last executing test programs: 22.590057841s ago: executing program 2 (id=3387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.479417844s ago: executing program 2 (id=3390): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000d80)={&(0x7f0000000940)=@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000009c0)="a9", 0x1}], 0x1}, 0x4001) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) 22.344677927s ago: executing program 2 (id=3392): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x0, r1}, 0x10) 22.212224394s ago: executing program 2 (id=3394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) 21.958136418s ago: executing program 2 (id=3399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 21.790251412s ago: executing program 2 (id=3402): socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) close(r0) 20.194397626s ago: executing program 0 (id=3421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYRES32=r1], 0x30}}, 0x0) 19.968175291s ago: executing program 0 (id=3423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) syz_emit_ethernet(0xe2, &(0x7f0000000240)={@empty, @random="4b95ec8377bc", @void, {@generic={0x16, "4c960cdca742275574d91328e0cdd11feabad56493afebf10b309640642fbdb726d0d0a762d05a990e3b1ab26b1ae4227dddbc319e047cdf26362c02781fdad5d2b12ef09d64f635e1b10976cb865a6be5c06ad7e983f26b3831ff751b7cef662a9ae0ca7dab7d4c4941552700af82d1008957d0430ce5b1f5c6d2aa4eaa2921aa73ed5298b574b9780d8bf3ad89e7d7142fcaacd7cede68c88b635160a3f28487a655cedfd555cacb8134557da2220796574167a21e441da62ceb5130245d852c302f067aa291dfb62aa02372aa417b6d40e394"}}}, &(0x7f00000000c0)={0x0, 0x3, [0x6f2, 0xc49, 0xa5, 0xc6e]}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRES64=r2, @ANYRESHEX=r2], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000340)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x6, 0xffff, 0x1, 0x7f, "a06202d7faa97b49e67f6c421903f9f097b282a411a2bcf9ae6a622a27d1659ea2d26e090d9d4b55ceedb2745909fbb4c7caa6d02d2ee585e4b72f719a222a41e672a4f7e4a5c445380f02e2623997e15376037886759715b25c8f77963fc9e0d365489f3a1eca24015d88d71bf383e868e09d6b25ed322d8e904f3590ce782b"}) 19.873964909s ago: executing program 3 (id=3425): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaa388e864970f1"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @local}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 19.730198954s ago: executing program 0 (id=3426): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000001000002306000000"], 0x14}], 0x1}, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f0000811000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000001000002306000000"], 0x14}], 0x1}, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) (async) mmap(&(0x7f0000811000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) (async) 19.729599817s ago: executing program 1 (id=3427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="80080000170a0102000000000000000005000001540003800800024000000007080002400000000408000240000000091800038014000100766c616e30000000000000000000000008000140000000000800024000008004080002400000000208000240000000030900020073797a32000000000900020073797a3100000000"], 0x80}, 0x1, 0x0, 0x0, 0x4400}, 0x8815) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac141400000000000000000003000600000000000a"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 19.666235091s ago: executing program 0 (id=3428): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (rerun: 32) r3 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003d00)=@newtfilter={0x3660, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x19}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @random="eb6807268b8a"}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0x0, 0x0, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xffff}}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x348}, @TCA_RATE={0x6, 0x5, {0x9, 0xa7}}, @filter_kind_options=@f_u32={{0x8}, {0x35bc, 0x2, [@TCA_U32_ACT={0x35b0, 0x7, [@m_skbmod={0x1060, 0x5, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x22, 0x10000000, 0x800, 0xc}}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x1030, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x1004, 0x6, "e790637d2e7e97e7cb52385f60d571779b8df6866525ea8bafee85e922e33912a84edf8e0220283f239120d0a970c93cc72e423099f5efc26453aa74301e0e2a2601088e9daca850cf7b7c6241ef104833ae61ffb9972ad50899d6d36482a131fcf95273f1a4c261594741ef2c829558517d40c4fc26eb08a4700924d579a5dfd6cf49f867b628d06ace9d4cb16a3d89a010681a4438f9434b732c20df647a5b4db461fed3fcc457fdb21361de87ade5c485d328babc06d5c73c7192e0f77fd78a2005dac264ed3c97f016b9fad408f1deb7e3bae58f520e2c56f07314bdd671cf905fb6c7aa757b3c20563053083e665c57cd2f4c151611c5fc6bc8cfcd562846e7219b46dc8a18e160fb79eaff5ac40c6b43abedfd8a0cff85a62b6ed44f1695a5e9ebafe20849df0a4c858145d8591a90adbbabd7d3d6e169d5e5b214adf17462b87aed8482819264046b6b78016e3b132c535b9d51ab071278ca6ed6a8b658665fcaf0f5966be2d8117f645dbbc506daacc8c7d64c39fb9d068ddb521a3532921a2b1dde111d2ae69571f04cd99db2a1064e9a8379ace78b7d1bb9e6fd7d11b761fd868d13dd73a7071c2d6f943031ac2faa3a7c307b1de91e09889db79968262f48c1e6c04a42686cc8b86c423c5ff2d4a9cfea34ac39c198b109f562863a43b3d4c6a6c88c45f9442f0c9243427ab1308b1044527728a12e551d6a952c22bae3e79814e96948fae43d516a3e2afee0bb7cdc35e63f89b30ff0acb55e83bc312d980d4c3c880fb4863410291872eb390e68840051d09a018def253e0f132503401c352b66de6d9ad99c5cd428d939ccb466fe2762a9d1a6b6b50611b2e8ff9f915ad1f2851cfe4071d99fdf4d43444fecc4efda80455a67c233639e6f6413e669aee9f01570ca1c6eb0fea58ee26375c2b4210ca07571d45ac68ffe77009fbb2fa3fb42d4492764edbf0aca2f312b72b61b94b1621b77497a6c9ecea1912a831f204ffcdd8ac25fd94b8c1ef50816a8ea2c6facee64bb4b8c42425e4b180ba8ea3c5ff8bb9f7ad70d4a1b477f0396a25df80cc0ea14ff711a249387ed90f6dbb00388d49b502a3c020cddca4f5ab2f5e39ea49ee9b0a6ba8cc535d141c94a03ba7ee0ca727d30a06d09c4b5a63c3ba0ec1328605b69de00279af2e69be7024af0d513f97c8ef1f032e0f764a46c6af2338d314b3d2bdbd863a86ab3fd6ec15b67fb4389404409cc20a1b561d5be53424a7f575bff85a2a46cdfadeff6e3e82e3b9ca6f8246050a7ec44783bf78af4c1a21486bcc6f6daa00120c5ab9703441cefb038a38d33da753fc63f916db313cb0f8b414ceedb5ba02e5c95b38088978b3ca7102a1c44f488c8dfc95994a76bd74ce7f79c36d928c9ecb49da753279b31d4070a80ca194a51bd7c8f1bfcfeb912f784c0d9a4a22af8f2c63119c490bbf8a0e4851f9e5dbc078e479427b71e3c2586ea80b950b93949458aa99564b880e13ea58464e92c1912824531780ea1bb1fad8a681476ab3fc85177ff263ce07fee74b2b9f0eda063232f342c3529159932d600196671a52f20464f4a8d91c7274edacba11bb48526c016b513a8ddfb4e7dd7443129c9c9f818bdcc5613e492f081db58cc94e30f3928d97c08c561e21cf796bf9df8c9be61dd961282884f1c8d34ddd740ed9b3491b33d5ef4ed85d0cff983eed79b4c5fd9912b46d7f27a6c52a525e17dc769ec1ccc79ce3be3f7c5d7844f2c82917077acb6bc2c7e39bea88ed48535d70d0c01f5967aeb5a2c89b79c5ee5f613abf63beda5174d7b061c9bbae9b6f2c79422cc0717b8fd91604af00372133496e83b15a636732c1635b9e1a25c46d5e75e4313181294d2a89f9d7b606b0dad5173c8a477a555c5a37d911949a65c0c8223b3f1834c136dbf7e2ad383dde78073a305ec127d47c2bb1ac620f049365fd5b5b69ce1322d231a9ae843bd0bec7e6a8bcc5a3fb2854c86547228fe09fbb70ea3a6f96966228182fd4f1f32dc9403b927fdc20f61c3cc63a3ad632d0dcca9b91a86baae93be8d7627f5ba0fc1c10e227d19770cf45ca711f15c472c37f4c67817e0562cfa32e1a7adb1ceaf9c257d3c7c4c0c9188ab26bd32c6dff31221f625a6f1c11e99fb356775c3b26931e90cf29e03e6a1f6b73f97f12fced38c0e1e99a1ded0b12d6b57dee9b93066c974f73eb6707e6c35734db012e9e27c4019245eb22d309e6f163d86abdd24b8ee443d711d376cdd04c73279fcc639ac3572182e1c8c13f53522e4e19f7b4a2c402b1ce527c6dee975134486840fe5cb23c26ca01101c1f3a0c5dbea723803457734b618266eefe627bcd7b87e526925fbb070e353b7e56dc2f7b7c495f52d47ac9364cc844fe6c2bbdd21a8beddcf0ea78f4ef4a6c860e53f95f0018cb84796030ee60f2bbfb6dbf5e2091b08ef1c08e98d632ad7033f3723aa6f4fefedabc5037b26ef41e1d86fe9c789f48c3fa14f8bf5f212208c86346b05b4ec1f14e3d78ad2bfefee64529fb4ab7ebeb79251e647082af98ed3959ade55ab2d1dc2ffc7567be6b9e600b861dc73434959560cd58caaf2bfa8a28c4ae503af31a7d7c066cc6c9bb5ce2ad9e65a9b947744536bf93e231c4b7e1e2c0357f0215f02b36397922b86c324577ab90d829eebfd3a3634e232f3b008f3cdf6a173a4a5d0751257df575854dc26a8f867cddc11a454da5f8c4c1b155c3986027af9657656fab3d433a901e4abf82f8ac2879b3455af3fd4a4b816878076d232d5289da0d29160adf52802f1f993dade2d02500ac8aca990cd62e39bc6c8a0e80818fda4034bac27f568f7eff63242f2bc6f31c4c117ebb5c0bb8ac9963a4b3e916a498644ac727de48eae190fe39be7f8376858998341f1a3348bd976a913e55d4222a5b371a112a8552ba81205e08af785679d8a64ee36bc1cf3fe993d2db294bd1bf0fa2705a8fb0ae76f0bb43415f60cc0e2f887cad388c39242a68f4872e18f030a3af7bd9ce24b16ba4e65c023ba9787128fd187efa5b0c527a1f509a824656187a42da1ffa9da71a921865f0269ef23b78fb2f1537003b60b810cc4170fa55387eec80dc9a3cabe384cc8178bc9ad73623d8fa6e9474bd81e70bfee65ada7683ab0a0db80ffc09e3e4e5e5f48461aae21afb75d846f62c913f3bb867aa309edc243cbf221c4847b0a0ab6aec8a5dfd17bf76d71a8d8664b4ba6db9f04e97333c6baef5f984924880e197cfc061cb312086314ba190d328355e170c8db7ce839f511e11a44ff8a44b6982c8408c8665d2b95d0798ba00c8003ab523c033466d5568a3629f2b2e20c35df72ac16791eb2a7309c77909eed1c08fb91e99f1aabf8e0f6db5e55a547b280a6f92ffc1e604dba9c8cde04a50c44a48de4009e7965c5a4d48e98dd6b8b69ab285a57e61c68aebaddb1032ea99b99194cadd145061921cb8e4f19bdc00cb885355bf31fb3a31c98db5ac14becbf153d5779cb6f7bea0d7616a0273814cd0efd75eb78fce74b926575e6d4bdb3f271a7311b5401bbebc07e97c20e3cdcc7b7a53a9bb3ee48801a91171d2b7f6ee099d74390b829c20a562876aa41a451da4af744d666628c84a88975f9c303505fac0885ebafd22eba53e499c4c1b0420f247ce8bc4ef6ddcdf201a2bb71e7a7e3260a7e39148d21c50a617641f86ff498fb7635ee44f972652a976e76ebeaad3caca26f2bb03e81c3a4f753a21a5b1f4c072ceb9779e1d78303926337cc02893120282ab9df8c3e4105012c3e9e865ad1b557a96e6ff724e0035009c3c555fa5f8a03e9550ceca33758a9e1e359fe38900aa4ce80c3c752c7fb19535923a280524e5f157dced5afb6ae568f98f7a497037a64a2179c850603fd9c479d90cce8daf4b0f37f939d6149d2379317e57e98249c922d911ebef0dfa24f3188167f3f92d239b2ffb3c2939b07095a24e6ce4a2c19e5a05a1c81d6356d93b71c9488ef2af8bbb6323b130af4bf58295079c3c4ef9dfa66e434f5ecdcdc039cf74930130b2317386f37f2ffcb9035cd95dc366c22ed30c02d01b96df24102cee8e9d0d540e4a251d5f32d6da62be487ce0e340f364bc61f6c31cdf293cb080b0ebc278ea2a2e99cb472f6c9107914737d7ccc8dcde8b955aec2a8f39c6c9bd1a6ca3f92dad460a9e671a35df9368d8633b5783706946975956c860a56de88455873f8ec55990636b720de724aa7f2f4b1aec9e933d2f5594479ec35fc714ae26d9d9cb1dca70849a2b515ebcca8d22bdf7bfc5852851d0b4a65af051003afe896468f19313ee840ffd724d811ab309f4a46d68cf8170894a61e6666af34e3631c70d38e5f6a705e6bc9976ce4ac8334de55a955fe276ea62f2f235f9c5a353ffe0e2db63696cf16bbe5efe1ac5b73c6ab3325f8cab15eb2eb5d7f721a5ca753f8144a1605fa31c17856c4c4c31bb7ac108c3baa1f372878b8387fb2152fa1de4bd25f94bc3ed0b1cf3e6088457865cdccbffe37b21f8aa5ebaa50c3bc121bcfe56524afb3d867f2693be36dfefde3dcc915bed78d50094eeedfe4098891a504721e63b4e4a9039426d4ed49af4d312b60b49345f381849db099f76176dd0a2ac1b438fa0a5cfcae38d0b82e3bfe9d8981f4f76e66335176b89adaf5ee1cb295f134755be2556f72183709e65db9e59242957e2024d60d6903c729ebd42bfe8ac2ecc728da572d85637ccd1d1406c47c5ac007d709c40c87fbf1d09b6980f320c5ab3e834aaf1aed39cc906c31d4ed4d257ca65152c8c4613479d6cf84fc8dfcdc2b73b7cb04645d65aef11b7a23b6cb3ac75e772feb9a8bddfa2df93157d2d440987c65a2daee5bb4cc4274726e59f1580e974e32b6a5b5e6c42a3d6449155c16fdd20a5bca57fadcddaa1b53f2dfb0ab1bd1479ce49994f423a9d6af00cccbc69aeafebb30a2df421c4c8a356d187312a72e9900aac86fc6f3c68115b8593fe7874236e7dc1e380fa66308db8a5087a68d4105e3c3b1ab71e0c4549ad6cf4353c187d242c7dd37e85cf7d42c7ca3e64a696c7cef4ccb04df9e415fc5e6ff3e063a81d4b92a0dc58ae13a7492c61fb0388bd6fbfbcfb071ff4fb2ca8e5fe93219f771e37f110daf3d11dc9c443bacd39bc104910967bb6552e9d1a070e1bc8493b496d7903b09c4395951e87ab59bd843b2b76bcfd3980a7ccc14a04f5d87d23b0e56bee1a04a0655756611a6b58cb12ae9ee7a8d10811d8ad72bdfcfa8ae570085c5cde501cc609ad6a6d798d70fc1903bf59dbbb97d43585c50c577fa45d8c5f632d641cda611ebb8e86df167addc5701440a36e3a85a17c1ce62b9d64c6346713bead7d15c97ae267b0cfa7a8525ffe6bef555728209e35f6a1f1af65a36eccb3cf5de4ab61be7544ec2527eb39958129815234c16cb17cc668065d2801504ad1e5125f3e1f1d9cce8f1adf61160f29a7f74553ec7bd5e8243b0519df0e1647086e057f77ee942b77deec82ce86b261165d817d088c6491807cbb9f6d09d08111ce7e778dad39c5bcf2f5a5574ff1912d5baae9ea40d8b62452613783f5dc50bdb92c3fc58fb874ae929a713dae29343e55f82ed2846f72611d09299d5515d696d392aa7fdbbea1a445db3bdf5d3d4a6d71796aa6301da71a52ad425d4ecec03f3c0a11f17e3f14977cae82ec6809f236d62c2dc59840c18b21ac4c43cee75d367e7e5243f5c275a3541d012c8a472ddc06da07c86425cd963e0550fd79b22d1f01abfad6c5fe78d7bbd11faa70552be12d9da77dfaa3e902bfec31e49793343"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x38, 0x20, 0x0, 0x0, {{0xa}, {0x4}, {0xa, 0x6, "0c18c5986f3c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0xff0, 0x18, 0x0, 0x0, {{0xa}, {0xf64, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x9, 0x65b2, 0x1, 0x246, 0x3}, 0x4, 0xff, [{0x2, 0x6, 0x5, 0xbe, 0x81, 0x4601}, {0xc548a8a, 0x0, 0x4, 0x7fff, 0xfa70, 0x7}, {0x3, 0x7, 0x1, 0x7, 0x8, 0x1}, {0x10000, 0x5, 0xe, 0x3, 0x7fffffff, 0x3ff}, {0x6, 0x73, 0x5ad7, 0x401, 0x9, 0x8}, {0x4, 0x4, 0x0, 0x3ff, 0x40, 0x47851432}]}, [{0xffffffff, 0x5, 0x8, 0xffff8001, 0x6, 0x5}, {0x37cf, 0x7fff, 0x133, 0x40, 0xf44, 0x1000}, {0x2e2, 0x8, 0x24, 0xffffffff, 0x800}, {0xf, 0x718, 0x2a5b, 0x1, 0xf0f, 0x3c8}, {0xa, 0xfff, 0x6, 0x401, 0x2, 0xe5a2}, {0x7, 0x0, 0x7, 0x6, 0x800, 0xfffff0c0}, {0x4, 0x5, 0xee, 0xf, 0x2, 0x4}, {0x601f, 0x3, 0x3, 0x7, 0x0, 0x5}, {0xfe, 0xfffffffa, 0xffffffff, 0x31d, 0x8, 0xfffffff8}, {0x41, 0x400, 0x3800, 0x8, 0x7, 0xf9c}, {0x40, 0x0, 0x4, 0x1, 0x1, 0xf}, {0x2, 0x7fff, 0x7, 0x10000, 0x1e6, 0x9}, {0x6, 0x1, 0x5, 0x3, 0x8001, 0x8000}, {0x1ff, 0x3, 0xb, 0xeee1, 0x9, 0x2}, {0xffffffff, 0x9, 0x8, 0x5ae, 0x155, 0x5}, {0x0, 0x6, 0x8000, 0x1, 0x0, 0x424}, {0x8, 0x0, 0x838, 0x1, 0xfffff801, 0xa}, {0x3, 0x80000000, 0x9901, 0x3, 0x5, 0x1}, {0x3, 0xffff, 0x9, 0x101, 0x3, 0x5}, {0x3, 0xdc, 0x8, 0x5, 0x7, 0x2}, {0x5, 0xf71, 0x5, 0x7f, 0x3, 0x7}, {0x9, 0xa30, 0x190, 0x2, 0xffffff71, 0x4}, {0x7ff, 0x7, 0x2, 0x4, 0x1c39, 0x1}, {0x0, 0x1, 0xd5, 0x9, 0xffffffe2, 0x7}, {0xb, 0xd, 0x1, 0x81, 0x9c5ea200, 0x8}, {0x8, 0x9, 0x1, 0x6, 0x200, 0x8}, {0x7fffffff, 0x2, 0x6, 0x4, 0x8, 0xffffffff}, {0xf9c5, 0x80000001, 0x8, 0x1, 0x9, 0x94c}, {0x5, 0x4, 0x5, 0x9f, 0x0, 0xcd}, {0x0, 0x1, 0x4, 0x42, 0x2, 0x6}, {0x100, 0x1, 0x81, 0xffff, 0x8, 0x9}, {0x80000001, 0x5, 0x5, 0x5, 0x5, 0x2}, {0x8, 0x80000001, 0xff, 0x1, 0x7, 0x2}, {0x8, 0x5, 0x0, 0x8, 0x3, 0xfffffffd}, {0x2, 0x1, 0x80000001, 0x418, 0x5, 0x7}, {0x1, 0x4, 0x3, 0x9, 0x1000, 0x29}, {0x7e4, 0x3, 0xe035, 0x4, 0x8, 0x1}, {0x9, 0x401, 0x9, 0x3, 0x80000001, 0x9}, {0xfffffffd, 0x40, 0x40, 0x61c, 0x4, 0xf}, {0x0, 0x9, 0x55dc7233, 0x101, 0x8, 0x890}, {0x30, 0x8c39, 0x5, 0xc, 0x6}, {0x80000001, 0x81fc, 0x400, 0x0, 0x6c8, 0x9}, {0x0, 0x10001, 0x4, 0x8, 0x5c, 0x9}, {0x10000, 0xff, 0xd4, 0x55e2, 0xfffffff1, 0x4}, {0x0, 0x400, 0x1, 0x9, 0x9, 0x8000}, {0xee2b, 0x459, 0x1ff0, 0x5, 0x62b, 0x5}, {0x1, 0x8, 0x101, 0x4, 0x6, 0x48}, {0x0, 0x2, 0xffff, 0x10000, 0x40, 0xc6a6}, {0x10001, 0xffffffff, 0x9, 0x5, 0x2c2, 0x80000000}, {0x6, 0x1ff, 0x8, 0xf9, 0xa}, {0x8, 0x4, 0x1, 0x7f8a, 0x47a6, 0x80}, {0xfffffffa, 0x5, 0x0, 0x2, 0xffff, 0xbd39}, {0x81, 0x3ff, 0xfffffff7, 0x8, 0x8000, 0x1b1}, {0x0, 0x50, 0xa5, 0x80000000, 0x10000, 0x8}, {0x0, 0xffff, 0x6ba, 0x2000, 0x7ff, 0x80000000}, {0x1, 0xffff8001, 0x4, 0x7, 0x7fffffff, 0x4}, {0x4, 0xfffffffa, 0xf5f2, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xa9ff, 0xa, 0xff, 0xff}, {0x7, 0x658, 0x80000000, 0x3e6, 0x9, 0x8}, {0x6, 0x7fffffff, 0xffffffff, 0x7f, 0x4, 0x2}, {0x1, 0x6, 0x7f58, 0x3, 0x2, 0xa2}, {0x9, 0x2, 0x80, 0xff, 0xcec, 0x80000000}, {0xc, 0xfffffffe, 0x5, 0x7, 0x8, 0x2}, {0x3, 0x1, 0x3, 0x7fff, 0x6d3, 0x1}, {0x2, 0x4, 0x0, 0x3, 0x3854, 0x4}, {0x8, 0x7ff, 0x0, 0x8, 0x1, 0x80000001}, {0x4, 0xffff8001, 0x6629, 0x1, 0x8, 0x8}, {0x7, 0x7ff, 0x2, 0xa1, 0x6, 0x6cef}, {0x40, 0x8, 0x6e8, 0x7, 0x7, 0x3}, {0xff, 0x8, 0x0, 0x2, 0x8, 0x7fffffff}, {0xd, 0x4, 0x4f, 0x1, 0x480000, 0x3}, {0x7fffffff, 0x7ff, 0x9, 0x8, 0x2, 0x7}, {0x9, 0x8cde, 0x25d9, 0x1, 0x1, 0x19}, {0x5, 0x7f, 0x3, 0xd8ef, 0x10001, 0x8}, {0x3, 0x8, 0xbad, 0x25, 0x5, 0x6a}, {0x9, 0x0, 0x62f78e49, 0x6, 0x6, 0xff85}, {0xfffffff9, 0x7, 0x101, 0x0, 0x9, 0x8}, {0xc50, 0x0, 0x7, 0x4, 0x1, 0x7}, {0xfffffff4, 0xfffffff6, 0x80000000, 0x6, 0x10001, 0x7}, {0x0, 0x0, 0x8, 0x7, 0x9, 0xffff}, {0xeb67, 0x3, 0x5, 0x400, 0x246, 0xfffffffa}, {0x4, 0x8, 0xf, 0xffffff4c, 0x2, 0x401}, {0x3, 0x10000, 0x0, 0x4, 0xfffffffd, 0x100}, {0x5, 0x3, 0xa, 0x400, 0x7ff}, {0x3ff, 0x2, 0xf, 0x89, 0x8, 0x7f}, {0x7, 0x1, 0x9, 0x0, 0x101, 0x40}, {0x9, 0xe8, 0x0, 0x857, 0x2, 0xcc}, {0x10, 0x4ce, 0x9, 0x1ff, 0x6, 0xfffffff7}, {0x8000, 0x9, 0x1, 0xfffffff9, 0x5, 0x10000}, {0x1, 0x0, 0x598, 0x4, 0xc9f7, 0x5}, {0x1000, 0x6, 0x7fffffff, 0x7fffffff, 0x401, 0x6}, {0xd670, 0x4, 0xfffffffe, 0x2, 0x5640, 0xe32c91ac}, {0xfffffff9, 0x3, 0x4, 0x9, 0x7fff, 0xcd}, {0xfffffff8, 0x10, 0x7, 0x9, 0x7, 0x7}, {0xfffffffc, 0x8, 0x5, 0x63, 0x40, 0x2}, {0x6, 0x6753, 0x4, 0x2, 0x3, 0x4}, {0x3, 0x10000, 0x2, 0x4000000, 0x780000, 0xffff}, {0x7fffffff, 0xff, 0x8, 0xa5, 0xfce, 0xf47}, {0xc5e8, 0x9, 0x4, 0x5, 0xfa, 0x1}, {0x6b2a, 0x5, 0x2, 0x4, 0xc, 0x8000}, {0xe, 0xe0, 0x5, 0x0, 0x5, 0x8}, {0xa92b, 0x8, 0x9, 0x1851, 0x2, 0xf}, {0x3b8, 0x9, 0x8, 0x75, 0x0, 0x5}, {0x14bb01ab, 0x7, 0x6, 0xca, 0x6, 0x1000}, {0xbf, 0x2, 0xe, 0x3, 0x7fffffff}, {0x8bc4, 0xeb22, 0x3, 0xa, 0x5, 0x9}, {0x0, 0x1, 0x40, 0x4b8, 0x7, 0x40}, {0x10001, 0x8001, 0x6, 0x80, 0xc69, 0x2}, {0x7, 0x9, 0x4, 0x7, 0x5, 0x800}, {0x3, 0x1, 0x100, 0x5, 0x10, 0x8}, {0x8, 0xfffff666, 0x4, 0x5, 0x5, 0xe1}, {0xf7, 0xfffffff7, 0x3, 0x0, 0xfaa, 0x2}, {0xf64, 0x5, 0x1, 0x7, 0x4e5df316, 0x4}, {0x6, 0x6, 0x5, 0x2, 0x10e, 0x3}, {0xabd, 0xc3, 0x6, 0x2, 0x0, 0x2}, {0xffff, 0xe6f, 0x80, 0x9, 0x6, 0x6}, {0x7, 0x7ff, 0x800, 0xdce8, 0x7970, 0x40}, {0xf4, 0x5, 0x6, 0x1, 0x8, 0x4}, {0x5, 0x6, 0x8, 0x1, 0x3, 0xffffffc0}, {0x9, 0x8001, 0x9, 0xfffffffd, 0x400, 0xe}, {0x1, 0x6, 0x6, 0x4, 0xfffffff8}, {0x8, 0x4, 0x0, 0x0, 0x2, 0x10000}, {0x9, 0x2, 0x9, 0xffffff7f, 0x30b, 0x2}, {0xd2f, 0x2, 0x7, 0x9, 0x7, 0x8000}, {0x0, 0xffd, 0x10, 0x2, 0x40, 0x5}, {0x6, 0xc5, 0x2, 0x0, 0xfff}, {0x2, 0x3, 0x400, 0x1, 0x1, 0x2}, {0x9ee, 0x1, 0x7fff, 0x101, 0x7, 0x2}], [{0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x2a6afa4bcb5edb17}, {0x1, 0x1}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4}, {0x3}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {}, {}, {0x2796a6bc157eb35f}, {0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x3d05d86505a79746}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {}, {0x3}, {0x2}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1}, {0x5}, {0x3}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x61, 0x6, "f2f1f7e8ff94bee1ec4ad0d8d805e52fc43c6098325976afdb0ee67dd0636097788e786d1d0c56d77f6cb716c8d31b28a6297e1201c30b91bbb58d6596823b3093ad8f6fd8634683fe9b39b58ea58cf924f2dc7eabd4585ca518de537e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x20c, 0x3, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf4, 0x6, {0xfff7, 'security\x00', 0xfd, 0x3, "b05d41203bdc272af58f598d43ca83be54b14de820f69e44b4c55f2c066026dad142110963e02a648ff91dc243848851134773e1d1002e47a22f973fbbd16a6a46c3354dcffeb01b393998502a2564a8b9f34ae8b281681dd8cc49c223313cc21e9ec0da676deb007a7d0bf64962b22875e9b9debb849405861e197d6e9287fe8de1ee7d1707b8dada6fde54f4a4ffd25d301520769f3d49f77979e325051a4374449870cfb1fe4f93f11015ab7d310cf4fc2cd7223ed3752a3b934789e1a11e89f4823237152684aa70"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xa3, 0x6, "539ff0c9e292265c8d68845a405bda5e3d7ec3b817ead6f650b177dbe3e45f9268821ffc62e50a6969ffd96636538d56c51e68496e41c8e517eb245079b7624cc3dca423c7d0927f3a3a562904eedd3ca75489d2fa151a8b234e6c3a158e72fd45566edd13019447301c6d9f07d34653084ad8ab2f9d2c1de9e26aeae0dfbc094ec5f7c0e6a470a1b1592c4f8ee9fb4c56ed6be97bab6a8dfea1032bc3b12f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_gact={0x15c, 0x5, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x10000002, 0x907c, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3842, 0x2, 0x6, 0x1, 0xde3f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1450, 0x6}}]}, {0xf1, 0x6, "f6adc266d90e6aab646fec56f6812f1514635c0937ffa2e4a0fcc6acae74c48fc69137880a209bc084753224ce9f3b7dc88f66f9250aa9e4b19137bed3e3234b2d77647b57b659a65d22cdc5e2a4896412adb9d6942d253aab25ee7332f3047c3096f8ee2d46a038f014fdb9f92fbf82a4bc6a9a96e5a3264fcb29906b6a22d4cc02417a36b1679cf176bda77947cccfad9ef753b92c10196a26bd98adca21ab027decccc0f64a05578634b50540e66d9e8418637f0ea2b9d7e456097291f16648009949acd74b44d934a6e60a051bb2c9d77321ec4c48a0261ad92f9b0e3322904472e066ef580f2963887850"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x18c, 0x2, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x7, 0x7, 0x8}, 0xdae3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x80000001, 0x10000000, 0xa9, 0x2}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x2, 0xffffffffffffffff, 0x5, 0xffffffff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x0, 0x6, 0x6}, 0x9}}]}, {0xea, 0x6, "a3c364903d61a7a331a7141db15296d3d98700c3cd0c0c43bc02a70739fc744126591871e4ff079ecf45eccf1419d8523b319024b4f9c126fb0b9e2f668d32f58bc8ffe30d51c96fb1576a3a7dcff3ea76293da1b76ffda42820405db001a6158228cbb058f1cde78b02429b1afefb3090a2c2480d3f77ed876bcd13b5b66e9fa6537642c0aa9e0fd7b3b210b3c39b29bcdea0440ee02ac4c2465a3436b7bbf4abb8e819d5cd13756c4b92eeced85342542c90b258f06c83c76c1950a2814e7e0b286554f9415ee50d26a84d1a990e7d7258dc68e91c6d0550c13ee78bd2b29fa37270dc8a5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x1}}]}}]}, 0x3660}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1}, 0x7}], 0x1, 0x0, 0x0) 19.654530724s ago: executing program 1 (id=3429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000104000000000010feffffffffffffff0400004000000000feffffffffffffff1a00000000000000fffffffffffffffffeffffffffffffff7a0000000000000005000000000000000000000000000000ff7f0000000000000b000000000000000100"], 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 19.450174408s ago: executing program 1 (id=3430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl(r2, 0x8b2c, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) recvmsg$can_bcm(r3, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x41) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) getsockopt$packet_buf(r6, 0x107, 0x15, 0x0, &(0x7f0000001040)) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r7, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x70, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19.261268238s ago: executing program 1 (id=3431): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r14) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r13) sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r16, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) socket$nl_netfilter(0x10, 0x3, 0xc) 19.190787421s ago: executing program 3 (id=3432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}}, 0x0) r2 = socket(0x1e, 0x2, 0x0) accept$nfc_llcp(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19.065341575s ago: executing program 1 (id=3434): r0 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000002, 0x41053, r0, 0xca137000) syz_80211_inject_frame(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x78, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0x8, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x78}}, 0x0) 18.910090381s ago: executing program 3 (id=3436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840), 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000060000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000006e1ff408209f80934c505c4a0dc3006a00000000aa000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000140)=@raw=[@tail_call], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bfa000000000000007000000ee0016055e0301000000000025050000030000006916b80000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x33, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x19}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, @tail_call, @call={0x85, 0x0, 0x0, 0xa7}, @cb_func={0x18, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x6d, &(0x7f0000000600)=""/109, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x9, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r3, 0x1]}, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000380)='jbd2_write_superblock\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000200ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e26, @remote}}, 0x0, 0x0, 0x4e, 0x0, "25366c9c8467783835fb00d492c430c380e2a8b1ce8e820bc98bc75677ccedf1d307f2b62ed8335406ef1f5e68080b2f84c8e86a4487247a35151fbb0a3688cf394bd8d66dfeb454213e2000"}, 0xd8) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r11) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 18.514157247s ago: executing program 0 (id=3439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private2}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x22, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x0, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) 18.371894817s ago: executing program 0 (id=3441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x7}]}, 0x24}}, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='memory.events.local\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002}, 0x0) 18.218187456s ago: executing program 1 (id=3442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000080), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6) recvmsg$can_j1939(r6, &(0x7f0000000540)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000a40)=""/143, 0x8f}, {&(0x7f00000007c0)=""/93, 0x5d}], 0x7, &(0x7f00000008c0)=""/110, 0x6e}, 0x10002) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r6) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x2c, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408c0}, 0x1) r9 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x8}, &(0x7f0000000400)=0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 17.90618041s ago: executing program 3 (id=3446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="18000080000001000000000000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="26fe", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x6) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 17.779627207s ago: executing program 4 (id=3448): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) 16.998308829s ago: executing program 3 (id=3449): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x400}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040)=0x6, 0x4) 16.998100147s ago: executing program 3 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000004000000000000000000000000000000000000040100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 16.90541586s ago: executing program 4 (id=3451): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x3a) socket$isdn(0x22, 0x3, 0x21) socket$qrtr(0x2a, 0x2, 0x0) 16.802855926s ago: executing program 4 (id=3452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8001000010000100001a000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000019000000000000000000000000000000000000000000000000000000000a00048000000000000000008d001400736d33"], 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 16.714223602s ago: executing program 4 (id=3453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a0010000200001500000000"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0x650, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x8}, 0x8) 15.882521282s ago: executing program 4 (id=3454): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 15.829796776s ago: executing program 4 (id=3455): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r4, r5, 0x3, 0x2, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc, 0x0, 0x1200}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050c0}, 0x40010) 2.491992495s ago: executing program 32 (id=3441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x7}]}, 0x24}}, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='memory.events.local\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002}, 0x0) 2.451500999s ago: executing program 33 (id=3442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000080), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6) recvmsg$can_j1939(r6, &(0x7f0000000540)={&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000700)=""/50, 0x32}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000a40)=""/143, 0x8f}, {&(0x7f00000007c0)=""/93, 0x5d}], 0x7, &(0x7f00000008c0)=""/110, 0x6e}, 0x10002) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r6) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x2c, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408c0}, 0x1) r9 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x8}, &(0x7f0000000400)=0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 993.840989ms ago: executing program 34 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000004000000000000000000000000000000000000040100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 0s ago: executing program 35 (id=3455): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r4, r5, 0x3, 0x2, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc, 0x0, 0x1200}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050c0}, 0x40010) kernel console output (not intermixed with test programs): y 0, space 0, times 0 [ 335.574754][T15827] CPU: 0 UID: 0 PID: 15827 Comm: syz.1.3127 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 335.574785][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.574799][T15827] Call Trace: [ 335.574808][T15827] [ 335.574817][T15827] dump_stack_lvl+0x189/0x250 [ 335.574845][T15827] ? __pfx____ratelimit+0x10/0x10 [ 335.574876][T15827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.574896][T15827] ? __pfx__printk+0x10/0x10 [ 335.574928][T15827] ? __pfx___might_resched+0x10/0x10 [ 335.574968][T15827] should_fail_ex+0x414/0x560 [ 335.575009][T15827] should_failslab+0xa8/0x100 [ 335.575032][T15827] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 335.575067][T15827] ? __alloc_skb+0x112/0x2d0 [ 335.575098][T15827] ? __pfx___mutex_trylock_common+0x10/0x10 [ 335.575126][T15827] __alloc_skb+0x112/0x2d0 [ 335.575165][T15827] netlink_dump+0x1b7/0xe90 [ 335.575208][T15827] ? __netlink_lookup+0xbd/0x810 [ 335.575233][T15827] ? __pfx_netlink_dump+0x10/0x10 [ 335.575259][T15827] ? __netlink_lookup+0x752/0x810 [ 335.575296][T15827] ? netlink_lookup+0x30/0x200 [ 335.575324][T15827] ? netlink_lookup+0x30/0x200 [ 335.575356][T15827] ? netlink_lookup+0x30/0x200 [ 335.575389][T15827] __netlink_dump_start+0x5cb/0x7e0 [ 335.575428][T15827] rtnetlink_rcv_msg+0x9eb/0xb70 [ 335.575462][T15827] ? __pfx_rtnl_dump_all+0x10/0x10 [ 335.575495][T15827] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 335.575525][T15827] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.575553][T15827] ? ref_tracker_free+0x63a/0x7d0 [ 335.575575][T15827] ? __pfx_rtnl_dumpit+0x10/0x10 [ 335.575606][T15827] ? __pfx_rtnl_dump_all+0x10/0x10 [ 335.575636][T15827] ? __skb_clone+0x63/0x7a0 [ 335.575667][T15827] netlink_rcv_skb+0x205/0x470 [ 335.575699][T15827] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.575733][T15827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.575779][T15827] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.575821][T15827] netlink_unicast+0x82c/0x9e0 [ 335.575860][T15827] ? __pfx_netlink_unicast+0x10/0x10 [ 335.575892][T15827] ? netlink_sendmsg+0x642/0xb30 [ 335.575922][T15827] ? skb_put+0x11b/0x210 [ 335.575947][T15827] netlink_sendmsg+0x805/0xb30 [ 335.575991][T15827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.576028][T15827] ? aa_sock_msg_perm+0x94/0x160 [ 335.576059][T15827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.576085][T15827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.576120][T15827] __sock_sendmsg+0x21c/0x270 [ 335.576152][T15827] ____sys_sendmsg+0x505/0x830 [ 335.576182][T15827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.576216][T15827] ? import_iovec+0x74/0xa0 [ 335.576251][T15827] ___sys_sendmsg+0x21f/0x2a0 [ 335.576276][T15827] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.576350][T15827] ? __fget_files+0x2a/0x420 [ 335.576371][T15827] ? __fget_files+0x3a0/0x420 [ 335.576405][T15827] __x64_sys_sendmsg+0x19b/0x260 [ 335.576431][T15827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.576466][T15827] ? __pfx_ksys_write+0x10/0x10 [ 335.576494][T15827] ? rcu_is_watching+0x15/0xb0 [ 335.576533][T15827] ? do_syscall_64+0xbe/0x3b0 [ 335.576570][T15827] do_syscall_64+0xfa/0x3b0 [ 335.576600][T15827] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.576630][T15827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.576652][T15827] ? clear_bhb_loop+0x60/0xb0 [ 335.576678][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.576699][T15827] RIP: 0033:0x7fab8c18eb69 [ 335.576720][T15827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.576740][T15827] RSP: 002b:00007fab8cfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.576764][T15827] RAX: ffffffffffffffda RBX: 00007fab8c3b5fa0 RCX: 00007fab8c18eb69 [ 335.576780][T15827] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 335.576794][T15827] RBP: 00007fab8cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 335.576806][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.576820][T15827] R13: 0000000000000000 R14: 00007fab8c3b5fa0 R15: 00007ffd1571a528 [ 335.576855][T15827] [ 336.065686][T15833] netlink: 'syz.0.3129': attribute type 11 has an invalid length. [ 336.096879][T15833] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3129'. [ 336.230310][ T36] batman_adv: batadv0: Removing interface: wlan1 [ 336.277825][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3131'. [ 336.327503][T15756] chnl_net:caif_netlink_parms(): no params data found [ 336.366492][T15840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.389668][T15840] netlink: 'syz.1.3131': attribute type 1 has an invalid length. [ 336.425906][T15840] netlink: 'syz.1.3131': attribute type 2 has an invalid length. [ 336.526733][T15852] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3133'. [ 336.557710][T15858] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3135'. [ 336.626196][T15854] tipc: Enabled bearer , priority 0 [ 336.782909][ T5161] Bluetooth: hci4: command tx timeout [ 336.811501][T15854] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 336.822797][T15854] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 336.839707][T15854] tipc: Resetting bearer [ 336.852810][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.860338][T15864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.869637][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.878694][T15756] bridge_slave_0: entered allmulticast mode [ 336.894757][T15756] bridge_slave_0: entered promiscuous mode [ 336.968520][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.992973][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.030926][T15756] bridge_slave_1: entered allmulticast mode [ 337.060254][T15756] bridge_slave_1: entered promiscuous mode [ 337.069253][T15876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.225443][T15879] bond1: entered promiscuous mode [ 337.230579][T15879] bond1: entered allmulticast mode [ 337.236490][T15879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.249715][ T1145] tipc: Resetting bearer [ 337.323318][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.351230][ T36] hsr_slave_0: left promiscuous mode [ 337.376053][ T36] hsr_slave_1: left promiscuous mode [ 337.388819][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.400932][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.409285][ T36] batman_adv: batadv0: Interface deactivated: team0 [ 337.419588][ T36] batman_adv: batadv0: Removing interface: team0 [ 337.526223][ T36] pim6reg (unregistering): left allmulticast mode [ 337.585266][ T36] pimreg3 (unregistering): left allmulticast mode [ 337.704182][ T980] tipc: Node number set to 64513 [ 338.146328][ T36] team0 (unregistering): Port device team_slave_1 removed [ 338.191022][ T36] team0 (unregistering): Port device team_slave_0 removed [ 338.530947][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.540702][T15898] FAULT_INJECTION: forcing a failure. [ 338.540702][T15898] name failslab, interval 1, probability 0, space 0, times 0 [ 338.589088][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.3.3148 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 338.589128][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.589142][T15898] Call Trace: [ 338.589151][T15898] [ 338.589161][T15898] dump_stack_lvl+0x189/0x250 [ 338.589190][T15898] ? __pfx____ratelimit+0x10/0x10 [ 338.589221][T15898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.589244][T15898] ? __pfx__printk+0x10/0x10 [ 338.589271][T15898] ? __mutex_unlock_slowpath+0x6a3/0x760 [ 338.589309][T15898] ? ref_tracker_alloc+0x318/0x460 [ 338.589336][T15898] should_fail_ex+0x414/0x560 [ 338.589375][T15898] should_failslab+0xa8/0x100 [ 338.589402][T15898] kmem_cache_alloc_noprof+0x73/0x3c0 [ 338.589433][T15898] ? skb_clone+0x212/0x3a0 [ 338.589462][T15898] skb_clone+0x212/0x3a0 [ 338.589489][T15898] __netlink_deliver_tap+0x404/0x850 [ 338.589535][T15898] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.589569][T15898] netlink_deliver_tap+0x19c/0x1b0 [ 338.589604][T15898] __netlink_sendskb+0x47/0x90 [ 338.589635][T15898] netlink_dump+0xa84/0xe90 [ 338.589681][T15898] ? __pfx_netlink_dump+0x10/0x10 [ 338.589710][T15898] ? __netlink_lookup+0x752/0x810 [ 338.589749][T15898] ? netlink_lookup+0x30/0x200 [ 338.589780][T15898] ? netlink_lookup+0x30/0x200 [ 338.589807][T15898] ? netlink_lookup+0x30/0x200 [ 338.589844][T15898] __netlink_dump_start+0x5cb/0x7e0 [ 338.589887][T15898] rtnetlink_rcv_msg+0x9eb/0xb70 [ 338.589922][T15898] ? __pfx_rtnl_dump_all+0x10/0x10 [ 338.589953][T15898] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 338.589985][T15898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.590014][T15898] ? ref_tracker_free+0x63a/0x7d0 [ 338.590034][T15898] ? __pfx_rtnl_dumpit+0x10/0x10 [ 338.590065][T15898] ? __pfx_rtnl_dump_all+0x10/0x10 [ 338.590108][T15898] ? __skb_clone+0x63/0x7a0 [ 338.590142][T15898] netlink_rcv_skb+0x205/0x470 [ 338.590177][T15898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.590211][T15898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.590256][T15898] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.590298][T15898] netlink_unicast+0x82c/0x9e0 [ 338.590339][T15898] ? __pfx_netlink_unicast+0x10/0x10 [ 338.590371][T15898] ? netlink_sendmsg+0x642/0xb30 [ 338.590401][T15898] ? skb_put+0x11b/0x210 [ 338.590426][T15898] netlink_sendmsg+0x805/0xb30 [ 338.590471][T15898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.590509][T15898] ? aa_sock_msg_perm+0x94/0x160 [ 338.590542][T15898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.590568][T15898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.590603][T15898] __sock_sendmsg+0x21c/0x270 [ 338.590636][T15898] ____sys_sendmsg+0x505/0x830 [ 338.590667][T15898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.590701][T15898] ? import_iovec+0x74/0xa0 [ 338.590736][T15898] ___sys_sendmsg+0x21f/0x2a0 [ 338.590760][T15898] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.590826][T15898] ? __fget_files+0x2a/0x420 [ 338.590847][T15898] ? __fget_files+0x3a0/0x420 [ 338.590881][T15898] __x64_sys_sendmsg+0x19b/0x260 [ 338.590909][T15898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.590944][T15898] ? __pfx_ksys_write+0x10/0x10 [ 338.590973][T15898] ? rcu_is_watching+0x15/0xb0 [ 338.591013][T15898] ? do_syscall_64+0xbe/0x3b0 [ 338.591050][T15898] do_syscall_64+0xfa/0x3b0 [ 338.591080][T15898] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.591116][T15898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.591139][T15898] ? clear_bhb_loop+0x60/0xb0 [ 338.591165][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.591186][T15898] RIP: 0033:0x7f139d38eb69 [ 338.591205][T15898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.591224][T15898] RSP: 002b:00007f139b1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.591249][T15898] RAX: ffffffffffffffda RBX: 00007f139d5b5fa0 RCX: 00007f139d38eb69 [ 338.591264][T15898] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 338.591277][T15898] RBP: 00007f139b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.591291][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.591303][T15898] R13: 0000000000000000 R14: 00007f139d5b5fa0 R15: 00007ffc64ded338 [ 338.591338][T15898] [ 339.002064][ T5161] Bluetooth: hci4: command tx timeout [ 339.175592][T15756] team0: Port device team_slave_0 added [ 339.214259][T15756] team0: Port device team_slave_1 added [ 339.379665][T15911] bond0: entered promiscuous mode [ 339.385405][T15911] bond_slave_0: entered promiscuous mode [ 339.391423][T15911] bond_slave_1: entered promiscuous mode [ 339.399662][T15911] batadv0: entered promiscuous mode [ 339.407234][T15911] debugfs: 'hsr1' already exists in 'hsr' [ 339.413531][T15911] Cannot create hsr debugfs directory [ 339.419208][T15911] hsr1: entered allmulticast mode [ 339.424539][T15911] bond0: entered allmulticast mode [ 339.429711][T15911] bond_slave_0: entered allmulticast mode [ 339.437723][T15911] bond_slave_1: entered allmulticast mode [ 339.443979][T15911] batadv0: entered allmulticast mode [ 339.450019][T15911] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 339.469714][T15911] bond0: left promiscuous mode [ 339.482627][T15911] bond_slave_0: left promiscuous mode [ 339.499655][T15911] bond_slave_1: left promiscuous mode [ 339.514780][T15911] batadv0: left promiscuous mode [ 339.551664][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.560636][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.601586][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.655339][T15921] vlan0: entered allmulticast mode [ 339.677067][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.703730][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.731659][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.745529][T15930] FAULT_INJECTION: forcing a failure. [ 339.745529][T15930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.796405][T15930] CPU: 0 UID: 0 PID: 15930 Comm: syz.0.3160 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 339.796439][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.796452][T15930] Call Trace: [ 339.796460][T15930] [ 339.796470][T15930] dump_stack_lvl+0x189/0x250 [ 339.796498][T15930] ? __pfx____ratelimit+0x10/0x10 [ 339.796530][T15930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.796553][T15930] ? __pfx__printk+0x10/0x10 [ 339.796593][T15930] should_fail_ex+0x414/0x560 [ 339.796633][T15930] _copy_to_user+0x31/0xb0 [ 339.796665][T15930] simple_read_from_buffer+0xe1/0x170 [ 339.796706][T15930] proc_fail_nth_read+0x1b3/0x220 [ 339.796737][T15930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.796766][T15930] ? rw_verify_area+0x258/0x650 [ 339.796795][T15930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.796822][T15930] vfs_read+0x1fd/0x980 [ 339.796851][T15930] ? fdget_pos+0x247/0x320 [ 339.796878][T15930] ? __pfx___mutex_lock+0x10/0x10 [ 339.796910][T15930] ? __pfx_vfs_read+0x10/0x10 [ 339.796941][T15930] ? __fget_files+0x2a/0x420 [ 339.796967][T15930] ? __fget_files+0x3a0/0x420 [ 339.796996][T15930] ? __fget_files+0x2a/0x420 [ 339.797027][T15930] ksys_read+0x145/0x250 [ 339.797061][T15930] ? __pfx_ksys_read+0x10/0x10 [ 339.797087][T15930] ? rcu_is_watching+0x15/0xb0 [ 339.797128][T15930] ? do_syscall_64+0xbe/0x3b0 [ 339.797165][T15930] do_syscall_64+0xfa/0x3b0 [ 339.797196][T15930] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.797226][T15930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.797248][T15930] ? clear_bhb_loop+0x60/0xb0 [ 339.797274][T15930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.797295][T15930] RIP: 0033:0x7fc0f4b8d57c [ 339.797314][T15930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 339.797332][T15930] RSP: 002b:00007fc0f5a33030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.797356][T15930] RAX: ffffffffffffffda RBX: 00007fc0f4db5fa0 RCX: 00007fc0f4b8d57c [ 339.797372][T15930] RDX: 000000000000000f RSI: 00007fc0f5a330a0 RDI: 0000000000000004 [ 339.797385][T15930] RBP: 00007fc0f5a33090 R08: 0000000000000000 R09: 0000000000000000 [ 339.797397][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.797409][T15930] R13: 0000000000000000 R14: 00007fc0f4db5fa0 R15: 00007ffd116a7e78 [ 339.797444][T15930] [ 340.196939][T15756] hsr_slave_0: entered promiscuous mode [ 340.204040][T15756] hsr_slave_1: entered promiscuous mode [ 340.224219][T15756] debugfs: 'hsr0' already exists in 'hsr' [ 340.231038][T15756] Cannot create hsr debugfs directory [ 340.297160][ T36] IPVS: stop unused estimator thread 0... [ 340.312305][T15949] FAULT_INJECTION: forcing a failure. [ 340.312305][T15949] name failslab, interval 1, probability 0, space 0, times 0 [ 340.358233][T15949] CPU: 1 UID: 0 PID: 15949 Comm: syz.0.3166 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 340.358265][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.358279][T15949] Call Trace: [ 340.358288][T15949] [ 340.358297][T15949] dump_stack_lvl+0x189/0x250 [ 340.358325][T15949] ? __pfx____ratelimit+0x10/0x10 [ 340.358356][T15949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.358378][T15949] ? __pfx__printk+0x10/0x10 [ 340.358408][T15949] ? __pfx___might_resched+0x10/0x10 [ 340.358441][T15949] ? fs_reclaim_acquire+0x7d/0x100 [ 340.358470][T15949] should_fail_ex+0x414/0x560 [ 340.358510][T15949] should_failslab+0xa8/0x100 [ 340.358532][T15949] __kmalloc_cache_noprof+0x70/0x3d0 [ 340.358565][T15949] ? nft_trans_table_add+0x56/0x430 [ 340.358597][T15949] nft_trans_table_add+0x56/0x430 [ 340.358630][T15949] nf_tables_newtable+0xce3/0x1890 [ 340.358676][T15949] nfnetlink_rcv+0x112f/0x2520 [ 340.358742][T15949] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 340.358790][T15949] ? ref_tracker_free+0x63a/0x7d0 [ 340.358845][T15949] ? __netlink_deliver_tap+0x807/0x850 [ 340.358877][T15949] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.358930][T15949] netlink_unicast+0x82c/0x9e0 [ 340.358970][T15949] ? __pfx_netlink_unicast+0x10/0x10 [ 340.359024][T15949] ? netlink_sendmsg+0x642/0xb30 [ 340.359055][T15949] ? skb_put+0x11b/0x210 [ 340.359080][T15949] netlink_sendmsg+0x805/0xb30 [ 340.359124][T15949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.359161][T15949] ? aa_sock_msg_perm+0x94/0x160 [ 340.359192][T15949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.359216][T15949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.359250][T15949] __sock_sendmsg+0x21c/0x270 [ 340.359282][T15949] ____sys_sendmsg+0x505/0x830 [ 340.359312][T15949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.359346][T15949] ? import_iovec+0x74/0xa0 [ 340.359381][T15949] ___sys_sendmsg+0x21f/0x2a0 [ 340.359406][T15949] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.359472][T15949] ? __fget_files+0x2a/0x420 [ 340.359492][T15949] ? __fget_files+0x3a0/0x420 [ 340.359526][T15949] __x64_sys_sendmsg+0x19b/0x260 [ 340.359551][T15949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.359587][T15949] ? __pfx_ksys_write+0x10/0x10 [ 340.359615][T15949] ? rcu_is_watching+0x15/0xb0 [ 340.359657][T15949] ? do_syscall_64+0xbe/0x3b0 [ 340.359695][T15949] do_syscall_64+0xfa/0x3b0 [ 340.359726][T15949] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.359757][T15949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.359778][T15949] ? clear_bhb_loop+0x60/0xb0 [ 340.359805][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.359825][T15949] RIP: 0033:0x7fc0f4b8eb69 [ 340.359844][T15949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.359863][T15949] RSP: 002b:00007fc0f5a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.359888][T15949] RAX: ffffffffffffffda RBX: 00007fc0f4db5fa0 RCX: 00007fc0f4b8eb69 [ 340.359904][T15949] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 340.359918][T15949] RBP: 00007fc0f5a33090 R08: 0000000000000000 R09: 0000000000000000 [ 340.359932][T15949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.359945][T15949] R13: 0000000000000000 R14: 00007fc0f4db5fa0 R15: 00007ffd116a7e78 [ 340.359979][T15949] [ 340.778514][T15946] __nla_validate_parse: 1 callbacks suppressed [ 340.778536][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'. [ 341.023985][ T5161] Bluetooth: hci4: command tx timeout [ 341.167508][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.236904][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.297923][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3172'. [ 341.328252][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3172'. [ 341.453303][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.474246][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.475463][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 341.531486][T15988] tipc: Enabling of bearer rejected, already enabled [ 341.550218][T15988] tipc: Resetting bearer [ 341.660517][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.698181][T15997] FAULT_INJECTION: forcing a failure. [ 341.698181][T15997] name failslab, interval 1, probability 0, space 0, times 0 [ 341.711193][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.721441][T15997] CPU: 1 UID: 0 PID: 15997 Comm: syz.0.3177 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 341.721479][T15997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.721491][T15997] Call Trace: [ 341.721500][T15997] [ 341.721508][T15997] dump_stack_lvl+0x189/0x250 [ 341.721536][T15997] ? __pfx____ratelimit+0x10/0x10 [ 341.721567][T15997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.721589][T15997] ? __pfx__printk+0x10/0x10 [ 341.721622][T15997] ? __pfx___might_resched+0x10/0x10 [ 341.721654][T15997] ? fs_reclaim_acquire+0x7d/0x100 [ 341.721684][T15997] should_fail_ex+0x414/0x560 [ 341.721724][T15997] should_failslab+0xa8/0x100 [ 341.721746][T15997] __kmalloc_cache_noprof+0x70/0x3d0 [ 341.721779][T15997] ? nf_tables_newchain+0xef1/0x2900 [ 341.721808][T15997] nf_tables_newchain+0xef1/0x2900 [ 341.721850][T15997] ? __pfx_nf_tables_newchain+0x10/0x10 [ 341.721918][T15997] ? nfnl_pernet+0x23/0x240 [ 341.721958][T15997] ? __nla_parse+0x40/0x60 [ 341.721987][T15997] nfnetlink_rcv+0x112f/0x2520 [ 341.722053][T15997] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 341.722100][T15997] ? ref_tracker_free+0x63a/0x7d0 [ 341.722156][T15997] ? __netlink_deliver_tap+0x807/0x850 [ 341.722188][T15997] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.722239][T15997] netlink_unicast+0x82c/0x9e0 [ 341.722281][T15997] ? __pfx_netlink_unicast+0x10/0x10 [ 341.722318][T15997] ? netlink_sendmsg+0x642/0xb30 [ 341.722354][T15997] ? skb_put+0x11b/0x210 [ 341.722383][T15997] netlink_sendmsg+0x805/0xb30 [ 341.722434][T15997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.722477][T15997] ? aa_sock_msg_perm+0x94/0x160 [ 341.722517][T15997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.722546][T15997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.722584][T15997] __sock_sendmsg+0x21c/0x270 [ 341.722622][T15997] ____sys_sendmsg+0x505/0x830 [ 341.722652][T15997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.722692][T15997] ? import_iovec+0x74/0xa0 [ 341.722732][T15997] ___sys_sendmsg+0x21f/0x2a0 [ 341.722760][T15997] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.722834][T15997] ? __fget_files+0x2a/0x420 [ 341.722857][T15997] ? __fget_files+0x3a0/0x420 [ 341.722900][T15997] __x64_sys_sendmsg+0x19b/0x260 [ 341.722932][T15997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.722971][T15997] ? __pfx_ksys_write+0x10/0x10 [ 341.723003][T15997] ? rcu_is_watching+0x15/0xb0 [ 341.723047][T15997] ? do_syscall_64+0xbe/0x3b0 [ 341.723089][T15997] do_syscall_64+0xfa/0x3b0 [ 341.723124][T15997] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.723157][T15997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.723182][T15997] ? clear_bhb_loop+0x60/0xb0 [ 341.723212][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.723237][T15997] RIP: 0033:0x7fc0f4b8eb69 [ 341.723259][T15997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.723281][T15997] RSP: 002b:00007fc0f5a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.723315][T15997] RAX: ffffffffffffffda RBX: 00007fc0f4db5fa0 RCX: 00007fc0f4b8eb69 [ 341.723334][T15997] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 341.723348][T15997] RBP: 00007fc0f5a33090 R08: 0000000000000000 R09: 0000000000000000 [ 341.723364][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.723379][T15997] R13: 0000000000000000 R14: 00007fc0f4db5fa0 R15: 00007ffd116a7e78 [ 341.723418][T15997] [ 342.269912][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.305191][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.448792][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 342.816529][T16050] FAULT_INJECTION: forcing a failure. [ 342.816529][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 342.849193][T16050] CPU: 1 UID: 0 PID: 16050 Comm: syz.1.3195 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 342.849233][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.849247][T16050] Call Trace: [ 342.849256][T16050] [ 342.849266][T16050] dump_stack_lvl+0x189/0x250 [ 342.849295][T16050] ? __pfx____ratelimit+0x10/0x10 [ 342.849326][T16050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.849350][T16050] ? __pfx__printk+0x10/0x10 [ 342.849385][T16050] ? __pfx___might_resched+0x10/0x10 [ 342.849424][T16050] should_fail_ex+0x414/0x560 [ 342.849466][T16050] should_failslab+0xa8/0x100 [ 342.849496][T16050] __kmalloc_noprof+0xcb/0x4f0 [ 342.849528][T16050] ? __kasan_kmalloc+0x93/0xb0 [ 342.849557][T16050] ? nla_strdup+0x9d/0x140 [ 342.849587][T16050] nla_strdup+0x9d/0x140 [ 342.849615][T16050] nf_tables_newchain+0x1998/0x2900 [ 342.849660][T16050] ? __pfx_nf_tables_newchain+0x10/0x10 [ 342.849725][T16050] ? nfnl_pernet+0x23/0x240 [ 342.849764][T16050] ? __nla_parse+0x40/0x60 [ 342.849794][T16050] nfnetlink_rcv+0x112f/0x2520 [ 342.849861][T16050] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 342.849911][T16050] ? ref_tracker_free+0x63a/0x7d0 [ 342.849967][T16050] ? __netlink_deliver_tap+0x807/0x850 [ 342.849999][T16050] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.850053][T16050] netlink_unicast+0x82c/0x9e0 [ 342.850095][T16050] ? __pfx_netlink_unicast+0x10/0x10 [ 342.850127][T16050] ? netlink_sendmsg+0x642/0xb30 [ 342.850158][T16050] ? skb_put+0x11b/0x210 [ 342.850183][T16050] netlink_sendmsg+0x805/0xb30 [ 342.850227][T16050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.850264][T16050] ? aa_sock_msg_perm+0x94/0x160 [ 342.850297][T16050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.850322][T16050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.850355][T16050] __sock_sendmsg+0x21c/0x270 [ 342.850386][T16050] ____sys_sendmsg+0x505/0x830 [ 342.850415][T16050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.850449][T16050] ? import_iovec+0x74/0xa0 [ 342.850493][T16050] ___sys_sendmsg+0x21f/0x2a0 [ 342.850519][T16050] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.850584][T16050] ? __fget_files+0x2a/0x420 [ 342.850605][T16050] ? __fget_files+0x3a0/0x420 [ 342.850637][T16050] __x64_sys_sendmsg+0x19b/0x260 [ 342.850664][T16050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.850698][T16050] ? __pfx_ksys_write+0x10/0x10 [ 342.850726][T16050] ? rcu_is_watching+0x15/0xb0 [ 342.850766][T16050] ? do_syscall_64+0xbe/0x3b0 [ 342.850802][T16050] do_syscall_64+0xfa/0x3b0 [ 342.850832][T16050] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.850861][T16050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.850882][T16050] ? clear_bhb_loop+0x60/0xb0 [ 342.850909][T16050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.850929][T16050] RIP: 0033:0x7fab8c18eb69 [ 342.850949][T16050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.850968][T16050] RSP: 002b:00007fab8cfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.850993][T16050] RAX: ffffffffffffffda RBX: 00007fab8c3b5fa0 RCX: 00007fab8c18eb69 [ 342.851009][T16050] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 342.851022][T16050] RBP: 00007fab8cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 342.851036][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.851049][T16050] R13: 0000000000000000 R14: 00007fab8c3b5fa0 R15: 00007ffd1571a528 [ 342.851084][T16050] [ 343.938130][ T36] bond0 (unregistering): Released all slaves [ 344.053640][ T36] bond1 (unregistering): Released all slaves [ 344.069841][ T36] bond2 (unregistering): Released all slaves [ 344.086028][ T36] bond3 (unregistering): Released all slaves [ 344.107875][ T36] bond4 (unregistering): Released all slaves [ 344.128141][ T36] bond5 (unregistering): Released all slaves [ 344.147478][ T36] bond6 (unregistering): Released all slaves [ 344.165800][ T36] bond7 (unregistering): Released all slaves [ 344.189415][ T36] bond8 (unregistering): Released all slaves [ 344.206290][ T36] bond9 (unregistering): Released all slaves [ 344.237750][ T95] block nbd0: Possible stuck request ffff8880253fe000: control (read@0,4096B). Runtime 240 seconds [ 344.311815][T16059] veth1_virt_wifi: entered allmulticast mode [ 344.427928][ T36] : left promiscuous mode [ 344.447731][T16066] netlink: 'syz.2.3198': attribute type 10 has an invalid length. [ 344.521361][T16070] openvswitch: netlink: Missing key (keys=40, expected=80) [ 344.580995][ T36] tipc: Left network mode [ 344.800635][T16081] FAULT_INJECTION: forcing a failure. [ 344.800635][T16081] name failslab, interval 1, probability 0, space 0, times 0 [ 344.830937][T16081] CPU: 1 UID: 0 PID: 16081 Comm: syz.3.3206 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 344.830970][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.830993][T16081] Call Trace: [ 344.831002][T16081] [ 344.831012][T16081] dump_stack_lvl+0x189/0x250 [ 344.831039][T16081] ? __pfx____ratelimit+0x10/0x10 [ 344.831071][T16081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.831093][T16081] ? __pfx__printk+0x10/0x10 [ 344.831129][T16081] ? __pfx___might_resched+0x10/0x10 [ 344.831168][T16081] should_fail_ex+0x414/0x560 [ 344.831208][T16081] ? nf_tables_newchain+0x1b7e/0x2900 [ 344.831230][T16081] should_failslab+0xa8/0x100 [ 344.831253][T16081] __kvmalloc_node_noprof+0x161/0x5f0 [ 344.831289][T16081] ? nf_tables_newchain+0x1b7e/0x2900 [ 344.831318][T16081] nf_tables_newchain+0x1b7e/0x2900 [ 344.831361][T16081] ? __pfx_nf_tables_newchain+0x10/0x10 [ 344.831423][T16081] ? nfnl_pernet+0x23/0x240 [ 344.831462][T16081] ? __nla_parse+0x40/0x60 [ 344.831492][T16081] nfnetlink_rcv+0x112f/0x2520 [ 344.831563][T16081] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 344.831610][T16081] ? ref_tracker_free+0x63a/0x7d0 [ 344.831666][T16081] ? __netlink_deliver_tap+0x807/0x850 [ 344.831697][T16081] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.831743][T16081] netlink_unicast+0x82c/0x9e0 [ 344.831775][T16081] ? __pfx_netlink_unicast+0x10/0x10 [ 344.831801][T16081] ? netlink_sendmsg+0x642/0xb30 [ 344.831826][T16081] ? skb_put+0x11b/0x210 [ 344.831846][T16081] netlink_sendmsg+0x805/0xb30 [ 344.831883][T16081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.831913][T16081] ? aa_sock_msg_perm+0x94/0x160 [ 344.831939][T16081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.831961][T16081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.831998][T16081] __sock_sendmsg+0x21c/0x270 [ 344.832026][T16081] ____sys_sendmsg+0x505/0x830 [ 344.832052][T16081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.832085][T16081] ? import_iovec+0x74/0xa0 [ 344.832114][T16081] ___sys_sendmsg+0x21f/0x2a0 [ 344.832134][T16081] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.832185][T16081] ? __fget_files+0x2a/0x420 [ 344.832208][T16081] ? __fget_files+0x3a0/0x420 [ 344.832234][T16081] __x64_sys_sendmsg+0x19b/0x260 [ 344.832255][T16081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.832284][T16081] ? __pfx_ksys_write+0x10/0x10 [ 344.832315][T16081] ? do_syscall_64+0xbe/0x3b0 [ 344.832345][T16081] do_syscall_64+0xfa/0x3b0 [ 344.832372][T16081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.832388][T16081] ? asm_sysvec_call_function_single+0x1a/0x20 [ 344.832405][T16081] ? clear_bhb_loop+0x60/0xb0 [ 344.832426][T16081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.832444][T16081] RIP: 0033:0x7f139d38eb69 [ 344.832461][T16081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.832478][T16081] RSP: 002b:00007f139b1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.832504][T16081] RAX: ffffffffffffffda RBX: 00007f139d5b5fa0 RCX: 00007f139d38eb69 [ 344.832518][T16081] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 344.832536][T16081] RBP: 00007f139b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.832548][T16081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.832560][T16081] R13: 0000000000000000 R14: 00007f139d5b5fa0 R15: 00007ffc64ded338 [ 344.832589][T16081] [ 345.218223][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3205'. [ 345.326657][T15756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.420714][T15756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.556350][T15756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.661699][ T36] hsr_slave_0: left promiscuous mode [ 345.683094][ T36] hsr_slave_1: left promiscuous mode [ 345.744652][ T36] veth1_macvtap: left promiscuous mode [ 345.755950][ T36] veth0_macvtap: left promiscuous mode [ 345.794416][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 345.951474][ T36] pimreg3 (unregistering): left allmulticast mode [ 346.668871][T15756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.804414][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3214'. [ 346.821282][T16121] tipc: Enabling of bearer rejected, failed to enable media [ 346.928507][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 346.975649][T16131] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3218'. [ 347.018225][T16131] nbd: illegal input index -8454144 [ 347.028717][T16133] netlink: 'syz.0.3217': attribute type 10 has an invalid length. [ 347.098223][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.175622][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.221464][T16140] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 347.239453][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.246695][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.264041][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.271289][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.301353][T16142] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3221'. [ 347.389396][T16140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.400557][T16142] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 347.400783][T15322] IPVS: starting estimator thread 0... [ 347.409401][T16140] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 347.425561][T16140] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 347.430560][T16142] netlink: 'syz.0.3221': attribute type 9 has an invalid length. [ 347.456221][T16143] bond2: (slave ip6erspan1): making interface the new active one [ 347.467249][T16143] bond2: (slave ip6erspan1): Enslaving as an active interface with an up link [ 347.481629][T16140] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 347.491123][T16140] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 347.500930][T16140] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 347.502829][T16147] netlink: 'syz.0.3221': attribute type 9 has an invalid length. [ 347.553299][T16148] IPVS: using max 26 ests per chain, 62400 per kthread [ 347.589780][ T36] IPVS: stop unused estimator thread 0... [ 347.981487][T16150] net veth1_virt_wifi .ailcnt: renamed from virt_wifi0 [ 348.323200][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.879041][T16208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 349.195077][T16227] bond0: entered promiscuous mode [ 349.201524][T16227] batadv0: entered promiscuous mode [ 349.215542][T16227] debugfs: 'hsr1' already exists in 'hsr' [ 349.225258][T16227] Cannot create hsr debugfs directory [ 349.230834][T16227] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 349.248938][T16227] hsr1: entered allmulticast mode [ 349.275159][T16227] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 349.286177][T16227] bond0: left promiscuous mode [ 349.292392][T16227] batadv0: left promiscuous mode [ 349.665564][T15756] veth0_vlan: entered promiscuous mode [ 349.766226][T15756] veth1_vlan: entered promiscuous mode [ 349.790840][T16245] validate_nla: 60 callbacks suppressed [ 349.790863][T16245] netlink: 'syz.2.3248': attribute type 10 has an invalid length. [ 349.901759][T15756] veth0_macvtap: entered promiscuous mode [ 349.932434][T15756] veth1_macvtap: entered promiscuous mode [ 349.977257][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.027416][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.093072][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.102143][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3253'. [ 350.114836][T16257] FAULT_INJECTION: forcing a failure. [ 350.114836][T16257] name failslab, interval 1, probability 0, space 0, times 0 [ 350.141657][T16255] tipc: Enabling of bearer rejected, failed to enable media [ 350.154953][T16257] CPU: 0 UID: 0 PID: 16257 Comm: syz.3.3254 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 350.154986][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.155000][T16257] Call Trace: [ 350.155008][T16257] [ 350.155017][T16257] dump_stack_lvl+0x189/0x250 [ 350.155045][T16257] ? __pfx____ratelimit+0x10/0x10 [ 350.155078][T16257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.155100][T16257] ? __pfx__printk+0x10/0x10 [ 350.155134][T16257] ? __pfx___might_resched+0x10/0x10 [ 350.155164][T16257] ? fs_reclaim_acquire+0x7d/0x100 [ 350.155203][T16257] should_fail_ex+0x414/0x560 [ 350.155245][T16257] should_failslab+0xa8/0x100 [ 350.155267][T16257] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 350.155301][T16257] ? __alloc_skb+0x112/0x2d0 [ 350.155339][T16257] __alloc_skb+0x112/0x2d0 [ 350.155376][T16257] nf_tables_chain_notify+0xa7/0x460 [ 350.155399][T16257] ? kfree+0x18e/0x440 [ 350.155433][T16257] nf_tables_commit+0x5b08/0x8700 [ 350.155486][T16257] ? __pfx_nf_tables_commit+0x10/0x10 [ 350.155508][T16257] ? __pfx_nf_tables_newchain+0x10/0x10 [ 350.155597][T16257] nfnetlink_rcv+0x1a4e/0x2520 [ 350.155662][T16257] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 350.155710][T16257] ? ref_tracker_free+0x63a/0x7d0 [ 350.155764][T16257] ? __netlink_deliver_tap+0x807/0x850 [ 350.155797][T16257] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.155849][T16257] netlink_unicast+0x82c/0x9e0 [ 350.155888][T16257] ? __pfx_netlink_unicast+0x10/0x10 [ 350.155918][T16257] ? netlink_sendmsg+0x642/0xb30 [ 350.155948][T16257] ? skb_put+0x11b/0x210 [ 350.155971][T16257] netlink_sendmsg+0x805/0xb30 [ 350.156015][T16257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.156051][T16257] ? aa_sock_msg_perm+0x94/0x160 [ 350.156081][T16257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.156107][T16257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.156140][T16257] __sock_sendmsg+0x21c/0x270 [ 350.156180][T16257] ____sys_sendmsg+0x505/0x830 [ 350.156210][T16257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.156244][T16257] ? import_iovec+0x74/0xa0 [ 350.156278][T16257] ___sys_sendmsg+0x21f/0x2a0 [ 350.156304][T16257] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.156378][T16257] ? __fget_files+0x2a/0x420 [ 350.156400][T16257] ? __fget_files+0x3a0/0x420 [ 350.156434][T16257] __x64_sys_sendmsg+0x19b/0x260 [ 350.156461][T16257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.156496][T16257] ? __pfx_ksys_write+0x10/0x10 [ 350.156524][T16257] ? rcu_is_watching+0x15/0xb0 [ 350.156564][T16257] ? do_syscall_64+0xbe/0x3b0 [ 350.156601][T16257] do_syscall_64+0xfa/0x3b0 [ 350.156632][T16257] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.156662][T16257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.156684][T16257] ? clear_bhb_loop+0x60/0xb0 [ 350.156710][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.156732][T16257] RIP: 0033:0x7f139d38eb69 [ 350.156752][T16257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.156771][T16257] RSP: 002b:00007f139b1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.156795][T16257] RAX: ffffffffffffffda RBX: 00007f139d5b5fa0 RCX: 00007f139d38eb69 [ 350.156811][T16257] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 350.156824][T16257] RBP: 00007f139b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.156838][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.156850][T16257] R13: 0000000000000000 R14: 00007f139d5b5fa0 R15: 00007ffc64ded338 [ 350.156885][T16257] [ 350.164355][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.521404][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.580081][T16265] bond0: entered promiscuous mode [ 350.585440][T16265] bond_slave_0: entered promiscuous mode [ 350.591436][T16265] bond_slave_1: entered promiscuous mode [ 350.608764][T16265] team0: entered promiscuous mode [ 350.631810][T16265] team_slave_0: entered promiscuous mode [ 350.642986][T16265] team_slave_1: entered promiscuous mode [ 350.649284][T16265] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 350.661303][T16265] batadv0: entered promiscuous mode [ 350.667658][T16265] debugfs: 'hsr1' already exists in 'hsr' [ 350.673692][T16265] Cannot create hsr debugfs directory [ 350.679516][T16265] hsr1: entered allmulticast mode [ 350.687102][T16265] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 350.701284][T16265] bond0: left promiscuous mode [ 350.712668][T16265] bond_slave_0: left promiscuous mode [ 350.728182][T16265] bond_slave_1: left promiscuous mode [ 350.734183][T16265] team0: left promiscuous mode [ 350.738077][T16276] FAULT_INJECTION: forcing a failure. [ 350.738077][T16276] name failslab, interval 1, probability 0, space 0, times 0 [ 350.744139][T16265] team_slave_0: left promiscuous mode [ 350.759770][T16276] CPU: 0 UID: 0 PID: 16276 Comm: syz.2.3260 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 350.759802][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.759816][T16276] Call Trace: [ 350.759825][T16276] [ 350.759834][T16276] dump_stack_lvl+0x189/0x250 [ 350.759864][T16276] ? __pfx____ratelimit+0x10/0x10 [ 350.759896][T16276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.759919][T16276] ? __pfx__printk+0x10/0x10 [ 350.759954][T16276] ? __pfx___might_resched+0x10/0x10 [ 350.759994][T16276] should_fail_ex+0x414/0x560 [ 350.760035][T16276] should_failslab+0xa8/0x100 [ 350.760058][T16276] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 350.760093][T16276] ? __alloc_skb+0x112/0x2d0 [ 350.760130][T16276] __alloc_skb+0x112/0x2d0 [ 350.760169][T16276] netlink_sendmsg+0x5c6/0xb30 [ 350.760214][T16276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.760252][T16276] ? aa_sock_msg_perm+0x94/0x160 [ 350.760283][T16276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.760307][T16276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.760342][T16276] __sock_sendmsg+0x21c/0x270 [ 350.760376][T16276] ____sys_sendmsg+0x505/0x830 [ 350.760405][T16276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.760440][T16276] ? import_iovec+0x74/0xa0 [ 350.760474][T16276] ___sys_sendmsg+0x21f/0x2a0 [ 350.760500][T16276] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.760565][T16276] ? __fget_files+0x2a/0x420 [ 350.760586][T16276] ? __fget_files+0x3a0/0x420 [ 350.760618][T16276] __x64_sys_sendmsg+0x19b/0x260 [ 350.760645][T16276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.760679][T16276] ? __pfx_ksys_write+0x10/0x10 [ 350.760709][T16276] ? rcu_is_watching+0x15/0xb0 [ 350.760749][T16276] ? do_syscall_64+0xbe/0x3b0 [ 350.760793][T16276] do_syscall_64+0xfa/0x3b0 [ 350.760824][T16276] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.760854][T16276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.760877][T16276] ? clear_bhb_loop+0x60/0xb0 [ 350.760904][T16276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.760925][T16276] RIP: 0033:0x7f73fcb8eb69 [ 350.760945][T16276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.760964][T16276] RSP: 002b:00007f73fda37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.760988][T16276] RAX: ffffffffffffffda RBX: 00007f73fcdb5fa0 RCX: 00007f73fcb8eb69 [ 350.761004][T16276] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 350.761018][T16276] RBP: 00007f73fda37090 R08: 0000000000000000 R09: 0000000000000000 [ 350.761032][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.761045][T16276] R13: 0000000000000000 R14: 00007f73fcdb5fa0 R15: 00007ffd20b8c9c8 [ 350.761078][T16276] [ 350.761698][T16278] netlink: 'syz.3.3261': attribute type 10 has an invalid length. [ 350.793208][T16265] team_slave_1: left promiscuous mode [ 351.054683][T16265] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 351.065640][T16265] batadv0: left promiscuous mode [ 351.098880][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.135425][T16278] veth0_vlan: entered allmulticast mode [ 351.192154][T16278] veth0_vlan: left promiscuous mode [ 351.207666][T16278] veth0_vlan: entered promiscuous mode [ 351.264593][T16278] team0: Device veth0_vlan failed to register rx_handler [ 351.337524][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 351.404372][T16275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.474661][T16288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 351.493060][T16288] tipc: Enabling of bearer rejected, failed to enable media [ 351.511626][T16291] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 351.538806][T16275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.607634][T16291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.624541][T16292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.688406][T16301] FAULT_INJECTION: forcing a failure. [ 351.688406][T16301] name failslab, interval 1, probability 0, space 0, times 0 [ 351.703835][T16301] CPU: 0 UID: 0 PID: 16301 Comm: syz.1.3270 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 351.703868][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.703882][T16301] Call Trace: [ 351.703890][T16301] [ 351.703900][T16301] dump_stack_lvl+0x189/0x250 [ 351.703928][T16301] ? __pfx____ratelimit+0x10/0x10 [ 351.703958][T16301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.703982][T16301] ? __pfx__printk+0x10/0x10 [ 351.704017][T16301] ? __pfx___might_resched+0x10/0x10 [ 351.704048][T16301] ? fs_reclaim_acquire+0x7d/0x100 [ 351.704077][T16301] should_fail_ex+0x414/0x560 [ 351.704118][T16301] should_failslab+0xa8/0x100 [ 351.704141][T16301] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 351.704175][T16301] ? __alloc_skb+0x112/0x2d0 [ 351.704214][T16301] __alloc_skb+0x112/0x2d0 [ 351.704251][T16301] nf_tables_chain_notify+0xa7/0x460 [ 351.704276][T16301] ? kfree+0x18e/0x440 [ 351.704311][T16301] nf_tables_commit+0x5b08/0x8700 [ 351.704364][T16301] ? __pfx_nf_tables_commit+0x10/0x10 [ 351.704387][T16301] ? __pfx_nf_tables_newchain+0x10/0x10 [ 351.704475][T16301] nfnetlink_rcv+0x1a4e/0x2520 [ 351.704541][T16301] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 351.704588][T16301] ? ref_tracker_free+0x63a/0x7d0 [ 351.704644][T16301] ? __netlink_deliver_tap+0x807/0x850 [ 351.704675][T16301] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.704737][T16301] netlink_unicast+0x82c/0x9e0 [ 351.704777][T16301] ? __pfx_netlink_unicast+0x10/0x10 [ 351.704808][T16301] ? netlink_sendmsg+0x642/0xb30 [ 351.704838][T16301] ? skb_put+0x11b/0x210 [ 351.704862][T16301] netlink_sendmsg+0x805/0xb30 [ 351.704906][T16301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.704943][T16301] ? aa_sock_msg_perm+0x94/0x160 [ 351.704974][T16301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.704998][T16301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.705032][T16301] __sock_sendmsg+0x21c/0x270 [ 351.705064][T16301] ____sys_sendmsg+0x505/0x830 [ 351.705093][T16301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.705127][T16301] ? import_iovec+0x74/0xa0 [ 351.705161][T16301] ___sys_sendmsg+0x21f/0x2a0 [ 351.705187][T16301] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.705252][T16301] ? __fget_files+0x2a/0x420 [ 351.705273][T16301] ? __fget_files+0x3a0/0x420 [ 351.705306][T16301] __x64_sys_sendmsg+0x19b/0x260 [ 351.705332][T16301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.705366][T16301] ? __pfx_ksys_write+0x10/0x10 [ 351.705395][T16301] ? rcu_is_watching+0x15/0xb0 [ 351.705435][T16301] ? do_syscall_64+0xbe/0x3b0 [ 351.705471][T16301] do_syscall_64+0xfa/0x3b0 [ 351.705501][T16301] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.705530][T16301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.705551][T16301] ? clear_bhb_loop+0x60/0xb0 [ 351.705578][T16301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.705598][T16301] RIP: 0033:0x7fab8c18eb69 [ 351.705618][T16301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.705637][T16301] RSP: 002b:00007fab8cfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.705661][T16301] RAX: ffffffffffffffda RBX: 00007fab8c3b5fa0 RCX: 00007fab8c18eb69 [ 351.705677][T16301] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 351.705690][T16301] RBP: 00007fab8cfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 351.705714][T16301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.705727][T16301] R13: 0000000000000000 R14: 00007fab8c3b5fa0 R15: 00007ffd1571a528 [ 351.705761][T16301] [ 352.107290][T16297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.126265][T16297] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 352.145070][T16297] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 352.155321][T16304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3271'. [ 352.204593][T16275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.250063][T16302] gretap1: entered promiscuous mode [ 352.272818][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.293917][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.367557][T16275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.397132][T16315] netlink: 'syz.3.3276': attribute type 10 has an invalid length. [ 352.436111][T16315] veth0_vlan: left promiscuous mode [ 352.445025][T16315] veth0_vlan: entered promiscuous mode [ 352.457319][T16315] team0: Device veth0_vlan failed to register rx_handler [ 352.526071][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 352.550334][T16314] bond0: entered promiscuous mode [ 352.557097][T16314] batadv0: entered promiscuous mode [ 352.564079][T16314] debugfs: 'hsr1' already exists in 'hsr' [ 352.571320][T16314] Cannot create hsr debugfs directory [ 352.577385][T16314] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 352.587687][T16314] hsr1: entered allmulticast mode [ 352.593356][T16314] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 352.601317][T16314] bond0: left promiscuous mode [ 352.607165][T16314] batadv0: left promiscuous mode [ 352.664358][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.680873][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.711246][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.774645][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.904368][T16275] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.944313][T16329] tipc: Started in network mode [ 352.949473][T16329] tipc: Node identity e2a042e143c, cluster identity 4711 [ 352.986498][T16329] tipc: Enabled bearer , priority 0 [ 353.020253][T16275] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.050374][T16329] netlink: 'syz.4.3102': attribute type 13 has an invalid length. [ 353.073009][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 353.149738][T16329] netlink: 'syz.4.3102': attribute type 13 has an invalid length. [ 353.151926][T16331] syzkaller0: entered promiscuous mode [ 353.175886][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 353.178800][T16331] syzkaller0: entered allmulticast mode [ 353.293955][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.323502][T16335] tipc: Resetting bearer [ 353.336991][T16328] tipc: Resetting bearer [ 353.403624][T16328] tipc: Disabling bearer [ 353.504943][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.622888][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.639944][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.682967][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.697850][T16352] netlink: 'syz.2.3287': attribute type 10 has an invalid length. [ 353.707822][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.736629][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.757735][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.770518][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.845405][ T3012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.930674][T16358] bond0: entered promiscuous mode [ 353.936296][T16358] bond_slave_0: entered promiscuous mode [ 353.943649][T16358] bond_slave_1: entered promiscuous mode [ 353.953049][T16358] bridge0: entered promiscuous mode [ 353.966129][T16364] FAULT_INJECTION: forcing a failure. [ 353.966129][T16364] name failslab, interval 1, probability 0, space 0, times 0 [ 353.969779][T16358] batadv0: entered promiscuous mode [ 353.979005][T16364] CPU: 1 UID: 0 PID: 16364 Comm: syz.2.3292 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 353.979037][T16364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.979050][T16364] Call Trace: [ 353.979061][T16364] [ 353.979071][T16364] dump_stack_lvl+0x189/0x250 [ 353.979100][T16364] ? __pfx____ratelimit+0x10/0x10 [ 353.979131][T16364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.979153][T16364] ? __pfx__printk+0x10/0x10 [ 353.979193][T16364] ? __pfx___might_resched+0x10/0x10 [ 353.979224][T16364] ? fs_reclaim_acquire+0x7d/0x100 [ 353.979257][T16364] should_fail_ex+0x414/0x560 [ 353.979292][T16364] ? __pfx_sock_alloc_inode+0x10/0x10 [ 353.979325][T16364] should_failslab+0xa8/0x100 [ 353.979350][T16364] ? __pfx_sock_alloc_inode+0x10/0x10 [ 353.979381][T16364] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 353.979418][T16364] ? sock_alloc_inode+0x28/0xc0 [ 353.979454][T16364] ? __pfx_sock_alloc_inode+0x10/0x10 [ 353.979497][T16364] sock_alloc_inode+0x28/0xc0 [ 353.979532][T16364] alloc_inode+0x67/0x1b0 [ 353.979574][T16364] do_accept+0x111/0x680 [ 353.979616][T16364] ? __pfx_do_accept+0x10/0x10 [ 353.979681][T16364] __sys_accept4+0x11c/0x1c0 [ 353.979721][T16364] ? __pfx___sys_accept4+0x10/0x10 [ 353.979757][T16364] ? __pfx_ksys_write+0x10/0x10 [ 353.979788][T16364] ? rcu_is_watching+0x15/0xb0 [ 353.979835][T16364] __x64_sys_accept4+0x9a/0xb0 [ 353.979875][T16364] do_syscall_64+0xfa/0x3b0 [ 353.979910][T16364] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.979944][T16364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.979970][T16364] ? clear_bhb_loop+0x60/0xb0 [ 353.979999][T16364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.980024][T16364] RIP: 0033:0x7f73fcb8eb69 [ 353.980046][T16364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.980067][T16364] RSP: 002b:00007f73fda37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 353.980097][T16364] RAX: ffffffffffffffda RBX: 00007f73fcdb5fa0 RCX: 00007f73fcb8eb69 [ 353.980115][T16364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.980129][T16364] RBP: 00007f73fda37090 R08: 0000000000000000 R09: 0000000000000000 [ 353.980145][T16364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.980158][T16364] R13: 0000000000000000 R14: 00007f73fcdb5fa0 R15: 00007ffd20b8c9c8 [ 353.980198][T16364] [ 354.241982][T16358] debugfs: 'hsr1' already exists in 'hsr' [ 354.248572][T16358] Cannot create hsr debugfs directory [ 354.256329][T16358] hsr1: entered allmulticast mode [ 354.261586][T16358] bond0: entered allmulticast mode [ 354.266883][T16358] bond_slave_0: entered allmulticast mode [ 354.273288][T16358] bond_slave_1: entered allmulticast mode [ 354.279055][T16358] bridge0: entered allmulticast mode [ 354.284539][T16358] batadv0: entered allmulticast mode [ 354.290515][T16358] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 354.299294][T16358] bond0: left promiscuous mode [ 354.306461][T16358] bond_slave_0: left promiscuous mode [ 354.312213][T16358] bond_slave_1: left promiscuous mode [ 354.320548][T16358] bridge0: left promiscuous mode [ 354.329328][T16358] batadv0: left promiscuous mode [ 354.407409][T16376] netlink: 'syz.4.3296': attribute type 13 has an invalid length. [ 354.417811][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 354.436509][ T3012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.462175][T16377] netlink: 'syz.4.3296': attribute type 13 has an invalid length. [ 354.473504][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 354.498465][T16349] vxcan1 speed is unknown, defaulting to 1000 [ 354.594364][ T3012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.696432][ T3012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.907345][T16393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.918074][T16393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.932367][T16393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.937579][T16394] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3301'. [ 354.954300][T16393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.123350][ T3012] bridge_slave_1: left allmulticast mode [ 355.129091][ T3012] bridge_slave_1: left promiscuous mode [ 355.142393][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.172262][ T3012] bridge_slave_0: left allmulticast mode [ 355.181144][ T3012] bridge_slave_0: left promiscuous mode [ 355.189433][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.250681][T16406] netlink: 'syz.4.3307': attribute type 10 has an invalid length. [ 355.833046][ T51] Bluetooth: hci0: command tx timeout [ 356.046337][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.056182][ T3012] bond_slave_0: left allmulticast mode [ 356.067027][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.077941][ T3012] bond_slave_1: left allmulticast mode [ 356.088178][ T3012] bond0 (unregistering): (slave team0): Releasing backup interface [ 356.098123][ T3012] team0: left allmulticast mode [ 356.103567][ T3012] team_slave_0: left allmulticast mode [ 356.109135][ T3012] team_slave_1: left allmulticast mode [ 356.126228][ T3012] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 356.136262][ T3012] bond0 (unregistering): Released all slaves [ 356.151414][ T3012] bond1 (unregistering): Released all slaves [ 356.319976][ T3012] bond2 (unregistering): Released all slaves [ 356.350643][ T3012] bond3 (unregistering): Released all slaves [ 356.496740][ T3012] bond4 (unregistering): Released all slaves [ 356.519332][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 356.528933][T16404] tipc: Enabling of bearer rejected, failed to enable media [ 356.538784][T16406] veth0_vlan: entered allmulticast mode [ 356.565746][T16406] veth0_vlan: left promiscuous mode [ 356.576973][T16406] veth0_vlan: entered promiscuous mode [ 356.601883][T16406] team0: Device veth0_vlan failed to register rx_handler [ 356.676563][T16419] FAULT_INJECTION: forcing a failure. [ 356.676563][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 356.714329][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.2.3312 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 356.714363][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.714377][T16419] Call Trace: [ 356.714386][T16419] [ 356.714395][T16419] dump_stack_lvl+0x189/0x250 [ 356.714424][T16419] ? __pfx____ratelimit+0x10/0x10 [ 356.714455][T16419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.714478][T16419] ? __pfx__printk+0x10/0x10 [ 356.714513][T16419] ? __pfx___might_resched+0x10/0x10 [ 356.714544][T16419] ? fs_reclaim_acquire+0x7d/0x100 [ 356.714573][T16419] should_fail_ex+0x414/0x560 [ 356.714613][T16419] should_failslab+0xa8/0x100 [ 356.714635][T16419] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 356.714667][T16419] ? __d_alloc+0x36/0x7a0 [ 356.714698][T16419] __d_alloc+0x36/0x7a0 [ 356.714728][T16419] d_alloc_pseudo+0x21/0xc0 [ 356.714755][T16419] alloc_file_pseudo+0xcc/0x210 [ 356.714783][T16419] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 356.714806][T16419] ? evm_inode_alloc_security+0x40/0xb0 [ 356.714839][T16419] ? security_inode_alloc+0xd5/0x330 [ 356.714884][T16419] sock_alloc_file+0xb8/0x2e0 [ 356.714916][T16419] do_accept+0x34b/0x680 [ 356.714955][T16419] ? __pfx_do_accept+0x10/0x10 [ 356.715012][T16419] __sys_accept4+0x11c/0x1c0 [ 356.715048][T16419] ? __pfx___sys_accept4+0x10/0x10 [ 356.715079][T16419] ? __pfx_ksys_write+0x10/0x10 [ 356.715108][T16419] ? rcu_is_watching+0x15/0xb0 [ 356.715148][T16419] __x64_sys_accept4+0x9a/0xb0 [ 356.715183][T16419] do_syscall_64+0xfa/0x3b0 [ 356.715213][T16419] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.715245][T16419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.715263][T16419] ? clear_bhb_loop+0x60/0xb0 [ 356.715285][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.715302][T16419] RIP: 0033:0x7f73fcb8eb69 [ 356.715318][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.715335][T16419] RSP: 002b:00007f73fda37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 356.715356][T16419] RAX: ffffffffffffffda RBX: 00007f73fcdb5fa0 RCX: 00007f73fcb8eb69 [ 356.715369][T16419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 356.715380][T16419] RBP: 00007f73fda37090 R08: 0000000000000000 R09: 0000000000000000 [ 356.715390][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.715401][T16419] R13: 0000000000000000 R14: 00007f73fcdb5fa0 R15: 00007ffd20b8c9c8 [ 356.715427][T16419] [ 356.723845][ T3012] tipc: Left network mode [ 357.013888][T16421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3313'. [ 357.058103][T16349] chnl_net:caif_netlink_parms(): no params data found [ 357.205739][T16430] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 357.218342][T16432] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 357.232793][T16430] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 357.328266][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3319'. [ 357.353198][T16437] tc_dump_action: action bad kind [ 357.699329][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'. [ 357.713023][T16454] tipc: Started in network mode [ 357.718044][T16454] tipc: Node identity 0000000000000000000000fc00000001, cluster identity 4711 [ 357.728451][T16454] tipc: Enabling of bearer rejected, failed to enable media [ 357.802351][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.811652][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.819917][T16349] bridge_slave_0: entered allmulticast mode [ 357.830533][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 357.835001][T16349] bridge_slave_0: entered promiscuous mode [ 357.868474][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 357.905116][ T51] Bluetooth: hci0: command tx timeout [ 357.910963][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.944736][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.952164][T16349] bridge_slave_1: entered allmulticast mode [ 357.981995][T16349] bridge_slave_1: entered promiscuous mode [ 358.051678][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 358.133549][T16472] bond0: entered promiscuous mode [ 358.138651][T16472] bond_slave_0: entered promiscuous mode [ 358.146372][T16472] bond_slave_1: entered promiscuous mode [ 358.149101][T16475] IPVS: length: 74 != 8 [ 358.216845][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.253759][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.375050][T16488] tc_dump_action: action bad kind [ 358.488158][T16349] team0: Port device team_slave_0 added [ 358.547316][T16349] team0: Port device team_slave_1 added [ 358.780624][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.847169][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.912771][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.929326][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 358.954874][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.961881][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.989000][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.070999][ T3012] hsr_slave_0: left promiscuous mode [ 359.081725][ T3012] hsr_slave_1: left promiscuous mode [ 359.094211][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.101750][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.117869][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.127700][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.147883][ T3012] veth1_macvtap: left promiscuous mode [ 359.153597][ T3012] veth0_macvtap: left promiscuous mode [ 359.269661][ T3012] pimreg3 (unregistering): left allmulticast mode [ 359.598564][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 359.637110][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 359.874929][ T60] smc: removing ib device syz2 [ 359.982635][ T51] Bluetooth: hci0: command tx timeout [ 360.024612][ T3012] lo (unregistering): left allmulticast mode [ 360.211787][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 360.246340][T16539] tipc: Enabling of bearer rejected, failed to enable media [ 360.310695][T16541] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3347'. [ 360.642477][T16349] hsr_slave_0: entered promiscuous mode [ 360.669814][T16349] hsr_slave_1: entered promiscuous mode [ 360.698819][T16349] debugfs: 'hsr0' already exists in 'hsr' [ 360.718845][T16349] Cannot create hsr debugfs directory [ 361.317786][T16571] FAULT_INJECTION: forcing a failure. [ 361.317786][T16571] name failslab, interval 1, probability 0, space 0, times 0 [ 361.337511][T16571] CPU: 0 UID: 0 PID: 16571 Comm: syz.2.3356 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 361.337545][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.337559][T16571] Call Trace: [ 361.337568][T16571] [ 361.337577][T16571] dump_stack_lvl+0x189/0x250 [ 361.337606][T16571] ? __pfx____ratelimit+0x10/0x10 [ 361.337637][T16571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.337660][T16571] ? __pfx__printk+0x10/0x10 [ 361.337694][T16571] ? __pfx___might_resched+0x10/0x10 [ 361.337726][T16571] ? fs_reclaim_acquire+0x7d/0x100 [ 361.337756][T16571] should_fail_ex+0x414/0x560 [ 361.337797][T16571] should_failslab+0xa8/0x100 [ 361.337820][T16571] __kmalloc_cache_noprof+0x70/0x3d0 [ 361.337852][T16571] ? nf_tables_newchain+0xfeb/0x2900 [ 361.337886][T16571] nf_tables_newchain+0xfeb/0x2900 [ 361.337929][T16571] ? __pfx_nf_tables_newchain+0x10/0x10 [ 361.337993][T16571] ? nfnl_pernet+0x23/0x240 [ 361.338033][T16571] ? __nla_parse+0x40/0x60 [ 361.338062][T16571] nfnetlink_rcv+0x112f/0x2520 [ 361.338130][T16571] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 361.338178][T16571] ? ref_tracker_free+0x63a/0x7d0 [ 361.338242][T16571] ? __netlink_deliver_tap+0x807/0x850 [ 361.338275][T16571] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.338329][T16571] netlink_unicast+0x82c/0x9e0 [ 361.338369][T16571] ? __pfx_netlink_unicast+0x10/0x10 [ 361.338402][T16571] ? netlink_sendmsg+0x642/0xb30 [ 361.338432][T16571] ? skb_put+0x11b/0x210 [ 361.338457][T16571] netlink_sendmsg+0x805/0xb30 [ 361.338502][T16571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.338539][T16571] ? aa_sock_msg_perm+0x94/0x160 [ 361.338570][T16571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.338596][T16571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.338630][T16571] __sock_sendmsg+0x21c/0x270 [ 361.338663][T16571] ____sys_sendmsg+0x505/0x830 [ 361.338693][T16571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.338728][T16571] ? import_iovec+0x74/0xa0 [ 361.338763][T16571] ___sys_sendmsg+0x21f/0x2a0 [ 361.338789][T16571] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.338857][T16571] ? __fget_files+0x2a/0x420 [ 361.338877][T16571] ? __fget_files+0x3a0/0x420 [ 361.338911][T16571] __x64_sys_sendmsg+0x19b/0x260 [ 361.338938][T16571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.338979][T16571] ? __pfx_ksys_write+0x10/0x10 [ 361.339008][T16571] ? rcu_is_watching+0x15/0xb0 [ 361.339048][T16571] ? do_syscall_64+0xbe/0x3b0 [ 361.339086][T16571] do_syscall_64+0xfa/0x3b0 [ 361.339115][T16571] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.339146][T16571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.339168][T16571] ? clear_bhb_loop+0x60/0xb0 [ 361.339201][T16571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.339223][T16571] RIP: 0033:0x7f73fcb8eb69 [ 361.339243][T16571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.339261][T16571] RSP: 002b:00007f73fda37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.339286][T16571] RAX: ffffffffffffffda RBX: 00007f73fcdb5fa0 RCX: 00007f73fcb8eb69 [ 361.339302][T16571] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 361.339316][T16571] RBP: 00007f73fda37090 R08: 0000000000000000 R09: 0000000000000000 [ 361.339329][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.339342][T16571] R13: 0000000000000000 R14: 00007f73fcdb5fa0 R15: 00007ffd20b8c9c8 [ 361.339377][T16571] [ 361.698497][T16559] FAULT_INJECTION: forcing a failure. [ 361.698497][T16559] name failslab, interval 1, probability 0, space 0, times 0 [ 361.711500][T16559] CPU: 0 UID: 0 PID: 16559 Comm: syz.4.3351 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 361.711531][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.711545][T16559] Call Trace: [ 361.711553][T16559] [ 361.711562][T16559] dump_stack_lvl+0x189/0x250 [ 361.711590][T16559] ? __pfx____ratelimit+0x10/0x10 [ 361.711622][T16559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.711645][T16559] ? __pfx__printk+0x10/0x10 [ 361.711689][T16559] should_fail_ex+0x414/0x560 [ 361.711730][T16559] should_failslab+0xa8/0x100 [ 361.711753][T16559] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.711787][T16559] ? __alloc_skb+0x112/0x2d0 [ 361.711817][T16559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.711854][T16559] __alloc_skb+0x112/0x2d0 [ 361.711893][T16559] tipc_buf_acquire+0x2b/0xe0 [ 361.711924][T16559] tipc_named_withdraw+0x1db/0x760 [ 361.711963][T16559] tipc_nametbl_withdraw+0xcc/0x280 [ 361.711987][T16559] ? tipc_group_self+0x26/0x1c0 [ 361.712011][T16559] tipc_sk_leave+0x466/0x4e0 [ 361.712048][T16559] ? __pfx_tipc_sk_leave+0x10/0x10 [ 361.712077][T16559] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 361.712123][T16559] tipc_release+0x5fc/0x2160 [ 361.712172][T16559] ? __pfx_tipc_release+0x10/0x10 [ 361.712197][T16559] ? down_write+0x162/0x1f0 [ 361.712218][T16559] ? __pfx_down_write+0x10/0x10 [ 361.712246][T16559] ? do_raw_spin_lock+0x121/0x290 [ 361.712275][T16559] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.712307][T16559] sock_close+0xc3/0x240 [ 361.712335][T16559] ? __pfx_sock_close+0x10/0x10 [ 361.712362][T16559] __fput+0x449/0xa70 [ 361.712402][T16559] task_work_run+0x1d4/0x260 [ 361.712433][T16559] ? __pfx_task_work_run+0x10/0x10 [ 361.712476][T16559] get_signal+0x11ed/0x1340 [ 361.712518][T16559] ? __pfx_task_work_add+0x10/0x10 [ 361.712561][T16559] arch_do_signal_or_restart+0x9a/0x750 [ 361.712601][T16559] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.712652][T16559] ? exit_to_user_mode_loop+0x40/0x110 [ 361.712686][T16559] exit_to_user_mode_loop+0x75/0x110 [ 361.712716][T16559] do_syscall_64+0x2bd/0x3b0 [ 361.712747][T16559] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.712777][T16559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.712798][T16559] ? clear_bhb_loop+0x60/0xb0 [ 361.712825][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.712846][T16559] RIP: 0033:0x7fef5298eb69 [ 361.712867][T16559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.712886][T16559] RSP: 002b:00007fef53859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 361.712911][T16559] RAX: fffffffffffffe00 RBX: 00007fef52bb5fa0 RCX: 00007fef5298eb69 [ 361.712927][T16559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 361.712939][T16559] RBP: 00007fef53859090 R08: 0000000000000000 R09: 0000000000000000 [ 361.712952][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.712965][T16559] R13: 0000000000000000 R14: 00007fef52bb5fa0 R15: 00007fffa2bc3e28 [ 361.712997][T16559] [ 362.013443][T16559] tipc: Withdrawal distribution failure [ 362.072929][ T51] Bluetooth: hci0: command tx timeout [ 362.287459][T16578] __nla_validate_parse: 3 callbacks suppressed [ 362.287482][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 362.326078][T16576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.368695][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 362.630315][T16594] netlink: 'syz.4.3363': attribute type 7 has an invalid length. [ 362.839348][T16600] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3366'. [ 363.005144][T16349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.046214][T16349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.105152][T16349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.127124][T16615] IPv6: Can't replace route, no match found [ 363.135720][T16349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.545616][T16627] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3375'. [ 364.572992][T16627] bond_slave_0: entered promiscuous mode [ 364.579035][T16627] bond_slave_1: entered promiscuous mode [ 364.584910][T16627] bridge0: entered promiscuous mode [ 364.720591][T16635] sctp: [Deprecated]: syz.4.3378 (pid 16635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.720591][T16635] Use struct sctp_sack_info instead [ 364.749467][T16349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.815819][T16349] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.837896][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.845142][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.861729][T16641] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3381'. [ 364.883365][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.890763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.904818][T16644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3381'. [ 364.917759][T16641] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3381'. [ 365.316533][T16349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.400551][T16349] veth0_vlan: entered promiscuous mode [ 365.439890][T16349] veth1_vlan: entered promiscuous mode [ 365.514389][T16349] veth0_macvtap: entered promiscuous mode [ 365.535056][T16349] veth1_macvtap: entered promiscuous mode [ 365.596288][T16349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.624192][T16349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.652144][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.678015][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.740481][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.758582][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.794566][T16676] netlink: 'syz.3.3396': attribute type 11 has an invalid length. [ 365.857807][T16676] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3396'. [ 366.048486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.074284][T16673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.078390][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.170237][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.179936][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.348665][T16698] netlink: 'syz.0.3405': attribute type 5 has an invalid length. [ 366.360916][T16698] netlink: 713 bytes leftover after parsing attributes in process `syz.0.3405'. [ 366.371146][T16698] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.3405'. [ 366.385734][T16700] team0: Device vti0 is of different type [ 366.386200][T16698] netlink: 'syz.0.3405': attribute type 5 has an invalid length. [ 366.511647][T16708] pim6reg1: entered allmulticast mode [ 366.642354][T16704] pim6reg1: left allmulticast mode [ 367.380536][T16729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.454947][T16732] __nla_validate_parse: 2 callbacks suppressed [ 367.454968][T16732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3418'. [ 367.507207][T16732] netlink: 'syz.4.3418': attribute type 10 has an invalid length. [ 367.545412][T16732] geneve1: entered promiscuous mode [ 367.559787][T16732] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 367.575861][T16734] netlink: 'syz.0.3419': attribute type 4 has an invalid length. [ 367.758511][T16738] netlink: 'syz.0.3421': attribute type 4 has an invalid length. [ 367.767497][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3421'. [ 367.806881][ T5161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.820022][ T5161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.832385][ T5161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.844739][ T5161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.853843][ T5161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.241309][T16753] tipc: Enabled bearer , priority 0 [ 368.277976][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3429'. [ 368.506503][T16753] syzkaller0: entered allmulticast mode [ 368.518819][T16750] tipc: Disabling bearer [ 368.542803][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.565763][T16739] chnl_net:caif_netlink_parms(): no params data found [ 368.756395][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3433'. [ 368.766531][T16783] tipc: Enabling of bearer rejected, failed to enable media [ 368.923653][T16787] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 368.936176][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.953788][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.955238][T16786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.961315][T16739] bridge_slave_0: entered allmulticast mode [ 368.979644][T16739] bridge_slave_0: entered promiscuous mode [ 368.993986][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.006835][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 369.016350][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 369.062685][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.080273][T16739] bridge_slave_1: entered allmulticast mode [ 369.101168][T16739] bridge_slave_1: entered promiscuous mode [ 369.228945][T16739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.269586][T16739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.357354][T16802] netlink: 'syz.0.3439': attribute type 1 has an invalid length. [ 369.374648][T16739] team0: Port device team_slave_0 added [ 369.387902][T16739] team0: Port device team_slave_1 added [ 369.421327][T16802] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3439'. [ 369.460760][T16739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.488430][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.518821][T16739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.540249][T16739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.550574][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.581693][T16739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.704144][T16739] hsr_slave_0: entered promiscuous mode [ 369.710826][T16739] hsr_slave_1: entered promiscuous mode [ 369.718794][T16739] debugfs: 'hsr0' already exists in 'hsr' [ 369.724984][T16739] Cannot create hsr debugfs directory [ 369.730704][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3443'. [ 369.740126][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3443'. [ 369.749366][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3443'. [ 369.902795][ T51] Bluetooth: hci1: command tx timeout [ 370.020561][T16739] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.041093][T16739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.125182][T16739] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.136911][T16739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.190731][T16739] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.201131][T16739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.259669][T16739] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.269746][T16739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.983207][ T51] Bluetooth: hci1: command tx timeout [ 374.062765][ T51] Bluetooth: hci1: command tx timeout [ 374.315232][ T95] block nbd0: Possible stuck request ffff8880253fe000: control (read@0,4096B). Runtime 270 seconds [ 376.153169][ T51] Bluetooth: hci1: command tx timeout [ 383.907219][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.727067][ T5161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.740916][ T5161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.749372][ T5161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.759497][ T5161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.772696][ T5161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.781989][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.795976][ T5161] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.806880][ T5161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.815634][ T5161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.825956][ T5161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.056095][T16853] chnl_net:caif_netlink_parms(): no params data found [ 386.191771][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.199475][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.208210][T16853] bridge_slave_0: entered allmulticast mode [ 386.216761][T16853] bridge_slave_0: entered promiscuous mode [ 386.242127][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.249592][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.257459][T16853] bridge_slave_1: entered allmulticast mode [ 386.265679][T16853] bridge_slave_1: entered promiscuous mode [ 386.329055][T16853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.357925][T16853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.383259][T16855] chnl_net:caif_netlink_parms(): no params data found [ 386.418936][T16853] team0: Port device team_slave_0 added [ 386.436786][T16853] team0: Port device team_slave_1 added [ 386.510994][T16853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.518192][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.545238][T16853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.558733][T16853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.565974][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.593191][T16853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.645549][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.653360][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.660948][T16855] bridge_slave_0: entered allmulticast mode [ 386.668647][T16855] bridge_slave_0: entered promiscuous mode [ 386.677947][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.685862][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.693276][T16855] bridge_slave_1: entered allmulticast mode [ 386.700752][T16855] bridge_slave_1: entered promiscuous mode [ 386.776648][T16853] hsr_slave_0: entered promiscuous mode [ 386.784509][T16853] hsr_slave_1: entered promiscuous mode [ 386.790813][T16853] debugfs: 'hsr0' already exists in 'hsr' [ 386.797107][T16853] Cannot create hsr debugfs directory [ 386.829998][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.847175][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.004330][T16855] team0: Port device team_slave_0 added [ 387.019931][T16855] team0: Port device team_slave_1 added [ 387.166665][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.179594][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.185357][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.216658][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.220985][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.226040][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.245534][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.253812][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.255611][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.271332][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.297911][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.426118][T16855] hsr_slave_0: entered promiscuous mode [ 387.433987][T16855] hsr_slave_1: entered promiscuous mode [ 387.440386][T16855] debugfs: 'hsr0' already exists in 'hsr' [ 387.446473][T16855] Cannot create hsr debugfs directory [ 387.822656][ T5844] Bluetooth: hci2: command tx timeout [ 387.902967][ T5844] Bluetooth: hci6: command tx timeout [ 387.926498][T16870] chnl_net:caif_netlink_parms(): no params data found [ 388.102309][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.118876][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.127785][T16870] bridge_slave_0: entered allmulticast mode [ 388.146269][T16870] bridge_slave_0: entered promiscuous mode [ 388.164970][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.172296][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.187201][T16870] bridge_slave_1: entered allmulticast mode [ 388.198175][T16870] bridge_slave_1: entered promiscuous mode [ 388.214291][ T5161] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 388.224747][ T5161] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 388.233754][ T5161] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 388.245296][ T5161] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 388.264937][ T5161] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 388.272427][T16870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.294051][T16870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.343012][T16870] team0: Port device team_slave_0 added [ 388.352315][T16870] team0: Port device team_slave_1 added [ 388.402098][T16870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.409745][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.436206][T16870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.453189][T16870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.461519][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.488280][T16870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.580573][T16870] hsr_slave_0: entered promiscuous mode [ 388.588006][T16870] hsr_slave_1: entered promiscuous mode [ 388.595125][T16870] debugfs: 'hsr0' already exists in 'hsr' [ 388.600887][T16870] Cannot create hsr debugfs directory [ 388.889768][T16879] chnl_net:caif_netlink_parms(): no params data found [ 389.021816][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.031472][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.042795][T16879] bridge_slave_0: entered allmulticast mode [ 389.050803][T16879] bridge_slave_0: entered promiscuous mode [ 389.060475][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.067839][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.076243][T16879] bridge_slave_1: entered allmulticast mode [ 389.084158][T16879] bridge_slave_1: entered promiscuous mode [ 389.136113][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.149575][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.194001][T16879] team0: Port device team_slave_0 added [ 389.202365][T16879] team0: Port device team_slave_1 added [ 389.248288][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.255851][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.284379][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.298188][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.305806][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.333274][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.343994][ T5844] Bluetooth: hci7: command tx timeout [ 389.404399][T16879] hsr_slave_0: entered promiscuous mode [ 389.411169][T16879] hsr_slave_1: entered promiscuous mode [ 389.418428][T16879] debugfs: 'hsr0' already exists in 'hsr' [ 389.424323][T16879] Cannot create hsr debugfs directory [ 389.902831][ T5844] Bluetooth: hci2: command tx timeout [ 389.982942][ T5844] Bluetooth: hci6: command tx timeout [ 390.303185][ T5844] Bluetooth: hci8: command tx timeout [ 391.422804][ T5844] Bluetooth: hci7: command tx timeout [ 391.982711][ T5844] Bluetooth: hci2: command tx timeout [ 392.062910][ T5844] Bluetooth: hci6: command tx timeout [ 392.382817][ T5844] Bluetooth: hci8: command tx timeout [ 393.503835][ T5161] Bluetooth: hci7: command tx timeout [ 394.062748][ T5161] Bluetooth: hci2: command tx timeout [ 394.144043][ T5161] Bluetooth: hci6: command tx timeout [ 394.462729][ T5161] Bluetooth: hci8: command tx timeout [ 395.583051][ T5161] Bluetooth: hci7: command tx timeout [ 396.542732][ T5161] Bluetooth: hci8: command tx timeout [ 404.385196][ T95] block nbd0: Possible stuck request ffff8880253fe000: control (read@0,4096B). Runtime 300 seconds [ 427.618056][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 427.627346][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 427.636203][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 427.646672][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 427.655979][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 427.871412][T16889] chnl_net:caif_netlink_parms(): no params data found [ 427.968162][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.975871][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.986254][T16889] bridge_slave_0: entered allmulticast mode [ 427.994366][T16889] bridge_slave_0: entered promiscuous mode [ 428.003589][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.010855][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.018443][T16889] bridge_slave_1: entered allmulticast mode [ 428.026629][T16889] bridge_slave_1: entered promiscuous mode [ 428.066402][T16889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.079506][T16889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.123784][T16889] team0: Port device team_slave_0 added [ 428.132185][T16889] team0: Port device team_slave_1 added [ 428.169812][T16889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.177499][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.204806][T16889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.217779][T16889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.225673][T16889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.252211][T16889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.310509][T16889] hsr_slave_0: entered promiscuous mode [ 428.319079][T16889] hsr_slave_1: entered promiscuous mode [ 428.326112][T16889] debugfs: 'hsr0' already exists in 'hsr' [ 428.331898][T16889] Cannot create hsr debugfs directory [ 429.742981][ T5161] Bluetooth: hci9: command tx timeout [ 431.823127][ T5161] Bluetooth: hci9: command tx timeout [ 433.903428][ T5161] Bluetooth: hci9: command tx timeout [ 434.469870][ T95] block nbd0: Possible stuck request ffff8880253fe000: control (read@0,4096B). Runtime 330 seconds [ 435.982786][ T5161] Bluetooth: hci9: command tx timeout [ 437.192822][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 445.349709][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.330961][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 446.340603][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 446.349095][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 446.357685][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 446.368582][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 446.380536][ T5852] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 446.394741][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 446.403133][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 446.412121][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 446.420950][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 446.757471][T16902] chnl_net:caif_netlink_parms(): no params data found [ 446.832418][T16904] chnl_net:caif_netlink_parms(): no params data found [ 446.924691][T16902] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.933569][T16902] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.941021][T16902] bridge_slave_0: entered allmulticast mode [ 446.949631][T16902] bridge_slave_0: entered promiscuous mode [ 446.969874][T16902] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.979324][T16902] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.994989][T16902] bridge_slave_1: entered allmulticast mode [ 447.014450][T16902] bridge_slave_1: entered promiscuous mode [ 447.218407][T16902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.245005][T16904] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.252205][T16904] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.273465][T16904] bridge_slave_0: entered allmulticast mode [ 447.292364][T16904] bridge_slave_0: entered promiscuous mode [ 447.300397][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 447.305778][T16902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.312001][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 447.325952][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 447.334307][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 447.343249][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 447.368946][T16904] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.376851][T16904] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.384703][T16904] bridge_slave_1: entered allmulticast mode [ 447.393169][T16904] bridge_slave_1: entered promiscuous mode [ 447.422739][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 447.478069][T16904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.497881][T16902] team0: Port device team_slave_0 added [ 447.508146][T16902] team0: Port device team_slave_1 added [ 447.534146][T16904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.607223][T16902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.614902][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.642031][T16902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.656045][T16902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.663495][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.689849][T16902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.704338][T16904] team0: Port device team_slave_0 added [ 447.733842][T16904] team0: Port device team_slave_1 added [ 447.800929][T16904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.808255][T16904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.835077][T16904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.875778][T16904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.883072][T16904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.911238][T16904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.964326][T16902] hsr_slave_0: entered promiscuous mode [ 447.971034][T16902] hsr_slave_1: entered promiscuous mode [ 447.977673][T16902] debugfs: 'hsr0' already exists in 'hsr' [ 447.983970][T16902] Cannot create hsr debugfs directory [ 448.288510][T16904] hsr_slave_0: entered promiscuous mode [ 448.308102][T16904] hsr_slave_1: entered promiscuous mode [ 448.326460][T16904] debugfs: 'hsr0' already exists in 'hsr' [ 448.332270][T16904] Cannot create hsr debugfs directory [ 448.412875][T16919] chnl_net:caif_netlink_parms(): no params data found [ 448.431005][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 448.443015][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 448.461297][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 448.469722][ T5847] Bluetooth: hci11: command tx timeout [ 448.473354][ T5847] Bluetooth: hci10: command tx timeout [ 448.480325][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 448.489032][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 448.734711][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.742000][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.749931][T16919] bridge_slave_0: entered allmulticast mode [ 448.758913][T16919] bridge_slave_0: entered promiscuous mode [ 448.816564][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.824935][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.832309][T16919] bridge_slave_1: entered allmulticast mode [ 448.841319][T16919] bridge_slave_1: entered promiscuous mode [ 448.950693][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.965342][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.060893][T16919] team0: Port device team_slave_0 added [ 449.070811][T16919] team0: Port device team_slave_1 added [ 449.162370][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.171406][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.200291][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.213540][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.220524][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.247192][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.330017][T16919] hsr_slave_0: entered promiscuous mode [ 449.344039][T16919] hsr_slave_1: entered promiscuous mode [ 449.351493][T16919] debugfs: 'hsr0' already exists in 'hsr' [ 449.359923][T16919] Cannot create hsr debugfs directory [ 449.422749][ T51] Bluetooth: hci12: command tx timeout [ 449.569013][T16926] chnl_net:caif_netlink_parms(): no params data found [ 449.805225][T16926] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.812916][T16926] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.820393][T16926] bridge_slave_0: entered allmulticast mode [ 449.829024][T16926] bridge_slave_0: entered promiscuous mode [ 449.852244][T16926] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.859756][T16926] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.867398][T16926] bridge_slave_1: entered allmulticast mode [ 449.876169][T16926] bridge_slave_1: entered promiscuous mode [ 449.949982][T16926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.965328][T16926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.025249][T16926] team0: Port device team_slave_0 added [ 450.048116][T16926] team0: Port device team_slave_1 added [ 450.112119][T16926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.119804][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.147105][T16926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.180527][T16926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.188553][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.216361][T16926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.278614][T16926] hsr_slave_0: entered promiscuous mode [ 450.286229][T16926] hsr_slave_1: entered promiscuous mode [ 450.292899][T16926] debugfs: 'hsr0' already exists in 'hsr' [ 450.298781][T16926] Cannot create hsr debugfs directory [ 450.465639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.543012][ T51] Bluetooth: hci10: command tx timeout [ 450.545007][ T5844] Bluetooth: hci13: command tx timeout [ 450.548562][ T5847] Bluetooth: hci11: command tx timeout [ 451.502708][ T51] Bluetooth: hci12: command tx timeout [ 452.622853][ T51] Bluetooth: hci10: command tx timeout [ 452.623123][ T5847] Bluetooth: hci11: command tx timeout [ 452.628528][ T5844] Bluetooth: hci13: command tx timeout [ 453.584496][ T51] Bluetooth: hci12: command tx timeout [ 454.703095][ T51] Bluetooth: hci11: command tx timeout [ 454.703262][ T5844] Bluetooth: hci10: command tx timeout [ 454.709160][ T5847] Bluetooth: hci13: command tx timeout [ 455.662956][ T51] Bluetooth: hci12: command tx timeout [ 456.783321][ T51] Bluetooth: hci13: command tx timeout [ 457.664184][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 464.547752][ T95] block nbd0: Possible stuck request ffff8880253fe000: control (read@0,4096B). Runtime 360 seconds [ 478.143140][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 487.709382][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 487.718429][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 487.727084][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 487.735526][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 487.745315][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 487.964234][T16939] chnl_net:caif_netlink_parms(): no params data found [ 488.071900][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.079324][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.087030][T16939] bridge_slave_0: entered allmulticast mode [ 488.097442][T16939] bridge_slave_0: entered promiscuous mode [ 488.107019][T16939] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.114456][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.121787][T16939] bridge_slave_1: entered allmulticast mode [ 488.130180][T16939] bridge_slave_1: entered promiscuous mode [ 488.176583][T16939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.190638][T16939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.240779][T16939] team0: Port device team_slave_0 added [ 488.250169][T16939] team0: Port device team_slave_1 added [ 488.294007][T16939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.302048][T16939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.328879][T16939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.342274][T16939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.349970][T16939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.377140][T16939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.443099][T16939] hsr_slave_0: entered promiscuous mode [ 488.449836][T16939] hsr_slave_1: entered promiscuous mode [ 488.457096][T16939] debugfs: 'hsr0' already exists in 'hsr' [ 488.463312][T16939] Cannot create hsr debugfs directory [ 489.832624][ T51] Bluetooth: hci14: command tx timeout [ 491.903561][ T5844] Bluetooth: hci14: command tx timeout [ 493.503606][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 493.982938][ T51] Bluetooth: hci14: command tx timeout [ 494.625127][ T95] block nbd0: Possible stuck request ffff8880253fe000: control (read@0,4096B). Runtime 390 seconds [ 496.063197][ T51] Bluetooth: hci14: command tx timeout [ 506.414784][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 506.425093][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 506.434188][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 506.445743][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 506.446777][ T5852] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 506.456367][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 506.466890][ T5852] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 506.477599][ T5844] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 506.489665][ T5844] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 506.497728][ T5844] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 506.781723][T16949] chnl_net:caif_netlink_parms(): no params data found [ 506.793997][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 506.800200][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.966913][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.974569][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.982040][T16949] bridge_slave_0: entered allmulticast mode [ 506.990893][T16949] bridge_slave_0: entered promiscuous mode [ 507.030969][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.047060][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.054861][T16949] bridge_slave_1: entered allmulticast mode [ 507.063308][T16949] bridge_slave_1: entered promiscuous mode [ 507.145799][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.159305][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.247706][T16949] team0: Port device team_slave_0 added [ 507.266842][T16949] team0: Port device team_slave_1 added [ 507.284122][T16951] chnl_net:caif_netlink_parms(): no params data found [ 507.496605][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 507.506285][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 507.515381][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 507.524349][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.531342][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.534531][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 507.567537][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.580513][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 507.634632][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.641654][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.669546][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.720439][T16951] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.728254][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.736868][T16951] bridge_slave_0: entered allmulticast mode [ 507.745075][T16951] bridge_slave_0: entered promiscuous mode [ 507.765332][T16951] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.772664][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.779977][T16951] bridge_slave_1: entered allmulticast mode [ 507.788359][T16951] bridge_slave_1: entered promiscuous mode [ 507.875086][T16949] hsr_slave_0: entered promiscuous mode [ 507.882051][T16949] hsr_slave_1: entered promiscuous mode [ 507.888738][T16949] debugfs: 'hsr0' already exists in 'hsr' [ 507.894575][T16949] Cannot create hsr debugfs directory [ 507.906484][T16951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.921205][T16951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.009007][T16951] team0: Port device team_slave_0 added [ 508.046944][T16951] team0: Port device team_slave_1 added [ 508.119774][T16951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.127685][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.155024][T16951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.169602][T16951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.177059][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.203706][T16951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.321056][T16951] hsr_slave_0: entered promiscuous mode [ 508.328670][T16951] hsr_slave_1: entered promiscuous mode [ 508.335498][T16951] debugfs: 'hsr0' already exists in 'hsr' [ 508.341463][T16951] Cannot create hsr debugfs directory [ 508.542719][ T51] Bluetooth: hci15: command tx timeout [ 508.549452][ T5852] Bluetooth: hci16: command tx timeout [ 508.844030][ T5852] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 508.854016][ T5852] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 508.862739][ T5852] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 508.872667][ T5161] Bluetooth: hci2: command 0x0406 tx timeout [ 508.873786][ T5852] Bluetooth: hci6: command 0x0406 tx timeout [ 508.894255][ T5852] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 508.903403][ T5852] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 509.043250][T16963] chnl_net:caif_netlink_parms(): no params data found [ 509.250839][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.258857][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.267073][T16963] bridge_slave_0: entered allmulticast mode [ 509.275818][T16963] bridge_slave_0: entered promiscuous mode [ 509.304976][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.312306][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.320324][T16963] bridge_slave_1: entered allmulticast mode [ 509.330515][T16963] bridge_slave_1: entered promiscuous mode [ 509.430382][T16963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.481705][T16963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.546166][T16963] team0: Port device team_slave_0 added [ 509.590340][T16963] team0: Port device team_slave_1 added [ 509.663754][ T5852] Bluetooth: hci17: command tx timeout [ 509.702533][T16963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.709554][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.737076][T16963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.751032][T16963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.758576][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.785085][T16963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.880396][T16963] hsr_slave_0: entered promiscuous mode [ 509.888647][T16963] hsr_slave_1: entered promiscuous mode [ 509.896586][T16963] debugfs: 'hsr0' already exists in 'hsr' [ 509.903915][T16963] Cannot create hsr debugfs directory [ 509.919017][T16973] chnl_net:caif_netlink_parms(): no params data found [ 510.231168][T16973] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.239372][T16973] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.247649][T16973] bridge_slave_0: entered allmulticast mode [ 510.256719][T16973] bridge_slave_0: entered promiscuous mode [ 510.283012][T16973] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.290313][T16973] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.298087][T16973] bridge_slave_1: entered allmulticast mode [ 510.306606][T16973] bridge_slave_1: entered promiscuous mode [ 510.365420][T16973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.379856][T16973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.447099][T16973] team0: Port device team_slave_0 added [ 510.483835][T16973] team0: Port device team_slave_1 added [ 510.545297][T16973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.552389][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.580911][T16973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.595082][T16973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.602173][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.634647][T16973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.642984][ T5852] Bluetooth: hci15: command tx timeout [ 510.645462][ T51] Bluetooth: hci16: command tx timeout [ 510.736027][T16973] hsr_slave_0: entered promiscuous mode [ 510.746518][T16973] hsr_slave_1: entered promiscuous mode [ 510.753435][T16973] debugfs: 'hsr0' already exists in 'hsr' [ 510.759212][T16973] Cannot create hsr debugfs directory [ 510.942951][ T51] Bluetooth: hci18: command tx timeout [ 511.743023][ T51] Bluetooth: hci17: command tx timeout [ 512.702678][ T5847] Bluetooth: hci15: command tx timeout [ 512.712938][ T5847] Bluetooth: hci16: command tx timeout [ 513.022945][ T5847] Bluetooth: hci18: command tx timeout [ 513.822914][ T5847] Bluetooth: hci17: command tx timeout [ 513.829441][ T31] INFO: task syz-executor:16739 blocked for more than 143 seconds. [ 513.837632][ T31] Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 [ 513.845050][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.854091][ T31] task:syz-executor state:D stack:22632 pid:16739 tgid:16739 ppid:1 task_flags:0x400140 flags:0x00004004 [ 513.866161][ T31] Call Trace: [ 513.869566][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.872674][ T31] __schedule+0x1737/0x4d30 [ 513.877426][ T31] ? __kernel_text_address+0xd/0x40 [ 513.883145][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.888065][ T31] ? schedule+0x165/0x360 [ 513.892712][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.898337][ T31] ? __pfx___schedule+0x10/0x10 [ 513.903744][ T31] ? schedule+0x91/0x360 [ 513.908144][ T31] schedule+0x165/0x360 [ 513.912359][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.918162][ T31] __mutex_lock+0x7e3/0x1340 [ 513.923184][ T31] ? __mutex_lock+0x5b6/0x1340 [ 513.928011][ T31] ? genl_rcv_msg+0x10d/0x790 [ 513.932825][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.937912][ T31] ? stack_trace_save+0x9c/0xe0 [ 513.943433][ T31] ? radix_tree_lookup+0x240/0x290 [ 513.948599][ T31] genl_rcv_msg+0x10d/0x790 [ 513.963260][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.968297][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.985659][ T5844] Bluetooth: hci8: command 0x0406 tx timeout [ 513.991867][ T5847] Bluetooth: hci7: command 0x0406 tx timeout [ 513.999326][ T31] netlink_rcv_skb+0x205/0x470 [ 514.004990][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.010004][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.015527][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.020901][ T31] ? down_read+0x1ad/0x2e0 [ 514.025776][ T31] genl_rcv+0x28/0x40 [ 514.029843][ T31] netlink_unicast+0x82c/0x9e0 [ 514.035020][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 514.040398][ T31] ? netlink_sendmsg+0x642/0xb30 [ 514.045745][ T31] ? skb_put+0x11b/0x210 [ 514.050127][ T31] netlink_sendmsg+0x805/0xb30 [ 514.055335][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.060691][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 514.066512][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.071878][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.077879][ T31] __sock_sendmsg+0x21c/0x270 [ 514.083003][ T31] __sys_sendto+0x3bd/0x520 [ 514.087675][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 514.093349][ T31] ? fd_install+0x97/0x540 [ 514.097826][ T31] ? fd_install+0x30d/0x540 [ 514.103789][ T31] __x64_sys_sendto+0xde/0x100 [ 514.108630][ T31] do_syscall_64+0xfa/0x3b0 [ 514.113835][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.119948][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 514.126665][ T31] ? clear_bhb_loop+0x60/0xb0 [ 514.131403][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.138729][ T31] RIP: 0033:0x7fa8999909fc [ 514.144242][ T31] RSP: 002b:00007ffe0b1c37a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 514.153115][ T31] RAX: ffffffffffffffda RBX: 00007fa89a6e4620 RCX: 00007fa8999909fc [ 514.161151][ T31] RDX: 0000000000000020 RSI: 00007fa89a6e4670 RDI: 0000000000000005 [ 514.169263][ T31] RBP: 0000000000000000 R08: 00007ffe0b1c37f4 R09: 000000000000000c [ 514.177573][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 514.185694][ T31] R13: 00007ffe0b1c3848 R14: 00007fa89a6e4670 R15: 0000000000000000 [ 514.194041][ T31] [ 514.197683][ T31] INFO: task syz.0.3441:16809 blocked for more than 143 seconds. [ 514.206813][ T31] Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 [ 514.215348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.241068][ T31] task:syz.0.3441 state:D stack:24744 pid:16809 tgid:16807 ppid:15440 task_flags:0x480140 flags:0x00004004 [ 514.253670][ T31] Call Trace: [ 514.256983][ T31] [ 514.259949][ T31] __schedule+0x1737/0x4d30 [ 514.264973][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.269945][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.275272][ T31] ? schedule+0x165/0x360 [ 514.279649][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.284807][ T31] ? __pfx___schedule+0x10/0x10 [ 514.289727][ T31] ? schedule+0x91/0x360 [ 514.294088][ T31] schedule+0x165/0x360 [ 514.298369][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 514.305304][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 514.311543][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 514.317914][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 514.324115][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 514.330435][ T31] ? nbd_set_size+0x2ab/0x6a0 [ 514.335524][ T31] nbd_set_size+0x47e/0x6a0 [ 514.340096][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 514.345302][ T31] ? nla_memcpy+0x5b/0xc0 [ 514.349693][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 514.354824][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 514.360331][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 514.366439][ T31] ? bpf_lsm_capable+0x9/0x20 [ 514.371171][ T31] ? security_capable+0x7e/0x2e0 [ 514.376261][ T31] ? radix_tree_lookup+0x240/0x290 [ 514.381425][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 514.386986][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 514.392987][ T31] ? __nla_parse+0x40/0x60 [ 514.397796][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 514.404298][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 514.410834][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 514.417063][ T31] ? stack_trace_save+0x9c/0xe0 [ 514.421952][ T31] genl_rcv_msg+0x60e/0x790 [ 514.426610][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.431676][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 514.437671][ T31] netlink_rcv_skb+0x205/0x470 [ 514.442928][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.448010][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.453176][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.458544][ T31] ? down_read+0x1ad/0x2e0 [ 514.463551][ T31] genl_rcv+0x28/0x40 [ 514.467588][ T31] netlink_unicast+0x82c/0x9e0 [ 514.472621][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 514.477970][ T31] ? netlink_sendmsg+0x642/0xb30 [ 514.483023][ T31] ? skb_put+0x11b/0x210 [ 514.487307][ T31] netlink_sendmsg+0x805/0xb30 [ 514.492221][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.498136][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 514.503506][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.508830][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.515528][ T31] __sock_sendmsg+0x21c/0x270 [ 514.520268][ T31] ____sys_sendmsg+0x505/0x830 [ 514.525560][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.530890][ T31] ? import_iovec+0x74/0xa0 [ 514.535935][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 514.540697][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.546695][ T31] ? __fget_files+0x2a/0x420 [ 514.551344][ T31] ? __fget_files+0x3a0/0x420 [ 514.557856][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 514.563236][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.568774][ T31] ? rcu_is_watching+0x15/0xb0 [ 514.574029][ T31] ? do_syscall_64+0xbe/0x3b0 [ 514.578764][ T31] do_syscall_64+0xfa/0x3b0 [ 514.583398][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.588758][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.595098][ T31] ? clear_bhb_loop+0x60/0xb0 [ 514.599826][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.605830][ T31] RIP: 0033:0x7fc0f4b8eb69 [ 514.610279][ T31] RSP: 002b:00007fc0f5a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.619816][ T31] RAX: ffffffffffffffda RBX: 00007fc0f4db5fa0 RCX: 00007fc0f4b8eb69 [ 514.629128][ T31] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004 [ 514.637464][ T31] RBP: 00007fc0f4c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 514.645616][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.653747][ T31] R13: 0000000000000000 R14: 00007fc0f4db5fa0 R15: 00007ffd116a7e78 [ 514.661795][ T31] [ 514.665264][ T31] INFO: task syz.1.3442:16811 blocked for more than 144 seconds. [ 514.674863][ T31] Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 [ 514.682209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.691027][ T31] task:syz.1.3442 state:D stack:26088 pid:16811 tgid:16810 ppid:16349 task_flags:0x400140 flags:0x00004004 [ 514.703171][ T31] Call Trace: [ 514.706536][ T31] [ 514.709572][ T31] __schedule+0x1737/0x4d30 [ 514.715851][ T31] ? arch_stack_walk+0xfc/0x150 [ 514.720784][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.725843][ T31] ? schedule+0x165/0x360 [ 514.730231][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.735626][ T31] ? __pfx___schedule+0x10/0x10 [ 514.740568][ T31] ? schedule+0x91/0x360 [ 514.745117][ T31] schedule+0x165/0x360 [ 514.749316][ T31] schedule_preempt_disabled+0x13/0x30 [ 514.754955][ T31] __mutex_lock+0x7e3/0x1340 [ 514.759689][ T31] ? __mutex_lock+0x5b6/0x1340 [ 514.764649][ T31] ? genl_rcv_msg+0x10d/0x790 [ 514.769452][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 514.774995][ T31] ? stack_trace_save+0x9c/0xe0 [ 514.779894][ T31] ? radix_tree_lookup+0x240/0x290 [ 514.785418][ T51] Bluetooth: hci16: command tx timeout [ 514.785613][ T5847] Bluetooth: hci15: command tx timeout [ 514.796603][ T31] genl_rcv_msg+0x10d/0x790 [ 514.801169][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.806153][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.811234][ T31] netlink_rcv_skb+0x205/0x470 [ 514.816141][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.821602][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.826829][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.832176][ T31] ? down_read+0x1ad/0x2e0 [ 514.836763][ T31] genl_rcv+0x28/0x40 [ 514.840788][ T31] netlink_unicast+0x82c/0x9e0 [ 514.845713][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 514.851054][ T31] ? netlink_sendmsg+0x642/0xb30 [ 514.856122][ T31] ? skb_put+0x11b/0x210 [ 514.860404][ T31] netlink_sendmsg+0x805/0xb30 [ 514.865674][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.871014][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 514.876125][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.881458][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.887203][ T31] __sock_sendmsg+0x21c/0x270 [ 514.891952][ T31] __sys_sendto+0x3bd/0x520 [ 514.896594][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 514.901678][ T31] ? count_memcg_event_mm+0x21/0x260 [ 514.907333][ T31] ? exc_page_fault+0x76/0xf0 [ 514.912061][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 514.917573][ T31] __x64_sys_sendto+0xde/0x100 [ 514.923272][ T31] do_syscall_64+0xfa/0x3b0 [ 514.927872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.933207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.939319][ T31] ? clear_bhb_loop+0x60/0xb0 [ 514.944252][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.950196][ T31] RIP: 0033:0x7fb2e3d909fc [ 514.954756][ T31] RSP: 002b:00007fb2e1bf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 514.963308][ T31] RAX: ffffffffffffffda RBX: 00007fb2e1bf4fc0 RCX: 00007fb2e3d909fc [ 514.971316][ T31] RDX: 000000000000001c RSI: 00007fb2e1bf5010 RDI: 0000000000000004 [ 514.979445][ T31] RBP: 0000000000000000 R08: 00007fb2e1bf4f14 R09: 000000000000000c [ 514.987650][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 514.996029][ T31] R13: 00007fb2e1bf4f68 R14: 00007fb2e1bf5010 R15: 0000000000000000 [ 515.004153][ T31] [ 515.007238][ T31] INFO: task syz.1.3442:16815 blocked for more than 144 seconds. [ 515.015153][ T31] Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 [ 515.023907][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.032845][ T31] task:syz.1.3442 state:D stack:25896 pid:16815 tgid:16810 ppid:16349 task_flags:0x400140 flags:0x00004004 [ 515.044896][ T31] Call Trace: [ 515.048183][ T31] [ 515.051122][ T31] __schedule+0x1737/0x4d30 [ 515.055769][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.060677][ T31] ? schedule+0x165/0x360 [ 515.065346][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.070247][ T31] ? __pfx___schedule+0x10/0x10 [ 515.075286][ T31] ? schedule+0x91/0x360 [ 515.079603][ T31] schedule+0x165/0x360 [ 515.083876][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.089466][ T31] __mutex_lock+0x7e3/0x1340 [ 515.094187][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 515.099337][ T31] ? __mutex_lock+0x5b6/0x1340 [ 515.104650][ T5847] Bluetooth: hci18: command tx timeout [ 515.108056][ T31] ? genl_rcv_msg+0x10d/0x790 [ 515.117178][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.122409][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 515.128941][ T31] ? radix_tree_lookup+0x240/0x290 [ 515.135409][ T31] genl_rcv_msg+0x10d/0x790 [ 515.139986][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.145780][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 515.151082][ T31] ? __asan_memcpy+0x40/0x70 [ 515.156971][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 515.162638][ T31] netlink_rcv_skb+0x205/0x470 [ 515.167457][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.172368][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.178090][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.184243][ T31] ? down_read+0x1ad/0x2e0 [ 515.188790][ T31] genl_rcv+0x28/0x40 [ 515.192918][ T31] netlink_unicast+0x82c/0x9e0 [ 515.197781][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 515.203518][ T31] ? netlink_sendmsg+0x642/0xb30 [ 515.208517][ T31] ? skb_put+0x11b/0x210 [ 515.212870][ T31] netlink_sendmsg+0x805/0xb30 [ 515.217694][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.224159][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 515.230352][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.236096][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.241451][ T31] __sock_sendmsg+0x21c/0x270 [ 515.246536][ T31] __sys_sendto+0x3bd/0x520 [ 515.251101][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 515.256374][ T31] ? fd_install+0x97/0x540 [ 515.260848][ T31] ? fd_install+0x30d/0x540 [ 515.265718][ T31] __x64_sys_sendto+0xde/0x100 [ 515.270554][ T31] do_syscall_64+0xfa/0x3b0 [ 515.275259][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.280521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.286826][ T31] ? clear_bhb_loop+0x60/0xb0 [ 515.291545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.297671][ T31] RIP: 0033:0x7fb2e3d909fc [ 515.302111][ T31] RSP: 002b:00007fb2e1bb2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 515.310626][ T31] RAX: ffffffffffffffda RBX: 00007fb2e1bb2fc0 RCX: 00007fb2e3d909fc [ 515.318796][ T31] RDX: 0000000000000020 RSI: 00007fb2e1bb3010 RDI: 000000000000000d [ 515.327192][ T31] RBP: 0000000000000000 R08: 00007fb2e1bb2f14 R09: 000000000000000c [ 515.336120][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 515.344381][ T31] R13: 00007fb2e1bb2f68 R14: 00007fb2e1bb3010 R15: 0000000000000000 [ 515.352406][ T31] [ 515.355721][ T31] [ 515.355721][ T31] Showing all locks held in the system: [ 515.363762][ T31] 1 lock held by ksoftirqd/0/15: [ 515.368895][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 515.379028][ T31] 1 lock held by khungtaskd/31: [ 515.384093][ T31] #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.394546][ T31] 2 locks held by kworker/u8:4/60: [ 515.400909][ T31] #0: ffff8880b8739f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 515.411094][ T31] #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 515.421765][ T31] 2 locks held by getty/5598: [ 515.426747][ T31] #0: ffff888034a700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.438122][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 515.448545][ T31] 1 lock held by udevd/6008: [ 515.453218][ T31] #0: ffff88802530e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 515.462809][ T31] 2 locks held by syz-executor/16739: [ 515.468214][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.476570][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.485786][ T31] 6 locks held by syz.0.3441/16809: [ 515.491024][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.499382][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.509116][ T31] #2: ffff888025312230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 515.519674][ T31] #3: ffff888142b95f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 515.529342][ T31] #4: ffff888142b958f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 515.542243][ T31] #5: ffff888142b95930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 515.554869][ T31] 2 locks held by syz.1.3442/16811: [ 515.560090][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.568471][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.577642][ T31] 2 locks held by syz.1.3442/16815: [ 515.582962][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.591190][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.600338][ T31] 2 locks held by syz.3.3450/16832: [ 515.605656][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.614605][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.624726][ T31] 2 locks held by syz.4.3455/16845: [ 515.629970][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.639308][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.648510][ T31] 2 locks held by syz-executor/16853: [ 515.653967][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.662300][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.672257][ T31] 2 locks held by syz-executor/16855: [ 515.677895][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.686332][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.695625][ T31] 2 locks held by syz-executor/16870: [ 515.701029][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.709591][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.718843][ T31] 2 locks held by syz-executor/16879: [ 515.724378][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.734608][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.745094][ T31] 2 locks held by syz-executor/16889: [ 515.750520][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.759114][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.768324][ T31] 2 locks held by syz-executor/16902: [ 515.774088][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.782339][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.791421][ T31] 2 locks held by syz-executor/16904: [ 515.796913][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.805327][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.814475][ T31] 2 locks held by syz-executor/16919: [ 515.819869][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.828320][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.837891][ T31] 2 locks held by syz-executor/16926: [ 515.844101][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.852367][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.861511][ T31] 2 locks held by syz-executor/16939: [ 515.866960][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.875397][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.884817][ T31] 2 locks held by syz-executor/16949: [ 515.890260][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.898640][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.907858][ T5852] Bluetooth: hci17: command tx timeout [ 515.914566][ T31] 2 locks held by syz-executor/16951: [ 515.920075][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.929832][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.939018][ T31] 2 locks held by syz-executor/16963: [ 515.945672][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.954106][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.963267][ T31] 2 locks held by syz-executor/16973: [ 515.968707][ T31] #0: ffffffff8f56e570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 515.977571][ T31] #1: ffffffff8f56e388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 515.986930][ T31] [ 515.989286][ T31] ============================================= [ 515.989286][ T31] [ 515.998389][ T31] NMI backtrace for cpu 0 [ 515.998413][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 515.998439][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.998452][ T31] Call Trace: [ 515.998461][ T31] [ 515.998470][ T31] dump_stack_lvl+0x189/0x250 [ 515.998501][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.998523][ T31] ? __pfx__printk+0x10/0x10 [ 515.998564][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 515.998595][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 515.998624][ T31] ? __pfx__printk+0x10/0x10 [ 515.998656][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 515.998691][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 515.998720][ T31] watchdog+0xf93/0xfe0 [ 515.998755][ T31] ? watchdog+0x1de/0xfe0 [ 515.998801][ T31] kthread+0x70e/0x8a0 [ 515.998829][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.998857][ T31] ? __pfx_kthread+0x10/0x10 [ 515.998884][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.998911][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.998939][ T31] ? __pfx_kthread+0x10/0x10 [ 515.998965][ T31] ret_from_fork+0x3fc/0x770 [ 515.999000][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.999040][ T31] ? __switch_to_asm+0x39/0x70 [ 515.999063][ T31] ? __switch_to_asm+0x33/0x70 [ 515.999086][ T31] ? __pfx_kthread+0x10/0x10 [ 515.999111][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.999153][ T31] [ 515.999161][ T31] Sending NMI from CPU 0 to CPUs 1: [ 516.152681][ C1] NMI backtrace for cpu 1 [ 516.152700][ C1] CPU: 1 UID: 0 PID: 3035 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 516.152723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.152736][ C1] Workqueue: bat_events batadv_nc_worker [ 516.152765][ C1] RIP: 0010:kasan_check_range+0x1d/0x2c0 [ 516.152785][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 <49> 39 f8 0f 82 82 02 00 00 49 b9 00 00 00 00 00 80 ff ff eb 11 cc [ 516.152802][ C1] RSP: 0018:ffffc90000a08ab0 EFLAGS: 00000002 [ 516.152818][ C1] RAX: ffffffff818ace01 RBX: ffff888033d357e0 RCX: ffffffff818acf03 [ 516.152831][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888033d357e0 [ 516.152843][ C1] RBP: 1ffff11029875538 R08: ffff888033d357e8 R09: 1ffffffff2541188 [ 516.152857][ C1] R10: dffffc0000000000 R11: fffffbfff2541189 R12: dffffc0000000000 [ 516.152871][ C1] R13: ffff88802f85ec00 R14: dffffc0000000000 R15: ffffffff8db9ecd8 [ 516.152885][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 516.152900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.152912][ C1] CR2: 0000560727ca9168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 516.152928][ C1] Call Trace: [ 516.152935][ C1] [ 516.152945][ C1] get_work_pool+0x23/0x180 [ 516.152969][ C1] __queue_work+0x5ab/0xfe0 [ 516.152987][ C1] ? __queue_work+0x103/0xfe0 [ 516.153007][ C1] call_timer_fn+0x17e/0x5f0 [ 516.153032][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 516.153049][ C1] ? call_timer_fn+0xbe/0x5f0 [ 516.153072][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 516.153102][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 516.153123][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 516.153142][ C1] __run_timer_base+0x646/0x860 [ 516.153163][ C1] ? ktime_get+0x3e/0x1f0 [ 516.153189][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 516.153209][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 516.153239][ C1] run_timer_softirq+0xb7/0x180 [ 516.153262][ C1] handle_softirqs+0x283/0x870 [ 516.153291][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 516.153321][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 516.153351][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 516.153375][ C1] __irq_exit_rcu+0xca/0x1f0 [ 516.153403][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 516.153435][ C1] irq_exit_rcu+0x9/0x30 [ 516.153460][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 516.153485][ C1] [ 516.153491][ C1] [ 516.153498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.153517][ C1] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 516.153545][ C1] Code: 8c f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 a0 09 e3 8b <48> c7 c6 e0 09 e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 516.153561][ C1] RSP: 0018:ffffc9000b71f958 EFLAGS: 00000283 [ 516.153576][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 516.153587][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8be309a0 [ 516.153598][ C1] RBP: ffffffff8b3d6e92 R08: 0000000000000000 R09: 0000000000000000 [ 516.153610][ C1] R10: dffffc0000000000 R11: ffffffff8b3d6dc0 R12: 0000000000000002 [ 516.153628][ C1] R13: ffffffff8e13c4e0 R14: 0000000000000000 R15: 0000000000000000 [ 516.153641][ C1] ? batadv_nc_worker+0xd2/0x610 [ 516.153662][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 516.153690][ C1] rcu_is_watching+0x15/0xb0 [ 516.153718][ C1] lock_acquire+0x5f/0x360 [ 516.153747][ C1] ? batadv_nc_worker+0xd2/0x610 [ 516.153770][ C1] ? batadv_nc_worker+0xd2/0x610 [ 516.153793][ C1] batadv_nc_worker+0xef/0x610 [ 516.153814][ C1] ? batadv_nc_worker+0xd2/0x610 [ 516.153837][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 516.153866][ C1] process_scheduled_works+0xae1/0x17b0 [ 516.153909][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.153947][ C1] worker_thread+0x8a0/0xda0 [ 516.153976][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.154006][ C1] ? __kthread_parkme+0x7b/0x200 [ 516.154029][ C1] kthread+0x70e/0x8a0 [ 516.154051][ C1] ? __pfx_worker_thread+0x10/0x10 [ 516.154078][ C1] ? __pfx_kthread+0x10/0x10 [ 516.154099][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.154122][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.154146][ C1] ? __pfx_kthread+0x10/0x10 [ 516.154166][ C1] ret_from_fork+0x3fc/0x770 [ 516.154196][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 516.154227][ C1] ? __switch_to_asm+0x39/0x70 [ 516.154247][ C1] ? __switch_to_asm+0x33/0x70 [ 516.154267][ C1] ? __pfx_kthread+0x10/0x10 [ 516.154287][ C1] ret_from_fork_asm+0x1a/0x30 [ 516.154317][ C1] [ 516.155679][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 516.622576][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 516.634052][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.644119][ T31] Call Trace: [ 516.647410][ T31] [ 516.650357][ T31] dump_stack_lvl+0x99/0x250 [ 516.654963][ T31] ? __asan_memcpy+0x40/0x70 [ 516.659618][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.664921][ T31] ? __pfx__printk+0x10/0x10 [ 516.669564][ T31] panic+0x2db/0x790 [ 516.673479][ T31] ? __pfx_panic+0x10/0x10 [ 516.677929][ T31] ? __pfx___x2apic_send_IPI_mask+0x10/0x10 [ 516.683849][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 516.690022][ T31] watchdog+0xfd2/0xfe0 [ 516.694202][ T31] ? watchdog+0x1de/0xfe0 [ 516.698558][ T31] kthread+0x70e/0x8a0 [ 516.702661][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.707367][ T31] ? __pfx_kthread+0x10/0x10 [ 516.711984][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.717291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.722547][ T31] ? __pfx_kthread+0x10/0x10 [ 516.727154][ T31] ret_from_fork+0x3fc/0x770 [ 516.731767][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.736926][ T31] ? __switch_to_asm+0x39/0x70 [ 516.741703][ T31] ? __switch_to_asm+0x33/0x70 [ 516.746479][ T31] ? __pfx_kthread+0x10/0x10 [ 516.751243][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.756041][ T31] [ 516.759408][ T31] Kernel Offset: disabled [ 516.763751][ T31] Rebooting in 86400 seconds..