last executing test programs: 22.533516683s ago: executing program 2 (id=7136): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) 22.194610981s ago: executing program 3 (id=7138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket(0x3, 0x6, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) sendto$inet6(r0, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) socket(0x3, 0x6, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000600)) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) (async) 22.137461395s ago: executing program 2 (id=7141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}, 0x1, 0x0, 0xff1f000000000000}, 0x0) 21.942006415s ago: executing program 2 (id=7143): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xfffeffff}, 0x8) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r0 = socket(0x8, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x184}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff31b, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @alu={0x3, 0x1, 0xa, 0x0, 0x9, 0x10, 0x10}, @generic={0x1, 0x2, 0x3, 0x7, 0xfffffff8}, @alu={0x4, 0x0, 0x4, 0x8, 0xb, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x5f, &(0x7f00000003c0)=""/95, 0x40f00, 0x0, '\x00', r6, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xd, 0x8001, 0x5}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000000680)=[r4, r4, 0x1], &(0x7f00000006c0)=[{0x5, 0x4, 0x6, 0x3}, {0x4, 0x2, 0xa, 0xa}], 0x10, 0x8}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xfdff) (async) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, 0x14) 21.915314568s ago: executing program 3 (id=7144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x2000000) 21.848027083s ago: executing program 4 (id=7145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000680)="a4b7e6878dbbb3320a975b391069e31baa608c4012ffbbe58f86953f067670f0de7b81ba2407ad76ee92f4", 0x2b, 0x2000c801, &(0x7f0000000140)={0xa, 0x4e20, 0x20000, @loopback, 0xffffffff}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x4ed99f41, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x7, 0x0, 0x8000, r1, 0x7fffffff, '\x00', r3, r0, 0x2, 0x1, 0x3, 0xf, @value=r4}, 0x50) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @loopback}}) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r5, 0x372) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000140)="e02742e8680d85ff978a762f88a807000000", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'bond_slave_0\x00', @random="2bb22796737c"}) 21.786387668s ago: executing program 1 (id=7146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="8400006300520001002271e11f5ad48c2c5080235e298504bd", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa2f"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 21.605808667s ago: executing program 0 (id=7147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.458315363s ago: executing program 3 (id=7148): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x9, 0x1e0e, {{0x8, 0x4, 0x1, 0x2d, 0x20, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@cipso={0x86, 0xc, 0x1, [{0x5, 0x6, "d0ed98b7"}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x6e8, 0x5, 0x480, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x6, 0x4, 0x8}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/249, 0xf9) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x78, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xd}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x31}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x80000000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) close(r0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x9, 0x1e0e, {{0x8, 0x4, 0x1, 0x2d, 0x20, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@cipso={0x86, 0xc, 0x1, [{0x5, 0x6, "d0ed98b7"}]}]}}}}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x6e8, 0x5, 0x480, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x1, 0x6, 0x4, 0x8}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000000100)=""/249, 0xf9) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x78, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xd}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x31}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x80000000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x78}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) 21.43784795s ago: executing program 1 (id=7149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="2e9b5b00070ed3e03dd65193dfb6c575963f86dd606712e90032040003000000013e9c6d30ba44c068586dbd753c000000eaebfd2607", 0x27}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000040), 0x5}, {&(0x7f0000000040)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}, {&(0x7f00000001c0)="42569e24e088cf56a9bb2f2ad9cb95ec1c0bf4d6aa16b931209947fc55a13ccabe2774b4c08430f730e97576c072cad2d2fc782f45884ed5998c7cd3f2d2e7fb992e994dd2ccdf8e78182bb603f17fec26bbf743506dee0e121c25018347e315820defb195585ed4a08482fa5b982a989cbe"}, {&(0x7f0000000280)="da9e11b5cdcb2aa5a2928c2c7208a8cd9ff31b8700d7c0a2f59093f99db10f4eb6de4823036b570d3b4e49e3a7e82c2ceca1b8fe72840d8d2c95810bcd61a361d4d5ecb54356e5669cde20b2af4243be92b5533f5036e41a88fe0bb69f9d9a70f524a45d5bb4bd75bd416c4410c99aba391de283839032302c542e6a2b93f6dc5b6a17093b4d9c0cc66cd22f13030187632815cf48d2422a5c3407a1b72ed9d59258dbafeebd"}, {0x0}, {&(0x7f0000000340)="2ce06e71ac3f5c5980c1b529901ac8307bbde18620b55c321ff60def4b31399bacb7540deeece3bc214b662648a021e8b6663fd356ac742a4ebe2b71ab853244d8c84ec68b8ae418d8a00b79b53efc736d3df53078ed62bd59f9c87c62"}], 0x49) 21.232223038s ago: executing program 3 (id=7150): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f0000000440)=""/117, &(0x7f0000000180)=0x75) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="2e9b5b00070ed3e03dd65193dfb6c575963f86dd606712e90032040003000000013e9c6d30ba44c068586dbd753c000000eaebfd2607", 0x27}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000040), 0x5}, {&(0x7f0000000040)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}, {&(0x7f00000001c0)="42569e24e088cf56a9bb2f2ad9cb95ec1c0bf4d6aa16b931209947fc55a13ccabe2774b4c08430f730e97576c072cad2d2fc782f45884ed5998c7cd3f2d2e7fb992e994dd2ccdf8e78182bb603f17fec26bbf743506dee0e121c25018347e315820defb195585ed4a08482fa5b982a989cbe"}, {&(0x7f0000000280)="da9e11b5cdcb2aa5a2928c2c7208a8cd9ff31b8700d7c0a2f59093f99db10f4eb6de4823036b570d3b4e49e3a7e82c2ceca1b8fe72840d8d2c95810bcd61a361d4d5ecb54356e5669cde20b2af4243be92b5533f5036e41a88fe0bb69f9d9a70f524a45d5bb4bd75bd416c4410c99aba391de283839032302c542e6a2b93f6dc5b6a17093b4d9c0cc66cd22f13030187632815cf48d2422a5c3407a1b72ed9d59258dbafeebd"}, {0x0}, {&(0x7f0000000340)="2ce06e71ac3f5c5980c1b529901ac8307bbde18620b55c321ff60def4b31399bacb7540deeece3bc214b662648a021e8b6663fd356ac742a4ebe2b71ab853244d8c84ec68b8ae418d8a00b79b53efc736d3df53078ed62bd59f9c87c62"}], 0x49) 20.653992803s ago: executing program 0 (id=7151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x2000000) 20.607735115s ago: executing program 4 (id=7152): socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x5d007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x40844}}], 0x1, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, r3, r7}, 0xc) socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0xf9, '\x00', 0x0, 0x25, r1}, 0x94) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000001000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0x40000, @private0, 0x3}}}, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'\x00', &(0x7f00000001c0)=@ethtool_rxfh={0x1, 0x81, 0xfffffffe, 0xffffffff, 0x0, "0100", 0xfa}}) 20.539682805s ago: executing program 1 (id=7153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={0x0, r7}, 0x18) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0xfffffffffffffffe}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000800)={0x4, &(0x7f0000000780)=[{0x1ff, 0x6a, &(0x7f0000000500)="56a865e1dc10cf058203e4d8d4fcc9117ccb20b2a5ec92aa598947720fcff5b6e11162f1b26f7dfa19b6db30d7f98dc940bb0c6e33998e1ab86c5c8991b1c4e4005be89f4d3ab6c77a97e5ab7338b9b6df77fc835ae87dcd977df6810d66d1e45f6d07218320dfeba864", 0x1, 0x1}, {0x9, 0x11, &(0x7f0000000240)="bb32d5d7edf6d632d0b89539887da634d1", 0x0, 0x1}, {0x6, 0xc8, &(0x7f0000000580)="e18452b05dc8460a6012cbb98695e9df3a15b0802ebb7a8bede20475a2a4bbe0237e2eaf54b4e7e340bf6a24e02518298631251a52f1463b895e67bc773595c5af6193b167cc7282b6ce63ffa9b114a5bf0ff2313bd78af4dff48c4298c364f2054e3c43826018cf66cfe0f751df6f5347a7129e540f6c97b7fd995628df8971a31a1c2851da382aa382d36a897c098e170f4e0c93a5ed24a94e775c6945996b83663e2724edce32baea448c0b56f0e1b558b7d5914681a0acf130e581fc0bcf2be8f2f616db7289"}, {0xd437, 0xdc, &(0x7f0000000680)="73895b06c4f70ba25e7700766a4d2e39246876a64ec3bd714eef9d98e945afb2515ce08f33d19187eea7f98f973589a7837cb3751673da00626aa6c781a8df3f5e5c40d505c9d71aec721ffa06ddaa1a3abdb8116b3619a0c9fe8aded5028b7751a5594d72805d5b0a5a100b74f767fa5968f9f4920336679ba709a895b13e41e3dd149d92029a741dac6fd5c3fb045a8a6508be31908359d31022e74b2434e43a443d5f7f79c53ba30fe36855107f573b3f9b104e9edccea11ec1209030318a50ff43551fa1f3e39ace6bbb57b82671d97da147d669e0e70dfc326c", 0x0, 0x1}]}) 20.524958845s ago: executing program 3 (id=7154): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf3000000000000025000c0007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}}, 0x4000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x20, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x8, 0xa5, 0x0, 0x0, @u32=0xff}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x20}], 0x1}, 0x0) 20.276255998s ago: executing program 4 (id=7155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000300)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x2000000) 20.256617394s ago: executing program 3 (id=7156): r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e25, @empty}, 0xfb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, 0x101}) socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 20.04288334s ago: executing program 1 (id=7157): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = accept(r0, &(0x7f0000000400), &(0x7f0000000100)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x884) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x40049409, 0x0) r10 = gettid() sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) 19.869739382s ago: executing program 0 (id=7158): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x48, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x6, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xe1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a", 0xdb, 0x880, 0x0, 0x0) 19.550519396s ago: executing program 4 (id=7159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa900000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x8eb2e000f2c28467, 0x7}, 0x94) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x15) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x5, @any, 0x4, 0x2}, 0xe) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000008000a000000000055a83f21fb345047c3ba5ace48e98e77978be8e15fbad3918c4647a123ecdcef9907b368a0ae2c73e209e2b55024a3fa25a44554f68fbeec5aaeb6ae9c0df6167a2796cdb28d9ba08d0331393d25c3fc5f931fb6e41a932850bfcf0f9c245127c5aa16a67f3126a9069f548986c272ddf4eaa1cc7fda6d45b769f412cbf9465a37d63562b24ce110928ac98cb9ac2d1b0033"], 0x20}}, 0x0) r8 = socket(0x2b, 0x80801, 0x1) getsockopt$netlink(r8, 0x10e, 0x4, 0x0, 0x0) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000080)=""/55, &(0x7f00000000c0)=0x37) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000"], 0x50) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8) 19.508465311s ago: executing program 1 (id=7160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r0, 0x0, 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='rpc_buf_alloc\x00', r5, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x480, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000054000000080001007063690011000200303030303a30303a31302e30000000000800034c5b032500"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x400c000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000c000780080008400000009e0500010006000000050005000ad5000000000000000000000900020073797a310000000011000300686173683a69702c706f727400000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"8c41ca80301ca66cb6cd69a245912a8a", 0x0, 0x0, {0x7fff, 0x800}, {0x2063, 0x4}, 0x0, [0x8, 0x3, 0xedd, 0x7, 0x2, 0xa, 0x7fffffffffffffff, 0x52e20851, 0x5, 0x80000001, 0x8, 0x7, 0x2, 0x7f, 0x2]}) 19.372435302s ago: executing program 0 (id=7161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015005c073591829b13256fb41786803b0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18.474012974s ago: executing program 0 (id=7162): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13b81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000002c0), 0x0, 0x4048010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r3, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x2, 0x16, 0x3, 0x6, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x2, 0x6, 0x8, 0x5, 0xab}]}, 0x30}}, 0x4004855) 16.55960597s ago: executing program 4 (id=7164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000000)=0x80, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x20, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r3) 16.38424894s ago: executing program 4 (id=7165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000300)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x2000000) 16.279098368s ago: executing program 0 (id=7166): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0x0, 0x6, 0x10000}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09000000010000000000"], 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) r6 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000500)) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe0ff, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 16.249715181s ago: executing program 1 (id=7167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="2f0429bd7000fbdbdf25030000000c00020007000000000020000800010000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000ffeadf2501000000040003000c0001800800030003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x84}}, 0x20008040) 16.052308162s ago: executing program 2 (id=7168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (fail_nth: 2) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x4000080) 15.232441469s ago: executing program 2 (id=7169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe1b, 0x0, &(0x7f0000000080)="c14eb0800060d308098e00000000fbd1c168f956014ef772cbd4e89b8a937462a87eaffd19fb6c8b994df281ef4e51df22025c98e8da", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@alu={0x7, 0x0, 0x9, 0xa, 0x0, 0x0, 0x4}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x8}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000000, '\x00', 0x0, 0x0, 0x0, 0x100, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.552603833s ago: executing program 2 (id=7170): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = accept(r0, &(0x7f0000000400), &(0x7f0000000100)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x884) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x40049409, 0x0) r10 = gettid() sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) 1.015662914s ago: executing program 32 (id=7166): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0x0, 0x6, 0x10000}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09000000010000000000"], 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) r6 = socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000500)) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe0ff, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 943.515933ms ago: executing program 33 (id=7167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="2f0429bd7000fbdbdf25030000000c00020007000000000020000800010000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000ffeadf2501000000040003000c0001800800030003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x84}}, 0x20008040) 863.88258ms ago: executing program 34 (id=7165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000300)) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) pipe(&(0x7f0000000000)) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x2000000) 0s ago: executing program 35 (id=7170): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = accept(r0, &(0x7f0000000400), &(0x7f0000000100)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x884) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x40049409, 0x0) r10 = gettid() sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) kernel console output (not intermixed with test programs): : 30929 Comm: syz.3.6608 Not tainted syzkaller #0 PREEMPT(full) [ 1319.552829][T30929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1319.552842][T30929] Call Trace: [ 1319.552851][T30929] [ 1319.552860][T30929] dump_stack_lvl+0x189/0x250 [ 1319.552889][T30929] ? __pfx____ratelimit+0x10/0x10 [ 1319.552910][T30929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1319.552934][T30929] ? __pfx__printk+0x10/0x10 [ 1319.552962][T30929] ? __might_fault+0xb0/0x130 [ 1319.553002][T30929] should_fail_ex+0x414/0x560 [ 1319.553035][T30929] _copy_from_user+0x2d/0xb0 [ 1319.553059][T30929] ___sys_recvmsg+0x12e/0x510 [ 1319.553092][T30929] ? __pfx____sys_recvmsg+0x10/0x10 [ 1319.553145][T30929] ? __fget_files+0x3a0/0x420 [ 1319.553179][T30929] do_recvmmsg+0x307/0x770 [ 1319.553213][T30929] ? __pfx_do_recvmmsg+0x10/0x10 [ 1319.553251][T30929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1319.553292][T30929] __x64_sys_recvmmsg+0x190/0x240 [ 1319.553319][T30929] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1319.553340][T30929] ? rcu_is_watching+0x15/0xb0 [ 1319.553363][T30929] ? do_syscall_64+0xbe/0x3b0 [ 1319.553390][T30929] do_syscall_64+0xfa/0x3b0 [ 1319.553409][T30929] ? lockdep_hardirqs_on+0x9c/0x150 [ 1319.553428][T30929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.553447][T30929] ? clear_bhb_loop+0x60/0xb0 [ 1319.553470][T30929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.553489][T30929] RIP: 0033:0x7f9a05b8eba9 [ 1319.553515][T30929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.553532][T30929] RSP: 002b:00007f9a06a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1319.553553][T30929] RAX: ffffffffffffffda RBX: 00007f9a05dd5fa0 RCX: 00007f9a05b8eba9 [ 1319.553567][T30929] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1319.553580][T30929] RBP: 00007f9a06a07090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.553592][T30929] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1319.553603][T30929] R13: 00007f9a05dd6038 R14: 00007f9a05dd5fa0 R15: 00007ffd794f75b8 [ 1319.553636][T30929] [ 1319.810274][ T5879] Bluetooth: hci4: command tx timeout [ 1319.837335][T30932] netlink: 'syz.0.6609': attribute type 1 has an invalid length. [ 1319.845286][T30932] netlink: 'syz.0.6609': attribute type 2 has an invalid length. [ 1319.853306][T30932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1319.997398][T30904] lo speed is unknown, defaulting to 1000 [ 1320.005869][T30904] wg1 speed is unknown, defaulting to 1000 [ 1320.021722][T30904] lo speed is unknown, defaulting to 1000 [ 1320.076783][T30940] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6613'. [ 1320.221973][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6616'. [ 1320.465802][T30955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1320.773413][ T30] audit: type=1800 audit(1757460238.185:20): pid=30968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6623" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7106 res=0 errno=0 [ 1320.804929][T30968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1320.833344][T30968] netlink: 'syz.3.6623': attribute type 10 has an invalid length. [ 1320.851462][T30968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6623'. [ 1321.144305][T30974] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 1321.313541][T30983] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6628'. [ 1321.706942][T31001] FAULT_INJECTION: forcing a failure. [ 1321.706942][T31001] name failslab, interval 1, probability 0, space 0, times 0 [ 1321.796928][T31001] CPU: 1 UID: 0 PID: 31001 Comm: syz.4.6632 Not tainted syzkaller #0 PREEMPT(full) [ 1321.796960][T31001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1321.796971][T31001] Call Trace: [ 1321.796980][T31001] [ 1321.796989][T31001] dump_stack_lvl+0x189/0x250 [ 1321.797018][T31001] ? __pfx____ratelimit+0x10/0x10 [ 1321.797041][T31001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1321.797065][T31001] ? __pfx__printk+0x10/0x10 [ 1321.797095][T31001] ? __lock_acquire+0xab9/0xd20 [ 1321.797136][T31001] should_fail_ex+0x414/0x560 [ 1321.797170][T31001] should_failslab+0xa8/0x100 [ 1321.797202][T31001] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1321.797227][T31001] ? skb_clone+0x212/0x3a0 [ 1321.797258][T31001] skb_clone+0x212/0x3a0 [ 1321.797288][T31001] __netlink_deliver_tap+0x404/0x850 [ 1321.797325][T31001] ? netlink_deliver_tap+0x2e/0x1b0 [ 1321.797348][T31001] netlink_deliver_tap+0x19c/0x1b0 [ 1321.797370][T31001] netlink_unicast+0x7fa/0x9e0 [ 1321.797412][T31001] ? __pfx_netlink_unicast+0x10/0x10 [ 1321.797444][T31001] ? netlink_sendmsg+0x642/0xb30 [ 1321.797471][T31001] ? skb_put+0x11b/0x210 [ 1321.797498][T31001] netlink_sendmsg+0x805/0xb30 [ 1321.797531][T31001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1321.797558][T31001] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1321.797580][T31001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1321.797601][T31001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1321.797623][T31001] __sock_sendmsg+0x219/0x270 [ 1321.797657][T31001] ____sys_sendmsg+0x505/0x830 [ 1321.797689][T31001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1321.797725][T31001] ? import_iovec+0x74/0xa0 [ 1321.797752][T31001] ___sys_sendmsg+0x21f/0x2a0 [ 1321.797779][T31001] ? __pfx____sys_sendmsg+0x10/0x10 [ 1321.797848][T31001] ? __fget_files+0x2a/0x420 [ 1321.797865][T31001] ? __fget_files+0x3a0/0x420 [ 1321.797895][T31001] __x64_sys_sendmsg+0x19b/0x260 [ 1321.797923][T31001] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1321.797963][T31001] ? __pfx_ksys_write+0x10/0x10 [ 1321.797986][T31001] ? rcu_is_watching+0x15/0xb0 [ 1321.798012][T31001] ? do_syscall_64+0xbe/0x3b0 [ 1321.798039][T31001] do_syscall_64+0xfa/0x3b0 [ 1321.798059][T31001] ? lockdep_hardirqs_on+0x9c/0x150 [ 1321.798077][T31001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.798097][T31001] ? clear_bhb_loop+0x60/0xb0 [ 1321.798121][T31001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.798138][T31001] RIP: 0033:0x7f64b178eba9 [ 1321.798157][T31001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.798174][T31001] RSP: 002b:00007f64b26d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1321.798197][T31001] RAX: ffffffffffffffda RBX: 00007f64b19d5fa0 RCX: 00007f64b178eba9 [ 1321.798212][T31001] RDX: 0000000000044040 RSI: 0000200000000200 RDI: 0000000000000004 [ 1321.798225][T31001] RBP: 00007f64b26d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.798237][T31001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.798248][T31001] R13: 00007f64b19d6038 R14: 00007f64b19d5fa0 R15: 00007ffd0285e918 [ 1321.798284][T31001] [ 1321.891517][T31001] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 1322.789757][T31027] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6642'. [ 1322.942908][T31032] tipc: Enabling of bearer rejected, failed to enable media [ 1323.352382][T31047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1323.989026][T31070] FAULT_INJECTION: forcing a failure. [ 1323.989026][T31070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.005780][T31070] CPU: 1 UID: 0 PID: 31070 Comm: syz.1.6657 Not tainted syzkaller #0 PREEMPT(full) [ 1324.005810][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1324.005823][T31070] Call Trace: [ 1324.005831][T31070] [ 1324.005840][T31070] dump_stack_lvl+0x189/0x250 [ 1324.005871][T31070] ? __pfx____ratelimit+0x10/0x10 [ 1324.005893][T31070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1324.005917][T31070] ? __pfx__printk+0x10/0x10 [ 1324.005945][T31070] ? __might_fault+0xb0/0x130 [ 1324.005985][T31070] should_fail_ex+0x414/0x560 [ 1324.006018][T31070] _copy_from_user+0x2d/0xb0 [ 1324.006043][T31070] ___sys_sendmsg+0x158/0x2a0 [ 1324.006071][T31070] ? __pfx____sys_sendmsg+0x10/0x10 [ 1324.006137][T31070] ? __fget_files+0x2a/0x420 [ 1324.006154][T31070] ? __fget_files+0x3a0/0x420 [ 1324.006184][T31070] __x64_sys_sendmsg+0x19b/0x260 [ 1324.006211][T31070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1324.006245][T31070] ? __pfx_ksys_write+0x10/0x10 [ 1324.006268][T31070] ? rcu_is_watching+0x15/0xb0 [ 1324.006294][T31070] ? do_syscall_64+0xbe/0x3b0 [ 1324.006321][T31070] do_syscall_64+0xfa/0x3b0 [ 1324.006341][T31070] ? lockdep_hardirqs_on+0x9c/0x150 [ 1324.006362][T31070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.006381][T31070] ? clear_bhb_loop+0x60/0xb0 [ 1324.006413][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.006432][T31070] RIP: 0033:0x7f7b9b58eba9 [ 1324.006450][T31070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.006467][T31070] RSP: 002b:00007f7b9c480038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.006489][T31070] RAX: ffffffffffffffda RBX: 00007f7b9b7d5fa0 RCX: 00007f7b9b58eba9 [ 1324.006503][T31070] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1324.006516][T31070] RBP: 00007f7b9c480090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.006529][T31070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.006540][T31070] R13: 00007f7b9b7d6038 R14: 00007f7b9b7d5fa0 R15: 00007ffe56ed1d78 [ 1324.006574][T31070] [ 1324.648957][T31080] syzkaller0: entered promiscuous mode [ 1324.661678][T31080] syzkaller0: entered allmulticast mode [ 1324.765621][T31097] FAULT_INJECTION: forcing a failure. [ 1324.765621][T31097] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.779059][T31097] CPU: 1 UID: 0 PID: 31097 Comm: syz.2.6664 Not tainted syzkaller #0 PREEMPT(full) [ 1324.779087][T31097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1324.779098][T31097] Call Trace: [ 1324.779107][T31097] [ 1324.779115][T31097] dump_stack_lvl+0x189/0x250 [ 1324.779144][T31097] ? __pfx____ratelimit+0x10/0x10 [ 1324.779167][T31097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1324.779191][T31097] ? __pfx__printk+0x10/0x10 [ 1324.779225][T31097] ? __pfx___might_resched+0x10/0x10 [ 1324.779250][T31097] should_fail_ex+0x414/0x560 [ 1324.779282][T31097] should_failslab+0xa8/0x100 [ 1324.779313][T31097] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1324.779341][T31097] ? __alloc_skb+0x112/0x2d0 [ 1324.779367][T31097] __alloc_skb+0x112/0x2d0 [ 1324.779393][T31097] netlink_sendmsg+0x5c6/0xb30 [ 1324.779427][T31097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1324.779460][T31097] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1324.779481][T31097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1324.779500][T31097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1324.779523][T31097] __sock_sendmsg+0x219/0x270 [ 1324.779556][T31097] ____sys_sendmsg+0x505/0x830 [ 1324.779584][T31097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1324.779620][T31097] ? import_iovec+0x74/0xa0 [ 1324.779649][T31097] ___sys_sendmsg+0x21f/0x2a0 [ 1324.779675][T31097] ? __pfx____sys_sendmsg+0x10/0x10 [ 1324.779742][T31097] ? __fget_files+0x2a/0x420 [ 1324.779758][T31097] ? __fget_files+0x3a0/0x420 [ 1324.779789][T31097] __x64_sys_sendmsg+0x19b/0x260 [ 1324.779817][T31097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1324.779852][T31097] ? __pfx_ksys_write+0x10/0x10 [ 1324.779881][T31097] ? rcu_is_watching+0x15/0xb0 [ 1324.779908][T31097] ? do_syscall_64+0xbe/0x3b0 [ 1324.779935][T31097] do_syscall_64+0xfa/0x3b0 [ 1324.779955][T31097] ? lockdep_hardirqs_on+0x9c/0x150 [ 1324.779975][T31097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.779995][T31097] ? clear_bhb_loop+0x60/0xb0 [ 1324.780020][T31097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.780040][T31097] RIP: 0033:0x7f47c198eba9 [ 1324.780058][T31097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.780077][T31097] RSP: 002b:00007f47c2746038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.780099][T31097] RAX: ffffffffffffffda RBX: 00007f47c1bd5fa0 RCX: 00007f47c198eba9 [ 1324.780114][T31097] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1324.780127][T31097] RBP: 00007f47c2746090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.780140][T31097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.780152][T31097] R13: 00007f47c1bd6038 R14: 00007f47c1bd5fa0 R15: 00007fffcbd1a078 [ 1324.780187][T31097] [ 1325.188540][T31101] syzkaller0: entered promiscuous mode [ 1325.202707][T31106] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6666'. [ 1325.213998][T31101] syzkaller0: entered allmulticast mode [ 1325.443644][ T30] audit: type=1800 audit(1757460242.865:21): pid=31111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6669" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=6566 res=0 errno=0 [ 1325.485230][T31111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6669'. [ 1325.504700][T31111] netlink: 'syz.2.6669': attribute type 10 has an invalid length. [ 1325.522968][T31111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6669'. [ 1325.534816][T31111] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1325.833257][T31123] netlink: 'syz.0.6674': attribute type 13 has an invalid length. [ 1325.879197][T31123] netlink: 'syz.0.6674': attribute type 17 has an invalid length. [ 1326.057256][T31134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6679'. [ 1326.109664][T31123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.119293][T31123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.134794][T31139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6680'. [ 1326.151547][T31123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.168596][T19615] lo speed is unknown, defaulting to 1000 [ 1326.168626][T31129] vxcan1 speed is unknown, defaulting to 1000 [ 1326.178043][T19615] sz1: Port: 1 Link ACTIVE [ 1326.287153][T31145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6683'. [ 1326.299577][T31145] netlink: 'syz.1.6683': attribute type 5 has an invalid length. [ 1326.354356][T31136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1326.415138][T31136] bond0: (slave bond9): Enslaving as an active interface with an up link [ 1326.455953][T31133] syzkaller0: entered promiscuous mode [ 1326.475912][T31133] syzkaller0: entered allmulticast mode [ 1326.494939][T19617] lo speed is unknown, defaulting to 1000 [ 1326.735923][T31129] lo speed is unknown, defaulting to 1000 [ 1326.752133][ T30] audit: type=1800 audit(1757460244.175:22): pid=31154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6684" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7164 res=0 errno=0 [ 1326.756156][T31154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6684'. [ 1326.798920][T31129] wg1 speed is unknown, defaulting to 1000 [ 1326.808220][T31154] netlink: 'syz.3.6684': attribute type 10 has an invalid length. [ 1326.821205][T31154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6684'. [ 1326.871254][T31129] lo speed is unknown, defaulting to 1000 [ 1327.142397][T31158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6685'. [ 1327.229760][T31156] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1327.273953][T31156] bond0: (slave bond8): Enslaving as an active interface with an up link [ 1327.921734][T31175] openvswitch: netlink: Message has 20 unknown bytes. [ 1327.950140][T31175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.964933][ T30] audit: type=1800 audit(1757460245.385:23): pid=31183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6695" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=6855 res=0 errno=0 [ 1328.006039][T31183] netlink: 'syz.0.6695': attribute type 10 has an invalid length. [ 1328.020667][T31186] openvswitch: netlink: Message has 20 unknown bytes. [ 1328.037418][T31186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1328.135069][T31183] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1328.457014][T31204] netlink: 'syz.0.6698': attribute type 13 has an invalid length. [ 1328.497717][T31199] bridge16: entered allmulticast mode [ 1328.516619][T31204] netlink: 'syz.0.6698': attribute type 17 has an invalid length. [ 1328.553348][T31191] syzkaller0: entered promiscuous mode [ 1328.558972][T31191] syzkaller0: entered allmulticast mode [ 1328.878965][T31204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1328.927170][T31205] vxcan1 speed is unknown, defaulting to 1000 [ 1329.862591][T31227] netlink: 'syz.1.6703': attribute type 13 has an invalid length. [ 1329.870482][T31227] netlink: 'syz.1.6703': attribute type 17 has an invalid length. [ 1330.515618][T31246] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1332.199301][T31227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.232626][T31227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.262237][T31227] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1332.303109][T31205] lo speed is unknown, defaulting to 1000 [ 1332.322559][T31205] wg1 speed is unknown, defaulting to 1000 [ 1332.330477][T31205] lo speed is unknown, defaulting to 1000 [ 1332.359115][T31229] vxcan1 speed is unknown, defaulting to 1000 [ 1332.373274][T31251] netlink: 'syz.3.6706': attribute type 1 has an invalid length. [ 1332.401900][T31251] netlink: 'syz.3.6706': attribute type 6 has an invalid length. [ 1332.409684][T31251] netlink: 'syz.3.6706': attribute type 3 has an invalid length. [ 1332.577787][ T5879] Bluetooth: hci4: command tx timeout [ 1332.709290][T31259] syzkaller0: entered promiscuous mode [ 1332.725313][T31259] syzkaller0: entered allmulticast mode [ 1333.119451][T31249] vxcan1 speed is unknown, defaulting to 1000 [ 1333.127392][T31229] lo speed is unknown, defaulting to 1000 [ 1333.143320][T31229] wg1 speed is unknown, defaulting to 1000 [ 1333.298355][T31229] lo speed is unknown, defaulting to 1000 [ 1333.359042][T31279] netlink: 'syz.0.6714': attribute type 1 has an invalid length. [ 1333.426399][T31279] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1333.546198][T31281] bond9: (slave veth3): Enslaving as an active interface with a down link [ 1333.606656][T31279] : entered promiscuous mode [ 1333.645838][T31271] __nla_validate_parse: 6 callbacks suppressed [ 1333.645861][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6712'. [ 1333.687196][T31279] bond9: (slave gretap1): making interface the new active one [ 1333.710531][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6712'. [ 1333.736857][T31279] gretap1: entered promiscuous mode [ 1333.752579][T31279] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1333.794452][T31281] macvlan3: entered promiscuous mode [ 1333.799826][T31281] macvlan3: entered allmulticast mode [ 1333.834754][T31281] bond9: entered promiscuous mode [ 1333.841446][T31281] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1333.849222][T31281] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1333.881361][T31281] bond9: left promiscuous mode [ 1334.130372][T31249] lo speed is unknown, defaulting to 1000 [ 1334.177322][T31249] wg1 speed is unknown, defaulting to 1000 [ 1334.271388][T31299] netlink: 'syz.2.6719': attribute type 13 has an invalid length. [ 1334.279269][T31299] netlink: 'syz.2.6719': attribute type 17 has an invalid length. [ 1334.347586][T31249] lo speed is unknown, defaulting to 1000 [ 1334.351491][T31293] vxcan1 speed is unknown, defaulting to 1000 [ 1334.380223][T31299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1334.996303][T31308] syzkaller0: entered promiscuous mode [ 1335.003808][T31308] syzkaller0: entered allmulticast mode [ 1335.444132][T31293] lo speed is unknown, defaulting to 1000 [ 1335.468952][T31314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6724'. [ 1335.620628][T31293] wg1 speed is unknown, defaulting to 1000 [ 1335.640388][T31293] lo speed is unknown, defaulting to 1000 [ 1336.157068][T31323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6727'. [ 1336.304369][T31330] netlink: 'syz.2.6728': attribute type 27 has an invalid length. [ 1336.321267][T31330] netlink: 'syz.2.6728': attribute type 27 has an invalid length. [ 1336.767588][T31334] batadv_slave_0: entered promiscuous mode [ 1336.776744][T31334] netlink: 'syz.2.6730': attribute type 3 has an invalid length. [ 1337.011533][ T30] audit: type=1800 audit(1757460254.425:24): pid=31337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6732" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7225 res=0 errno=0 [ 1337.030191][T31337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1337.112838][T31337] netlink: 'syz.3.6732': attribute type 10 has an invalid length. [ 1337.125775][T31337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6732'. [ 1337.586281][T31347] syzkaller0: entered promiscuous mode [ 1337.595303][T31347] syzkaller0: entered allmulticast mode [ 1338.163651][T31362] vxcan1 speed is unknown, defaulting to 1000 [ 1338.898138][T31381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1338.916855][T31383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.014022][T31389] FAULT_INJECTION: forcing a failure. [ 1339.014022][T31389] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.061681][T31389] CPU: 1 UID: 0 PID: 31389 Comm: syz.3.6747 Not tainted syzkaller #0 PREEMPT(full) [ 1339.061710][T31389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1339.061723][T31389] Call Trace: [ 1339.061732][T31389] [ 1339.061741][T31389] dump_stack_lvl+0x189/0x250 [ 1339.061772][T31389] ? __pfx____ratelimit+0x10/0x10 [ 1339.061795][T31389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1339.061820][T31389] ? __pfx__printk+0x10/0x10 [ 1339.061854][T31389] ? __pfx___might_resched+0x10/0x10 [ 1339.061879][T31389] should_fail_ex+0x414/0x560 [ 1339.061913][T31389] should_failslab+0xa8/0x100 [ 1339.061944][T31389] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1339.061972][T31389] ? __alloc_skb+0x112/0x2d0 [ 1339.061999][T31389] __alloc_skb+0x112/0x2d0 [ 1339.062025][T31389] netlink_sendmsg+0x5c6/0xb30 [ 1339.062059][T31389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1339.062085][T31389] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1339.062107][T31389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1339.062128][T31389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1339.062151][T31389] __sock_sendmsg+0x219/0x270 [ 1339.062184][T31389] ____sys_sendmsg+0x505/0x830 [ 1339.062215][T31389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1339.062250][T31389] ? import_iovec+0x74/0xa0 [ 1339.062285][T31389] ___sys_sendmsg+0x21f/0x2a0 [ 1339.062312][T31389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1339.062378][T31389] ? __fget_files+0x2a/0x420 [ 1339.062395][T31389] ? __fget_files+0x3a0/0x420 [ 1339.062425][T31389] __x64_sys_sendmsg+0x19b/0x260 [ 1339.062452][T31389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1339.062486][T31389] ? __pfx_ksys_write+0x10/0x10 [ 1339.062509][T31389] ? rcu_is_watching+0x15/0xb0 [ 1339.062534][T31389] ? do_syscall_64+0xbe/0x3b0 [ 1339.062566][T31389] do_syscall_64+0xfa/0x3b0 [ 1339.062586][T31389] ? lockdep_hardirqs_on+0x9c/0x150 [ 1339.062604][T31389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.062623][T31389] ? clear_bhb_loop+0x60/0xb0 [ 1339.062647][T31389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.062666][T31389] RIP: 0033:0x7f9a05b8eba9 [ 1339.062685][T31389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.062701][T31389] RSP: 002b:00007f9a069e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.062723][T31389] RAX: ffffffffffffffda RBX: 00007f9a05dd6090 RCX: 00007f9a05b8eba9 [ 1339.062738][T31389] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 1339.062751][T31389] RBP: 00007f9a069e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.062763][T31389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.062775][T31389] R13: 00007f9a05dd6128 R14: 00007f9a05dd6090 R15: 00007ffd794f75b8 [ 1339.062809][T31389] [ 1339.424704][T31362] lo speed is unknown, defaulting to 1000 [ 1339.432577][T31362] wg1 speed is unknown, defaulting to 1000 [ 1339.440532][T31362] lo speed is unknown, defaulting to 1000 [ 1339.571993][T31394] syzkaller0: entered promiscuous mode [ 1339.598134][T31394] syzkaller0: entered allmulticast mode [ 1339.985602][T31400] vxcan1 speed is unknown, defaulting to 1000 [ 1340.130346][T31416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1340.238575][T31408] bridge15: entered allmulticast mode [ 1340.277493][T31414] bridge16: entered allmulticast mode [ 1340.279658][T31418] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 1340.486902][T31424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6758'. [ 1340.786669][T31429] vlan2: entered allmulticast mode [ 1340.793790][T31429] veth1_to_team: entered allmulticast mode [ 1340.801831][T31400] lo speed is unknown, defaulting to 1000 [ 1340.824200][T31400] wg1 speed is unknown, defaulting to 1000 [ 1340.849739][T31400] lo speed is unknown, defaulting to 1000 [ 1341.382485][T31439] tipc: Enabled bearer , priority 0 [ 1341.410347][T31439] tipc: Resetting bearer [ 1341.571531][T31438] tipc: Disabling bearer [ 1341.603291][T31442] vxcan1 speed is unknown, defaulting to 1000 [ 1341.823684][T31445] syzkaller0: entered promiscuous mode [ 1341.833787][T31445] syzkaller0: entered allmulticast mode [ 1342.032541][T31451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1342.251204][T31455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6769'. [ 1342.407571][T31463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1343.716040][T31491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1345.282512][ T6070] gretap1: left promiscuous mode [ 1345.532714][T31504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6781'. [ 1345.560679][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6780'. [ 1345.825836][T31512] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1346.053061][T31521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6784'. [ 1348.244364][T31565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1348.807057][T31585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1348.819107][T31573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6799'. [ 1348.840930][T31585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1348.937910][T31591] FAULT_INJECTION: forcing a failure. [ 1348.937910][T31591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.959319][T31588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1348.960670][T31585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1348.969048][T31591] CPU: 1 UID: 0 PID: 31591 Comm: syz.3.6806 Not tainted syzkaller #0 PREEMPT(full) [ 1348.969074][T31591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1348.969085][T31591] Call Trace: [ 1348.969093][T31591] [ 1348.969101][T31591] dump_stack_lvl+0x189/0x250 [ 1348.969128][T31591] ? __pfx____ratelimit+0x10/0x10 [ 1348.969157][T31591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1348.969179][T31591] ? __pfx__printk+0x10/0x10 [ 1348.969202][T31591] ? __might_fault+0xb0/0x130 [ 1348.969237][T31591] should_fail_ex+0x414/0x560 [ 1348.969266][T31591] _copy_from_iter+0x1de/0x1790 [ 1348.969292][T31591] ? rcu_is_watching+0x15/0xb0 [ 1348.969312][T31591] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1348.969338][T31591] ? __pfx__copy_from_iter+0x10/0x10 [ 1348.969358][T31591] ? __build_skb_around+0x257/0x3e0 [ 1348.969381][T31591] ? netlink_sendmsg+0x642/0xb30 [ 1348.969398][T31591] ? skb_put+0x11b/0x210 [ 1348.969421][T31591] netlink_sendmsg+0x6b2/0xb30 [ 1348.969449][T31591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.969471][T31591] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1348.969491][T31591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1348.969510][T31591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.969529][T31591] __sock_sendmsg+0x219/0x270 [ 1348.969557][T31591] ____sys_sendmsg+0x505/0x830 [ 1348.969584][T31591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1348.969614][T31591] ? import_iovec+0x74/0xa0 [ 1348.969639][T31591] ___sys_sendmsg+0x21f/0x2a0 [ 1348.969661][T31591] ? __pfx____sys_sendmsg+0x10/0x10 [ 1348.969720][T31591] ? __fget_files+0x2a/0x420 [ 1348.969735][T31591] ? __fget_files+0x3a0/0x420 [ 1348.969761][T31591] __x64_sys_sendmsg+0x19b/0x260 [ 1348.969785][T31591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1348.969815][T31591] ? __pfx_ksys_write+0x10/0x10 [ 1348.969835][T31591] ? rcu_is_watching+0x15/0xb0 [ 1348.969857][T31591] ? do_syscall_64+0xbe/0x3b0 [ 1348.969881][T31591] do_syscall_64+0xfa/0x3b0 [ 1348.969897][T31591] ? lockdep_hardirqs_on+0x9c/0x150 [ 1348.969915][T31591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.969932][T31591] ? clear_bhb_loop+0x60/0xb0 [ 1348.969953][T31591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.969969][T31591] RIP: 0033:0x7f9a05b8eba9 [ 1348.969985][T31591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.970000][T31591] RSP: 002b:00007f9a06a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.970020][T31591] RAX: ffffffffffffffda RBX: 00007f9a05dd5fa0 RCX: 00007f9a05b8eba9 [ 1348.970033][T31591] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1348.970045][T31591] RBP: 00007f9a06a07090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.970056][T31591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.970066][T31591] R13: 00007f9a05dd6038 R14: 00007f9a05dd5fa0 R15: 00007ffd794f75b8 [ 1348.970097][T31591] [ 1349.168639][T31596] syzkaller0: entered promiscuous mode [ 1349.286888][T31596] syzkaller0: entered allmulticast mode [ 1349.303464][T31602] ..0·: renamed from hsr0 [ 1349.343798][T31602] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1349.357024][T31602] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1349.370738][T31602] ..0·: entered allmulticast mode [ 1349.376215][T31602] hsr_slave_0: entered allmulticast mode [ 1349.382418][T31602] hsr_slave_1: entered allmulticast mode [ 1349.391123][T31602] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 1349.984718][T31621] netlink: 'syz.0.6814': attribute type 10 has an invalid length. [ 1350.063879][T31621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.122003][T31621] bond0: (slave team0): Enslaving as an active interface with an up link [ 1350.562377][T31647] __nla_validate_parse: 2 callbacks suppressed [ 1350.562400][T31647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6823'. [ 1350.583200][T31651] netlink: 'syz.4.6825': attribute type 39 has an invalid length. [ 1350.599255][T31645] syzkaller0: entered promiscuous mode [ 1350.611084][T31645] syzkaller0: entered allmulticast mode [ 1350.743770][T31653] IPVS: Scheduler module ip_vs_sip not found [ 1351.299831][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6835'. [ 1351.326492][T31686] netlink: 'syz.0.6833': attribute type 4 has an invalid length. [ 1351.357712][T31686] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6833'. [ 1351.479791][T31693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1352.087645][T31705] syzkaller0: entered promiscuous mode [ 1352.124007][T31705] syzkaller0: entered allmulticast mode [ 1352.600355][T31734] macvlan2: entered allmulticast mode [ 1352.651694][T31734] veth1_vlan: entered allmulticast mode [ 1352.667121][T31734] veth1_vlan: left allmulticast mode [ 1353.182961][T31758] macvlan5: entered allmulticast mode [ 1353.188414][T31758] veth1_vlan: entered allmulticast mode [ 1353.222380][T31758] veth1_vlan: left allmulticast mode [ 1353.301752][T31763] syzkaller0: entered promiscuous mode [ 1353.307284][T31763] syzkaller0: entered allmulticast mode [ 1353.679845][T31778] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1353.774110][T31778] bond0: (slave team0): Releasing backup interface [ 1353.820263][T31783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6871'. [ 1353.858771][T31778] team0: Port device 0! removed [ 1353.863491][T31785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6871'. [ 1353.870549][T31778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1353.874774][T31788] netlink: 'syz.0.6868': attribute type 10 has an invalid length. [ 1354.014213][T31788] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 1354.082609][T31796] netlink: 'syz.4.6873': attribute type 13 has an invalid length. [ 1354.090485][T31796] netlink: 'syz.4.6873': attribute type 17 has an invalid length. [ 1354.380693][T31796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.392136][T31796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.418706][T31796] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1354.891845][T31817] syzkaller0: entered promiscuous mode [ 1354.897378][T31817] syzkaller0: entered allmulticast mode [ 1355.059934][T31825] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.196121][T31832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6881'. [ 1358.032375][T31843] netlink: 'syz.1.6887': attribute type 1 has an invalid length. [ 1358.063309][T31843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1358.209829][T31853] FAULT_INJECTION: forcing a failure. [ 1358.209829][T31853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.248101][T31853] CPU: 0 UID: 0 PID: 31853 Comm: syz.2.6891 Not tainted syzkaller #0 PREEMPT(full) [ 1358.248132][T31853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1358.248145][T31853] Call Trace: [ 1358.248153][T31853] [ 1358.248163][T31853] dump_stack_lvl+0x189/0x250 [ 1358.248193][T31853] ? __pfx____ratelimit+0x10/0x10 [ 1358.248215][T31853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.248240][T31853] ? __pfx__printk+0x10/0x10 [ 1358.248283][T31853] should_fail_ex+0x414/0x560 [ 1358.248316][T31853] _copy_to_user+0x31/0xb0 [ 1358.248340][T31853] simple_read_from_buffer+0xe1/0x170 [ 1358.248375][T31853] proc_fail_nth_read+0x1b3/0x220 [ 1358.248402][T31853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1358.248428][T31853] ? rw_verify_area+0x2a6/0x4d0 [ 1358.248452][T31853] ? __lock_acquire+0xab9/0xd20 [ 1358.248476][T31853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1358.248500][T31853] vfs_read+0x200/0xa30 [ 1358.248524][T31853] ? fdget_pos+0x247/0x320 [ 1358.248548][T31853] ? __pfx___mutex_lock+0x10/0x10 [ 1358.248570][T31853] ? __pfx_vfs_read+0x10/0x10 [ 1358.248598][T31853] ? __fget_files+0x2a/0x420 [ 1358.248622][T31853] ? __fget_files+0x3a0/0x420 [ 1358.248638][T31853] ? __fget_files+0x2a/0x420 [ 1358.248667][T31853] ksys_read+0x145/0x250 [ 1358.248697][T31853] ? __pfx_ksys_read+0x10/0x10 [ 1358.248719][T31853] ? __task_pid_nr_ns+0x28/0x470 [ 1358.248751][T31853] ? do_syscall_64+0xbe/0x3b0 [ 1358.248778][T31853] do_syscall_64+0xfa/0x3b0 [ 1358.248797][T31853] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.248817][T31853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.248837][T31853] ? clear_bhb_loop+0x60/0xb0 [ 1358.248862][T31853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.248880][T31853] RIP: 0033:0x7f47c198d5bc [ 1358.248899][T31853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1358.248916][T31853] RSP: 002b:00007f47c2746030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1358.248938][T31853] RAX: ffffffffffffffda RBX: 00007f47c1bd5fa0 RCX: 00007f47c198d5bc [ 1358.248952][T31853] RDX: 000000000000000f RSI: 00007f47c27460a0 RDI: 0000000000000006 [ 1358.248964][T31853] RBP: 00007f47c2746090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.248977][T31853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.248988][T31853] R13: 00007f47c1bd6038 R14: 00007f47c1bd5fa0 R15: 00007fffcbd1a078 [ 1358.249024][T31853] [ 1358.652787][T31863] netlink: 'syz.4.6894': attribute type 32 has an invalid length. [ 1358.728512][T31862] netlink: 'syz.4.6894': attribute type 6 has an invalid length. [ 1358.826189][T31865] syzkaller0: entered promiscuous mode [ 1358.850393][T31865] syzkaller0: entered allmulticast mode [ 1358.864126][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6897'. [ 1358.977343][T31873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1360.097460][T31894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6903'. [ 1360.179202][T31896] netlink: 'syz.3.6905': attribute type 4 has an invalid length. [ 1360.189950][T31897] netlink: 'syz.3.6905': attribute type 4 has an invalid length. [ 1360.239142][T31897] netlink: 'syz.3.6905': attribute type 4 has an invalid length. [ 1360.697540][T31915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6910'. [ 1360.741610][T31915] tc_dump_action: action bad kind [ 1360.795383][T31917] syzkaller0: entered promiscuous mode [ 1360.817956][T31917] syzkaller0: entered allmulticast mode [ 1360.832154][T31915] tipc: Enabled bearer , priority 10 [ 1361.776160][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.961392][T30696] tipc: Node number set to 3404529354 [ 1362.448851][T31958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6925'. [ 1362.523554][T31953] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1362.559865][T31953] batman_adv: batadv0: Adding interface: gretap1 [ 1362.588554][T31953] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.646032][T31953] batman_adv: batadv0: Interface activated: gretap1 [ 1362.823976][T31965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6927'. [ 1363.030422][T31980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6929'. [ 1363.793276][T31996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6933'. [ 1364.333145][T32002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6934'. [ 1364.685257][T32007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6936'. [ 1365.346556][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6945'. [ 1365.363417][T32033] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1365.544227][T32041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1366.190005][T32051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1366.770274][T32065] syzkaller0: entered promiscuous mode [ 1366.799480][T32065] syzkaller0: entered allmulticast mode [ 1366.923980][T32070] netlink: 'syz.4.6957': attribute type 39 has an invalid length. [ 1367.051857][T32070] syzkaller1: entered promiscuous mode [ 1367.057379][T32070] syzkaller1: entered allmulticast mode [ 1367.247266][T32074] FAULT_INJECTION: forcing a failure. [ 1367.247266][T32074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.300896][T32074] CPU: 0 UID: 0 PID: 32074 Comm: syz.1.6958 Not tainted syzkaller #0 PREEMPT(full) [ 1367.300926][T32074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1367.300939][T32074] Call Trace: [ 1367.300948][T32074] [ 1367.300957][T32074] dump_stack_lvl+0x189/0x250 [ 1367.300986][T32074] ? __pfx____ratelimit+0x10/0x10 [ 1367.301007][T32074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1367.301030][T32074] ? __pfx__printk+0x10/0x10 [ 1367.301077][T32074] should_fail_ex+0x414/0x560 [ 1367.301110][T32074] _copy_to_user+0x31/0xb0 [ 1367.301136][T32074] simple_read_from_buffer+0xe1/0x170 [ 1367.301170][T32074] proc_fail_nth_read+0x1b3/0x220 [ 1367.301196][T32074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.301222][T32074] ? rw_verify_area+0x2a6/0x4d0 [ 1367.301245][T32074] ? __lock_acquire+0xab9/0xd20 [ 1367.301270][T32074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.301294][T32074] vfs_read+0x200/0xa30 [ 1367.301326][T32074] ? fdget_pos+0x247/0x320 [ 1367.301349][T32074] ? __pfx___mutex_lock+0x10/0x10 [ 1367.301371][T32074] ? __pfx_vfs_read+0x10/0x10 [ 1367.301398][T32074] ? __fget_files+0x2a/0x420 [ 1367.301421][T32074] ? __fget_files+0x3a0/0x420 [ 1367.301437][T32074] ? __fget_files+0x2a/0x420 [ 1367.301465][T32074] ksys_read+0x145/0x250 [ 1367.301494][T32074] ? __pfx_ksys_read+0x10/0x10 [ 1367.301516][T32074] ? rcu_is_watching+0x15/0xb0 [ 1367.301542][T32074] ? do_syscall_64+0xbe/0x3b0 [ 1367.301570][T32074] do_syscall_64+0xfa/0x3b0 [ 1367.301589][T32074] ? lockdep_hardirqs_on+0x9c/0x150 [ 1367.301609][T32074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.301628][T32074] ? clear_bhb_loop+0x60/0xb0 [ 1367.301652][T32074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.301670][T32074] RIP: 0033:0x7f7b9b58d5bc [ 1367.301689][T32074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1367.301706][T32074] RSP: 002b:00007f7b9c480030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1367.301729][T32074] RAX: ffffffffffffffda RBX: 00007f7b9b7d5fa0 RCX: 00007f7b9b58d5bc [ 1367.301743][T32074] RDX: 000000000000000f RSI: 00007f7b9c4800a0 RDI: 000000000000000a [ 1367.301756][T32074] RBP: 00007f7b9c480090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.301769][T32074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1367.301781][T32074] R13: 00007f7b9b7d6038 R14: 00007f7b9b7d5fa0 R15: 00007ffe56ed1d78 [ 1367.301817][T32074] [ 1367.803715][T32087] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6962'. [ 1368.004542][T32099] netlink: 'syz.0.6965': attribute type 13 has an invalid length. [ 1368.031101][T32099] netlink: 'syz.0.6965': attribute type 17 has an invalid length. [ 1368.125278][T32099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.204211][T32099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1368.263018][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6968'. [ 1368.410563][T32103] vxcan1 speed is unknown, defaulting to 1000 [ 1368.508626][T32121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6973'. [ 1368.518751][ T30] audit: type=1800 audit(1757460285.925:25): pid=32117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6972" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7314 res=0 errno=0 [ 1368.539759][T32117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6972'. [ 1368.581756][T32117] netlink: 'syz.4.6972': attribute type 10 has an invalid length. [ 1368.595569][T32117] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1368.905756][T32134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1369.202849][T32103] lo speed is unknown, defaulting to 1000 [ 1369.219737][T32103] wg1 speed is unknown, defaulting to 1000 [ 1369.238813][T32103] lo speed is unknown, defaulting to 1000 [ 1369.322474][T32147] syzkaller0: entered promiscuous mode [ 1369.341067][T32147] syzkaller0: entered allmulticast mode [ 1369.380750][T32151] __nla_validate_parse: 1 callbacks suppressed [ 1369.401480][T32151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6985'. [ 1369.416775][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1369.474843][T32151] : entered promiscuous mode [ 1369.655025][T32156] netlink: 'syz.3.6986': attribute type 3 has an invalid length. [ 1369.691484][T32156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1369.798157][T32159] vxcan1 speed is unknown, defaulting to 1000 [ 1369.964233][T32168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6989'. [ 1370.158095][T32175] Set syz1 is full, maxelem 8 reached [ 1370.531749][T32188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6994'. [ 1370.557840][T32189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6993'. [ 1370.597501][T32177] bridge0: entered allmulticast mode [ 1370.644300][T32159] lo speed is unknown, defaulting to 1000 [ 1370.905015][T32159] wg1 speed is unknown, defaulting to 1000 [ 1370.964710][T32159] lo speed is unknown, defaulting to 1000 [ 1371.408594][T32206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6999'. [ 1372.089375][T32214] FAULT_INJECTION: forcing a failure. [ 1372.089375][T32214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.161231][T32214] CPU: 0 UID: 0 PID: 32214 Comm: syz.3.7001 Not tainted syzkaller #0 PREEMPT(full) [ 1372.161260][T32214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1372.161271][T32214] Call Trace: [ 1372.161280][T32214] [ 1372.161289][T32214] dump_stack_lvl+0x189/0x250 [ 1372.161319][T32214] ? __pfx____ratelimit+0x10/0x10 [ 1372.161341][T32214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1372.161364][T32214] ? __pfx__printk+0x10/0x10 [ 1372.161391][T32214] ? __might_fault+0xb0/0x130 [ 1372.161431][T32214] should_fail_ex+0x414/0x560 [ 1372.161462][T32214] _copy_from_iter+0x1de/0x1790 [ 1372.161492][T32214] ? rcu_is_watching+0x15/0xb0 [ 1372.161515][T32214] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1372.161543][T32214] ? __pfx__copy_from_iter+0x10/0x10 [ 1372.161565][T32214] ? __build_skb_around+0x257/0x3e0 [ 1372.161591][T32214] ? netlink_sendmsg+0x642/0xb30 [ 1372.161611][T32214] ? skb_put+0x11b/0x210 [ 1372.161635][T32214] netlink_sendmsg+0x6b2/0xb30 [ 1372.161667][T32214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1372.161692][T32214] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1372.161714][T32214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1372.161734][T32214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1372.161756][T32214] __sock_sendmsg+0x219/0x270 [ 1372.161787][T32214] ____sys_sendmsg+0x505/0x830 [ 1372.161815][T32214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1372.161849][T32214] ? import_iovec+0x74/0xa0 [ 1372.161876][T32214] ___sys_sendmsg+0x21f/0x2a0 [ 1372.161901][T32214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1372.161966][T32214] ? __fget_files+0x2a/0x420 [ 1372.161983][T32214] ? __fget_files+0x3a0/0x420 [ 1372.162022][T32214] __x64_sys_sendmsg+0x19b/0x260 [ 1372.162050][T32214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1372.162084][T32214] ? __pfx_ksys_write+0x10/0x10 [ 1372.162107][T32214] ? rcu_is_watching+0x15/0xb0 [ 1372.162132][T32214] ? do_syscall_64+0xbe/0x3b0 [ 1372.162158][T32214] do_syscall_64+0xfa/0x3b0 [ 1372.162176][T32214] ? lockdep_hardirqs_on+0x9c/0x150 [ 1372.162195][T32214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.162213][T32214] ? clear_bhb_loop+0x60/0xb0 [ 1372.162232][T32214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.162247][T32214] RIP: 0033:0x7f9a05b8eba9 [ 1372.162270][T32214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.162286][T32214] RSP: 002b:00007f9a069e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1372.162308][T32214] RAX: ffffffffffffffda RBX: 00007f9a05dd6090 RCX: 00007f9a05b8eba9 [ 1372.162323][T32214] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 1372.162335][T32214] RBP: 00007f9a069e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.162346][T32214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.162357][T32214] R13: 00007f9a05dd6128 R14: 00007f9a05dd6090 R15: 00007ffd794f75b8 [ 1372.162391][T32214] [ 1372.901812][T32231] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1373.398606][T32249] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.7010'. [ 1373.584106][T32252] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1374.066959][T32248] dvmrp0: entered allmulticast mode [ 1374.356224][T32270] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1376.621089][T32281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1377.102932][T32308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7027'. [ 1377.208438][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1378.762690][T32355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7042'. [ 1378.817460][T32357] FAULT_INJECTION: forcing a failure. [ 1378.817460][T32357] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.867554][T32357] CPU: 0 UID: 0 PID: 32357 Comm: syz.3.7043 Not tainted syzkaller #0 PREEMPT(full) [ 1378.867583][T32357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1378.867594][T32357] Call Trace: [ 1378.867603][T32357] [ 1378.867612][T32357] dump_stack_lvl+0x189/0x250 [ 1378.867642][T32357] ? __pfx____ratelimit+0x10/0x10 [ 1378.867663][T32357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1378.867686][T32357] ? __pfx__printk+0x10/0x10 [ 1378.867719][T32357] ? __pfx___might_resched+0x10/0x10 [ 1378.867737][T32357] ? fs_reclaim_acquire+0x7d/0x100 [ 1378.867762][T32357] should_fail_ex+0x414/0x560 [ 1378.867794][T32357] should_failslab+0xa8/0x100 [ 1378.867824][T32357] __kmalloc_cache_noprof+0x70/0x3d0 [ 1378.867849][T32357] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 1378.867878][T32357] __xdp_reg_mem_model+0x1d8/0x5a0 [ 1378.867908][T32357] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1378.867935][T32357] ? page_pool_create_percpu+0x800/0xbe0 [ 1378.867967][T32357] xdp_reg_mem_model+0x22/0x40 [ 1378.867989][T32357] bpf_test_run_xdp_live+0x215/0x1b10 [ 1378.868018][T32357] ? stack_trace_save+0x9c/0xe0 [ 1378.868043][T32357] ? stack_depot_save_flags+0x40/0x860 [ 1378.868079][T32357] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1378.868099][T32357] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 1378.868116][T32357] ? bpf_prog_test_run+0x2c7/0x340 [ 1378.868140][T32357] ? __sys_bpf+0x581/0x870 [ 1378.868161][T32357] ? __x64_sys_bpf+0x7c/0x90 [ 1378.868219][T32357] ? __lock_acquire+0xab9/0xd20 [ 1378.868259][T32357] ? __might_fault+0xb0/0x130 [ 1378.868295][T32357] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1378.868321][T32357] ? _copy_from_user+0x94/0xb0 [ 1378.868339][T32357] ? bpf_test_init+0x133/0x170 [ 1378.868352][T32357] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1378.868370][T32357] bpf_prog_test_run_xdp+0x713/0x1000 [ 1378.868401][T32357] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1378.868421][T32357] ? __fget_files+0x2a/0x420 [ 1378.868440][T32357] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1378.868457][T32357] bpf_prog_test_run+0x2c7/0x340 [ 1378.868480][T32357] __sys_bpf+0x581/0x870 [ 1378.868501][T32357] ? __pfx___sys_bpf+0x10/0x10 [ 1378.868532][T32357] ? ksys_write+0x22a/0x250 [ 1378.868554][T32357] ? __pfx_ksys_write+0x10/0x10 [ 1378.868570][T32357] ? rcu_is_watching+0x15/0xb0 [ 1378.868592][T32357] __x64_sys_bpf+0x7c/0x90 [ 1378.868611][T32357] do_syscall_64+0xfa/0x3b0 [ 1378.868627][T32357] ? lockdep_hardirqs_on+0x9c/0x150 [ 1378.868646][T32357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.868665][T32357] ? clear_bhb_loop+0x60/0xb0 [ 1378.868683][T32357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.868697][T32357] RIP: 0033:0x7f9a05b8eba9 [ 1378.868712][T32357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1378.868725][T32357] RSP: 002b:00007f9a06a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1378.868743][T32357] RAX: ffffffffffffffda RBX: 00007f9a05dd5fa0 RCX: 00007f9a05b8eba9 [ 1378.868754][T32357] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1378.868765][T32357] RBP: 00007f9a06a07090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.868775][T32357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.868784][T32357] R13: 00007f9a05dd6038 R14: 00007f9a05dd5fa0 R15: 00007ffd794f75b8 [ 1378.868810][T32357] [ 1379.445218][T32361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7045'. [ 1379.471119][ T30] audit: type=1800 audit(1757460296.845:26): pid=32361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7045" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7408 res=0 errno=0 [ 1379.520737][T32361] netlink: 'syz.4.7045': attribute type 10 has an invalid length. [ 1379.580283][T32361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7045'. [ 1379.602023][T32361] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1379.846933][T32382] netlink: 'syz.3.7050': attribute type 13 has an invalid length. [ 1379.880692][T32382] netlink: 'syz.3.7050': attribute type 17 has an invalid length. [ 1380.078643][T32386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7054'. [ 1380.094624][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7055'. [ 1380.114273][T32382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.135561][T32382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.180321][T32382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1380.241484][T32387] vxcan1 speed is unknown, defaulting to 1000 [ 1380.336470][T32400] ip6_vti0: entered promiscuous mode [ 1380.347032][T32400] ip6_vti0: entered allmulticast mode [ 1380.434047][T32406] netlink: 'syz.0.7058': attribute type 13 has an invalid length. [ 1380.451219][T32406] netlink: 'syz.0.7058': attribute type 17 has an invalid length. [ 1380.581396][T32406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1380.802500][T32411] nbd0: detected capacity change from 0 to 549764202496 [ 1380.961977][ T30] audit: type=1800 audit(1757460298.375:27): pid=32421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7062" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7015 res=0 errno=0 [ 1380.975351][T32421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1381.081641][T32421] netlink: 'syz.2.7062': attribute type 10 has an invalid length. [ 1381.089519][T32421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1381.128724][T32425] FAULT_INJECTION: forcing a failure. [ 1381.128724][T32425] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.156470][T32387] lo speed is unknown, defaulting to 1000 [ 1381.156646][T32408] vxcan1 speed is unknown, defaulting to 1000 [ 1381.172031][T32387] wg1 speed is unknown, defaulting to 1000 [ 1381.180338][T32387] lo speed is unknown, defaulting to 1000 [ 1381.188432][T32421] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1381.215540][T32425] CPU: 1 UID: 0 PID: 32425 Comm: syz.1.7063 Not tainted syzkaller #0 PREEMPT(full) [ 1381.215571][T32425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1381.215583][T32425] Call Trace: [ 1381.215591][T32425] [ 1381.215599][T32425] dump_stack_lvl+0x189/0x250 [ 1381.215628][T32425] ? __pfx____ratelimit+0x10/0x10 [ 1381.215651][T32425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1381.215674][T32425] ? __pfx__printk+0x10/0x10 [ 1381.215708][T32425] ? __pfx___might_resched+0x10/0x10 [ 1381.215727][T32425] ? fs_reclaim_acquire+0x7d/0x100 [ 1381.215750][T32425] should_fail_ex+0x414/0x560 [ 1381.215781][T32425] should_failslab+0xa8/0x100 [ 1381.215809][T32425] __kmalloc_cache_noprof+0x70/0x3d0 [ 1381.215834][T32425] ? rtnl_newlink+0xed/0x1c70 [ 1381.215933][T32425] rtnl_newlink+0xed/0x1c70 [ 1381.215954][T32425] ? __lock_acquire+0xab9/0xd20 [ 1381.215993][T32425] ? __pfx_rtnl_newlink+0x10/0x10 [ 1381.216024][T32425] ? is_bpf_text_address+0x26/0x2b0 [ 1381.216060][T32425] ? __lock_acquire+0xab9/0xd20 [ 1381.216101][T32425] ? __lock_acquire+0xab9/0xd20 [ 1381.216151][T32425] ? is_bpf_text_address+0x26/0x2b0 [ 1381.216185][T32425] ? is_bpf_text_address+0x292/0x2b0 [ 1381.216210][T32425] ? is_bpf_text_address+0x26/0x2b0 [ 1381.216248][T32425] ? __lock_acquire+0xab9/0xd20 [ 1381.216303][T32425] ? __pfx_rtnl_newlink+0x10/0x10 [ 1381.216323][T32425] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1381.216341][T32425] ? __lock_acquire+0xab9/0xd20 [ 1381.216371][T32425] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1381.216390][T32425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1381.216430][T32425] netlink_rcv_skb+0x205/0x470 [ 1381.216449][T32425] ? __lock_acquire+0xab9/0xd20 [ 1381.216476][T32425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1381.216498][T32425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1381.216532][T32425] ? netlink_deliver_tap+0x2e/0x1b0 [ 1381.216562][T32425] netlink_unicast+0x82c/0x9e0 [ 1381.216601][T32425] ? __pfx_netlink_unicast+0x10/0x10 [ 1381.216632][T32425] ? netlink_sendmsg+0x642/0xb30 [ 1381.216650][T32425] ? skb_put+0x11b/0x210 [ 1381.216676][T32425] netlink_sendmsg+0x805/0xb30 [ 1381.216708][T32425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1381.216733][T32425] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1381.216755][T32425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1381.216775][T32425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1381.216797][T32425] __sock_sendmsg+0x219/0x270 [ 1381.216829][T32425] ____sys_sendmsg+0x505/0x830 [ 1381.216870][T32425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1381.216905][T32425] ? import_iovec+0x74/0xa0 [ 1381.216933][T32425] ___sys_sendmsg+0x21f/0x2a0 [ 1381.216960][T32425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1381.217026][T32425] ? __fget_files+0x2a/0x420 [ 1381.217043][T32425] ? __fget_files+0x3a0/0x420 [ 1381.217074][T32425] __x64_sys_sendmsg+0x19b/0x260 [ 1381.217100][T32425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1381.217135][T32425] ? __pfx_ksys_write+0x10/0x10 [ 1381.217158][T32425] ? rcu_is_watching+0x15/0xb0 [ 1381.217185][T32425] ? do_syscall_64+0xbe/0x3b0 [ 1381.217211][T32425] do_syscall_64+0xfa/0x3b0 [ 1381.217231][T32425] ? lockdep_hardirqs_on+0x9c/0x150 [ 1381.217251][T32425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.217271][T32425] ? clear_bhb_loop+0x60/0xb0 [ 1381.217296][T32425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.217314][T32425] RIP: 0033:0x7f7b9b58eba9 [ 1381.217333][T32425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.217350][T32425] RSP: 002b:00007f7b9c480038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1381.217373][T32425] RAX: ffffffffffffffda RBX: 00007f7b9b7d5fa0 RCX: 00007f7b9b58eba9 [ 1381.217388][T32425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1381.217401][T32425] RBP: 00007f7b9c480090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.217413][T32425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.217425][T32425] R13: 00007f7b9b7d6038 R14: 00007f7b9b7d5fa0 R15: 00007ffe56ed1d78 [ 1381.217459][T32425] [ 1381.681176][ T5879] block nbd0: Receive control failed (result -104) [ 1382.032566][T32417] vxcan1 speed is unknown, defaulting to 1000 [ 1382.054221][T32408] lo speed is unknown, defaulting to 1000 [ 1382.099113][T32408] wg1 speed is unknown, defaulting to 1000 [ 1382.381080][T32408] lo speed is unknown, defaulting to 1000 [ 1382.566900][T32442] pim6reg99999999: entered allmulticast mode [ 1382.712801][T32414] vxcan1 speed is unknown, defaulting to 1000 [ 1382.712815][T32417] lo speed is unknown, defaulting to 1000 [ 1382.714578][T32417] wg1 speed is unknown, defaulting to 1000 [ 1382.978542][T32417] lo speed is unknown, defaulting to 1000 [ 1383.284795][T32428] vxcan1 speed is unknown, defaulting to 1000 [ 1383.723197][T32428] lo speed is unknown, defaulting to 1000 [ 1383.739762][T32451] netlink: 'syz.1.7071': attribute type 39 has an invalid length. [ 1383.776991][T32428] wg1 speed is unknown, defaulting to 1000 [ 1383.803715][T32428] lo speed is unknown, defaulting to 1000 [ 1383.812204][T32414] lo speed is unknown, defaulting to 1000 [ 1383.820167][T32414] wg1 speed is unknown, defaulting to 1000 [ 1384.097071][T32459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1384.724818][T32414] lo speed is unknown, defaulting to 1000 [ 1384.779632][T32467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1384.790349][T32467] netlink: 'syz.1.7074': attribute type 10 has an invalid length. [ 1384.798782][T32467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1384.809775][ T30] audit: type=1800 audit(1757460302.195:28): pid=32467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7074" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7032 res=0 errno=0 [ 1385.094730][T32474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1385.206271][T32474] macvlan3: entered allmulticast mode [ 1386.418593][T32491] netlink: 'syz.1.7082': attribute type 8 has an invalid length. [ 1386.427314][T32491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1386.516134][T32491] bond0: entered promiscuous mode [ 1386.539300][T32491] bond_slave_0: entered promiscuous mode [ 1386.545860][T32491] bond5: entered promiscuous mode [ 1386.572921][T32491] bond0: left promiscuous mode [ 1386.581446][T32491] bond_slave_0: left promiscuous mode [ 1386.587130][T32491] bond5: left promiscuous mode [ 1386.692005][T32493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7083'. [ 1386.788190][T32494] ip6_vti0: left promiscuous mode [ 1386.813147][T32494] ip6_vti0: left allmulticast mode [ 1386.908087][T32494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.952079][T32494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.984379][T32494] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1387.194909][T32503] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1387.227826][T32503] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1387.325781][ T30] audit: type=1800 audit(1757460304.745:29): pid=32508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7086" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7147 res=0 errno=0 [ 1387.329334][T32508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1387.383077][T32508] netlink: 'syz.0.7086': attribute type 10 has an invalid length. [ 1387.392076][T32508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1387.452258][T32510] FAULT_INJECTION: forcing a failure. [ 1387.452258][T32510] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.521308][T32510] CPU: 0 UID: 0 PID: 32510 Comm: syz.2.7087 Not tainted syzkaller #0 PREEMPT(full) [ 1387.521338][T32510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1387.521350][T32510] Call Trace: [ 1387.521358][T32510] [ 1387.521367][T32510] dump_stack_lvl+0x189/0x250 [ 1387.521396][T32510] ? __pfx____ratelimit+0x10/0x10 [ 1387.521419][T32510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1387.521443][T32510] ? __pfx__printk+0x10/0x10 [ 1387.521476][T32510] ? __pfx___might_resched+0x10/0x10 [ 1387.521501][T32510] should_fail_ex+0x414/0x560 [ 1387.521532][T32510] should_failslab+0xa8/0x100 [ 1387.521560][T32510] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1387.521584][T32510] ? __alloc_skb+0x112/0x2d0 [ 1387.521609][T32510] __alloc_skb+0x112/0x2d0 [ 1387.521634][T32510] netlink_sendmsg+0x5c6/0xb30 [ 1387.521667][T32510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1387.521693][T32510] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1387.521714][T32510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1387.521740][T32510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1387.521763][T32510] __sock_sendmsg+0x219/0x270 [ 1387.521795][T32510] sock_write_iter+0x258/0x330 [ 1387.521824][T32510] ? __pfx_sock_write_iter+0x10/0x10 [ 1387.521879][T32510] do_iter_readv_writev+0x619/0x8b0 [ 1387.521916][T32510] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1387.521940][T32510] ? common_file_perm+0x1b5/0x230 [ 1387.521964][T32510] ? bpf_lsm_file_permission+0x9/0x20 [ 1387.521986][T32510] ? security_file_permission+0x75/0x290 [ 1387.522013][T32510] ? rw_verify_area+0x255/0x4d0 [ 1387.522042][T32510] vfs_writev+0x31a/0x960 [ 1387.522082][T32510] ? __lock_acquire+0xab9/0xd20 [ 1387.522111][T32510] ? __pfx_vfs_writev+0x10/0x10 [ 1387.522149][T32510] ? __fget_files+0x2a/0x420 [ 1387.522173][T32510] ? __fget_files+0x3a0/0x420 [ 1387.522189][T32510] ? __fget_files+0x2a/0x420 [ 1387.522217][T32510] do_writev+0x14d/0x2d0 [ 1387.522240][T32510] ? __pfx_do_writev+0x10/0x10 [ 1387.522257][T32510] ? rcu_is_watching+0x15/0xb0 [ 1387.522284][T32510] ? do_syscall_64+0xbe/0x3b0 [ 1387.522311][T32510] do_syscall_64+0xfa/0x3b0 [ 1387.522331][T32510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1387.522352][T32510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.522372][T32510] ? clear_bhb_loop+0x60/0xb0 [ 1387.522396][T32510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.522415][T32510] RIP: 0033:0x7f47c198eba9 [ 1387.522434][T32510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1387.522451][T32510] RSP: 002b:00007f47c2746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1387.522473][T32510] RAX: ffffffffffffffda RBX: 00007f47c1bd5fa0 RCX: 00007f47c198eba9 [ 1387.522487][T32510] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 1387.522500][T32510] RBP: 00007f47c2746090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.522512][T32510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.522524][T32510] R13: 00007f47c1bd6038 R14: 00007f47c1bd5fa0 R15: 00007fffcbd1a078 [ 1387.522559][T32510] [ 1387.840578][T32508] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1387.985623][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7090'. [ 1388.052391][T32521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7094'. [ 1388.078059][T32521] tipc: Enabling not permitted [ 1388.098924][T32521] tipc: Enabling of bearer rejected, failed to enable media [ 1388.264789][T32532] netlink: 'syz.1.7096': attribute type 13 has an invalid length. [ 1388.273164][T32532] netlink: 'syz.1.7096': attribute type 17 has an invalid length. [ 1388.482558][T32532] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1388.939513][T32535] vxcan1 speed is unknown, defaulting to 1000 [ 1389.292128][ T30] audit: type=1800 audit(1757460306.705:30): pid=32558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7103" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7071 res=0 errno=0 [ 1389.347172][T32558] __nla_validate_parse: 3 callbacks suppressed [ 1389.347193][T32558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7103'. [ 1389.382666][T32558] netlink: 'syz.2.7103': attribute type 10 has an invalid length. [ 1389.402506][T32558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7103'. [ 1389.434418][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7101'. [ 1389.458082][T32558] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1389.962471][T32535] lo speed is unknown, defaulting to 1000 [ 1389.983430][T32535] wg1 speed is unknown, defaulting to 1000 [ 1390.004440][T32535] lo speed is unknown, defaulting to 1000 [ 1390.199805][T32586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7110'. [ 1390.235329][T32586] bond0: (slave dummy0): Releasing backup interface [ 1390.277733][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7110'. [ 1390.313361][T32586] batman_adv: batadv0: Adding interface: dummy0 [ 1390.351648][T32586] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.392757][T32586] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1390.577335][T32594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1390.607014][T32599] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 1390.656431][T32599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7114'. [ 1390.716155][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7114'. [ 1390.983624][T32605] netlink: zone id is out of range [ 1390.989024][T32605] netlink: zone id is out of range [ 1391.001334][T32605] netlink: zone id is out of range [ 1391.006493][T32605] netlink: zone id is out of range [ 1391.045782][T32605] netlink: zone id is out of range [ 1391.085386][T32605] netlink: zone id is out of range [ 1391.122544][T32613] FAULT_INJECTION: forcing a failure. [ 1391.122544][T32613] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.191543][T32613] CPU: 0 UID: 0 PID: 32613 Comm: syz.0.7119 Not tainted syzkaller #0 PREEMPT(full) [ 1391.191572][T32613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1391.191584][T32613] Call Trace: [ 1391.191592][T32613] [ 1391.191601][T32613] dump_stack_lvl+0x189/0x250 [ 1391.191631][T32613] ? __pfx____ratelimit+0x10/0x10 [ 1391.191652][T32613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.191677][T32613] ? __pfx__printk+0x10/0x10 [ 1391.191711][T32613] ? __pfx___might_resched+0x10/0x10 [ 1391.191737][T32613] should_fail_ex+0x414/0x560 [ 1391.191771][T32613] should_failslab+0xa8/0x100 [ 1391.191799][T32613] __kmalloc_cache_noprof+0x70/0x3d0 [ 1391.191826][T32613] ? nft_trans_flowtable_add+0x59/0x460 [ 1391.191860][T32613] nft_trans_flowtable_add+0x59/0x460 [ 1391.191889][T32613] ? nf_flow_table_init+0x280/0x2a0 [ 1391.191911][T32613] nf_tables_newflowtable+0x1b05/0x2390 [ 1391.191954][T32613] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 1391.192006][T32613] ? __nla_parse+0x40/0x60 [ 1391.192031][T32613] nfnetlink_rcv+0x1132/0x2520 [ 1391.192110][T32613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1391.192161][T32613] ? ref_tracker_free+0x63a/0x7d0 [ 1391.192225][T32613] ? __netlink_deliver_tap+0x807/0x850 [ 1391.192246][T32613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1391.192290][T32613] netlink_unicast+0x82c/0x9e0 [ 1391.192331][T32613] ? __pfx_netlink_unicast+0x10/0x10 [ 1391.192363][T32613] ? netlink_sendmsg+0x642/0xb30 [ 1391.192381][T32613] ? skb_put+0x11b/0x210 [ 1391.192408][T32613] netlink_sendmsg+0x805/0xb30 [ 1391.192442][T32613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1391.192468][T32613] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1391.192490][T32613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1391.192513][T32613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1391.192536][T32613] __sock_sendmsg+0x219/0x270 [ 1391.192569][T32613] ____sys_sendmsg+0x505/0x830 [ 1391.192600][T32613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1391.192637][T32613] ? import_iovec+0x74/0xa0 [ 1391.192666][T32613] ___sys_sendmsg+0x21f/0x2a0 [ 1391.192693][T32613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.192764][T32613] ? __fget_files+0x2a/0x420 [ 1391.192782][T32613] ? __fget_files+0x3a0/0x420 [ 1391.192813][T32613] __x64_sys_sendmsg+0x19b/0x260 [ 1391.192841][T32613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1391.192878][T32613] ? __pfx_ksys_write+0x10/0x10 [ 1391.192901][T32613] ? rcu_is_watching+0x15/0xb0 [ 1391.192929][T32613] ? do_syscall_64+0xbe/0x3b0 [ 1391.192956][T32613] do_syscall_64+0xfa/0x3b0 [ 1391.192977][T32613] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.192997][T32613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.193018][T32613] ? clear_bhb_loop+0x60/0xb0 [ 1391.193050][T32613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.193069][T32613] RIP: 0033:0x7fbdffd8eba9 [ 1391.193089][T32613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.193105][T32613] RSP: 002b:00007fbe00bb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.193128][T32613] RAX: ffffffffffffffda RBX: 00007fbdfffd5fa0 RCX: 00007fbdffd8eba9 [ 1391.193143][T32613] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1391.193156][T32613] RBP: 00007fbe00bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.193168][T32613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1391.193180][T32613] R13: 00007fbdfffd6038 R14: 00007fbdfffd5fa0 R15: 00007ffd6eabf468 [ 1391.193216][T32613] [ 1392.741860][T32638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1392.742496][T32636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7125'. [ 1395.217549][T32686] net_ratelimit: 15 callbacks suppressed [ 1395.217572][T32686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.499300][T32701] __nla_validate_parse: 4 callbacks suppressed [ 1395.499322][T32701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7142'. [ 1395.680185][T32715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7144'. [ 1395.722789][T32706] vxcan1 speed is unknown, defaulting to 1000 [ 1395.742964][T32717] bond_slave_0: entered allmulticast mode [ 1395.976359][T32724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1396.001162][T32724] bridge_slave_0: entered allmulticast mode [ 1396.157542][T32730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7150'. [ 1396.719671][T32706] lo speed is unknown, defaulting to 1000 [ 1396.748537][T32706] wg1 speed is unknown, defaulting to 1000 [ 1396.758311][T32706] lo speed is unknown, defaulting to 1000 [ 1396.931380][T32740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7151'. [ 1396.943357][T32738] netlink: 'syz.1.7153': attribute type 1 has an invalid length. [ 1397.165503][T32738] veth7: entered promiscuous mode [ 1397.203664][T32744] erspan0: entered allmulticast mode [ 1397.340984][T32753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7155'. [ 1397.481545][T32757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7157'. [ 1397.637420][T32759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1398.164506][ T306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7160'. [ 1400.726102][ T304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7159'. [ 1400.775425][ T309] macvlan3: entered allmulticast mode [ 1400.801262][ T309] veth1_vlan: entered allmulticast mode [ 1400.842562][ T309] veth1_vlan: left allmulticast mode [ 1401.212112][ T323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7165'. [ 1401.265935][ T321] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7167'. [ 1401.340732][ T327] FAULT_INJECTION: forcing a failure. [ 1401.340732][ T327] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.410601][ T327] CPU: 1 UID: 0 PID: 327 Comm: syz.2.7168 Not tainted syzkaller #0 PREEMPT(full) [ 1401.410631][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1401.410645][ T327] Call Trace: [ 1401.410654][ T327] [ 1401.410663][ T327] dump_stack_lvl+0x189/0x250 [ 1401.410692][ T327] ? __pfx____ratelimit+0x10/0x10 [ 1401.410714][ T327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1401.410751][ T327] ? __pfx__printk+0x10/0x10 [ 1401.410784][ T327] ? __pfx___might_resched+0x10/0x10 [ 1401.410809][ T327] should_fail_ex+0x414/0x560 [ 1401.410841][ T327] should_failslab+0xa8/0x100 [ 1401.410871][ T327] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1401.410899][ T327] ? __alloc_skb+0x112/0x2d0 [ 1401.410924][ T327] __alloc_skb+0x112/0x2d0 [ 1401.410949][ T327] netlink_sendmsg+0x5c6/0xb30 [ 1401.410980][ T327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.411005][ T327] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1401.411027][ T327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1401.411049][ T327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.411072][ T327] __sock_sendmsg+0x219/0x270 [ 1401.411104][ T327] ____sys_sendmsg+0x505/0x830 [ 1401.411135][ T327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1401.411170][ T327] ? import_iovec+0x74/0xa0 [ 1401.411198][ T327] ___sys_sendmsg+0x21f/0x2a0 [ 1401.411224][ T327] ? __pfx____sys_sendmsg+0x10/0x10 [ 1401.411293][ T327] ? __fget_files+0x2a/0x420 [ 1401.411310][ T327] ? __fget_files+0x3a0/0x420 [ 1401.411340][ T327] __x64_sys_sendmsg+0x19b/0x260 [ 1401.411368][ T327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1401.411403][ T327] ? __pfx_ksys_write+0x10/0x10 [ 1401.411426][ T327] ? rcu_is_watching+0x15/0xb0 [ 1401.411452][ T327] ? do_syscall_64+0xbe/0x3b0 [ 1401.411479][ T327] do_syscall_64+0xfa/0x3b0 [ 1401.411498][ T327] ? lockdep_hardirqs_on+0x9c/0x150 [ 1401.411517][ T327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.411536][ T327] ? clear_bhb_loop+0x60/0xb0 [ 1401.411561][ T327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.411579][ T327] RIP: 0033:0x7f47c198eba9 [ 1401.411597][ T327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.411614][ T327] RSP: 002b:00007f47c2746038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1401.411636][ T327] RAX: ffffffffffffffda RBX: 00007f47c1bd5fa0 RCX: 00007f47c198eba9 [ 1401.411651][ T327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1401.411663][ T327] RBP: 00007f47c2746090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.411675][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.411687][ T327] R13: 00007f47c1bd6038 R14: 00007f47c1bd5fa0 R15: 00007fffcbd1a078 [ 1401.411728][ T327] [ 1402.277268][ T339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1402.287813][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1402.321666][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1402.332154][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1402.341979][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1402.395522][ T342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1402.532455][ T337] vxcan1 speed is unknown, defaulting to 1000 [ 1402.875346][ T337] lo speed is unknown, defaulting to 1000 [ 1402.884324][ T337] wg1 speed is unknown, defaulting to 1000 [ 1402.892648][ T337] lo speed is unknown, defaulting to 1000 [ 1403.342906][ T337] chnl_net:caif_netlink_parms(): no params data found [ 1403.467995][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.476137][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.484207][ T337] bridge_slave_0: entered allmulticast mode [ 1403.492359][ T337] bridge_slave_0: entered promiscuous mode [ 1403.503100][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.510298][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.518564][ T337] bridge_slave_1: entered allmulticast mode [ 1403.527251][ T337] bridge_slave_1: entered promiscuous mode [ 1403.580420][ T337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.595262][ T337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.648353][ T337] team0: Port device team_slave_0 added [ 1403.659334][ T337] team0: Port device team_slave_1 added [ 1403.711358][ T337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.718510][ T337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.744796][ T337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.759635][ T337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.766839][ T337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.794266][ T337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.869660][ T337] hsr_slave_0: entered promiscuous mode [ 1403.876790][ T337] hsr_slave_1: entered promiscuous mode [ 1403.884816][ T337] debugfs: 'hsr0' already exists in 'hsr' [ 1403.891296][ T337] Cannot create hsr debugfs directory [ 1404.255540][ T337] batman_adv: batadv0: Removing interface: netdevsim0 [ 1404.411122][ T5879] Bluetooth: hci4: command tx timeout [ 1406.491785][ T5879] Bluetooth: hci4: command tx timeout [ 1408.571760][ T5879] Bluetooth: hci4: command tx timeout [ 1410.651386][ T5879] Bluetooth: hci4: command tx timeout [ 1411.053075][ T55] block nbd0: Possible stuck request ffff888024f8e000: control (read@0,4096B). Runtime 30 seconds [ 1416.981462][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1416.990653][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1416.999018][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1417.008309][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1417.016436][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1417.109110][ T352] vxcan1 speed is unknown, defaulting to 1000 [ 1417.123670][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1417.134091][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1417.142470][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1417.152068][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1417.159894][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1417.281421][ T5869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1417.292635][ T5869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1417.300693][ T5869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1417.309269][ T5869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1417.318352][ T5869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1417.545209][ T352] lo speed is unknown, defaulting to 1000 [ 1417.545229][ T354] vxcan1 speed is unknown, defaulting to 1000 [ 1417.562923][ T352] wg1 speed is unknown, defaulting to 1000 [ 1417.580880][ T352] lo speed is unknown, defaulting to 1000 [ 1418.019096][ T5869] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1418.028149][ T5869] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1418.048641][ T5869] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1418.058320][ T5869] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1418.066574][ T5869] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1418.163298][ T354] lo speed is unknown, defaulting to 1000 [ 1418.177916][ T356] vxcan1 speed is unknown, defaulting to 1000 [ 1418.184341][ T354] wg1 speed is unknown, defaulting to 1000 [ 1418.225631][ T354] lo speed is unknown, defaulting to 1000 [ 1418.739922][ T352] chnl_net:caif_netlink_parms(): no params data found [ 1418.853113][ T359] vxcan1 speed is unknown, defaulting to 1000 [ 1418.862965][ T356] lo speed is unknown, defaulting to 1000 [ 1418.870736][ T356] wg1 speed is unknown, defaulting to 1000 [ 1418.879315][ T356] lo speed is unknown, defaulting to 1000 [ 1419.051955][ T5879] Bluetooth: hci5: command tx timeout [ 1419.184832][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.201503][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.208800][ T352] bridge_slave_0: entered allmulticast mode [ 1419.215080][ T5879] Bluetooth: hci6: command tx timeout [ 1419.243139][ T352] bridge_slave_0: entered promiscuous mode [ 1419.262764][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.270020][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.277813][ T352] bridge_slave_1: entered allmulticast mode [ 1419.286226][ T352] bridge_slave_1: entered promiscuous mode [ 1419.372834][ T5879] Bluetooth: hci7: command tx timeout [ 1419.406216][ T359] lo speed is unknown, defaulting to 1000 [ 1419.467794][ T352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.483875][ T352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.507162][ T359] wg1 speed is unknown, defaulting to 1000 [ 1419.571663][ T359] lo speed is unknown, defaulting to 1000 [ 1419.655625][ T352] team0: Port device team_slave_0 added [ 1419.675718][ T352] team0: Port device team_slave_1 added [ 1419.815306][ T354] chnl_net:caif_netlink_parms(): no params data found [ 1419.846772][ T352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.861153][ T352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.909294][ T352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.923619][ T352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.930598][ T352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.957132][ T352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.154642][ T352] hsr_slave_0: entered promiscuous mode [ 1420.162093][ T352] hsr_slave_1: entered promiscuous mode [ 1420.168700][ T352] debugfs: 'hsr0' already exists in 'hsr' [ 1420.174546][ T5879] Bluetooth: hci8: command tx timeout [ 1420.180660][ T352] Cannot create hsr debugfs directory [ 1420.445351][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.452789][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.460012][ T354] bridge_slave_0: entered allmulticast mode [ 1420.469249][ T354] bridge_slave_0: entered promiscuous mode [ 1420.502550][ T356] chnl_net:caif_netlink_parms(): no params data found [ 1420.517211][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.526065][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.534153][ T354] bridge_slave_1: entered allmulticast mode [ 1420.543587][ T354] bridge_slave_1: entered promiscuous mode [ 1420.686177][ T354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.760443][ T354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.867158][ T354] team0: Port device team_slave_0 added [ 1420.939502][ T354] team0: Port device team_slave_1 added [ 1421.030430][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.038072][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.046278][ T356] bridge_slave_0: entered allmulticast mode [ 1421.055545][ T356] bridge_slave_0: entered promiscuous mode [ 1421.066474][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.074405][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.081899][ T356] bridge_slave_1: entered allmulticast mode [ 1421.090075][ T356] bridge_slave_1: entered promiscuous mode [ 1421.131713][ T5879] Bluetooth: hci5: command tx timeout [ 1421.143378][ T354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.150372][ T354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.177421][ T354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.193524][ T354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.200526][ T354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.227882][ T354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.291671][ T5879] Bluetooth: hci6: command tx timeout [ 1421.309473][ T356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.333754][ T359] chnl_net:caif_netlink_parms(): no params data found [ 1421.355013][ T356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.450987][ T5879] Bluetooth: hci7: command tx timeout [ 1421.480203][ T354] hsr_slave_0: entered promiscuous mode [ 1421.488048][ T354] hsr_slave_1: entered promiscuous mode [ 1421.494785][ T354] debugfs: 'hsr0' already exists in 'hsr' [ 1421.500544][ T354] Cannot create hsr debugfs directory [ 1421.509190][ T356] team0: Port device team_slave_0 added [ 1421.560591][ T356] team0: Port device team_slave_1 added [ 1421.664632][ T356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.672423][ T356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.699337][ T356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.763941][ T356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.772683][ T356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.799606][ T356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.862255][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.869618][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.877712][ T359] bridge_slave_0: entered allmulticast mode [ 1421.886324][ T359] bridge_slave_0: entered promiscuous mode [ 1421.895479][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.903233][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.910541][ T359] bridge_slave_1: entered allmulticast mode [ 1421.919193][ T359] bridge_slave_1: entered promiscuous mode [ 1422.059141][ T359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.088857][ T356] hsr_slave_0: entered promiscuous mode [ 1422.096313][ T356] hsr_slave_1: entered promiscuous mode [ 1422.103739][ T356] debugfs: 'hsr0' already exists in 'hsr' [ 1422.109494][ T356] Cannot create hsr debugfs directory [ 1422.143196][ T359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.215825][ T359] team0: Port device team_slave_0 added [ 1422.225715][ T359] team0: Port device team_slave_1 added [ 1422.250923][ T5879] Bluetooth: hci8: command tx timeout [ 1422.358657][ T359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.366302][ T359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.393916][ T359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.407216][ T359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.414384][ T359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.440982][ T359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.602031][ T359] hsr_slave_0: entered promiscuous mode [ 1422.609064][ T359] hsr_slave_1: entered promiscuous mode [ 1422.615746][ T359] debugfs: 'hsr0' already exists in 'hsr' [ 1422.622228][ T359] Cannot create hsr debugfs directory [ 1423.214740][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.215559][ T5879] Bluetooth: hci5: command tx timeout [ 1423.381151][ T5879] Bluetooth: hci6: command tx timeout [ 1423.541327][ T5879] Bluetooth: hci7: command tx timeout [ 1424.331507][ T5879] Bluetooth: hci8: command tx timeout [ 1425.301497][ T5879] Bluetooth: hci5: command tx timeout [ 1425.451888][ T5879] Bluetooth: hci6: command tx timeout [ 1425.611871][ T5879] Bluetooth: hci7: command tx timeout [ 1426.410910][ T5879] Bluetooth: hci8: command tx timeout [ 1441.075581][ T5233] udevd[5233]: worker [32397] /devices/virtual/block/nbd0 is taking a long time [ 1441.141263][ T55] block nbd0: Possible stuck request ffff888024f8e000: control (read@0,4096B). Runtime 60 seconds [ 1461.242091][ T5869] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1461.253424][ T5869] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1461.261822][ T5869] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1461.271835][ T5869] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1461.279752][ T5869] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1461.340618][ T386] vxcan1 speed is unknown, defaulting to 1000 [ 1461.571585][ T386] lo speed is unknown, defaulting to 1000 [ 1461.579382][ T386] wg1 speed is unknown, defaulting to 1000 [ 1461.587423][ T386] lo speed is unknown, defaulting to 1000 [ 1462.037806][ T386] chnl_net:caif_netlink_parms(): no params data found [ 1462.163129][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.170400][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.178148][ T386] bridge_slave_0: entered allmulticast mode [ 1462.187573][ T386] bridge_slave_0: entered promiscuous mode [ 1462.198240][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.206189][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.214092][ T386] bridge_slave_1: entered allmulticast mode [ 1462.222714][ T386] bridge_slave_1: entered promiscuous mode [ 1462.285085][ T386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.298006][ T386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.352505][ T386] team0: Port device team_slave_0 added [ 1462.363683][ T386] team0: Port device team_slave_1 added [ 1462.414138][ T386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.422247][ T386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.450232][ T386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.464010][ T386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.471488][ T386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.498621][ T386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.573942][ T386] hsr_slave_0: entered promiscuous mode [ 1462.581805][ T386] hsr_slave_1: entered promiscuous mode [ 1462.588425][ T386] debugfs: 'hsr0' already exists in 'hsr' [ 1462.594780][ T386] Cannot create hsr debugfs directory [ 1463.381328][ T5869] Bluetooth: hci9: command tx timeout [ 1465.451476][ T5869] Bluetooth: hci9: command tx timeout [ 1467.531394][ T5869] Bluetooth: hci9: command tx timeout [ 1469.611564][ T5869] Bluetooth: hci9: command tx timeout [ 1471.211069][ T55] block nbd0: Possible stuck request ffff888024f8e000: control (read@0,4096B). Runtime 90 seconds [ 1476.762837][ T5879] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1476.773241][ T5879] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1476.782898][ T5879] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1476.793936][ T5879] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1476.802514][ T5879] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1476.862415][ T395] vxcan1 speed is unknown, defaulting to 1000 [ 1477.271126][ T395] lo speed is unknown, defaulting to 1000 [ 1477.278935][ T395] wg1 speed is unknown, defaulting to 1000 [ 1477.294251][ T395] lo speed is unknown, defaulting to 1000 [ 1477.679830][ T5879] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1477.690106][ T5879] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1477.698909][ T5879] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1477.707524][ T5879] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1477.745346][ T339] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1477.754942][ T339] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1477.765557][ T405] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1477.774906][ T5869] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1477.785000][ T403] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1477.793926][ T403] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1477.964942][ T402] vxcan1 speed is unknown, defaulting to 1000 [ 1478.115346][ T403] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1478.124803][ T403] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1478.133843][ T403] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1478.143743][ T403] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1478.153512][ T403] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1478.417740][ T400] vxcan1 speed is unknown, defaulting to 1000 [ 1478.425661][ T402] lo speed is unknown, defaulting to 1000 [ 1478.443491][ T402] wg1 speed is unknown, defaulting to 1000 [ 1478.459407][ T395] chnl_net:caif_netlink_parms(): no params data found [ 1478.498228][ T402] lo speed is unknown, defaulting to 1000 [ 1478.793810][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.811976][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.819322][ T395] bridge_slave_0: entered allmulticast mode [ 1478.843724][ T395] bridge_slave_0: entered promiscuous mode [ 1478.863389][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.870644][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.891105][ T403] Bluetooth: hci10: command tx timeout [ 1478.892459][ T395] bridge_slave_1: entered allmulticast mode [ 1478.913994][ T395] bridge_slave_1: entered promiscuous mode [ 1478.927283][ T400] lo speed is unknown, defaulting to 1000 [ 1478.927308][ T406] vxcan1 speed is unknown, defaulting to 1000 [ 1479.040879][ T400] wg1 speed is unknown, defaulting to 1000 [ 1479.097500][ T395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.161969][ T395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.174968][ T400] lo speed is unknown, defaulting to 1000 [ 1479.343368][ T395] team0: Port device team_slave_0 added [ 1479.357507][ T406] lo speed is unknown, defaulting to 1000 [ 1479.378417][ T395] team0: Port device team_slave_1 added [ 1479.409537][ T406] wg1 speed is unknown, defaulting to 1000 [ 1479.553847][ T395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.563021][ T395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.589463][ T395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.607971][ T406] lo speed is unknown, defaulting to 1000 [ 1479.632620][ T395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.639606][ T395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.701067][ T395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.851460][ T403] Bluetooth: hci12: command tx timeout [ 1479.857591][ T403] Bluetooth: hci11: command tx timeout [ 1480.028036][ T395] hsr_slave_0: entered promiscuous mode [ 1480.039796][ T395] hsr_slave_1: entered promiscuous mode [ 1480.046841][ T395] debugfs: 'hsr0' already exists in 'hsr' [ 1480.053271][ T395] Cannot create hsr debugfs directory [ 1480.118627][ T402] chnl_net:caif_netlink_parms(): no params data found [ 1480.251266][ T403] Bluetooth: hci13: command tx timeout [ 1480.577440][ T400] chnl_net:caif_netlink_parms(): no params data found [ 1480.633091][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.640367][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.648525][ T402] bridge_slave_0: entered allmulticast mode [ 1480.657056][ T402] bridge_slave_0: entered promiscuous mode [ 1480.714961][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.723267][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.730578][ T402] bridge_slave_1: entered allmulticast mode [ 1480.740321][ T402] bridge_slave_1: entered promiscuous mode [ 1480.851537][ T402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.929811][ T402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.971179][ T403] Bluetooth: hci10: command tx timeout [ 1481.103802][ T402] team0: Port device team_slave_0 added [ 1481.136479][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.145644][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.153863][ T400] bridge_slave_0: entered allmulticast mode [ 1481.162299][ T400] bridge_slave_0: entered promiscuous mode [ 1481.175944][ T402] team0: Port device team_slave_1 added [ 1481.202908][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.210181][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.219325][ T400] bridge_slave_1: entered allmulticast mode [ 1481.228336][ T400] bridge_slave_1: entered promiscuous mode [ 1481.287264][ T402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.294548][ T402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.321250][ T402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.367355][ T406] chnl_net:caif_netlink_parms(): no params data found [ 1481.384094][ T402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.392150][ T402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.419268][ T402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.446146][ T400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.492444][ T400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.654492][ T402] hsr_slave_0: entered promiscuous mode [ 1481.662160][ T402] hsr_slave_1: entered promiscuous mode [ 1481.668783][ T402] debugfs: 'hsr0' already exists in 'hsr' [ 1481.674592][ T402] Cannot create hsr debugfs directory [ 1481.759407][ T400] team0: Port device team_slave_0 added [ 1481.771507][ T400] team0: Port device team_slave_1 added [ 1481.931594][ T5879] Bluetooth: hci12: command tx timeout [ 1481.937198][ T403] Bluetooth: hci11: command tx timeout [ 1481.951481][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.958715][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.966355][ T406] bridge_slave_0: entered allmulticast mode [ 1481.974800][ T406] bridge_slave_0: entered promiscuous mode [ 1481.984413][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.991671][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.999338][ T406] bridge_slave_1: entered allmulticast mode [ 1482.007606][ T406] bridge_slave_1: entered promiscuous mode [ 1482.027933][ T400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.036204][ T400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.062572][ T400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.076201][ T400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.083323][ T400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.116941][ T400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.218179][ T406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.232952][ T406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.341139][ T403] Bluetooth: hci13: command tx timeout [ 1482.368348][ T400] hsr_slave_0: entered promiscuous mode [ 1482.376123][ T400] hsr_slave_1: entered promiscuous mode [ 1482.382987][ T400] debugfs: 'hsr0' already exists in 'hsr' [ 1482.388739][ T400] Cannot create hsr debugfs directory [ 1482.397691][ T406] team0: Port device team_slave_0 added [ 1482.420587][ T406] team0: Port device team_slave_1 added [ 1482.587119][ T406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.595479][ T406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.622567][ T406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.636404][ T406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.643954][ T406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.670708][ T406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.872551][ T406] hsr_slave_0: entered promiscuous mode [ 1482.879843][ T406] hsr_slave_1: entered promiscuous mode [ 1482.888100][ T406] debugfs: 'hsr0' already exists in 'hsr' [ 1482.894044][ T406] Cannot create hsr debugfs directory [ 1483.052736][ T403] Bluetooth: hci10: command tx timeout [ 1484.021188][ T5879] Bluetooth: hci12: command tx timeout [ 1484.026840][ T403] Bluetooth: hci11: command tx timeout [ 1484.410918][ T403] Bluetooth: hci13: command tx timeout [ 1484.657383][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1485.141312][ T403] Bluetooth: hci10: command tx timeout [ 1486.091434][ T403] Bluetooth: hci11: command tx timeout [ 1486.091446][ T5879] Bluetooth: hci12: command tx timeout [ 1486.501324][ T5879] Bluetooth: hci13: command tx timeout [ 1501.301793][ T55] block nbd0: Possible stuck request ffff888024f8e000: control (read@0,4096B). Runtime 120 seconds [ 1521.317901][ T403] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1521.328417][ T403] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1521.337759][ T403] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1521.347425][ T403] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1521.356395][ T403] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1521.413840][ T433] vxcan1 speed is unknown, defaulting to 1000 [ 1521.653640][ T433] lo speed is unknown, defaulting to 1000 [ 1521.660601][ T433] wg1 speed is unknown, defaulting to 1000 [ 1521.669297][ T433] lo speed is unknown, defaulting to 1000 [ 1522.138736][ T433] chnl_net:caif_netlink_parms(): no params data found [ 1522.266987][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.275303][ T433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.283860][ T433] bridge_slave_0: entered allmulticast mode [ 1522.294005][ T433] bridge_slave_0: entered promiscuous mode [ 1522.306524][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.314516][ T433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.322620][ T433] bridge_slave_1: entered allmulticast mode [ 1522.331860][ T433] bridge_slave_1: entered promiscuous mode [ 1522.386812][ T433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.402392][ T433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.459131][ T433] team0: Port device team_slave_0 added [ 1522.469349][ T433] team0: Port device team_slave_1 added [ 1522.519612][ T433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.526741][ T433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.553407][ T433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.569096][ T433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.576541][ T433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.603374][ T433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.678343][ T433] hsr_slave_0: entered promiscuous mode [ 1522.686756][ T433] hsr_slave_1: entered promiscuous mode [ 1522.694847][ T433] debugfs: 'hsr0' already exists in 'hsr' [ 1522.700600][ T433] Cannot create hsr debugfs directory [ 1523.381299][ T5879] Bluetooth: hci14: command tx timeout [ 1525.451879][ T5879] Bluetooth: hci14: command tx timeout [ 1527.531513][ T5879] Bluetooth: hci14: command tx timeout [ 1527.690883][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 1529.611728][ T403] Bluetooth: hci14: command tx timeout [ 1531.381614][ T55] block nbd0: Possible stuck request ffff888024f8e000: control (read@0,4096B). Runtime 150 seconds [ 1537.621933][ T5879] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1537.634542][ T5879] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1537.646585][ T5879] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1537.655016][ T5879] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1537.663027][ T5879] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1537.683033][ T5879] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1537.693680][ T405] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1537.702444][ T405] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1537.711220][ T405] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1537.719160][ T405] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1537.881255][ T445] vxcan1 speed is unknown, defaulting to 1000 [ 1538.121733][ T405] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1538.132926][ T405] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1538.141845][ T405] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1538.161913][ T405] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1538.169863][ T405] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1538.462021][ T447] vxcan1 speed is unknown, defaulting to 1000 [ 1538.462021][ T445] lo speed is unknown, defaulting to 1000 [ 1538.463724][ T445] wg1 speed is unknown, defaulting to 1000 [ 1538.493500][ T445] lo speed is unknown, defaulting to 1000 [ 1538.555173][ T405] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1538.571797][ T405] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1538.582223][ T405] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1538.674535][ T405] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1538.682916][ T405] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1539.128506][ T450] vxcan1 speed is unknown, defaulting to 1000 [ 1539.145823][ T447] lo speed is unknown, defaulting to 1000 [ 1539.162911][ T447] wg1 speed is unknown, defaulting to 1000 [ 1539.203320][ T447] lo speed is unknown, defaulting to 1000 [ 1539.623002][ T452] vxcan1 speed is unknown, defaulting to 1000 [ 1539.641522][ T450] lo speed is unknown, defaulting to 1000 [ 1539.656571][ T445] chnl_net:caif_netlink_parms(): no params data found [ 1539.688617][ T450] wg1 speed is unknown, defaulting to 1000 [ 1539.694883][ T405] Bluetooth: hci15: command tx timeout [ 1539.771008][ T405] Bluetooth: hci16: command tx timeout [ 1539.839860][ T450] lo speed is unknown, defaulting to 1000 [ 1540.058062][ T452] lo speed is unknown, defaulting to 1000 [ 1540.065313][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.083985][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.101255][ T445] bridge_slave_0: entered allmulticast mode [ 1540.109785][ T445] bridge_slave_0: entered promiscuous mode [ 1540.124700][ T452] wg1 speed is unknown, defaulting to 1000 [ 1540.158171][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.166000][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.173646][ T445] bridge_slave_1: entered allmulticast mode [ 1540.182344][ T445] bridge_slave_1: entered promiscuous mode [ 1540.206836][ T452] lo speed is unknown, defaulting to 1000 [ 1540.251916][ T405] Bluetooth: hci17: command tx timeout [ 1540.375115][ T445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.406522][ T445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.605703][ T445] team0: Port device team_slave_0 added [ 1540.653956][ T445] team0: Port device team_slave_1 added [ 1540.732879][ T405] Bluetooth: hci18: command tx timeout [ 1540.793308][ T445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.800313][ T445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.829262][ T445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.870594][ T445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.878820][ T445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.906057][ T445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.928736][ T447] chnl_net:caif_netlink_parms(): no params data found [ 1541.365526][ T445] hsr_slave_0: entered promiscuous mode [ 1541.392815][ T445] hsr_slave_1: entered promiscuous mode [ 1541.399491][ T445] debugfs: 'hsr0' already exists in 'hsr' [ 1541.420934][ T445] Cannot create hsr debugfs directory [ 1541.567700][ T450] chnl_net:caif_netlink_parms(): no params data found [ 1541.633945][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.651389][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.658789][ T447] bridge_slave_0: entered allmulticast mode [ 1541.683522][ T447] bridge_slave_0: entered promiscuous mode [ 1541.738702][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.746324][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.753874][ T447] bridge_slave_1: entered allmulticast mode [ 1541.762459][ T447] bridge_slave_1: entered promiscuous mode [ 1541.772404][ T465] Bluetooth: hci15: command tx timeout [ 1541.851737][ T465] Bluetooth: hci16: command tx timeout [ 1541.973569][ T447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.046909][ T447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.129293][ T452] chnl_net:caif_netlink_parms(): no params data found [ 1542.218981][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.227869][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.235903][ T450] bridge_slave_0: entered allmulticast mode [ 1542.245632][ T450] bridge_slave_0: entered promiscuous mode [ 1542.259834][ T447] team0: Port device team_slave_0 added [ 1542.299070][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.310489][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.318226][ T450] bridge_slave_1: entered allmulticast mode [ 1542.327305][ T450] bridge_slave_1: entered promiscuous mode [ 1542.334511][ T465] Bluetooth: hci17: command tx timeout [ 1542.344568][ T447] team0: Port device team_slave_1 added [ 1542.522598][ T450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.536955][ T450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.556812][ T447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.564226][ T447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.591558][ T447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.648727][ T447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.656733][ T447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.683896][ T447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.789521][ T450] team0: Port device team_slave_0 added [ 1542.813098][ T465] Bluetooth: hci18: command tx timeout [ 1542.904656][ T447] hsr_slave_0: entered promiscuous mode [ 1542.922658][ T447] hsr_slave_1: entered promiscuous mode [ 1542.929334][ T447] debugfs: 'hsr0' already exists in 'hsr' [ 1542.956901][ T447] Cannot create hsr debugfs directory [ 1542.975067][ T450] team0: Port device team_slave_1 added [ 1543.024599][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.036681][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.051817][ T465] Bluetooth: hci5: command 0x0406 tx timeout [ 1543.057945][ T465] Bluetooth: hci6: command 0x0406 tx timeout [ 1543.058215][ T464] Bluetooth: hci7: command 0x0406 tx timeout [ 1543.068789][ T465] Bluetooth: hci8: command 0x0406 tx timeout [ 1543.077578][ T452] bridge_slave_0: entered allmulticast mode [ 1543.096450][ T452] bridge_slave_0: entered promiscuous mode [ 1543.199609][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.211859][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.219440][ T452] bridge_slave_1: entered allmulticast mode [ 1543.248331][ T452] bridge_slave_1: entered promiscuous mode [ 1543.350399][ T450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.373987][ T450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.430764][ T450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.595904][ T450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.621217][ T450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.670796][ T450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.709619][ T452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.828760][ T452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.851509][ T5879] Bluetooth: hci15: command tx timeout [ 1543.931517][ T5879] Bluetooth: hci16: command tx timeout [ 1544.043352][ T450] hsr_slave_0: entered promiscuous mode [ 1544.051373][ T450] hsr_slave_1: entered promiscuous mode [ 1544.058199][ T450] debugfs: 'hsr0' already exists in 'hsr' [ 1544.064605][ T450] Cannot create hsr debugfs directory [ 1544.157224][ T452] team0: Port device team_slave_0 added [ 1544.202322][ T452] team0: Port device team_slave_1 added [ 1544.347727][ T452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.360022][ T452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.386556][ T452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.409504][ T452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.417691][ T5879] Bluetooth: hci17: command tx timeout [ 1544.425810][ T452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.452534][ T452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.620030][ T452] hsr_slave_0: entered promiscuous mode [ 1544.629962][ T452] hsr_slave_1: entered promiscuous mode [ 1544.641677][ T452] debugfs: 'hsr0' already exists in 'hsr' [ 1544.647441][ T452] Cannot create hsr debugfs directory [ 1544.892229][ T5879] Bluetooth: hci18: command tx timeout [ 1545.931106][ T5879] Bluetooth: hci15: command tx timeout [ 1546.012173][ T5879] Bluetooth: hci16: command tx timeout [ 1546.095785][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1546.492162][ T5879] Bluetooth: hci17: command tx timeout [ 1546.971076][ T5879] Bluetooth: hci18: command tx timeout [ 1557.611680][ T31] INFO: task syz.4.7165:323 blocked for more than 143 seconds. [ 1557.619390][ T31] Not tainted syzkaller #0 [ 1557.625245][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1557.634461][ T31] task:syz.4.7165 state:D stack:25448 pid:323 tgid:314 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 1557.647092][ T31] Call Trace: [ 1557.650399][ T31] [ 1557.653990][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1557.658559][ T31] ? __lock_acquire+0xab9/0xd20 [ 1557.671235][ T31] ? __lock_acquire+0xab9/0xd20 [ 1557.676169][ T31] ? __pfx___schedule+0x10/0x10 [ 1557.691874][ T31] ? schedule+0x91/0x360 [ 1557.696168][ T31] schedule+0x165/0x360 [ 1557.700357][ T31] schedule_preempt_disabled+0x13/0x30 [ 1557.731835][ T31] __mutex_lock+0x7e6/0x1350 [ 1557.736507][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1557.772136][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1557.776894][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1557.808746][ T31] ? stack_trace_save+0x9c/0xe0 [ 1557.813944][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1557.819350][ T31] ? radix_tree_lookup+0x240/0x290 [ 1557.824637][ T31] genl_rcv_msg+0x10d/0x790 [ 1557.829173][ T31] ? __lock_acquire+0xab9/0xd20 [ 1557.834237][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.839327][ T31] netlink_rcv_skb+0x205/0x470 [ 1557.844933][ T31] ? __lock_acquire+0xab9/0xd20 [ 1557.849820][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1557.855352][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1557.861631][ T31] ? down_read+0x1ad/0x2e0 [ 1557.866091][ T31] genl_rcv+0x28/0x40 [ 1557.870095][ T31] netlink_unicast+0x82c/0x9e0 [ 1557.875733][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1557.881691][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1557.886652][ T31] ? skb_put+0x11b/0x210 [ 1557.891583][ T31] netlink_sendmsg+0x805/0xb30 [ 1557.896391][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.902663][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1557.907630][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1557.913594][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1557.918905][ T31] __sock_sendmsg+0x219/0x270 [ 1557.924277][ T31] __sys_sendto+0x3bd/0x520 [ 1557.928810][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1557.935482][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1557.941533][ T31] ? exc_page_fault+0x76/0xf0 [ 1557.949737][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1557.955797][ T31] __x64_sys_sendto+0xde/0x100 [ 1557.960600][ T31] do_syscall_64+0xfa/0x3b0 [ 1557.965832][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1557.971697][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.977892][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1557.983236][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.989250][ T31] RIP: 0033:0x7f64b1790a3c [ 1557.994390][ T31] RSP: 002b:00007f64b26b1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1558.003141][ T31] RAX: ffffffffffffffda RBX: 00007f64b26b1fc0 RCX: 00007f64b1790a3c [ 1558.011587][ T31] RDX: 0000000000000024 RSI: 00007f64b26b2010 RDI: 0000000000000009 [ 1558.019669][ T31] RBP: 0000000000000000 R08: 00007f64b26b1f14 R09: 000000000000000c [ 1558.027845][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 1558.036636][ T31] R13: 00007f64b26b1f68 R14: 00007f64b26b2010 R15: 0000000000000000 [ 1558.045292][ T31] [ 1558.048378][ T31] INFO: task syz.4.7165:326 blocked for more than 143 seconds. [ 1558.056577][ T31] Not tainted syzkaller #0 [ 1558.062197][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1558.071475][ T31] task:syz.4.7165 state:D stack:28608 pid:326 tgid:314 ppid:5867 task_flags:0x400040 flags:0x00004004 [ 1558.084272][ T31] Call Trace: [ 1558.087573][ T31] [ 1558.090519][ T31] __schedule+0x1798/0x4cc0 [ 1558.095703][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.100603][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.106203][ T31] ? __pfx___schedule+0x10/0x10 [ 1558.111740][ T31] ? schedule+0x91/0x360 [ 1558.116018][ T31] schedule+0x165/0x360 [ 1558.120197][ T31] schedule_preempt_disabled+0x13/0x30 [ 1558.126291][ T31] __mutex_lock+0x7e6/0x1350 [ 1558.131723][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1558.136557][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1558.141903][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1558.146987][ T31] ? stack_trace_save+0x9c/0xe0 [ 1558.152657][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1558.158075][ T31] ? radix_tree_lookup+0x240/0x290 [ 1558.163928][ T31] genl_rcv_msg+0x10d/0x790 [ 1558.168473][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.174244][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1558.179323][ T31] netlink_rcv_skb+0x205/0x470 [ 1558.184630][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.189520][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1558.195250][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1558.200604][ T31] ? down_read+0x1ad/0x2e0 [ 1558.205647][ T31] genl_rcv+0x28/0x40 [ 1558.209661][ T31] netlink_unicast+0x82c/0x9e0 [ 1558.215224][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1558.220544][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1558.226085][ T31] ? skb_put+0x11b/0x210 [ 1558.230364][ T31] netlink_sendmsg+0x805/0xb30 [ 1558.235753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.241769][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1558.246736][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1558.252834][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.258221][ T31] __sock_sendmsg+0x219/0x270 [ 1558.263590][ T31] __sys_sendto+0x3bd/0x520 [ 1558.268143][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1558.273850][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1558.279274][ T31] ? exc_page_fault+0x76/0xf0 [ 1558.284762][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1558.290095][ T31] __x64_sys_sendto+0xde/0x100 [ 1558.295397][ T31] do_syscall_64+0xfa/0x3b0 [ 1558.299928][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1558.305286][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.311535][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1558.316247][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.322831][ T31] RIP: 0033:0x7f64b1790a3c [ 1558.327794][ T31] RSP: 002b:00007f64b2690ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1558.337238][ T31] RAX: ffffffffffffffda RBX: 00007f64b2690fc0 RCX: 00007f64b1790a3c [ 1558.345831][ T31] RDX: 0000000000000024 RSI: 00007f64b2691010 RDI: 0000000000000009 [ 1558.354594][ T31] RBP: 0000000000000000 R08: 00007f64b2690f14 R09: 000000000000000c [ 1558.363309][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 1558.372021][ T31] R13: 00007f64b2690f68 R14: 00007f64b2691010 R15: 0000000000000000 [ 1558.380055][ T31] [ 1558.383720][ T31] INFO: task syz.0.7166:319 blocked for more than 144 seconds. [ 1558.391976][ T31] Not tainted syzkaller #0 [ 1558.396935][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1558.406262][ T31] task:syz.0.7166 state:D stack:24520 pid:319 tgid:318 ppid:5870 task_flags:0x400140 flags:0x00004004 [ 1558.419959][ T31] Call Trace: [ 1558.423861][ T31] [ 1558.426826][ T31] __schedule+0x1798/0x4cc0 [ 1558.432026][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.436931][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.442483][ T31] ? __pfx___schedule+0x10/0x10 [ 1558.447379][ T31] ? schedule+0x91/0x360 [ 1558.452313][ T31] schedule+0x165/0x360 [ 1558.456590][ T31] schedule_preempt_disabled+0x13/0x30 [ 1558.462751][ T31] __mutex_lock+0x7e6/0x1350 [ 1558.467382][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1558.472793][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1558.477505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1558.483131][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1558.488299][ T31] ? radix_tree_lookup+0x240/0x290 [ 1558.494263][ T31] genl_rcv_msg+0x10d/0x790 [ 1558.498810][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1558.504517][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1558.509593][ T31] ? __asan_memcpy+0x40/0x70 [ 1558.514862][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1558.520282][ T31] netlink_rcv_skb+0x205/0x470 [ 1558.525657][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.530542][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1558.536323][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1558.542287][ T31] ? down_read+0x1ad/0x2e0 [ 1558.546825][ T31] genl_rcv+0x28/0x40 [ 1558.551426][ T31] netlink_unicast+0x82c/0x9e0 [ 1558.556239][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1558.562164][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1558.567119][ T31] ? skb_put+0x11b/0x210 [ 1558.572204][ T31] netlink_sendmsg+0x805/0xb30 [ 1558.577013][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.582707][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1558.587771][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1558.593223][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.598546][ T31] __sock_sendmsg+0x219/0x270 [ 1558.603395][ T31] __sys_sendto+0x3bd/0x520 [ 1558.607925][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1558.613797][ T31] ? fd_install+0x97/0x540 [ 1558.618255][ T31] ? fd_install+0x30d/0x540 [ 1558.623367][ T31] __x64_sys_sendto+0xde/0x100 [ 1558.628172][ T31] do_syscall_64+0xfa/0x3b0 [ 1558.633298][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1558.638521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.645234][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1558.649955][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.656683][ T31] RIP: 0033:0x7fbdffd90a3c [ 1558.661700][ T31] RSP: 002b:00007fbe00bb6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1558.670228][ T31] RAX: ffffffffffffffda RBX: 00007fbe00bb6fc0 RCX: 00007fbdffd90a3c [ 1558.678921][ T31] RDX: 0000000000000020 RSI: 00007fbe00bb7010 RDI: 000000000000000d [ 1558.687561][ T31] RBP: 0000000000000000 R08: 00007fbe00bb6f14 R09: 000000000000000c [ 1558.696211][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 1558.704795][ T31] R13: 00007fbe00bb6f68 R14: 00007fbe00bb7010 R15: 0000000000000000 [ 1558.713417][ T31] [ 1558.716476][ T31] INFO: task syz.0.7166:324 blocked for more than 144 seconds. [ 1558.737702][ T31] Not tainted syzkaller #0 [ 1558.743272][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1558.752579][ T31] task:syz.0.7166 state:D stack:28360 pid:324 tgid:318 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 1558.768158][ T31] Call Trace: [ 1558.772151][ T31] [ 1558.775113][ T31] __schedule+0x1798/0x4cc0 [ 1558.779663][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.785124][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.790006][ T31] ? __pfx___schedule+0x10/0x10 [ 1558.795550][ T31] ? schedule+0x91/0x360 [ 1558.799880][ T31] schedule+0x165/0x360 [ 1558.805436][ T31] schedule_preempt_disabled+0x13/0x30 [ 1558.811740][ T31] __mutex_lock+0x7e6/0x1350 [ 1558.816373][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1558.821850][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1558.826650][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1558.832375][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1558.837538][ T31] ? radix_tree_lookup+0x240/0x290 [ 1558.843222][ T31] genl_rcv_msg+0x10d/0x790 [ 1558.847770][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1558.853524][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1558.858581][ T31] ? __asan_memcpy+0x40/0x70 [ 1558.863787][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1558.869237][ T31] netlink_rcv_skb+0x205/0x470 [ 1558.874416][ T31] ? __lock_acquire+0xab9/0xd20 [ 1558.879386][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1558.884802][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1558.890137][ T31] ? down_read+0x1ad/0x2e0 [ 1558.894791][ T31] genl_rcv+0x28/0x40 [ 1558.898801][ T31] netlink_unicast+0x82c/0x9e0 [ 1558.904242][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1558.909575][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1558.915620][ T31] ? skb_put+0x11b/0x210 [ 1558.919906][ T31] netlink_sendmsg+0x805/0xb30 [ 1558.925657][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.931056][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1558.936019][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1558.941563][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1558.946878][ T31] __sock_sendmsg+0x219/0x270 [ 1558.952063][ T31] __sys_sendto+0x3bd/0x520 [ 1558.956599][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1558.961941][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1558.967269][ T31] ? exc_page_fault+0x76/0xf0 [ 1558.973316][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1558.978676][ T31] __x64_sys_sendto+0xde/0x100 [ 1558.983918][ T31] do_syscall_64+0xfa/0x3b0 [ 1558.988461][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1558.994393][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.000507][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1559.006204][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.012816][ T31] RIP: 0033:0x7fbdffd90a3c [ 1559.017266][ T31] RSP: 002b:00007fbe00b95ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1559.026409][ T31] RAX: ffffffffffffffda RBX: 00007fbe00b95fc0 RCX: 00007fbdffd90a3c [ 1559.035131][ T31] RDX: 0000000000000020 RSI: 00007fbe00b96010 RDI: 000000000000000a [ 1559.043785][ T31] RBP: 0000000000000000 R08: 00007fbe00b95f14 R09: 000000000000000c [ 1559.052580][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 1559.060578][ T31] R13: 00007fbe00b95f68 R14: 00007fbe00b96010 R15: 0000000000000000 [ 1559.069265][ T31] [ 1559.072907][ T31] INFO: task syz.1.7167:321 blocked for more than 144 seconds. [ 1559.080470][ T31] Not tainted syzkaller #0 [ 1559.086076][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1559.095569][ T31] task:syz.1.7167 state:D stack:24824 pid:321 tgid:320 ppid:5868 task_flags:0x480140 flags:0x00004004 [ 1559.108195][ T31] Call Trace: [ 1559.112055][ T31] [ 1559.115103][ T31] __schedule+0x1798/0x4cc0 [ 1559.119744][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.125384][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.130351][ T31] ? __pfx___schedule+0x10/0x10 [ 1559.135927][ T31] ? schedule+0x91/0x360 [ 1559.140201][ T31] schedule+0x165/0x360 [ 1559.145119][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 1559.150620][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1559.157318][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1559.163890][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 1559.169828][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 1559.176505][ T31] nbd_set_size+0x47e/0x6a0 [ 1559.181235][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1559.186336][ T31] ? nla_memcpy+0x5b/0xc0 [ 1559.191303][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 1559.196394][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 1559.202608][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 1559.208623][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1559.214047][ T31] ? security_capable+0x7e/0x2e0 [ 1559.219040][ T31] ? radix_tree_lookup+0x240/0x290 [ 1559.224915][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 1559.230279][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1559.236690][ T31] ? __nla_parse+0x40/0x60 [ 1559.241749][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1559.248131][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1559.254339][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1559.260455][ T31] ? stack_trace_save+0x9c/0xe0 [ 1559.265972][ T31] genl_rcv_msg+0x60e/0x790 [ 1559.270521][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1559.276277][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1559.282734][ T31] netlink_rcv_skb+0x205/0x470 [ 1559.287527][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.293068][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1559.298129][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1559.304156][ T31] ? down_read+0x1ad/0x2e0 [ 1559.308609][ T31] genl_rcv+0x28/0x40 [ 1559.313207][ T31] netlink_unicast+0x82c/0x9e0 [ 1559.318027][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1559.323987][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1559.328951][ T31] ? skb_put+0x11b/0x210 [ 1559.333869][ T31] netlink_sendmsg+0x805/0xb30 [ 1559.338675][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.344777][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1559.349743][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1559.355602][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.361546][ T31] __sock_sendmsg+0x219/0x270 [ 1559.366267][ T31] ____sys_sendmsg+0x505/0x830 [ 1559.371674][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1559.377002][ T31] ? import_iovec+0x74/0xa0 [ 1559.382255][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1559.386966][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.392762][ T31] ? __fget_files+0x2a/0x420 [ 1559.397382][ T31] ? __fget_files+0x3a0/0x420 [ 1559.402743][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1559.407722][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1559.413846][ T31] ? rcu_is_watching+0x15/0xb0 [ 1559.418642][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1559.424023][ T31] do_syscall_64+0xfa/0x3b0 [ 1559.428551][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1559.434418][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.440529][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1559.445883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.453387][ T31] RIP: 0033:0x7f7b9b58eba9 [ 1559.457834][ T31] RSP: 002b:00007f7b9c480038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.466485][ T31] RAX: ffffffffffffffda RBX: 00007f7b9b7d5fa0 RCX: 00007f7b9b58eba9 [ 1559.474554][ T31] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 1559.483228][ T31] RBP: 00007f7b9b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1559.491901][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.499907][ T31] R13: 00007f7b9b7d6038 R14: 00007f7b9b7d5fa0 R15: 00007ffe56ed1d78 [ 1559.508760][ T31] [ 1559.512375][ T31] INFO: task syz.2.7170:338 blocked for more than 145 seconds. [ 1559.520025][ T31] Not tainted syzkaller #0 [ 1559.525719][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1559.535329][ T31] task:syz.2.7170 state:D stack:25896 pid:338 tgid:336 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 1559.547949][ T31] Call Trace: [ 1559.551824][ T31] [ 1559.554785][ T31] __schedule+0x1798/0x4cc0 [ 1559.559339][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.564889][ T31] ? __pfx___schedule+0x10/0x10 [ 1559.569790][ T31] ? schedule+0x91/0x360 [ 1559.574641][ T31] schedule+0x165/0x360 [ 1559.578825][ T31] schedule_preempt_disabled+0x13/0x30 [ 1559.584961][ T31] __mutex_lock+0x7e6/0x1350 [ 1559.590023][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1559.595373][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1559.600083][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1559.605844][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1559.611612][ T31] ? radix_tree_lookup+0x240/0x290 [ 1559.616775][ T31] genl_rcv_msg+0x10d/0x790 [ 1559.622041][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1559.627113][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1559.632727][ T31] ? __asan_memcpy+0x40/0x70 [ 1559.637343][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1559.643427][ T31] netlink_rcv_skb+0x205/0x470 [ 1559.648346][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.653831][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1559.658889][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1559.664879][ T31] ? down_read+0x1ad/0x2e0 [ 1559.669368][ T31] genl_rcv+0x28/0x40 [ 1559.673968][ T31] netlink_unicast+0x82c/0x9e0 [ 1559.678775][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1559.684743][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1559.689703][ T31] ? skb_put+0x11b/0x210 [ 1559.694714][ T31] netlink_sendmsg+0x805/0xb30 [ 1559.699604][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.705572][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1559.710547][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1559.716468][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.722422][ T31] __sock_sendmsg+0x219/0x270 [ 1559.727138][ T31] __sys_sendto+0x3bd/0x520 [ 1559.732271][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1559.737340][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1559.743097][ T31] ? exc_page_fault+0x76/0xf0 [ 1559.747811][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1559.753282][ T31] __x64_sys_sendto+0xde/0x100 [ 1559.758082][ T31] do_syscall_64+0xfa/0x3b0 [ 1559.762786][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1559.768009][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.774764][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1559.779468][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.786603][ T31] RIP: 0033:0x7f47c1990a3c [ 1559.791567][ T31] RSP: 002b:00007f47c2744ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1559.800009][ T31] RAX: ffffffffffffffda RBX: 00007f47c2744fc0 RCX: 00007f47c1990a3c [ 1559.808653][ T31] RDX: 0000000000000020 RSI: 00007f47c2745010 RDI: 0000000000000007 [ 1559.817289][ T31] RBP: 0000000000000000 R08: 00007f47c2744f14 R09: 000000000000000c [ 1559.826076][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 1559.834684][ T31] R13: 00007f47c2744f68 R14: 00007f47c2745010 R15: 0000000000000000 [ 1559.843354][ T31] [ 1559.846420][ T31] INFO: task syz.2.7170:341 blocked for more than 145 seconds. [ 1559.855567][ T31] Not tainted syzkaller #0 [ 1559.860529][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1559.869871][ T31] task:syz.2.7170 state:D stack:28064 pid:341 tgid:336 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 1559.882512][ T31] Call Trace: [ 1559.885807][ T31] [ 1559.888743][ T31] __schedule+0x1798/0x4cc0 [ 1559.893949][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.898834][ T31] ? __pfx___schedule+0x10/0x10 [ 1559.904361][ T31] ? schedule+0x91/0x360 [ 1559.908635][ T31] schedule+0x165/0x360 [ 1559.913353][ T31] schedule_preempt_disabled+0x13/0x30 [ 1559.918837][ T31] __mutex_lock+0x7e6/0x1350 [ 1559.924140][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1559.928943][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1559.934375][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1559.939510][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1559.945344][ T31] ? radix_tree_lookup+0x240/0x290 [ 1559.950496][ T31] genl_rcv_msg+0x10d/0x790 [ 1559.955596][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1559.960653][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1559.966336][ T31] ? __asan_memcpy+0x40/0x70 [ 1559.971617][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1559.977030][ T31] netlink_rcv_skb+0x205/0x470 [ 1559.982489][ T31] ? __lock_acquire+0xab9/0xd20 [ 1559.987398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1559.993044][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1559.998400][ T31] ? down_read+0x1ad/0x2e0 [ 1560.003585][ T31] genl_rcv+0x28/0x40 [ 1560.007600][ T31] netlink_unicast+0x82c/0x9e0 [ 1560.013436][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1560.018788][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1560.024428][ T31] ? skb_put+0x11b/0x210 [ 1560.028804][ T31] netlink_sendmsg+0x805/0xb30 [ 1560.034293][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.039626][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1560.045032][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1560.050438][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.055884][ T31] __sock_sendmsg+0x219/0x270 [ 1560.060894][ T31] __sys_sendto+0x3bd/0x520 [ 1560.065444][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1560.070534][ T31] ? fd_install+0x97/0x540 [ 1560.075529][ T31] ? fd_install+0x30d/0x540 [ 1560.080077][ T31] __x64_sys_sendto+0xde/0x100 [ 1560.085554][ T31] do_syscall_64+0xfa/0x3b0 [ 1560.090113][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.096264][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.103098][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1560.107815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.114458][ T31] RIP: 0033:0x7f47c1990a3c [ 1560.118905][ T31] RSP: 002b:00007f47bfbf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1560.128042][ T31] RAX: ffffffffffffffda RBX: 00007f47bfbf4fc0 RCX: 00007f47c1990a3c [ 1560.136703][ T31] RDX: 000000000000001c RSI: 00007f47bfbf5010 RDI: 000000000000000d [ 1560.145494][ T31] RBP: 0000000000000000 R08: 00007f47bfbf4f14 R09: 000000000000000c [ 1560.154187][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 1560.163027][ T31] R13: 00007f47bfbf4f68 R14: 00007f47bfbf5010 R15: 0000000000000000 [ 1560.171836][ T31] [ 1560.174905][ T31] INFO: task syz-executor:337 blocked for more than 145 seconds. [ 1560.183599][ T31] Not tainted syzkaller #0 [ 1560.188589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1560.197884][ T31] task:syz-executor state:D stack:22488 pid:337 tgid:337 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1560.210678][ T31] Call Trace: [ 1560.214636][ T31] [ 1560.217591][ T31] __schedule+0x1798/0x4cc0 [ 1560.222823][ T31] ? __lock_acquire+0xab9/0xd20 [ 1560.227718][ T31] ? __lock_acquire+0xab9/0xd20 [ 1560.233220][ T31] ? __pfx___schedule+0x10/0x10 [ 1560.238112][ T31] ? schedule+0x91/0x360 [ 1560.243349][ T31] schedule+0x165/0x360 [ 1560.247555][ T31] schedule_preempt_disabled+0x13/0x30 [ 1560.253711][ T31] __mutex_lock+0x7e6/0x1350 [ 1560.258382][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1560.263906][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1560.268627][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1560.274271][ T31] ? stack_trace_save+0x9c/0xe0 [ 1560.279152][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1560.285232][ T31] ? radix_tree_lookup+0x240/0x290 [ 1560.290384][ T31] genl_rcv_msg+0x10d/0x790 [ 1560.295581][ T31] ? __lock_acquire+0xab9/0xd20 [ 1560.300462][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1560.306243][ T31] netlink_rcv_skb+0x205/0x470 [ 1560.311561][ T31] ? __lock_acquire+0xab9/0xd20 [ 1560.316484][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1560.322183][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1560.327523][ T31] ? down_read+0x1ad/0x2e0 [ 1560.332426][ T31] genl_rcv+0x28/0x40 [ 1560.336697][ T31] netlink_unicast+0x82c/0x9e0 [ 1560.341659][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1560.347070][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1560.352100][ T31] ? skb_put+0x11b/0x210 [ 1560.356372][ T31] netlink_sendmsg+0x805/0xb30 [ 1560.361805][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.367129][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1560.372805][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1560.378117][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.384266][ T31] __sock_sendmsg+0x219/0x270 [ 1560.388984][ T31] __sys_sendto+0x3bd/0x520 [ 1560.394260][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1560.399432][ T31] ? fd_install+0x97/0x540 [ 1560.404530][ T31] ? fd_install+0x30d/0x540 [ 1560.409076][ T31] __x64_sys_sendto+0xde/0x100 [ 1560.414646][ T31] do_syscall_64+0xfa/0x3b0 [ 1560.419195][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1560.425092][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.431710][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1560.436419][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.443056][ T31] RIP: 0033:0x7fdee0190a3c [ 1560.447499][ T31] RSP: 002b:00007ffd106e19e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1560.456622][ T31] RAX: ffffffffffffffda RBX: 00007fdee0f04620 RCX: 00007fdee0190a3c [ 1560.465210][ T31] RDX: 0000000000000020 RSI: 00007fdee0f04670 RDI: 0000000000000005 [ 1560.473712][ T31] RBP: 0000000000000000 R08: 00007ffd106e1a34 R09: 000000000000000c [ 1560.482433][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 1560.490431][ T31] R13: 00007ffd106e1a88 R14: 00007fdee0f04670 R15: 0000000000000000 [ 1560.500097][ T31] [ 1560.503871][ T31] [ 1560.503871][ T31] Showing all locks held in the system: [ 1560.512228][ T31] 1 lock held by khungtaskd/31: [ 1560.517092][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1560.527726][ T31] 2 locks held by getty/5621: [ 1560.533140][ T31] #0: ffff88814d81c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1560.543614][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1560.554394][ T31] 2 locks held by kworker/u8:11/6064: [ 1560.559800][ T31] 1 lock held by udevd/32397: [ 1560.565124][ T31] #0: ffff888024e7e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1560.575153][ T31] 2 locks held by syz.4.7165/323: [ 1560.580199][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.589072][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.598748][ T31] 2 locks held by syz.4.7165/326: [ 1560.604423][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.613290][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.622669][ T31] 2 locks held by syz.0.7166/319: [ 1560.627709][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.636059][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.645523][ T31] 2 locks held by syz.0.7166/324: [ 1560.650562][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.659402][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.669116][ T31] 6 locks held by syz.1.7167/321: [ 1560.674771][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.683742][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.693371][ T31] #2: ffff888024df7a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 1560.704486][ T31] #3: ffff888024d06928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 1560.714510][ T31] #4: ffff888024d062c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 1560.727407][ T31] #5: ffff888024d06300 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 1560.742068][ T31] 2 locks held by syz.2.7170/338: [ 1560.747217][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.756112][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.765790][ T31] 2 locks held by syz.2.7170/341: [ 1560.771477][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.779713][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.789415][ T31] 2 locks held by syz-executor/337: [ 1560.795144][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.804093][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.813924][ T31] 2 locks held by syz-executor/352: [ 1560.819139][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.828012][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.837586][ T31] 2 locks held by syz-executor/354: [ 1560.843500][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.852401][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.862112][ T31] 2 locks held by syz-executor/356: [ 1560.867344][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.876129][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.886011][ T31] 2 locks held by syz-executor/359: [ 1560.892018][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.900256][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.910062][ T31] 2 locks held by syz-executor/386: [ 1560.915796][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.924506][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.933774][ T31] 2 locks held by syz-executor/395: [ 1560.938986][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.947642][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.957271][ T31] 2 locks held by syz-executor/400: [ 1560.963197][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.972349][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1560.982003][ T31] 2 locks held by syz-executor/402: [ 1560.987221][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1560.996069][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.005723][ T31] 2 locks held by syz-executor/406: [ 1561.011573][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.019842][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.029601][ T31] 2 locks held by syz-executor/433: [ 1561.035550][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.044453][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.054256][ T31] 2 locks held by syz-executor/445: [ 1561.059476][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.068358][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.078110][ T31] 2 locks held by syz-executor/447: [ 1561.083974][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.092781][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.102538][ T31] 2 locks held by syz-executor/450: [ 1561.107773][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.116667][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.126712][ T31] 2 locks held by syz-executor/452: [ 1561.132627][ T31] #0: ffffffff8f59eb90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.141669][ T31] #1: ffffffff8f59e9a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1561.151264][ T31] [ 1561.153614][ T31] ============================================= [ 1561.153614][ T31] [ 1561.162989][ T31] NMI backtrace for cpu 1 [ 1561.163007][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1561.163028][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1561.163040][ T31] Call Trace: [ 1561.163049][ T31] [ 1561.163058][ T31] dump_stack_lvl+0x189/0x250 [ 1561.163089][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.163114][ T31] ? __pfx__printk+0x10/0x10 [ 1561.163155][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1561.163182][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1561.163207][ T31] ? __pfx__printk+0x10/0x10 [ 1561.163238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1561.163270][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1561.163302][ T31] watchdog+0xf93/0xfe0 [ 1561.163336][ T31] ? watchdog+0x1de/0xfe0 [ 1561.163369][ T31] kthread+0x70e/0x8a0 [ 1561.163397][ T31] ? __pfx_watchdog+0x10/0x10 [ 1561.163434][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.163461][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.163479][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1561.163498][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.163523][ T31] ret_from_fork+0x3fc/0x770 [ 1561.163546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.163573][ T31] ? __switch_to_asm+0x39/0x70 [ 1561.163596][ T31] ? __switch_to_asm+0x33/0x70 [ 1561.163618][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.163643][ T31] ret_from_fork_asm+0x1a/0x30 [ 1561.163685][ T31] [ 1561.163693][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1561.315912][ C0] NMI backtrace for cpu 0 [ 1561.315933][ C0] CPU: 0 UID: 0 PID: 6068 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1561.315952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1561.315962][ C0] Workqueue: bat_events batadv_nc_worker [ 1561.315989][ C0] RIP: 0010:__lock_acquire+0x252/0xd20 [ 1561.316014][ C0] Code: e9 78 0a 00 00 48 c7 c7 90 ae 00 8e 49 89 f7 4c 89 ee e8 01 0f 62 03 4c 89 fe 48 8b 3c 24 48 83 7c 24 68 00 0f 85 d5 fe ff ff <44> 8b 84 24 80 00 00 00 4c 8b 4c 24 70 4c 8d bf f0 0a 00 00 41 83 [ 1561.316027][ C0] RSP: 0018:ffffc9000ae678f0 EFLAGS: 00000046 [ 1561.316041][ C0] RAX: 00000000000000af RBX: ffffffff8e139f20 RCX: ffffffff93496310 [ 1561.316052][ C0] RDX: 0000000000000002 RSI: 0000000000000007 RDI: ffff88807b5fbc00 [ 1561.316062][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1561.316071][ C0] R10: dffffc0000000000 R11: ffffffff8b4817f0 R12: 0000000000000002 [ 1561.316082][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1561.316092][ C0] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 1561.316105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1561.316116][ C0] CR2: 000055584b0befb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1561.316132][ C0] Call Trace: [ 1561.316149][ C0] [ 1561.316160][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1561.316180][ C0] lock_acquire+0x120/0x360 [ 1561.316200][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1561.316224][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1561.316244][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1561.316264][ C0] batadv_nc_worker+0xef/0x610 [ 1561.316283][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1561.316304][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1561.316321][ C0] process_scheduled_works+0xae1/0x17b0 [ 1561.316346][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1561.316368][ C0] worker_thread+0x8a0/0xda0 [ 1561.316392][ C0] kthread+0x70e/0x8a0 [ 1561.316411][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1561.316425][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.316444][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.316458][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1561.316473][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.316490][ C0] ret_from_fork+0x3fc/0x770 [ 1561.316508][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.316525][ C0] ? __switch_to_asm+0x39/0x70 [ 1561.316543][ C0] ? __switch_to_asm+0x33/0x70 [ 1561.316561][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.316578][ C0] ret_from_fork_asm+0x1a/0x30 [ 1561.316602][ C0] [ 1561.317016][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1561.570988][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1561.580114][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1561.590178][ T31] Call Trace: [ 1561.593480][ T31] [ 1561.596410][ T31] dump_stack_lvl+0x99/0x250 [ 1561.601014][ T31] ? __asan_memcpy+0x40/0x70 [ 1561.605609][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.610807][ T31] ? __pfx__printk+0x10/0x10 [ 1561.615414][ T31] vpanic+0x281/0x750 [ 1561.619495][ T31] ? __pfx_vpanic+0x10/0x10 [ 1561.624006][ T31] ? preempt_schedule+0xae/0xc0 [ 1561.628862][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1561.634324][ T31] panic+0xb9/0xc0 [ 1561.638047][ T31] ? __pfx_panic+0x10/0x10 [ 1561.642463][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1561.647837][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1561.654003][ T31] watchdog+0xfd2/0xfe0 [ 1561.658171][ T31] ? watchdog+0x1de/0xfe0 [ 1561.662514][ T31] kthread+0x70e/0x8a0 [ 1561.666598][ T31] ? __pfx_watchdog+0x10/0x10 [ 1561.671279][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.675875][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.681071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1561.686271][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.690864][ T31] ret_from_fork+0x3fc/0x770 [ 1561.695453][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.700568][ T31] ? __switch_to_asm+0x39/0x70 [ 1561.705339][ T31] ? __switch_to_asm+0x33/0x70 [ 1561.710107][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.714701][ T31] ret_from_fork_asm+0x1a/0x30 [ 1561.719484][ T31] [ 1561.722778][ T31] Kernel Offset: disabled [ 1561.727099][ T31] Rebooting in 86400 seconds..