last executing test programs: 20.544469378s ago: executing program 2 (id=5954): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea9", 0x3c}], 0x1, 0x0, 0x0, 0xb00}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}], 0x2, 0x488c4) 20.399828994s ago: executing program 2 (id=5957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x0) 20.227955829s ago: executing program 2 (id=5961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) 20.090912756s ago: executing program 2 (id=5964): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 19.370755079s ago: executing program 4 (id=5975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4b", 0x2d}], 0x1}}], 0x1, 0x488c4) 19.370430792s ago: executing program 1 (id=5976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x76, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b345", 0x2}, 0x50) 19.293988666s ago: executing program 1 (id=5978): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xe, 0x1010, r0, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x28011, r0, 0x513e9000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x10) sendmmsg$inet6(r5, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {}], 0x3, 0x1c000) pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x7, 0x6, 0x1, 0x4, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xdd, 0x9, 0x100000002ddd, 0x3, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x405}, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000200)=ANY=[@ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8050) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40881}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES64=r5, @ANYRES8=0x0, @ANYRES64=r1, @ANYRESHEX=r2], &(0x7f00000001c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r11, 0xe800, 0x0}, 0x10) 19.257232884s ago: executing program 3 (id=5979): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000032c0)=@o_path={&(0x7f0000003280)='./file0\x00', 0x0, 0x4008, r3}, 0x18) (async) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400), 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYBLOB="01002dbd70a8e85cef3026edcc00050002000200000008000800e0000002"], 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x4000080) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x31, 0x0, 0x235, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000240)}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000004900), 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x2000}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x6c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(blake2s-224-x86,xts-aes-neon)\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1b7}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_emit_ethernet(0x69, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x33, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2c6"}}}}}}}, 0x0) 19.255980749s ago: executing program 4 (id=5980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.213168664s ago: executing program 2 (id=5981): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040810) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newneigh={0x24, 0x1c, 0x20, 0x70b52b, 0x25dfdbf7, {0x2, 0x0, 0x0, r2, 0x0, 0x69}, [@NDA_NH_ID={0x8, 0xd, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30, 0x4090}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r7}, 0x38) 19.119717523s ago: executing program 4 (id=5982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 19.119226231s ago: executing program 0 (id=5983): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 19.110789106s ago: executing program 3 (id=5984): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c000180060001002af300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0xffff3759, 0x4) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x140c, 0x200, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000140)="a7", 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) (async) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @multicast2}, &(0x7f0000000040)=0xc) 18.950150632s ago: executing program 4 (id=5985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015005c073591829b13256fb41786803b0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r2, 0x101, 0x19, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x4, 0x3, 0x2, 0x6, 0x8c, 0x9, 0x5, 0x6}}) 18.908021114s ago: executing program 0 (id=5986): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0280000000000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 18.821566895s ago: executing program 3 (id=5987): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 18.690714657s ago: executing program 3 (id=5988): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea9", 0x3c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x488c4) (fail_nth: 8) 18.359131884s ago: executing program 3 (id=5989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 18.338132315s ago: executing program 2 (id=5990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x70, r1, 0x1421, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',}+.&^'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x200000c0) 18.334452661s ago: executing program 3 (id=5991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x70, r1, 0x1421, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',}+.&^'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x200000c0) 16.783766958s ago: executing program 4 (id=5992): r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe800000"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 16.783411618s ago: executing program 0 (id=5993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.779366558s ago: executing program 1 (id=5994): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffffffffffffec4) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x3e}, 0x17) getsockopt(r2, 0xf4, 0x4, &(0x7f0000000080)=""/153, &(0x7f0000000180)=0x99) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0) 16.74977377s ago: executing program 0 (id=5995): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16, @ANYBLOB="24042dbd7000fcdbdf250200000008000a01050000002c00258005"], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x40050) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00"], 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 16.647097439s ago: executing program 0 (id=5996): r0 = socket(0x2, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000000000), 0x2, 0x488c4) 16.567992732s ago: executing program 0 (id=5997): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x8, 0x3}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000280)={r6, 0x8000, 0x20, 0x1, 0x9}, &(0x7f00000002c0)=0x18) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) (async) sendmmsg$alg(r7, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc32dfc25636e423524db04c71663707bda877c6e6732d6a84803dd719cc879837794ab7da8de113b3702fbd3a0a577dfcb3415734386927c0c9e76252e9f069f6", 0x41}, {&(0x7f0000000180)="cd1095e789efb1beed2cded762a04e75a5d59cea2a3682b2c7aeabcf9173c0fdf279118236840b0a53f3f9425f202b41dbb186662c0bb3bbfd580690d53694132e746ca429dc3a2ebd933caba6a86d3ca7c61610b215e52470c74092acdab7195be453cf1cbcb81d20c898483bd4287f20005f83628fdb91ca66d99eb5b3b21ca41c5097a2a09dc4b90d5dd329a8034eed89b5f3af47284ea6fdb8b7a67d9302a0ea945f9fe97313", 0xa8}], 0x2, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0xb2a0}], 0x18, 0x20000040}], 0x1, 0x8000) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001500)=""/163, 0xa3}, {&(0x7f0000001740)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) 15.907100075s ago: executing program 4 (id=5998): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) clock_gettime(0x0, &(0x7f0000005340)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005200)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/177, 0xb1}], 0x4, &(0x7f00000013c0)=""/5, 0x5}}, {{&(0x7f0000001400)=@nfc_llcp, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001480)=""/54, 0x36}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/228, 0xe4}, {&(0x7f00000025c0)=""/230, 0xe6}, {&(0x7f00000026c0)=""/211, 0xd3}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003840)=@hci, 0x80, &(0x7f00000049c0)=[{&(0x7f00000038c0)=""/91, 0x5b}, {&(0x7f0000003940)=""/16, 0x10}, {&(0x7f0000003980)=""/25, 0x19}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004a00)=""/223, 0xdf}, 0x8}, {{&(0x7f0000004b00)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004b80)=""/125, 0x7d}, {&(0x7f0000004c00)=""/161, 0xa1}], 0x2, &(0x7f0000004d00)=""/13, 0xd}, 0x200}, {{&(0x7f0000004d40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004dc0)=""/57, 0x39}, {&(0x7f0000004e00)}, {&(0x7f0000004e40)=""/146, 0x92}, {&(0x7f0000004f00)}, {&(0x7f0000004f40)=""/17, 0x11}, {&(0x7f0000004f80)=""/236, 0xec}], 0x6, &(0x7f0000005100)=""/227, 0xe3}, 0x3000}], 0x5, 0x100, &(0x7f0000005380)={r2, r3+10000000}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005640)=@bpf_ext={0x1c, 0x19, &(0x7f00000053c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0xd, 0x1, 0x0, 0x1}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000054c0)='syzkaller\x00', 0x1, 0x95, &(0x7f0000005500)=""/149, 0x41100, 0x20, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x12ff0, 0xffffffffffffffff, 0x1, &(0x7f00000055c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000005600)=[{0x4, 0x3, 0xc, 0x6}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000005700)=r4, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000005780)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005800), r6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000005940)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005900)={&(0x7f0000005840)={0x98, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5e}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5c}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000020) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000059c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000005a80)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005a40)={&(0x7f0000005a00)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x63}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x20048850) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_IOC_READY(r11, 0x9360, 0x401) sendmsg$nl_route(r6, &(0x7f0000005b80)={&(0x7f0000005ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005b40)={&(0x7f0000005b00)=@getnexthop={0x28, 0x6a, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc40}, 0x1) socket$inet(0x2, 0x2, 0x3) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000005bc0)=""/138, 0x8a) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005cc0), r9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000005d80)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005d40)={&(0x7f0000005d00)={0x24, r12, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008091) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f0000005e80)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x30, 0x1406, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000005ec0)=0x1) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000006040)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006000)={&(0x7f0000005f40)={0xa8, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x60, 0x8, "2d85556932a0589e9dd2e74189b5c51f68cf04044b3862e306c0332d423226f867e8a3fcdadc6d95cdeca253e4217fe319da86adfe4220be7d21d5c05b7f2190f803e3f396361e126d21e05a9488dd58c07671faf1b2c1b7162653cc"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) r13 = socket(0x1d, 0x4, 0x8000) sendmsg$key(r13, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000061c0)={&(0x7f0000006080)={0x2, 0x76, 0x1, 0x7, 0x22, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_sec_ctx={0x15, 0x18, 0xef, 0x10, 0xa0, "9cc3ee2282724eee9f40167ea7a3c448f7368ede2b9d24cca8038d43da1c9b14f20195b1c9dd212b2e97960f209d3817f9aaec747c573068c882ac3505d7afd59b3ed0c0bc2eb49b043af8cebeda0748e1e17656466219fe6c02ffe12ffabd462941158a8bdad0b2379c825b9dff064244cba7bb229f07271c1ccfe573a76bb1fbeb86b4200463f8e641eb174113750dc58bd7b7d81f4baaf38349e3c7b41ec0"}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd25, 0x3506}, @sadb_x_nat_t_type={0x1, 0x14, 0xb4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @empty, 0x7}, @in6={0xa, 0x4e20, 0x1000, @loopback, 0x710}}]}, 0x110}}, 0x840) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006240)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000006340)={&(0x7f0000006280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006300)={&(0x7f00000062c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000063c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 15.895301525s ago: executing program 1 (id=5999): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea9", 0x3c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x488c4) (fail_nth: 9) 15.47638996s ago: executing program 1 (id=6000): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000180)="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") r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}}, 0x0) 15.459971926s ago: executing program 1 (id=6001): r0 = socket(0x28, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080007000000000014000000466f0020006600004011907864010101ac14141a440420604e204e210fa8907804000000020000000800000000000000e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1af62a6b91f24973071a9982df0047f85280f4a5decece67fc02428f830343e910fef6f3467c9d7776a06c133a50752cff4aa72bcbb9e4dbd8489e2e3698aae45a8753071fb6d803943d171adb60e8fcec9865e46df8fa120b939537a05b63daec7e0ecf9713c491646f04435364de697fbabf3c72d08a24f1bf34212bcdb7d5e038ac28ff76d5243b695e7faa1211a940da618930d79acdc6fdc7c9f2f4a5435d3f748ec68429f5ca2548315801cf73d74816f1ece3dfa6fb557ac105ad28d4532e1c8c6b5ab3526fbe73916dbe123acb4ac89c1b5a0664b81e216453db066e3c4318006ba3e25ed6cfe22c80f17619b7372947013749c7d04f13277f81f4461492d9237c5961be4d30965607a4d5db095070df02230cc87d9ab8633e60de83aedf8814e632bac8566bbfcdf159c9a2a7944be1a61792b8af10dd28d0ebadf7e4f231af099450813c5e27f934112e11124b01106615cee48aee88947f31a1839b83ad5c8326e30f318ae57b56becaec7094c4e7d2a377bfcb0c29ce046623e6ec120ea63c53cef94deb3d813d4b1749009084c3ade1675b55490b9d1faa03d7a2fd34921d62c31d7ef1f181883ac312dbb08b2600edce0ba197d1704485e2f155ec659de742a22628270968905324381f203a1ad7ac30b252d4c3ff9915fe32c16cbf4684a7c517b9a2ecec2433685f4741b6f02f8aa2bd0f6bf370962f38214899129012a0d36ba14c0a3e93742d063f09f0c1e838fc1095b065089c91d02a4b2e1d0a49d2294682a38d578424d1e81ff959b33f746114b795319a047d65f5e3b7a347e6cf8b0fad9eaea3db5eca7e953f77bc6c23de8f938bb505013f5c39173cb69312af98d5ff14715794c729f41490297c2b418eef11841a788eaaa7ebdb77880b64701aee50371f542e79831321833dda60213fa741ec197419d83f61c06397a47a75f50b986c53e6fdf8a6e07008e1a29b1774ceb11429a1ecec05bf80da802239c58f226ab5eb34d522ff62bc0528d87e716793e56c48352648291470bb592981acc06c2ba1547e11babf3f1d22f5e01e1f759c05816cdfe0c986c58ebbd08d8449807cd2579d5b7265930f696f8aff73e247cec12c0d1fdbcc4880245b866c2cab8b6bdf0951c2c6beccab7513ba28545036d164b407e1228a831e3b37f9c56721c347d499c1c29b8a972d2d1cfeb47f20975b4eb0b62e25dfa4ef116e62e415cde22bc039d1ccb9e70a5599881bb8b61f680670b787afc8734ac8c39ca50fbed619e54ac1421bc2584d4f7027593e12f738ba0f2d5fe03fcc7168056332477eb0b26c0579d54d8537f941acc183fdca495a7ffa10f0d3189f8c32742d5564c97e26b659969f7060a7c8864445c252c5b1755a3e8473ef9b0909eb74cabb553c3d6ab58f12ed75703d9139a4f57ef71af90815a5273e64282582623c41c51352d12ce48e0712f50ab3dc528619e1e16b52452204b3c7e1e16556e8fbdf0d623216186ff5ca84ad730ff457b06e766e085d5dee40a308fae8b4e19e18245a3ed02967f07441903c149ae9da5fe238194009ded2a3d80a67e1c3abdfb63fad0155529c48a748ef499252d5d3e912304b1d11ee77dc25427e5e9a115583a692558aef65faba0e1f0bc4aa6b6ac21d4fe4741feac17a7c6b5699384e30f7236f400d9df6d658add13b4f0a4b16a77d1f9e6b4d3045f7ba7ee68ce171008e635496ad631f59846b7895aa329390d2ad9980b6586d383a740f1e1b0883a3fddc4126c2d09fd5815dd892692e1c3b7eb2951b766bd4bca19896f75dbfaf51ad4ca9f97d00049082091e3c6cdf16026b1de4603ac7afde08a7a8ffd110636d3d063c2bb6fa84bfd7fff8ad04d0c812fe14a77bd3a9b9fdcc3e0fbaf5ac2475130987f81ac8c9898f95112aa597f40ec11e04684e45b56d81e11180f59b606886306fbc62c076a12a41238ccd74d3154f312f10f3ad215d64a468cb15eae30a3f7f7e5cf6a87dbd813df8093d2b3586693ddee6a5c1b0caaec1ef419657b89692bbd2a7064767cf5b4c3ef6d120557b4df5e7ee6094f935870edc070ae3e96c850a61356c5d79008fc98728dd87470a98aa1c1ab6056990110c0b3108e50b573d77ad4856c03da8098c8fd176685803db471a642dfb9a9ef2d14e186eea96219ea0fa03cc28d7ea2686e61c3f46f15c23213a6432d77ffea182ec26dbf9118a2fc082bdee517e0974982819a7a996b7a30f5901dd3c44b3344bdf93a61ecc4cddb969d3b94e6f4910a9b38ff886d5c96a820092f112ee6eb0ce094940280a2040862157497b3a3374a4d62c34d1fdf6826811db1ea7f28b64f22304e2246dcee44ca361370c0d1727f951dbdb1a329368a5dd76ba4486ce508a28d0ce2eb95daab36caf101dc2351c4efdf3ec70221888dad522b0d51a0b9765a410ca8cf00baaeb074d310cdd908e76586e59d0c7c27eb5557e474ac543c5c237d5b2eedccab12b0f96fa2c00239e2017dfeb645fdd748d5c21684181b81464d32909b4995f274a9717f224c1e34cd41c8d12b9f13daeae3f65510c6ecf94956d630db0478fbf87c7d7c75221046a1a1886696f89e427b94139164b99b88d83b633122b5d9483f4261be27d01d6011cee48b1c24a3aff62c4d04f9dfb00e1a7a1013f97e87306147b7da305a36077cf0a7618563a754e34e65c2ee95932eb2da4b73ca83f3afcce93d8d59357ca7b5d9f37e5ba475be39bb8870af109d95527b44777ff8f55ace0adf84f73ce065371a4ce78b22d7a6bbf1bbae4c57b44262ddff39f4ce8b858f89737f33786445cbaf271959da249080a11508f41f3db02b592c848f79a5abbe8479747bd12ce883bab3042cffea2c02a081cfd3f155cadf87d5d7ad669bc086f34005f8544d4a0296ab0f54bf51e82552bf291fc23c9d2b0d0dfd11d0a3ade01f08bb6dd94c5480756b831b9614098bca1f77756cf19f3c29c9c465d1efdf9338aa1706a9c53ff71caa3f7be72f31fdd45301ef4cee1fbc"], 0xfce) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}, {0x4e23, 0x0, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "59cbddf893e2"}}}}}}}, 0x3c) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)="8e252f33", 0x4}], 0x2}}], 0x1, 0x24000054) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@ethernet={0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="a8d85c28a1669c4e41fc27bca4bb5be2e8a0d7a0c7bf4553870a6e52d37c3fb65842c140c05a", 0x26}, {&(0x7f00000002c0)="f27b2ce39c1f3f6f85ead7ef632b5602ecacb44d10d8e9822b735b692f616dea1b067caba1b1481556892dc76cf81623dd56a0032a6bd88ea43ac88e0d35ffb56444372ec45093a770901288c5b7cc523c3108d4a537e76c239321f4d1ea6ad88d28a0736dc2a88455efdc5ff92062c524d7dbf18f88", 0x76}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="50000000000000001301000000000000584abe98fc1f48484a74f64a3812bf0630e435a7732486faf025cca462b03b47553aacc565e78e50ee46345945f7456f79ee29c2351b740100008000000000d4"], 0x50}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r8, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee1568810003c000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e312a", 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) 2.653571118s ago: executing program 32 (id=5990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x70, r1, 0x1421, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',}+.&^'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x200000c0) 2.622438818s ago: executing program 33 (id=5991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x70, r1, 0x1421, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',}+.&^'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x200000c0) 1.10955265s ago: executing program 34 (id=5997): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x8, 0x3}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000280)={r6, 0x8000, 0x20, 0x1, 0x9}, &(0x7f00000002c0)=0x18) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) (async) sendmmsg$alg(r7, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc32dfc25636e423524db04c71663707bda877c6e6732d6a84803dd719cc879837794ab7da8de113b3702fbd3a0a577dfcb3415734386927c0c9e76252e9f069f6", 0x41}, {&(0x7f0000000180)="cd1095e789efb1beed2cded762a04e75a5d59cea2a3682b2c7aeabcf9173c0fdf279118236840b0a53f3f9425f202b41dbb186662c0bb3bbfd580690d53694132e746ca429dc3a2ebd933caba6a86d3ca7c61610b215e52470c74092acdab7195be453cf1cbcb81d20c898483bd4287f20005f83628fdb91ca66d99eb5b3b21ca41c5097a2a09dc4b90d5dd329a8034eed89b5f3af47284ea6fdb8b7a67d9302a0ea945f9fe97313", 0xa8}], 0x2, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0xb2a0}], 0x18, 0x20000040}], 0x1, 0x8000) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001500)=""/163, 0xa3}, {&(0x7f0000001740)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) 62.444409ms ago: executing program 35 (id=6001): r0 = socket(0x28, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xfce) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}, {0x4e23, 0x0, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "59cbddf893e2"}}}}}}}, 0x3c) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000003c0)="8e252f33", 0x4}], 0x2}}], 0x1, 0x24000054) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@ethernet={0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="a8d85c28a1669c4e41fc27bca4bb5be2e8a0d7a0c7bf4553870a6e52d37c3fb65842c140c05a", 0x26}, {&(0x7f00000002c0)="f27b2ce39c1f3f6f85ead7ef632b5602ecacb44d10d8e9822b735b692f616dea1b067caba1b1481556892dc76cf81623dd56a0032a6bd88ea43ac88e0d35ffb56444372ec45093a770901288c5b7cc523c3108d4a537e76c239321f4d1ea6ad88d28a0736dc2a88455efdc5ff92062c524d7dbf18f88", 0x76}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="50000000000000001301000000000000584abe98fc1f48484a74f64a3812bf0630e435a7732486faf025cca462b03b47553aacc565e78e50ee46345945f7456f79ee29c2351b740100008000000000d4"], 0x50}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x34, r8, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee1568810003c000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e312a", 0xb8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01020000000000000000240000030900010073797a30000000d3c1000000030a01010000000000000000010000000900010073797a300000000064000c003778ef311f69bf864be21ec976bb1357c76915b7958a8db04b53b3d68f1a818e7dbb074c28e8189ee613b33d2b4b58f76d95581fb5565f6c6d2c39944f72a6f8174bba0a7785f66ad11d31bd57bffcda21eaf11fd5d64c605730b950b702941198000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007fff800380001800c00010062697477697365002800028008000340000000020800014000000014080240000000170400048008000640000000040900010073797a3000000000140000001100010000000000000000000700000a00"], 0x164}}, 0x0) 0s ago: executing program 36 (id=5998): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) clock_gettime(0x0, &(0x7f0000005340)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005200)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)=""/220, 0xdc}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/177, 0xb1}], 0x4, &(0x7f00000013c0)=""/5, 0x5}}, {{&(0x7f0000001400)=@nfc_llcp, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001480)=""/54, 0x36}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/228, 0xe4}, {&(0x7f00000025c0)=""/230, 0xe6}, {&(0x7f00000026c0)=""/211, 0xd3}], 0x5, &(0x7f0000002840)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003840)=@hci, 0x80, &(0x7f00000049c0)=[{&(0x7f00000038c0)=""/91, 0x5b}, {&(0x7f0000003940)=""/16, 0x10}, {&(0x7f0000003980)=""/25, 0x19}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004a00)=""/223, 0xdf}, 0x8}, {{&(0x7f0000004b00)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004b80)=""/125, 0x7d}, {&(0x7f0000004c00)=""/161, 0xa1}], 0x2, &(0x7f0000004d00)=""/13, 0xd}, 0x200}, {{&(0x7f0000004d40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004dc0)=""/57, 0x39}, {&(0x7f0000004e00)}, {&(0x7f0000004e40)=""/146, 0x92}, {&(0x7f0000004f00)}, {&(0x7f0000004f40)=""/17, 0x11}, {&(0x7f0000004f80)=""/236, 0xec}], 0x6, &(0x7f0000005100)=""/227, 0xe3}, 0x3000}], 0x5, 0x100, &(0x7f0000005380)={r2, r3+10000000}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005640)=@bpf_ext={0x1c, 0x19, &(0x7f00000053c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0xd, 0x1, 0x0, 0x1}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000054c0)='syzkaller\x00', 0x1, 0x95, &(0x7f0000005500)=""/149, 0x41100, 0x20, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x12ff0, 0xffffffffffffffff, 0x1, &(0x7f00000055c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000005600)=[{0x4, 0x3, 0xc, 0x6}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000005700)=r4, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000005780)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005800), r6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000005940)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005900)={&(0x7f0000005840)={0x98, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5e}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5c}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000020) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000059c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000005a80)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005a40)={&(0x7f0000005a00)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x63}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x20048850) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_IOC_READY(r11, 0x9360, 0x401) sendmsg$nl_route(r6, &(0x7f0000005b80)={&(0x7f0000005ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005b40)={&(0x7f0000005b00)=@getnexthop={0x28, 0x6a, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc40}, 0x1) socket$inet(0x2, 0x2, 0x3) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000005bc0)=""/138, 0x8a) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005cc0), r9) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000005d80)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005d40)={&(0x7f0000005d00)={0x24, r12, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008091) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f0000005e80)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x30, 0x1406, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000005ec0)=0x1) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000006040)={&(0x7f0000005f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006000)={&(0x7f0000005f40)={0xa8, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x60, 0x8, "2d85556932a0589e9dd2e74189b5c51f68cf04044b3862e306c0332d423226f867e8a3fcdadc6d95cdeca253e4217fe319da86adfe4220be7d21d5c05b7f2190f803e3f396361e126d21e05a9488dd58c07671faf1b2c1b7162653cc"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) r13 = socket(0x1d, 0x4, 0x8000) sendmsg$key(r13, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000061c0)={&(0x7f0000006080)={0x2, 0x76, 0x1, 0x7, 0x22, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_sec_ctx={0x15, 0x18, 0xef, 0x10, 0xa0, "9cc3ee2282724eee9f40167ea7a3c448f7368ede2b9d24cca8038d43da1c9b14f20195b1c9dd212b2e97960f209d3817f9aaec747c573068c882ac3505d7afd59b3ed0c0bc2eb49b043af8cebeda0748e1e17656466219fe6c02ffe12ffabd462941158a8bdad0b2379c825b9dff064244cba7bb229f07271c1ccfe573a76bb1fbeb86b4200463f8e641eb174113750dc58bd7b7d81f4baaf38349e3c7b41ec0"}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd25, 0x3506}, @sadb_x_nat_t_type={0x1, 0x14, 0xb4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @empty, 0x7}, @in6={0xa, 0x4e20, 0x1000, @loopback, 0x710}}]}, 0x110}}, 0x840) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006240)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000006340)={&(0x7f0000006280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006300)={&(0x7f00000062c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000063c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 685.607651][T26173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.607675][T26173] __sock_sendmsg+0x21c/0x270 [ 685.607705][T26173] ____sys_sendmsg+0x505/0x830 [ 685.607735][T26173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.607769][T26173] ? import_iovec+0x74/0xa0 [ 685.607796][T26173] ___sys_sendmsg+0x21f/0x2a0 [ 685.607823][T26173] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.607887][T26173] ? __fget_files+0x2a/0x420 [ 685.607904][T26173] ? __fget_files+0x3a0/0x420 [ 685.607934][T26173] __x64_sys_sendmsg+0x19b/0x260 [ 685.607960][T26173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.607994][T26173] ? __pfx_ksys_write+0x10/0x10 [ 685.608026][T26173] ? do_syscall_64+0xbe/0xfa0 [ 685.608049][T26173] do_syscall_64+0xfa/0xfa0 [ 685.608068][T26173] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.608087][T26173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.608106][T26173] ? clear_bhb_loop+0x60/0xb0 [ 685.608130][T26173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.608148][T26173] RIP: 0033:0x7fbd27d8f749 [ 685.608165][T26173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.608183][T26173] RSP: 002b:00007fbd28ced038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.608203][T26173] RAX: ffffffffffffffda RBX: 00007fbd27fe5fa0 RCX: 00007fbd27d8f749 [ 685.608217][T26173] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 685.608229][T26173] RBP: 00007fbd28ced090 R08: 0000000000000000 R09: 0000000000000000 [ 685.608241][T26173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 685.608252][T26173] R13: 00007fbd27fe6038 R14: 00007fbd27fe5fa0 R15: 00007ffd006414d8 [ 685.608286][T26173] [ 685.978797][ T7748] Bluetooth: hci4: command tx timeout [ 686.080892][T26047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 686.150175][T26185] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5744'. [ 686.287981][T26197] netlink: 'syz.2.5747': attribute type 39 has an invalid length. [ 686.355497][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5747'. [ 686.390545][T26047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.421943][T26196] lo speed is unknown, defaulting to 1000 [ 686.450200][T26196] wg1 speed is unknown, defaulting to 1000 [ 686.464133][T26047] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.534751][T12521] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.537717][T26197] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5747'. [ 686.541935][T12521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.585133][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.592330][T12521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.823898][T26047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.029066][T26047] veth0_vlan: entered promiscuous mode [ 687.043337][T26047] veth1_vlan: entered promiscuous mode [ 687.075315][T26047] veth0_macvtap: entered promiscuous mode [ 687.084563][T26047] veth1_macvtap: entered promiscuous mode [ 687.200414][T26226] FAULT_INJECTION: forcing a failure. [ 687.200414][T26226] name failslab, interval 1, probability 0, space 0, times 0 [ 687.215519][T26047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.223964][T26226] CPU: 0 UID: 0 PID: 26226 Comm: syz.2.5754 Not tainted syzkaller #0 PREEMPT(full) [ 687.223991][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.224004][T26226] Call Trace: [ 687.224012][T26226] [ 687.224019][T26226] dump_stack_lvl+0x189/0x250 [ 687.224047][T26226] ? __pfx____ratelimit+0x10/0x10 [ 687.224064][T26226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.224087][T26226] ? __pfx__printk+0x10/0x10 [ 687.224107][T26226] ? __pfx___might_resched+0x10/0x10 [ 687.224126][T26226] ? fs_reclaim_acquire+0x7d/0x100 [ 687.224148][T26226] should_fail_ex+0x414/0x560 [ 687.224178][T26226] should_failslab+0xa8/0x100 [ 687.224197][T26226] __kvmalloc_node_noprof+0x158/0x910 [ 687.224221][T26226] ? __nf_register_net_hook+0x232/0x930 [ 687.224243][T26226] ? nf_hook_entries_grow+0x281/0x720 [ 687.224270][T26226] nf_hook_entries_grow+0x281/0x720 [ 687.224303][T26226] __nf_register_net_hook+0x2c9/0x930 [ 687.224334][T26226] nf_register_net_hook+0xb2/0x190 [ 687.224357][T26226] nf_register_net_hooks+0x44/0x1b0 [ 687.224387][T26226] nf_ct_netns_do_get+0x212/0x5a0 [ 687.224415][T26226] ? nf_ct_iterate_cleanup_net+0x9f/0xd0 [ 687.224443][T26226] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 687.224462][T26226] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 687.224486][T26226] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 687.224520][T26226] nf_ct_netns_inet_get+0x3b/0x150 [ 687.224545][T26226] nf_ct_netns_get+0x5b/0xb0 [ 687.224565][T26226] nft_connlimit_do_init+0x1de/0x2e0 [ 687.224590][T26226] nft_set_elem_expr_alloc+0x1db/0x590 [ 687.224612][T26226] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 687.224643][T26226] ? nft_rhash_init+0x2d1/0x3a0 [ 687.224669][T26226] ? __pfx_nft_rhash_init+0x10/0x10 [ 687.224687][T26226] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.224705][T26226] ? __pfx_nft_rhash_key+0x10/0x10 [ 687.224724][T26226] ? __pfx_nft_rhash_obj+0x10/0x10 [ 687.224743][T26226] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 687.224768][T26226] nft_set_expr_alloc+0x4da/0x760 [ 687.224792][T26226] nf_tables_newset+0x1c4c/0x2540 [ 687.224828][T26226] ? __pfx_nf_tables_newset+0x10/0x10 [ 687.224872][T26226] ? __nla_parse+0x40/0x60 [ 687.224894][T26226] nfnetlink_rcv+0x11d9/0x2590 [ 687.224944][T26226] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 687.224958][T26226] ? kasan_save_track+0x4f/0x80 [ 687.225028][T26226] ? netlink_deliver_tap+0x2e/0x1b0 [ 687.225064][T26226] netlink_unicast+0x82f/0x9e0 [ 687.225089][T26226] ? __pfx_netlink_unicast+0x10/0x10 [ 687.225108][T26226] ? netlink_sendmsg+0x642/0xb30 [ 687.225125][T26226] ? skb_put+0x11b/0x210 [ 687.225148][T26226] netlink_sendmsg+0x805/0xb30 [ 687.225177][T26226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.225199][T26226] ? aa_sock_msg_perm+0xf1/0x1d0 [ 687.225225][T26226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 687.225242][T26226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.225262][T26226] __sock_sendmsg+0x21c/0x270 [ 687.225290][T26226] ____sys_sendmsg+0x505/0x830 [ 687.225316][T26226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.225345][T26226] ? import_iovec+0x74/0xa0 [ 687.225369][T26226] ___sys_sendmsg+0x21f/0x2a0 [ 687.225396][T26226] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.225451][T26226] ? __fget_files+0x2a/0x420 [ 687.225466][T26226] ? __fget_files+0x3a0/0x420 [ 687.225492][T26226] __x64_sys_sendmsg+0x19b/0x260 [ 687.225515][T26226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.225545][T26226] ? __pfx_ksys_write+0x10/0x10 [ 687.225572][T26226] ? do_syscall_64+0xbe/0xfa0 [ 687.225593][T26226] do_syscall_64+0xfa/0xfa0 [ 687.225609][T26226] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.225626][T26226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.225643][T26226] ? clear_bhb_loop+0x60/0xb0 [ 687.225664][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.225681][T26226] RIP: 0033:0x7f7f43b8f749 [ 687.225695][T26226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.225711][T26226] RSP: 002b:00007f7f4499b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.225730][T26226] RAX: ffffffffffffffda RBX: 00007f7f43de5fa0 RCX: 00007f7f43b8f749 [ 687.225743][T26226] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 687.225753][T26226] RBP: 00007f7f4499b090 R08: 0000000000000000 R09: 0000000000000000 [ 687.225764][T26226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.225774][T26226] R13: 00007f7f43de6038 R14: 00007f7f43de5fa0 R15: 00007fff82992a88 [ 687.225803][T26226] [ 687.252222][T26047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.353498][T26230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'. [ 687.739615][T26231] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5756'. [ 687.753492][T12522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.764269][T12522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.781265][T26230] netlink: 121 bytes leftover after parsing attributes in process `syz.1.5755'. [ 687.806769][T12522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.862638][T12521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.087051][ T7748] Bluetooth: hci4: command tx timeout [ 688.111319][T26238] lo speed is unknown, defaulting to 1000 [ 688.119426][T26238] wg1 speed is unknown, defaulting to 1000 [ 688.149817][T12521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.167892][T12521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.191180][T26245] netlink: 428 bytes leftover after parsing attributes in process `syz.3.5760'. [ 688.201136][T26245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5760'. [ 688.207707][ T7903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.219026][ T7903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.516705][T26267] FAULT_INJECTION: forcing a failure. [ 688.516705][T26267] name failslab, interval 1, probability 0, space 0, times 0 [ 688.532927][T26267] CPU: 1 UID: 0 PID: 26267 Comm: syz.0.5766 Not tainted syzkaller #0 PREEMPT(full) [ 688.532952][T26267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.532963][T26267] Call Trace: [ 688.532971][T26267] [ 688.532979][T26267] dump_stack_lvl+0x189/0x250 [ 688.533016][T26267] ? __pfx____ratelimit+0x10/0x10 [ 688.533034][T26267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.533055][T26267] ? __pfx__printk+0x10/0x10 [ 688.533079][T26267] ? __pfx___might_resched+0x10/0x10 [ 688.533102][T26267] should_fail_ex+0x414/0x560 [ 688.533132][T26267] should_failslab+0xa8/0x100 [ 688.533152][T26267] __kvmalloc_node_noprof+0x158/0x910 [ 688.533179][T26267] ? nf_hook_entries_grow+0x281/0x720 [ 688.533200][T26267] ? __pfx___mutex_lock+0x10/0x10 [ 688.533224][T26267] nf_hook_entries_grow+0x281/0x720 [ 688.533258][T26267] __nf_register_net_hook+0x2c9/0x930 [ 688.533290][T26267] nf_register_net_hook+0xb2/0x190 [ 688.533313][T26267] nf_register_net_hooks+0x44/0x1b0 [ 688.533337][T26267] nf_defrag_ipv6_enable+0x87/0x120 [ 688.533362][T26267] nf_ct_netns_do_get+0x1e7/0x5a0 [ 688.533383][T26267] ? nf_ct_iterate_cleanup_net+0x9f/0xd0 [ 688.533410][T26267] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 688.533429][T26267] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 688.533453][T26267] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 688.533484][T26267] nf_ct_netns_inet_get+0x3b/0x150 [ 688.533509][T26267] nf_ct_netns_get+0x5b/0xb0 [ 688.533530][T26267] nft_connlimit_do_init+0x1de/0x2e0 [ 688.533556][T26267] nft_set_elem_expr_alloc+0x1db/0x590 [ 688.533578][T26267] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 688.533611][T26267] ? nft_rhash_init+0x2d1/0x3a0 [ 688.533634][T26267] ? __pfx_nft_rhash_init+0x10/0x10 [ 688.533653][T26267] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.533671][T26267] ? __pfx_nft_rhash_key+0x10/0x10 [ 688.533690][T26267] ? __pfx_nft_rhash_obj+0x10/0x10 [ 688.533708][T26267] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 688.533733][T26267] nft_set_expr_alloc+0x4da/0x760 [ 688.533759][T26267] nf_tables_newset+0x1c4c/0x2540 [ 688.533797][T26267] ? __pfx_nf_tables_newset+0x10/0x10 [ 688.533845][T26267] ? __nla_parse+0x40/0x60 [ 688.533869][T26267] nfnetlink_rcv+0x11d9/0x2590 [ 688.533923][T26267] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 688.533959][T26267] ? ref_tracker_free+0x63a/0x7d0 [ 688.534015][T26267] ? __netlink_deliver_tap+0x807/0x850 [ 688.534035][T26267] ? netlink_deliver_tap+0x2e/0x1b0 [ 688.534073][T26267] netlink_unicast+0x82f/0x9e0 [ 688.534101][T26267] ? __pfx_netlink_unicast+0x10/0x10 [ 688.534120][T26267] ? netlink_sendmsg+0x642/0xb30 [ 688.534138][T26267] ? skb_put+0x11b/0x210 [ 688.534161][T26267] netlink_sendmsg+0x805/0xb30 [ 688.534192][T26267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.534215][T26267] ? aa_sock_msg_perm+0xf1/0x1d0 [ 688.534243][T26267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.534260][T26267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.534282][T26267] __sock_sendmsg+0x21c/0x270 [ 688.534311][T26267] ____sys_sendmsg+0x505/0x830 [ 688.534338][T26267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.534369][T26267] ? import_iovec+0x74/0xa0 [ 688.534396][T26267] ___sys_sendmsg+0x21f/0x2a0 [ 688.534420][T26267] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.534481][T26267] ? __fget_files+0x2a/0x420 [ 688.534498][T26267] ? __fget_files+0x3a0/0x420 [ 688.534526][T26267] __x64_sys_sendmsg+0x19b/0x260 [ 688.534551][T26267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.534582][T26267] ? __pfx_ksys_write+0x10/0x10 [ 688.534611][T26267] ? do_syscall_64+0xbe/0xfa0 [ 688.534634][T26267] do_syscall_64+0xfa/0xfa0 [ 688.534651][T26267] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.534670][T26267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.534687][T26267] ? clear_bhb_loop+0x60/0xb0 [ 688.534709][T26267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.534727][T26267] RIP: 0033:0x7fa84338f749 [ 688.534744][T26267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.534760][T26267] RSP: 002b:00007fa8441d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.534779][T26267] RAX: ffffffffffffffda RBX: 00007fa8435e5fa0 RCX: 00007fa84338f749 [ 688.534792][T26267] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 688.534803][T26267] RBP: 00007fa8441d3090 R08: 0000000000000000 R09: 0000000000000000 [ 688.534831][T26267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.534842][T26267] R13: 00007fa8435e6038 R14: 00007fa8435e5fa0 R15: 00007fffb9753888 [ 688.534876][T26267] [ 689.098244][T26275] netlink: 'syz.3.5769': attribute type 1 has an invalid length. [ 689.135321][T26275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 689.165716][T26275] bond7: (slave gretap3): making interface the new active one [ 689.175160][T26275] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 689.257852][T26280] netlink: 'syz.0.5771': attribute type 1 has an invalid length. [ 689.493838][T26296] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 689.692323][T26317] __nla_validate_parse: 3 callbacks suppressed [ 689.692345][T26317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5778'. [ 689.825366][T26324] FAULT_INJECTION: forcing a failure. [ 689.825366][T26324] name failslab, interval 1, probability 0, space 0, times 0 [ 689.839028][T26324] CPU: 0 UID: 0 PID: 26324 Comm: syz.3.5780 Not tainted syzkaller #0 PREEMPT(full) [ 689.839054][T26324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 689.839067][T26324] Call Trace: [ 689.839075][T26324] [ 689.839083][T26324] dump_stack_lvl+0x189/0x250 [ 689.839115][T26324] ? __pfx____ratelimit+0x10/0x10 [ 689.839135][T26324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.839173][T26324] ? __pfx__printk+0x10/0x10 [ 689.839198][T26324] ? __pfx___might_resched+0x10/0x10 [ 689.839221][T26324] ? fs_reclaim_acquire+0x7d/0x100 [ 689.839247][T26324] should_fail_ex+0x414/0x560 [ 689.839284][T26324] should_failslab+0xa8/0x100 [ 689.839306][T26324] __kvmalloc_node_noprof+0x158/0x910 [ 689.839335][T26324] ? __nf_register_net_hook+0x232/0x930 [ 689.839360][T26324] ? nf_hook_entries_grow+0x281/0x720 [ 689.839391][T26324] nf_hook_entries_grow+0x281/0x720 [ 689.839432][T26324] __nf_register_net_hook+0x2c9/0x930 [ 689.839463][T26324] ? nf_register_net_hook+0xc8/0x190 [ 689.839489][T26324] nf_register_net_hook+0xb2/0x190 [ 689.839517][T26324] nf_register_net_hooks+0x44/0x1b0 [ 689.839546][T26324] nf_ct_netns_do_get+0x212/0x5a0 [ 689.839572][T26324] ? nf_ct_iterate_cleanup_net+0x9f/0xd0 [ 689.839604][T26324] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 689.839627][T26324] ? nf_ct_netns_do_get+0x4da/0x5a0 [ 689.839655][T26324] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 689.839692][T26324] nf_ct_netns_inet_get+0x3b/0x150 [ 689.839738][T26324] nf_ct_netns_get+0x5b/0xb0 [ 689.839762][T26324] nft_connlimit_do_init+0x1de/0x2e0 [ 689.839793][T26324] nft_set_elem_expr_alloc+0x1db/0x590 [ 689.839818][T26324] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 689.839856][T26324] ? nft_rhash_init+0x2d1/0x3a0 [ 689.839879][T26324] ? irqentry_exit+0x74/0x90 [ 689.839902][T26324] ? __pfx_nft_rhash_init+0x10/0x10 [ 689.839929][T26324] ? __pfx_nft_rhash_key+0x10/0x10 [ 689.839952][T26324] ? __pfx_nft_rhash_obj+0x10/0x10 [ 689.839975][T26324] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 689.840005][T26324] nft_set_expr_alloc+0x4da/0x760 [ 689.840035][T26324] nf_tables_newset+0x1c4c/0x2540 [ 689.840078][T26324] ? __pfx_nf_tables_newset+0x10/0x10 [ 689.840133][T26324] ? __nla_parse+0x40/0x60 [ 689.840168][T26324] nfnetlink_rcv+0x11d9/0x2590 [ 689.840241][T26324] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 689.840258][T26324] ? kasan_save_track+0x4f/0x80 [ 689.840353][T26324] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.840408][T26324] netlink_unicast+0x82f/0x9e0 [ 689.840448][T26324] ? __pfx_netlink_unicast+0x10/0x10 [ 689.840471][T26324] ? netlink_sendmsg+0x642/0xb30 [ 689.840492][T26324] ? skb_put+0x11b/0x210 [ 689.840519][T26324] netlink_sendmsg+0x805/0xb30 [ 689.840554][T26324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.840582][T26324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 689.840614][T26324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.840634][T26324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.840659][T26324] __sock_sendmsg+0x21c/0x270 [ 689.840691][T26324] ____sys_sendmsg+0x505/0x830 [ 689.840723][T26324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.840759][T26324] ? import_iovec+0x74/0xa0 [ 689.840789][T26324] ___sys_sendmsg+0x21f/0x2a0 [ 689.840816][T26324] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.840884][T26324] ? __fget_files+0x2a/0x420 [ 689.840903][T26324] ? __fget_files+0x3a0/0x420 [ 689.840935][T26324] __x64_sys_sendmsg+0x19b/0x260 [ 689.840964][T26324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.841001][T26324] ? __pfx_ksys_write+0x10/0x10 [ 689.841035][T26324] ? do_syscall_64+0xbe/0xfa0 [ 689.841061][T26324] do_syscall_64+0xfa/0xfa0 [ 689.841080][T26324] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.841101][T26324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.841121][T26324] ? clear_bhb_loop+0x60/0xb0 [ 689.841146][T26324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.841172][T26324] RIP: 0033:0x7fbd27d8f749 [ 689.841189][T26324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.841208][T26324] RSP: 002b:00007fbd28ced038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.841229][T26324] RAX: ffffffffffffffda RBX: 00007fbd27fe5fa0 RCX: 00007fbd27d8f749 [ 689.841253][T26324] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 689.841266][T26324] RBP: 00007fbd28ced090 R08: 0000000000000000 R09: 0000000000000000 [ 689.841279][T26324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.841291][T26324] R13: 00007fbd27fe6038 R14: 00007fbd27fe5fa0 R15: 00007ffd006414d8 [ 689.841328][T26324] [ 690.304003][ T7748] Bluetooth: hci4: command tx timeout [ 690.372462][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5775'. [ 690.384534][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5775'. [ 690.457602][T26303] lo speed is unknown, defaulting to 1000 [ 690.465818][T26303] wg1 speed is unknown, defaulting to 1000 [ 690.541576][T26333] netlink: 'syz.1.5783': attribute type 10 has an invalid length. [ 690.549676][T26336] FAULT_INJECTION: forcing a failure. [ 690.549676][T26336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.549709][T26336] CPU: 0 UID: 0 PID: 26336 Comm: syz.4.5785 Not tainted syzkaller #0 PREEMPT(full) [ 690.549733][T26336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.549747][T26336] Call Trace: [ 690.549755][T26336] [ 690.549764][T26336] dump_stack_lvl+0x189/0x250 [ 690.549796][T26336] ? __pfx____ratelimit+0x10/0x10 [ 690.549815][T26336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.549842][T26336] ? __pfx__printk+0x10/0x10 [ 690.549864][T26336] ? __might_fault+0xb0/0x130 [ 690.549905][T26336] should_fail_ex+0x414/0x560 [ 690.549938][T26336] _copy_from_user+0x2d/0xb0 [ 690.549962][T26336] ___sys_sendmsg+0x158/0x2a0 [ 690.549988][T26336] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.550056][T26336] ? __might_fault+0xb0/0x130 [ 690.550093][T26336] __sys_sendmmsg+0x227/0x430 [ 690.550122][T26336] ? __pfx___sys_sendmmsg+0x10/0x10 [ 690.550155][T26336] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.550196][T26336] ? ksys_write+0x22a/0x250 [ 690.550225][T26336] ? __pfx_ksys_write+0x10/0x10 [ 690.550257][T26336] __x64_sys_sendmmsg+0xa0/0xc0 [ 690.550283][T26336] do_syscall_64+0xfa/0xfa0 [ 690.550302][T26336] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.550322][T26336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.550341][T26336] ? clear_bhb_loop+0x60/0xb0 [ 690.550364][T26336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.550383][T26336] RIP: 0033:0x7fdd62b8f749 [ 690.550401][T26336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.550418][T26336] RSP: 002b:00007fdd63aba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 690.550439][T26336] RAX: ffffffffffffffda RBX: 00007fdd62de5fa0 RCX: 00007fdd62b8f749 [ 690.550453][T26336] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003 [ 690.550466][T26336] RBP: 00007fdd63aba090 R08: 0000000000000000 R09: 0000000000000000 [ 690.550479][T26336] R10: 00000000000488c4 R11: 0000000000000246 R12: 0000000000000001 [ 690.550491][T26336] R13: 00007fdd62de6038 R14: 00007fdd62de5fa0 R15: 00007ffe370020e8 [ 690.550523][T26336] [ 690.895739][T26346] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5789'. [ 691.134759][T26363] FAULT_INJECTION: forcing a failure. [ 691.134759][T26363] name failslab, interval 1, probability 0, space 0, times 0 [ 691.152665][T26363] CPU: 1 UID: 0 PID: 26363 Comm: syz.3.5794 Not tainted syzkaller #0 PREEMPT(full) [ 691.152692][T26363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.152705][T26363] Call Trace: [ 691.152723][T26363] [ 691.152732][T26363] dump_stack_lvl+0x189/0x250 [ 691.152764][T26363] ? __pfx____ratelimit+0x10/0x10 [ 691.152784][T26363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.152812][T26363] ? __pfx__printk+0x10/0x10 [ 691.152840][T26363] ? __pfx___might_resched+0x10/0x10 [ 691.152861][T26363] ? fs_reclaim_acquire+0x7d/0x100 [ 691.152890][T26363] should_fail_ex+0x414/0x560 [ 691.152930][T26363] should_failslab+0xa8/0x100 [ 691.152953][T26363] __kvmalloc_node_noprof+0x158/0x910 [ 691.152984][T26363] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 691.153025][T26363] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 691.153067][T26363] __nf_unregister_net_hook+0x4f6/0x700 [ 691.153104][T26363] nf_unregister_net_hooks+0xcb/0x140 [ 691.153134][T26363] nf_ct_netns_put+0x216/0x520 [ 691.153164][T26363] nft_connlimit_destroy+0x5a/0xb0 [ 691.153188][T26363] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 691.153214][T26363] nft_set_elem_expr_alloc+0x3ba/0x590 [ 691.153240][T26363] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 691.153279][T26363] ? nft_rhash_init+0x2d1/0x3a0 [ 691.153307][T26363] ? __pfx_nft_rhash_init+0x10/0x10 [ 691.153329][T26363] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.153351][T26363] ? __pfx_nft_rhash_key+0x10/0x10 [ 691.153374][T26363] ? __pfx_nft_rhash_obj+0x10/0x10 [ 691.153397][T26363] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 691.153427][T26363] nft_set_expr_alloc+0x4da/0x760 [ 691.153458][T26363] nf_tables_newset+0x1c4c/0x2540 [ 691.153502][T26363] ? __pfx_nf_tables_newset+0x10/0x10 [ 691.153557][T26363] ? __nla_parse+0x40/0x60 [ 691.153584][T26363] nfnetlink_rcv+0x11d9/0x2590 [ 691.153651][T26363] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 691.153669][T26363] ? kasan_save_track+0x4f/0x80 [ 691.153762][T26363] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.153807][T26363] netlink_unicast+0x82f/0x9e0 [ 691.153839][T26363] ? __pfx_netlink_unicast+0x10/0x10 [ 691.153863][T26363] ? netlink_sendmsg+0x642/0xb30 [ 691.153884][T26363] ? skb_put+0x11b/0x210 [ 691.153911][T26363] netlink_sendmsg+0x805/0xb30 [ 691.153947][T26363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.153975][T26363] ? aa_sock_msg_perm+0xf1/0x1d0 [ 691.154007][T26363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 691.154027][T26363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.154050][T26363] __sock_sendmsg+0x21c/0x270 [ 691.154088][T26363] ____sys_sendmsg+0x505/0x830 [ 691.154120][T26363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.154166][T26363] ? import_iovec+0x74/0xa0 [ 691.154196][T26363] ___sys_sendmsg+0x21f/0x2a0 [ 691.154225][T26363] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.154294][T26363] ? __fget_files+0x2a/0x420 [ 691.154313][T26363] ? __fget_files+0x3a0/0x420 [ 691.154346][T26363] __x64_sys_sendmsg+0x19b/0x260 [ 691.154375][T26363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.154412][T26363] ? __pfx_ksys_write+0x10/0x10 [ 691.154445][T26363] ? do_syscall_64+0xbe/0xfa0 [ 691.154477][T26363] do_syscall_64+0xfa/0xfa0 [ 691.154497][T26363] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.154518][T26363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.154538][T26363] ? clear_bhb_loop+0x60/0xb0 [ 691.154564][T26363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.154601][T26363] RIP: 0033:0x7fbd27d8f749 [ 691.154619][T26363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.154638][T26363] RSP: 002b:00007fbd28ced038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.154660][T26363] RAX: ffffffffffffffda RBX: 00007fbd27fe5fa0 RCX: 00007fbd27d8f749 [ 691.154676][T26363] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 691.154690][T26363] RBP: 00007fbd28ced090 R08: 0000000000000000 R09: 0000000000000000 [ 691.154703][T26363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.154722][T26363] R13: 00007fbd27fe6038 R14: 00007fbd27fe5fa0 R15: 00007ffd006414d8 [ 691.154759][T26363] [ 691.584235][T26373] lo speed is unknown, defaulting to 1000 [ 691.592240][T26373] wg1 speed is unknown, defaulting to 1000 [ 691.635204][T26377] FAULT_INJECTION: forcing a failure. [ 691.635204][T26377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.649244][T26377] CPU: 0 UID: 0 PID: 26377 Comm: syz.3.5798 Not tainted syzkaller #0 PREEMPT(full) [ 691.649272][T26377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.649284][T26377] Call Trace: [ 691.649292][T26377] [ 691.649302][T26377] dump_stack_lvl+0x189/0x250 [ 691.649332][T26377] ? __pfx____ratelimit+0x10/0x10 [ 691.649353][T26377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.649379][T26377] ? __pfx__printk+0x10/0x10 [ 691.649400][T26377] ? __might_fault+0xb0/0x130 [ 691.649441][T26377] should_fail_ex+0x414/0x560 [ 691.649476][T26377] _copy_from_user+0x2d/0xb0 [ 691.649502][T26377] ___sys_sendmsg+0x158/0x2a0 [ 691.649527][T26377] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.649588][T26377] ? __might_fault+0xb0/0x130 [ 691.649620][T26377] __sys_sendmmsg+0x227/0x430 [ 691.649649][T26377] ? __pfx___sys_sendmmsg+0x10/0x10 [ 691.649683][T26377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 691.649723][T26377] ? ksys_write+0x22a/0x250 [ 691.649754][T26377] ? __pfx_ksys_write+0x10/0x10 [ 691.649787][T26377] __x64_sys_sendmmsg+0xa0/0xc0 [ 691.649814][T26377] do_syscall_64+0xfa/0xfa0 [ 691.649834][T26377] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.649855][T26377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.649875][T26377] ? clear_bhb_loop+0x60/0xb0 [ 691.649900][T26377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.649919][T26377] RIP: 0033:0x7fbd27d8f749 [ 691.649944][T26377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.649962][T26377] RSP: 002b:00007fbd28ced038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 691.649985][T26377] RAX: ffffffffffffffda RBX: 00007fbd27fe5fa0 RCX: 00007fbd27d8f749 [ 691.650001][T26377] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003 [ 691.650014][T26377] RBP: 00007fbd28ced090 R08: 0000000000000000 R09: 0000000000000000 [ 691.650027][T26377] R10: 00000000000488c4 R11: 0000000000000246 R12: 0000000000000001 [ 691.650040][T26377] R13: 00007fbd27fe6038 R14: 00007fbd27fe5fa0 R15: 00007ffd006414d8 [ 691.650074][T26377] [ 692.336509][T26392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5803'. [ 692.388039][T26392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5803'. [ 692.409744][T26412] FAULT_INJECTION: forcing a failure. [ 692.409744][T26412] name failslab, interval 1, probability 0, space 0, times 0 [ 692.447141][T26412] CPU: 1 UID: 0 PID: 26412 Comm: syz.2.5808 Not tainted syzkaller #0 PREEMPT(full) [ 692.447170][T26412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 692.447183][T26412] Call Trace: [ 692.447192][T26412] [ 692.447201][T26412] dump_stack_lvl+0x189/0x250 [ 692.447232][T26412] ? __pfx____ratelimit+0x10/0x10 [ 692.447254][T26412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.447282][T26412] ? __pfx__printk+0x10/0x10 [ 692.447311][T26412] ? __pfx___might_resched+0x10/0x10 [ 692.447332][T26412] ? fs_reclaim_acquire+0x7d/0x100 [ 692.447358][T26412] should_fail_ex+0x414/0x560 [ 692.447394][T26412] should_failslab+0xa8/0x100 [ 692.447416][T26412] __kvmalloc_node_noprof+0x158/0x910 [ 692.447447][T26412] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 692.447484][T26412] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 692.447525][T26412] __nf_unregister_net_hook+0x4f6/0x700 [ 692.447560][T26412] nf_unregister_net_hooks+0xcb/0x140 [ 692.447589][T26412] nf_ct_netns_put+0x2d2/0x520 [ 692.447617][T26412] nft_connlimit_destroy+0x5a/0xb0 [ 692.447640][T26412] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 692.447664][T26412] nft_set_elem_expr_alloc+0x3ba/0x590 [ 692.447690][T26412] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 692.447727][T26412] ? nft_rhash_init+0x2d1/0x3a0 [ 692.447753][T26412] ? __pfx_nft_rhash_init+0x10/0x10 [ 692.447774][T26412] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.447795][T26412] ? __pfx_nft_rhash_key+0x10/0x10 [ 692.447818][T26412] ? __pfx_nft_rhash_obj+0x10/0x10 [ 692.447840][T26412] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 692.447876][T26412] nft_set_expr_alloc+0x4da/0x760 [ 692.447906][T26412] nf_tables_newset+0x1c4c/0x2540 [ 692.447950][T26412] ? __pfx_nf_tables_newset+0x10/0x10 [ 692.448002][T26412] ? __nla_parse+0x40/0x60 [ 692.448030][T26412] nfnetlink_rcv+0x11d9/0x2590 [ 692.448091][T26412] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 692.448107][T26412] ? kasan_save_track+0x4f/0x80 [ 692.448193][T26412] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.448237][T26412] netlink_unicast+0x82f/0x9e0 [ 692.448267][T26412] ? __pfx_netlink_unicast+0x10/0x10 [ 692.448290][T26412] ? netlink_sendmsg+0x642/0xb30 [ 692.448311][T26412] ? skb_put+0x11b/0x210 [ 692.448337][T26412] netlink_sendmsg+0x805/0xb30 [ 692.448371][T26412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.448398][T26412] ? aa_sock_msg_perm+0xf1/0x1d0 [ 692.448430][T26412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.448450][T26412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.448474][T26412] __sock_sendmsg+0x21c/0x270 [ 692.448507][T26412] ____sys_sendmsg+0x505/0x830 [ 692.448538][T26412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.448574][T26412] ? import_iovec+0x74/0xa0 [ 692.448603][T26412] ___sys_sendmsg+0x21f/0x2a0 [ 692.448631][T26412] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.448696][T26412] ? __fget_files+0x2a/0x420 [ 692.448715][T26412] ? __fget_files+0x3a0/0x420 [ 692.448746][T26412] __x64_sys_sendmsg+0x19b/0x260 [ 692.448773][T26412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.448809][T26412] ? __pfx_ksys_write+0x10/0x10 [ 692.448842][T26412] ? do_syscall_64+0xbe/0xfa0 [ 692.448874][T26412] do_syscall_64+0xfa/0xfa0 [ 692.448894][T26412] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.448915][T26412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.448935][T26412] ? clear_bhb_loop+0x60/0xb0 [ 692.448960][T26412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.448980][T26412] RIP: 0033:0x7f7f43b8f749 [ 692.448999][T26412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.449017][T26412] RSP: 002b:00007f7f4499b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.449038][T26412] RAX: ffffffffffffffda RBX: 00007f7f43de5fa0 RCX: 00007f7f43b8f749 [ 692.449054][T26412] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 692.449068][T26412] RBP: 00007f7f4499b090 R08: 0000000000000000 R09: 0000000000000000 [ 692.449081][T26412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.449094][T26412] R13: 00007f7f43de6038 R14: 00007f7f43de5fa0 R15: 00007fff82992a88 [ 692.449131][T26412] [ 692.980475][T26416] tipc: Started in network mode [ 692.985696][T26416] tipc: Node identity , cluster identity 4711 [ 692.994037][T26416] tipc: Failed to obtain node identity [ 693.001074][T26416] tipc: Enabling of bearer rejected, failed to enable media [ 693.056994][T26416] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5809'. [ 693.209556][T26430] netlink: 'syz.3.5814': attribute type 2 has an invalid length. [ 693.223028][T26425] xt_limit: Overflow, try lower: 268435456/134217728 [ 693.247417][T26430] netlink: 'syz.3.5814': attribute type 1 has an invalid length. [ 693.274550][T26425] netlink: 'syz.1.5812': attribute type 16 has an invalid length. [ 693.285299][T26436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5815'. [ 693.298328][T26430] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5814'. [ 693.339132][T26425] netlink: 'syz.1.5812': attribute type 3 has an invalid length. [ 693.359662][T26425] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5812'. [ 693.392926][T26425] netlink: 'syz.1.5812': attribute type 16 has an invalid length. [ 693.414908][T26425] netlink: 'syz.1.5812': attribute type 3 has an invalid length. [ 693.441385][T26425] netlink: 'syz.1.5812': attribute type 16 has an invalid length. [ 694.571477][T26486] validate_nla: 61 callbacks suppressed [ 694.571495][T26486] netlink: 'syz.1.5829': attribute type 7 has an invalid length. [ 694.607217][T26486] netlink: 'syz.1.5829': attribute type 8 has an invalid length. [ 694.756682][T26495] netem: incorrect gi model size [ 694.762065][T26495] netem: change failed [ 694.772321][T26493] netlink: 'syz.0.5831': attribute type 1 has an invalid length. [ 694.815033][T26499] netlink: 'syz.4.5833': attribute type 6 has an invalid length. [ 694.828038][T26493] bond11: entered promiscuous mode [ 694.833517][T26499] __nla_validate_parse: 39 callbacks suppressed [ 694.833535][T26499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5833'. [ 694.850564][T26493] 8021q: adding VLAN 0 to HW filter on device bond11 [ 694.859477][T26499] nbd: couldn't find a device at index 4 [ 694.872147][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5833'. [ 694.880269][T26493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5831'. [ 694.893237][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5831'. [ 694.932042][T26499] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.970387][T26499] bridge_slave_1 (unregistering): left allmulticast mode [ 694.979346][T26499] bridge_slave_1 (unregistering): left promiscuous mode [ 694.987238][T26499] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.106478][T26513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5837'. [ 695.274769][T26525] FAULT_INJECTION: forcing a failure. [ 695.274769][T26525] name failslab, interval 1, probability 0, space 0, times 0 [ 695.300552][T26525] CPU: 1 UID: 0 PID: 26525 Comm: syz.3.5841 Not tainted syzkaller #0 PREEMPT(full) [ 695.300580][T26525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.300592][T26525] Call Trace: [ 695.300601][T26525] [ 695.300610][T26525] dump_stack_lvl+0x189/0x250 [ 695.300648][T26525] ? __pfx____ratelimit+0x10/0x10 [ 695.300668][T26525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.300696][T26525] ? __pfx__printk+0x10/0x10 [ 695.300725][T26525] ? __pfx___might_resched+0x10/0x10 [ 695.300745][T26525] ? fs_reclaim_acquire+0x7d/0x100 [ 695.300771][T26525] should_fail_ex+0x414/0x560 [ 695.300807][T26525] should_failslab+0xa8/0x100 [ 695.300827][T26525] __kvmalloc_node_noprof+0x158/0x910 [ 695.300857][T26525] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 695.300892][T26525] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 695.300932][T26525] __nf_unregister_net_hook+0x4f6/0x700 [ 695.300969][T26525] nf_unregister_net_hooks+0xcb/0x140 [ 695.300999][T26525] nf_ct_netns_put+0x2d2/0x520 [ 695.301028][T26525] nft_connlimit_destroy+0x5a/0xb0 [ 695.301051][T26525] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 695.301077][T26525] nft_set_elem_expr_alloc+0x3ba/0x590 [ 695.301102][T26525] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 695.301138][T26525] ? nft_rhash_init+0x2d1/0x3a0 [ 695.301167][T26525] ? __pfx_nft_rhash_init+0x10/0x10 [ 695.301189][T26525] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.301211][T26525] ? __pfx_nft_rhash_key+0x10/0x10 [ 695.301235][T26525] ? __pfx_nft_rhash_obj+0x10/0x10 [ 695.301258][T26525] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 695.301288][T26525] nft_set_expr_alloc+0x4da/0x760 [ 695.301319][T26525] nf_tables_newset+0x1c4c/0x2540 [ 695.301364][T26525] ? __pfx_nf_tables_newset+0x10/0x10 [ 695.301419][T26525] ? __nla_parse+0x40/0x60 [ 695.301446][T26525] nfnetlink_rcv+0x11d9/0x2590 [ 695.301508][T26525] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 695.301526][T26525] ? kasan_save_track+0x4f/0x80 [ 695.301614][T26525] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.301665][T26525] netlink_unicast+0x82f/0x9e0 [ 695.301696][T26525] ? __pfx_netlink_unicast+0x10/0x10 [ 695.301720][T26525] ? netlink_sendmsg+0x642/0xb30 [ 695.301740][T26525] ? skb_put+0x11b/0x210 [ 695.301768][T26525] netlink_sendmsg+0x805/0xb30 [ 695.301802][T26525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.301831][T26525] ? aa_sock_msg_perm+0xf1/0x1d0 [ 695.301863][T26525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.301883][T26525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.301908][T26525] __sock_sendmsg+0x21c/0x270 [ 695.301942][T26525] ____sys_sendmsg+0x505/0x830 [ 695.301973][T26525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.302009][T26525] ? import_iovec+0x74/0xa0 [ 695.302039][T26525] ___sys_sendmsg+0x21f/0x2a0 [ 695.302067][T26525] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.302134][T26525] ? __fget_files+0x2a/0x420 [ 695.302151][T26525] ? __fget_files+0x3a0/0x420 [ 695.302181][T26525] __x64_sys_sendmsg+0x19b/0x260 [ 695.302208][T26525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.302243][T26525] ? __pfx_ksys_write+0x10/0x10 [ 695.302277][T26525] ? do_syscall_64+0xbe/0xfa0 [ 695.302303][T26525] do_syscall_64+0xfa/0xfa0 [ 695.302324][T26525] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.302345][T26525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.302365][T26525] ? clear_bhb_loop+0x60/0xb0 [ 695.302395][T26525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.302415][T26525] RIP: 0033:0x7fbd27d8f749 [ 695.302434][T26525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.302453][T26525] RSP: 002b:00007fbd28ced038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.302475][T26525] RAX: ffffffffffffffda RBX: 00007fbd27fe5fa0 RCX: 00007fbd27d8f749 [ 695.302491][T26525] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 695.302504][T26525] RBP: 00007fbd28ced090 R08: 0000000000000000 R09: 0000000000000000 [ 695.302518][T26525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 695.302531][T26525] R13: 00007fbd27fe6038 R14: 00007fbd27fe5fa0 R15: 00007ffd006414d8 [ 695.302568][T26525] [ 695.787989][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5845'. [ 696.393887][T26570] FAULT_INJECTION: forcing a failure. [ 696.393887][T26570] name failslab, interval 1, probability 0, space 0, times 0 [ 696.421623][T26570] CPU: 1 UID: 0 PID: 26570 Comm: syz.1.5857 Not tainted syzkaller #0 PREEMPT(full) [ 696.421652][T26570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.421665][T26570] Call Trace: [ 696.421674][T26570] [ 696.421683][T26570] dump_stack_lvl+0x189/0x250 [ 696.421716][T26570] ? __pfx____ratelimit+0x10/0x10 [ 696.421737][T26570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.421765][T26570] ? __pfx__printk+0x10/0x10 [ 696.421793][T26570] ? __pfx___might_resched+0x10/0x10 [ 696.421814][T26570] ? fs_reclaim_acquire+0x7d/0x100 [ 696.421839][T26570] should_fail_ex+0x414/0x560 [ 696.421877][T26570] should_failslab+0xa8/0x100 [ 696.421899][T26570] __kvmalloc_node_noprof+0x158/0x910 [ 696.421932][T26570] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 696.421968][T26570] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 696.422009][T26570] __nf_unregister_net_hook+0x4f6/0x700 [ 696.422046][T26570] nf_unregister_net_hooks+0xcb/0x140 [ 696.422076][T26570] nf_ct_netns_put+0x2d2/0x520 [ 696.422106][T26570] nft_connlimit_destroy+0x5a/0xb0 [ 696.422130][T26570] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 696.422156][T26570] nft_set_elem_expr_alloc+0x3ba/0x590 [ 696.422182][T26570] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 696.422222][T26570] ? nft_rhash_init+0x2d1/0x3a0 [ 696.422254][T26570] ? __pfx_nft_rhash_init+0x10/0x10 [ 696.422276][T26570] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.422296][T26570] ? __pfx_nft_rhash_key+0x10/0x10 [ 696.422318][T26570] ? __pfx_nft_rhash_obj+0x10/0x10 [ 696.422341][T26570] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 696.422371][T26570] nft_set_expr_alloc+0x4da/0x760 [ 696.422401][T26570] nf_tables_newset+0x1c4c/0x2540 [ 696.422446][T26570] ? __pfx_nf_tables_newset+0x10/0x10 [ 696.422506][T26570] ? __nla_parse+0x40/0x60 [ 696.422533][T26570] nfnetlink_rcv+0x11d9/0x2590 [ 696.422596][T26570] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 696.422635][T26570] ? ref_tracker_free+0x63a/0x7d0 [ 696.422686][T26570] ? __netlink_deliver_tap+0x807/0x850 [ 696.422710][T26570] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.422751][T26570] netlink_unicast+0x82f/0x9e0 [ 696.422781][T26570] ? __pfx_netlink_unicast+0x10/0x10 [ 696.422803][T26570] ? netlink_sendmsg+0x642/0xb30 [ 696.422823][T26570] ? skb_put+0x11b/0x210 [ 696.422850][T26570] netlink_sendmsg+0x805/0xb30 [ 696.422884][T26570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.422915][T26570] ? aa_sock_msg_perm+0xf1/0x1d0 [ 696.422947][T26570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.422966][T26570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.422991][T26570] __sock_sendmsg+0x21c/0x270 [ 696.423024][T26570] ____sys_sendmsg+0x505/0x830 [ 696.423055][T26570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.423091][T26570] ? import_iovec+0x74/0xa0 [ 696.423120][T26570] ___sys_sendmsg+0x21f/0x2a0 [ 696.423147][T26570] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.423214][T26570] ? __fget_files+0x2a/0x420 [ 696.423233][T26570] ? __fget_files+0x3a0/0x420 [ 696.423264][T26570] __x64_sys_sendmsg+0x19b/0x260 [ 696.423293][T26570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.423329][T26570] ? __pfx_ksys_write+0x10/0x10 [ 696.423362][T26570] ? do_syscall_64+0xbe/0xfa0 [ 696.423387][T26570] do_syscall_64+0xfa/0xfa0 [ 696.423405][T26570] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.423426][T26570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.423447][T26570] ? clear_bhb_loop+0x60/0xb0 [ 696.423473][T26570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.423493][T26570] RIP: 0033:0x7fe68138f749 [ 696.423517][T26570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.423536][T26570] RSP: 002b:00007fe67f5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.423558][T26570] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68138f749 [ 696.423574][T26570] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 696.423588][T26570] RBP: 00007fe67f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 696.423600][T26570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.423613][T26570] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007fff23903ac8 [ 696.423651][T26570] [ 696.855037][T26574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5859'. [ 696.922735][T26580] netlink: 'syz.2.5862': attribute type 4 has an invalid length. [ 696.934557][T26580] netlink: 'syz.2.5862': attribute type 4 has an invalid length. [ 697.299036][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 510 seconds [ 697.310908][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 510 seconds [ 697.324263][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 510 seconds [ 697.336986][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 510 seconds [ 697.606477][T26610] FAULT_INJECTION: forcing a failure. [ 697.606477][T26610] name failslab, interval 1, probability 0, space 0, times 0 [ 697.623838][T26610] CPU: 0 UID: 0 PID: 26610 Comm: syz.0.5872 Not tainted syzkaller #0 PREEMPT(full) [ 697.623864][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.623876][T26610] Call Trace: [ 697.623884][T26610] [ 697.623893][T26610] dump_stack_lvl+0x189/0x250 [ 697.623925][T26610] ? __pfx____ratelimit+0x10/0x10 [ 697.623944][T26610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.623968][T26610] ? __pfx__printk+0x10/0x10 [ 697.623993][T26610] ? __pfx___might_resched+0x10/0x10 [ 697.624012][T26610] ? fs_reclaim_acquire+0x7d/0x100 [ 697.624035][T26610] should_fail_ex+0x414/0x560 [ 697.624066][T26610] should_failslab+0xa8/0x100 [ 697.624085][T26610] __kvmalloc_node_noprof+0x158/0x910 [ 697.624112][T26610] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 697.624155][T26610] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 697.624190][T26610] __nf_unregister_net_hook+0x4f6/0x700 [ 697.624222][T26610] nf_unregister_net_hooks+0xcb/0x140 [ 697.624249][T26610] nf_ct_netns_put+0x216/0x520 [ 697.624275][T26610] nft_connlimit_destroy+0x5a/0xb0 [ 697.624299][T26610] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 697.624322][T26610] nft_set_elem_expr_alloc+0x3ba/0x590 [ 697.624345][T26610] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 697.624378][T26610] ? nft_rhash_init+0x2d1/0x3a0 [ 697.624403][T26610] ? __pfx_nft_rhash_init+0x10/0x10 [ 697.624422][T26610] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.624441][T26610] ? __pfx_nft_rhash_key+0x10/0x10 [ 697.624461][T26610] ? __pfx_nft_rhash_obj+0x10/0x10 [ 697.624482][T26610] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 697.624508][T26610] nft_set_expr_alloc+0x4da/0x760 [ 697.624534][T26610] nf_tables_newset+0x1c4c/0x2540 [ 697.624575][T26610] ? __pfx_nf_tables_newset+0x10/0x10 [ 697.624624][T26610] ? __nla_parse+0x40/0x60 [ 697.624645][T26610] nfnetlink_rcv+0x11d9/0x2590 [ 697.624690][T26610] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 697.624725][T26610] ? ref_tracker_free+0x63a/0x7d0 [ 697.624782][T26610] ? __netlink_deliver_tap+0x807/0x850 [ 697.624806][T26610] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.624848][T26610] netlink_unicast+0x82f/0x9e0 [ 697.624879][T26610] ? __pfx_netlink_unicast+0x10/0x10 [ 697.624902][T26610] ? netlink_sendmsg+0x642/0xb30 [ 697.624923][T26610] ? skb_put+0x11b/0x210 [ 697.624950][T26610] netlink_sendmsg+0x805/0xb30 [ 697.624985][T26610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.625013][T26610] ? aa_sock_msg_perm+0xf1/0x1d0 [ 697.625045][T26610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.625064][T26610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.625089][T26610] __sock_sendmsg+0x21c/0x270 [ 697.625131][T26610] ____sys_sendmsg+0x505/0x830 [ 697.625162][T26610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.625197][T26610] ? import_iovec+0x74/0xa0 [ 697.625228][T26610] ___sys_sendmsg+0x21f/0x2a0 [ 697.625255][T26610] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.625322][T26610] ? __fget_files+0x2a/0x420 [ 697.625341][T26610] ? __fget_files+0x3a0/0x420 [ 697.625373][T26610] __x64_sys_sendmsg+0x19b/0x260 [ 697.625401][T26610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.625437][T26610] ? __pfx_ksys_write+0x10/0x10 [ 697.625470][T26610] ? do_syscall_64+0xbe/0xfa0 [ 697.625496][T26610] do_syscall_64+0xfa/0xfa0 [ 697.625515][T26610] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.625536][T26610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.625556][T26610] ? clear_bhb_loop+0x60/0xb0 [ 697.625581][T26610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.625600][T26610] RIP: 0033:0x7fa84338f749 [ 697.625619][T26610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.625636][T26610] RSP: 002b:00007fa8441d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.625658][T26610] RAX: ffffffffffffffda RBX: 00007fa8435e5fa0 RCX: 00007fa84338f749 [ 697.625673][T26610] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 697.625686][T26610] RBP: 00007fa8441d3090 R08: 0000000000000000 R09: 0000000000000000 [ 697.625700][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 697.625712][T26610] R13: 00007fa8435e6038 R14: 00007fa8435e5fa0 R15: 00007fffb9753888 [ 697.625748][T26610] [ 698.211729][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 698.221894][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.232157][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.251642][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.261245][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 698.392328][T26612] lo speed is unknown, defaulting to 1000 [ 698.414998][T26612] wg1 speed is unknown, defaulting to 1000 [ 698.721369][T26641] FAULT_INJECTION: forcing a failure. [ 698.721369][T26641] name failslab, interval 1, probability 0, space 0, times 0 [ 698.771293][T26612] chnl_net:caif_netlink_parms(): no params data found [ 698.779088][T26641] CPU: 0 UID: 0 PID: 26641 Comm: syz.1.5882 Not tainted syzkaller #0 PREEMPT(full) [ 698.779117][T26641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 698.779129][T26641] Call Trace: [ 698.779138][T26641] [ 698.779148][T26641] dump_stack_lvl+0x189/0x250 [ 698.779179][T26641] ? __pfx____ratelimit+0x10/0x10 [ 698.779199][T26641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.779224][T26641] ? __pfx__printk+0x10/0x10 [ 698.779250][T26641] ? __pfx___might_resched+0x10/0x10 [ 698.779271][T26641] ? fs_reclaim_acquire+0x7d/0x100 [ 698.779295][T26641] should_fail_ex+0x414/0x560 [ 698.779331][T26641] should_failslab+0xa8/0x100 [ 698.779355][T26641] __kvmalloc_node_noprof+0x158/0x910 [ 698.779384][T26641] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 698.779416][T26641] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 698.779454][T26641] __nf_unregister_net_hook+0x4f6/0x700 [ 698.779490][T26641] nf_unregister_net_hooks+0xcb/0x140 [ 698.779517][T26641] nf_ct_netns_put+0x2d2/0x520 [ 698.779546][T26641] nft_connlimit_destroy+0x5a/0xb0 [ 698.779569][T26641] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 698.779593][T26641] nft_set_elem_expr_alloc+0x3ba/0x590 [ 698.779617][T26641] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 698.779655][T26641] ? nft_rhash_init+0x2d1/0x3a0 [ 698.779681][T26641] ? __pfx_nft_rhash_init+0x10/0x10 [ 698.779703][T26641] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.779724][T26641] ? __pfx_nft_rhash_key+0x10/0x10 [ 698.779744][T26641] ? __pfx_nft_rhash_obj+0x10/0x10 [ 698.779765][T26641] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 698.779793][T26641] nft_set_expr_alloc+0x4da/0x760 [ 698.779824][T26641] nf_tables_newset+0x1c4c/0x2540 [ 698.779866][T26641] ? __pfx_nf_tables_newset+0x10/0x10 [ 698.779920][T26641] ? __nla_parse+0x40/0x60 [ 698.779945][T26641] nfnetlink_rcv+0x11d9/0x2590 [ 698.780005][T26641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 698.780043][T26641] ? ref_tracker_free+0x63a/0x7d0 [ 698.780104][T26641] ? __netlink_deliver_tap+0x807/0x850 [ 698.780127][T26641] ? netlink_deliver_tap+0x2e/0x1b0 [ 698.780170][T26641] netlink_unicast+0x82f/0x9e0 [ 698.780202][T26641] ? __pfx_netlink_unicast+0x10/0x10 [ 698.780225][T26641] ? netlink_sendmsg+0x642/0xb30 [ 698.780245][T26641] ? skb_put+0x11b/0x210 [ 698.780272][T26641] netlink_sendmsg+0x805/0xb30 [ 698.780304][T26641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.780329][T26641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 698.780360][T26641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.780379][T26641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.780401][T26641] __sock_sendmsg+0x21c/0x270 [ 698.780433][T26641] ____sys_sendmsg+0x505/0x830 [ 698.780464][T26641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.780500][T26641] ? import_iovec+0x74/0xa0 [ 698.780531][T26641] ___sys_sendmsg+0x21f/0x2a0 [ 698.780557][T26641] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.780627][T26641] ? __fget_files+0x2a/0x420 [ 698.780646][T26641] ? __fget_files+0x3a0/0x420 [ 698.780678][T26641] __x64_sys_sendmsg+0x19b/0x260 [ 698.780711][T26641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.780755][T26641] ? do_syscall_64+0xbe/0xfa0 [ 698.780780][T26641] do_syscall_64+0xfa/0xfa0 [ 698.780800][T26641] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.780821][T26641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.780841][T26641] ? clear_bhb_loop+0x60/0xb0 [ 698.780866][T26641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.780885][T26641] RIP: 0033:0x7fe68138f749 [ 698.780904][T26641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.780922][T26641] RSP: 002b:00007fe67f5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.780944][T26641] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68138f749 [ 698.780960][T26641] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 698.780974][T26641] RBP: 00007fe67f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 698.780987][T26641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 698.780999][T26641] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007fff23903ac8 [ 698.781035][T26641] [ 699.240288][T26649] netlink: 'syz.1.5885': attribute type 2 has an invalid length. [ 699.256405][T26649] : entered promiscuous mode [ 699.264703][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5883'. [ 699.555711][T26656] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5887'. [ 699.579566][T26669] netlink: 'syz.1.5892': attribute type 1 has an invalid length. [ 699.631743][T26669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 699.639988][T26612] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.648118][T26612] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.655544][T26612] bridge_slave_0: entered allmulticast mode [ 699.668535][T26612] bridge_slave_0: entered promiscuous mode [ 699.683905][T26666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5890'. [ 699.707554][T26673] bond4: (slave ip6gretap1): making interface the new active one [ 699.717608][T26673] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 699.731006][T26612] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.739479][T26612] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.747422][T26612] bridge_slave_1: entered allmulticast mode [ 699.755327][T26612] bridge_slave_1: entered promiscuous mode [ 699.802289][T26669] veth5: entered promiscuous mode [ 699.812209][T26669] bond4: (slave veth5): Enslaving as an active interface with a down link [ 699.821556][T26661] lo speed is unknown, defaulting to 1000 [ 699.852411][T26681] __nla_validate_parse: 2 callbacks suppressed [ 699.852733][T26681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5895'. [ 699.903621][T26661] wg1 speed is unknown, defaulting to 1000 [ 699.915460][T26669] erspan0: entered allmulticast mode [ 699.934912][T26669] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 699.949627][T26612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.981767][T26673] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 700.028064][T26612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.199359][T26612] team0: Port device team_slave_0 added [ 700.218426][T26612] team0: Port device team_slave_1 added [ 700.337475][ T7748] Bluetooth: hci5: command tx timeout [ 700.438777][T26699] FAULT_INJECTION: forcing a failure. [ 700.438777][T26699] name failslab, interval 1, probability 0, space 0, times 0 [ 700.452528][T26699] CPU: 1 UID: 0 PID: 26699 Comm: syz.2.5902 Not tainted syzkaller #0 PREEMPT(full) [ 700.452554][T26699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 700.452567][T26699] Call Trace: [ 700.452576][T26699] [ 700.452585][T26699] dump_stack_lvl+0x189/0x250 [ 700.452617][T26699] ? __pfx____ratelimit+0x10/0x10 [ 700.452638][T26699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.452665][T26699] ? __pfx__printk+0x10/0x10 [ 700.452694][T26699] ? __pfx___might_resched+0x10/0x10 [ 700.452714][T26699] ? fs_reclaim_acquire+0x7d/0x100 [ 700.452740][T26699] should_fail_ex+0x414/0x560 [ 700.452777][T26699] should_failslab+0xa8/0x100 [ 700.452800][T26699] __kvmalloc_node_noprof+0x158/0x910 [ 700.452832][T26699] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 700.452867][T26699] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 700.452907][T26699] __nf_unregister_net_hook+0x4f6/0x700 [ 700.452943][T26699] nf_unregister_net_hooks+0xcb/0x140 [ 700.452972][T26699] nf_ct_netns_put+0x36d/0x520 [ 700.452999][T26699] nft_connlimit_destroy+0x5a/0xb0 [ 700.453021][T26699] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 700.453045][T26699] nft_set_elem_expr_alloc+0x3ba/0x590 [ 700.453069][T26699] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 700.453102][T26699] ? nft_rhash_init+0x2d1/0x3a0 [ 700.453127][T26699] ? __pfx_nft_rhash_init+0x10/0x10 [ 700.453145][T26699] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.453173][T26699] ? __pfx_nft_rhash_key+0x10/0x10 [ 700.453195][T26699] ? __pfx_nft_rhash_obj+0x10/0x10 [ 700.453216][T26699] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 700.453245][T26699] nft_set_expr_alloc+0x4da/0x760 [ 700.453276][T26699] nf_tables_newset+0x1c4c/0x2540 [ 700.453321][T26699] ? __pfx_nf_tables_newset+0x10/0x10 [ 700.453377][T26699] ? __nla_parse+0x40/0x60 [ 700.453405][T26699] nfnetlink_rcv+0x11d9/0x2590 [ 700.453469][T26699] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 700.453487][T26699] ? kasan_save_track+0x4f/0x80 [ 700.453576][T26699] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.453619][T26699] netlink_unicast+0x82f/0x9e0 [ 700.453651][T26699] ? __pfx_netlink_unicast+0x10/0x10 [ 700.453675][T26699] ? netlink_sendmsg+0x642/0xb30 [ 700.453696][T26699] ? skb_put+0x11b/0x210 [ 700.453723][T26699] netlink_sendmsg+0x805/0xb30 [ 700.453775][T26699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.453803][T26699] ? aa_sock_msg_perm+0xf1/0x1d0 [ 700.453836][T26699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.453856][T26699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.453882][T26699] __sock_sendmsg+0x21c/0x270 [ 700.453915][T26699] ____sys_sendmsg+0x505/0x830 [ 700.453947][T26699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.453983][T26699] ? import_iovec+0x74/0xa0 [ 700.454014][T26699] ___sys_sendmsg+0x21f/0x2a0 [ 700.454042][T26699] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.454111][T26699] ? __fget_files+0x2a/0x420 [ 700.454129][T26699] ? __fget_files+0x3a0/0x420 [ 700.454167][T26699] __x64_sys_sendmsg+0x19b/0x260 [ 700.454196][T26699] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.454233][T26699] ? __pfx_ksys_write+0x10/0x10 [ 700.454266][T26699] ? do_syscall_64+0xbe/0xfa0 [ 700.454291][T26699] do_syscall_64+0xfa/0xfa0 [ 700.454310][T26699] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.454330][T26699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.454347][T26699] ? clear_bhb_loop+0x60/0xb0 [ 700.454371][T26699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.454391][T26699] RIP: 0033:0x7f7f43b8f749 [ 700.454409][T26699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.454427][T26699] RSP: 002b:00007f7f4499b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.454448][T26699] RAX: ffffffffffffffda RBX: 00007f7f43de5fa0 RCX: 00007f7f43b8f749 [ 700.454464][T26699] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 700.454477][T26699] RBP: 00007f7f4499b090 R08: 0000000000000000 R09: 0000000000000000 [ 700.454490][T26699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.454502][T26699] R13: 00007f7f43de6038 R14: 00007f7f43de5fa0 R15: 00007fff82992a88 [ 700.454540][T26699] [ 700.854060][T26612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.872720][T26612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.922763][T26612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.937916][T26612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.945061][T26612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.008659][T26612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.125045][T26612] hsr_slave_0: entered promiscuous mode [ 701.139022][T26612] hsr_slave_1: entered promiscuous mode [ 701.145474][T26612] debugfs: 'hsr0' already exists in 'hsr' [ 701.152828][T26612] Cannot create hsr debugfs directory [ 701.224055][T26712] sit0: left promiscuous mode [ 701.269608][T26712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.279941][T26712] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.294695][T26719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5906'. [ 701.306857][T26712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.097495][T26753] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5918'. [ 702.109810][T26753] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5918'. [ 702.238665][T26612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 702.260527][T26612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 702.289670][T26612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 702.324954][T26612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 702.409249][ T7748] Bluetooth: hci5: command tx timeout [ 702.501980][T26612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.545659][T26612] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.569959][T12522] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.577191][T12522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.602346][T12524] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.609609][T12524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.853060][T26783] siw: device registration error -23 [ 702.914581][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5928'. [ 702.946859][T26790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5928'. [ 702.955850][T26790] netlink: 'syz.0.5928': attribute type 18 has an invalid length. [ 703.194711][T26612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.212450][T26803] netlink: 'syz.4.5932': attribute type 21 has an invalid length. [ 703.300587][T26805] syzkaller0: entered promiscuous mode [ 703.315334][T26805] syzkaller0: entered allmulticast mode [ 703.357578][T26612] veth0_vlan: entered promiscuous mode [ 703.399728][T26612] veth1_vlan: entered promiscuous mode [ 703.419727][T26803] tipc: Started in network mode [ 703.424629][T26803] tipc: Node identity 6a1e3eb16187, cluster identity 4711 [ 703.434356][T26803] tipc: Enabled bearer , priority 0 [ 703.454882][T26809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5935'. [ 703.482823][T26801] tipc: Resetting bearer [ 703.530329][T26801] tipc: Disabling bearer [ 703.680955][T26612] veth0_macvtap: entered promiscuous mode [ 703.705692][T26612] veth1_macvtap: entered promiscuous mode [ 703.790693][T26612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.819221][T26612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.849813][T12522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.879414][T12522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.966900][T12522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.009644][T12522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.123783][T26833] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 704.196703][ T7903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.218157][ T7903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.275249][T26839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5946'. [ 704.315666][ T7903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.323790][ T7903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.372584][ T7034] IPVS: starting estimator thread 0... [ 704.476010][T26844] IPVS: using max 28 ests per chain, 67200 per kthread [ 704.487201][ T7748] Bluetooth: hci5: command tx timeout [ 704.587776][T26849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5870'. [ 704.616842][T26849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 704.638271][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5949'. [ 704.972059][ T95] block nbd3: Possible stuck request ffff888024d29300: control (read@0,1024B). Runtime 420 seconds [ 704.983466][ T95] block nbd3: Possible stuck request ffff888024d294c0: control (read@1024,1024B). Runtime 420 seconds [ 704.998074][ T95] block nbd3: Possible stuck request ffff888024d29680: control (read@2048,1024B). Runtime 420 seconds [ 705.010565][ T95] block nbd3: Possible stuck request ffff888024d29840: control (read@3072,1024B). Runtime 420 seconds [ 705.176120][T26883] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5962'. [ 705.185297][T26883] netlink: 'syz.1.5962': attribute type 1 has an invalid length. [ 705.299921][T26887] bond12: Unable to set peer notification delay as MII monitoring is disabled [ 705.310838][T26887] bond12 (unregistering): Released all slaves [ 705.568439][T26901] FAULT_INJECTION: forcing a failure. [ 705.568439][T26901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.604116][T26901] CPU: 0 UID: 0 PID: 26901 Comm: syz.1.5969 Not tainted syzkaller #0 PREEMPT(full) [ 705.604144][T26901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.604157][T26901] Call Trace: [ 705.604166][T26901] [ 705.604175][T26901] dump_stack_lvl+0x189/0x250 [ 705.604207][T26901] ? __pfx____ratelimit+0x10/0x10 [ 705.604227][T26901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.604253][T26901] ? __pfx__printk+0x10/0x10 [ 705.604274][T26901] ? __might_fault+0xb0/0x130 [ 705.604313][T26901] should_fail_ex+0x414/0x560 [ 705.604349][T26901] _copy_from_iter+0x1de/0x1790 [ 705.604389][T26901] ? __pfx__copy_from_iter+0x10/0x10 [ 705.604420][T26901] ? ip_route_output_key_hash+0xc1/0x280 [ 705.604460][T26901] ? skb_put+0x11b/0x210 [ 705.604486][T26901] raw_send_hdrinc+0x917/0x14b0 [ 705.604523][T26901] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 705.604553][T26901] raw_sendmsg+0x1357/0x18b0 [ 705.604589][T26901] ? __pfx_raw_sendmsg+0x10/0x10 [ 705.604629][T26901] ? aa_sk_perm+0x81e/0x950 [ 705.604661][T26901] ? __pfx_aa_sk_perm+0x10/0x10 [ 705.604686][T26901] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 705.604721][T26901] ? sock_rps_record_flow+0x19/0x410 [ 705.604747][T26901] ? inet_sendmsg+0x2f4/0x370 [ 705.604768][T26901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.604791][T26901] __sock_sendmsg+0x19c/0x270 [ 705.604823][T26901] ____sys_sendmsg+0x52d/0x830 [ 705.604852][T26901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.604884][T26901] ? import_iovec+0x74/0xa0 [ 705.604912][T26901] ___sys_sendmsg+0x21f/0x2a0 [ 705.604938][T26901] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.604996][T26901] ? __fget_files+0x2a/0x420 [ 705.605016][T26901] ? __fget_files+0x3a0/0x420 [ 705.605045][T26901] __sys_sendmmsg+0x227/0x430 [ 705.605076][T26901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 705.605110][T26901] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 705.605154][T26901] ? ksys_write+0x22a/0x250 [ 705.605184][T26901] ? __pfx_ksys_write+0x10/0x10 [ 705.605216][T26901] __x64_sys_sendmmsg+0xa0/0xc0 [ 705.605241][T26901] do_syscall_64+0xfa/0xfa0 [ 705.605261][T26901] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.605282][T26901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.605302][T26901] ? clear_bhb_loop+0x60/0xb0 [ 705.605325][T26901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.605344][T26901] RIP: 0033:0x7fe68138f749 [ 705.605360][T26901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.605378][T26901] RSP: 002b:00007fe67f5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 705.605399][T26901] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68138f749 [ 705.605421][T26901] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003 [ 705.605434][T26901] RBP: 00007fe67f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 705.605446][T26901] R10: 00000000000488c4 R11: 0000000000000246 R12: 0000000000000001 [ 705.605457][T26901] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007fff23903ac8 [ 705.605491][T26901] [ 706.284807][T26925] syzkaller0: entered promiscuous mode [ 706.290441][T26925] syzkaller0: entered allmulticast mode [ 706.301781][T26930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5981'. [ 706.324840][T26931] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5982'. [ 706.346198][T12523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.386422][T12523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.578268][ T7748] Bluetooth: hci5: command tx timeout [ 706.720482][T26954] FAULT_INJECTION: forcing a failure. [ 706.720482][T26954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.734174][T26954] CPU: 0 UID: 0 PID: 26954 Comm: syz.3.5988 Not tainted syzkaller #0 PREEMPT(full) [ 706.734199][T26954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.734210][T26954] Call Trace: [ 706.734218][T26954] [ 706.734226][T26954] dump_stack_lvl+0x189/0x250 [ 706.734253][T26954] ? __pfx____ratelimit+0x10/0x10 [ 706.734272][T26954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.734295][T26954] ? __pfx__printk+0x10/0x10 [ 706.734313][T26954] ? __might_fault+0xb0/0x130 [ 706.734350][T26954] should_fail_ex+0x414/0x560 [ 706.734386][T26954] _copy_from_user+0x2d/0xb0 [ 706.734412][T26954] ___sys_sendmsg+0x158/0x2a0 [ 706.734440][T26954] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.734512][T26954] ? __might_fault+0xb0/0x130 [ 706.734544][T26954] __sys_sendmmsg+0x227/0x430 [ 706.734585][T26954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 706.734620][T26954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 706.734662][T26954] ? ksys_write+0x22a/0x250 [ 706.734694][T26954] ? __pfx_ksys_write+0x10/0x10 [ 706.734728][T26954] __x64_sys_sendmmsg+0xa0/0xc0 [ 706.734754][T26954] do_syscall_64+0xfa/0xfa0 [ 706.734775][T26954] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.734796][T26954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.734815][T26954] ? clear_bhb_loop+0x60/0xb0 [ 706.734838][T26954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.734855][T26954] RIP: 0033:0x7f7d9bd8f749 [ 706.734871][T26954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.734887][T26954] RSP: 002b:00007f7d9cbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 706.734907][T26954] RAX: ffffffffffffffda RBX: 00007f7d9bfe5fa0 RCX: 00007f7d9bd8f749 [ 706.734921][T26954] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003 [ 706.734932][T26954] RBP: 00007f7d9cbc0090 R08: 0000000000000000 R09: 0000000000000000 [ 706.734943][T26954] R10: 00000000000488c4 R11: 0000000000000246 R12: 0000000000000001 [ 706.734954][T26954] R13: 00007f7d9bfe6038 R14: 00007f7d9bfe5fa0 R15: 00007ffc2a0cd928 [ 706.734985][T26954] [ 708.682319][T26972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5995'. [ 708.692762][T26969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5995'. [ 709.495350][T26983] FAULT_INJECTION: forcing a failure. [ 709.495350][T26983] name failslab, interval 1, probability 0, space 0, times 0 [ 709.508561][T26983] CPU: 1 UID: 0 PID: 26983 Comm: syz.1.5999 Not tainted syzkaller #0 PREEMPT(full) [ 709.508583][T26983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.508590][T26983] Call Trace: [ 709.508595][T26983] [ 709.508601][T26983] dump_stack_lvl+0x189/0x250 [ 709.508620][T26983] ? __pfx____ratelimit+0x10/0x10 [ 709.508632][T26983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.508646][T26983] ? __pfx__printk+0x10/0x10 [ 709.508657][T26983] ? ip_finish_output2+0x452/0x1160 [ 709.508669][T26983] ? ip_skb_dst_mtu+0x18d/0xb70 [ 709.508682][T26983] should_fail_ex+0x414/0x560 [ 709.508701][T26983] should_failslab+0xa8/0x100 [ 709.508714][T26983] kmem_cache_alloc_noprof+0x74/0x6e0 [ 709.508729][T26983] ? dst_alloc+0x105/0x170 [ 709.508746][T26983] dst_alloc+0x105/0x170 [ 709.508763][T26983] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 709.508784][T26983] ? ip_route_output_key_hash+0xc1/0x280 [ 709.508801][T26983] ip_route_output_key_hash+0x174/0x280 [ 709.508816][T26983] ? __lock_acquire+0xab9/0xd20 [ 709.508828][T26983] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 709.508853][T26983] ip_route_output_flow+0x2a/0x150 [ 709.508867][T26983] ? security_sk_classify_flow+0x70/0x180 [ 709.508881][T26983] raw_sendmsg+0x1039/0x18b0 [ 709.508900][T26983] ? __pfx_raw_sendmsg+0x10/0x10 [ 709.508921][T26983] ? aa_sk_perm+0x81e/0x950 [ 709.508943][T26983] ? sock_rps_record_flow+0x19/0x410 [ 709.508957][T26983] ? inet_sendmsg+0x2f4/0x370 [ 709.508971][T26983] sock_sendmsg_nosec+0x128/0x1d0 [ 709.508988][T26983] ____sys_sendmsg+0x6c5/0x830 [ 709.509004][T26983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.509022][T26983] ? import_iovec+0x74/0xa0 [ 709.509038][T26983] ___sys_sendmsg+0x21f/0x2a0 [ 709.509051][T26983] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.509089][T26983] ? __might_fault+0xb0/0x130 [ 709.509106][T26983] __sys_sendmmsg+0x227/0x430 [ 709.509122][T26983] ? __pfx___sys_sendmmsg+0x10/0x10 [ 709.509140][T26983] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 709.509163][T26983] ? ksys_write+0x22a/0x250 [ 709.509178][T26983] ? __pfx_ksys_write+0x10/0x10 [ 709.509196][T26983] __x64_sys_sendmmsg+0xa0/0xc0 [ 709.509209][T26983] do_syscall_64+0xfa/0xfa0 [ 709.509220][T26983] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.509231][T26983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.509242][T26983] ? clear_bhb_loop+0x60/0xb0 [ 709.509255][T26983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.509265][T26983] RIP: 0033:0x7fe68138f749 [ 709.509282][T26983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.509291][T26983] RSP: 002b:00007fe67f5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 709.509305][T26983] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68138f749 [ 709.509313][T26983] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000003 [ 709.509326][T26983] RBP: 00007fe67f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 709.509333][T26983] R10: 00000000000488c4 R11: 0000000000000246 R12: 0000000000000001 [ 709.509339][T26983] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007fff23903ac8 [ 709.509358][T26983] [ 709.939961][T26991] syzkaller1: entered promiscuous mode [ 709.945540][T26991] syzkaller1: entered allmulticast mode [ 709.955125][T26991] syzkaller1: left promiscuous mode [ 709.960637][T26991] syzkaller1: left allmulticast mode [ 723.020325][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.031097][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.040176][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.049058][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.065707][T27000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 723.066767][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 723.084565][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 723.094669][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 723.104151][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 723.115147][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.117348][T26995] lo speed is unknown, defaulting to 1000 [ 723.129930][T26995] wg1 speed is unknown, defaulting to 1000 [ 723.200730][T26997] lo speed is unknown, defaulting to 1000 [ 723.225645][T26997] wg1 speed is unknown, defaulting to 1000 [ 723.329794][T26995] chnl_net:caif_netlink_parms(): no params data found [ 723.451103][T26995] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.458501][T26995] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.465695][T26995] bridge_slave_0: entered allmulticast mode [ 723.473718][T26995] bridge_slave_0: entered promiscuous mode [ 723.487878][T26995] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.495005][T26995] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.503209][T26995] bridge_slave_1: entered allmulticast mode [ 723.510648][T26995] bridge_slave_1: entered promiscuous mode [ 723.576614][T26995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.590483][T26995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.635482][T26995] team0: Port device team_slave_0 added [ 723.643224][T26997] chnl_net:caif_netlink_parms(): no params data found [ 723.656815][T26995] team0: Port device team_slave_1 added [ 723.714550][T26995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.722115][T26995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.748668][T26995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.765263][T26995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.773383][T26995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.801653][T26995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.864818][T26997] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.872882][T26997] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.881073][T26997] bridge_slave_0: entered allmulticast mode [ 723.888948][T26997] bridge_slave_0: entered promiscuous mode [ 723.910711][T26997] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.917934][T26997] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.925222][T26997] bridge_slave_1: entered allmulticast mode [ 723.933966][T26997] bridge_slave_1: entered promiscuous mode [ 723.947278][T26995] hsr_slave_0: entered promiscuous mode [ 723.953681][T26995] hsr_slave_1: entered promiscuous mode [ 723.959987][T26995] debugfs: 'hsr0' already exists in 'hsr' [ 723.965708][T26995] Cannot create hsr debugfs directory [ 724.000802][T26997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.028406][T26997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.087445][T26997] team0: Port device team_slave_0 added [ 724.103144][T26997] team0: Port device team_slave_1 added [ 724.149189][T26997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.157431][T26997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.184711][T26997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.205126][T26997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.213159][T26997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.240090][T26997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.379459][T26997] hsr_slave_0: entered promiscuous mode [ 724.386425][T26997] hsr_slave_1: entered promiscuous mode [ 724.392999][T26997] debugfs: 'hsr0' already exists in 'hsr' [ 724.400972][T26997] Cannot create hsr debugfs directory [ 724.579920][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 724.589631][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 724.598195][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 724.607091][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 724.615228][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 724.692966][T27014] lo speed is unknown, defaulting to 1000 [ 724.703874][T27014] wg1 speed is unknown, defaulting to 1000 [ 724.852573][T27014] chnl_net:caif_netlink_parms(): no params data found [ 724.924136][T27014] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.931613][T27014] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.939375][T27014] bridge_slave_0: entered allmulticast mode [ 724.947069][T27014] bridge_slave_0: entered promiscuous mode [ 724.954967][T27014] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.963147][T27014] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.971662][T27014] bridge_slave_1: entered allmulticast mode [ 724.980154][T27014] bridge_slave_1: entered promiscuous mode [ 725.010529][T27014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.023487][T27014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.057085][T27014] team0: Port device team_slave_0 added [ 725.065415][T27014] team0: Port device team_slave_1 added [ 725.092943][T27014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.100444][T27014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.128043][T27014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.136756][ T5828] Bluetooth: hci3: command tx timeout [ 725.141943][T27014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.144900][ T5829] Bluetooth: hci6: command tx timeout [ 725.152181][T27014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.184977][T27014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.231273][T27014] hsr_slave_0: entered promiscuous mode [ 725.237934][T27014] hsr_slave_1: entered promiscuous mode [ 725.244088][T27014] debugfs: 'hsr0' already exists in 'hsr' [ 725.250452][T27014] Cannot create hsr debugfs directory [ 725.680319][ T5828] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 725.690472][ T5828] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 725.698919][ T5828] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 725.707760][ T5828] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 725.717137][ T5828] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 725.763868][T27024] lo speed is unknown, defaulting to 1000 [ 725.772316][T27024] wg1 speed is unknown, defaulting to 1000 [ 725.786431][ T5828] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 725.795880][ T5828] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 725.804276][ T5828] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 725.812618][ T5828] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 725.820365][ T5828] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 725.921105][T27026] lo speed is unknown, defaulting to 1000 [ 725.930502][T27026] wg1 speed is unknown, defaulting to 1000 [ 725.982879][T27024] chnl_net:caif_netlink_parms(): no params data found [ 726.095056][T27024] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.102917][T27024] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.110284][T27024] bridge_slave_0: entered allmulticast mode [ 726.117932][T27024] bridge_slave_0: entered promiscuous mode [ 726.131689][T27024] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.139415][T27024] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.147540][T27024] bridge_slave_1: entered allmulticast mode [ 726.154691][T27024] bridge_slave_1: entered promiscuous mode [ 726.217264][T27024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.244567][T27024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.300061][T27024] team0: Port device team_slave_0 added [ 726.311445][T27024] team0: Port device team_slave_1 added [ 726.346541][T27026] chnl_net:caif_netlink_parms(): no params data found [ 726.377501][T27024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.384477][T27024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.411686][T27024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.432533][T27024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.439909][T27024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.466979][T27024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.574357][T27024] hsr_slave_0: entered promiscuous mode [ 726.581247][T27024] hsr_slave_1: entered promiscuous mode [ 726.588723][T27024] debugfs: 'hsr0' already exists in 'hsr' [ 726.594444][T27024] Cannot create hsr debugfs directory [ 726.600998][T27026] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.608225][T27026] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.615439][T27026] bridge_slave_0: entered allmulticast mode [ 726.622948][T27026] bridge_slave_0: entered promiscuous mode [ 726.631125][T27026] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.638911][T27026] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.647015][ T5828] Bluetooth: hci7: command tx timeout [ 726.647209][T27026] bridge_slave_1: entered allmulticast mode [ 726.660551][T27026] bridge_slave_1: entered promiscuous mode [ 726.716281][T27026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.743311][T27026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.797395][T27026] team0: Port device team_slave_0 added [ 726.812190][T27026] team0: Port device team_slave_1 added [ 726.859566][T27026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.867223][T27026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.894463][T27026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.922627][T27026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.929813][T27026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.956373][T27026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.038537][T27026] hsr_slave_0: entered promiscuous mode [ 727.045117][T27026] hsr_slave_1: entered promiscuous mode [ 727.052012][T27026] debugfs: 'hsr0' already exists in 'hsr' [ 727.058695][T27026] Cannot create hsr debugfs directory [ 727.206590][ T5828] Bluetooth: hci6: command tx timeout [ 727.207373][ T5829] Bluetooth: hci3: command tx timeout [ 727.369078][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 540 seconds [ 727.381313][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 540 seconds [ 727.392807][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 540 seconds [ 727.404366][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 540 seconds [ 727.776714][ T5829] Bluetooth: hci8: command tx timeout [ 727.846410][ T5829] Bluetooth: hci9: command tx timeout [ 728.726568][ T5829] Bluetooth: hci7: command tx timeout [ 729.287054][ T5829] Bluetooth: hci6: command tx timeout [ 729.287221][ T5828] Bluetooth: hci3: command tx timeout [ 729.846641][ T5828] Bluetooth: hci8: command tx timeout [ 729.936313][ T5828] Bluetooth: hci9: command tx timeout [ 730.816699][ T5828] Bluetooth: hci7: command tx timeout [ 731.366078][ T5828] Bluetooth: hci3: command tx timeout [ 731.376535][ T5828] Bluetooth: hci6: command tx timeout [ 731.926838][ T5828] Bluetooth: hci8: command tx timeout [ 732.006568][ T5828] Bluetooth: hci9: command tx timeout [ 732.896581][ T5828] Bluetooth: hci7: command tx timeout [ 734.006596][ T5828] Bluetooth: hci8: command tx timeout [ 734.086788][ T5828] Bluetooth: hci9: command tx timeout [ 735.051480][ T95] block nbd3: Possible stuck request ffff888024d29300: control (read@0,1024B). Runtime 450 seconds [ 735.063069][ T95] block nbd3: Possible stuck request ffff888024d294c0: control (read@1024,1024B). Runtime 450 seconds [ 735.074515][ T95] block nbd3: Possible stuck request ffff888024d29680: control (read@2048,1024B). Runtime 450 seconds [ 735.086495][ T95] block nbd3: Possible stuck request ffff888024d29840: control (read@3072,1024B). Runtime 450 seconds [ 747.208946][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 757.450428][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 570 seconds [ 757.462071][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 570 seconds [ 757.473688][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 570 seconds [ 757.486138][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 570 seconds [ 765.127492][ T95] block nbd3: Possible stuck request ffff888024d29300: control (read@0,1024B). Runtime 480 seconds [ 765.138958][ T95] block nbd3: Possible stuck request ffff888024d294c0: control (read@1024,1024B). Runtime 480 seconds [ 765.150779][ T95] block nbd3: Possible stuck request ffff888024d29680: control (read@2048,1024B). Runtime 480 seconds [ 765.163532][ T95] block nbd3: Possible stuck request ffff888024d29840: control (read@3072,1024B). Runtime 480 seconds [ 783.599326][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 783.612055][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 783.621165][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 783.630683][ T5829] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 783.630969][T27000] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 783.640693][ T5829] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 783.646902][T27000] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 783.657043][ T5829] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 783.669197][ T5829] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 783.677585][ T5829] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 783.725068][T27042] lo speed is unknown, defaulting to 1000 [ 783.733200][T27042] wg1 speed is unknown, defaulting to 1000 [ 783.733595][T27044] lo speed is unknown, defaulting to 1000 [ 783.750391][T27044] wg1 speed is unknown, defaulting to 1000 [ 783.981798][T27042] chnl_net:caif_netlink_parms(): no params data found [ 784.038241][T27044] chnl_net:caif_netlink_parms(): no params data found [ 784.112512][T27042] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.120309][T27042] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.128051][T27042] bridge_slave_0: entered allmulticast mode [ 784.135215][T27042] bridge_slave_0: entered promiscuous mode [ 784.153871][T27042] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.161731][T27042] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.169580][T27042] bridge_slave_1: entered allmulticast mode [ 784.178841][T27042] bridge_slave_1: entered promiscuous mode [ 784.234503][T27044] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.242105][T27044] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.250816][T27044] bridge_slave_0: entered allmulticast mode [ 784.258600][T27044] bridge_slave_0: entered promiscuous mode [ 784.269923][T27042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.279471][T27044] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.287303][T27044] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.294631][T27044] bridge_slave_1: entered allmulticast mode [ 784.303440][T27044] bridge_slave_1: entered promiscuous mode [ 784.335323][T27042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.407374][T27044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.422591][T27044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.435608][T27042] team0: Port device team_slave_0 added [ 784.447534][T27042] team0: Port device team_slave_1 added [ 784.532655][T27042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.541298][T27042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.568557][T27042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.583643][T27044] team0: Port device team_slave_0 added [ 784.591210][T27042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.599911][T27042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.627131][T27042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.642082][T27044] team0: Port device team_slave_1 added [ 784.655474][ T7748] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 784.665677][ T7748] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 784.674911][ T7748] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 784.683153][ T7748] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 784.692468][ T7748] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 784.723683][T27044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.735647][T27044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.762349][T27044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.776402][T27044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.783354][T27044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.810036][T27044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.848711][T27042] hsr_slave_0: entered promiscuous mode [ 784.855122][T27042] hsr_slave_1: entered promiscuous mode [ 784.861595][T27042] debugfs: 'hsr0' already exists in 'hsr' [ 784.868003][T27042] Cannot create hsr debugfs directory [ 784.939180][T27044] hsr_slave_0: entered promiscuous mode [ 784.946514][T27044] hsr_slave_1: entered promiscuous mode [ 784.952733][T27044] debugfs: 'hsr0' already exists in 'hsr' [ 784.958899][T27044] Cannot create hsr debugfs directory [ 785.018862][T27059] lo speed is unknown, defaulting to 1000 [ 785.034499][T27059] wg1 speed is unknown, defaulting to 1000 [ 785.329404][T27059] chnl_net:caif_netlink_parms(): no params data found [ 785.507457][T27059] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.517299][T27059] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.524633][T27059] bridge_slave_0: entered allmulticast mode [ 785.544802][T27059] bridge_slave_0: entered promiscuous mode [ 785.561103][T27059] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.570405][T27059] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.579673][T27059] bridge_slave_1: entered allmulticast mode [ 785.588809][T27059] bridge_slave_1: entered promiscuous mode [ 785.665256][T27059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.670328][ T5829] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 785.685746][T27059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.688000][ T5829] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 785.697140][T27000] Bluetooth: hci10: command tx timeout [ 785.710752][ T5829] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 785.719027][ T5829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 785.726879][ T5829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 785.766984][ T7748] Bluetooth: hci11: command tx timeout [ 785.782034][T27059] team0: Port device team_slave_0 added [ 785.791233][T27059] team0: Port device team_slave_1 added [ 785.828162][T27059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.835137][T27059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.862839][T27059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.883750][T27059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.891626][T27059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.917972][T27059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.953590][T27068] lo speed is unknown, defaulting to 1000 [ 785.983684][T27068] wg1 speed is unknown, defaulting to 1000 [ 785.991265][T27059] hsr_slave_0: entered promiscuous mode [ 785.997851][T27059] hsr_slave_1: entered promiscuous mode [ 786.003966][T27059] debugfs: 'hsr0' already exists in 'hsr' [ 786.010821][T27059] Cannot create hsr debugfs directory [ 786.423574][T27068] chnl_net:caif_netlink_parms(): no params data found [ 786.634638][T27068] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.635471][ T5829] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 786.643342][T27068] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.659205][ T5829] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 786.660503][T27068] bridge_slave_0: entered allmulticast mode [ 786.669722][ T5829] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 786.678480][T27068] bridge_slave_0: entered promiscuous mode [ 786.681943][ T5829] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 786.694349][ T5829] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 786.702721][T27068] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.711157][T27068] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.719802][T27068] bridge_slave_1: entered allmulticast mode [ 786.726498][ T5829] Bluetooth: hci12: command tx timeout [ 786.731366][T27068] bridge_slave_1: entered promiscuous mode [ 786.781740][T27068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.800844][T27068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.849756][T27068] team0: Port device team_slave_0 added [ 786.855349][T27077] lo speed is unknown, defaulting to 1000 [ 786.873200][T27077] wg1 speed is unknown, defaulting to 1000 [ 786.891345][T27068] team0: Port device team_slave_1 added [ 786.944348][T27068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.951981][T27068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.979537][T27068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.016660][T27068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.023627][T27068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.050819][T27068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.134796][T27068] hsr_slave_0: entered promiscuous mode [ 787.141458][T27068] hsr_slave_1: entered promiscuous mode [ 787.148141][T27068] debugfs: 'hsr0' already exists in 'hsr' [ 787.153854][T27068] Cannot create hsr debugfs directory [ 787.338855][T27077] chnl_net:caif_netlink_parms(): no params data found [ 787.439437][T27077] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.446720][T27077] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.453970][T27077] bridge_slave_0: entered allmulticast mode [ 787.461912][T27077] bridge_slave_0: entered promiscuous mode [ 787.479435][T27077] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.487830][T27077] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.495249][T27077] bridge_slave_1: entered allmulticast mode [ 787.502903][T27077] bridge_slave_1: entered promiscuous mode [ 787.538696][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 600 seconds [ 787.549996][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 600 seconds [ 787.561929][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 600 seconds [ 787.573253][T27077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.578112][T27077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.583750][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 600 seconds [ 787.637025][T27077] team0: Port device team_slave_0 added [ 787.644720][T27077] team0: Port device team_slave_1 added [ 787.675430][T27077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.683004][T27077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.710422][T27077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.723567][T27077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.731057][T27077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.757833][T27077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.768672][ T5829] Bluetooth: hci13: command tx timeout [ 787.776530][ T5829] Bluetooth: hci10: command tx timeout [ 787.854378][ T5829] Bluetooth: hci11: command tx timeout [ 787.858647][T27077] hsr_slave_0: entered promiscuous mode [ 787.867713][T27077] hsr_slave_1: entered promiscuous mode [ 787.874050][T27077] debugfs: 'hsr0' already exists in 'hsr' [ 787.880156][T27077] Cannot create hsr debugfs directory [ 788.726288][ T5829] Bluetooth: hci14: command tx timeout [ 788.806332][ T5829] Bluetooth: hci12: command tx timeout [ 789.846956][ T5829] Bluetooth: hci10: command tx timeout [ 789.852496][ T5829] Bluetooth: hci13: command tx timeout [ 789.926490][ T5829] Bluetooth: hci11: command tx timeout [ 790.816838][ T5829] Bluetooth: hci14: command tx timeout [ 790.887935][ T5829] Bluetooth: hci12: command tx timeout [ 791.926524][ T7748] Bluetooth: hci10: command tx timeout [ 791.931059][ T5829] Bluetooth: hci13: command tx timeout [ 792.007675][ T5829] Bluetooth: hci11: command tx timeout [ 792.886751][ T5829] Bluetooth: hci14: command tx timeout [ 792.966841][ T5829] Bluetooth: hci12: command tx timeout [ 794.006642][ T5829] Bluetooth: hci13: command tx timeout [ 794.968107][ T5829] Bluetooth: hci14: command tx timeout [ 795.219157][ T95] block nbd3: Possible stuck request ffff888024d29300: control (read@0,1024B). Runtime 510 seconds [ 795.230568][ T95] block nbd3: Possible stuck request ffff888024d294c0: control (read@1024,1024B). Runtime 510 seconds [ 795.242318][ T95] block nbd3: Possible stuck request ffff888024d29680: control (read@2048,1024B). Runtime 510 seconds [ 795.253832][ T95] block nbd3: Possible stuck request ffff888024d29840: control (read@3072,1024B). Runtime 510 seconds [ 805.606488][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 808.648211][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 817.607483][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 630 seconds [ 817.618882][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 630 seconds [ 817.630324][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 630 seconds [ 817.642072][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 630 seconds [ 820.976691][ T7748] Bluetooth: hci5: command 0x0406 tx timeout [ 825.290004][ T95] block nbd3: Possible stuck request ffff888024d29300: control (read@0,1024B). Runtime 540 seconds [ 825.301036][ T95] block nbd3: Possible stuck request ffff888024d294c0: control (read@1024,1024B). Runtime 540 seconds [ 825.312107][ T95] block nbd3: Possible stuck request ffff888024d29680: control (read@2048,1024B). Runtime 540 seconds [ 825.323665][ T95] block nbd3: Possible stuck request ffff888024d29840: control (read@3072,1024B). Runtime 540 seconds [ 843.837587][T27000] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 843.848978][T27000] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 843.858102][T27000] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 843.866873][T27000] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 843.874654][T27000] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 843.898427][ T7748] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 843.909856][ T7748] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 843.918538][ T7748] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 843.929013][T27087] lo speed is unknown, defaulting to 1000 [ 843.931050][ T7748] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 843.937500][T27087] wg1 speed is unknown, defaulting to 1000 [ 843.943475][ T7748] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 844.081020][T27089] lo speed is unknown, defaulting to 1000 [ 844.088670][T27089] wg1 speed is unknown, defaulting to 1000 [ 844.138533][T27087] chnl_net:caif_netlink_parms(): no params data found [ 844.254895][T27087] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.262823][T27087] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.270712][T27087] bridge_slave_0: entered allmulticast mode [ 844.278748][T27087] bridge_slave_0: entered promiscuous mode [ 844.293889][T27087] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.301606][T27087] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.309579][T27087] bridge_slave_1: entered allmulticast mode [ 844.318824][T27087] bridge_slave_1: entered promiscuous mode [ 844.377744][T27087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.402565][T27087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.450343][T27087] team0: Port device team_slave_0 added [ 844.460389][T27087] team0: Port device team_slave_1 added [ 844.510000][T27087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.518057][T27087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.545709][T27087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.559211][T27087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.566862][T27087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.593073][T27087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.604953][T27089] chnl_net:caif_netlink_parms(): no params data found [ 844.731627][T27087] hsr_slave_0: entered promiscuous mode [ 844.741138][T27087] hsr_slave_1: entered promiscuous mode [ 844.749335][T27087] debugfs: 'hsr0' already exists in 'hsr' [ 844.755078][T27087] Cannot create hsr debugfs directory [ 844.885701][T27089] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.897976][T27089] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.905197][ T5828] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 844.905372][T27089] bridge_slave_0: entered allmulticast mode [ 844.914652][ T5828] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 844.923028][T27089] bridge_slave_0: entered promiscuous mode [ 844.928812][ T5828] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 844.942942][ T5828] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 844.953198][ T5828] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 844.961307][T27089] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.973150][T27089] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.981357][T27089] bridge_slave_1: entered allmulticast mode [ 844.988773][T27089] bridge_slave_1: entered promiscuous mode [ 845.065616][T27089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.091797][T27089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.170201][T27104] lo speed is unknown, defaulting to 1000 [ 845.173356][T27089] team0: Port device team_slave_0 added [ 845.187210][T27089] team0: Port device team_slave_1 added [ 845.196584][T27104] wg1 speed is unknown, defaulting to 1000 [ 845.241539][T27089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.249011][T27089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.277010][T27089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.298641][T27089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.305602][T27089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.333322][T27089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.443971][T27089] hsr_slave_0: entered promiscuous mode [ 845.452097][T27089] hsr_slave_1: entered promiscuous mode [ 845.458920][T27089] debugfs: 'hsr0' already exists in 'hsr' [ 845.464636][T27089] Cannot create hsr debugfs directory [ 845.863735][T27104] chnl_net:caif_netlink_parms(): no params data found [ 845.903562][ T7748] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 845.913500][ T7748] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 845.922971][ T7748] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 845.930746][ T7748] Bluetooth: hci15: command tx timeout [ 845.939321][T27112] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 845.949338][T27112] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 846.009772][T27112] Bluetooth: hci16: command tx timeout [ 846.034969][T27104] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.042794][T27104] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.050714][T27104] bridge_slave_0: entered allmulticast mode [ 846.059756][T27104] bridge_slave_0: entered promiscuous mode [ 846.077489][T27104] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.084638][T27104] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.099564][T27104] bridge_slave_1: entered allmulticast mode [ 846.107785][T27104] bridge_slave_1: entered promiscuous mode [ 846.123472][T27110] lo speed is unknown, defaulting to 1000 [ 846.140325][T27110] wg1 speed is unknown, defaulting to 1000 [ 846.162387][T27104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.198696][T27104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.258114][T27104] team0: Port device team_slave_0 added [ 846.280653][T27104] team0: Port device team_slave_1 added [ 846.334133][T27104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.341654][T27104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.369386][T27104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.391600][T27104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.399118][T27104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.428181][T27104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.518603][T27104] hsr_slave_0: entered promiscuous mode [ 846.525432][T27104] hsr_slave_1: entered promiscuous mode [ 846.532639][T27104] debugfs: 'hsr0' already exists in 'hsr' [ 846.539453][T27104] Cannot create hsr debugfs directory [ 846.571075][T27112] Bluetooth: hci3: command 0x0406 tx timeout [ 846.577503][ T5828] Bluetooth: hci6: command 0x0406 tx timeout [ 846.810435][T27110] chnl_net:caif_netlink_parms(): no params data found [ 846.919643][T27000] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 846.930967][T27000] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 846.940431][T27000] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 846.949120][T27000] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 846.958460][T27000] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 846.966533][T27000] Bluetooth: hci17: command tx timeout [ 847.018123][T27110] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.025336][T27110] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.034027][T27110] bridge_slave_0: entered allmulticast mode [ 847.042022][T27110] bridge_slave_0: entered promiscuous mode [ 847.052383][T27110] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.064199][T27110] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.072164][T27110] bridge_slave_1: entered allmulticast mode [ 847.080814][T27110] bridge_slave_1: entered promiscuous mode [ 847.113736][T27120] lo speed is unknown, defaulting to 1000 [ 847.139297][T27120] wg1 speed is unknown, defaulting to 1000 [ 847.145227][T27110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.191773][T27110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.252116][T27110] team0: Port device team_slave_0 added [ 847.271863][T27110] team0: Port device team_slave_1 added [ 847.340726][T27110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.348059][T27110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.375296][T27110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.390011][T27110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.397919][T27110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.424471][T27110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.518961][T27110] hsr_slave_0: entered promiscuous mode [ 847.527684][T27110] hsr_slave_1: entered promiscuous mode [ 847.534272][T27110] debugfs: 'hsr0' already exists in 'hsr' [ 847.540957][T27110] Cannot create hsr debugfs directory [ 847.685023][T27120] chnl_net:caif_netlink_parms(): no params data found [ 847.699030][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 660 seconds [ 847.710310][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 660 seconds [ 847.721650][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 660 seconds [ 847.732864][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 660 seconds [ 847.850714][T27120] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.858872][T27120] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.867062][T27120] bridge_slave_0: entered allmulticast mode [ 847.874273][T27120] bridge_slave_0: entered promiscuous mode [ 847.883637][T27120] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.891086][T27120] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.900684][T27120] bridge_slave_1: entered allmulticast mode [ 847.908601][T27120] bridge_slave_1: entered promiscuous mode [ 847.951226][T27120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.963388][T27120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.006599][T27000] Bluetooth: hci18: command tx timeout [ 848.013869][T27000] Bluetooth: hci15: command tx timeout [ 848.022387][T27120] team0: Port device team_slave_0 added [ 848.031504][T27120] team0: Port device team_slave_1 added [ 848.071129][T27120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.078790][T27120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.105131][T27000] Bluetooth: hci16: command tx timeout [ 848.112772][T27120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.126946][T27120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.133876][T27120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.160800][T27120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.224044][T27120] hsr_slave_0: entered promiscuous mode [ 848.231130][T27120] hsr_slave_1: entered promiscuous mode [ 848.238710][T27120] debugfs: 'hsr0' already exists in 'hsr' [ 848.244454][T27120] Cannot create hsr debugfs directory [ 849.046400][T27000] Bluetooth: hci19: command tx timeout [ 849.046688][ T5829] Bluetooth: hci17: command tx timeout [ 850.086147][ T7748] Bluetooth: hci18: command tx timeout [ 850.086984][ T5828] Bluetooth: hci15: command tx timeout [ 850.166549][ T5828] Bluetooth: hci16: command tx timeout [ 851.126103][ T5828] Bluetooth: hci17: command tx timeout [ 851.136765][ T5828] Bluetooth: hci19: command tx timeout [ 851.697351][ T5828] Bluetooth: hci7: command 0x0406 tx timeout [ 851.697759][ T5829] Bluetooth: hci8: command 0x0406 tx timeout [ 851.703410][ T5828] Bluetooth: hci9: command 0x0406 tx timeout [ 852.166844][T27000] Bluetooth: hci15: command tx timeout [ 852.176489][T27000] Bluetooth: hci18: command tx timeout [ 852.246118][T27000] Bluetooth: hci16: command tx timeout [ 853.206480][T27000] Bluetooth: hci19: command tx timeout [ 853.209029][T27112] Bluetooth: hci17: command tx timeout [ 854.246863][T27112] Bluetooth: hci18: command tx timeout [ 855.286987][T27112] Bluetooth: hci19: command tx timeout [ 855.377585][ T95] block nbd3: Possible stuck request ffff888024d29300: control (read@0,1024B). Runtime 570 seconds [ 855.388825][ T95] block nbd3: Possible stuck request ffff888024d294c0: control (read@1024,1024B). Runtime 570 seconds [ 855.400447][ T95] block nbd3: Possible stuck request ffff888024d29680: control (read@2048,1024B). Runtime 570 seconds [ 855.412030][ T95] block nbd3: Possible stuck request ffff888024d29840: control (read@3072,1024B). Runtime 570 seconds [ 870.087971][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.736595][ T31] INFO: task syz.3.5991:26960 blocked for more than 143 seconds. [ 870.744456][ T31] Not tainted syzkaller #0 [ 870.750593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 870.759350][ T31] task:syz.3.5991 state:D stack:26024 pid:26960 tgid:26957 ppid:26612 task_flags:0x480140 flags:0x00080002 [ 870.771565][ T31] Call Trace: [ 870.774863][ T31] [ 870.778091][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 870.782613][ T31] ? __lock_acquire+0xab9/0xd20 [ 870.787568][ T31] ? __lock_acquire+0xab9/0xd20 [ 870.792439][ T31] ? __pfx___schedule+0x10/0x10 [ 870.797632][ T31] ? schedule+0x91/0x360 [ 870.801902][ T31] schedule+0x165/0x360 [ 870.807093][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 870.812606][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 870.819083][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 870.825174][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 870.831917][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 870.839867][ T31] nbd_set_size+0x47e/0x6a0 [ 870.844401][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 870.849901][ T31] ? nla_memcpy+0x5b/0xc0 [ 870.854268][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 870.859907][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 870.865390][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 870.872146][ T31] ? bpf_lsm_capable+0x9/0x20 [ 870.877345][ T31] ? security_capable+0x7e/0x2e0 [ 870.882305][ T31] ? radix_tree_lookup+0x240/0x290 [ 870.888192][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 870.893540][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 870.900103][ T31] ? rcu_is_watching+0x15/0xb0 [ 870.904896][ T31] ? __nla_parse+0x40/0x60 [ 870.909839][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 870.916537][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 870.922140][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 870.929304][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 870.934720][ T31] genl_rcv_msg+0x60e/0x790 [ 870.940931][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.946265][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 870.952017][ T31] netlink_rcv_skb+0x208/0x470 [ 870.957487][ T31] ? __lock_acquire+0xab9/0xd20 [ 870.962357][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.970026][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 870.975374][ T31] ? down_read+0x1ad/0x2e0 [ 870.980337][ T31] genl_rcv+0x28/0x40 [ 870.984344][ T31] netlink_unicast+0x82f/0x9e0 [ 870.989961][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 870.995269][ T31] ? netlink_sendmsg+0x642/0xb30 [ 871.000683][ T31] netlink_sendmsg+0x805/0xb30 [ 871.005475][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.012086][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.017634][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 871.055886][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.061233][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.094773][ T31] __sock_sendmsg+0x21c/0x270 [ 871.101689][ T31] ____sys_sendmsg+0x505/0x830 [ 871.107397][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.112714][ T31] ? import_iovec+0x74/0xa0 [ 871.117825][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 871.122541][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.129262][ T31] ? __fget_files+0x2a/0x420 [ 871.133873][ T31] ? __fget_files+0x3a0/0x420 [ 871.139056][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 871.144780][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.150719][ T31] ? do_syscall_64+0xbe/0xfa0 [ 871.155395][ T31] do_syscall_64+0xfa/0xfa0 [ 871.160575][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.165766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.172325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 871.177452][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.183349][ T31] RIP: 0033:0x7f7d9bd8f749 [ 871.188540][ T31] RSP: 002b:00007f7d9cbc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.197598][ T31] RAX: ffffffffffffffda RBX: 00007f7d9bfe5fa0 RCX: 00007f7d9bd8f749 [ 871.205584][ T31] RDX: 00000000200000c0 RSI: 0000200000000380 RDI: 0000000000000004 [ 871.214166][ T31] RBP: 00007f7d9be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 871.222398][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.231337][ T31] R13: 00007f7d9bfe6038 R14: 00007f7d9bfe5fa0 R15: 00007ffc2a0cd928 [ 871.239912][ T31] [ 871.242954][ T31] INFO: task syz.2.5990:26959 blocked for more than 143 seconds. [ 871.251882][ T31] Not tainted syzkaller #0 [ 871.257349][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 871.266538][ T31] task:syz.2.5990 state:D stack:27800 pid:26959 tgid:26958 ppid:17183 task_flags:0x400140 flags:0x00080002 [ 871.279007][ T31] Call Trace: [ 871.282295][ T31] [ 871.285214][ T31] __schedule+0x1798/0x4cc0 [ 871.290377][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.295260][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.300592][ T31] ? __pfx___schedule+0x10/0x10 [ 871.305459][ T31] ? schedule+0x91/0x360 [ 871.310257][ T31] schedule+0x165/0x360 [ 871.314411][ T31] schedule_preempt_disabled+0x13/0x30 [ 871.320511][ T31] __mutex_lock+0x7e6/0x1350 [ 871.325121][ T31] ? __mutex_lock+0x5bb/0x1350 [ 871.330315][ T31] ? genl_rcv_msg+0x10d/0x790 [ 871.334989][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 871.340502][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 871.346066][ T31] ? radix_tree_lookup+0x240/0x290 [ 871.351872][ T31] genl_rcv_msg+0x10d/0x790 [ 871.356746][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.361766][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 871.367578][ T31] ? __asan_memcpy+0x40/0x70 [ 871.372166][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 871.378276][ T31] netlink_rcv_skb+0x208/0x470 [ 871.383056][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.388299][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.393323][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.399291][ T31] ? down_read+0x1ad/0x2e0 [ 871.403725][ T31] genl_rcv+0x28/0x40 [ 871.408226][ T31] netlink_unicast+0x82f/0x9e0 [ 871.412985][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 871.418792][ T31] ? netlink_sendmsg+0x642/0xb30 [ 871.423720][ T31] ? skb_put+0x11b/0x210 [ 871.428525][ T31] netlink_sendmsg+0x805/0xb30 [ 871.433291][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.439151][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 871.444090][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.450150][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.456748][ T31] __sock_sendmsg+0x21c/0x270 [ 871.461461][ T31] __sys_sendto+0x3bd/0x520 [ 871.466717][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 871.471759][ T31] ? count_memcg_event_mm+0x21/0x260 [ 871.477553][ T31] ? rcu_is_watching+0x15/0xb0 [ 871.482315][ T31] __x64_sys_sendto+0xde/0x100 [ 871.487623][ T31] do_syscall_64+0xfa/0xfa0 [ 871.492116][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.497849][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.503915][ T31] ? clear_bhb_loop+0x60/0xb0 [ 871.509047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.514933][ T31] RIP: 0033:0x7f7f43b915dc [ 871.520330][ T31] RSP: 002b:00007f7f44999ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 871.529207][ T31] RAX: ffffffffffffffda RBX: 00007f7f44999fc0 RCX: 00007f7f43b915dc [ 871.537729][ T31] RDX: 000000000000001c RSI: 00007f7f4499a010 RDI: 0000000000000003 [ 871.545701][ T31] RBP: 0000000000000000 R08: 00007f7f44999f14 R09: 000000000000000c [ 871.554934][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 871.563510][ T31] R13: 00007f7f44999f68 R14: 00007f7f4499a010 R15: 0000000000000000 [ 871.571770][ T31] [ 871.574786][ T31] INFO: task syz.0.5997:26976 blocked for more than 144 seconds. [ 871.583256][ T31] Not tainted syzkaller #0 [ 871.588673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 871.597840][ T31] task:syz.0.5997 state:D stack:25480 pid:26976 tgid:26975 ppid:18562 task_flags:0x400140 flags:0x00080002 [ 871.610351][ T31] Call Trace: [ 871.613632][ T31] [ 871.617221][ T31] __schedule+0x1798/0x4cc0 [ 871.621747][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.626853][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.631713][ T31] ? __pfx___schedule+0x10/0x10 [ 871.636906][ T31] ? schedule+0x91/0x360 [ 871.641143][ T31] schedule+0x165/0x360 [ 871.645279][ T31] schedule_preempt_disabled+0x13/0x30 [ 871.650792][ T31] __mutex_lock+0x7e6/0x1350 [ 871.655398][ T31] ? __mutex_lock+0x5bb/0x1350 [ 871.661025][ T31] ? genl_rcv_msg+0x10d/0x790 [ 871.665728][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 871.671332][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 871.677170][ T31] ? radix_tree_lookup+0x240/0x290 [ 871.682280][ T31] genl_rcv_msg+0x10d/0x790 [ 871.687702][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.692742][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 871.698416][ T31] ? __asan_memcpy+0x40/0x70 [ 871.702998][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 871.708866][ T31] netlink_rcv_skb+0x208/0x470 [ 871.713623][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.719016][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.724078][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.729876][ T31] ? down_read+0x1ad/0x2e0 [ 871.734285][ T31] genl_rcv+0x28/0x40 [ 871.738824][ T31] netlink_unicast+0x82f/0x9e0 [ 871.743585][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 871.749276][ T31] ? netlink_sendmsg+0x642/0xb30 [ 871.754203][ T31] ? skb_put+0x11b/0x210 [ 871.759766][ T31] netlink_sendmsg+0x805/0xb30 [ 871.764553][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.770554][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 871.775509][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.781234][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.787039][ T31] __sock_sendmsg+0x21c/0x270 [ 871.791711][ T31] ____sys_sendmsg+0x505/0x830 [ 871.797115][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.802429][ T31] ? import_iovec+0x74/0xa0 [ 871.807355][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 871.812030][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.817884][ T31] ? __fget_files+0x2a/0x420 [ 871.822466][ T31] ? __fget_files+0x3a0/0x420 [ 871.827594][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 871.832526][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 871.838586][ T31] ? do_syscall_64+0xbe/0xfa0 [ 871.843286][ T31] do_syscall_64+0xfa/0xfa0 [ 871.849174][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.854388][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.861628][ T31] ? clear_bhb_loop+0x60/0xb0 [ 871.866594][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.872474][ T31] RIP: 0033:0x7fa84338f749 [ 871.877556][ T31] RSP: 002b:00007fa8441d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.886522][ T31] RAX: ffffffffffffffda RBX: 00007fa8435e5fa0 RCX: 00007fa84338f749 [ 871.894507][ T31] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 871.902999][ T31] RBP: 00007fa843413f91 R08: 0000000000000000 R09: 0000000000000000 [ 871.911675][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.919890][ T31] R13: 00007fa8435e6038 R14: 00007fa8435e5fa0 R15: 00007fffb9753888 [ 871.928310][ T31] [ 871.931350][ T31] INFO: task syz.4.5998:26989 blocked for more than 144 seconds. [ 871.946503][ T31] Not tainted syzkaller #0 [ 871.951465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 871.960741][ T31] task:syz.4.5998 state:D stack:28072 pid:26989 tgid:26980 ppid:26047 task_flags:0x400040 flags:0x00080002 [ 871.973859][ T31] Call Trace: [ 871.977679][ T31] [ 871.980607][ T31] __schedule+0x1798/0x4cc0 [ 871.985103][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.990403][ T31] ? __lock_acquire+0xab9/0xd20 [ 871.995264][ T31] ? __pfx___schedule+0x10/0x10 [ 872.000740][ T31] ? schedule+0x91/0x360 [ 872.004978][ T31] schedule+0x165/0x360 [ 872.011815][ T31] schedule_preempt_disabled+0x13/0x30 [ 872.017751][ T31] __mutex_lock+0x7e6/0x1350 [ 872.022336][ T31] ? __mutex_lock+0x5bb/0x1350 [ 872.027701][ T31] ? genl_rcv_msg+0x10d/0x790 [ 872.032390][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 872.038031][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 872.043438][ T31] ? radix_tree_lookup+0x240/0x290 [ 872.048932][ T31] genl_rcv_msg+0x10d/0x790 [ 872.053446][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.059223][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 872.064241][ T31] ? __asan_memcpy+0x40/0x70 [ 872.070088][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 872.075487][ T31] netlink_rcv_skb+0x208/0x470 [ 872.080732][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.085588][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.094645][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.100529][ T31] ? down_read+0x1ad/0x2e0 [ 872.104967][ T31] genl_rcv+0x28/0x40 [ 872.109420][ T31] netlink_unicast+0x82f/0x9e0 [ 872.114202][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 872.120065][ T31] ? netlink_sendmsg+0x642/0xb30 [ 872.124994][ T31] ? skb_put+0x11b/0x210 [ 872.129807][ T31] netlink_sendmsg+0x805/0xb30 [ 872.134573][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.140378][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 872.145318][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.151152][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.157094][ T31] __sock_sendmsg+0x21c/0x270 [ 872.161792][ T31] __sys_sendto+0x3bd/0x520 [ 872.166938][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 872.172455][ T31] ? count_memcg_event_mm+0x21/0x260 [ 872.178782][ T31] ? exc_page_fault+0x82/0x100 [ 872.183560][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 872.189203][ T31] __x64_sys_sendto+0xde/0x100 [ 872.193958][ T31] do_syscall_64+0xfa/0xfa0 [ 872.198976][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.204168][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.210782][ T31] ? clear_bhb_loop+0x60/0xb0 [ 872.215495][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.221555][ T31] RIP: 0033:0x7fdd62b915dc [ 872.226042][ T31] RSP: 002b:00007fdd63a76ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 872.234461][ T31] RAX: ffffffffffffffda RBX: 00007fdd63a76fc0 RCX: 00007fdd62b915dc [ 872.243193][ T31] RDX: 0000000000000020 RSI: 00007fdd63a77010 RDI: 0000000000000006 [ 872.251875][ T31] RBP: 0000000000000000 R08: 00007fdd63a76f14 R09: 000000000000000c [ 872.260199][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 872.268710][ T31] R13: 00007fdd63a76f68 R14: 00007fdd63a77010 R15: 0000000000000000 [ 872.277847][ T31] [ 872.280913][ T31] INFO: task syz.1.6001:26991 blocked for more than 144 seconds. [ 872.289191][ T31] Not tainted syzkaller #0 [ 872.294121][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 872.303453][ T31] task:syz.1.6001 state:D stack:23656 pid:26991 tgid:26990 ppid:17859 task_flags:0x400140 flags:0x00080002 [ 872.315790][ T31] Call Trace: [ 872.319521][ T31] [ 872.322449][ T31] __schedule+0x1798/0x4cc0 [ 872.327811][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.332694][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.338276][ T31] ? __pfx___schedule+0x10/0x10 [ 872.343163][ T31] ? schedule+0x91/0x360 [ 872.347932][ T31] schedule+0x165/0x360 [ 872.352084][ T31] schedule_preempt_disabled+0x13/0x30 [ 872.358221][ T31] __mutex_lock+0x7e6/0x1350 [ 872.362810][ T31] ? __mutex_lock+0x5bb/0x1350 [ 872.368004][ T31] ? genl_rcv_msg+0x10d/0x790 [ 872.373277][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 872.378848][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 872.384215][ T31] ? radix_tree_lookup+0x240/0x290 [ 872.389883][ T31] genl_rcv_msg+0x10d/0x790 [ 872.394386][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.400025][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 872.405061][ T31] ? __asan_memcpy+0x40/0x70 [ 872.410231][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 872.415607][ T31] netlink_rcv_skb+0x208/0x470 [ 872.421006][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.426405][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.431451][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.437194][ T31] ? down_read+0x1ad/0x2e0 [ 872.441607][ T31] genl_rcv+0x28/0x40 [ 872.445578][ T31] netlink_unicast+0x82f/0x9e0 [ 872.450960][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 872.456987][ T31] ? netlink_sendmsg+0x642/0xb30 [ 872.461922][ T31] ? skb_put+0x11b/0x210 [ 872.466624][ T31] netlink_sendmsg+0x805/0xb30 [ 872.471415][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.477800][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 872.482762][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.488491][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.493769][ T31] __sock_sendmsg+0x21c/0x270 [ 872.498707][ T31] __sys_sendto+0x3bd/0x520 [ 872.503226][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 872.508597][ T31] ? count_memcg_event_mm+0x21/0x260 [ 872.513899][ T31] ? exc_page_fault+0x82/0x100 [ 872.518900][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 872.524197][ T31] __x64_sys_sendto+0xde/0x100 [ 872.529345][ T31] do_syscall_64+0xfa/0xfa0 [ 872.533838][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.539684][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.545743][ T31] ? clear_bhb_loop+0x60/0xb0 [ 872.550847][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.557210][ T31] RIP: 0033:0x7fe6813915dc [ 872.561625][ T31] RSP: 002b:00007fe67f5ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 872.571163][ T31] RAX: ffffffffffffffda RBX: 00007fe67f5ecfc0 RCX: 00007fe6813915dc [ 872.580544][ T31] RDX: 0000000000000020 RSI: 00007fe67f5ed010 RDI: 000000000000000b [ 872.589028][ T31] RBP: 0000000000000000 R08: 00007fe67f5ecf14 R09: 000000000000000c [ 872.597740][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 872.605702][ T31] R13: 00007fe67f5ecf68 R14: 00007fe67f5ed010 R15: 0000000000000000 [ 872.614186][ T31] [ 872.617707][ T31] INFO: task syz-executor:26995 blocked for more than 145 seconds. [ 872.625601][ T31] Not tainted syzkaller #0 [ 872.631118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 872.640230][ T31] task:syz-executor state:D stack:22568 pid:26995 tgid:26995 ppid:1 task_flags:0x400140 flags:0x00080002 [ 872.652785][ T31] Call Trace: [ 872.656894][ T31] [ 872.659843][ T31] __schedule+0x1798/0x4cc0 [ 872.664356][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.669677][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.674536][ T31] ? __pfx___schedule+0x10/0x10 [ 872.680677][ T31] ? schedule+0x91/0x360 [ 872.684944][ T31] schedule+0x165/0x360 [ 872.689586][ T31] schedule_preempt_disabled+0x13/0x30 [ 872.695040][ T31] __mutex_lock+0x7e6/0x1350 [ 872.700181][ T31] ? __mutex_lock+0x5bb/0x1350 [ 872.704942][ T31] ? genl_rcv_msg+0x10d/0x790 [ 872.710053][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 872.715066][ T31] ? stack_trace_save+0x9c/0xe0 [ 872.720740][ T31] ? stack_trace_save+0x9c/0xe0 [ 872.725589][ T31] ? radix_tree_lookup+0x240/0x290 [ 872.731240][ T31] genl_rcv_msg+0x10d/0x790 [ 872.735745][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.741098][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.746736][ T31] netlink_rcv_skb+0x208/0x470 [ 872.751489][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.756871][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.761892][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.767620][ T31] ? down_read+0x1ad/0x2e0 [ 872.772029][ T31] genl_rcv+0x28/0x40 [ 872.776829][ T31] netlink_unicast+0x82f/0x9e0 [ 872.781616][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 872.787772][ T31] ? netlink_sendmsg+0x642/0xb30 [ 872.792728][ T31] ? skb_put+0x11b/0x210 [ 872.797132][ T31] netlink_sendmsg+0x805/0xb30 [ 872.801908][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.807563][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 872.812503][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.818318][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.823606][ T31] __sock_sendmsg+0x21c/0x270 [ 872.828732][ T31] __sys_sendto+0x3bd/0x520 [ 872.833227][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 872.839117][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.844015][ T31] ? fd_install+0x97/0x540 [ 872.848947][ T31] ? fd_install+0x30d/0x540 [ 872.853454][ T31] __x64_sys_sendto+0xde/0x100 [ 872.858718][ T31] do_syscall_64+0xfa/0xfa0 [ 872.863213][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 872.869000][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.875054][ T31] ? clear_bhb_loop+0x60/0xb0 [ 872.880264][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.887039][ T31] RIP: 0033:0x7f79fad915dc [ 872.891476][ T31] RSP: 002b:00007ffc10d6cad0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 872.900887][ T31] RAX: ffffffffffffffda RBX: 00007f79fbb14620 RCX: 00007f79fad915dc [ 872.909274][ T31] RDX: 0000000000000020 RSI: 00007f79fbb14670 RDI: 0000000000000005 [ 872.917695][ T31] RBP: 0000000000000000 R08: 00007ffc10d6cb24 R09: 000000000000000c [ 872.925659][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 872.934205][ T31] R13: 00007ffc10d6cb78 R14: 00007f79fbb14670 R15: 0000000000000000 [ 872.942693][ T31] [ 872.945728][ T31] INFO: task syz-executor:26997 blocked for more than 145 seconds. [ 872.954271][ T31] Not tainted syzkaller #0 [ 872.959806][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 872.969208][ T31] task:syz-executor state:D stack:21832 pid:26997 tgid:26997 ppid:1 task_flags:0x400140 flags:0x00080002 [ 872.981596][ T31] Call Trace: [ 872.984868][ T31] [ 872.988780][ T31] __schedule+0x1798/0x4cc0 [ 872.993303][ T31] ? __lock_acquire+0xab9/0xd20 [ 872.998653][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.003496][ T31] ? __pfx___schedule+0x10/0x10 [ 873.008889][ T31] ? schedule+0x91/0x360 [ 873.013126][ T31] schedule+0x165/0x360 [ 873.017878][ T31] schedule_preempt_disabled+0x13/0x30 [ 873.023331][ T31] __mutex_lock+0x7e6/0x1350 [ 873.028346][ T31] ? __mutex_lock+0x5bb/0x1350 [ 873.033106][ T31] ? genl_rcv_msg+0x10d/0x790 [ 873.038269][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 873.043288][ T31] ? stack_trace_save+0x9c/0xe0 [ 873.049076][ T31] ? stack_trace_save+0x9c/0xe0 [ 873.053967][ T31] ? radix_tree_lookup+0x240/0x290 [ 873.059972][ T31] genl_rcv_msg+0x10d/0x790 [ 873.064529][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.069777][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.074828][ T31] netlink_rcv_skb+0x208/0x470 [ 873.080066][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.084945][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.090832][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.096283][ T31] ? down_read+0x1ad/0x2e0 [ 873.100692][ T31] genl_rcv+0x28/0x40 [ 873.104673][ T31] netlink_unicast+0x82f/0x9e0 [ 873.110139][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 873.115434][ T31] ? netlink_sendmsg+0x642/0xb30 [ 873.120999][ T31] ? skb_put+0x11b/0x210 [ 873.125256][ T31] netlink_sendmsg+0x805/0xb30 [ 873.133866][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.140091][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 873.145123][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.150859][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.156720][ T31] __sock_sendmsg+0x21c/0x270 [ 873.161405][ T31] __sys_sendto+0x3bd/0x520 [ 873.166753][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 873.171792][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.177122][ T31] ? fd_install+0x97/0x540 [ 873.181544][ T31] ? fd_install+0x30d/0x540 [ 873.186516][ T31] __x64_sys_sendto+0xde/0x100 [ 873.191308][ T31] do_syscall_64+0xfa/0xfa0 [ 873.197371][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.202597][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.209109][ T31] ? clear_bhb_loop+0x60/0xb0 [ 873.213787][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.220179][ T31] RIP: 0033:0x7fbe297915dc [ 873.224670][ T31] RSP: 002b:00007ffc32caf7e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 873.233843][ T31] RAX: ffffffffffffffda RBX: 00007fbe2a514620 RCX: 00007fbe297915dc [ 873.242350][ T31] RDX: 0000000000000020 RSI: 00007fbe2a514670 RDI: 0000000000000005 [ 873.250697][ T31] RBP: 0000000000000000 R08: 00007ffc32caf834 R09: 000000000000000c [ 873.259272][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 873.267639][ T31] R13: 00007ffc32caf888 R14: 00007fbe2a514670 R15: 0000000000000000 [ 873.275615][ T31] [ 873.279196][ T31] INFO: task syz-executor:27014 blocked for more than 145 seconds. [ 873.287875][ T31] Not tainted syzkaller #0 [ 873.292811][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 873.302388][ T31] task:syz-executor state:D stack:22568 pid:27014 tgid:27014 ppid:1 task_flags:0x400140 flags:0x00080002 [ 873.314781][ T31] Call Trace: [ 873.318853][ T31] [ 873.321785][ T31] __schedule+0x1798/0x4cc0 [ 873.326821][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.331676][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.337324][ T31] ? __pfx___schedule+0x10/0x10 [ 873.342193][ T31] ? schedule+0x91/0x360 [ 873.346951][ T31] schedule+0x165/0x360 [ 873.351104][ T31] schedule_preempt_disabled+0x13/0x30 [ 873.357081][ T31] __mutex_lock+0x7e6/0x1350 [ 873.361673][ T31] ? __mutex_lock+0x5bb/0x1350 [ 873.366639][ T31] ? genl_rcv_msg+0x10d/0x790 [ 873.371330][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 873.376764][ T31] ? stack_trace_save+0x9c/0xe0 [ 873.381637][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 873.387181][ T31] ? radix_tree_lookup+0x240/0x290 [ 873.392318][ T31] genl_rcv_msg+0x10d/0x790 [ 873.397995][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.402879][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.408479][ T31] netlink_rcv_skb+0x208/0x470 [ 873.413236][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.418673][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.423708][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.429457][ T31] ? down_read+0x1ad/0x2e0 [ 873.433878][ T31] genl_rcv+0x28/0x40 [ 873.438664][ T31] netlink_unicast+0x82f/0x9e0 [ 873.443462][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 873.449371][ T31] ? netlink_sendmsg+0x642/0xb30 [ 873.454304][ T31] ? skb_put+0x11b/0x210 [ 873.459164][ T31] netlink_sendmsg+0x805/0xb30 [ 873.463958][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.469823][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 873.474759][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.480554][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.486291][ T31] __sock_sendmsg+0x21c/0x270 [ 873.490985][ T31] __sys_sendto+0x3bd/0x520 [ 873.495470][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 873.501645][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.507117][ T31] ? fd_install+0x97/0x540 [ 873.511552][ T31] ? fd_install+0x30d/0x540 [ 873.516531][ T31] __x64_sys_sendto+0xde/0x100 [ 873.521292][ T31] do_syscall_64+0xfa/0xfa0 [ 873.525776][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.531702][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.538423][ T31] ? clear_bhb_loop+0x60/0xb0 [ 873.543112][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.549467][ T31] RIP: 0033:0x7f8cb7f915dc [ 873.553877][ T31] RSP: 002b:00007ffc7d1f44c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 873.563207][ T31] RAX: ffffffffffffffda RBX: 00007f8cb8d14620 RCX: 00007f8cb7f915dc [ 873.571650][ T31] RDX: 0000000000000020 RSI: 00007f8cb8d14670 RDI: 0000000000000005 [ 873.579970][ T31] RBP: 0000000000000000 R08: 00007ffc7d1f4514 R09: 000000000000000c [ 873.588449][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 873.596921][ T31] R13: 00007ffc7d1f4568 R14: 00007f8cb8d14670 R15: 0000000000000000 [ 873.605370][ T31] [ 873.608932][ T31] INFO: task syz-executor:27024 blocked for more than 146 seconds. [ 873.617748][ T31] Not tainted syzkaller #0 [ 873.622687][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 873.631800][ T31] task:syz-executor state:D stack:22456 pid:27024 tgid:27024 ppid:1 task_flags:0x400140 flags:0x00080002 [ 873.644175][ T31] Call Trace: [ 873.647962][ T31] [ 873.650888][ T31] __schedule+0x1798/0x4cc0 [ 873.655380][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.660484][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.665351][ T31] ? __pfx___schedule+0x10/0x10 [ 873.670499][ T31] ? schedule+0x91/0x360 [ 873.674754][ T31] schedule+0x165/0x360 [ 873.679797][ T31] schedule_preempt_disabled+0x13/0x30 [ 873.685274][ T31] __mutex_lock+0x7e6/0x1350 [ 873.690358][ T31] ? __mutex_lock+0x5bb/0x1350 [ 873.695149][ T31] ? genl_rcv_msg+0x10d/0x790 [ 873.700125][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 873.705557][ T31] ? stack_trace_save+0x9c/0xe0 [ 873.710855][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 873.716339][ T31] ? radix_tree_lookup+0x240/0x290 [ 873.721475][ T31] genl_rcv_msg+0x10d/0x790 [ 873.726370][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.731238][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.736872][ T31] netlink_rcv_skb+0x208/0x470 [ 873.741653][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.746578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.751616][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.757130][ T31] ? down_read+0x1ad/0x2e0 [ 873.761573][ T31] genl_rcv+0x28/0x40 [ 873.765554][ T31] netlink_unicast+0x82f/0x9e0 [ 873.770905][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 873.776422][ T31] ? netlink_sendmsg+0x642/0xb30 [ 873.781374][ T31] ? skb_put+0x11b/0x210 [ 873.785608][ T31] netlink_sendmsg+0x805/0xb30 [ 873.790473][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.795778][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 873.801048][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.807033][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.812352][ T31] __sock_sendmsg+0x21c/0x270 [ 873.817240][ T31] __sys_sendto+0x3bd/0x520 [ 873.821763][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 873.827068][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.831930][ T31] ? fd_install+0x97/0x540 [ 873.836476][ T31] ? fd_install+0x30d/0x540 [ 873.840989][ T31] __x64_sys_sendto+0xde/0x100 [ 873.845744][ T31] do_syscall_64+0xfa/0xfa0 [ 873.850543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.855753][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.862277][ T31] ? clear_bhb_loop+0x60/0xb0 [ 873.867541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.873445][ T31] RIP: 0033:0x7ff17ed915dc [ 873.878004][ T31] RSP: 002b:00007fff1d59ec20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 873.886773][ T31] RAX: ffffffffffffffda RBX: 00007ff17fb14620 RCX: 00007ff17ed915dc [ 873.894751][ T31] RDX: 0000000000000020 RSI: 00007ff17fb14670 RDI: 0000000000000005 [ 873.902848][ T31] RBP: 0000000000000000 R08: 00007fff1d59ec74 R09: 000000000000000c [ 873.911457][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 873.919720][ T31] R13: 00007fff1d59ecc8 R14: 00007ff17fb14670 R15: 0000000000000000 [ 873.928920][ T31] [ 873.931999][ T31] INFO: task syz-executor:27026 blocked for more than 146 seconds. [ 873.940078][ T31] Not tainted syzkaller #0 [ 873.945002][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 873.953971][ T31] task:syz-executor state:D stack:22360 pid:27026 tgid:27026 ppid:1 task_flags:0x400140 flags:0x00080002 [ 873.965988][ T31] Call Trace: [ 873.969255][ T31] [ 873.972171][ T31] __schedule+0x1798/0x4cc0 [ 873.977015][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.981884][ T31] ? __lock_acquire+0xab9/0xd20 [ 873.986881][ T31] ? __pfx___schedule+0x10/0x10 [ 873.991747][ T31] ? schedule+0x91/0x360 [ 873.996034][ T31] schedule+0x165/0x360 [ 874.000220][ T31] schedule_preempt_disabled+0x13/0x30 [ 874.005661][ T31] __mutex_lock+0x7e6/0x1350 [ 874.011426][ T31] ? __mutex_lock+0x5bb/0x1350 [ 874.016293][ T31] ? genl_rcv_msg+0x10d/0x790 [ 874.020992][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 874.026104][ T31] ? stack_trace_save+0x9c/0xe0 [ 874.030984][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 874.036699][ T31] ? radix_tree_lookup+0x240/0x290 [ 874.041832][ T31] genl_rcv_msg+0x10d/0x790 [ 874.046480][ T31] ? __lock_acquire+0xab9/0xd20 [ 874.051335][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.056439][ T31] netlink_rcv_skb+0x208/0x470 [ 874.061232][ T31] ? __lock_acquire+0xab9/0xd20 [ 874.066431][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.071484][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.077159][ T31] ? down_read+0x1ad/0x2e0 [ 874.081600][ T31] genl_rcv+0x28/0x40 [ 874.085573][ T31] netlink_unicast+0x82f/0x9e0 [ 874.090630][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 874.096368][ T31] ? netlink_sendmsg+0x642/0xb30 [ 874.101327][ T31] ? skb_put+0x11b/0x210 [ 874.105556][ T31] netlink_sendmsg+0x805/0xb30 [ 874.110399][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.115946][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 874.120904][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 874.126855][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.132160][ T31] __sock_sendmsg+0x21c/0x270 [ 874.136918][ T31] __sys_sendto+0x3bd/0x520 [ 874.141431][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 874.146511][ T31] ? __lock_acquire+0xab9/0xd20 [ 874.151403][ T31] ? fd_install+0x97/0x540 [ 874.155875][ T31] ? fd_install+0x30d/0x540 [ 874.160398][ T31] __x64_sys_sendto+0xde/0x100 [ 874.165184][ T31] do_syscall_64+0xfa/0xfa0 [ 874.170754][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.176276][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.182355][ T31] ? clear_bhb_loop+0x60/0xb0 [ 874.187128][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.193043][ T31] RIP: 0033:0x7fae91b915dc [ 874.197773][ T31] RSP: 002b:00007ffdfdfde940 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 874.206345][ T31] RAX: ffffffffffffffda RBX: 00007fae92914620 RCX: 00007fae91b915dc [ 874.214332][ T31] RDX: 0000000000000020 RSI: 00007fae92914670 RDI: 0000000000000005 [ 874.222925][ T31] RBP: 0000000000000000 R08: 00007ffdfdfde994 R09: 000000000000000c [ 874.231193][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 874.239242][ T31] R13: 00007ffdfdfde9e8 R14: 00007fae92914670 R15: 0000000000000000 [ 874.247592][ T31] [ 874.250619][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 874.259953][ T31] [ 874.259953][ T31] Showing all locks held in the system: [ 874.267715][ T31] 1 lock held by khungtaskd/31: [ 874.272566][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 874.282508][ T31] 1 lock held by klogd/5185: [ 874.287365][ T31] #0: ffff8880b893a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 874.297349][ T31] 2 locks held by getty/5586: [ 874.302019][ T31] #0: ffff88814d8d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 874.311853][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 874.322571][ T31] 1 lock held by udevd/6122: [ 874.327550][ T31] #0: ffff888024b77358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 874.336889][ T31] 1 lock held by udevd/9657: [ 874.341476][ T31] #0: ffff888024ca3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 874.351011][ T31] 6 locks held by syz.3.5991/26960: [ 874.356306][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.364523][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.373584][ T31] #2: ffff888024c94a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 874.384145][ T31] #3: ffff8881433ce928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 874.393801][ T31] #4: ffff8881433ce2c8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 874.407464][ T31] #5: ffff8881433ce300 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 874.420250][ T31] 2 locks held by syz.2.5990/26959: [ 874.426043][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.434282][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.443698][ T31] 2 locks held by syz.0.5997/26976: [ 874.448954][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.457198][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.466513][ T31] 2 locks held by syz.4.5998/26989: [ 874.471717][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.479953][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.489113][ T31] 2 locks held by syz.1.6001/26991: [ 874.494312][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.502809][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.511868][ T31] 2 locks held by syz-executor/26995: [ 874.517346][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.525971][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.534984][ T31] 2 locks held by syz-executor/26997: [ 874.541114][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.549749][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.559368][ T31] 2 locks held by syz-executor/27014: [ 874.564781][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.573904][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.584034][ T31] 2 locks held by syz-executor/27024: [ 874.589464][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.597774][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.607072][ T31] 2 locks held by syz-executor/27026: [ 874.612443][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.620780][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.630238][ T31] 2 locks held by syz-executor/27042: [ 874.635613][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.644117][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.653339][ T31] 2 locks held by syz-executor/27044: [ 874.659002][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.667589][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.676721][ T31] 2 locks held by syz-executor/27059: [ 874.682091][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.690340][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.699556][ T31] 2 locks held by syz-executor/27068: [ 874.704913][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.713156][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.722193][ T31] 2 locks held by syz-executor/27077: [ 874.728418][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.736686][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.745681][ T31] 2 locks held by syz-executor/27087: [ 874.751098][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.759470][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.768559][ T31] 2 locks held by syz-executor/27089: [ 874.773925][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.782195][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.791432][ T31] 2 locks held by syz-executor/27104: [ 874.796845][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.805055][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.814108][ T31] 2 locks held by syz-executor/27110: [ 874.819732][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.827993][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.837442][ T31] 2 locks held by syz-executor/27120: [ 874.842821][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.851268][ T31] #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 874.860319][ T31] [ 874.862638][ T31] ============================================= [ 874.862638][ T31] [ 874.871170][ T31] NMI backtrace for cpu 0 [ 874.871187][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 874.871218][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.871239][ T31] Call Trace: [ 874.871252][ T31] [ 874.871259][ T31] dump_stack_lvl+0x189/0x250 [ 874.871291][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.871318][ T31] ? __pfx__printk+0x10/0x10 [ 874.871351][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 874.871382][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 874.871410][ T31] ? __pfx__printk+0x10/0x10 [ 874.871435][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 874.871468][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 874.871499][ T31] watchdog+0xf60/0xfa0 [ 874.871521][ T31] ? watchdog+0x1e2/0xfa0 [ 874.871544][ T31] kthread+0x711/0x8a0 [ 874.871572][ T31] ? __pfx_watchdog+0x10/0x10 [ 874.871592][ T31] ? __pfx_kthread+0x10/0x10 [ 874.871621][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 874.871652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.871671][ T31] ? __pfx_kthread+0x10/0x10 [ 874.871700][ T31] ret_from_fork+0x4bc/0x870 [ 874.871725][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 874.871751][ T31] ? __switch_to_asm+0x39/0x70 [ 874.871768][ T31] ? __switch_to_asm+0x33/0x70 [ 874.871783][ T31] ? __pfx_kthread+0x10/0x10 [ 874.871810][ T31] ret_from_fork_asm+0x1a/0x30 [ 874.871844][ T31] [ 874.871852][ T31] Sending NMI from CPU 0 to CPUs 1: [ 875.018769][ C1] NMI backtrace for cpu 1 [ 875.018802][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 875.018821][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.018832][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 875.018855][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 f1 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 875.018872][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 875.018887][ C1] RAX: 2a8a76d94145f100 RBX: ffffffff81967b47 RCX: 2a8a76d94145f100 [ 875.018901][ C1] RDX: 0000000000000001 RSI: ffffffff8d7113f9 RDI: ffffffff8bbf08e0 [ 875.018914][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 875.018927][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7d0470 [ 875.018940][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003951b58 [ 875.018951][ C1] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 875.018965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.018978][ C1] CR2: 0000563cfd7c1000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 875.018993][ C1] Call Trace: [ 875.019000][ C1] [ 875.019007][ C1] default_idle+0x13/0x20 [ 875.019027][ C1] default_idle_call+0x73/0xb0 [ 875.019048][ C1] do_idle+0x1e7/0x510 [ 875.019070][ C1] ? __pfx_do_idle+0x10/0x10 [ 875.019097][ C1] cpu_startup_entry+0x44/0x60 [ 875.019114][ C1] start_secondary+0x101/0x110 [ 875.019139][ C1] common_startup_64+0x13e/0x147 [ 875.019170][ C1] [ 877.768152][ T95] block nbd0: Possible stuck request ffff888024c67000: control (read@0,1024B). Runtime 690 seconds [ 877.779297][ T95] block nbd0: Possible stuck request ffff888024c671c0: control (read@1024,1024B). Runtime 690 seconds [ 877.791129][ T95] block nbd0: Possible stuck request ffff888024c67380: control (read@2048,1024B). Runtime 690 seconds [ 877.803060][ T95] block nbd0: Possible stuck request ffff888024c67540: control (read@3072,1024B). Runtime 690 seconds