {0x6, 0x4, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x6c, 0x2, @empty, @broadcast, {[@ssrr={0x89, 0x3, 0x6b}, @noop]}}}}}}}, 0x0) 15.65864052s ago: executing program 1 (id=2252): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="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", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="205f9b6cee16e95984a5200439f1665bf74e4d1d5b17ac74949b3697a1ba7326b5050a1e630a9476ccbf5ec72f94e32ce495c1e5e275f48203e57aa5144b40d11dde1db75982c8d42efbfe2c6345fe4f349cf7fdc0153d89e8eb3634c138014ed7fa98d1a04b671200fd20cced0602e9810d85216a98427132d01a89b20c7d21cb8a06fe51956e0240b470873c406cbe69fa4cc252fbf7e45be4532546d24d30ebe7815c950215d53fd55cb0f20b30a1a50b61d370ee1ca935e1bf42cf673c7fdfa387875a332436109cc5aaa4b172d063046f41f9fa7b5e02f25207fcbf109d54dc05040c170dc8c061db3f9a841dd38dfacd71a556f1f340ea1feca52c83", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008b00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 15.586915139s ago: executing program 1 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r3, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x9, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) 15.351511598s ago: executing program 1 (id=2254): r0 = socket(0x15, 0x1, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x56}, @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x31, 0x11, 0x0, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x31, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x0, @void}, "a8c4faaa72cc49fe6b9280651298e8b5fd935c5d884b89d24d755445a87f2da30eb4de38f0"}}}}}}}}, 0x6f) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$xdp(r5, &(0x7f0000000280)={0x2c, 0x4, r6, 0x2f, r0}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r7, 0x100001) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000540), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcb, 0x0, 0x76e6) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000000200)=@hopopts={0x3b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x4, [0x5d5, 0x81, 0x7]}}, @padn={0x1, 0x1, [0x0]}]}, 0x48) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x4a}}) 15.278244821s ago: executing program 1 (id=2255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map=r1, r0, 0x24}, 0x20) 15.224469049s ago: executing program 1 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9e2e5f4e381fb6a2dee030ea75f800f84ed1c6b03f784ea2b3a72d6848a5a6fa98e2af3b55aa1a3337e89545ef8382bcedab9af0064efa7f0cd4d34411e13d73e4b585b612e45e4e2efbf6aea14db34ee4952dee6cbb422465abb5998a3474c945e2ee806144914d9f2100"/119, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000000000ff01000000000000000000000000000100000000140002000a00"/90], 0x60}}, 0x0) 1.20099206s ago: executing program 32 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8580, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20008051) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x40000005}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a31000000000800ffff000c000b400000000000000005140008000000010000000000000000000700000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r14, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\''}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2eb7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x8088) syz_emit_ethernet(0x69, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00333afffe800000000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc01000000000000000000000000000004019595f429ae08a565c95eb1649babac89cc19b5dbb1f3430878221a35a5a1b36c148980500ec91981647a2ed9eea6708eb844750aced35c609f82ea690f80d38bbae592e5c59545b0dea885e1b4555031a10d0abf1a5aed49afc54f44de622064474d2a08408058bc99c09dac7a04ffce768395b5b9faa6d075636fc99377f7d5c332777d235c09e8d400c5f74821647dc58974"], 0x0) 158.577437ms ago: executing program 33 (id=2250): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x6, 0x5, 0x3, 0x3, 0xfd}, 0x8) 122.25665ms ago: executing program 34 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9e2e5f4e381fb6a2dee030ea75f800f84ed1c6b03f784ea2b3a72d6848a5a6fa98e2af3b55aa1a3337e89545ef8382bcedab9af0064efa7f0cd4d34411e13d73e4b585b612e45e4e2efbf6aea14db34ee4952dee6cbb422465abb5998a3474c945e2ee806144914d9f2100"/119, @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000000000ff01000000000000000000000000000100000000140002000a00"/90], 0x60}}, 0x0) 53.972082ms ago: executing program 35 (id=2251): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x3, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}}, 0x404002c) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x34, 0x67, 0x0, 0x9, 0x1, 0x0, @loopback, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x0, 0x0, {0x6, 0x4, 0x2, 0x0, 0x0, 0x7, 0x8, 0x6, 0x6c, 0x2, @empty, @broadcast, {[@ssrr={0x89, 0x3, 0x6b}, @noop]}}}}}}}, 0x0) 0s ago: executing program 36 (id=2247): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x79}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) kernel console output (not intermixed with test programs): P: 002b:00007efe28e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.192192][ T9357] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9cdd9 [ 239.192210][ T9357] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 239.192220][ T9357] RBP: 00007efe28e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 239.192231][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.192241][ T9357] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007ffe534df7b8 [ 239.192270][ T9357] [ 240.557870][ T9403] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 240.573218][ T9407] FAULT_INJECTION: forcing a failure. [ 240.573218][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 240.587521][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.2.1034 Not tainted syzkaller #0 PREEMPT(full) [ 240.587543][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.587553][ T9407] Call Trace: [ 240.587560][ T9407] [ 240.587566][ T9407] dump_stack_lvl+0xe8/0x150 [ 240.587591][ T9407] should_fail_ex+0x412/0x560 [ 240.587616][ T9407] should_failslab+0xa8/0x100 [ 240.587644][ T9407] __kmalloc_cache_noprof+0x88/0x660 [ 240.587665][ T9407] ? trace_kmalloc+0x2a/0xf0 [ 240.587685][ T9407] ? nft_trans_rule_add+0x59/0x440 [ 240.587709][ T9407] nft_trans_rule_add+0x59/0x440 [ 240.587733][ T9407] nf_tables_newrule+0x1b72/0x28b0 [ 240.587771][ T9407] ? __pfx_nf_tables_newrule+0x10/0x10 [ 240.587794][ T9407] ? nfnl_pernet+0x23/0x240 [ 240.587813][ T9407] ? nfnl_pernet+0x23/0x240 [ 240.587839][ T9407] ? __nla_parse+0x40/0x60 [ 240.587866][ T9407] nfnetlink_rcv+0x123e/0x27b0 [ 240.587917][ T9407] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 240.587951][ T9407] ? ref_tracker_free+0x693/0x840 [ 240.588001][ T9407] ? __netlink_deliver_tap+0x807/0x850 [ 240.588038][ T9407] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.588058][ T9407] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.588084][ T9407] netlink_unicast+0x75c/0x8e0 [ 240.588113][ T9407] netlink_sendmsg+0x813/0xb40 [ 240.588143][ T9407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.588167][ T9407] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.588192][ T9407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.588219][ T9407] ____sys_sendmsg+0x972/0x9f0 [ 240.588242][ T9407] ? __might_fault+0xaf/0x130 [ 240.588270][ T9407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.588300][ T9407] ? import_iovec+0x73/0xa0 [ 240.588328][ T9407] ___sys_sendmsg+0x2a5/0x360 [ 240.588348][ T9407] ? __lock_acquire+0x6b5/0x2cf0 [ 240.588371][ T9407] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.588425][ T9407] ? __fget_files+0x2a/0x420 [ 240.588446][ T9407] ? __fget_files+0x3a0/0x420 [ 240.588475][ T9407] __x64_sys_sendmsg+0x1bd/0x2a0 [ 240.588500][ T9407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.588531][ T9407] ? __pfx_ksys_write+0x10/0x10 [ 240.588554][ T9407] ? handle_softirqs+0x715/0x840 [ 240.588580][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.588599][ T9407] do_syscall_64+0x15f/0xf80 [ 240.588621][ T9407] ? clear_bhb_loop+0x40/0x90 [ 240.588642][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.588659][ T9407] RIP: 0033:0x7fa42819cdd9 [ 240.588676][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.588689][ T9407] RSP: 002b:00007fa428fba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.588707][ T9407] RAX: ffffffffffffffda RBX: 00007fa428415fa0 RCX: 00007fa42819cdd9 [ 240.588720][ T9407] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 240.588730][ T9407] RBP: 00007fa428fba090 R08: 0000000000000000 R09: 0000000000000000 [ 240.588740][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.588750][ T9407] R13: 00007fa428416038 R14: 00007fa428415fa0 R15: 00007fff21b9d748 [ 240.588778][ T9407] [ 240.592773][ T9403] macsec0: entered promiscuous mode [ 240.964694][ T9413] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.000470][ T9409] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 241.058385][ T9418] netlink: 'syz.0.1038': attribute type 13 has an invalid length. [ 241.155720][ T9418] veth1_macvtap: left promiscuous mode [ 241.161773][ T9418] macsec0: entered allmulticast mode [ 241.285534][ T9427] __nla_validate_parse: 3 callbacks suppressed [ 241.285578][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 241.343322][ T9427] IPVS: length: 106 != 11640 [ 241.356946][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1039'. [ 241.411708][ T9435] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 241.426120][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1039'. [ 241.527857][ T9446] FAULT_INJECTION: forcing a failure. [ 241.527857][ T9446] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 241.541418][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.3.1046 Not tainted syzkaller #0 PREEMPT(full) [ 241.541441][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.541452][ T9446] Call Trace: [ 241.541459][ T9446] [ 241.541467][ T9446] dump_stack_lvl+0xe8/0x150 [ 241.541492][ T9446] should_fail_ex+0x412/0x560 [ 241.541520][ T9446] _copy_to_user+0x31/0xb0 [ 241.541547][ T9446] simple_read_from_buffer+0xe1/0x170 [ 241.541574][ T9446] proc_fail_nth_read+0x1bb/0x230 [ 241.541599][ T9446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.541625][ T9446] ? rw_verify_area+0x2a6/0x4d0 [ 241.541648][ T9446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.541672][ T9446] vfs_read+0x20c/0xa70 [ 241.541711][ T9446] ? __pfx___mutex_lock+0x10/0x10 [ 241.541733][ T9446] ? __pfx_vfs_read+0x10/0x10 [ 241.541758][ T9446] ? __fget_files+0x2a/0x420 [ 241.541783][ T9446] ? __fget_files+0x3a0/0x420 [ 241.541802][ T9446] ? __fget_files+0x2a/0x420 [ 241.541831][ T9446] ksys_read+0x150/0x270 [ 241.541857][ T9446] ? __pfx_ksys_read+0x10/0x10 [ 241.541888][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.541908][ T9446] do_syscall_64+0x15f/0xf80 [ 241.541927][ T9446] ? trace_irq_disable+0x3b/0x140 [ 241.541952][ T9446] ? clear_bhb_loop+0x40/0x90 [ 241.541975][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.541993][ T9446] RIP: 0033:0x7f7180d5d60e [ 241.542009][ T9446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.542023][ T9446] RSP: 002b:00007f7181ba2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.542042][ T9446] RAX: ffffffffffffffda RBX: 00007f7181ba36c0 RCX: 00007f7180d5d60e [ 241.542054][ T9446] RDX: 000000000000000f RSI: 00007f7181ba30a0 RDI: 0000000000000004 [ 241.542065][ T9446] RBP: 00007f7181ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 241.542076][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.542086][ T9446] R13: 00007f7181016038 R14: 00007f7181015fa0 R15: 00007fff2ec11478 [ 241.542115][ T9446] [ 241.895871][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 241.921732][ T9444] bond2: (slave bridge3): making interface the new active one [ 241.930419][ T9444] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 242.001857][ T9435] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 242.044550][ T9444] macvlan2: entered promiscuous mode [ 242.068939][ T9454] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20002 [ 242.072023][ T9444] macvlan2: entered allmulticast mode [ 242.127130][ T9444] bond2: entered promiscuous mode [ 242.146903][ T9444] bridge3: entered promiscuous mode [ 242.161669][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1050'. [ 242.173604][ T9444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.190558][ T9444] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 242.223673][ T9444] bond2: left promiscuous mode [ 242.236790][ T9444] bridge3: left promiscuous mode [ 242.287921][ T9462] netlink: 'syz.1.1051': attribute type 3 has an invalid length. [ 242.314553][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1050'. [ 242.666338][ T9486] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1057'. [ 242.720095][ T9488] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1058'. [ 243.164911][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 243.452202][ T9522] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 243.554505][ T9522] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 244.166014][ T9547] nbd3: detected capacity change from 0 to 127 [ 244.210153][ T5623] block nbd3: Receive control failed (result -104) [ 244.420047][ T9557] lo: entered promiscuous mode [ 244.441069][ T9557] tunl0: entered promiscuous mode [ 244.471991][ T9557] gre0: entered promiscuous mode [ 244.541369][ T9557] ip_vti0: entered promiscuous mode [ 244.576895][ T9556] lo: left promiscuous mode [ 244.593109][ T9556] tunl0: left promiscuous mode [ 244.610743][ T9556] gre0: left promiscuous mode [ 244.627571][ T9556] ip_vti0: left promiscuous mode [ 244.640190][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 244.757838][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.997771][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.028258][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.395632][ T9556] vlan2: left promiscuous mode [ 245.403795][ T9556] geneve1: left promiscuous mode [ 245.419984][ T9556] ip6erspan0: left promiscuous mode [ 245.427692][ T9556] vlan1: left promiscuous mode [ 245.433728][ T9556] bridge0: left promiscuous mode [ 245.452197][ T9556] gretap1: left promiscuous mode [ 245.490231][ T9556] vlan3: left promiscuous mode [ 245.496299][ T9556] bond2: left promiscuous mode [ 245.501163][ T9556] bridge4: left promiscuous mode [ 245.617593][ T9578] wg1 speed is unknown, defaulting to 1000 [ 245.631474][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.677097][ T9578] syz2: Port: 1 Link DOWN [ 245.696035][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.734199][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.773131][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.006940][ T9601] syzkaller0: entered promiscuous mode [ 246.028953][ T9601] syzkaller0: entered allmulticast mode [ 247.051192][ T9624] xt_hashlimit: size too large, truncated to 1048576 [ 247.949382][ T9620] __nla_validate_parse: 1 callbacks suppressed [ 247.949401][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 247.982780][ T9621] netdevsim netdevsim4 : renamed from netdevsim0 [ 248.240869][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.272434][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 248.324424][ T9635] netlink: 'syz.2.1090': attribute type 8 has an invalid length. [ 248.401245][ T9647] netlink: 'syz.0.1093': attribute type 24 has an invalid length. [ 248.462154][ T9650] IPv6: Can't replace route, no match found [ 248.479328][ T9653] IPv6: Can't replace route, no match found [ 248.494643][ T9653] IPv6: Can't replace route, no match found [ 248.515284][ T9650] IPv6: Can't replace route, no match found [ 248.529626][ T9658] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1094'. [ 248.713462][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 248.778405][ T9668] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.786406][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 248.797611][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 248.804538][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 248.806932][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 248.837571][ T9668] batadv_slave_0: Caught tx_queue_len zero misconfig [ 248.852326][ T9668] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 248.871023][ T9668] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 248.931661][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1102'. [ 248.948913][ T9677] netlink: 'syz.0.1101': attribute type 12 has an invalid length. [ 249.091648][ T9681] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1104'. [ 249.477514][ T9699] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 249.838900][ T7577] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 250.168850][ T9729] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 250.195256][ T9729] netlink: 'syz.2.1121': attribute type 2 has an invalid length. [ 250.210913][ T9729] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 250.379261][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.388759][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.699689][ T9749] netlink: 'syz.0.1126': attribute type 21 has an invalid length. [ 251.145064][ T9763] openvswitch: netlink: Flow key attr not present in new flow. [ 251.183436][ T9767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.224246][ T9768] netlink: 'syz.1.1133': attribute type 2 has an invalid length. [ 251.249492][ T9768] netlink: 'syz.1.1133': attribute type 11 has an invalid length. [ 251.267649][ T9771] sctp: [Deprecated]: syz.4.1134 (pid 9771) Use of int in max_burst socket option deprecated. [ 251.267649][ T9771] Use struct sctp_assoc_value instead [ 251.490014][ T9780] syzkaller0: entered promiscuous mode [ 251.509010][ T9780] syzkaller0: entered allmulticast mode [ 252.901313][ T9824] nbd: nbd64 already in use [ 253.150163][ T7914] udevd[7914]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 253.176976][ T9822] syzkaller1: entered promiscuous mode [ 253.182571][ T9822] syzkaller1: entered allmulticast mode [ 253.255824][ T9816] __nla_validate_parse: 11 callbacks suppressed [ 253.255843][ T9816] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1148'. [ 255.557015][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.563374][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.756469][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 30 seconds [ 274.767857][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 30 seconds [ 274.778916][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 30 seconds [ 274.790132][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 30 seconds [ 278.218065][ T9854] validate_nla: 1 callbacks suppressed [ 278.218094][ T9854] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 278.251889][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 278.498263][ T9863] bond5: (slave bridge3): making interface the new active one [ 278.521867][ T9863] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 278.581686][ T9853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 278.629582][ T9853] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 278.629987][ T9871] sctp: [Deprecated]: syz.0.1158 (pid 9871) Use of int in max_burst socket option. [ 278.629987][ T9871] Use struct sctp_assoc_value instead [ 278.664202][ T9853] gretap3: entered promiscuous mode [ 278.683700][ T9853] gretap3: entered allmulticast mode [ 278.955438][ T1015] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.980405][ T1015] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.002755][ T1015] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.030531][ T1015] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.042112][ T9887] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 279.596417][ T9909] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 279.628781][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 279.665087][ T9912] bridge_slave_1: left promiscuous mode [ 279.672716][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.707548][ T9912] bridge_slave_0: left allmulticast mode [ 279.731586][ T9912] bridge_slave_0: left promiscuous mode [ 279.750747][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.824983][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 279.874201][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.230114][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 280.277427][ T9937] netlink: 'syz.0.1175': attribute type 32 has an invalid length. [ 280.316876][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 280.489990][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1181'. [ 280.491292][ T9937] bond5: Setting coupled_control to off (0) [ 280.531366][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 280.813049][ T9965] syzkaller0: entered promiscuous mode [ 280.821049][ T9965] syzkaller0: entered allmulticast mode [ 281.031598][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 281.060813][ T9972] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 281.069462][ T9972] netlink: 'syz.1.1187': attribute type 7 has an invalid length. [ 281.077640][ T9972] netlink: 'syz.1.1187': attribute type 8 has an invalid length. [ 281.086165][ T9972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1187'. [ 281.746865][ T9986] gretap0: entered promiscuous mode [ 281.755076][ T9986] vlan2: entered promiscuous mode [ 281.873234][ T9988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1193'. [ 283.687683][ T9957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.846957][ T9991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1195'. [ 283.872528][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1196'. [ 283.914742][ T9994] gre1: entered promiscuous mode [ 284.110546][T10004] IPVS: Unknown mcast interface: pim6reg0 [ 284.150907][T10004] IPVS: Unknown mcast interface: pim6reg0 [ 284.198260][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'. [ 284.279288][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'. [ 285.087402][T10061] xt_hashlimit: size too large, truncated to 1048576 [ 285.297308][T10063] lo: Caught tx_queue_len zero misconfig [ 285.306020][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 285.431751][ T9579] IPVS: starting estimator thread 0... [ 285.485155][T10082] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1221'. [ 285.534188][T10079] IPVS: using max 27 ests per chain, 64800 per kthread [ 286.608687][T10098] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 286.638455][T10098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.797603][T10103] SET target dimension over the limit! [ 287.966853][T10051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.194592][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1232'. [ 288.322873][T10121] syzkaller0: entered promiscuous mode [ 288.343570][T10121] syzkaller0: entered allmulticast mode [ 288.636596][ T57] tipc: Subscription rejected, illegal request [ 288.742912][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 288.795068][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 289.113430][T10161] vcan0: entered allmulticast mode [ 289.345195][T10166] --map-set only usable from mangle table [ 289.865020][T10191] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.888942][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 289.979593][T10196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.124863][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1262'. [ 290.672595][T10216] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 290.915434][T10231] tipc: Enabling of bearer rejected, failed to enable media [ 291.032316][T10239] xt_hashlimit: size too large, truncated to 1048576 [ 291.194799][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 291.209714][T10241] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 291.350057][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 291.903328][T10274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.912893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.923312][T10274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.115317][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.268950][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 292.659676][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.673763][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.690864][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.713586][T10269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.155186][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.021890][T10241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.629941][T10312] geneve0: entered promiscuous mode [ 294.660547][T10312] geneve0: entered allmulticast mode [ 294.924674][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'. [ 294.992347][T10339] net_ratelimit: 2 callbacks suppressed [ 294.992379][T10339] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 295.041434][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'. [ 295.221792][T10347] openvswitch: netlink: IP tunnel dst address not specified [ 295.235912][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.576232][T10356] bond6 (unregistering): Released all slaves [ 295.670761][T10368] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.219831][T10393] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1317'. [ 296.265806][T10397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.284243][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.432318][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 296.520027][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.691081][T10414] syzkaller0: entered promiscuous mode [ 296.730378][T10414] syzkaller0: entered allmulticast mode [ 297.242504][T10425] macvtap1: entered promiscuous mode [ 297.298144][T10425] macvtap1: entered allmulticast mode [ 297.314871][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.360030][T10428] macvtap2: entered promiscuous mode [ 297.377494][T10428] macvtap2: entered allmulticast mode [ 297.411833][T10436] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1330'. [ 297.623344][T10436] bond7 (unregistering): Released all slaves [ 297.654400][T10446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.667764][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.748413][T10439] wg1 speed is unknown, defaulting to 1000 [ 298.006173][T10446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.145753][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 298.516161][T10474] netlink: 'syz.1.1344': attribute type 10 has an invalid length. [ 298.538243][T10474] netlink: 396 bytes leftover after parsing attributes in process `syz.1.1344'. [ 298.882549][T10486] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 299.020883][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 299.136916][T10486] bond6: entered promiscuous mode [ 299.172812][T10486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.401217][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 299.424315][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 299.605841][T10517] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 299.712856][T10516] macsec1: entered promiscuous mode [ 299.739305][T10516] bridge0: entered promiscuous mode [ 299.764923][T10516] macsec1: entered allmulticast mode [ 299.806475][T10516] bridge0: entered allmulticast mode [ 299.842321][T10516] bridge0: port 3(macsec1) entered blocking state [ 299.854704][T10516] bridge0: port 3(macsec1) entered disabled state [ 299.935669][T10516] bridge0: left allmulticast mode [ 299.962121][T10516] bridge0: left promiscuous mode [ 299.985962][T10539] __nla_validate_parse: 4 callbacks suppressed [ 299.985978][T10539] netlink: 212176 bytes leftover after parsing attributes in process `syz.1.1355'. [ 300.349033][T10547] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1360'. [ 300.434866][ T995] net_ratelimit: 7 callbacks suppressed [ 300.434882][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.720978][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.729117][T10562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.769810][T10558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1361'. [ 301.072366][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1365'. [ 301.269692][T10591] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 301.472359][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 301.492595][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.056790][T10616] bond7 (unregistering): Released all slaves [ 302.136874][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 302.514044][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.595440][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.622003][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 303.075245][T10670] tipc: Can't bind to reserved service type 3 [ 303.151667][T10672] tipc: Started in network mode [ 303.176141][T10672] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 303.246623][T10672] tipc: Enabled bearer , priority 10 [ 303.308678][T10631] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 303.326330][T10676] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 303.570035][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.157680][T10724] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1402'. [ 304.365919][ T9591] tipc: Node number set to 4269801488 [ 304.461711][T10721] wg1 speed is unknown, defaulting to 1000 [ 304.595101][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.812380][T10751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.834291][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 60 seconds [ 304.845037][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 60 seconds [ 304.856281][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 60 seconds [ 304.867409][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 60 seconds [ 305.256754][T10766] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 305.492101][T10783] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 305.637283][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.645425][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.076949][T10804] nbd4: detected capacity change from 0 to 127 [ 306.117290][ T5623] block nbd4: Receive control failed (result -32) [ 306.130950][ T7914] block nbd4: Dead connection, failed to find a fallback [ 306.164649][ T7914] block nbd4: shutting down sockets [ 306.172542][ T7914] blk_print_req_error: 138 callbacks suppressed [ 306.172574][ T7914] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.191388][ T7914] buffer_io_error: 138 callbacks suppressed [ 306.191401][ T7914] Buffer I/O error on dev nbd4, logical block 0, async page read [ 306.210049][ T7914] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.220983][ T7914] Buffer I/O error on dev nbd4, logical block 1, async page read [ 306.230448][ T7914] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.241582][ T7914] Buffer I/O error on dev nbd4, logical block 2, async page read [ 306.250787][ T7914] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.261857][ T7914] Buffer I/O error on dev nbd4, logical block 3, async page read [ 306.282414][ T7914] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.305150][ T7914] Buffer I/O error on dev nbd4, logical block 0, async page read [ 306.329590][ T7914] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.363413][ T7914] Buffer I/O error on dev nbd4, logical block 1, async page read [ 306.372751][ T7914] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.382297][ T7914] Buffer I/O error on dev nbd4, logical block 2, async page read [ 306.390555][ T7914] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.400130][ T7914] Buffer I/O error on dev nbd4, logical block 3, async page read [ 306.409283][ T7914] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.442294][ T7914] Buffer I/O error on dev nbd4, logical block 0, async page read [ 306.482601][ T7914] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.518958][ T7914] Buffer I/O error on dev nbd4, logical block 1, async page read [ 306.542885][ T7914] ldm_validate_partition_table(): Disk read failed. [ 306.562766][ T7914] Dev nbd4: unable to read RDB block 0 [ 306.610891][ T7914] nbd4: unable to read partition table [ 306.657218][ T7914] ldm_validate_partition_table(): Disk read failed. [ 306.674320][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.692058][T10818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.703684][ T7914] Dev nbd4: unable to read RDB block 0 [ 306.718568][ T7914] nbd4: unable to read partition table [ 306.730598][T10823] netdevsim netdevsim3: Direct firmware load for 0000000000 failed with error -2 [ 306.741437][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 306.781155][T10823] netdevsim netdevsim3: Falling back to sysfs fallback for: 0000000000 [ 306.899610][T10833] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.178637][T10847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'. [ 307.188870][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'. [ 307.414767][T10856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1442'. [ 307.715933][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.026769][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 308.040275][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.059869][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 308.093161][T10882] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1449'. [ 308.104213][T10882] netlink: Conntrack attr has 3 unknown bytes [ 308.648133][T10904] xt_bpf: check failed: parse error [ 308.676248][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.714619][T10904] xt_bpf: check failed: parse error [ 308.792543][T10915] netlink: 'syz.2.1457': attribute type 58 has an invalid length. [ 308.804350][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 308.999214][T10919] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 309.034355][T10922] netlink: 'syz.4.1461': attribute type 33 has an invalid length. [ 309.181666][T10922] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 309.256561][T10922] bond6 (unregistering): Released all slaves [ 309.469546][T10931] syz.3.1464 (10931) used greatest stack depth: 16224 bytes left [ 309.751637][T10946] netlink: 'syz.3.1468': attribute type 62 has an invalid length. [ 309.787978][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1468'. [ 310.642104][T10976] syzkaller0: entered promiscuous mode [ 310.656167][T10976] syzkaller0: entered allmulticast mode [ 310.697937][T10974] syzkaller0: entered promiscuous mode [ 310.713276][T10974] syzkaller0: entered allmulticast mode [ 310.843598][ T995] net_ratelimit: 3 callbacks suppressed [ 310.843616][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.975767][T10985] IPVS: set_ctl: invalid protocol: 50 172.20.20.14:20001 [ 311.044021][T10987] netlink: 'syz.3.1479': attribute type 2 has an invalid length. [ 311.239876][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.715351][ T9593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.880169][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.930253][T11014] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 312.396400][T11017] macvlan0: entered promiscuous mode [ 312.434699][T11017] macvlan0: entered allmulticast mode [ 312.502207][T11017] bond6: entered promiscuous mode [ 312.544849][T11040] xt_policy: output policy not valid in PREROUTING and INPUT [ 312.558426][T11017] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 312.633969][T11046] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 312.637039][T11017] bond6: left promiscuous mode [ 312.683145][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 312.714638][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 312.774337][T11046] netlink: 'syz.2.1492': attribute type 2 has an invalid length. [ 312.812288][T11046] netlink: 'syz.2.1492': attribute type 2 has an invalid length. [ 312.848368][T11046] netlink: 'syz.2.1492': attribute type 2 has an invalid length. [ 312.917388][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.259390][T11063] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 313.302540][T11072] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1499'. [ 313.486072][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'. [ 313.544310][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'. [ 313.803329][T11086] validate_nla: 2 callbacks suppressed [ 313.803348][T11086] netlink: 'syz.4.1503': attribute type 14 has an invalid length. [ 313.823599][T11089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'. [ 313.902622][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'. [ 313.954671][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.040392][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1507'. [ 314.455574][T11121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1509'. [ 314.754876][ T9593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.927076][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 314.993875][T11139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.010833][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.601686][T11170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.676610][T11175] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 0, id = 0 [ 316.034146][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.187249][T11186] bond8: entered promiscuous mode [ 316.220391][T11186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.985197][T11230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.020826][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.029330][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.077097][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.378604][T11248] batadv_slave_0: entered promiscuous mode [ 317.634994][ T9593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.672135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.709354][T11265] __nla_validate_parse: 6 callbacks suppressed [ 317.709387][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 317.796690][ T9593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.827942][T11271] x_tables: duplicate underflow at hook 2 [ 318.133146][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.156782][T11282] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1552'. [ 318.261313][T11286] openvswitch: netlink: Missing valid actions attribute. [ 318.283123][T11286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.318975][ T995] IPVS: starting estimator thread 0... [ 318.340104][T11264] xt_hashlimit: size too large, truncated to 1048576 [ 318.392898][T11287] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 318.394515][T11293] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 318.435680][T11288] IPVS: using max 31 ests per chain, 74400 per kthread [ 318.444598][T11295] xt_hashlimit: size too large, truncated to 1048576 [ 319.271381][T11319] Cannot find add_set index 3 as target [ 319.435231][T11323] netlink: 'syz.3.1565': attribute type 11 has an invalid length. [ 319.443494][T11323] netlink: 'syz.3.1565': attribute type 11 has an invalid length. [ 319.457557][T11323] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1565'. [ 319.549186][T11327] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 319.662488][T11334] netlink: 'syz.3.1568': attribute type 1 has an invalid length. [ 319.765803][T11334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.788251][T11338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.800077][T11338] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 319.820949][T11338] bond5: (slave vcan1): Error -95 calling set_mac_address [ 319.853273][T11344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1569'. [ 320.141592][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 320.201535][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 320.307976][T11360] ±ÿ: renamed from team_slave_1 [ 320.878633][T11387] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 321.148493][T11392] bond7: (slave geneve2): making interface the new active one [ 321.158120][T11400] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 321.176609][T11392] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 321.210135][ T60] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 20000 - 0 [ 321.236116][ T995] net_ratelimit: 3 callbacks suppressed [ 321.236131][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.338581][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 321.375481][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 321.407703][T11401] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 321.427883][T11401] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 321.537498][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 321.550472][T11406] syzkaller0: entered promiscuous mode [ 321.557650][T11406] syzkaller0: entered allmulticast mode [ 321.871941][T11426] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 321.914450][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 321.975246][T11434] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 322.036246][T11431] gtp0: entered promiscuous mode [ 322.045681][T11431] gtp0: entered allmulticast mode [ 322.290532][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.440084][T11456] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1599'. [ 322.618920][T11462] netlink: 'syz.4.1600': attribute type 5 has an invalid length. [ 322.892582][T11477] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1606'. [ 322.934249][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 323.308807][T11496] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 323.325974][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.410103][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1612'. [ 323.448847][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1612'. [ 323.476839][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 323.499893][T11506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1615'. [ 323.875296][ T9593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.098975][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 324.258202][T11542] netlink: 'syz.4.1625': attribute type 8 has an invalid length. [ 324.375372][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.547995][T11552] netlink: 'syz.4.1629': attribute type 1 has an invalid length. [ 324.574258][T11556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1630'. [ 324.768207][T11552] bond8: entered promiscuous mode [ 324.789777][T11552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 324.845779][T11562] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.861121][T11562] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 324.873475][T11562] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 325.001976][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 325.205922][T11590] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1638'. [ 325.414658][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.959572][T11606] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 326.221686][T11618] vlan2: entered allmulticast mode [ 326.236247][T11618] bond0: entered allmulticast mode [ 326.245384][T11618] bond_slave_0: entered allmulticast mode [ 326.260886][T11618] bond_slave_1: entered allmulticast mode [ 326.431780][T11628] bridge7: entered promiscuous mode [ 326.455496][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.465204][T11628] bridge7: entered allmulticast mode [ 326.496073][T11631] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 326.916162][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.985945][T11653] Cannot find set identified by id 65534 to match [ 327.274196][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.492223][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.508189][T11672] syzkaller1: entered promiscuous mode [ 327.522401][T11672] syzkaller1: entered allmulticast mode [ 327.704815][T11689] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 327.743475][T11689] netlink: 'syz.1.1663': attribute type 3 has an invalid length. [ 328.097521][T11707] __nla_validate_parse: 11 callbacks suppressed [ 328.097537][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 328.159212][T11708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1668'. [ 328.196598][ T7576] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.233651][ T7576] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.345049][ T7576] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.384205][ T7576] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.436925][T11719] nbd: must specify a size in bytes for the device [ 328.451459][T11725] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1672'. [ 328.462729][T11719] block nbd2: NBD_DISCONNECT [ 328.476465][T11719] block nbd2: Send disconnect failed -32 [ 328.498796][T11719] block nbd2: Send disconnect failed -32 [ 328.507691][T11725] netlink: 'syz.0.1672': attribute type 2 has an invalid length. [ 328.535175][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.112043][T11750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.204264][T11752] tunl0: entered promiscuous mode [ 329.227314][T11752] netlink: 'syz.2.1682': attribute type 3 has an invalid length. [ 329.247358][T11752] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1682'. [ 329.264386][T11759] ±ÿ: renamed from lo [ 329.578247][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.905145][T11776] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1690'. [ 329.954154][ T9593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.046811][T11777] wireguard0: entered promiscuous mode [ 330.055082][T11777] wireguard0: entered allmulticast mode [ 330.220955][T11786] netlink: 'syz.2.1693': attribute type 3 has an invalid length. [ 330.604727][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.677283][T11809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1700'. [ 330.728673][T11806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1700'. [ 330.800671][T11811] xt_hashlimit: size too large, truncated to 1048576 [ 330.829411][T11815] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 330.919741][T11827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.948637][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1702'. [ 331.018183][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 331.172562][T11834] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1705'. [ 331.656139][ T995] net_ratelimit: 3 callbacks suppressed [ 331.656156][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.731776][T11856] tipc: Enabling of bearer rejected, already enabled [ 332.061811][T11875] xt_limit: Overflow, try lower: 271964/0 [ 332.208207][T11882] sctp: [Deprecated]: syz.2.1722 (pid 11882) Use of int in max_burst socket option. [ 332.208207][T11882] Use struct sctp_assoc_value instead [ 332.397769][T11887] bond9 (unregistering): Released all slaves [ 332.657878][T11896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.671352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.693113][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.004440][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.266827][T11923] __nla_validate_parse: 10 callbacks suppressed [ 333.266860][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1733'. [ 333.523025][T11935] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 333.574336][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'. [ 333.607366][T11939] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 333.653282][T11939] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 333.681682][T11939] netlink: 'syz.4.1739': attribute type 2 has an invalid length. [ 333.719666][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.723924][T11939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1739'. [ 333.734544][T11946] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1741'. [ 333.856075][T11946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.896930][T11956] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 334.010853][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 334.119253][T11961] veth0: entered promiscuous mode [ 334.194643][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 334.237056][T11961] veth0 (unregistering): left promiscuous mode [ 334.816412][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.931846][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 90 seconds [ 334.943028][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 90 seconds [ 334.960759][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 90 seconds [ 334.971773][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 90 seconds [ 335.836349][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1763'. [ 335.900622][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.064324][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.186326][T12071] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1768'. [ 336.186622][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 336.344345][T12081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1773'. [ 336.468705][T12091] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 336.492911][T12091] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 336.669941][T12103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.703425][T12095] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.711192][T12095] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.834365][ T9592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.932386][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.007274][T12095] wg1: left allmulticast mode [ 337.067227][T12095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 337.192411][T12125] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 337.519232][T12141] xt_hashlimit: invalid interval [ 337.948368][T12165] openvswitch: netlink: Flow key attr not present in new flow. [ 337.982924][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.088890][T12170] netlink: 'syz.2.1792': attribute type 1 has an invalid length. [ 338.429056][T12186] __nla_validate_parse: 5 callbacks suppressed [ 338.429073][T12186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1797'. [ 338.490882][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1797'. [ 338.747330][T12198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.906741][T12208] netlink: 'syz.0.1802': attribute type 4 has an invalid length. [ 338.947774][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 338.952509][T12202] syzkaller1: entered promiscuous mode [ 338.964828][T12202] syzkaller1: entered allmulticast mode [ 339.002860][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.079040][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.132352][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 339.609638][T12234] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 339.631749][T12233] tipc: Enabling of bearer rejected, failed to enable media [ 340.246138][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 340.353676][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 340.828287][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1825'. [ 340.881473][T12286] syz.4.1826: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 340.960465][T12286] CPU: 1 UID: 0 PID: 12286 Comm: syz.4.1826 Not tainted syzkaller #0 PREEMPT(full) [ 340.960493][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.960515][T12286] Call Trace: [ 340.960523][T12286] [ 340.960530][T12286] dump_stack_lvl+0xe8/0x150 [ 340.960558][T12286] warn_alloc+0x249/0x340 [ 340.960585][T12286] ? stack_trace_save+0xa9/0x100 [ 340.960614][T12286] ? __pfx_warn_alloc+0x10/0x10 [ 340.960646][T12286] ? kasan_save_track+0x4f/0x80 [ 340.960668][T12286] ? kasan_save_track+0x3e/0x80 [ 340.960689][T12286] ? __kasan_kmalloc+0x93/0xb0 [ 340.960711][T12286] ? __kmalloc_cache_noprof+0x31c/0x660 [ 340.960733][T12286] ? xskq_create+0x56/0x170 [ 340.960751][T12286] ? xsk_setsockopt+0x54c/0x990 [ 340.960775][T12286] ? do_sock_setsockopt+0x17c/0x1b0 [ 340.960795][T12286] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 340.960814][T12286] ? do_syscall_64+0x15f/0xf80 [ 340.960839][T12286] __vmalloc_node_range_noprof+0x132/0x1750 [ 340.960896][T12286] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.960927][T12286] ? __kasan_kmalloc+0x93/0xb0 [ 340.960956][T12286] vmalloc_user_noprof+0xad/0xe0 [ 340.960980][T12286] ? xskq_create+0xbf/0x170 [ 340.960999][T12286] xskq_create+0xbf/0x170 [ 340.961034][T12286] xsk_init_queue+0x8a/0xe0 [ 340.961054][T12286] xsk_setsockopt+0x54c/0x990 [ 340.961083][T12286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.961109][T12286] ? __pfx_aa_sk_perm+0x10/0x10 [ 340.961135][T12286] ? aa_sock_opt_perm+0xff/0x1a0 [ 340.961161][T12286] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 340.961184][T12286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.961212][T12286] do_sock_setsockopt+0x17c/0x1b0 [ 340.961246][T12286] __x64_sys_setsockopt+0x13d/0x1b0 [ 340.961270][T12286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.961291][T12286] do_syscall_64+0x15f/0xf80 [ 340.961315][T12286] ? clear_bhb_loop+0x40/0x90 [ 340.961338][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.961356][T12286] RIP: 0033:0x7fc611d9cdd9 [ 340.961373][T12286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.961389][T12286] RSP: 002b:00007fc60fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.961408][T12286] RAX: ffffffffffffffda RBX: 00007fc612016090 RCX: 00007fc611d9cdd9 [ 340.961421][T12286] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 340.961431][T12286] RBP: 00007fc611e32d69 R08: 0000000000000004 R09: 0000000000000000 [ 340.961442][T12286] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.961453][T12286] R13: 00007fc612016128 R14: 00007fc612016090 R15: 00007ffe31bd28c8 [ 340.961483][T12286] [ 340.965548][T12286] Mem-Info: [ 341.275931][T12286] active_anon:5897 inactive_anon:5 isolated_anon:0 [ 341.275931][T12286] active_file:2700 inactive_file:40154 isolated_file:0 [ 341.275931][T12286] unevictable:768 dirty:54 writeback:0 [ 341.275931][T12286] slab_reclaimable:10767 slab_unreclaimable:101587 [ 341.275931][T12286] mapped:32326 shmem:1285 pagetables:1383 [ 341.275931][T12286] sec_pagetables:0 bounce:0 [ 341.275931][T12286] kernel_misc_reclaimable:0 [ 341.275931][T12286] free:1320918 free_pcp:10757 free_cma:0 [ 341.350318][T12286] Node 0 active_anon:23588kB inactive_anon:20kB active_file:10800kB inactive_file:160412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129304kB dirty:216kB writeback:0kB shmem:3604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14512kB pagetables:5296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 341.389022][T12286] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 341.439117][T12264] hsr_slave_0 (unregistering): left promiscuous mode [ 341.448341][T12286] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.481848][T12286] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 341.499031][T12286] Node 0 DMA32 free:1329400kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23588kB inactive_anon:20kB active_file:10800kB inactive_file:160412kB unevictable:1536kB writepending:216kB zspages:0kB present:3129332kB managed:2552692kB mlocked:0kB bounce:0kB free_pcp:43392kB local_pcp:19888kB free_cma:0kB [ 341.546319][T12286] lowmem_reserve[]: 0 0 0 0 0 [ 341.551975][T12286] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:8kB free_cma:0kB [ 341.983289][T12286] lowmem_reserve[]: 0 0 0 0 0 [ 341.992232][T12286] Node 1 Normal free:3937948kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 342.033372][T12286] lowmem_reserve[]: 0 0 0 0 0 [ 342.045754][T12286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 342.073159][T12286] Node 0 DMA32: 5289*4kB (UM) 3079*8kB (UM) 1969*16kB (UME) 505*32kB (UME) 832*64kB (UME) 794*128kB (UME) 612*256kB (UM) 365*512kB (UM) 203*1024kB (UM) 104*2048kB (UM) 77*4096kB (UM) = 1328140kB [ 342.114232][ T9589] net_ratelimit: 2 callbacks suppressed [ 342.114261][ T9589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.172256][T12286] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 342.205784][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.232914][T12295] vlan1: entered allmulticast mode [ 342.239837][T12286] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 10*32kB (UM) 11*64kB (UM) 3*128kB (UM) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (U) 959*4096kB (UM) = 3937948kB [ 342.267232][T12295] veth1_virt_wifi: entered allmulticast mode [ 342.287678][T12286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.327402][T12286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.373073][T12286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.426126][T12286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.479360][T12286] 44152 total pagecache pages [ 342.495261][T12286] 0 pages in swap cache [ 342.509724][T12286] Free swap = 124996kB [ 342.523031][T12286] Total swap = 124996kB [ 342.549986][T12286] 2097051 pages RAM [ 342.579118][T12286] 0 pages HighMem/MovableOnly [ 342.609444][T12286] 427095 pages reserved [ 342.635111][T12286] 0 pages cma reserved [ 343.239139][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.327395][T12328] openvswitch: netlink: Message has -2 unknown bytes. [ 343.342255][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 343.377993][T12328] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 343.437650][T12333] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1834'. [ 343.461946][T12334] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 343.489616][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 343.619158][T12334] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.134907][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 344.286997][ T9579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.296098][T12365] tipc: Enabling of bearer rejected, media not registered [ 344.369996][T12368] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1847'. [ 344.627984][T12382] syzkaller0: entered promiscuous mode [ 344.641981][T12382] syzkaller0: entered allmulticast mode [ 344.885959][T12404] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1857'. [ 345.157324][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.196388][T12411] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 345.221656][T12411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1860'. [ 345.264814][T12411] NCSI netlink: No device for ifindex 0 [ 345.287020][T12416] veth0: entered promiscuous mode [ 345.298347][T12411] netlink: 'syz.0.1860': attribute type 4 has an invalid length. [ 345.329743][T12415] veth0: left promiscuous mode [ 345.340367][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.500182][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1863'. [ 345.541542][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1863'. [ 345.738451][T12437] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1868'. [ 345.758765][T12437] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1868'. [ 345.981781][T12437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.020106][T12437] batadv_slave_0: entered promiscuous mode [ 346.618752][T12486] xt_hashlimit: max too large, truncated to 1048576 [ 347.594400][T12534] syzkaller1: entered promiscuous mode [ 347.628874][T12534] syzkaller1: entered allmulticast mode [ 348.460732][T12574] __nla_validate_parse: 13 callbacks suppressed [ 348.460764][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 348.807232][T12594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1915'. [ 348.949575][T12606] openvswitch: netlink: Multiple metadata blocks provided [ 349.432498][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1921'. [ 349.576940][T12630] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.1923'. [ 349.662043][T12630] openvswitch: netlink: Message has 6 unknown bytes. [ 349.664137][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 349.732213][T12636] netlink: 'syz.2.1927': attribute type 3 has an invalid length. [ 349.744759][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 349.764407][T12636] netlink: 'syz.2.1927': attribute type 3 has an invalid length. [ 350.042749][T12637] syzkaller0: entered promiscuous mode [ 350.064123][T12637] syzkaller0: entered allmulticast mode [ 352.561651][T12658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 352.708115][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 352.781960][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 352.814606][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 352.829678][T12697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1941'. [ 353.270324][T12716] syzkaller0: entered promiscuous mode [ 353.293875][T12716] syzkaller0: entered allmulticast mode [ 353.527317][T12727] __nla_validate_parse: 3 callbacks suppressed [ 353.527352][T12727] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1952'. [ 353.592734][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1952'. [ 353.669701][T12732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 353.784688][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 353.814112][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 353.851774][T12713] xt_ipcomp: unknown flags 1D [ 353.884439][T12745] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1956'. [ 353.986673][T12750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1957'. [ 354.492153][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1964'. [ 354.518928][T12767] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1964'. [ 354.529635][T12767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1964'. [ 354.568755][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 354.719574][T12769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.756124][T12769] bond_slave_0: left allmulticast mode [ 354.783423][T12769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.788005][T12780] sctp: [Deprecated]: syz.0.1969 (pid 12780) Use of int in max_burst socket option. [ 354.788005][T12780] Use struct sctp_assoc_value instead [ 354.809800][T12769] bond_slave_1: left allmulticast mode [ 354.818969][T12769] bond0 (unregistering): Released all slaves [ 355.282704][T12800] nbd: illegal input index 2958377 [ 356.377315][T12853] nbd: nbd0 already in use [ 357.383368][T12880] syzkaller0: entered promiscuous mode [ 357.400216][T12880] syzkaller0: entered allmulticast mode [ 357.473327][T12891] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 357.540300][T12888] geneve3: entered promiscuous mode [ 357.550500][T12888] geneve3: entered allmulticast mode [ 359.517920][T12891] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 359.525809][T12897] erspan1: entered allmulticast mode [ 359.546086][ T3296] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 6081 - 0 [ 359.557276][ T3296] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.609522][ T3296] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.641179][ T3296] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.745158][T12913] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 359.796375][T12918] netlink: 'syz.4.2004': attribute type 39 has an invalid length. [ 360.090691][ T3296] smbdirect: ib_dev[syz2] removed [ 360.122569][T12936] __nla_validate_parse: 4 callbacks suppressed [ 360.122586][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 360.380636][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 360.415823][T12946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2012'. [ 360.434146][T12949] netlink: 'syz.1.2013': attribute type 1 has an invalid length. [ 360.768124][T12953] bond0: (slave vxcan7): The slave device specified does not support setting the MAC address [ 360.800650][T12968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.825389][T12953] bond0: (slave vxcan7): Error -95 calling set_mac_address [ 360.924064][T12958] bond0: (slave bridge5): Enslaving as an active interface with a down link [ 360.947250][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 361.172155][T12976] netlink: 'syz.4.2017': attribute type 9 has an invalid length. [ 361.261918][T12972] syzkaller0: entered promiscuous mode [ 361.268335][T12972] syzkaller0: entered allmulticast mode [ 361.436805][T12996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2022'. [ 361.457151][T12996] netlink: 'syz.0.2022': attribute type 4 has an invalid length. [ 361.465879][T12996] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2022'. [ 361.519432][T12999] raw_sendmsg: syz.3.2023 forgot to set AF_INET. Fix it! [ 363.330133][T12996] .`: renamed from bond0 [ 363.710573][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2028'. [ 363.777240][T13024] netlink: 'syz.0.2031': attribute type 7 has an invalid length. [ 363.800009][T13021] netlink: 'syz.1.2029': attribute type 1 has an invalid length. [ 363.808321][T13024] netlink: 'syz.0.2031': attribute type 7 has an invalid length. [ 363.934965][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2033'. [ 363.965230][T13021] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.973937][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 364.100743][T13029] bond9: (slave veth11): Enslaving as an active interface with a down link [ 364.211487][T13032] bond9: Removing last ns target with arp_interval on [ 364.243646][T13033] bond9: (slave dummy0): making interface the new active one [ 364.300255][T13033] dummy0: entered promiscuous mode [ 364.308983][T13033] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 364.415079][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2039'. [ 364.886616][T13084] veth0: entered promiscuous mode [ 364.896190][T13084] veth0: left promiscuous mode [ 364.998363][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 120 seconds [ 365.009820][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 120 seconds [ 365.024512][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 120 seconds [ 365.035681][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 120 seconds [ 365.476793][T13116] __nla_validate_parse: 4 callbacks suppressed [ 365.476812][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 365.876456][T13129] bond10: option mode: invalid value (133) [ 365.890748][T13129] bond10 (unregistering): Released all slaves [ 365.949951][T13139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2059'. [ 366.031188][T13140] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 366.158813][T13150] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2061'. [ 366.177932][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 366.207414][T13140] bond10: entered promiscuous mode [ 366.219314][T13140] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.235652][T13150] openvswitch: netlink: Message has 5 unknown bytes. [ 366.299454][T13144] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.325970][T13144] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 366.341064][T13144] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 366.376773][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2065'. [ 366.387148][T13144] bond10: (slave vti0): making interface the new active one [ 366.413213][T13144] vti0: entered promiscuous mode [ 366.423382][T13144] bond10: (slave vti0): Enslaving as an active interface with an up link [ 366.434141][T13145] 8021q: VLANs not supported on vxcan0 [ 366.648110][T13168] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2067'. [ 366.744824][T13175] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2067'. [ 366.821524][T13179] bond0: (slave bond_slave_1): Releasing backup interface [ 366.893671][T13179] bond_slave_1: left allmulticast mode [ 367.254985][T13206] bond0: entered promiscuous mode [ 367.301155][T13206] bond_slave_0: entered promiscuous mode [ 367.345197][T13206] bond_slave_1: entered promiscuous mode [ 367.384286][T13206] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 367.440198][T13211] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2076'. [ 367.480022][T13211] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2076'. [ 367.512350][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2074'. [ 367.767973][T13231] Only authenc() type AEADs are supported by ESSIV [ 368.289332][T13266] netlink: 'syz.2.2084': attribute type 1 has an invalid length. [ 368.670295][T13287] openvswitch: netlink: Message has 222 unknown bytes. [ 368.846251][ T4943] Bluetooth: hci4: command 0x0405 tx timeout [ 370.999885][T13243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.378335][T13325] __nla_validate_parse: 3 callbacks suppressed [ 371.378353][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 371.468087][T13327] sctp: [Deprecated]: syz.2.2096 (pid 13327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.468087][T13327] Use struct sctp_sack_info instead [ 371.475846][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 371.638743][T13333] bond10: entered allmulticast mode [ 371.644279][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 371.667482][T13330] netlink: 'syz.3.2095': attribute type 1 has an invalid length. [ 371.679113][T13330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2095'. [ 371.689799][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 371.719891][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 371.769862][T13335] veth13: entered allmulticast mode [ 371.798431][T13335] bond10: (slave veth13): Enslaving as an active interface with an up link [ 371.837342][T13333] bond10 (unregistering): (slave veth13): Releasing backup interface [ 371.862591][T13333] bond10 (unregistering): Released all slaves [ 371.936909][T13331] syzkaller1: entered promiscuous mode [ 371.976626][T13331] syzkaller1: entered allmulticast mode [ 372.122218][ T30] audit: type=1107 audit(1777487532.324:5): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 372.433992][T13376] netlink: 'syz.0.2105': attribute type 29 has an invalid length. [ 372.611316][T13364] syzkaller1: entered promiscuous mode [ 372.635546][T13364] syzkaller1: entered allmulticast mode [ 372.922909][T13386] team0: Device gtp1 is up. Set it down before adding it as a team port [ 373.292554][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2118'. [ 373.359874][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 373.397746][T13414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2117'. [ 373.945225][T13441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.978040][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2127'. [ 374.054338][T13441] netlink: 'syz.3.2127': attribute type 3 has an invalid length. [ 374.689598][T13474] netlink: 'syz.4.2137': attribute type 30 has an invalid length. [ 374.719044][T13463] can: request_module (can-proto-0) failed. [ 375.066967][T13485] xt_socket: unknown flags 0x8 [ 375.189697][ T5623] Bluetooth: hci4: link tx timeout [ 375.198154][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 375.426432][ T7891] dummy0: left promiscuous mode [ 375.763312][ T5623] block nbd2: Receive control failed (result -32) [ 376.027961][T13534] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 376.080494][T13536] kthread_run failed with err -4 [ 376.526338][T13559] __nla_validate_parse: 8 callbacks suppressed [ 376.526354][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 376.902351][T13578] netlink: 'syz.2.2171': attribute type 2 has an invalid length. [ 376.932630][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 376.954271][T13584] netlink: 'syz.3.2169': attribute type 30 has an invalid length. [ 376.969597][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 376.997407][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 377.019665][T13587] netlink: 'syz.3.2169': attribute type 30 has an invalid length. [ 377.037754][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 377.234315][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 377.252972][T13593] x_tables: duplicate underflow at hook 3 [ 377.266003][T13595] xt_hashlimit: size too large, truncated to 1048576 [ 377.764517][T13610] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2180'. [ 377.802356][T13610] nbd: illegal input index -8454144 [ 377.819371][T13611] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 377.828192][T13611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.095631][T13626] netlink: 'syz.1.2185': attribute type 1 has an invalid length. [ 378.142077][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2185'. [ 378.167185][T13628] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 378.206822][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 378.297550][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 378.440607][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.450524][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.509784][T13640] netlink: 'syz.4.2189': attribute type 1 has an invalid length. [ 378.535455][T13639] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2188'. [ 378.556303][T13640] netlink: 'syz.4.2189': attribute type 2 has an invalid length. [ 378.586225][T13645] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 379.262656][T13671] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 379.623555][T13686] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 379.866148][T13707] netlink: 'syz.4.2211': attribute type 12 has an invalid length. [ 379.902215][T13705] netlink: 'syz.2.2212': attribute type 2 has an invalid length. [ 380.445596][T13732] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 380.635815][T13739] bond10: (slave bridge7): making interface the new active one [ 380.703639][T13739] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 380.725696][T13740] bond0: ARP target 8.4.0.0 is already present [ 380.753706][T13740] bond0: option arp_ip_target: invalid value (1032) [ 380.826230][T13732] macvlan3: entered promiscuous mode [ 380.840731][T13732] macvlan3: entered allmulticast mode [ 380.855540][T13732] bond10: entered promiscuous mode [ 380.862077][T13732] bridge7: entered promiscuous mode [ 380.892421][T13732] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 380.925802][T13732] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 380.956871][T13732] bond10: left promiscuous mode [ 380.963157][T13732] bridge7: left promiscuous mode [ 380.983322][ T30] audit: type=1800 audit(1777487541.184:6): pid=13756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2231" name="memory.events" dev="tmpfs" ino=2300 res=0 errno=0 [ 381.391803][T13770] syzkaller0: entered promiscuous mode [ 381.426751][T13770] syzkaller0: entered allmulticast mode [ 381.452282][T13779] openvswitch: netlink: Multiple metadata blocks provided [ 381.571120][T13774] geneve4: entered promiscuous mode [ 381.786370][T12007] netdevsim netdevsim4 : set [1, 2] type 2 family 0 port 56282 - 0 [ 381.839670][T12007] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 56282 - 0 [ 381.929998][T13791] tipc: Enabled bearer , priority 0 [ 381.985182][T12007] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 56282 - 0 [ 382.024825][T13788] __nla_validate_parse: 10 callbacks suppressed [ 382.024841][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2239'. [ 382.066786][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 382.107874][T12007] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 56282 - 0 [ 382.134635][T13789] tipc: Resetting bearer [ 382.171459][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2239'. [ 382.190827][T13792] syzkaller0: entered promiscuous mode [ 382.202686][T13792] syzkaller0: entered allmulticast mode [ 382.474940][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 382.510652][T13787] tipc: Resetting bearer [ 382.599792][T13787] tipc: Disabling bearer [ 382.650147][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2246'. [ 386.341467][ T4992] udevd[4992]: worker [8787] /devices/virtual/block/nbd3 is taking a long time [ 395.076444][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 150 seconds [ 395.087235][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 150 seconds [ 395.098239][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 150 seconds [ 395.109561][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 150 seconds [ 397.485326][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.494787][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.503570][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.512868][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.522098][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.119624][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.127183][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.134720][T13855] bridge_slave_0: entered allmulticast mode [ 398.142367][T13855] bridge_slave_0: entered promiscuous mode [ 398.150886][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.158415][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.165884][T13855] bridge_slave_1: entered allmulticast mode [ 398.173545][T13855] bridge_slave_1: entered promiscuous mode [ 398.210597][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.222899][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.262109][T13855] team0: Port device team_slave_0 added [ 398.270502][T13855] team0: Port device team_slave_1 added [ 398.304023][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.310985][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.337673][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.362130][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.385561][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.447063][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.679629][T13855] hsr_slave_0: entered promiscuous mode [ 398.704584][T13855] hsr_slave_1: entered promiscuous mode [ 398.734692][T13855] debugfs: 'hsr0' already exists in 'hsr' [ 398.743459][T13855] Cannot create hsr debugfs directory [ 399.036105][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 399.052814][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 399.061490][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 399.073464][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 399.082156][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 399.175368][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.191373][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.210253][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.222449][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.238281][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.302802][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 399.318916][ T5623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 399.327708][ T5623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 399.340583][ T5623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 399.348376][ T5623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 399.431514][ T5623] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 399.448189][ T5623] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 399.459779][ T5623] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 399.470169][ T5623] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 399.484112][ T5623] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 399.554561][ T4943] Bluetooth: hci5: command tx timeout [ 401.156514][ T4943] Bluetooth: hci6: command tx timeout [ 401.314117][ T4943] Bluetooth: hci7: command tx timeout [ 401.357200][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.364882][T13876] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.372087][T13876] bridge_slave_0: entered allmulticast mode [ 401.380112][T13876] bridge_slave_0: entered promiscuous mode [ 401.394103][ T4943] Bluetooth: hci8: command tx timeout [ 401.418646][T13876] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.426703][T13876] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.435555][T13876] bridge_slave_1: entered allmulticast mode [ 401.443325][T13876] bridge_slave_1: entered promiscuous mode [ 401.553974][ T4943] Bluetooth: hci9: command tx timeout [ 401.583180][T13876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.607658][T13882] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.615569][T13882] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.622986][T13882] bridge_slave_0: entered allmulticast mode [ 401.631121][T13882] bridge_slave_0: entered promiscuous mode [ 401.634929][ T4943] Bluetooth: hci5: command tx timeout [ 401.672117][T13876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.697350][T13882] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.705040][T13882] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.712217][T13882] bridge_slave_1: entered allmulticast mode [ 401.721993][T13882] bridge_slave_1: entered promiscuous mode [ 401.729626][T13878] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.737261][T13878] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.744826][T13878] bridge_slave_0: entered allmulticast mode [ 401.752543][T13878] bridge_slave_0: entered promiscuous mode [ 401.819252][T13878] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.826890][T13878] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.834995][T13878] bridge_slave_1: entered allmulticast mode [ 401.842887][T13878] bridge_slave_1: entered promiscuous mode [ 401.869042][T13876] team0: Port device team_slave_0 added [ 401.924956][T13876] team0: Port device team_slave_1 added [ 401.947902][T13882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.960919][T13882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.972860][T13878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.998249][T13885] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.006690][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.014183][T13885] bridge_slave_0: entered allmulticast mode [ 402.021831][T13885] bridge_slave_0: entered promiscuous mode [ 402.047495][T13878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.086136][T13885] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.093398][T13885] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.101465][T13885] bridge_slave_1: entered allmulticast mode [ 402.109707][T13885] bridge_slave_1: entered promiscuous mode [ 402.146639][T13876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.153598][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.180093][T13876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.210483][T13882] team0: Port device team_slave_0 added [ 402.220460][T13878] team0: Port device team_slave_0 added [ 402.227784][T13876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.235715][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.262164][T13876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.296640][T13882] team0: Port device team_slave_1 added [ 402.305125][T13878] team0: Port device team_slave_1 added [ 402.329863][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.402575][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.413579][T13882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.421130][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.447922][T13882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.460266][T13878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.467299][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.493533][T13878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.533390][T13882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.541222][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.567605][T13882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.580044][T13878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.587988][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.615773][T13878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.638090][T13876] hsr_slave_0: entered promiscuous mode [ 402.645558][T13876] hsr_slave_1: entered promiscuous mode [ 402.652347][T13876] debugfs: 'hsr0' already exists in 'hsr' [ 402.658114][T13876] Cannot create hsr debugfs directory [ 402.700065][T13885] team0: Port device team_slave_0 added [ 402.712356][T13885] team0: Port device team_slave_1 added [ 402.820802][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.828689][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.855197][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.906359][T13878] hsr_slave_0: entered promiscuous mode [ 402.912996][T13878] hsr_slave_1: entered promiscuous mode [ 402.919791][T13878] debugfs: 'hsr0' already exists in 'hsr' [ 402.925772][T13878] Cannot create hsr debugfs directory [ 402.932481][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.940305][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.966861][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.994430][T13882] hsr_slave_0: entered promiscuous mode [ 403.001111][T13882] hsr_slave_1: entered promiscuous mode [ 403.007578][T13882] debugfs: 'hsr0' already exists in 'hsr' [ 403.013341][T13882] Cannot create hsr debugfs directory [ 403.214026][T13885] hsr_slave_0: entered promiscuous mode [ 403.220700][T13885] hsr_slave_1: entered promiscuous mode [ 403.227442][T13885] debugfs: 'hsr0' already exists in 'hsr' [ 403.233226][T13885] Cannot create hsr debugfs directory [ 403.234286][ T4943] Bluetooth: hci6: command tx timeout [ 403.394335][ T4943] Bluetooth: hci7: command tx timeout [ 403.484451][ T4943] Bluetooth: hci8: command tx timeout [ 403.634106][ T4943] Bluetooth: hci9: command tx timeout [ 403.715271][ T4943] Bluetooth: hci5: command tx timeout [ 405.314040][ T4943] Bluetooth: hci6: command tx timeout [ 405.474222][ T4943] Bluetooth: hci7: command tx timeout [ 405.553920][ T4943] Bluetooth: hci8: command tx timeout [ 405.714406][ T4943] Bluetooth: hci9: command tx timeout [ 405.793920][ T4943] Bluetooth: hci5: command tx timeout [ 407.394669][ T4943] Bluetooth: hci6: command tx timeout [ 407.554149][ T4943] Bluetooth: hci7: command tx timeout [ 407.634174][ T4943] Bluetooth: hci8: command tx timeout [ 407.794047][ T4943] Bluetooth: hci9: command tx timeout [ 424.936253][ T4992] udevd[4992]: worker [8787] /devices/virtual/block/nbd3 timeout; kill it [ 424.945629][ T4992] udevd[4992]: seq 13945 '/devices/virtual/block/nbd3' killed [ 425.156157][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 180 seconds [ 425.167223][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 180 seconds [ 425.178335][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 180 seconds [ 425.189443][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 180 seconds [ 439.877262][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.883609][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.254310][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 210 seconds [ 455.265272][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 210 seconds [ 455.276432][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 210 seconds [ 455.287736][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 210 seconds [ 458.117211][ T5623] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 458.126245][ T5623] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 458.134965][ T5623] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 458.144916][ T5623] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 458.153096][ T5623] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 458.829255][ T4943] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 458.845479][ T4943] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 458.855115][ T4943] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 458.865076][ T4943] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 458.875437][ T4943] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 458.881432][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.891985][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.900016][T13948] bridge_slave_0: entered allmulticast mode [ 458.908522][T13948] bridge_slave_0: entered promiscuous mode [ 458.919449][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.927226][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.934894][T13948] bridge_slave_1: entered allmulticast mode [ 458.942612][T13948] bridge_slave_1: entered promiscuous mode [ 458.986307][T13948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.000691][T13948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.042044][T13948] team0: Port device team_slave_0 added [ 459.050969][T13948] team0: Port device team_slave_1 added [ 459.088785][T13948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.095990][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.124851][T13948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.137856][T13948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.145412][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.172420][T13948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.255495][T13948] hsr_slave_0: entered promiscuous mode [ 459.264260][T13948] hsr_slave_1: entered promiscuous mode [ 459.271994][T13948] debugfs: 'hsr0' already exists in 'hsr' [ 459.278594][T13948] Cannot create hsr debugfs directory [ 460.023321][ T4943] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 460.036999][ T4943] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 460.048592][ T4943] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 460.060486][ T4943] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 460.079596][ T4943] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 460.195468][ T4943] Bluetooth: hci10: command tx timeout [ 460.230614][ T5623] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 460.246883][ T5623] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 460.256363][ T5623] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 460.266546][ T5623] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 460.288678][ T5623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 460.477320][ T4943] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 460.491820][ T4943] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 460.503309][ T4943] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 460.516471][ T4943] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 460.530828][ T4943] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 460.913981][ T4943] Bluetooth: hci11: command tx timeout [ 460.945285][T13965] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.955225][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.973271][T13965] bridge_slave_0: entered allmulticast mode [ 460.981488][T13965] bridge_slave_0: entered promiscuous mode [ 461.037477][T13965] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.049562][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.057570][T13965] bridge_slave_1: entered allmulticast mode [ 461.068177][T13965] bridge_slave_1: entered promiscuous mode [ 461.155714][T13965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.169078][T13965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.268874][T13965] team0: Port device team_slave_0 added [ 461.287672][T13965] team0: Port device team_slave_1 added [ 461.379570][T13965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.387034][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.413945][T13965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.449374][T13965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.456420][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.483446][T13965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.686870][T13965] hsr_slave_0: entered promiscuous mode [ 461.693500][T13965] hsr_slave_1: entered promiscuous mode [ 461.699972][T13965] debugfs: 'hsr0' already exists in 'hsr' [ 461.705750][T13965] Cannot create hsr debugfs directory [ 462.116640][ T4943] Bluetooth: hci12: command tx timeout [ 462.274004][ T4943] Bluetooth: hci10: command tx timeout [ 462.334664][T13980] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.342263][T13980] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.350956][T13980] bridge_slave_0: entered allmulticast mode [ 462.355889][ T4943] Bluetooth: hci13: command tx timeout [ 462.372506][T13980] bridge_slave_0: entered promiscuous mode [ 462.423022][T13980] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.430880][T13980] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.438426][T13980] bridge_slave_1: entered allmulticast mode [ 462.446463][T13980] bridge_slave_1: entered promiscuous mode [ 462.508344][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.516215][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.523484][T13992] bridge_slave_0: entered allmulticast mode [ 462.531647][T13992] bridge_slave_0: entered promiscuous mode [ 462.589030][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.596846][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.604365][ T4943] Bluetooth: hci14: command tx timeout [ 462.610750][T13992] bridge_slave_1: entered allmulticast mode [ 462.619463][T13992] bridge_slave_1: entered promiscuous mode [ 462.663603][T13980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.677788][T13980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.765313][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.792636][T13985] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.800648][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.809306][T13985] bridge_slave_0: entered allmulticast mode [ 462.817849][T13985] bridge_slave_0: entered promiscuous mode [ 462.828995][T13980] team0: Port device team_slave_0 added [ 462.838949][T13980] team0: Port device team_slave_1 added [ 462.847261][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.878601][T13985] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.886306][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.893560][T13985] bridge_slave_1: entered allmulticast mode [ 462.901321][T13985] bridge_slave_1: entered promiscuous mode [ 462.965254][T13992] team0: Port device team_slave_0 added [ 462.994144][ T4943] Bluetooth: hci11: command tx timeout [ 463.007408][T13980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.015244][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.041565][T13980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.058289][T13992] team0: Port device team_slave_1 added [ 463.081305][T13985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.094572][T13985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.121584][T13980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.129157][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.155650][T13980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.224767][T13985] team0: Port device team_slave_0 added [ 463.232997][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.240578][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.266870][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.293362][T13985] team0: Port device team_slave_1 added [ 463.301997][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.309535][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.336294][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.429010][T13980] hsr_slave_0: entered promiscuous mode [ 463.435850][T13980] hsr_slave_1: entered promiscuous mode [ 463.442213][T13980] debugfs: 'hsr0' already exists in 'hsr' [ 463.448188][T13980] Cannot create hsr debugfs directory [ 463.473153][T13985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.481489][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.508315][T13985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.521869][T13985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.528976][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.555922][T13985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.627139][T13992] hsr_slave_0: entered promiscuous mode [ 463.634852][T13992] hsr_slave_1: entered promiscuous mode [ 463.641271][T13992] debugfs: 'hsr0' already exists in 'hsr' [ 463.647091][T13992] Cannot create hsr debugfs directory [ 463.749955][T13985] hsr_slave_0: entered promiscuous mode [ 463.757401][T13985] hsr_slave_1: entered promiscuous mode [ 463.763986][T13985] debugfs: 'hsr0' already exists in 'hsr' [ 463.769755][T13985] Cannot create hsr debugfs directory [ 464.193950][ T4943] Bluetooth: hci12: command tx timeout [ 464.355815][ T4943] Bluetooth: hci10: command tx timeout [ 464.434002][ T4943] Bluetooth: hci13: command tx timeout [ 464.674199][ T4943] Bluetooth: hci14: command tx timeout [ 465.074175][ T4943] Bluetooth: hci11: command tx timeout [ 466.274017][ T4943] Bluetooth: hci12: command tx timeout [ 466.434126][ T4943] Bluetooth: hci10: command tx timeout [ 466.514301][ T4943] Bluetooth: hci13: command tx timeout [ 466.754108][ T4943] Bluetooth: hci14: command tx timeout [ 467.153990][ T4943] Bluetooth: hci11: command tx timeout [ 468.353995][ T4943] Bluetooth: hci12: command tx timeout [ 468.593980][ T4943] Bluetooth: hci13: command tx timeout [ 468.834044][ T4943] Bluetooth: hci14: command tx timeout [ 485.315976][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 240 seconds [ 485.326937][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 240 seconds [ 485.338212][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 240 seconds [ 485.349238][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 240 seconds [ 498.273959][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 501.317450][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.324173][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.395863][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 270 seconds [ 515.407127][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 270 seconds [ 515.418763][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 270 seconds [ 515.430161][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 270 seconds [ 518.183092][ T5623] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 518.191766][ T5623] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 518.205367][ T5623] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 518.215113][ T5623] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 518.223395][ T5623] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 518.833604][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.841599][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.848953][T14041] bridge_slave_0: entered allmulticast mode [ 518.857126][T14041] bridge_slave_0: entered promiscuous mode [ 518.868189][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.875789][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.883049][T14041] bridge_slave_1: entered allmulticast mode [ 518.890826][T14041] bridge_slave_1: entered promiscuous mode [ 518.929893][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.942476][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.019063][T14041] team0: Port device team_slave_0 added [ 519.036727][T14041] team0: Port device team_slave_1 added [ 519.121342][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.129771][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.159287][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.180231][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.188153][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.217752][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.220829][ T5623] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 519.241537][ T5623] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 519.253477][ T5623] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 519.262142][ T5623] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 519.270570][ T5623] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 519.327225][T14041] hsr_slave_0: entered promiscuous mode [ 519.336152][T14041] hsr_slave_1: entered promiscuous mode [ 519.346797][T14041] debugfs: 'hsr0' already exists in 'hsr' [ 519.353247][T14041] Cannot create hsr debugfs directory [ 520.155889][T14060] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.176878][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.197049][T14060] bridge_slave_0: entered allmulticast mode [ 520.215876][T14060] bridge_slave_0: entered promiscuous mode [ 520.229570][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.254047][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.274393][ T4943] Bluetooth: hci15: command tx timeout [ 520.285057][T14060] bridge_slave_1: entered allmulticast mode [ 520.307402][T14060] bridge_slave_1: entered promiscuous mode [ 520.401944][T14060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.429476][T14060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.538746][T14060] team0: Port device team_slave_0 added [ 520.551867][ T5623] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 520.556980][T14060] team0: Port device team_slave_1 added [ 520.568882][ T5623] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 520.580221][ T5623] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 520.590535][ T5623] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 520.600272][ T5623] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 520.659692][T14060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.685671][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.764467][T14060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.807024][T14060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.823942][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.852105][ T4943] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 520.875659][T14060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.876156][ T4943] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 520.897802][ T4943] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 520.898949][T14088] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 520.917315][ T4943] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 520.926771][ T4943] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 520.938615][ T5623] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 520.949528][ T4943] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 520.957251][T14060] hsr_slave_0: entered promiscuous mode [ 520.958362][T14060] hsr_slave_1: entered promiscuous mode [ 520.974684][T14060] debugfs: 'hsr0' already exists in 'hsr' [ 520.981235][ T5623] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 520.989692][ T5623] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 520.998473][T14060] Cannot create hsr debugfs directory [ 521.313951][ T5623] Bluetooth: hci16: command tx timeout [ 522.329323][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.336605][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.344606][T14081] bridge_slave_0: entered allmulticast mode [ 522.352415][T14081] bridge_slave_0: entered promiscuous mode [ 522.358454][T14113] Bluetooth: hci15: command tx timeout [ 522.367114][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.374615][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.381887][T14081] bridge_slave_1: entered allmulticast mode [ 522.390412][T14081] bridge_slave_1: entered promiscuous mode [ 522.489370][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.523545][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.624347][T14081] team0: Port device team_slave_0 added [ 522.651393][T14081] team0: Port device team_slave_1 added [ 522.674158][T14113] Bluetooth: hci17: command tx timeout [ 522.767490][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.775006][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.801329][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.837991][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.846126][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.874959][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.977403][T14087] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.984902][T14087] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.992131][T14087] bridge_slave_0: entered allmulticast mode [ 523.000796][T14087] bridge_slave_0: entered promiscuous mode [ 523.037570][T14087] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.045013][T14087] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.052193][T14087] bridge_slave_1: entered allmulticast mode [ 523.060331][T14087] bridge_slave_1: entered promiscuous mode [ 523.074268][T14113] Bluetooth: hci18: command tx timeout [ 523.081604][T14113] Bluetooth: hci19: command tx timeout [ 523.129955][T14081] hsr_slave_0: entered promiscuous mode [ 523.136832][T14081] hsr_slave_1: entered promiscuous mode [ 523.143173][T14081] debugfs: 'hsr0' already exists in 'hsr' [ 523.149048][T14081] Cannot create hsr debugfs directory [ 523.203933][T14087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.228543][T14085] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.236672][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.246533][T14085] bridge_slave_0: entered allmulticast mode [ 523.255621][T14085] bridge_slave_0: entered promiscuous mode [ 523.267079][T14087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.300484][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.307799][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.315906][T14085] bridge_slave_1: entered allmulticast mode [ 523.324247][T14085] bridge_slave_1: entered promiscuous mode [ 523.392214][T14087] team0: Port device team_slave_0 added [ 523.397890][T14133] Bluetooth: hci16: command tx timeout [ 523.416019][T14085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.428611][T14085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.440383][T14087] team0: Port device team_slave_1 added [ 523.541949][T14085] team0: Port device team_slave_0 added [ 523.549596][T14087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.557108][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.583654][T14087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.608907][T14085] team0: Port device team_slave_1 added [ 523.615801][T14087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.623185][T14087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.650024][T14087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.753041][T14085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.761198][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.787927][T14085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.801941][T14085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.809388][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.835886][T14085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.874188][T14133] Bluetooth: hci5: command 0x0406 tx timeout [ 523.874539][T14111] Bluetooth: hci6: command 0x0406 tx timeout [ 523.887908][T14133] Bluetooth: hci7: command 0x0406 tx timeout [ 523.896541][T14133] Bluetooth: hci8: command 0x0406 tx timeout [ 523.898506][T14111] Bluetooth: hci9: command 0x0406 tx timeout [ 523.987962][T14087] hsr_slave_0: entered promiscuous mode [ 524.008744][T14087] hsr_slave_1: entered promiscuous mode [ 524.015933][T14087] debugfs: 'hsr0' already exists in 'hsr' [ 524.021685][T14087] Cannot create hsr debugfs directory [ 524.142657][T14085] hsr_slave_0: entered promiscuous mode [ 524.149890][T14085] hsr_slave_1: entered promiscuous mode [ 524.157247][T14085] debugfs: 'hsr0' already exists in 'hsr' [ 524.163041][T14085] Cannot create hsr debugfs directory [ 524.434799][ T5623] Bluetooth: hci15: command tx timeout [ 524.754030][ T5623] Bluetooth: hci17: command tx timeout [ 525.154313][T14042] Bluetooth: hci18: command tx timeout [ 525.161255][ T5623] Bluetooth: hci19: command tx timeout [ 525.474010][T14042] Bluetooth: hci16: command tx timeout [ 526.514681][T14042] Bluetooth: hci15: command tx timeout [ 526.834150][T14042] Bluetooth: hci17: command tx timeout [ 527.234038][T14042] Bluetooth: hci18: command tx timeout [ 527.234185][ T5623] Bluetooth: hci19: command tx timeout [ 527.553943][ T5623] Bluetooth: hci16: command tx timeout [ 528.914008][ T5623] Bluetooth: hci17: command tx timeout [ 529.314101][ T5623] Bluetooth: hci18: command tx timeout [ 529.320068][T14042] Bluetooth: hci19: command tx timeout [ 543.555757][ T31] INFO: task syz.3.2239:13789 blocked for more than 143 seconds. [ 543.563548][ T31] Not tainted syzkaller #0 [ 543.568845][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.577851][ T31] task:syz.3.2239 state:D stack:26328 pid:13789 tgid:13787 ppid:5625 task_flags:0x480140 flags:0x00080002 [ 543.589968][ T31] Call Trace: [ 543.593273][ T31] [ 543.596597][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 543.601529][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.607135][ T31] ? trace_irq_disable+0x3b/0x140 [ 543.612198][ T31] ? __pfx___schedule+0x10/0x10 [ 543.617982][ T31] ? schedule+0x90/0x360 [ 543.622766][ T31] schedule+0x164/0x360 [ 543.627450][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 543.633095][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 543.640033][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 543.646733][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 543.652857][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 543.659224][ T31] nbd_set_size+0x454/0x680 [ 543.674237][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 543.685764][ T31] ? nla_memcpy+0x5b/0xc0 [ 543.704545][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 543.712901][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 543.734066][ T31] ? rcu_is_watching+0x15/0xb0 [ 543.739472][ T31] ? trace_kmalloc+0x2a/0xf0 [ 543.745442][ T31] ? __nla_parse+0x40/0x60 [ 543.750453][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 543.758025][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 543.764847][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 543.770498][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 543.776751][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 543.781725][ T31] genl_rcv_msg+0x61c/0x7a0 [ 543.786926][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.792301][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 543.798806][ T31] netlink_rcv_skb+0x232/0x4b0 [ 543.803609][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.808794][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.814261][ T31] ? down_read+0x270/0x2e0 [ 543.818715][ T31] ? genl_rcv+0xd/0x40 [ 543.822798][ T31] genl_rcv+0x28/0x40 [ 543.827249][ T31] netlink_unicast+0x75c/0x8e0 [ 543.832061][ T31] netlink_sendmsg+0x813/0xb40 [ 543.837060][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.842387][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.847767][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.853094][ T31] ____sys_sendmsg+0x972/0x9f0 [ 543.858373][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.863708][ T31] ? import_iovec+0x73/0xa0 [ 543.868441][ T31] ___sys_sendmsg+0x2a5/0x360 [ 543.873127][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 543.878399][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.883635][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 543.888973][ T31] ? __fget_files+0x2a/0x420 [ 543.893595][ T31] ? __fget_files+0x3a0/0x420 [ 543.898597][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.903573][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.909214][ T31] ? handle_softirqs+0x715/0x840 [ 543.914641][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.920736][ T31] do_syscall_64+0x15f/0xf80 [ 543.925613][ T31] ? clear_bhb_loop+0x40/0x90 [ 543.930320][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.936308][ T31] RIP: 0033:0x7f7180d9cdd9 [ 543.940728][ T31] RSP: 002b:00007f7181b82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.949464][ T31] RAX: ffffffffffffffda RBX: 00007f7181016090 RCX: 00007f7180d9cdd9 [ 543.958095][ T31] RDX: 0000000000008088 RSI: 0000200000000c00 RDI: 000000000000000c [ 543.966123][ T31] RBP: 00007f7180e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 543.974634][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.982637][ T31] R13: 00007f7181016128 R14: 00007f7181016090 R15: 00007fff2ec11478 [ 543.990848][ T31] [ 543.994236][ T31] INFO: task syz.4.2247:13814 blocked for more than 143 seconds. [ 544.001954][ T31] Not tainted syzkaller #0 [ 544.007334][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.016084][ T31] task:syz.4.2247 state:D stack:26880 pid:13814 tgid:13813 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 544.028103][ T31] Call Trace: [ 544.031388][ T31] [ 544.039078][ T31] __schedule+0x17b4/0x5680 [ 544.044042][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 544.049023][ T31] ? __pfx___schedule+0x10/0x10 [ 544.054289][ T31] ? schedule+0x90/0x360 [ 544.058571][ T31] schedule+0x164/0x360 [ 544.062734][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.068645][ T31] __mutex_lock+0x7f7/0x1550 [ 544.073340][ T31] ? kernel_text_address+0xa5/0xe0 [ 544.078633][ T31] ? __mutex_lock+0x608/0x1550 [ 544.083441][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 544.088194][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.093226][ T31] ? stack_trace_save+0xa9/0x100 [ 544.098570][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 544.103541][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.108863][ T31] genl_rcv_msg+0x10b/0x7a0 [ 544.113392][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.118754][ T31] netlink_rcv_skb+0x232/0x4b0 [ 544.123560][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.128935][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.134311][ T31] ? down_read+0x270/0x2e0 [ 544.138735][ T31] ? genl_rcv+0xd/0x40 [ 544.142814][ T31] genl_rcv+0x28/0x40 [ 544.146859][ T31] netlink_unicast+0x75c/0x8e0 [ 544.151641][ T31] netlink_sendmsg+0x813/0xb40 [ 544.156947][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.162263][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.167271][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.172570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.178170][ T31] __sys_sendto+0x672/0x710 [ 544.182707][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.188103][ T31] ? exc_page_fault+0x6a/0xc0 [ 544.192800][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 544.198495][ T31] __x64_sys_sendto+0xde/0x100 [ 544.203293][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.209433][ T31] do_syscall_64+0x15f/0xf80 [ 544.214326][ T31] ? trace_irq_disable+0x3b/0x140 [ 544.219362][ T31] ? clear_bhb_loop+0x40/0x90 [ 544.224318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.230520][ T31] RIP: 0033:0x7fc611d5d60e [ 544.235246][ T31] RSP: 002b:00007fc612b82e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 544.244284][ T31] RAX: ffffffffffffffda RBX: 00007fc612b846c0 RCX: 00007fc611d5d60e [ 544.252774][ T31] RDX: 0000000000000028 RSI: 00007fc612b83000 RDI: 0000000000000004 [ 544.260899][ T31] RBP: 0000000000000000 R08: 00007fc612b82f04 R09: 000000000000000c [ 544.268942][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 544.277574][ T31] R13: 00007fc612b82f58 R14: 00007fc612b83000 R15: 0000000000000000 [ 544.285860][ T31] [ 544.288917][ T31] INFO: task syz.4.2247:13823 blocked for more than 144 seconds. [ 544.297015][ T31] Not tainted syzkaller #0 [ 544.301976][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.310967][ T31] task:syz.4.2247 state:D stack:28704 pid:13823 tgid:13813 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 544.323125][ T31] Call Trace: [ 544.326484][ T31] [ 544.329427][ T31] __schedule+0x17b4/0x5680 [ 544.334569][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 544.339576][ T31] ? __pfx___schedule+0x10/0x10 [ 544.344810][ T31] ? schedule+0x90/0x360 [ 544.349098][ T31] schedule+0x164/0x360 [ 544.353267][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.359400][ T31] __mutex_lock+0x7f7/0x1550 [ 544.364486][ T31] ? kernel_text_address+0xa5/0xe0 [ 544.369892][ T31] ? __mutex_lock+0x608/0x1550 [ 544.374781][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 544.379475][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.384570][ T31] ? stack_trace_save+0xa9/0x100 [ 544.389532][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 544.395125][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.400282][ T31] genl_rcv_msg+0x10b/0x7a0 [ 544.404875][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.409932][ T31] netlink_rcv_skb+0x232/0x4b0 [ 544.414769][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.419813][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.425435][ T31] ? down_read+0x270/0x2e0 [ 544.429872][ T31] ? genl_rcv+0xd/0x40 [ 544.434318][ T31] genl_rcv+0x28/0x40 [ 544.438335][ T31] netlink_unicast+0x75c/0x8e0 [ 544.443118][ T31] netlink_sendmsg+0x813/0xb40 [ 544.448130][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.453478][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.458773][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.464147][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.469444][ T31] __sys_sendto+0x672/0x710 [ 544.474044][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.479129][ T31] ? fd_install+0x94/0x3d0 [ 544.483564][ T31] ? fd_install+0x306/0x3d0 [ 544.488578][ T31] __x64_sys_sendto+0xde/0x100 [ 544.493585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.500334][ T31] do_syscall_64+0x15f/0xf80 [ 544.505980][ T31] ? trace_irq_disable+0x3b/0x140 [ 544.511064][ T31] ? clear_bhb_loop+0x40/0x90 [ 544.516540][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.522485][ T31] RIP: 0033:0x7fc611d5d60e [ 544.527013][ T31] RSP: 002b:00007fc60fff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 544.535510][ T31] RAX: ffffffffffffffda RBX: 00007fc60fff66c0 RCX: 00007fc611d5d60e [ 544.543488][ T31] RDX: 0000000000000024 RSI: 00007fc60fff5000 RDI: 0000000000000003 [ 544.551853][ T31] RBP: 0000000000000000 R08: 00007fc60fff4f04 R09: 000000000000000c [ 544.559990][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 544.568034][ T31] R13: 00007fc60fff4f58 R14: 00007fc60fff5000 R15: 0000000000000000 [ 544.576361][ T31] [ 544.579398][ T31] INFO: task syz.2.2251:13827 blocked for more than 144 seconds. [ 544.597044][ T31] Not tainted syzkaller #0 [ 544.602026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.611125][ T31] task:syz.2.2251 state:D stack:27904 pid:13827 tgid:13826 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 544.623127][ T31] Call Trace: [ 544.626661][ T31] [ 544.629622][ T31] __schedule+0x17b4/0x5680 [ 544.634659][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 544.639669][ T31] ? __pfx___schedule+0x10/0x10 [ 544.644629][ T31] ? schedule+0x90/0x360 [ 544.648890][ T31] schedule+0x164/0x360 [ 544.653058][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.658583][ T31] __mutex_lock+0x7f7/0x1550 [ 544.663197][ T31] ? __mutex_lock+0x608/0x1550 [ 544.668350][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 544.673067][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.678763][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.684042][ T31] genl_rcv_msg+0x10b/0x7a0 [ 544.688572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.693614][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 544.699348][ T31] netlink_rcv_skb+0x232/0x4b0 [ 544.704201][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.709246][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.716144][ T31] ? down_read+0x270/0x2e0 [ 544.720615][ T31] ? genl_rcv+0xd/0x40 [ 544.725023][ T31] genl_rcv+0x28/0x40 [ 544.729024][ T31] netlink_unicast+0x75c/0x8e0 [ 544.734055][ T31] netlink_sendmsg+0x813/0xb40 [ 544.738864][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.744268][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.749228][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.755050][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.760381][ T31] __sys_sendto+0x672/0x710 [ 544.764956][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.770016][ T31] ? exc_page_fault+0x6a/0xc0 [ 544.774842][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 544.780162][ T31] __x64_sys_sendto+0xde/0x100 [ 544.785257][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.791338][ T31] do_syscall_64+0x15f/0xf80 [ 544.795986][ T31] ? trace_irq_disable+0x3b/0x140 [ 544.801025][ T31] ? clear_bhb_loop+0x40/0x90 [ 544.805775][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.811680][ T31] RIP: 0033:0x7fa42815d60e [ 544.816414][ T31] RSP: 002b:00007fa428fb8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 544.824863][ T31] RAX: ffffffffffffffda RBX: 00007fa428fba6c0 RCX: 00007fa42815d60e [ 544.832843][ T31] RDX: 0000000000000020 RSI: 00007fa428fb9000 RDI: 0000000000000006 [ 544.841431][ T31] RBP: 0000000000000000 R08: 00007fa428fb8f04 R09: 000000000000000c [ 544.850252][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 544.858515][ T31] R13: 00007fa428fb8f58 R14: 00007fa428fb9000 R15: 0000000000000000 [ 544.866854][ T31] [ 544.869920][ T31] INFO: task syz.0.2250:13833 blocked for more than 144 seconds. [ 544.877956][ T31] Not tainted syzkaller #0 [ 544.882892][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.891712][ T31] task:syz.0.2250 state:D stack:27064 pid:13833 tgid:13830 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 544.904085][ T31] Call Trace: [ 544.907417][ T31] [ 544.910377][ T31] __schedule+0x17b4/0x5680 [ 544.915256][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 544.920259][ T31] ? __pfx___schedule+0x10/0x10 [ 544.925200][ T31] ? schedule+0x90/0x360 [ 544.929455][ T31] schedule+0x164/0x360 [ 544.933620][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.939391][ T31] __mutex_lock+0x7f7/0x1550 [ 544.944057][ T31] ? __mutex_lock+0x608/0x1550 [ 544.948836][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 544.953526][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.958886][ T31] ? radix_tree_lookup+0x44/0x290 [ 544.964254][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.969388][ T31] genl_rcv_msg+0x10b/0x7a0 [ 544.974157][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.979339][ T31] netlink_rcv_skb+0x232/0x4b0 [ 544.984174][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.989396][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.995850][ T31] ? down_read+0x270/0x2e0 [ 545.000307][ T31] ? genl_rcv+0xd/0x40 [ 545.004461][ T31] genl_rcv+0x28/0x40 [ 545.008487][ T31] netlink_unicast+0x75c/0x8e0 [ 545.013269][ T31] netlink_sendmsg+0x813/0xb40 [ 545.018100][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.023402][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.028665][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.034003][ T31] ____sys_sendmsg+0x972/0x9f0 [ 545.038778][ T31] ? __might_fault+0xaf/0x130 [ 545.043472][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.048836][ T31] ? import_iovec+0x73/0xa0 [ 545.053356][ T31] ___sys_sendmsg+0x2a5/0x360 [ 545.058348][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 545.063304][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.068792][ T31] ? futex_wait+0x2a2/0x390 [ 545.073387][ T31] ? __fget_files+0x2a/0x420 [ 545.079463][ T31] ? __fget_files+0x3a0/0x420 [ 545.084748][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 545.089726][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.095758][ T31] ? rcu_is_watching+0x15/0xb0 [ 545.100567][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.106808][ T31] do_syscall_64+0x15f/0xf80 [ 545.111429][ T31] ? trace_irq_disable+0x3b/0x140 [ 545.116623][ T31] ? clear_bhb_loop+0x40/0x90 [ 545.121337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.127590][ T31] RIP: 0033:0x7efe27f9cdd9 [ 545.132034][ T31] RSP: 002b:00007efe28e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.140513][ T31] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9cdd9 [ 545.148558][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 545.156909][ T31] RBP: 00007efe28032d69 R08: 0000000000000000 R09: 0000000000000000 [ 545.164952][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.172928][ T31] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007ffe534df7b8 [ 545.181198][ T31] [ 545.184560][ T31] INFO: task syz.1.2256:13852 blocked for more than 144 seconds. [ 545.192310][ T31] Not tainted syzkaller #0 [ 545.197443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.206150][ T31] task:syz.1.2256 state:D stack:28368 pid:13852 tgid:13849 ppid:5618 task_flags:0x400040 flags:0x00080002 [ 545.218465][ T31] Call Trace: [ 545.221777][ T31] [ 545.224800][ T31] __schedule+0x17b4/0x5680 [ 545.229320][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 545.234394][ T31] ? __pfx___schedule+0x10/0x10 [ 545.239269][ T31] ? schedule+0x90/0x360 [ 545.243526][ T31] schedule+0x164/0x360 [ 545.248021][ T31] schedule_preempt_disabled+0x13/0x30 [ 545.253493][ T31] __mutex_lock+0x7f7/0x1550 [ 545.258171][ T31] ? kernel_text_address+0xa5/0xe0 [ 545.263301][ T31] ? __mutex_lock+0x608/0x1550 [ 545.268141][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 545.272842][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 545.278224][ T31] ? stack_trace_save+0xa9/0x100 [ 545.283200][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 545.288464][ T31] ? radix_tree_lookup+0x240/0x290 [ 545.293642][ T31] genl_rcv_msg+0x10b/0x7a0 [ 545.298240][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.303305][ T31] netlink_rcv_skb+0x232/0x4b0 [ 545.308381][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.313429][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.318950][ T31] ? down_read+0x270/0x2e0 [ 545.323412][ T31] ? genl_rcv+0xd/0x40 [ 545.327643][ T31] genl_rcv+0x28/0x40 [ 545.331676][ T31] netlink_unicast+0x75c/0x8e0 [ 545.336804][ T31] netlink_sendmsg+0x813/0xb40 [ 545.341597][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.346954][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.351911][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.357282][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.362584][ T31] __sys_sendto+0x672/0x710 [ 545.367433][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 545.372501][ T31] ? exc_page_fault+0x6a/0xc0 [ 545.377252][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 545.382558][ T31] __x64_sys_sendto+0xde/0x100 [ 545.387391][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.393470][ T31] do_syscall_64+0x15f/0xf80 [ 545.398691][ T31] ? trace_irq_disable+0x3b/0x140 [ 545.403836][ T31] ? clear_bhb_loop+0x40/0x90 [ 545.408527][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.414475][ T31] RIP: 0033:0x7f4a61b5d60e [ 545.418894][ T31] RSP: 002b:00007f4a5fdd3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 545.427639][ T31] RAX: ffffffffffffffda RBX: 00007f4a5fdd56c0 RCX: 00007f4a61b5d60e [ 545.435735][ T31] RDX: 0000000000000020 RSI: 00007f4a5fdd4000 RDI: 0000000000000005 [ 545.443762][ T31] RBP: 0000000000000000 R08: 00007f4a5fdd3f04 R09: 000000000000000c [ 545.451737][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 545.460069][ T31] R13: 00007f4a5fdd3f58 R14: 00007f4a5fdd4000 R15: 0000000000000000 [ 545.468139][ T31] [ 545.471176][ T31] INFO: task syz-executor:13855 blocked for more than 145 seconds. [ 545.479878][ T31] Not tainted syzkaller #0 [ 545.485173][ T25] block nbd3: Possible stuck request ffff888027bf7000: control (read@0,1024B). Runtime 300 seconds [ 545.495913][ T25] block nbd3: Possible stuck request ffff888027bf71c0: control (read@1024,1024B). Runtime 300 seconds [ 545.507094][ T25] block nbd3: Possible stuck request ffff888027bf7380: control (read@2048,1024B). Runtime 300 seconds [ 545.518348][ T25] block nbd3: Possible stuck request ffff888027bf7540: control (read@3072,1024B). Runtime 300 seconds [ 545.529488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.538203][ T31] task:syz-executor state:D stack:22456 pid:13855 tgid:13855 ppid:1 task_flags:0x400140 flags:0x00080002 [ 545.550502][ T31] Call Trace: [ 545.554005][ T31] [ 545.556968][ T31] __schedule+0x17b4/0x5680 [ 545.561491][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 545.566510][ T31] ? __pfx___schedule+0x10/0x10 [ 545.571387][ T31] ? schedule+0x90/0x360 [ 545.575984][ T31] schedule+0x164/0x360 [ 545.580158][ T31] schedule_preempt_disabled+0x13/0x30 [ 545.585701][ T31] __mutex_lock+0x7f7/0x1550 [ 545.590305][ T31] ? kernel_text_address+0xa5/0xe0 [ 545.595491][ T31] ? __mutex_lock+0x608/0x1550 [ 545.600269][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 545.605266][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 545.610303][ T31] ? stack_trace_save+0xa9/0x100 [ 545.615323][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 545.620274][ T31] ? radix_tree_lookup+0x240/0x290 [ 545.625561][ T31] genl_rcv_msg+0x10b/0x7a0 [ 545.630121][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.635767][ T31] netlink_rcv_skb+0x232/0x4b0 [ 545.640582][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.645702][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.651013][ T31] ? down_read+0x270/0x2e0 [ 545.655542][ T31] ? genl_rcv+0xd/0x40 [ 545.659653][ T31] genl_rcv+0x28/0x40 [ 545.663649][ T31] netlink_unicast+0x75c/0x8e0 [ 545.668737][ T31] netlink_sendmsg+0x813/0xb40 [ 545.673527][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.678896][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.683898][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.689197][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.694791][ T31] __sys_sendto+0x672/0x710 [ 545.699314][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 545.704455][ T31] ? fd_install+0x94/0x3d0 [ 545.708881][ T31] ? fd_install+0x306/0x3d0 [ 545.713399][ T31] __x64_sys_sendto+0xde/0x100 [ 545.718513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.724741][ T31] do_syscall_64+0x15f/0xf80 [ 545.729400][ T31] ? clear_bhb_loop+0x40/0x90 [ 545.735047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.740998][ T31] RIP: 0033:0x7f079a35d60e [ 545.745988][ T31] RSP: 002b:00007ffd01681e18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 545.754467][ T31] RAX: ffffffffffffffda RBX: 0000555571ba0500 RCX: 00007f079a35d60e [ 545.762443][ T31] RDX: 0000000000000020 RSI: 00007f079b144670 RDI: 0000000000000005 [ 545.771886][ T31] RBP: 0000000000000001 R08: 00007ffd01681e94 R09: 000000000000000c [ 545.779937][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 545.788031][ T31] R13: 00007ffd01681ee8 R14: 00007f079b144670 R15: 0000000000000000 [ 545.798904][ T31] [ 545.802438][ T31] [ 545.802438][ T31] Showing all locks held in the system: [ 545.810702][ T31] 1 lock held by khungtaskd/31: [ 545.815870][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 545.831243][ T31] 2 locks held by getty/5379: [ 545.836970][ T31] #0: ffff8880365d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 545.848553][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 545.859884][ T31] 4 locks held by kworker/u8:10/7577: [ 545.865339][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 545.875610][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 545.885708][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 545.895405][ T31] #3: ffffffff9a699c18 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 545.906622][ T31] 1 lock held by udevd/8787: [ 545.911225][ T31] #0: ffff888027b58350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 545.920885][ T31] 6 locks held by syz.3.2239/13789: [ 545.926171][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.934539][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 545.943561][ T31] #2: ffff888027b02a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 545.954379][ T31] #3: ffff888027a4abd8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 545.964073][ T31] #4: ffff888027a4a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 545.976193][ T31] #5: ffff888027a4a5d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 545.989011][ T31] 2 locks held by syz.4.2247/13814: [ 545.994363][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.002623][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.011725][ T31] 2 locks held by syz.4.2247/13823: [ 546.017262][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.025580][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.035710][ T31] 2 locks held by syz.2.2251/13827: [ 546.041280][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.049906][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.058968][ T31] 2 locks held by syz.0.2250/13833: [ 546.064205][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.072420][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.081954][ T31] 2 locks held by syz.1.2256/13852: [ 546.087218][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.095691][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.105004][ T31] 2 locks held by syz-executor/13855: [ 546.110377][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.123886][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.132900][ T31] 2 locks held by syz-executor/13876: [ 546.138672][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.146985][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.156058][ T31] 2 locks held by syz-executor/13878: [ 546.161429][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.169943][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.179007][ T31] 2 locks held by syz-executor/13882: [ 546.184782][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.193097][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.202554][ T31] 2 locks held by syz-executor/13885: [ 546.208051][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.216313][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.225637][ T31] 2 locks held by syz-executor/13948: [ 546.231007][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.240039][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.249933][ T31] 2 locks held by syz-executor/13965: [ 546.255674][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.264021][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.273052][ T31] 2 locks held by syz-executor/13980: [ 546.278503][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.287030][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.296306][ T31] 2 locks held by syz-executor/13985: [ 546.301704][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.309984][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.319377][ T31] 2 locks held by syz-executor/13992: [ 546.324902][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.333117][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.342238][ T31] 2 locks held by syz-executor/14041: [ 546.347942][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.356380][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.365436][ T31] 2 locks held by syz-executor/14060: [ 546.370805][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.379327][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.388400][ T31] 2 locks held by syz-executor/14081: [ 546.393975][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.402189][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.411703][ T31] 2 locks held by syz-executor/14085: [ 546.417242][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.425576][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.434921][ T31] 2 locks held by syz-executor/14087: [ 546.440296][ T31] #0: ffffffff8fe3e048 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.448581][ T31] #1: ffffffff8fe3de80 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 546.457644][ T31] [ 546.459973][ T31] ============================================= [ 546.459973][ T31] [ 546.468760][ T31] NMI backtrace for cpu 1 [ 546.468779][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.468799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.468816][ T31] Call Trace: [ 546.468823][ T31] [ 546.468830][ T31] dump_stack_lvl+0xe8/0x150 [ 546.468855][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 546.468881][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.468903][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 546.468933][ T31] sys_info+0x135/0x170 [ 546.468955][ T31] watchdog+0xfd3/0x1030 [ 546.468987][ T31] ? watchdog+0x1c9/0x1030 [ 546.469018][ T31] kthread+0x388/0x470 [ 546.469042][ T31] ? __pfx_watchdog+0x10/0x10 [ 546.469064][ T31] ? __pfx_kthread+0x10/0x10 [ 546.469087][ T31] ret_from_fork+0x514/0xb70 [ 546.469109][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 546.469128][ T31] ? __switch_to+0xc79/0x1410 [ 546.469155][ T31] ? __pfx_kthread+0x10/0x10 [ 546.469178][ T31] ret_from_fork_asm+0x1a/0x30 [ 546.469214][ T31] [ 546.469221][ T31] Sending NMI from CPU 1 to CPUs 0: [ 546.580085][ C0] NMI backtrace for cpu 0 [ 546.580101][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 546.580118][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.580127][ C0] RIP: 0010:__this_cpu_preempt_check+0x4/0x20 [ 546.580152][ C0] Code: 02 9c 7f f5 e8 ed dc 8a f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 89 fe 48 c7 c7 60 aa 28 8c e9 fd fe ff ff cc cc cc cc cc cc cc [ 546.580165][ C0] RSP: 0018:ffffc90000007fc8 EFLAGS: 00000002 [ 546.580179][ C0] RAX: ffffffff8e607d18 RBX: 0000000000000000 RCX: 0000000080010001 [ 546.580190][ C0] RDX: 0000000000000000 RSI: ffffffff8bc8df60 RDI: ffffffff8bc8df80 [ 546.580200][ C0] RBP: 0000000000000001 R08: ffffffff90309af7 R09: 1ffffffff206135e [ 546.580210][ C0] R10: dffffc0000000000 R11: fffffbfff206135f R12: dffffc0000000000 [ 546.580221][ C0] R13: 0000000000000000 R14: 1ffff110170c47c8 R15: 0000000000000000 [ 546.580231][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 546.580243][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.580253][ C0] CR2: 000055ed8d3ddee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 546.580267][ C0] Call Trace: [ 546.580274][ C0] [ 546.580280][ C0] __sysvec_apic_timer_interrupt+0x165/0x430 [ 546.580301][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 546.580318][ C0] [ 546.580323][ C0] [ 546.580329][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.580345][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 546.580362][ C0] Code: 4b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 71 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 546.580374][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 546.580387][ C0] RAX: 00000000040889ff RBX: ffffffff819a815a RCX: 0000000080000001 [ 546.580397][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa40d5 RDI: ffffffff8c28aa60 [ 546.580407][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 546.580417][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 546.580427][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 546.580440][ C0] ? do_idle+0x36a/0x5f0 [ 546.580462][ C0] default_idle+0x9/0x20 [ 546.580479][ C0] default_idle_call+0x72/0xb0 [ 546.580498][ C0] do_idle+0x36a/0x5f0 [ 546.580513][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.580531][ C0] ? __pfx_do_idle+0x10/0x10 [ 546.580552][ C0] cpu_startup_entry+0x43/0x60 [ 546.580569][ C0] rest_init+0x2de/0x300 [ 546.580589][ C0] start_kernel+0x38a/0x3e0 [ 546.580663][ C0] x86_64_start_reservations+0x24/0x30 [ 546.580690][ C0] x86_64_start_kernel+0x143/0x1c0 [ 546.580710][ C0] common_startup_64+0x13e/0x147 [ 546.580738][ C0] [ 546.864824][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 546.871688][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.880803][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.890862][ T31] Call Trace: [ 546.894141][ T31] [ 546.897073][ T31] vpanic+0x56c/0xa60 [ 546.901058][ T31] ? __pfx___schedule+0x10/0x10 [ 546.905911][ T31] ? __pfx_vpanic+0x10/0x10 [ 546.910413][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 546.916578][ T31] panic+0xc5/0xd0 [ 546.920301][ T31] ? __pfx_panic+0x10/0x10 [ 546.924713][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 546.930090][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 546.936246][ T31] watchdog+0x102c/0x1030 [ 546.940581][ T31] ? watchdog+0x1c9/0x1030 [ 546.945006][ T31] kthread+0x388/0x470 [ 546.949074][ T31] ? __pfx_watchdog+0x10/0x10 [ 546.953750][ T31] ? __pfx_kthread+0x10/0x10 [ 546.958341][ T31] ret_from_fork+0x514/0xb70 [ 546.962928][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 546.968033][ T31] ? __switch_to+0xc79/0x1410 [ 546.972712][ T31] ? __pfx_kthread+0x10/0x10 [ 546.977299][ T31] ret_from_fork_asm+0x1a/0x30 [ 546.982072][ T31] [ 546.985738][ T31] Kernel Offset: disabled [ 546.990063][ T31] Rebooting in 86400 seconds..