last executing test programs: 4m11.269597208s ago: executing program 2 (id=40): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r1, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000000340)=""/213}, {&(0x7f0000000000)=""/82}], 0x246) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='ipvlan1\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r9 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'pim6reg\x00', {0x2, 0x4e21, @local}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000095000103000000000000aa7cbe02eef5efaf375bcdb40c5d"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) splice(r7, 0x0, r11, 0x0, 0x47, 0x0) splice(r5, 0x0, r4, 0x0, 0x7c, 0x8) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r13], 0x30}}, 0x94) r14 = openat$cgroup_devices(r6, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f0000000500)=ANY=[@ANYBLOB="b5b4dae563202a3a2a20776d005ba36ed3636690e9cff7d8494c2a04c68331486c6e0e3f7377d719d378ed3d4d0c8cd6e9587e1e8482a9fd75ca8b3506f410fbe62544b4c6832cd4406f102a540a229c087c0700098e0c1bf48b9e8e20b314c3f7c3138edd4fc8f7fba5a343c24b991c3ea29f25ade529feaee8c51b2b5263b3bcd3639160e2bacf6d97ba895fd0240ca5bc6d121ceccf15ac3707cb993b3c0a05d5034ce0a484804a714899c6d7690720732104e9eae47868400183e860e2cc98e0d83fce52cf683e478b3993435ecf3d5c7651c1b6a8e41c1862d21b187c1fa5730b8659a4c025"], 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 4m10.212504155s ago: executing program 2 (id=49): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050", @ANYRES8=r5], 0x3c}}, 0x10) 4m9.796495468s ago: executing program 1 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x100d}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x6}]}}}]}, 0xffffffffffffff6f}, 0x1, 0x0, 0x0, 0x49040}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@gettfilter={0x74, 0x2e, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0x6, 0x10}, {0xf, 0x7}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040002}, 0x4004440) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @local, 0x3f096d47}, 0x1c) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendto$inet(r2, &(0x7f0000000480)="195d809ec6dfac8d25a3a73c7d1b68e0b75466fcbc24ad2a80a57f81cefe475a", 0x20, 0x40008c0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x314}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000380)="f3", 0x1, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 4m9.480747156s ago: executing program 1 (id=54): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0x80000, 0x7914) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x1c2, 0x8, 0x8}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4m9.135456156s ago: executing program 2 (id=57): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000002c0)=0x6, 0x4) getsockopt(r3, 0x1, 0x2, &(0x7f0000000580)=""/205, &(0x7f0000000140)=0xcd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x4, 0x7f) sendmsg$netlink(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x300, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0x141}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getpeername(r1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000680)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x11, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x47}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@broadcast}, {@remote}, {@private}, {@remote, 0xff7e}, {@multicast2}]}]}}, "f6d562e3e4aa54cd"}}}}}, 0x0) 4m8.938458333s ago: executing program 1 (id=58): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000011c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x0, 0x1, 0x2}, "8a899fa3c2a4b10bd5c5d7a3"}}}}}}, 0x0) 4m8.745664272s ago: executing program 1 (id=61): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000008000a002d0e000008000700090000000800090000000000080002"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0xd8, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8a7e02e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffa}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x356bab19}]}, 0xd8}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="0c00990001fcffff2f0000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB, @ANYRES32, @ANYBLOB="fa99ad685481614ad133c1b741715c9837e26d41596ce3408e001ec99b406dc52249ecdab89ffe8a9968fbd32563a0df76122460122e2dc45dbe54756baaa4400c01ee0cf50a764e87f4816c5358da3054e25b3f0ffe2c95ae4cc6db5568cca2a2212038a59e0f234a5ce8c01ec6250c99be196b178a9b7597a683a6336ea1bda0ed506ed80eb5048fa08388a324ae13e79f532ee9"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="ad918a1b860b3abb103bc5669b488972599224fe9aa52f500c10b5a973a0f24eb1a2669b32666306", 0x28, 0x804, &(0x7f0000000440)={0x11, 0x1a, 0x0, 0x1, 0x54, 0x6, @remote}, 0x14) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="88e0f440033e0705b2dc2a96fe56c10563", @ANYRES16=0x0, @ANYBLOB="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"], 0x49c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) 4m8.605437089s ago: executing program 2 (id=63): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x16, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0xc8}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x800}, @generic={0x9f, 0x2, 0x0, 0x7, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x7, 0x9}, 0x10, 0x2b434, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[r1, r1, 0x1], &(0x7f00000009c0)=[{0x4, 0x4, 0xa, 0x3}, {0x0, 0x4, 0x2, 0x2}, {0x1, 0x1, 0x1, 0x2}, {0x1, 0x2, 0x10, 0x3}, {0x3, 0x4, 0x9, 0xb}], 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000b00)={r2, 0x0, 0xffff, 0xe}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000b40)={0x667, 0x0, 0x9, 0x0, 0x0, [{{}, 0x8}, {{r4}, 0x7}, {{}, 0x40}, {{r1}, 0x100000000}, {{r2}, 0x10000}, {{}, 0x5}, {{}, 0x800}, {{}, 0x4}, {{}, 0x7}]}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 4m8.304353123s ago: executing program 2 (id=64): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b009700010006", 0x7) 4m8.236016297s ago: executing program 1 (id=65): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x2, 0x2) 4m7.603731208s ago: executing program 2 (id=67): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r5], 0x3c}}, 0x10) 4m7.230155317s ago: executing program 32 (id=67): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r5], 0x3c}}, 0x10) 4m7.216801022s ago: executing program 1 (id=70): socket$key(0xf, 0x3, 0x2) r0 = socket(0x1d, 0x2, 0x6) getpeername$packet(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002640)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0xfff3, 0x1000400, @mcast2, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000340)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x4004880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4048800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x7d, 0x3, 0xc, 0x4b, 0x9}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x20050840) 4m6.985279755s ago: executing program 33 (id=70): socket$key(0xf, 0x3, 0x2) r0 = socket(0x1d, 0x2, 0x6) getpeername$packet(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002640)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0xfff3, 0x1000400, @mcast2, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000340)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x4004880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4048800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x7d, 0x3, 0xc, 0x4b, 0x9}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x20050840) 22.380571486s ago: executing program 3 (id=2018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r4}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000009c10c39125250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18000000000000000000000009000000850000002f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7025a000000060000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001a00130700000000fcdbdf2520010000000000000000000000000001ffffffff000000000000000000000000000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b000000000000000000000000000000050000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffff000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000a000000060000000217d66d38547aa140db8a200000000c538c7cb7a00000000000200"/264], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f00000051c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c080000ebacb77d7b56cfad63fcd0be23a4aff08e5094d0234ceffbf31ec6dfc1194602ccd8eacbc392ad90148d7f6e42107270d58d6719bc219b8d52afbc43b1174432e9f8b3cdb34b033029185f7c3c04a8b7b24fca7a10dd4251ca526ce88ea088a5bea0162d143cb9", @ANYRES16=r9, @ANYBLOB="71c928bd7000fddbdf251000000006001100ffff000008000100", @ANYRES32=0x0, @ANYBLOB="050010000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x8) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40c0008}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56540, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0x6, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x60000000) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000c3c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x7}, {0x0, 0x1, 0x8000, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 21.963681439s ago: executing program 3 (id=2023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.129884773s ago: executing program 6 (id=2029): socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2d, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 20.912197822s ago: executing program 3 (id=2030): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x60}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}}, 0x48080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000036a5586392146d5d753ee03b14bb8e73310d0084abf0ba9f198f9a7d2086dfed8b935a59b0a0247e1d5807a10da98edef62307095db8cd7fd80012b986c56183bf4b6ff8198386", @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf250300000014000900fc010000000000000000000000000000050003006700000005000300020000000500040002000000040005000500040001000000050003003c000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x944) sendto$inet(r5, &(0x7f0000000000)='\x00\x00', 0x2, 0x4000030, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x800) listen(r3, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000040)) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r10, 0x121, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40002}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x10}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r12, @in={{0x2, 0x4e21, @multicast1}}, 0x10, 0x4, 0x7, 0x5, 0x1}, &(0x7f0000000340)=0x98) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 20.719932172s ago: executing program 6 (id=2032): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0xf56, @remote, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r3 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x800, 0x3ff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x2, 0x7}, {0xf, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xde0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x440c0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) close(0x3) socket(0x2, 0x80805, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) 19.672660886s ago: executing program 3 (id=2038): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x74, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x11, 0x2, {0x1, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) ioctl$SIOCAX25DELFWD(r4, 0x40106184, &(0x7f0000000580)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r5, 0x8b1b, &(0x7f0000000040)) recvmsg$can_j1939(r4, &(0x7f0000000400)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/187, 0xbb}, 0x2003) 19.581409584s ago: executing program 6 (id=2039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a8000000000000000000000006000000181100", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19.563222976s ago: executing program 0 (id=2040): r0 = socket$inet(0x2, 0x2, 0x29ea07fc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x20000080) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r2, &(0x7f0000000480), 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44001) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="ffff34006f9c817c52e0a8cababb0180c20000bf"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4004890) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340)=[{{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8001}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'pim6reg\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x9, 0x8, 0x8, [0x2, 0x8001, 0x8000000000000000, 0x300, 0x9, 0x8, 0xfd9e, 0xdd6]}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) 19.344742774s ago: executing program 6 (id=2041): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="8500f2e7a799a3e673c0000000000c43d929bfe39442fdb430f191c209f2e82266ba8a94b04233138089f700"/57], &(0x7f0000003240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x88880, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="bc41e259e40c26902a186f58006478c49a5e9d5fa96b45ab98846aabc88a0dca63cee8fb2c058e8b92e58f"], 0x38}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200088f9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 19.054838353s ago: executing program 4 (id=2044): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000002c0)=0x6, 0x4) getsockopt(r3, 0x1, 0x2, &(0x7f0000000580)=""/205, &(0x7f0000000140)=0xcd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x4, 0x7f) sendmsg$netlink(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0xe0, 0x2f, 0x300, 0x0, 0x25dfdbfc, "", [@nested={0xcd, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3dd", @typed={0x4, 0x141}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x0) getpeername(r1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000680)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x11, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x47}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@remote}, {@private}, {@remote, 0xff7e}, {@multicast2}]}]}}, "f6d562e3e4aa54cd"}}}}}, 0x0) 18.985493199s ago: executing program 0 (id=2045): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffffa, 0x1, 0x7, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x80000025a5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x64, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x10000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x1}}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x2e, 0x0, 0x5f, 0x30, 0x0]}}, &(0x7f0000000b00)=""/4096, 0x5b, 0x1000, 0x1, 0x3ff, 0x10000, @value=r6}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0xf3a, 0x0) close(r11) write(r9, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r14 = accept$alg(r13, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13c", 0x1e}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r14, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="8520000001000000c2ba0100fcffffff18220000dd23c65cc122ee4f790d86925fb36c76b063fe2b2280a2fd21a51dce77b857bb0930a893175fc6ce1e26b08099074ff54e39fa336c9e690bc445c9bae4dd5c16d0f48bfcc6fcf920bdf84f68a374d7fbcc4abc06ddfd8082d60539049a5f2138a57af23d0c7dc996a252a5dd56337c16eb82ca1aa110bc9a34341fae87d07085657d7b7b7228a45a74bdb9616e6484ccd0c69b45f7fa5dd69df3374734e70142550264a9e3d18c5059064d7305a0253208b2bd377cbbc2b379035f6722a779aa3df63bff3ad644932176", @ANYRES32, @ANYRESHEX=r8], &(0x7f0000000700)='syzkaller\x00', 0x4, 0xe4, &(0x7f00000004c0)=""/228, 0x40f00, 0x4b, '\x00', r1, 0x25, r8, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xd, 0x9, 0x80}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000200)=[r2, r2, 0x1, r2], &(0x7f0000000380)=[{0x2, 0x5, 0x5}, {0x3, 0x4, 0x2, 0x5}, {0x5, 0x1, 0xb, 0x1}, {0xffffffff, 0xffffffff, 0xa, 0xa}, {0x3, 0x6, 0x1, 0x7}, {0x2, 0x2, 0x3, 0x6}, {0x0, 0x4, 0x4, 0xf}, {0x4, 0x3, 0xa, 0x2}, {0x4, 0x2, 0x7, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r1, 0x25, 0x0, @void}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0x9b, 0x9, 0xf0, 0x80, 0x4, 0x6, 0x7f, 0x0, 0x6, 0x2, 0xfa, 0x9}, 0xe) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 18.872148319s ago: executing program 6 (id=2047): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff4, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffec) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x3, 0x80801, 0xd1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00670068000060069078ac1e0001ffffff0745e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef"], 0x75) getpid() socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) 18.819663466s ago: executing program 3 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049091}, 0x0) 18.70478489s ago: executing program 4 (id=2050): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1"], 0x18}, 0xfc00) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28) epoll_create1(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380)='/', 0x0}, 0x20) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4000) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d}, 0x94) 18.592126057s ago: executing program 3 (id=2051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r7, 0x0, 0x70bd27, 0xfffffffa}, 0x14}}, 0x8084) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, './'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}}, 0x4000080) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc02000000000000000000000000000000000000000000010a00402000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000004000000000000000002000000000000000000e9ff0000000100"/112], 0xb8}}, 0x0) 17.918829517s ago: executing program 6 (id=2052): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000001400000227bd7000fbdbdf25250006000100aadf00005b000100618fce4a4eeeebc15e42d85466299963571d110bcca854b4aeb0721b2db9600582b1c29723df04e2b2545b85c92ae27d55fd8bc76685bc7f22060eba5f175470dc04facddf93491c268fb823bcfd1e3ed4741fb3e2383e00000062540871231e40bade5968cbdbbea71747c02f66695714c9b016a7f3bebd8a59"], 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x170, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@remote, {0x0, 0x0, 0xa, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3502, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x63, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xb8, 0x60, "06aa14fdf53f9a0db9a200000000000000000000162696"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xb5, 0x5f1, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x10}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000500)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r11}) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r6, 0x5, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, ',/{$.'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 17.87224084s ago: executing program 0 (id=2053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x64, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0xe, 0x2, 0x200}, {0x804, 0x7, 0x3, 0x3}]}}}]}}]}, 0x64}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 17.795226536s ago: executing program 0 (id=2055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000c3c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ff, 0x3, 0x7}, {0x0, 0x1, 0x8000, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (fail_nth: 8) 17.723942455s ago: executing program 4 (id=2056): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 17.291951722s ago: executing program 4 (id=2057): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRES16], 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000a00)=ANY=[], 0x0) 17.200253581s ago: executing program 0 (id=2059): r0 = socket$inet(0x2, 0x2, 0x29ea07fc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x20000080) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r2, &(0x7f0000000480), 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x44001) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="ffff34006f9c817c52e0a8cababb0180c20000bf"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4004890) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340)=[{{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8001}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'pim6reg\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x9, 0x8, 0x8, [0x2, 0x8001, 0x8000000000000000, 0x300, 0x9, 0x8, 0xfd9e, 0xdd6]}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) 17.159461327s ago: executing program 4 (id=2060): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000002c0)=0x6, 0x4) getsockopt(r3, 0x1, 0x2, &(0x7f0000000580)=""/205, &(0x7f0000000140)=0xcd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x4, 0x7f) sendmsg$netlink(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0xe0, 0x2f, 0x300, 0x0, 0x25dfdbfc, "", [@nested={0xcd, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3dd", @typed={0x4, 0x141}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x0) getpeername(r1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000680)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x11, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0x47}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@broadcast}, {@remote}, {@private}, {@remote, 0xff7e}, {@multicast2}]}]}}, "f6d562e3e4aa54cd"}}}}}, 0x0) 17.043004068s ago: executing program 0 (id=2062): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff4, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffec) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x3, 0x80801, 0xd1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00670068000060069078ac1e0001ffffff0745e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef"], 0x75) getpid() socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) 16.972680816s ago: executing program 4 (id=2063): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000001400000227bd7000fbdbdf25250006000100aadf00005b000100618fce4a4eeeebc15e42d85466299963571d110bcca854b4aeb0721b2db9600582b1c29723df04e2b2545b85c92ae27d55fd8bc76685bc7f22060eba5f175470dc04facddf93491c268fb823bcfd1e3ed4741fb3e2383e00000062540871231e40bade5968cbdbbea71747c02f66695714c9b016a7f3bebd8a59"], 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x170, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@remote, {0x0, 0x0, 0xa, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3502, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x63, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xb8, 0x60, "06aa14fdf53f9a0db9a200000000000000000000162696"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xb5, 0x5f1, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x10}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000500)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b}, 0x94) close(0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r10}) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r6, 0x5, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, ',/{$.'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 16.884372878s ago: executing program 5 (id=2064): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r0, 0x8b2b, &(0x7f0000000040)) 16.868334728s ago: executing program 5 (id=2065): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x5) unshare(0x40600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c010000190001000000000000000000000000000000000000000000000000006401010000000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000041da0000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414bb000000000000000000000000000004d2330000000a000000000000000000000000000000000000000135000001003b00830000000500000005000000e0000001000000000000000000000000000004d56c00000002020000000000000000000000000000000000000000000001"], 0x17c}}, 0x4894) close(0x4) unshare(0x6a040000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x17) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) 16.536127902s ago: executing program 5 (id=2066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.241975408s ago: executing program 5 (id=2067): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (fail_nth: 6) 15.704452278s ago: executing program 5 (id=2068): r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYRES32=r1], 0x24}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') preadv(r2, 0x0, 0x0, 0x3, 0xffffffff) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x130, 0x130, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x5, 0x1, 0x0, 0x0, "d8f350a7a384bc2b181587b55d581c75bbc855208420ff1fc0ce4d7e7f63e77ee6695d393291b2b07b77fe244dfac1781ed4d7757d603e062dbf008411c9d086"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, 0xf, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2b}, @remote, 0x0, 0xffffffff, 0x3, 0x7, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x861, 0x7, 0x9, 0x0, 0xf675, 0x6, 'ip6gretap0\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xff, 0x8, 0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 15.628621781s ago: executing program 5 (id=2069): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x400, 0x70bd25, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44084}, 0x8004) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x58, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80000000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb9ca}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4ffa}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x20000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r7, 0x0) 3.555181226s ago: executing program 34 (id=2051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r7, 0x0, 0x70bd27, 0xfffffffa}, 0x14}}, 0x8084) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, './'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}}, 0x4000080) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000fc02000000000000000000000000000000000000000000010a00402000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000004000000000000000002000000000000000000e9ff0000000100"/112], 0xb8}}, 0x0) 2.540406483s ago: executing program 35 (id=2052): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000001400000227bd7000fbdbdf25250006000100aadf00005b000100618fce4a4eeeebc15e42d85466299963571d110bcca854b4aeb0721b2db9600582b1c29723df04e2b2545b85c92ae27d55fd8bc76685bc7f22060eba5f175470dc04facddf93491c268fb823bcfd1e3ed4741fb3e2383e00000062540871231e40bade5968cbdbbea71747c02f66695714c9b016a7f3bebd8a59"], 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x170, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@remote, {0x0, 0x0, 0xa, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3502, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x63, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xb8, 0x60, "06aa14fdf53f9a0db9a200000000000000000000162696"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xb5, 0x5f1, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x10}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000500)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r11}) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r6, 0x5, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, ',/{$.'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1.549841355s ago: executing program 36 (id=2062): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0xfffffff4, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffec) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x3, 0x80801, 0xd1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00670068000060069078ac1e0001ffffff0745e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef"], 0x75) getpid() socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) 1.511929254s ago: executing program 37 (id=2063): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000001400000227bd7000fbdbdf25250006000100aadf00005b000100618fce4a4eeeebc15e42d85466299963571d110bcca854b4aeb0721b2db9600582b1c29723df04e2b2545b85c92ae27d55fd8bc76685bc7f22060eba5f175470dc04facddf93491c268fb823bcfd1e3ed4741fb3e2383e00000062540871231e40bade5968cbdbbea71747c02f66695714c9b016a7f3bebd8a59"], 0x78}, 0x1, 0x0, 0x0, 0x40002}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newsa={0x170, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@remote, {0x0, 0x0, 0xa, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3502, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x63, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xb8, 0x60, "06aa14fdf53f9a0db9a200000000000000000000162696"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xb5, 0x5f1, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x10}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000500)={r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4b}, 0x94) close(0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, &(0x7f0000000180)={r9, r10}) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r6, 0x5, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, ',/{$.'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 0s ago: executing program 38 (id=2069): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x400, 0x70bd25, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44084}, 0x8004) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x58, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80000000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb9ca}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4ffa}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x20000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r7, 0x0) kernel console output (not intermixed with test programs): _validate_parse: 7 callbacks suppressed [ 301.124588][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 301.144311][T12210] syzkaller1: entered promiscuous mode [ 301.152276][T12210] syzkaller1: entered allmulticast mode [ 301.208740][T12210] lo speed is unknown, defaulting to 1000 [ 301.508887][T12227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.577244][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 301.584964][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 302.062109][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 302.234745][T12249] syzkaller1: entered promiscuous mode [ 302.246361][T12249] syzkaller1: entered allmulticast mode [ 302.278565][T12253] lo speed is unknown, defaulting to 1000 [ 302.654715][T12255] lo speed is unknown, defaulting to 1000 [ 302.676027][T12273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.725195][T12266] syzkaller1: entered promiscuous mode [ 302.767635][T12266] syzkaller1: entered allmulticast mode [ 302.824174][T12261] lo speed is unknown, defaulting to 1000 [ 302.936428][T12260] lo speed is unknown, defaulting to 1000 [ 303.096313][T12281] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 303.179836][T12284] xt_hashlimit: size too large, truncated to 1048576 [ 303.283325][T12281] tipc: Resetting bearer [ 303.507373][ T65] bond1: (slave macvlan2): link status definitely down, disabling slave [ 303.802708][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 303.813760][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 303.834639][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 304.142437][T12315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.735097][T12339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1806'. [ 304.937781][T12340] lo speed is unknown, defaulting to 1000 [ 305.053239][T12338] xt_CT: No such helper "netbios-ns" [ 305.251374][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'. [ 305.520576][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1812'. [ 305.555690][T12366] netlink: 'syz.0.1814': attribute type 21 has an invalid length. [ 305.797610][T12376] lo speed is unknown, defaulting to 1000 [ 305.947764][T12378] lo speed is unknown, defaulting to 1000 [ 306.243740][T12386] lo speed is unknown, defaulting to 1000 [ 306.810449][T12393] lo speed is unknown, defaulting to 1000 [ 306.848196][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'. [ 306.979437][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1825'. [ 307.138723][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 307.152257][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'. [ 307.485631][T12428] syzkaller0: entered promiscuous mode [ 307.513364][T12428] syzkaller0: entered allmulticast mode [ 307.539439][T12434] netlink: 'syz.5.1829': attribute type 21 has an invalid length. [ 307.922863][T12445] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 308.223262][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1836'. [ 308.349495][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1838'. [ 308.387232][T12458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1838'. [ 308.396200][T12469] lo speed is unknown, defaulting to 1000 [ 308.396283][T12458] macvlan0: entered allmulticast mode [ 308.457203][T12458] veth1_vlan: entered allmulticast mode [ 308.659433][T12486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1843'. [ 308.723004][T12476] netlink: 'syz.6.1842': attribute type 33 has an invalid length. [ 308.740092][T12476] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1842'. [ 308.849403][T12494] netlink: 'syz.0.1844': attribute type 21 has an invalid length. [ 308.853017][T12462] lo speed is unknown, defaulting to 1000 [ 308.936183][T12476] lo speed is unknown, defaulting to 1000 [ 308.986214][T12493] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 309.619848][T12518] netlink: 'syz.3.1849': attribute type 3 has an invalid length. [ 309.936105][T12522] FAULT_INJECTION: forcing a failure. [ 309.936105][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 309.982596][T12522] CPU: 1 UID: 0 PID: 12522 Comm: syz.0.1850 Not tainted syzkaller #0 PREEMPT(full) [ 309.982626][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.982651][T12522] Call Trace: [ 309.982659][T12522] [ 309.982668][T12522] dump_stack_lvl+0x189/0x250 [ 309.982704][T12522] ? __pfx____ratelimit+0x10/0x10 [ 309.982732][T12522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.982762][T12522] ? __pfx__printk+0x10/0x10 [ 309.982799][T12522] should_fail_ex+0x414/0x560 [ 309.982839][T12522] should_failslab+0xa8/0x100 [ 309.982863][T12522] kmem_cache_alloc_node_noprof+0x77/0x710 [ 309.982896][T12522] ? __alloc_skb+0x255/0x430 [ 309.982919][T12522] ? napi_skb_cache_get+0x4a5/0x790 [ 309.982942][T12522] ? napi_skb_cache_get+0x151/0x790 [ 309.982971][T12522] __alloc_skb+0x255/0x430 [ 309.983007][T12522] ? __pfx___alloc_skb+0x10/0x10 [ 309.983034][T12522] ? wireless_send_event+0x3eb/0xc30 [ 309.983071][T12522] wireless_send_event+0x510/0xc30 [ 309.983115][T12522] ? __pfx_wireless_send_event+0x10/0x10 [ 309.983146][T12522] ? trace_kmalloc+0x1f/0xd0 [ 309.983173][T12522] ? __kmalloc_noprof+0x432/0x7f0 [ 309.983213][T12522] ioctl_standard_iw_point+0x976/0xd40 [ 309.983261][T12522] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 309.983290][T12522] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 309.983324][T12522] ? __pfx___mutex_lock+0x10/0x10 [ 309.983362][T12522] ? full_name_hash+0x92/0xe0 [ 309.983388][T12522] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 309.983417][T12522] ioctl_standard_call+0xaf/0x1b0 [ 309.983451][T12522] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 309.983478][T12522] wext_ioctl_dispatch+0xee/0x410 [ 309.983506][T12522] ? __pfx_ioctl_standard_call+0x10/0x10 [ 309.983541][T12522] wext_handle_ioctl+0x100/0x1c0 [ 309.983575][T12522] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 309.983631][T12522] sock_ioctl+0x15f/0x790 [ 309.983666][T12522] ? __pfx_sock_ioctl+0x10/0x10 [ 309.983702][T12522] ? __fget_files+0x3a0/0x420 [ 309.983722][T12522] ? __fget_files+0x2a/0x420 [ 309.983747][T12522] ? bpf_lsm_file_ioctl+0x9/0x20 [ 309.983772][T12522] ? __pfx_sock_ioctl+0x10/0x10 [ 309.983803][T12522] __se_sys_ioctl+0xfc/0x170 [ 309.983834][T12522] do_syscall_64+0xfa/0xfa0 [ 309.983862][T12522] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.983891][T12522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.983911][T12522] ? clear_bhb_loop+0x60/0xb0 [ 309.983938][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.983959][T12522] RIP: 0033:0x7f326838f749 [ 309.983978][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.984003][T12522] RSP: 002b:00007f326926e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.984026][T12522] RAX: ffffffffffffffda RBX: 00007f32685e5fa0 RCX: 00007f326838f749 [ 309.984042][T12522] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000004 [ 309.984056][T12522] RBP: 00007f326926e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.984069][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.984081][T12522] R13: 00007f32685e6038 R14: 00007f32685e5fa0 R15: 00007ffd6b234df8 [ 309.984118][T12522] [ 310.521746][T12541] netlink: 'syz.5.1856': attribute type 21 has an invalid length. [ 310.577040][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1859'. [ 310.841994][T12532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.860575][T12532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.056746][T12532] bond1: left promiscuous mode [ 311.065847][ T981] lo speed is unknown, defaulting to 1000 [ 311.076589][ T981] syz1: Port: 1 Link DOWN [ 311.131873][T12553] vlan3: entered allmulticast mode [ 311.201575][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.234029][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.262837][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.311807][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.578974][T12585] lo speed is unknown, defaulting to 1000 [ 311.830839][T12586] lo speed is unknown, defaulting to 1000 [ 312.009238][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 312.027141][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1870'. [ 312.321464][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'. [ 312.657438][T12619] xt_hashlimit: size too large, truncated to 1048576 [ 313.169861][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1882'. [ 313.375740][T12636] lo speed is unknown, defaulting to 1000 [ 313.705229][T12653] netlink: 'syz.4.1886': attribute type 21 has an invalid length. [ 314.292997][T12668] lo speed is unknown, defaulting to 1000 [ 314.320120][T12676] xt_hashlimit: size too large, truncated to 1048576 [ 314.511924][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 314.545173][T12678] lo speed is unknown, defaulting to 1000 [ 314.666656][T12690] xt_bpf: check failed: parse error [ 314.696255][T12675] lo speed is unknown, defaulting to 1000 [ 315.064516][T12703] netlink: 'syz.0.1899': attribute type 21 has an invalid length. [ 315.365457][T12711] xt_connbytes: Forcing CT accounting to be enabled [ 315.402888][T12707] xt_hashlimit: invalid rate [ 315.682549][T12724] netlink: 'syz.6.1903': attribute type 1 has an invalid length. [ 315.757102][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1903'. [ 315.766546][T12724] netlink: 'syz.6.1903': attribute type 7 has an invalid length. [ 315.823139][T12724] netlink: 'syz.6.1903': attribute type 8 has an invalid length. [ 315.857936][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1903'. [ 315.901667][T12726] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1906'. [ 315.927410][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1905'. [ 316.033383][T12736] lo speed is unknown, defaulting to 1000 [ 316.100437][T12735] lo speed is unknown, defaulting to 1000 [ 316.402380][T12745] xt_hashlimit: size too large, truncated to 1048576 [ 316.490074][T12749] netlink: 'syz.4.1911': attribute type 21 has an invalid length. [ 316.667388][T12755] nbd5: detected capacity change from 0 to 63 [ 316.679316][T12756] nbd: must specify an index to disconnect [ 316.704332][ T5838] block nbd5: Receive control failed (result -104) [ 316.918380][T12762] FAULT_INJECTION: forcing a failure. [ 316.918380][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 316.987036][T12762] CPU: 0 UID: 0 PID: 12762 Comm: syz.5.1915 Not tainted syzkaller #0 PREEMPT(full) [ 316.987079][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.987097][T12762] Call Trace: [ 316.987107][T12762] [ 316.987116][T12762] dump_stack_lvl+0x189/0x250 [ 316.987150][T12762] ? __pfx____ratelimit+0x10/0x10 [ 316.987177][T12762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.987204][T12762] ? __pfx__printk+0x10/0x10 [ 316.987228][T12762] ? __pfx___might_resched+0x10/0x10 [ 316.987250][T12762] ? fs_reclaim_acquire+0x7d/0x100 [ 316.987275][T12762] should_fail_ex+0x414/0x560 [ 316.987313][T12762] should_failslab+0xa8/0x100 [ 316.987335][T12762] kmem_cache_alloc_node_noprof+0x77/0x710 [ 316.987374][T12762] ? __alloc_skb+0x255/0x430 [ 316.987397][T12762] ? napi_skb_cache_get+0x4a5/0x790 [ 316.987418][T12762] ? napi_skb_cache_get+0x151/0x790 [ 316.987445][T12762] __alloc_skb+0x255/0x430 [ 316.987472][T12762] ? __pfx___alloc_skb+0x10/0x10 [ 316.987497][T12762] ? netlink_autobind+0xdb/0x300 [ 316.987524][T12762] ? netlink_autobind+0x2c2/0x300 [ 316.987557][T12762] netlink_sendmsg+0x5c6/0xb30 [ 316.987594][T12762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.987626][T12762] ? aa_sock_msg_perm+0xf1/0x1d0 [ 316.987659][T12762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.987679][T12762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.987708][T12762] __sock_sendmsg+0x21c/0x270 [ 316.987743][T12762] ____sys_sendmsg+0x505/0x830 [ 316.987776][T12762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.987813][T12762] ? import_iovec+0x74/0xa0 [ 316.987843][T12762] ___sys_sendmsg+0x21f/0x2a0 [ 316.987872][T12762] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.987937][T12762] ? __fget_files+0x2a/0x420 [ 316.987956][T12762] ? __fget_files+0x3a0/0x420 [ 316.987986][T12762] __x64_sys_sendmsg+0x19b/0x260 [ 316.988015][T12762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.988051][T12762] ? __pfx_ksys_write+0x10/0x10 [ 316.988086][T12762] ? do_syscall_64+0xbe/0xfa0 [ 316.988117][T12762] do_syscall_64+0xfa/0xfa0 [ 316.988144][T12762] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.988171][T12762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.988191][T12762] ? clear_bhb_loop+0x60/0xb0 [ 316.988216][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.988236][T12762] RIP: 0033:0x7fbbcfd8f749 [ 316.988255][T12762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.988273][T12762] RSP: 002b:00007fbbd0c68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.988296][T12762] RAX: ffffffffffffffda RBX: 00007fbbcffe5fa0 RCX: 00007fbbcfd8f749 [ 316.988311][T12762] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 316.988325][T12762] RBP: 00007fbbd0c68090 R08: 0000000000000000 R09: 0000000000000000 [ 316.988344][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.988356][T12762] R13: 00007fbbcffe6038 R14: 00007fbbcffe5fa0 R15: 00007ffc6d2f8148 [ 316.988391][T12762] [ 317.326248][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.345828][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1916'. [ 317.354978][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1916'. [ 317.766330][T12785] lo speed is unknown, defaulting to 1000 [ 318.296801][T12787] lo speed is unknown, defaulting to 1000 [ 318.523819][T12808] netlink: 'syz.3.1924': attribute type 21 has an invalid length. [ 318.827218][T12812] nbd3: detected capacity change from 0 to 63 [ 318.834037][T12815] nbd: must specify an index to disconnect [ 318.844857][ T5838] block nbd3: Receive control failed (result -104) [ 319.105485][T12816] lo speed is unknown, defaulting to 1000 [ 319.168621][T12824] xt_hashlimit: size too large, truncated to 1048576 [ 319.392045][T12831] lo speed is unknown, defaulting to 1000 [ 319.815121][T12843] syzkaller1: entered promiscuous mode [ 319.823040][T12843] syzkaller1: entered allmulticast mode [ 319.868566][T12843] lo speed is unknown, defaulting to 1000 [ 320.076295][T12850] netlink: 'syz.4.1935': attribute type 21 has an invalid length. [ 320.336251][T12858] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 320.374403][T12858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.465913][T12860] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 320.480012][T12860] bond2: (slave batadv1): making interface the new active one [ 320.490047][T12860] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 320.510027][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 320.519774][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 320.814616][T12858] bond2 (unregistering): (slave batadv1): Releasing active interface [ 320.828735][T12858] bond2 (unregistering): Released all slaves [ 320.908818][T12870] lo speed is unknown, defaulting to 1000 [ 321.001422][T12878] lo speed is unknown, defaulting to 1000 [ 321.256352][T12884] lo speed is unknown, defaulting to 1000 [ 321.399726][T12896] netlink: 'syz.4.1946': attribute type 21 has an invalid length. [ 321.926304][T12906] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 321.965596][T12906] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 322.038673][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.056757][T12911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1952'. [ 322.075889][T12906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.174987][T12906] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 322.399308][T12906] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 322.413378][T12919] netlink: 'syz.6.1953': attribute type 13 has an invalid length. [ 322.418614][T12906] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 322.437379][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.449478][T12919] netlink: 'syz.6.1953': attribute type 17 has an invalid length. [ 322.484438][T12906] wlan1: mtu less than device minimum [ 322.510059][T12906] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 322.740124][T12919] bridge0: left allmulticast mode [ 322.751940][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.762193][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.774829][T12919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.801395][T12563] lo speed is unknown, defaulting to 1000 [ 322.820696][T12563] syz1: Port: 1 Link ACTIVE [ 322.832144][T12912] lo speed is unknown, defaulting to 1000 [ 323.079598][T12933] netlink: 'syz.6.1958': attribute type 21 has an invalid length. [ 323.234234][T12938] lo speed is unknown, defaulting to 1000 [ 323.493056][T12935] lo speed is unknown, defaulting to 1000 [ 323.899166][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1967'. [ 324.363207][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 324.386497][T12964] netlink: 'syz.0.1969': attribute type 9 has an invalid length. [ 324.436736][T12968] netlink: 'syz.6.1971': attribute type 21 has an invalid length. [ 324.516808][T12971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1972'. [ 324.890439][T12986] xt_hashlimit: size too large, truncated to 1048576 [ 325.722388][T12990] lo speed is unknown, defaulting to 1000 [ 325.737445][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 325.869699][T12992] lo speed is unknown, defaulting to 1000 [ 326.030236][T13009] FAULT_INJECTION: forcing a failure. [ 326.030236][T13009] name failslab, interval 1, probability 0, space 0, times 0 [ 326.054559][T13009] CPU: 1 UID: 0 PID: 13009 Comm: syz.6.1983 Not tainted syzkaller #0 PREEMPT(full) [ 326.054589][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.054603][T13009] Call Trace: [ 326.054612][T13009] [ 326.054622][T13009] dump_stack_lvl+0x189/0x250 [ 326.054659][T13009] ? __pfx____ratelimit+0x10/0x10 [ 326.054688][T13009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.054718][T13009] ? __pfx__printk+0x10/0x10 [ 326.054758][T13009] should_fail_ex+0x414/0x560 [ 326.054807][T13009] should_failslab+0xa8/0x100 [ 326.054832][T13009] __kmalloc_cache_noprof+0x6f/0x6f0 [ 326.054865][T13009] ? tipc_net+0x45/0x270 [ 326.054894][T13009] ? tipc_mon_create+0x102/0x490 [ 326.054934][T13009] tipc_mon_create+0x102/0x490 [ 326.054972][T13009] __tipc_nl_bearer_enable+0xe16/0x13f0 [ 326.055016][T13009] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 326.055046][T13009] ? __mutex_lock+0x335/0x1350 [ 326.055093][T13009] ? tipc_nl_bearer_enable+0x17/0x40 [ 326.055128][T13009] ? __pfx___mutex_lock+0x10/0x10 [ 326.055161][T13009] ? rcu_is_watching+0x15/0xb0 [ 326.055191][T13009] ? __nla_parse+0x40/0x60 [ 326.055220][T13009] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 326.055243][T13009] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 326.055270][T13009] tipc_nl_bearer_enable+0x22/0x40 [ 326.055301][T13009] genl_family_rcv_msg_doit+0x215/0x300 [ 326.055332][T13009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.055383][T13009] genl_rcv_msg+0x60e/0x790 [ 326.055412][T13009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.055432][T13009] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 326.055465][T13009] ? __asan_memcpy+0x40/0x70 [ 326.055493][T13009] ? __pfx_ref_tracker_free+0x10/0x10 [ 326.055524][T13009] netlink_rcv_skb+0x208/0x470 [ 326.055550][T13009] ? __lock_acquire+0xab9/0xd20 [ 326.055572][T13009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.055594][T13009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.055645][T13009] ? down_read+0x1ad/0x2e0 [ 326.055680][T13009] genl_rcv+0x28/0x40 [ 326.055698][T13009] netlink_unicast+0x82f/0x9e0 [ 326.055733][T13009] ? __pfx_netlink_unicast+0x10/0x10 [ 326.055769][T13009] ? netlink_sendmsg+0x642/0xb30 [ 326.055795][T13009] ? skb_put+0x11b/0x210 [ 326.055826][T13009] netlink_sendmsg+0x805/0xb30 [ 326.055866][T13009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.055899][T13009] ? aa_sock_msg_perm+0xf1/0x1d0 [ 326.055935][T13009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.055956][T13009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.055986][T13009] __sock_sendmsg+0x21c/0x270 [ 326.056025][T13009] ____sys_sendmsg+0x505/0x830 [ 326.056060][T13009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.056099][T13009] ? import_iovec+0x74/0xa0 [ 326.056133][T13009] ___sys_sendmsg+0x21f/0x2a0 [ 326.056164][T13009] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.056236][T13009] ? __fget_files+0x2a/0x420 [ 326.056257][T13009] ? __fget_files+0x3a0/0x420 [ 326.056290][T13009] __x64_sys_sendmsg+0x19b/0x260 [ 326.056322][T13009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.056362][T13009] ? __pfx_ksys_write+0x10/0x10 [ 326.056398][T13009] ? do_syscall_64+0xbe/0xfa0 [ 326.056433][T13009] do_syscall_64+0xfa/0xfa0 [ 326.056460][T13009] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.056488][T13009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.056510][T13009] ? clear_bhb_loop+0x60/0xb0 [ 326.056558][T13009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.056578][T13009] RIP: 0033:0x7f434078f749 [ 326.056598][T13009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.056617][T13009] RSP: 002b:00007f4341636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.056641][T13009] RAX: ffffffffffffffda RBX: 00007f43409e6090 RCX: 00007f434078f749 [ 326.056657][T13009] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 326.056671][T13009] RBP: 00007f4341636090 R08: 0000000000000000 R09: 0000000000000000 [ 326.056685][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.056698][T13009] R13: 00007f43409e6128 R14: 00007f43409e6090 R15: 00007ffee57b6298 [ 326.056734][T13009] [ 326.056812][T13009] tipc: Disabling bearer [ 326.514491][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1986'. [ 326.542343][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1986'. [ 326.793661][T13025] xt_hashlimit: size too large, truncated to 1048576 [ 327.696311][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 327.714452][T13052] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1995'. [ 327.905068][T13058] lo speed is unknown, defaulting to 1000 [ 327.990773][T13066] FAULT_INJECTION: forcing a failure. [ 327.990773][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 328.078882][T13066] CPU: 1 UID: 0 PID: 13066 Comm: syz.3.1999 Not tainted syzkaller #0 PREEMPT(full) [ 328.078914][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.078928][T13066] Call Trace: [ 328.078937][T13066] [ 328.078946][T13066] dump_stack_lvl+0x189/0x250 [ 328.078983][T13066] ? __pfx____ratelimit+0x10/0x10 [ 328.079012][T13066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.079043][T13066] ? __pfx__printk+0x10/0x10 [ 328.079062][T13066] ? crng_make_state+0x34c/0x700 [ 328.079103][T13066] ? crng_make_state+0x3fc/0x700 [ 328.079129][T13066] ? crng_make_state+0x13a/0x700 [ 328.079155][T13066] should_fail_ex+0x414/0x560 [ 328.079195][T13066] should_failslab+0xa8/0x100 [ 328.079220][T13066] __kmalloc_cache_noprof+0x6f/0x6f0 [ 328.079251][T13066] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 328.079275][T13066] ? sctp_add_bind_addr+0x8c/0x370 [ 328.079307][T13066] sctp_add_bind_addr+0x8c/0x370 [ 328.079337][T13066] sctp_copy_local_addr_list+0x30b/0x4e0 [ 328.079377][T13066] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 328.079404][T13066] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 328.079432][T13066] ? sctp_v6_is_any+0x64/0x80 [ 328.079461][T13066] ? sctp_copy_one_addr+0x93/0x360 [ 328.079490][T13066] sctp_bind_addr_copy+0xb3/0x3c0 [ 328.079517][T13066] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 328.079543][T13066] sctp_connect_new_asoc+0x2e0/0x690 [ 328.079579][T13066] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 328.079608][T13066] ? __local_bh_enable_ip+0x12d/0x1c0 [ 328.079657][T13066] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 328.079682][T13066] ? security_sctp_bind_connect+0x7e/0x2e0 [ 328.079713][T13066] sctp_sendmsg+0x155c/0x2810 [ 328.079763][T13066] ? __pfx_sctp_sendmsg+0x10/0x10 [ 328.079798][T13066] ? aa_sk_perm+0x81e/0x950 [ 328.079829][T13066] ? __lock_acquire+0xab9/0xd20 [ 328.079855][T13066] ? __pfx_aa_sk_perm+0x10/0x10 [ 328.079891][T13066] ? sock_rps_record_flow+0x19/0x410 [ 328.079923][T13066] ? inet_sendmsg+0x2f4/0x370 [ 328.079956][T13066] __sock_sendmsg+0x19c/0x270 [ 328.079995][T13066] ____sys_sendmsg+0x52d/0x830 [ 328.080031][T13066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.080072][T13066] ? import_iovec+0x74/0xa0 [ 328.080106][T13066] ___sys_sendmsg+0x21f/0x2a0 [ 328.080137][T13066] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.080212][T13066] ? __fget_files+0x2a/0x420 [ 328.080232][T13066] ? __fget_files+0x3a0/0x420 [ 328.080267][T13066] __sys_sendmmsg+0x227/0x430 [ 328.080303][T13066] ? __pfx___sys_sendmmsg+0x10/0x10 [ 328.080344][T13066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.080406][T13066] ? ksys_write+0x22a/0x250 [ 328.080441][T13066] ? __pfx_ksys_write+0x10/0x10 [ 328.080479][T13066] __x64_sys_sendmmsg+0xa0/0xc0 [ 328.080511][T13066] do_syscall_64+0xfa/0xfa0 [ 328.080540][T13066] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.080568][T13066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.080590][T13066] ? clear_bhb_loop+0x60/0xb0 [ 328.080617][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.080639][T13066] RIP: 0033:0x7f9640d8f749 [ 328.080658][T13066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.080677][T13066] RSP: 002b:00007f9641c23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 328.080700][T13066] RAX: ffffffffffffffda RBX: 00007f9640fe5fa0 RCX: 00007f9640d8f749 [ 328.080716][T13066] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 328.080729][T13066] RBP: 00007f9641c23090 R08: 0000000000000000 R09: 0000000000000000 [ 328.080743][T13066] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 328.080756][T13066] R13: 00007f9640fe6038 R14: 00007f9640fe5fa0 R15: 00007ffcd0a574c8 [ 328.080794][T13066] [ 328.779752][T13084] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2004'. [ 328.952963][T13081] lo speed is unknown, defaulting to 1000 [ 328.976510][T13093] xt_hashlimit: size too large, truncated to 1048576 [ 329.053749][T13096] FAULT_INJECTION: forcing a failure. [ 329.053749][T13096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.054480][T13074] lo speed is unknown, defaulting to 1000 [ 329.067336][T13096] CPU: 0 UID: 0 PID: 13096 Comm: syz.5.2007 Not tainted syzkaller #0 PREEMPT(full) [ 329.067364][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.067377][T13096] Call Trace: [ 329.067385][T13096] [ 329.067394][T13096] dump_stack_lvl+0x189/0x250 [ 329.067429][T13096] ? __pfx____ratelimit+0x10/0x10 [ 329.067458][T13096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.067487][T13096] ? __pfx__printk+0x10/0x10 [ 329.067510][T13096] ? __might_fault+0xb0/0x130 [ 329.067562][T13096] should_fail_ex+0x414/0x560 [ 329.067599][T13096] _copy_from_iter+0x1de/0x1790 [ 329.067633][T13096] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.067669][T13096] ? policy_nodemask+0x27c/0x720 [ 329.067694][T13096] ? __pfx__copy_from_iter+0x10/0x10 [ 329.067732][T13096] ? set_page_refcounted+0xa0/0x1e0 [ 329.067758][T13096] ? page_copy_sane+0x4e/0x280 [ 329.067788][T13096] copy_page_from_iter+0xdd/0x170 [ 329.067823][T13096] tun_get_user+0x1d7b/0x3e90 [ 329.067866][T13096] ? tun_get_user+0x6f6/0x3e90 [ 329.067907][T13096] ? aa_file_perm+0x44d/0x1550 [ 329.067932][T13096] ? __pfx_tun_get_user+0x10/0x10 [ 329.067962][T13096] ? _parse_integer_limit+0x1ae/0x1f0 [ 329.067997][T13096] ? __lock_acquire+0xab9/0xd20 [ 329.068030][T13096] ? ref_tracker_alloc+0x318/0x460 [ 329.068052][T13096] ? __lock_acquire+0xab9/0xd20 [ 329.068078][T13096] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 329.068109][T13096] ? tun_get+0x1c/0x2f0 [ 329.068148][T13096] ? tun_get+0x1c/0x2f0 [ 329.068177][T13096] ? tun_get+0x1c/0x2f0 [ 329.068213][T13096] tun_chr_write_iter+0x113/0x200 [ 329.068252][T13096] vfs_write+0x5c9/0xb30 [ 329.068294][T13096] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 329.068326][T13096] ? __pfx_vfs_write+0x10/0x10 [ 329.068374][T13096] ? __fget_files+0x2a/0x420 [ 329.068409][T13096] ksys_write+0x145/0x250 [ 329.068447][T13096] ? __pfx_ksys_write+0x10/0x10 [ 329.068486][T13096] ? do_syscall_64+0xbe/0xfa0 [ 329.068523][T13096] do_syscall_64+0xfa/0xfa0 [ 329.068561][T13096] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.068594][T13096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.068618][T13096] ? clear_bhb_loop+0x60/0xb0 [ 329.068648][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.068671][T13096] RIP: 0033:0x7fbbcfd8e1ff [ 329.068695][T13096] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 329.068716][T13096] RSP: 002b:00007fbbd0c68000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 329.068743][T13096] RAX: ffffffffffffffda RBX: 00007fbbcffe5fa0 RCX: 00007fbbcfd8e1ff [ 329.068761][T13096] RDX: 000000000000004a RSI: 0000200000000840 RDI: 00000000000000c8 [ 329.068777][T13096] RBP: 00007fbbd0c68090 R08: 0000000000000000 R09: 0000000000000000 [ 329.068793][T13096] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 329.068806][T13096] R13: 00007fbbcffe6038 R14: 00007fbbcffe5fa0 R15: 00007ffc6d2f8148 [ 329.068848][T13096] [ 329.377373][ T56] block nbd0: Possible stuck request ffff888048c77000: control (read@0,1024B). Runtime 30 seconds [ 329.397745][ T56] block nbd0: Possible stuck request ffff888048c771c0: control (read@1024,1024B). Runtime 30 seconds [ 329.408746][ T56] block nbd0: Possible stuck request ffff888048c77380: control (read@2048,1024B). Runtime 30 seconds [ 329.420144][ T56] block nbd0: Possible stuck request ffff888048c77540: control (read@3072,1024B). Runtime 30 seconds [ 329.937713][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2010'. [ 330.805295][T13137] xt_hashlimit: size too large, truncated to 1048576 [ 330.814198][T13133] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2018'. [ 331.103467][T13147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.277958][T13150] FAULT_INJECTION: forcing a failure. [ 331.277958][T13150] name failslab, interval 1, probability 0, space 0, times 0 [ 331.317510][T13150] CPU: 1 UID: 0 PID: 13150 Comm: syz.6.2025 Not tainted syzkaller #0 PREEMPT(full) [ 331.317542][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.317556][T13150] Call Trace: [ 331.317565][T13150] [ 331.317574][T13150] dump_stack_lvl+0x189/0x250 [ 331.317610][T13150] ? __pfx____ratelimit+0x10/0x10 [ 331.317639][T13150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.317670][T13150] ? __pfx__printk+0x10/0x10 [ 331.317693][T13150] ? __local_bh_enable_ip+0x12d/0x1c0 [ 331.317717][T13150] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.317748][T13150] ? __local_bh_enable_ip+0x12d/0x1c0 [ 331.317775][T13150] should_fail_ex+0x414/0x560 [ 331.317815][T13150] should_failslab+0xa8/0x100 [ 331.317840][T13150] __kmalloc_noprof+0xcb/0x7f0 [ 331.317871][T13150] ? ___neigh_create+0x6d5/0x2260 [ 331.317900][T13150] ___neigh_create+0x6d5/0x2260 [ 331.317950][T13150] ip_neigh_gw4+0x289/0x3b0 [ 331.317983][T13150] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 331.318008][T13150] ? __lock_acquire+0xab9/0xd20 [ 331.318042][T13150] ip_finish_output2+0x57a/0x1160 [ 331.318077][T13150] ? ip_finish_output2+0x452/0x1160 [ 331.318104][T13150] ? ip_skb_dst_mtu+0x18d/0xb70 [ 331.318129][T13150] ? __pfx_ip_finish_output2+0x10/0x10 [ 331.318154][T13150] ? ip_skb_dst_mtu+0x18d/0xb70 [ 331.318177][T13150] ? ip_skb_dst_mtu+0x917/0xb70 [ 331.318206][T13150] ? ip_finish_output+0x33a/0x3f0 [ 331.318232][T13150] ip_output+0x29f/0x450 [ 331.318255][T13150] ? ip_output+0x5b/0x450 [ 331.318280][T13150] ip_send_skb+0x74/0x100 [ 331.318307][T13150] udp_send_skb+0xaf1/0x14c0 [ 331.318367][T13150] udp_sendmsg+0x195a/0x2170 [ 331.318412][T13150] ? __pfx_udplite_getfrag+0x10/0x10 [ 331.318443][T13150] ? __pfx_udp_sendmsg+0x10/0x10 [ 331.318490][T13150] ? get_random_u32+0x155/0x940 [ 331.318528][T13150] ? register_lock_class+0x51/0x320 [ 331.318547][T13150] ? get_random_u32+0x155/0x940 [ 331.318575][T13150] ? __lock_acquire+0xab9/0xd20 [ 331.318609][T13150] udpv6_sendmsg+0xc1c/0x2510 [ 331.318649][T13150] ? udp_lib_get_port+0x164b/0x1b10 [ 331.318678][T13150] ? udp_lib_get_port+0x164b/0x1b10 [ 331.318704][T13150] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 331.318737][T13150] ? __lock_acquire+0xab9/0xd20 [ 331.318779][T13150] ? __local_bh_enable_ip+0x12d/0x1c0 [ 331.318804][T13150] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 331.318836][T13150] ? inet_send_prepare+0x1b9/0x270 [ 331.318868][T13150] ? inet_send_prepare+0x1b9/0x270 [ 331.318901][T13150] ? inet6_sendmsg+0xe4/0x120 [ 331.318936][T13150] __sock_sendmsg+0xe5/0x270 [ 331.318975][T13150] ____sys_sendmsg+0x505/0x830 [ 331.319010][T13150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.319050][T13150] ? import_iovec+0x74/0xa0 [ 331.319081][T13150] ___sys_sendmsg+0x21f/0x2a0 [ 331.319107][T13150] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.319177][T13150] ? __fget_files+0x2a/0x420 [ 331.319198][T13150] ? __fget_files+0x3a0/0x420 [ 331.319233][T13150] __x64_sys_sendmsg+0x19b/0x260 [ 331.319266][T13150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.319306][T13150] ? __pfx_ksys_write+0x10/0x10 [ 331.319365][T13150] ? do_syscall_64+0xbe/0xfa0 [ 331.319399][T13150] do_syscall_64+0xfa/0xfa0 [ 331.319426][T13150] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.319455][T13150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.319476][T13150] ? clear_bhb_loop+0x60/0xb0 [ 331.319502][T13150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.319523][T13150] RIP: 0033:0x7f434078f749 [ 331.319542][T13150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.319561][T13150] RSP: 002b:00007f4341657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.319584][T13150] RAX: ffffffffffffffda RBX: 00007f43409e5fa0 RCX: 00007f434078f749 [ 331.319601][T13150] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 331.319614][T13150] RBP: 00007f4341657090 R08: 0000000000000000 R09: 0000000000000000 [ 331.319627][T13150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.319640][T13150] R13: 00007f43409e6038 R14: 00007f43409e5fa0 R15: 00007ffee57b6298 [ 331.319676][T13150] [ 331.853839][T13160] lo speed is unknown, defaulting to 1000 [ 331.957581][T13152] lo speed is unknown, defaulting to 1000 [ 332.104254][T13163] lo speed is unknown, defaulting to 1000 [ 332.275676][T13158] syzkaller1: entered promiscuous mode [ 332.346490][T13158] syzkaller1: entered allmulticast mode [ 332.379432][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2032'. [ 332.420831][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2033'. [ 332.716266][T13193] FAULT_INJECTION: forcing a failure. [ 332.716266][T13193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.789777][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.0.2035 Not tainted syzkaller #0 PREEMPT(full) [ 332.789807][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.789819][T13193] Call Trace: [ 332.789828][T13193] [ 332.789837][T13193] dump_stack_lvl+0x189/0x250 [ 332.789872][T13193] ? __pfx____ratelimit+0x10/0x10 [ 332.789899][T13193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.789928][T13193] ? __pfx__printk+0x10/0x10 [ 332.789962][T13193] should_fail_ex+0x414/0x560 [ 332.790009][T13193] _copy_to_user+0x31/0xb0 [ 332.790038][T13193] simple_read_from_buffer+0xe1/0x170 [ 332.790076][T13193] proc_fail_nth_read+0x1b3/0x220 [ 332.790106][T13193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.790136][T13193] ? rw_verify_area+0x2a6/0x4d0 [ 332.790163][T13193] ? __lock_acquire+0xab9/0xd20 [ 332.790181][T13193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.790209][T13193] vfs_read+0x200/0xa30 [ 332.790237][T13193] ? fdget_pos+0x247/0x320 [ 332.790262][T13193] ? __pfx___mutex_lock+0x10/0x10 [ 332.790292][T13193] ? __pfx_vfs_read+0x10/0x10 [ 332.790322][T13193] ? __fget_files+0x2a/0x420 [ 332.790347][T13193] ? __fget_files+0x3a0/0x420 [ 332.790365][T13193] ? __fget_files+0x2a/0x420 [ 332.790394][T13193] ksys_read+0x145/0x250 [ 332.790425][T13193] ? __pfx_ksys_read+0x10/0x10 [ 332.790458][T13193] ? do_syscall_64+0xbe/0xfa0 [ 332.790490][T13193] do_syscall_64+0xfa/0xfa0 [ 332.790515][T13193] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.790542][T13193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.790562][T13193] ? clear_bhb_loop+0x60/0xb0 [ 332.790587][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.790607][T13193] RIP: 0033:0x7f326838e15c [ 332.790626][T13193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.790644][T13193] RSP: 002b:00007f326926e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.790666][T13193] RAX: ffffffffffffffda RBX: 00007f32685e5fa0 RCX: 00007f326838e15c [ 332.790681][T13193] RDX: 000000000000000f RSI: 00007f326926e0a0 RDI: 0000000000000004 [ 332.790693][T13193] RBP: 00007f326926e090 R08: 0000000000000000 R09: 0000000000000000 [ 332.790706][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.790718][T13193] R13: 00007f32685e6038 R14: 00007f32685e5fa0 R15: 00007ffd6b234df8 [ 332.790758][T13193] [ 333.290490][T13195] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 333.331094][T13201] xt_hashlimit: size too large, truncated to 1048576 [ 333.382453][T13203] netlink: 'syz.3.2038': attribute type 21 has an invalid length. [ 333.405146][T13203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2038'. [ 333.824136][T13203] lo speed is unknown, defaulting to 1000 [ 333.844333][T13222] nbd: nbd5 already in use [ 333.861018][T13222] nbd: must specify an index to disconnect [ 334.385432][T13251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2049'. [ 334.400149][T13239] lo speed is unknown, defaulting to 1000 [ 334.408039][T13250] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2051'. [ 334.500715][T13246] syzkaller1: entered promiscuous mode [ 334.509175][T13246] syzkaller1: entered allmulticast mode [ 335.084808][T13262] geneve5: entered promiscuous mode [ 335.198631][T13268] FAULT_INJECTION: forcing a failure. [ 335.198631][T13268] name failslab, interval 1, probability 0, space 0, times 0 [ 335.214029][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.0.2055 Not tainted syzkaller #0 PREEMPT(full) [ 335.214059][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.214072][T13268] Call Trace: [ 335.214081][T13268] [ 335.214090][T13268] dump_stack_lvl+0x189/0x250 [ 335.214125][T13268] ? __pfx____ratelimit+0x10/0x10 [ 335.214153][T13268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.214184][T13268] ? __pfx__printk+0x10/0x10 [ 335.214210][T13268] ? __pfx___might_resched+0x10/0x10 [ 335.214236][T13268] ? fs_reclaim_acquire+0x7d/0x100 [ 335.214263][T13268] should_fail_ex+0x414/0x560 [ 335.214303][T13268] should_failslab+0xa8/0x100 [ 335.214328][T13268] __kmalloc_cache_noprof+0x6f/0x6f0 [ 335.214362][T13268] ? flow_change+0x437/0x1a50 [ 335.214385][T13268] ? __nla_parse+0x40/0x60 [ 335.214414][T13268] flow_change+0x437/0x1a50 [ 335.214444][T13268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.214484][T13268] ? __pfx_flow_change+0x10/0x10 [ 335.214539][T13268] tc_new_tfilter+0xdca/0x15b0 [ 335.214600][T13268] ? __pfx_tc_new_tfilter+0x10/0x10 [ 335.214668][T13268] ? __pfx_tc_new_tfilter+0x10/0x10 [ 335.214697][T13268] rtnetlink_rcv_msg+0x7cf/0xb70 [ 335.214727][T13268] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 335.214751][T13268] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.214773][T13268] ? ref_tracker_free+0x63a/0x7d0 [ 335.214796][T13268] ? __asan_memcpy+0x40/0x70 [ 335.214823][T13268] ? __pfx_ref_tracker_free+0x10/0x10 [ 335.214857][T13268] netlink_rcv_skb+0x208/0x470 [ 335.214886][T13268] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.214912][T13268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.214954][T13268] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.215000][T13268] netlink_unicast+0x82f/0x9e0 [ 335.215036][T13268] ? __pfx_netlink_unicast+0x10/0x10 [ 335.215063][T13268] ? netlink_sendmsg+0x642/0xb30 [ 335.215088][T13268] ? skb_put+0x11b/0x210 [ 335.215118][T13268] netlink_sendmsg+0x805/0xb30 [ 335.215158][T13268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.215191][T13268] ? aa_sock_msg_perm+0xf1/0x1d0 [ 335.215225][T13268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.215247][T13268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.215277][T13268] __sock_sendmsg+0x21c/0x270 [ 335.215315][T13268] ____sys_sendmsg+0x505/0x830 [ 335.215350][T13268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.215389][T13268] ? import_iovec+0x74/0xa0 [ 335.215421][T13268] ___sys_sendmsg+0x21f/0x2a0 [ 335.215452][T13268] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.215524][T13268] ? __fget_files+0x2a/0x420 [ 335.215544][T13268] ? __fget_files+0x3a0/0x420 [ 335.215578][T13268] __x64_sys_sendmsg+0x19b/0x260 [ 335.215610][T13268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.215651][T13268] ? __pfx_ksys_write+0x10/0x10 [ 335.215689][T13268] ? do_syscall_64+0xbe/0xfa0 [ 335.215740][T13268] do_syscall_64+0xfa/0xfa0 [ 335.215769][T13268] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.215798][T13268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.215820][T13268] ? clear_bhb_loop+0x60/0xb0 [ 335.215847][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.215867][T13268] RIP: 0033:0x7f326838f749 [ 335.215887][T13268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.215906][T13268] RSP: 002b:00007f326926e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.215929][T13268] RAX: ffffffffffffffda RBX: 00007f32685e5fa0 RCX: 00007f326838f749 [ 335.215945][T13268] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 335.215958][T13268] RBP: 00007f326926e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.215972][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.215991][T13268] R13: 00007f32685e6038 R14: 00007f32685e5fa0 R15: 00007ffd6b234df8 [ 335.216030][T13268] [ 335.683135][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 335.695217][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 335.712620][T13275] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.085602][T13294] lo speed is unknown, defaulting to 1000 [ 336.142650][T13302] syzkaller1: entered promiscuous mode [ 336.154651][T13302] syzkaller1: entered allmulticast mode [ 336.215940][T13302] lo speed is unknown, defaulting to 1000 [ 336.225204][T13300] lo speed is unknown, defaulting to 1000 [ 336.723422][T13314] FAULT_INJECTION: forcing a failure. [ 336.723422][T13314] name failslab, interval 1, probability 0, space 0, times 0 [ 336.738536][T13314] CPU: 0 UID: 0 PID: 13314 Comm: syz.5.2067 Not tainted syzkaller #0 PREEMPT(full) [ 336.738557][T13314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.738567][T13314] Call Trace: [ 336.738573][T13314] [ 336.738579][T13314] dump_stack_lvl+0x189/0x250 [ 336.738606][T13314] ? __pfx____ratelimit+0x10/0x10 [ 336.738637][T13314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.738668][T13314] ? __pfx__printk+0x10/0x10 [ 336.738697][T13314] ? __pfx___might_resched+0x10/0x10 [ 336.738715][T13314] ? fs_reclaim_acquire+0x7d/0x100 [ 336.738734][T13314] should_fail_ex+0x414/0x560 [ 336.738762][T13314] should_failslab+0xa8/0x100 [ 336.738779][T13314] __kmalloc_cache_noprof+0x6f/0x6f0 [ 336.738802][T13314] ? tcf_action_init_1+0x19f/0x6d0 [ 336.738815][T13314] ? __nla_parse+0x40/0x60 [ 336.738834][T13314] tcf_action_init_1+0x19f/0x6d0 [ 336.738853][T13314] ? __pfx_tcf_action_init_1+0x10/0x10 [ 336.738867][T13314] ? _raw_read_unlock+0x28/0x50 [ 336.738892][T13314] ? tc_action_load_ops+0x214/0x4e0 [ 336.738922][T13314] ? __nla_parse+0x40/0x60 [ 336.738941][T13314] tcf_action_init+0x2cf/0xab0 [ 336.738964][T13314] ? __pfx_tcf_action_init+0x10/0x10 [ 336.738976][T13314] ? stack_trace_save+0x9c/0xe0 [ 336.739016][T13314] ? __x64_sys_sendmsg+0x19b/0x260 [ 336.739035][T13314] ? do_syscall_64+0xfa/0xfa0 [ 336.739055][T13314] ? __pfx___nla_validate_parse+0x10/0x10 [ 336.739101][T13314] tc_ctl_action+0x430/0xbd0 [ 336.739124][T13314] ? __pfx_tc_ctl_action+0x10/0x10 [ 336.739142][T13314] ? rcu_is_watching+0x15/0xb0 [ 336.739160][T13314] ? trace_contention_end+0x39/0x120 [ 336.739213][T13314] ? __pfx_tc_ctl_action+0x10/0x10 [ 336.739228][T13314] rtnetlink_rcv_msg+0x77c/0xb70 [ 336.739248][T13314] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 336.739264][T13314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.739279][T13314] ? ref_tracker_free+0x63a/0x7d0 [ 336.739295][T13314] ? __asan_memcpy+0x40/0x70 [ 336.739316][T13314] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.739339][T13314] netlink_rcv_skb+0x208/0x470 [ 336.739360][T13314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.739379][T13314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.739407][T13314] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.739433][T13314] netlink_unicast+0x82f/0x9e0 [ 336.739457][T13314] ? __pfx_netlink_unicast+0x10/0x10 [ 336.739476][T13314] ? netlink_sendmsg+0x642/0xb30 [ 336.739494][T13314] ? skb_put+0x11b/0x210 [ 336.739515][T13314] netlink_sendmsg+0x805/0xb30 [ 336.739544][T13314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.739580][T13314] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.739617][T13314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.739636][T13314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.739656][T13314] __sock_sendmsg+0x21c/0x270 [ 336.739682][T13314] ____sys_sendmsg+0x505/0x830 [ 336.739705][T13314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.739743][T13314] ? import_iovec+0x74/0xa0 [ 336.739778][T13314] ___sys_sendmsg+0x21f/0x2a0 [ 336.739806][T13314] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.739855][T13314] ? __fget_files+0x2a/0x420 [ 336.739869][T13314] ? __fget_files+0x3a0/0x420 [ 336.739898][T13314] __x64_sys_sendmsg+0x19b/0x260 [ 336.739920][T13314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.739948][T13314] ? __pfx_ksys_write+0x10/0x10 [ 336.739974][T13314] ? do_syscall_64+0xbe/0xfa0 [ 336.739997][T13314] do_syscall_64+0xfa/0xfa0 [ 336.740017][T13314] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.740037][T13314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.740052][T13314] ? clear_bhb_loop+0x60/0xb0 [ 336.740071][T13314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.740085][T13314] RIP: 0033:0x7fbbcfd8f749 [ 336.740100][T13314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.740113][T13314] RSP: 002b:00007fbbd0c68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.740129][T13314] RAX: ffffffffffffffda RBX: 00007fbbcffe5fa0 RCX: 00007fbbcfd8f749 [ 336.740140][T13314] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 336.740150][T13314] RBP: 00007fbbd0c68090 R08: 0000000000000000 R09: 0000000000000000 [ 336.740159][T13314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.740167][T13314] R13: 00007fbbcffe6038 R14: 00007fbbcffe5fa0 R15: 00007ffc6d2f8148 [ 336.740193][T13314] [ 337.222838][T13316] netlink: 'syz.5.2068': attribute type 10 has an invalid length. [ 337.251904][T13316] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 337.263051][T13316] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 337.277283][ T13] bond1: (slave macvlan2): link status up again after 0 ms [ 337.297635][ T36] bond1: (slave macvlan2): link status up again after 0 ms [ 337.319156][ T36] bond1: (slave macvlan2): link status up again after 0 ms [ 337.337940][ T36] bond1: (slave macvlan2): link status up again after 0 ms [ 337.356981][ T5943] bond1: (slave macvlan2): link status up again after 0 ms [ 337.379156][ T5943] bond1: (slave macvlan2): link status up again after 0 ms [ 337.399054][ T5943] bond1: (slave macvlan2): link status up again after 0 ms [ 337.417651][ T36] bond1: (slave macvlan2): link status up again after 0 ms [ 337.424924][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 337.428715][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2069'. [ 337.530910][T13321] lo speed is unknown, defaulting to 1000 [ 338.337066][ T13] net_ratelimit: 7 callbacks suppressed [ 338.337090][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.457206][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.567090][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.677384][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.787000][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.897002][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 339.007039][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 339.117036][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 339.227281][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 339.337221][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 342.698199][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.427167][ T5943] net_ratelimit: 36 callbacks suppressed [ 343.427194][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.547051][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.657137][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.767111][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.877218][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.987084][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 344.097084][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 344.207173][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 344.317154][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 344.427139][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 347.177532][ T124] block nbd5: Possible stuck request ffff888025560000: control (read@0,1024B). Runtime 30 seconds [ 347.188475][ T124] block nbd5: Possible stuck request ffff8880255601c0: control (read@1024,1024B). Runtime 30 seconds [ 347.199550][ T124] block nbd5: Possible stuck request ffff888025560380: control (read@2048,1024B). Runtime 30 seconds [ 347.210660][ T124] block nbd5: Possible stuck request ffff888025560540: control (read@3072,1024B). Runtime 30 seconds [ 348.507078][ T12] net_ratelimit: 36 callbacks suppressed [ 348.507101][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 348.627038][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 348.737077][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 348.847102][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 348.957076][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.067058][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.098798][ T56] block nbd3: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 30 seconds [ 349.109585][ T56] block nbd3: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 30 seconds [ 349.120632][ T56] block nbd3: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 30 seconds [ 349.131864][ T56] block nbd3: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 30 seconds [ 349.177157][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.287368][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.397077][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.507170][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.605050][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.614122][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.622218][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.631949][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.639900][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.686081][T13324] lo speed is unknown, defaulting to 1000 [ 349.822753][T13324] chnl_net:caif_netlink_parms(): no params data found [ 349.905704][T13324] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.913520][T13324] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.921040][T13324] bridge_slave_0: entered allmulticast mode [ 349.929162][T13324] bridge_slave_0: entered promiscuous mode [ 349.937552][T13324] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.944735][T13324] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.952909][T13324] bridge_slave_1: entered allmulticast mode [ 349.960652][T13324] bridge_slave_1: entered promiscuous mode [ 349.995528][T13324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.008042][T13324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.043618][T13324] team0: Port device team_slave_0 added [ 350.052636][T13324] team0: Port device team_slave_1 added [ 350.082825][T13324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.090122][T13324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.118059][T13324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.130913][T13324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.138106][T13324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.164582][T13324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.213536][T13324] hsr_slave_0: entered promiscuous mode [ 350.220855][T13324] hsr_slave_1: entered promiscuous mode [ 350.609654][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.619223][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.628741][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.637106][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.645095][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.682975][T13333] lo speed is unknown, defaulting to 1000 [ 350.844775][T13333] chnl_net:caif_netlink_parms(): no params data found [ 350.934600][T13333] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.942037][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.949494][T13333] bridge_slave_0: entered allmulticast mode [ 350.956830][T13333] bridge_slave_0: entered promiscuous mode [ 350.966516][T13333] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.973983][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.982280][T13333] bridge_slave_1: entered allmulticast mode [ 350.989905][T13333] bridge_slave_1: entered promiscuous mode [ 351.025867][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.039240][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.075822][T13333] team0: Port device team_slave_0 added [ 351.084264][T13333] team0: Port device team_slave_1 added [ 351.115273][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.122856][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.148836][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.162803][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.169910][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.196098][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.246325][T13333] hsr_slave_0: entered promiscuous mode [ 351.252997][T13333] hsr_slave_1: entered promiscuous mode [ 351.259689][T13333] debugfs: 'hsr0' already exists in 'hsr' [ 351.265520][T13333] Cannot create hsr debugfs directory [ 351.739106][ T5838] Bluetooth: hci5: command tx timeout [ 351.772265][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.781629][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.791556][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.800108][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.807971][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.822788][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 351.840294][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 351.852158][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 351.861319][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 351.870075][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 351.895128][T13343] lo speed is unknown, defaulting to 1000 [ 351.944632][T13345] lo speed is unknown, defaulting to 1000 [ 352.166775][T13343] chnl_net:caif_netlink_parms(): no params data found [ 352.242005][T13345] chnl_net:caif_netlink_parms(): no params data found [ 352.320639][T13343] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.328078][T13343] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.335354][T13343] bridge_slave_0: entered allmulticast mode [ 352.343068][T13343] bridge_slave_0: entered promiscuous mode [ 352.363480][T13343] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.370879][T13343] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.378590][T13343] bridge_slave_1: entered allmulticast mode [ 352.385974][T13343] bridge_slave_1: entered promiscuous mode [ 352.457009][T13345] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.464323][T13345] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.471771][T13345] bridge_slave_0: entered allmulticast mode [ 352.479257][T13345] bridge_slave_0: entered promiscuous mode [ 352.488623][T13345] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.495830][T13345] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.503822][T13345] bridge_slave_1: entered allmulticast mode [ 352.511369][T13345] bridge_slave_1: entered promiscuous mode [ 352.521151][T13343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.535296][T13343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.599685][T13345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.612283][T13343] team0: Port device team_slave_0 added [ 352.621662][T13345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.648623][T13343] team0: Port device team_slave_1 added [ 352.681612][T13345] team0: Port device team_slave_0 added [ 352.697180][ T5146] Bluetooth: hci6: command tx timeout [ 352.707179][T13345] team0: Port device team_slave_1 added [ 352.713592][T13343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.720759][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.747026][T13343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.771881][T13343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.782359][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.808504][T13343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.842429][T13345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.849503][T13345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.876740][T13345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.889789][T13345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.897004][T13345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.923086][T13345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.055968][T13343] hsr_slave_0: entered promiscuous mode [ 353.063782][T13343] hsr_slave_1: entered promiscuous mode [ 353.070956][T13343] debugfs: 'hsr0' already exists in 'hsr' [ 353.076735][T13343] Cannot create hsr debugfs directory [ 353.115560][T13345] hsr_slave_0: entered promiscuous mode [ 353.123265][T13345] hsr_slave_1: entered promiscuous mode [ 353.130997][T13345] debugfs: 'hsr0' already exists in 'hsr' [ 353.136777][T13345] Cannot create hsr debugfs directory [ 353.293238][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 353.303106][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 353.311944][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 353.327706][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 353.337618][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 353.469123][T13360] lo speed is unknown, defaulting to 1000 [ 353.818179][ T5146] Bluetooth: hci5: command tx timeout [ 353.825394][ T12] net_ratelimit: 12 callbacks suppressed [ 353.825415][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.897899][ T5146] Bluetooth: hci8: command tx timeout [ 353.897907][ T5838] Bluetooth: hci7: command tx timeout [ 353.934372][T13360] chnl_net:caif_netlink_parms(): no params data found [ 353.957237][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 354.105747][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.117181][T13360] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.124950][T13360] bridge_slave_0: entered allmulticast mode [ 354.134697][T13360] bridge_slave_0: entered promiscuous mode [ 354.163533][T13360] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.171440][T13360] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.180404][T13360] bridge_slave_1: entered allmulticast mode [ 354.189946][T13360] bridge_slave_1: entered promiscuous mode [ 354.249461][T13360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.273980][T13360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.317066][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 354.355188][T13360] team0: Port device team_slave_0 added [ 354.364667][T13360] team0: Port device team_slave_1 added [ 354.411321][T13360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.418653][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.444986][T13360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.460147][T13360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.467338][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.493689][T13360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.569405][T13360] hsr_slave_0: entered promiscuous mode [ 354.576407][T13360] hsr_slave_1: entered promiscuous mode [ 354.583620][T13360] debugfs: 'hsr0' already exists in 'hsr' [ 354.589904][T13360] Cannot create hsr debugfs directory [ 354.779070][ T5146] Bluetooth: hci6: command tx timeout [ 354.827147][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.010258][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.126987][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.237005][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.347364][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.429795][ T5146] Bluetooth: hci9: command tx timeout [ 355.459707][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.577186][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 355.897837][ T5146] Bluetooth: hci5: command tx timeout [ 355.977425][ T5838] Bluetooth: hci7: command tx timeout [ 355.984005][ T5146] Bluetooth: hci8: command tx timeout [ 356.857022][ T5146] Bluetooth: hci6: command tx timeout [ 357.499010][ T5146] Bluetooth: hci9: command tx timeout [ 357.977194][ T5146] Bluetooth: hci5: command tx timeout [ 358.069848][ T5838] Bluetooth: hci7: command tx timeout [ 358.080901][ T5146] Bluetooth: hci8: command tx timeout [ 358.901100][ T36] net_ratelimit: 29 callbacks suppressed [ 358.901124][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 358.937328][ T5146] Bluetooth: hci6: command tx timeout [ 359.017813][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.128985][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.237165][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.347162][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.461864][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.587641][ T5146] Bluetooth: hci9: command tx timeout [ 359.590864][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.707255][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.817818][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.929387][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 359.977382][ T56] block nbd0: Possible stuck request ffff888048c77000: control (read@0,1024B). Runtime 60 seconds [ 359.988464][ T56] block nbd0: Possible stuck request ffff888048c771c0: control (read@1024,1024B). Runtime 60 seconds [ 359.999791][ T56] block nbd0: Possible stuck request ffff888048c77380: control (read@2048,1024B). Runtime 60 seconds [ 360.011192][ T56] block nbd0: Possible stuck request ffff888048c77540: control (read@3072,1024B). Runtime 60 seconds [ 360.148142][ T5838] Bluetooth: hci7: command tx timeout [ 360.153603][ T5146] Bluetooth: hci8: command tx timeout [ 361.247133][ T5196] udevd[5196]: worker [7769] /devices/virtual/block/nbd0 is taking a long time [ 361.667139][ T5146] Bluetooth: hci9: command tx timeout [ 363.977459][ T13] net_ratelimit: 35 callbacks suppressed [ 363.977485][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.097172][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.217599][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.327252][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.437428][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.547148][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.657134][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.767160][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.877130][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 364.987205][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.087333][ T12] net_ratelimit: 36 callbacks suppressed [ 369.087356][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.207176][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.317276][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.427402][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.537073][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.647304][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.757225][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.867299][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 369.977681][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 370.087273][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.167142][ T5943] net_ratelimit: 36 callbacks suppressed [ 374.167165][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.287390][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.407091][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.517022][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.627036][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.738009][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.847102][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 374.957071][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 375.067098][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 375.177402][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 377.262401][ T124] block nbd5: Possible stuck request ffff888025560000: control (read@0,1024B). Runtime 60 seconds [ 377.273162][ T124] block nbd5: Possible stuck request ffff8880255601c0: control (read@1024,1024B). Runtime 60 seconds [ 377.284167][ T124] block nbd5: Possible stuck request ffff888025560380: control (read@2048,1024B). Runtime 60 seconds [ 377.295242][ T124] block nbd5: Possible stuck request ffff888025560540: control (read@3072,1024B). Runtime 60 seconds [ 378.542356][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.178979][ T56] block nbd3: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 60 seconds [ 379.189687][ T56] block nbd3: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 60 seconds [ 379.200671][ T56] block nbd3: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 60 seconds [ 379.211986][ T56] block nbd3: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 60 seconds [ 379.257533][ T5943] net_ratelimit: 36 callbacks suppressed [ 379.257556][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.285798][ T5196] udevd[5196]: worker [5829] /devices/virtual/block/nbd5 is taking a long time [ 379.295084][ T5196] udevd[5196]: worker [5845] /devices/virtual/block/nbd3 is taking a long time [ 379.377111][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.487306][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.597096][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.707095][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.820018][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.937174][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.047108][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.157125][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.267295][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.347086][ T36] net_ratelimit: 36 callbacks suppressed [ 384.347108][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.467043][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.577274][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.687102][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.797031][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.907001][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 385.018052][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 385.127152][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 385.237288][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 385.347063][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.427406][ T13] net_ratelimit: 36 callbacks suppressed [ 389.427614][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.547066][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.657780][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.767192][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.877059][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 389.987044][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 390.058774][ T56] block nbd0: Possible stuck request ffff888048c77000: control (read@0,1024B). Runtime 90 seconds [ 390.069532][ T56] block nbd0: Possible stuck request ffff888048c771c0: control (read@1024,1024B). Runtime 90 seconds [ 390.080468][ T56] block nbd0: Possible stuck request ffff888048c77380: control (read@2048,1024B). Runtime 90 seconds [ 390.091498][ T56] block nbd0: Possible stuck request ffff888048c77540: control (read@3072,1024B). Runtime 90 seconds [ 390.102623][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 390.207140][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 390.317313][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 390.427060][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.517268][ T5943] net_ratelimit: 36 callbacks suppressed [ 394.517286][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.637038][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.747076][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.857355][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 394.967141][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.077100][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.187038][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.297080][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.407082][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.517024][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 399.597091][ T36] net_ratelimit: 36 callbacks suppressed [ 399.597113][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 399.717093][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 399.837283][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 399.947008][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.057068][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.167101][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.277046][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.387107][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.497095][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.607091][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.687131][ T12] net_ratelimit: 36 callbacks suppressed [ 404.687155][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.807128][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.917085][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.027126][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.137074][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.247064][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.357031][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.467083][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.577071][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.687023][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 407.339318][ T124] block nbd5: Possible stuck request ffff888025560000: control (read@0,1024B). Runtime 90 seconds [ 407.350105][ T124] block nbd5: Possible stuck request ffff8880255601c0: control (read@1024,1024B). Runtime 90 seconds [ 407.361142][ T124] block nbd5: Possible stuck request ffff888025560380: control (read@2048,1024B). Runtime 90 seconds [ 407.372286][ T124] block nbd5: Possible stuck request ffff888025560540: control (read@3072,1024B). Runtime 90 seconds [ 409.260737][ T56] block nbd3: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 90 seconds [ 409.271755][ T56] block nbd3: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 90 seconds [ 409.282858][ T56] block nbd3: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 90 seconds [ 409.293844][ T56] block nbd3: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 90 seconds [ 409.767277][ T36] net_ratelimit: 36 callbacks suppressed [ 409.767327][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 409.887068][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 409.996994][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 410.117400][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 410.163786][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 410.173121][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 410.181865][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 410.190814][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 410.198679][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 410.227729][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 410.240297][T13698] lo speed is unknown, defaulting to 1000 [ 410.358115][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 410.388587][T13698] chnl_net:caif_netlink_parms(): no params data found [ 410.473098][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.480991][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.488870][T13698] bridge_slave_0: entered allmulticast mode [ 410.496707][T13698] bridge_slave_0: entered promiscuous mode [ 410.505520][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.513047][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.520458][T13698] bridge_slave_1: entered allmulticast mode [ 410.528140][T13698] bridge_slave_1: entered promiscuous mode [ 410.563016][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.575253][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.613487][T13698] team0: Port device team_slave_0 added [ 410.621804][T13698] team0: Port device team_slave_1 added [ 410.652731][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.659752][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.686478][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.700499][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.707587][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.734767][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.783472][T13698] hsr_slave_0: entered promiscuous mode [ 410.790063][T13698] hsr_slave_1: entered promiscuous mode [ 410.796296][T13698] debugfs: 'hsr0' already exists in 'hsr' [ 410.802805][T13698] Cannot create hsr debugfs directory [ 410.937849][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.057167][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.167883][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.204793][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 411.225706][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 411.234992][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 411.244468][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 411.253014][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 411.297090][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.310751][T13707] lo speed is unknown, defaulting to 1000 [ 411.476613][T13707] chnl_net:caif_netlink_parms(): no params data found [ 411.602692][T13707] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.610510][T13707] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.619186][T13707] bridge_slave_0: entered allmulticast mode [ 411.627646][T13707] bridge_slave_0: entered promiscuous mode [ 411.639840][T13707] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.647270][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.654564][T13707] bridge_slave_1: entered allmulticast mode [ 411.663335][T13707] bridge_slave_1: entered promiscuous mode [ 411.717665][T13707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.732167][T13707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.779898][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 411.789633][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 411.793593][T13707] team0: Port device team_slave_0 added [ 411.799095][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 411.808393][T13707] team0: Port device team_slave_1 added [ 411.811355][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 411.827595][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 411.859205][T13707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.866193][T13707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.892288][T13707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.905561][T13707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.912983][T13707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.939755][T13707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.004829][T13707] hsr_slave_0: entered promiscuous mode [ 412.011618][T13707] hsr_slave_1: entered promiscuous mode [ 412.018542][T13707] debugfs: 'hsr0' already exists in 'hsr' [ 412.024282][T13707] Cannot create hsr debugfs directory [ 412.030154][T13716] lo speed is unknown, defaulting to 1000 [ 412.227588][ T5146] Bluetooth: hci10: command tx timeout [ 412.319831][T13716] chnl_net:caif_netlink_parms(): no params data found [ 412.420552][T13716] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.427942][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.435202][T13716] bridge_slave_0: entered allmulticast mode [ 412.445330][T13716] bridge_slave_0: entered promiscuous mode [ 412.463387][T13716] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.470840][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.478293][T13716] bridge_slave_1: entered allmulticast mode [ 412.486599][T13716] bridge_slave_1: entered promiscuous mode [ 412.541224][T13716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.579636][T13716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.664783][T13716] team0: Port device team_slave_0 added [ 412.689594][T13716] team0: Port device team_slave_1 added [ 412.762827][T13716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.770902][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.798191][T13716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.815641][T13716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.822900][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.850018][T13716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.875376][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 412.885346][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 412.895397][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 412.904989][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 412.913804][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 412.935032][T13716] hsr_slave_0: entered promiscuous mode [ 412.944467][T13716] hsr_slave_1: entered promiscuous mode [ 412.951083][T13716] debugfs: 'hsr0' already exists in 'hsr' [ 412.957111][T13716] Cannot create hsr debugfs directory [ 413.018118][T13725] lo speed is unknown, defaulting to 1000 [ 413.272662][T13725] chnl_net:caif_netlink_parms(): no params data found [ 413.337365][ T5146] Bluetooth: hci11: command tx timeout [ 413.372025][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.380000][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.387851][T13725] bridge_slave_0: entered allmulticast mode [ 413.401521][T13725] bridge_slave_0: entered promiscuous mode [ 413.411765][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.419417][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.426762][T13725] bridge_slave_1: entered allmulticast mode [ 413.436340][T13725] bridge_slave_1: entered promiscuous mode [ 413.520860][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.554066][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.620731][T13725] team0: Port device team_slave_0 added [ 413.645891][T13725] team0: Port device team_slave_1 added [ 413.689572][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.696570][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.724424][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.740498][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.748208][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.774872][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.820641][ T5838] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 413.832234][ T5838] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 413.841943][ T5838] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 413.851226][ T5838] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 413.852341][T13725] hsr_slave_0: entered promiscuous mode [ 413.862348][ T5838] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 413.866241][T13725] hsr_slave_1: entered promiscuous mode [ 413.879663][T13725] debugfs: 'hsr0' already exists in 'hsr' [ 413.885434][T13725] Cannot create hsr debugfs directory [ 413.897440][ T5146] Bluetooth: hci12: command tx timeout [ 413.979675][T13734] lo speed is unknown, defaulting to 1000 [ 414.210025][T13734] chnl_net:caif_netlink_parms(): no params data found [ 414.311137][ T5146] Bluetooth: hci10: command tx timeout [ 414.351328][T13734] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.358698][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.366192][T13734] bridge_slave_0: entered allmulticast mode [ 414.374312][T13734] bridge_slave_0: entered promiscuous mode [ 414.384196][T13734] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.391592][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.399132][T13734] bridge_slave_1: entered allmulticast mode [ 414.406512][T13734] bridge_slave_1: entered promiscuous mode [ 414.466004][T13734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.492177][T13734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.529941][T13734] team0: Port device team_slave_0 added [ 414.538556][T13734] team0: Port device team_slave_1 added [ 414.570609][T13734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.578087][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.604511][T13734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.619017][T13734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.626022][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.652303][T13734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.702008][T13734] hsr_slave_0: entered promiscuous mode [ 414.709623][T13734] hsr_slave_1: entered promiscuous mode [ 414.715831][T13734] debugfs: 'hsr0' already exists in 'hsr' [ 414.721653][T13734] Cannot create hsr debugfs directory [ 414.867109][ T12] net_ratelimit: 9 callbacks suppressed [ 414.867131][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 414.938353][ T5146] Bluetooth: hci13: command tx timeout [ 414.987173][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.107291][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.217376][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.327182][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.417315][ T5146] Bluetooth: hci11: command tx timeout [ 415.437060][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.547095][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.657645][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.767432][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.877095][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.897122][ T5146] Bluetooth: hci14: command tx timeout [ 415.977232][ T5146] Bluetooth: hci12: command tx timeout [ 416.377262][ T5146] Bluetooth: hci10: command tx timeout [ 417.017092][ T5146] Bluetooth: hci13: command tx timeout [ 417.507193][ T5146] Bluetooth: hci11: command tx timeout [ 417.977086][ T5146] Bluetooth: hci14: command tx timeout [ 418.057049][ T5146] Bluetooth: hci12: command tx timeout [ 418.457350][ T5146] Bluetooth: hci10: command tx timeout [ 419.097049][ T5146] Bluetooth: hci13: command tx timeout [ 419.577269][ T5146] Bluetooth: hci11: command tx timeout [ 419.887110][ T5943] net_ratelimit: 35 callbacks suppressed [ 419.887134][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.007135][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.057019][ T5146] Bluetooth: hci14: command tx timeout [ 420.117130][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.137165][ T5146] Bluetooth: hci12: command tx timeout [ 420.142907][ T56] block nbd0: Possible stuck request ffff888048c77000: control (read@0,1024B). Runtime 120 seconds [ 420.153809][ T56] block nbd0: Possible stuck request ffff888048c771c0: control (read@1024,1024B). Runtime 120 seconds [ 420.164883][ T56] block nbd0: Possible stuck request ffff888048c77380: control (read@2048,1024B). Runtime 120 seconds [ 420.176265][ T56] block nbd0: Possible stuck request ffff888048c77540: control (read@3072,1024B). Runtime 120 seconds [ 420.227042][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.337044][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.447068][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.557059][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.667234][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.777733][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.887073][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 421.177187][ T5146] Bluetooth: hci13: command tx timeout [ 422.136969][ T5146] Bluetooth: hci14: command tx timeout [ 424.967117][ T13] net_ratelimit: 36 callbacks suppressed [ 424.967139][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.087446][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.197099][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.307094][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.417388][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.527094][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.637090][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.747209][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.856988][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.967089][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.077137][ T5943] net_ratelimit: 36 callbacks suppressed [ 430.077162][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.197082][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.307279][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.417382][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.527098][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.637128][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.747035][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.857399][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 430.967310][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 431.077104][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.177284][ T5943] net_ratelimit: 36 callbacks suppressed [ 435.177307][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.297238][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.407174][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.517023][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.627105][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.738432][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.847116][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 435.956951][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 436.067097][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 436.177145][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 437.419102][ T124] block nbd5: Possible stuck request ffff888025560000: control (read@0,1024B). Runtime 120 seconds [ 437.430122][ T124] block nbd5: Possible stuck request ffff8880255601c0: control (read@1024,1024B). Runtime 120 seconds [ 437.441250][ T124] block nbd5: Possible stuck request ffff888025560380: control (read@2048,1024B). Runtime 120 seconds [ 437.452372][ T124] block nbd5: Possible stuck request ffff888025560540: control (read@3072,1024B). Runtime 120 seconds [ 439.338189][ T56] block nbd3: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 120 seconds [ 439.349310][ T56] block nbd3: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 120 seconds [ 439.360562][ T56] block nbd3: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 120 seconds [ 439.371633][ T56] block nbd3: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 120 seconds [ 439.981222][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.267047][ T36] net_ratelimit: 36 callbacks suppressed [ 440.267071][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 440.387177][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 440.497106][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 440.607330][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 440.717026][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 440.827069][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 440.937197][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 441.047088][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 441.157294][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 441.267126][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 445.377319][ T5943] net_ratelimit: 36 callbacks suppressed [ 445.377344][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 445.497186][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 445.607325][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 445.717028][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 445.837105][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 445.947016][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 446.067080][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 446.177059][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 446.287206][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 446.397041][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 447.177070][ T5146] Bluetooth: hci3: command 0x0405 tx timeout [ 450.221606][ T56] block nbd0: Possible stuck request ffff888048c77000: control (read@0,1024B). Runtime 150 seconds [ 450.232837][ T56] block nbd0: Possible stuck request ffff888048c771c0: control (read@1024,1024B). Runtime 150 seconds [ 450.244187][ T56] block nbd0: Possible stuck request ffff888048c77380: control (read@2048,1024B). Runtime 150 seconds [ 450.255655][ T56] block nbd0: Possible stuck request ffff888048c77540: control (read@3072,1024B). Runtime 150 seconds [ 450.467622][ T36] net_ratelimit: 36 callbacks suppressed [ 450.467646][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 450.587470][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 450.697756][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 450.807171][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 450.917076][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 451.027038][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 451.137198][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 451.247163][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 451.357127][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 451.467378][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 455.497623][ T12] net_ratelimit: 35 callbacks suppressed [ 455.497654][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 455.618521][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 455.727078][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 455.837563][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 455.947368][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 456.058370][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 456.167132][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 456.277145][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 456.387052][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 456.497067][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 460.577082][ T5943] net_ratelimit: 36 callbacks suppressed [ 460.577103][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 460.697250][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 460.807372][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 460.917032][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 461.027074][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 461.137060][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 461.247181][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 461.357065][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 461.467333][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 461.577699][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 465.657651][ T13] net_ratelimit: 36 callbacks suppressed [ 465.657691][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 465.777259][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 465.887092][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 465.997015][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 466.107028][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 466.217927][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 466.327318][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 466.437070][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 466.547143][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 466.657515][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 467.497392][ T124] block nbd5: Possible stuck request ffff888025560000: control (read@0,1024B). Runtime 150 seconds [ 467.508561][ T124] block nbd5: Possible stuck request ffff8880255601c0: control (read@1024,1024B). Runtime 150 seconds [ 467.519643][ T124] block nbd5: Possible stuck request ffff888025560380: control (read@2048,1024B). Runtime 150 seconds [ 467.531093][ T124] block nbd5: Possible stuck request ffff888025560540: control (read@3072,1024B). Runtime 150 seconds [ 469.427152][ T56] block nbd3: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 150 seconds [ 469.438088][ T56] block nbd3: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 150 seconds [ 469.449222][ T56] block nbd3: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 150 seconds [ 469.460907][ T56] block nbd3: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 150 seconds [ 470.229400][ T5146] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 470.238150][ T5146] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 470.246044][ T5146] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 470.255530][ T5146] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 470.263397][ T5146] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 470.300979][T13747] lo speed is unknown, defaulting to 1000 [ 470.444237][T13747] chnl_net:caif_netlink_parms(): no params data found [ 470.532293][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.540110][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.547980][T13747] bridge_slave_0: entered allmulticast mode [ 470.555336][T13747] bridge_slave_0: entered promiscuous mode [ 470.565585][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.572937][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.581421][T13747] bridge_slave_1: entered allmulticast mode [ 470.589020][T13747] bridge_slave_1: entered promiscuous mode [ 470.624308][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.636453][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.673645][T13747] team0: Port device team_slave_0 added [ 470.682766][T13747] team0: Port device team_slave_1 added [ 470.720069][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.727755][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.753707][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.766025][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.773066][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.799992][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.818322][ T36] net_ratelimit: 33 callbacks suppressed [ 470.818339][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 470.862557][T13747] hsr_slave_0: entered promiscuous mode [ 470.870199][T13747] hsr_slave_1: entered promiscuous mode [ 470.876511][T13747] debugfs: 'hsr0' already exists in 'hsr' [ 470.882340][T13747] Cannot create hsr debugfs directory [ 470.938872][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 471.047668][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 471.177342][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 471.284825][T13758] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 471.292223][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 471.300259][T13758] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 471.310931][T13758] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 471.331538][T13758] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 471.348865][T13758] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 471.408416][T13756] lo speed is unknown, defaulting to 1000 [ 471.467906][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 471.570127][T13756] chnl_net:caif_netlink_parms(): no params data found [ 471.653377][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.660790][T13756] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.668240][T13756] bridge_slave_0: entered allmulticast mode [ 471.675647][T13756] bridge_slave_0: entered promiscuous mode [ 471.684641][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.692209][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.700013][T13756] bridge_slave_1: entered allmulticast mode [ 471.708084][T13756] bridge_slave_1: entered promiscuous mode [ 471.742693][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.755112][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.793059][T13756] team0: Port device team_slave_0 added [ 471.801643][T13756] team0: Port device team_slave_1 added [ 471.836103][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.843234][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.869449][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.882560][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.890056][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.916656][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.968680][T13756] hsr_slave_0: entered promiscuous mode [ 471.975221][T13756] hsr_slave_1: entered promiscuous mode [ 471.982845][T13756] debugfs: 'hsr0' already exists in 'hsr' [ 471.988748][T13756] Cannot create hsr debugfs directory [ 472.208169][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 472.296192][T13758] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 472.305733][T13758] Bluetooth: hci15: command tx timeout [ 472.313086][T13758] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 472.322980][T13758] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 472.333535][T13758] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 472.342328][T13758] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 472.349498][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 472.401981][T13766] lo speed is unknown, defaulting to 1000 [ 472.599033][T13766] chnl_net:caif_netlink_parms(): no params data found [ 472.683791][T13766] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.691125][T13766] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.698938][T13766] bridge_slave_0: entered allmulticast mode [ 472.706308][T13766] bridge_slave_0: entered promiscuous mode [ 472.715174][T13766] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.722431][T13766] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.731408][T13766] bridge_slave_1: entered allmulticast mode [ 472.738967][T13766] bridge_slave_1: entered promiscuous mode [ 472.774657][T13766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.777857][T13758] Bluetooth: hci5: command 0x0406 tx timeout [ 472.784118][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 472.797733][T13766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.841183][T13766] team0: Port device team_slave_0 added [ 472.850165][T13766] team0: Port device team_slave_1 added [ 472.884286][T13766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.891494][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.917649][T13766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.930844][T13766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.938406][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.964902][T13766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.024021][T13766] hsr_slave_0: entered promiscuous mode [ 473.032157][T13766] hsr_slave_1: entered promiscuous mode [ 473.041048][T13766] debugfs: 'hsr0' already exists in 'hsr' [ 473.048161][T13766] Cannot create hsr debugfs directory [ 473.157617][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 473.267049][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 473.330874][ T5146] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 473.341519][ T5146] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 473.350696][ T5146] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 473.358917][ T5146] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 473.368287][ T5146] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 473.416280][T13776] lo speed is unknown, defaulting to 1000 [ 473.422349][ T5838] Bluetooth: hci16: command tx timeout [ 473.720796][T13776] chnl_net:caif_netlink_parms(): no params data found [ 473.839756][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.848776][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.856307][T13776] bridge_slave_0: entered allmulticast mode [ 473.865927][T13776] bridge_slave_0: entered promiscuous mode [ 473.868027][ T5146] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 473.877267][T13776] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.886191][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.893928][T13776] bridge_slave_1: entered allmulticast mode [ 473.898927][ T5146] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 473.902796][T13776] bridge_slave_1: entered promiscuous mode [ 473.913250][ T5146] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 473.922342][ T5146] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 473.935967][ T5146] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 473.976527][T13776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.989881][T13776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.029467][T13776] team0: Port device team_slave_0 added [ 474.041686][T13776] team0: Port device team_slave_1 added [ 474.081427][T13785] lo speed is unknown, defaulting to 1000 [ 474.083829][T13776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.094374][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.120716][T13776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.145123][T13776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.152372][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.178977][T13776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.268586][T13776] hsr_slave_0: entered promiscuous mode [ 474.275371][T13776] hsr_slave_1: entered promiscuous mode [ 474.282428][T13776] debugfs: 'hsr0' already exists in 'hsr' [ 474.288504][T13776] Cannot create hsr debugfs directory [ 474.378057][ T5838] Bluetooth: hci17: command tx timeout [ 474.384404][ T5146] Bluetooth: hci15: command tx timeout [ 474.495616][T13785] chnl_net:caif_netlink_parms(): no params data found [ 474.618246][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.625447][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.633899][T13785] bridge_slave_0: entered allmulticast mode [ 474.641563][T13785] bridge_slave_0: entered promiscuous mode [ 474.650428][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.658413][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.665745][T13785] bridge_slave_1: entered allmulticast mode [ 474.674066][T13785] bridge_slave_1: entered promiscuous mode [ 474.719974][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.732795][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.784110][T13785] team0: Port device team_slave_0 added [ 474.792968][T13785] team0: Port device team_slave_1 added [ 474.833985][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.841350][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.869792][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.883099][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.890229][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.916635][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.980972][T13785] hsr_slave_0: entered promiscuous mode [ 474.989343][T13785] hsr_slave_1: entered promiscuous mode [ 474.996096][T13785] debugfs: 'hsr0' already exists in 'hsr' [ 475.002536][T13785] Cannot create hsr debugfs directory [ 475.417075][ T5146] Bluetooth: hci18: command tx timeout [ 475.498140][ T5146] Bluetooth: hci16: command tx timeout [ 475.847042][ T6688] net_ratelimit: 8 callbacks suppressed [ 475.847064][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 475.967152][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 475.987292][T13768] Bluetooth: hci19: command tx timeout [ 476.077458][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.187046][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.297598][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.407169][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.457151][T13768] Bluetooth: hci15: command tx timeout [ 476.457160][T13758] Bluetooth: hci17: command tx timeout [ 476.517029][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.627049][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.737197][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 476.847040][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 477.507094][T13758] Bluetooth: hci18: command tx timeout [ 477.587626][T13758] Bluetooth: hci16: command tx timeout [ 477.899926][T13768] Bluetooth: hci8: command 0x0406 tx timeout [ 477.903892][T13758] Bluetooth: hci9: command 0x0406 tx timeout [ 477.907185][T13768] Bluetooth: hci7: command 0x0406 tx timeout [ 478.067159][ T5838] Bluetooth: hci19: command tx timeout [ 478.537240][ T5838] Bluetooth: hci17: command tx timeout [ 478.542782][ T5838] Bluetooth: hci15: command tx timeout [ 479.587248][ T5838] Bluetooth: hci18: command tx timeout [ 479.657647][ T5838] Bluetooth: hci16: command tx timeout [ 480.137019][ T5838] Bluetooth: hci19: command tx timeout [ 480.301134][ T56] block nbd0: Possible stuck request ffff888048c77000: control (read@0,1024B). Runtime 180 seconds [ 480.312125][ T56] block nbd0: Possible stuck request ffff888048c771c0: control (read@1024,1024B). Runtime 180 seconds [ 480.323203][ T56] block nbd0: Possible stuck request ffff888048c77380: control (read@2048,1024B). Runtime 180 seconds [ 480.334282][ T56] block nbd0: Possible stuck request ffff888048c77540: control (read@3072,1024B). Runtime 180 seconds [ 480.617051][ T5838] Bluetooth: hci17: command tx timeout [ 480.934169][ T5196] udevd[5196]: worker [7769] /devices/virtual/block/nbd0 timeout; kill it [ 480.944121][ T5196] udevd[5196]: seq 20667 '/devices/virtual/block/nbd0' killed [ 480.957374][ T6688] net_ratelimit: 36 callbacks suppressed [ 480.957394][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.077434][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.187126][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.297268][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.407167][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.517283][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.627212][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.657155][ T5838] Bluetooth: hci18: command tx timeout [ 481.737522][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.857024][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 481.967327][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 482.218810][ T5838] Bluetooth: hci19: command tx timeout [ 485.967220][ T36] net_ratelimit: 35 callbacks suppressed [ 485.967243][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.087136][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.197209][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.317200][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.427166][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.537475][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.647401][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.757588][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.867090][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 486.977105][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.047139][ T6688] net_ratelimit: 36 callbacks suppressed [ 491.047204][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.167136][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.277272][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.386989][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.497132][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.607173][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.717041][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.827309][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 491.937087][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 492.047157][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 493.737598][ T31] INFO: task syz.3.2051:13250 blocked for more than 143 seconds. [ 493.745467][ T31] Not tainted syzkaller #0 [ 493.750619][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.759405][ T31] task:syz.3.2051 state:D stack:25608 pid:13250 tgid:13249 ppid:5832 task_flags:0x480140 flags:0x00080002 [ 493.771584][ T31] Call Trace: [ 493.774883][ T31] [ 493.777906][ T31] __schedule+0x1798/0x4cc0 [ 493.782451][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.787412][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.792294][ T31] ? __pfx___schedule+0x10/0x10 [ 493.797504][ T31] ? schedule+0x91/0x360 [ 493.802737][ T31] schedule+0x165/0x360 [ 493.807223][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 493.812730][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 493.819262][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 493.836941][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 493.842906][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 493.867093][ T31] nbd_set_size+0x47e/0x6a0 [ 493.871684][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 493.876766][ T31] ? nla_memcpy+0x5b/0xc0 [ 493.896674][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 493.910335][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 493.915876][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 493.923586][ T31] ? bpf_lsm_capable+0x9/0x20 [ 493.928857][ T31] ? security_capable+0x7e/0x2e0 [ 493.933824][ T31] ? radix_tree_lookup+0x240/0x290 [ 493.939155][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 493.944489][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 493.950262][ T31] ? rcu_is_watching+0x15/0xb0 [ 493.955086][ T31] ? __nla_parse+0x40/0x60 [ 493.959591][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 493.965964][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 493.971617][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.978426][ T31] ? stack_trace_save+0x9c/0xe0 [ 493.983339][ T31] genl_rcv_msg+0x60e/0x790 [ 493.987993][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.993060][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 493.998915][ T31] netlink_rcv_skb+0x208/0x470 [ 494.003723][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.008713][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.013769][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.019201][ T31] ? down_read+0x1ad/0x2e0 [ 494.023663][ T31] genl_rcv+0x28/0x40 [ 494.028179][ T31] netlink_unicast+0x82f/0x9e0 [ 494.033161][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.038533][ T31] ? netlink_sendmsg+0x642/0xb30 [ 494.043522][ T31] netlink_sendmsg+0x805/0xb30 [ 494.048475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.053801][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.059047][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.064015][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.069389][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.074706][ T31] __sock_sendmsg+0x21c/0x270 [ 494.079770][ T31] ____sys_sendmsg+0x505/0x830 [ 494.084562][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.089948][ T31] ? import_iovec+0x74/0xa0 [ 494.094488][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 494.099389][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.104662][ T31] ? __fget_files+0x2a/0x420 [ 494.109371][ T31] ? __fget_files+0x3a0/0x420 [ 494.114092][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 494.119169][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.124705][ T31] ? do_syscall_64+0xbe/0xfa0 [ 494.129844][ T31] do_syscall_64+0xfa/0xfa0 [ 494.134676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.140106][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.146221][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.150992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.157081][ T31] RIP: 0033:0x7f9640d8f749 [ 494.161522][ T31] RSP: 002b:00007f9641c23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.170017][ T31] RAX: ffffffffffffffda RBX: 00007f9640fe5fa0 RCX: 00007f9640d8f749 [ 494.178343][ T31] RDX: 0000000004000080 RSI: 00002000000001c0 RDI: 000000000000000a [ 494.186326][ T31] RBP: 00007f9640e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.194414][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.202491][ T31] R13: 00007f9640fe6038 R14: 00007f9640fe5fa0 R15: 00007ffcd0a574c8 [ 494.210744][ T31] [ 494.213801][ T31] INFO: task syz.6.2052:13259 blocked for more than 143 seconds. [ 494.222239][ T31] Not tainted syzkaller #0 [ 494.228572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.237456][ T31] task:syz.6.2052 state:D stack:25952 pid:13259 tgid:13258 ppid:6192 task_flags:0x400140 flags:0x00080002 [ 494.249471][ T31] Call Trace: [ 494.252776][ T31] [ 494.255734][ T31] __schedule+0x1798/0x4cc0 [ 494.260408][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.265329][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.270256][ T31] ? __pfx___schedule+0x10/0x10 [ 494.275152][ T31] ? schedule+0x91/0x360 [ 494.279811][ T31] schedule+0x165/0x360 [ 494.284019][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.289599][ T31] __mutex_lock+0x7e6/0x1350 [ 494.294249][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.299273][ T31] ? genl_rcv_msg+0x10d/0x790 [ 494.303988][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.309132][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.314285][ T31] genl_rcv_msg+0x10d/0x790 [ 494.318900][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.323969][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 494.329356][ T31] ? __asan_memcpy+0x40/0x70 [ 494.333984][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.339773][ T31] netlink_rcv_skb+0x208/0x470 [ 494.344560][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.349464][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.354514][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.359903][ T31] ? down_read+0x1ad/0x2e0 [ 494.364360][ T31] genl_rcv+0x28/0x40 [ 494.368414][ T31] netlink_unicast+0x82f/0x9e0 [ 494.373212][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.379385][ T31] ? netlink_sendmsg+0x642/0xb30 [ 494.384370][ T31] ? skb_put+0x11b/0x210 [ 494.388769][ T31] netlink_sendmsg+0x805/0xb30 [ 494.393591][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.399059][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.404052][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.409555][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.414881][ T31] __sock_sendmsg+0x21c/0x270 [ 494.419673][ T31] __sys_sendto+0x3bd/0x520 [ 494.424210][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.429648][ T31] ? count_memcg_event_mm+0x21/0x260 [ 494.434987][ T31] ? exc_page_fault+0x82/0x100 [ 494.440067][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 494.445388][ T31] __x64_sys_sendto+0xde/0x100 [ 494.450315][ T31] do_syscall_64+0xfa/0xfa0 [ 494.454865][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.460318][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.466429][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.471210][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.477423][ T31] RIP: 0033:0x7f43407915dc [ 494.481859][ T31] RSP: 002b:00007f4341655ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 494.490364][ T31] RAX: ffffffffffffffda RBX: 00007f4341655fc0 RCX: 00007f43407915dc [ 494.498443][ T31] RDX: 000000000000001c RSI: 00007f4341656010 RDI: 0000000000000007 [ 494.506428][ T31] RBP: 0000000000000000 R08: 00007f4341655f14 R09: 000000000000000c [ 494.514529][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 494.522599][ T31] R13: 00007f4341655f68 R14: 00007f4341656010 R15: 0000000000000000 [ 494.531049][ T31] [ 494.534113][ T31] INFO: task syz.6.2052:13265 blocked for more than 144 seconds. [ 494.544566][ T31] Not tainted syzkaller #0 [ 494.549584][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.558349][ T31] task:syz.6.2052 state:D stack:28296 pid:13265 tgid:13258 ppid:6192 task_flags:0x400140 flags:0x00080002 [ 494.570322][ T31] Call Trace: [ 494.573618][ T31] [ 494.576554][ T31] __schedule+0x1798/0x4cc0 [ 494.581482][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.586387][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.591294][ T31] ? __pfx___schedule+0x10/0x10 [ 494.596185][ T31] ? schedule+0x91/0x360 [ 494.600506][ T31] schedule+0x165/0x360 [ 494.604727][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.610255][ T31] __mutex_lock+0x7e6/0x1350 [ 494.614888][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.619767][ T31] ? genl_rcv_msg+0x10d/0x790 [ 494.624475][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.629874][ T31] ? stack_trace_save+0x9c/0xe0 [ 494.634746][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 494.640201][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.645494][ T31] genl_rcv_msg+0x10d/0x790 [ 494.650104][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.654985][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.660110][ T31] netlink_rcv_skb+0x208/0x470 [ 494.664910][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.669858][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.674913][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.680593][ T31] ? down_read+0x1ad/0x2e0 [ 494.685050][ T31] genl_rcv+0x28/0x40 [ 494.689119][ T31] netlink_unicast+0x82f/0x9e0 [ 494.693914][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.699373][ T31] ? netlink_sendmsg+0x642/0xb30 [ 494.704387][ T31] ? skb_put+0x11b/0x210 [ 494.708734][ T31] netlink_sendmsg+0x805/0xb30 [ 494.713548][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.718932][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.723890][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.729556][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.734885][ T31] __sock_sendmsg+0x21c/0x270 [ 494.739677][ T31] __sys_sendto+0x3bd/0x520 [ 494.744295][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.749619][ T31] ? count_memcg_event_mm+0x21/0x260 [ 494.754945][ T31] ? exc_page_fault+0x82/0x100 [ 494.759789][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 494.765107][ T31] __x64_sys_sendto+0xde/0x100 [ 494.769950][ T31] do_syscall_64+0xfa/0xfa0 [ 494.774482][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.780572][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.786674][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.791470][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.798803][ T31] RIP: 0033:0x7f43407915dc [ 494.803266][ T31] RSP: 002b:00007f4341634ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 494.811755][ T31] RAX: ffffffffffffffda RBX: 00007f4341634fc0 RCX: 00007f43407915dc [ 494.819802][ T31] RDX: 0000000000000024 RSI: 00007f4341635010 RDI: 000000000000000a [ 494.828203][ T31] RBP: 0000000000000000 R08: 00007f4341634f14 R09: 000000000000000c [ 494.836199][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 494.844276][ T31] R13: 00007f4341634f68 R14: 00007f4341635010 R15: 0000000000000000 [ 494.852490][ T31] [ 494.855529][ T31] INFO: task syz.6.2052:13266 blocked for more than 144 seconds. [ 494.867890][ T31] Not tainted syzkaller #0 [ 494.872878][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.881839][ T31] task:syz.6.2052 state:D stack:26088 pid:13266 tgid:13258 ppid:6192 task_flags:0x400140 flags:0x00080002 [ 494.894060][ T31] Call Trace: [ 494.897513][ T31] [ 494.900469][ T31] __schedule+0x1798/0x4cc0 [ 494.905007][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.910177][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.915072][ T31] ? __pfx___schedule+0x10/0x10 [ 494.920147][ T31] ? schedule+0x91/0x360 [ 494.924432][ T31] schedule+0x165/0x360 [ 494.928811][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.934303][ T31] __mutex_lock+0x7e6/0x1350 [ 494.940310][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.945124][ T31] ? genl_rcv_msg+0x10d/0x790 [ 494.949915][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.955071][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.960293][ T31] genl_rcv_msg+0x10d/0x790 [ 494.964823][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.969895][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 494.974947][ T31] ? __asan_memcpy+0x40/0x70 [ 494.979874][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.985304][ T31] netlink_rcv_skb+0x208/0x470 [ 494.990189][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.995061][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.000326][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.005671][ T31] ? down_read+0x1ad/0x2e0 [ 495.010371][ T31] genl_rcv+0x28/0x40 [ 495.014377][ T31] netlink_unicast+0x82f/0x9e0 [ 495.019364][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.024683][ T31] ? netlink_sendmsg+0x642/0xb30 [ 495.030103][ T31] ? skb_put+0x11b/0x210 [ 495.034379][ T31] netlink_sendmsg+0x805/0xb30 [ 495.039286][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.044610][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.049801][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.055340][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.060747][ T31] __sock_sendmsg+0x21c/0x270 [ 495.065492][ T31] __sys_sendto+0x3bd/0x520 [ 495.070168][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 495.075237][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.080512][ T31] ? fd_install+0x97/0x540 [ 495.084943][ T31] ? fd_install+0x30d/0x540 [ 495.089769][ T31] __x64_sys_sendto+0xde/0x100 [ 495.094590][ T31] do_syscall_64+0xfa/0xfa0 [ 495.099194][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.104429][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.110629][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.115342][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.121354][ T31] RIP: 0033:0x7f43407915dc [ 495.125798][ T31] RSP: 002b:00007f4341613ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 495.134738][ T31] RAX: ffffffffffffffda RBX: 00007f4341613fc0 RCX: 00007f43407915dc [ 495.142833][ T31] RDX: 000000000000001c RSI: 00007f4341614010 RDI: 000000000000000e [ 495.150912][ T31] RBP: 0000000000000000 R08: 00007f4341613f14 R09: 000000000000000c [ 495.159207][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 495.167342][ T31] R13: 00007f4341613f68 R14: 00007f4341614010 R15: 0000000000000000 [ 495.175375][ T31] [ 495.178960][ T31] INFO: task syz.0.2062:13289 blocked for more than 144 seconds. [ 495.186710][ T31] Not tainted syzkaller #0 [ 495.191777][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.200602][ T31] task:syz.0.2062 state:D stack:28264 pid:13289 tgid:13288 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 495.212748][ T31] Call Trace: [ 495.216052][ T31] [ 495.219076][ T31] __schedule+0x1798/0x4cc0 [ 495.223622][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.228922][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.233805][ T31] ? __pfx___schedule+0x10/0x10 [ 495.238762][ T31] ? schedule+0x91/0x360 [ 495.243045][ T31] schedule+0x165/0x360 [ 495.247379][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.252871][ T31] __mutex_lock+0x7e6/0x1350 [ 495.261900][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.266714][ T31] ? genl_rcv_msg+0x10d/0x790 [ 495.271532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.276612][ T31] ? radix_tree_lookup+0x240/0x290 [ 495.282120][ T31] genl_rcv_msg+0x10d/0x790 [ 495.286646][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.291796][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 495.296938][ T31] ? __asan_memcpy+0x40/0x70 [ 495.301562][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.307012][ T31] netlink_rcv_skb+0x208/0x470 [ 495.311837][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.316706][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.321887][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.327568][ T31] ? down_read+0x1ad/0x2e0 [ 495.332023][ T31] genl_rcv+0x28/0x40 [ 495.336004][ T31] netlink_unicast+0x82f/0x9e0 [ 495.340876][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.346192][ T31] ? netlink_sendmsg+0x642/0xb30 [ 495.351210][ T31] ? skb_put+0x11b/0x210 [ 495.355484][ T31] netlink_sendmsg+0x805/0xb30 [ 495.360579][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.365890][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.370931][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.376242][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.381948][ T31] __sock_sendmsg+0x21c/0x270 [ 495.386653][ T31] __sys_sendto+0x3bd/0x520 [ 495.391230][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 495.396280][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.401689][ T31] ? exc_page_fault+0x82/0x100 [ 495.406512][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 495.411923][ T31] __x64_sys_sendto+0xde/0x100 [ 495.416727][ T31] do_syscall_64+0xfa/0xfa0 [ 495.421457][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.426705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.433256][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.438111][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.444031][ T31] RIP: 0033:0x7f32683915dc [ 495.448588][ T31] RSP: 002b:00007f326926cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 495.457117][ T31] RAX: ffffffffffffffda RBX: 00007f326926cfc0 RCX: 00007f32683915dc [ 495.465315][ T31] RDX: 0000000000000020 RSI: 00007f326926d010 RDI: 0000000000000005 [ 495.473387][ T31] RBP: 0000000000000000 R08: 00007f326926cf14 R09: 000000000000000c [ 495.481664][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 495.489701][ T31] R13: 00007f326926cf68 R14: 00007f326926d010 R15: 0000000000000000 [ 495.497871][ T31] [ 495.500908][ T31] INFO: task syz.4.2063:13293 blocked for more than 145 seconds. [ 495.508738][ T31] Not tainted syzkaller #0 [ 495.513705][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.522478][ T31] task:syz.4.2063 state:D stack:25952 pid:13293 tgid:13292 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 495.534741][ T31] Call Trace: [ 495.538109][ T31] [ 495.541063][ T31] __schedule+0x1798/0x4cc0 [ 495.545614][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.550558][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.555439][ T31] ? __pfx___schedule+0x10/0x10 [ 495.560391][ T31] ? schedule+0x91/0x360 [ 495.564826][ T31] schedule+0x165/0x360 [ 495.569075][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.574569][ T31] __mutex_lock+0x7e6/0x1350 [ 495.579627][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.584447][ T31] ? genl_rcv_msg+0x10d/0x790 [ 495.589262][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.594351][ T31] ? radix_tree_lookup+0x240/0x290 [ 495.599573][ T31] genl_rcv_msg+0x10d/0x790 [ 495.604108][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.609227][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 495.614283][ T31] ? __asan_memcpy+0x40/0x70 [ 495.618958][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.624366][ T31] netlink_rcv_skb+0x208/0x470 [ 495.629529][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.634397][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.639512][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.644847][ T31] ? down_read+0x1ad/0x2e0 [ 495.649356][ T31] genl_rcv+0x28/0x40 [ 495.653360][ T31] netlink_unicast+0x82f/0x9e0 [ 495.658387][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.663705][ T31] ? netlink_sendmsg+0x642/0xb30 [ 495.668940][ T31] ? skb_put+0x11b/0x210 [ 495.673210][ T31] netlink_sendmsg+0x805/0xb30 [ 495.678407][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.683716][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.688752][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.694068][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.699469][ T31] __sock_sendmsg+0x21c/0x270 [ 495.704189][ T31] __sys_sendto+0x3bd/0x520 [ 495.708809][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 495.713871][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.719308][ T31] ? exc_page_fault+0x82/0x100 [ 495.724110][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 495.729793][ T31] __x64_sys_sendto+0xde/0x100 [ 495.734573][ T31] do_syscall_64+0xfa/0xfa0 [ 495.739442][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.744677][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.750843][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.755562][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.761554][ T31] RIP: 0033:0x7fb2d5f915dc [ 495.765991][ T31] RSP: 002b:00007fb2d6f11ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 495.774713][ T31] RAX: ffffffffffffffda RBX: 00007fb2d6f11fc0 RCX: 00007fb2d5f915dc [ 495.783086][ T31] RDX: 000000000000001c RSI: 00007fb2d6f12010 RDI: 0000000000000007 [ 495.791125][ T31] RBP: 0000000000000000 R08: 00007fb2d6f11f14 R09: 000000000000000c [ 495.799188][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 495.807244][ T31] R13: 00007fb2d6f11f68 R14: 00007fb2d6f12010 R15: 0000000000000000 [ 495.815276][ T31] [ 495.818537][ T31] INFO: task syz.4.2063:13298 blocked for more than 145 seconds. [ 495.826277][ T31] Not tainted syzkaller #0 [ 495.832614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.841387][ T31] task:syz.4.2063 state:D stack:28296 pid:13298 tgid:13292 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 495.853436][ T31] Call Trace: [ 495.856774][ T31] [ 495.860120][ T31] __schedule+0x1798/0x4cc0 [ 495.864663][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.869578][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.874625][ T31] ? __pfx___schedule+0x10/0x10 [ 495.879883][ T31] ? schedule+0x91/0x360 [ 495.884145][ T31] schedule+0x165/0x360 [ 495.888364][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.893878][ T31] __mutex_lock+0x7e6/0x1350 [ 495.898796][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.903619][ T31] ? genl_rcv_msg+0x10d/0x790 [ 495.908435][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.913495][ T31] ? stack_trace_save+0x9c/0xe0 [ 495.918468][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 495.923889][ T31] ? radix_tree_lookup+0x240/0x290 [ 495.929432][ T31] genl_rcv_msg+0x10d/0x790 [ 495.933976][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.938926][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.944033][ T31] netlink_rcv_skb+0x208/0x470 [ 495.948887][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.953781][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.958937][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.964276][ T31] ? down_read+0x1ad/0x2e0 [ 495.968866][ T31] genl_rcv+0x28/0x40 [ 495.972898][ T31] netlink_unicast+0x82f/0x9e0 [ 495.978564][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 495.983904][ T31] ? netlink_sendmsg+0x642/0xb30 [ 495.989068][ T31] ? skb_put+0x11b/0x210 [ 495.993358][ T31] netlink_sendmsg+0x805/0xb30 [ 495.998306][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.003723][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.008785][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.014141][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.019568][ T31] __sock_sendmsg+0x21c/0x270 [ 496.024293][ T31] __sys_sendto+0x3bd/0x520 [ 496.029228][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 496.034281][ T31] ? count_memcg_event_mm+0x21/0x260 [ 496.039690][ T31] ? exc_page_fault+0x82/0x100 [ 496.044501][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 496.049887][ T31] __x64_sys_sendto+0xde/0x100 [ 496.054689][ T31] do_syscall_64+0xfa/0xfa0 [ 496.059428][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.064670][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.070832][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.075542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.082009][ T31] RIP: 0033:0x7fb2d5f915dc [ 496.086449][ T31] RSP: 002b:00007fb2d6ef0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 496.094958][ T31] RAX: ffffffffffffffda RBX: 00007fb2d6ef0fc0 RCX: 00007fb2d5f915dc [ 496.098622][ T50] net_ratelimit: 35 callbacks suppressed [ 496.098644][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.103060][ T31] RDX: 0000000000000024 RSI: 00007fb2d6ef1010 RDI: 000000000000000a [ 496.124003][ T31] RBP: 0000000000000000 R08: 00007fb2d6ef0f14 R09: 000000000000000c [ 496.132385][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 496.140697][ T31] R13: 00007fb2d6ef0f68 R14: 00007fb2d6ef1010 R15: 0000000000000000 [ 496.149410][ T31] [ 496.152525][ T31] INFO: task syz.4.2063:13303 blocked for more than 145 seconds. [ 496.160366][ T31] Not tainted syzkaller #0 [ 496.165321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.174087][ T31] task:syz.4.2063 state:D stack:26088 pid:13303 tgid:13292 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 496.186507][ T31] Call Trace: [ 496.189870][ T31] [ 496.192825][ T31] __schedule+0x1798/0x4cc0 [ 496.197415][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.202303][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.207221][ T31] ? __pfx___schedule+0x10/0x10 [ 496.212117][ T31] ? schedule+0x91/0x360 [ 496.216374][ T31] schedule+0x165/0x360 [ 496.220740][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.226239][ T31] __mutex_lock+0x7e6/0x1350 [ 496.231220][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.236009][ T31] ? genl_rcv_msg+0x10d/0x790 [ 496.237377][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.240823][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.253116][ T31] ? radix_tree_lookup+0x240/0x290 [ 496.258447][ T31] genl_rcv_msg+0x10d/0x790 [ 496.263011][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.269075][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 496.274141][ T31] ? __asan_memcpy+0x40/0x70 [ 496.279179][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 496.284745][ T31] netlink_rcv_skb+0x208/0x470 [ 496.289615][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.294491][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.303859][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.309349][ T31] ? down_read+0x1ad/0x2e0 [ 496.313817][ T31] genl_rcv+0x28/0x40 [ 496.317906][ T31] netlink_unicast+0x82f/0x9e0 [ 496.322794][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 496.328470][ T31] ? netlink_sendmsg+0x642/0xb30 [ 496.333462][ T31] ? skb_put+0x11b/0x210 [ 496.337852][ T31] netlink_sendmsg+0x805/0xb30 [ 496.342666][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.348046][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.353029][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.358451][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.363781][ T31] __sock_sendmsg+0x21c/0x270 [ 496.368620][ T31] __sys_sendto+0x3bd/0x520 [ 496.373181][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 496.377115][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.378727][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.390632][ T31] ? fd_install+0x97/0x540 [ 496.395084][ T31] ? fd_install+0x30d/0x540 [ 496.399705][ T31] __x64_sys_sendto+0xde/0x100 [ 496.404516][ T31] do_syscall_64+0xfa/0xfa0 [ 496.409279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.414513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.420861][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.425569][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.431626][ T31] RIP: 0033:0x7fb2d5f915dc [ 496.436063][ T31] RSP: 002b:00007fb2d6ecfec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 496.444928][ T31] RAX: ffffffffffffffda RBX: 00007fb2d6ecffc0 RCX: 00007fb2d5f915dc [ 496.453346][ T31] RDX: 000000000000001c RSI: 00007fb2d6ed0010 RDI: 000000000000000e [ 496.461525][ T31] RBP: 0000000000000000 R08: 00007fb2d6ecff14 R09: 000000000000000c [ 496.469752][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 496.477859][ T31] R13: 00007fb2d6ecff68 R14: 00007fb2d6ed0010 R15: 0000000000000000 [ 496.485870][ T31] [ 496.489200][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.489257][ T31] INFO: task syz.5.2069:13318 blocked for more than 146 seconds. [ 496.504573][ T31] Not tainted syzkaller #0 [ 496.509818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.518681][ T31] task:syz.5.2069 state:D stack:26344 pid:13318 tgid:13317 ppid:6183 task_flags:0x400140 flags:0x00080002 [ 496.530854][ T31] Call Trace: [ 496.534166][ T31] [ 496.537586][ T31] __schedule+0x1798/0x4cc0 [ 496.542153][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.547330][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.552208][ T31] ? __pfx___schedule+0x10/0x10 [ 496.557146][ T31] ? schedule+0x91/0x360 [ 496.561435][ T31] schedule+0x165/0x360 [ 496.565599][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.571278][ T31] __mutex_lock+0x7e6/0x1350 [ 496.575914][ T31] ? __mutex_lock+0x5bb/0x1350 [ 496.581011][ T31] ? genl_rcv_msg+0x10d/0x790 [ 496.585726][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.591041][ T31] ? radix_tree_lookup+0x240/0x290 [ 496.596191][ T31] genl_rcv_msg+0x10d/0x790 [ 496.597004][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.600829][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.613033][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 496.618476][ T31] ? __asan_memcpy+0x40/0x70 [ 496.623110][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 496.628885][ T31] netlink_rcv_skb+0x208/0x470 [ 496.633684][ T31] ? __lock_acquire+0xab9/0xd20 [ 496.638671][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.643727][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.649296][ T31] ? down_read+0x1ad/0x2e0 [ 496.653762][ T31] genl_rcv+0x28/0x40 [ 496.658030][ T31] netlink_unicast+0x82f/0x9e0 [ 496.662849][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 496.668333][ T31] ? netlink_sendmsg+0x642/0xb30 [ 496.673332][ T31] ? skb_put+0x11b/0x210 [ 496.678023][ T31] netlink_sendmsg+0x805/0xb30 [ 496.682813][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.688334][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.693456][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.698895][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.704215][ T31] __sock_sendmsg+0x21c/0x270 [ 496.708988][ T31] __sys_sendto+0x3bd/0x520 [ 496.713522][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 496.718803][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.718795][ T31] ? count_memcg_event_mm+0x21/0x260 [ 496.718859][ T31] ? exc_page_fault+0x82/0x100 [ 496.736508][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 496.741881][ T31] __x64_sys_sendto+0xde/0x100 [ 496.746675][ T31] do_syscall_64+0xfa/0xfa0 [ 496.751265][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.756502][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.762696][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.767461][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.773359][ T31] RIP: 0033:0x7fbbcfd915dc [ 496.778351][ T31] RSP: 002b:00007fbbd0c66ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 496.786915][ T31] RAX: ffffffffffffffda RBX: 00007fbbd0c66fc0 RCX: 00007fbbcfd915dc [ 496.795146][ T31] RDX: 0000000000000020 RSI: 00007fbbd0c67010 RDI: 0000000000000005 [ 496.803221][ T31] RBP: 0000000000000000 R08: 00007fbbd0c66f14 R09: 000000000000000c [ 496.811256][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 496.819307][ T31] R13: 00007fbbd0c66f68 R14: 00007fbbd0c67010 R15: 0000000000000000 [ 496.827570][ T31] [ 496.830658][ T31] [ 496.830658][ T31] Showing all locks held in the system: [ 496.838432][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.845699][ T31] 1 lock held by khungtaskd/31: [ 496.850635][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.860757][ T31] 2 locks held by getty/5585: [ 496.865455][ T31] #0: ffff88814d12f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.875369][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 496.885809][ T31] 1 lock held by udevd/5829: [ 496.890473][ T31] #0: ffff888024eef358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 496.899952][ T31] 1 lock held by udevd/5845: [ 496.904544][ T31] #0: ffff888024f1f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 496.913960][ T31] 1 lock held by udevd/7769: [ 496.918655][ T31] #0: ffff88802303e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 496.928332][ T31] 6 locks held by syz.3.2051/13250: [ 496.933547][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.942012][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 496.951084][ T31] #2: ffff888024f2c270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 496.959338][ T50] bond1: (slave macvlan2): failed to get link speed/duplex [ 496.961671][ T31] #3: ffff8881427b72f8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 496.978498][ T31] #4: ffff8881427b6c98 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 496.990754][ T31] #5: ffff8881427b6cd0 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 497.003361][ T31] 2 locks held by syz.6.2052/13259: [ 497.008614][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.017038][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.026226][ T31] 2 locks held by syz.6.2052/13265: [ 497.031825][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.040181][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.049283][ T31] 2 locks held by syz.6.2052/13266: [ 497.054503][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.062900][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.071978][ T31] 2 locks held by syz.0.2062/13289: [ 497.078105][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.086346][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.095967][ T31] 2 locks held by syz.4.2063/13293: [ 497.097137][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 497.101431][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.117315][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.126302][ T31] 2 locks held by syz.4.2063/13298: [ 497.132059][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.140481][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.149631][ T31] 2 locks held by syz.4.2063/13303: [ 497.154849][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.163129][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.172196][ T31] 2 locks held by syz.5.2069/13318: [ 497.177871][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.186107][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.195149][ T31] 2 locks held by syz-executor/13324: [ 497.200728][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.209359][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.218602][ T31] 2 locks held by syz-executor/13333: [ 497.218672][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex [ 497.224011][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.240026][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.249272][ T31] 2 locks held by syz-executor/13343: [ 497.254692][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.263111][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.272206][ T31] 2 locks held by syz-executor/13345: [ 497.277958][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.286158][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.295219][ T31] 2 locks held by syz-executor/13360: [ 497.300657][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.309097][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.318201][ T31] 2 locks held by syz-executor/13698: [ 497.323587][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.332166][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.341657][ T31] 2 locks held by syz-executor/13707: [ 497.348213][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.356483][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.365698][ T31] 2 locks held by syz-executor/13716: [ 497.371155][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.379744][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.388813][ T31] 2 locks held by syz-executor/13725: [ 497.394205][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.402495][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.411764][ T31] 2 locks held by syz-executor/13734: [ 497.417285][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.425528][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.434891][ T31] 2 locks held by syz-executor/13747: [ 497.440352][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.448614][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.457674][ T31] 2 locks held by syz-executor/13756: [ 497.463060][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.471342][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.480707][ T31] 2 locks held by syz-executor/13766: [ 497.486086][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.494412][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.503710][ T31] 2 locks held by syz-executor/13776: [ 497.509221][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.517768][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.527179][ T31] 2 locks held by syz-executor/13785: [ 497.532575][ T31] #0: ffffffff8f333af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 497.540872][ T31] #1: ffffffff8f333908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 497.549942][ T31] [ 497.552287][ T31] ============================================= [ 497.552287][ T31] [ 497.560897][ T31] NMI backtrace for cpu 1 [ 497.560919][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 497.560942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.560956][ T31] Call Trace: [ 497.560965][ T31] [ 497.560975][ T31] dump_stack_lvl+0x189/0x250 [ 497.561012][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.561043][ T31] ? __pfx__printk+0x10/0x10 [ 497.561080][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 497.561108][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 497.561136][ T31] ? __pfx__printk+0x10/0x10 [ 497.561165][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 497.561189][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 497.561216][ T31] watchdog+0xf60/0xfa0 [ 497.561244][ T31] ? watchdog+0x1e2/0xfa0 [ 497.561274][ T31] kthread+0x711/0x8a0 [ 497.561308][ T31] ? __pfx_watchdog+0x10/0x10 [ 497.561330][ T31] ? __pfx_kthread+0x10/0x10 [ 497.561362][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.561390][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.561418][ T31] ? __pfx_kthread+0x10/0x10 [ 497.561450][ T31] ret_from_fork+0x4bc/0x870 [ 497.561476][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 497.561507][ T31] ? __switch_to_asm+0x39/0x70 [ 497.561525][ T31] ? __switch_to_asm+0x33/0x70 [ 497.561543][ T31] ? __pfx_kthread+0x10/0x10 [ 497.561592][ T31] ret_from_fork_asm+0x1a/0x30 [ 497.561632][ T31] [ 497.561648][ T31] Sending NMI from CPU 1 to CPUs 0: [ 497.587485][ T124] block nbd5: Possible stuck request ffff888025560000: control (read@0,1024B). Runtime 180 seconds [ 497.589416][ C0] NMI backtrace for cpu 0 [ 497.589441][ C0] CPU: 0 UID: 0 PID: 124 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 497.589462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.589475][ C0] Workqueue: kblockd blk_mq_timeout_work [ 497.589504][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 497.589524][ C0] Code: 08 ab fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 fc cb 10 fd 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 497.589540][ C0] RSP: 0018:ffffc90002e46cb0 EFLAGS: 00000002 [ 497.589555][ C0] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 497.589567][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 497.589578][ C0] RBP: 00000000000003f8 R08: ffff888141be0237 R09: 1ffff1102837c046 [ 497.589592][ C0] R10: dffffc0000000000 R11: ffffffff8514faf0 R12: dffffc0000000000 [ 497.589607][ C0] R13: ffffffff997e6902 R14: ffffffff99af9f40 R15: 0000000000000000 [ 497.589620][ C0] FS: 0000000000000000(0000) GS:ffff88812612e000(0000) knlGS:0000000000000000 [ 497.589636][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.589649][ C0] CR2: 000055eb09a10000 CR3: 000000006cf4a000 CR4: 00000000003526f0 [ 497.589666][ C0] Call Trace: [ 497.589673][ C0] [ 497.589684][ C0] serial8250_console_write+0x1410/0x1ba0 [ 497.589721][ C0] ? __lock_acquire+0xab9/0xd20 [ 497.589740][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 497.589771][ C0] ? console_flush_all+0x13a/0xb10 [ 497.589797][ C0] ? console_flush_all+0x13a/0xb10 [ 497.589825][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 497.589851][ C0] ? console_flush_all+0x13a/0xb10 [ 497.589875][ C0] console_flush_all+0x6f3/0xb10 [ 497.589909][ C0] ? console_flush_all+0x13a/0xb10 [ 497.589937][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 497.589967][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 497.589997][ C0] console_unlock+0xbb/0x190 [ 497.590019][ C0] ? vprintk_emit+0x2ee/0x590 [ 497.590041][ C0] ? __pfx_console_unlock+0x10/0x10 [ 497.590065][ C0] ? vprintk_emit+0x2ee/0x590 [ 497.590085][ C0] ? vprintk_emit+0x2ee/0x590 [ 497.590108][ C0] vprintk_emit+0x4c5/0x590 [ 497.590131][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 497.590154][ C0] ? __pfx_snprintf+0x10/0x10 [ 497.590180][ C0] dev_vprintk_emit+0x337/0x3f0 [ 497.590207][ C0] ? __lock_acquire+0xab9/0xd20 [ 497.590226][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 497.590261][ C0] dev_printk_emit+0xe0/0x130 [ 497.590286][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.590312][ C0] ? finish_task_switch+0x266/0x950 [ 497.590341][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 497.590368][ C0] ? __schedule+0x17ae/0x4cc0 [ 497.590393][ C0] ? __dev_printk+0x131/0x190 [ 497.590418][ C0] _dev_info+0x10a/0x160 [ 497.590446][ C0] ? __pfx__dev_info+0x10/0x10 [ 497.590470][ C0] ? nbd_get_config_unlocked+0x152/0x210 [ 497.590499][ C0] nbd_xmit_timeout+0x832/0xb30 [ 497.590523][ C0] blk_mq_handle_expired+0x172/0x2c0 [ 497.590545][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 497.590567][ C0] bt_iter+0x2c9/0x390 [ 497.590592][ C0] sbitmap_for_each_set+0x301/0x5e0 [ 497.590621][ C0] ? __pfx_bt_iter+0x10/0x10 [ 497.590645][ C0] ? __pfx_sbitmap_for_each_set+0x10/0x10 [ 497.590668][ C0] ? xa_find+0x25b/0x2b0 [ 497.590697][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 497.590720][ C0] blk_mq_queue_tag_busy_iter+0x4e6/0x8c0 [ 497.590746][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 497.590767][ C0] ? blk_mq_queue_tag_busy_iter+0xb4/0x8c0 [ 497.590792][ C0] ? __pfx_blk_mq_queue_tag_busy_iter+0x10/0x10 [ 497.590816][ C0] ? debug_object_free+0x2a2/0x340 [ 497.590842][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 497.590868][ C0] ? __synchronize_srcu+0x316/0x3a0 [ 497.590892][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 497.590915][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 497.590933][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 497.590960][ C0] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 497.590986][ C0] ? synchronize_srcu+0x295/0x2c0 [ 497.591005][ C0] blk_mq_timeout_work+0x1d6/0x3e0 [ 497.591025][ C0] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 497.591048][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.591070][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 497.591088][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 497.591109][ C0] process_scheduled_works+0xae1/0x17b0 [ 497.591144][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.591173][ C0] worker_thread+0x8a0/0xda0 [ 497.591195][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 497.591221][ C0] ? __kthread_parkme+0x7b/0x200 [ 497.591248][ C0] kthread+0x711/0x8a0 [ 497.591274][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.591293][ C0] ? __pfx_kthread+0x10/0x10 [ 497.591318][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.591340][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.591363][ C0] ? __pfx_kthread+0x10/0x10 [ 497.591387][ C0] ret_from_fork+0x4bc/0x870 [ 497.591408][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.591430][ C0] ? __switch_to_asm+0x39/0x70 [ 497.591445][ C0] ? __switch_to_asm+0x33/0x70 [ 497.591460][ C0] ? __pfx_kthread+0x10/0x10 [ 497.591484][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.591509][ C0] [ 498.241723][ T124] block nbd5: Possible stuck request ffff8880255601c0: control (read@1024,1024B). Runtime 180 seconds [ 498.252819][ T124] block nbd5: Possible stuck request ffff888025560380: control (read@2048,1024B). Runtime 180 seconds [ 498.263875][ T124] block nbd5: Possible stuck request ffff888025560540: control (read@3072,1024B). Runtime 180 seconds [ 498.974414][ T5196] udevd[5196]: worker [5829] /devices/virtual/block/nbd5 timeout; kill it [ 498.983233][ T5196] udevd[5196]: seq 21703 '/devices/virtual/block/nbd5' killed [ 498.990890][ T5196] udevd[5196]: worker [5845] /devices/virtual/block/nbd3 timeout; kill it [ 498.999664][ T5196] udevd[5196]: seq 21783 '/devices/virtual/block/nbd3' killed [ 499.499269][ T56] block nbd3: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 180 seconds [ 499.510230][ T56] block nbd3: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 180 seconds [ 499.521458][ T56] block nbd3: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 180 seconds [ 499.532794][ T56] block nbd3: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 180 seconds [ 501.117452][ T13] net_ratelimit: 34 callbacks suppressed [ 501.117478][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.236992][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.347001][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.420650][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.456974][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.567103][ T5943] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.677231][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.787027][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 501.897314][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 502.007003][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 502.116993][ T6688] bond1: (slave macvlan2): failed to get link speed/duplex