last executing test programs: 17.4565086s ago: executing program 3 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r2 = socket(0x10, 0x803, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x10, 0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x1d161108a18bb434, 0x4}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) 16.79366851s ago: executing program 2 (id=1745): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.771505525s ago: executing program 0 (id=1746): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000002880)) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x12000, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x7, &(0x7f0000000040)='cg\x02\x1d\x00p\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff02000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000000000000000000201703b744dc5c6"], 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000280), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000198500000064006d069500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read(r4, &(0x7f00000014c0)=""/4125, 0x1) 16.529784277s ago: executing program 3 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1e}, 0x95) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="440100001a0001000000000000000000000000000000000000e6ff0000000000000000000000000000003300000000000d6352742a3badee0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e40010000000000000000000000000000000033000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001600810000004c0014"], 0x144}}, 0x800) (async, rerun: 64) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7, @ANYRESOCT=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x42015) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) (rerun: 32) sendto$packet(r1, &(0x7f0000000440)="0b032212e0ff05000200", 0xa, 0x0, &(0x7f0000000180)={0x11, 0x9, r10}, 0x14) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) close(r0) 16.528913258s ago: executing program 0 (id=1749): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xb}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltclass={0x40, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0x10, 0xd}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x6c, 0x7e}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_tbf={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24004040) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}, 0x1000) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x50, 0x1401, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}}, 0x20006040) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.517333405s ago: executing program 1 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009fb67f1b4b0c3363f5d5b05dd9ca8000100626f6e640000"], 0x3c}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x7, 0x8, 0x1, 0x8, 0x4b4, 0x5, 0xf]}}]}]}]}, 0x38}}, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async, rerun: 64) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r10, &(0x7f00000004c0)={0x4}) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r12, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) (async) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000580)=""/101, &(0x7f0000000500)=0x65) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r9, @ANYBLOB="0a000600080211000001000030005080110013004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) (async, rerun: 32) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "16c0daf4a1"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ffe6b1ff1e"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008081) (rerun: 32) 16.465321697s ago: executing program 2 (id=1751): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x899, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080), 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000280)="55e342d24436968cc52c9bb84e47dab4a213563bfc0e48b7be01181f9003e239852d4b9060e6ef2199f2282f964355d80d4e0ffd6cea41e957be7193a47a4598ab2d61f7d385757524ee577d590c24f6c40b2df760fe57d65ed7d08d0759c6fe799af3e65624fdc1b7e1d479fc4fadbc03b423e6e714dc64ce20a0932619f7b5a4e8dae724ee16", &(0x7f0000000340)=""/151, &(0x7f0000000400)="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", &(0x7f0000000500)="d7899ca2a2387420b951e4f1283f81131ece3fb3641d947ee4045824107f7842d0417a55c339bcdeddca6ba6a725129b4760ff99a0179ffbddd8051421648911caf5ed901084df1dcc1fa9cb3014b2bb3df944685e8761a626a0b621e56d683ee97176cbb0ef07bc0db332175c14950883ebc9caa4052575a08e7dd93256525ecc7728fa8c670d2da2dc2063f4e04f0b5f8ba03f5b745b4b53cc56af683a7dadda8d25973ac78d7b6db59cbb", 0x39bd, r6}, 0x38) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 16.366019842s ago: executing program 0 (id=1752): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x55, &(0x7f0000000080)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a70ddb", 0x0, 0x3a, 0x30d66df472e0f96c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x3a, 0x0, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x2f, 0x0, '\x00', [@pad1]}], "ff5c8117a0576a28506d0a4a67a62b6617f0069d3b544f27b0de32616ac8cf19fd229faab8432ff5adda3aacb4618fe92a8e39d8e9f88e1524c888a8c182d227f023749ec16ec75ab71fce44c4017aec37f24b5a34"}}}}}, 0x0) 16.302003283s ago: executing program 1 (id=1753): socket$inet6_icmp(0xa, 0x2, 0x3a) read(0xffffffffffffffff, &(0x7f00000004c0)=""/158, 0x9e) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500000c0000000000001000000000030006000000000002000000ffffffff00000000000000000200010000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000001000d000000000000"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x4800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000a8d28a50912f24cdfe9c487b99e9"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32, @ANYBLOB="000000db8d00"/28], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) sendmsg$nl_generic(r6, &(0x7f0000000440)={0x0, 0xffffffffffffffa2, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYRES32=r5, @ANYRES64=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0x6, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r7, @ANYBLOB="478fd7c2c4669cddbe238f310f21b7a1fc3a0f675872c728ab5e8cbee41c6b1d7943f1a324b760b4565c0bfad721e24448a98c65c88566191a5cf92ff88d4f05e6915831145a0347e9cfa6995d876c4c304a519e8a4e38d3632381", @ANYBLOB="040027bd7000fcdbdf25170d00002800018008000100dbf84099ef05adaec6a6075446eab5b946caeebd8b0c40a5a3319801caffbbd93ff2b166fad6672ac0f7342a1eb6652c1a5bcebd0a47c5d69eb99ba603c15f1f44c100c2b4936fe5b49f039bd803e11e053181384ac74e8d46e684602ef710449e2c5fc90601446ea6359244ee5f46e2d445c696b89a7e8a7fcaec5352", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f6873720000000008000300020000002000018014000200766c616e3000000000000000000000000800030002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000640)={0xfc92, 0x4, 0x80000001, 0x8}, &(0x7f0000000680)=0x10) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f0000000140)=0x1) r9 = socket(0x8, 0x800, 0x7f) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f00000000c0)=r10, 0x4) listen(r11, 0x0) close(0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100018040000000000000000001986c217fe3aa5a9130f000300", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x44}}, 0x0) 16.26713751s ago: executing program 3 (id=1754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000080), 0x4) getsockopt$ax25_int(r1, 0x101, 0x6, 0x0, &(0x7f0000000000)) 16.162201033s ago: executing program 0 (id=1755): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x108, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 16.161358173s ago: executing program 3 (id=1757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3b}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 16.161046098s ago: executing program 2 (id=1758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="3c840300000000002c0012800e000100697036677265746170000000180002801400070000000000000000000000ffffffffffff0a000100aaaaaaaaaa00000075ee3a04408de88b292f2922a93fa77280c6506fdbf12cd0a479ffc8f1755f530d84dae20800d24157da7108cad5cfb58d1eda4070c2b5d915d2241fcd66aec4034427"], 0x58}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x4e23, 0x6, 0x4e20, 0x91f, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r1) r3 = socket(0x27, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x14, 0x5a, 0x722, 0x0, 0xfffffffd}, 0xfffffffc}, 0x1, 0x0, 0x0, 0x40811}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="3c840300000000002c0012800e000100697036677265746170000000180002801400070000000000000000000000ffffffffffff0a000100aaaaaaaaaa00000075ee3a04408de88b292f2922a93fa77280c6506fdbf12cd0a479ffc8f1755f530d84dae20800d24157da7108cad5cfb58d1eda4070c2b5d915d2241fcd66aec4034427"], 0x58}}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x4e23, 0x6, 0x4e20, 0x91f, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r1) (async) socket(0x27, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x14, 0x5a, 0x722, 0x0, 0xfffffffd}, 0xfffffffc}, 0x1, 0x0, 0x0, 0x40811}, 0x10) (async) 16.037711312s ago: executing program 0 (id=1760): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 16.031185517s ago: executing program 1 (id=1761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x9c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4668}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4050}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 15.902704261s ago: executing program 2 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0xf, 0x18}, 0x20) connect$unix(r1, 0xfffffffffffffffe, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0xc49b}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300030e00000c000000000000000015000600000000000a00000000000000fe88000000000000000000000000010100000000000000000200010000000000000000000000000005000500002000000a00000000000000fc00"/112], 0x70}, 0x1, 0x7}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000000c0)=0x4000, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettaction={0xdc, 0x32, 0x8, 0x70bd28, 0xf, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20000000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fff}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x839}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffa3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) poll(&(0x7f0000000180)=[{r1}, {r7, 0x4058}, {r0, 0x4004}], 0x3, 0x8) 15.801936535s ago: executing program 0 (id=1763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r2, 0x6a, 0x6, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0x10) 15.801005821s ago: executing program 3 (id=1764): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00010000ac3be7f77e7aa97978cbe8", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r4, @ANYRES16=r4], 0x24}}, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @dev}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', r2, 0x700, 0x8000, 0x7f72, 0x7ff, {{0x13, 0x4, 0x2, 0xa, 0x4c, 0x65, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@lsrr={0x83, 0xb, 0x34, [@multicast2, @multicast2]}, @timestamp={0x44, 0x18, 0x48, 0x0, 0x9, [0x7, 0x861, 0x4, 0x9, 0x4]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x7, 0x74, [@empty]}, @end, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x100, 0x70b928, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0x6a634f30ebfaac43}, {0xfff2, 0xf}, {0x2, 0xa}}, [""]}, 0x24}}, 0x24000000) (async) bind$packet(r0, &(0x7f0000000100)={0x11, 0x10, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x8}, 0x48) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.800456892s ago: executing program 1 (id=1765): syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff8100000088fb9f125d0af55bf091574bf8b5c4d1cd32ff8719ba820ce5acacdff1d02807ae663f2392b0167c68494a90a445293733539b9e97c1d330243e5c69568a3f8b2cd64ca25bbba3286336f762a63085fc70187d6f45348f427ef242953f0fc749dcc98179f5dc51b3493b5fb89a559fb0023d61a0572c31b7a3464840a7f52e8694cefe4bc8faac0349be41b46baed87b06b9eb04035a71cf161cdad3d75b7474be3cd065923cfc52d466d55019dd0b84c434c4c6936e4ca1c0deafe2432832e37aea1d748ce86c0de66b18eb00e091c4c482b37b8aa8436908bc575422c6da5080ab74c5fc7a93a87195b699602f329503fa6c4c86c199e4c9c5a94ad2119d7b73fdd07bf62425375d772817720c3756c03989fdf55de7d96a86e540a0937ec3b5ae137a561f8af2075fb598401958811b8e22dc007383518111ccdc7a819cb8ec2628d92bfdf33221f8db40f74467b882580cc75d71c772a3d87e6566bc840bb3031882e91e955fec5c7617b7def5762de373636b803ddb47838e547d4eaa452f1ce2cf924b2d3b"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02050b083c0000002abd7000ffdbdf250100140000000000030005003320000002004e207f00000100000000000000000800120002000400b36b6e007c4836210600320008080000fbffffff000000006401010200000000000000000000000064010102000000000000000000000000010008000000000002000a004fbb0000060000000000000002001000000004d6000004d500000000210018000e09ff009189888d4778ea374eef21ddef0b22c9f50a01ae43e657b32081df688f109ad3800d69340159b9bf05c63c9f8278088bc496abb00e47d8d971b1e472bbaf633218dec572066a97ef5a259b8a891aca00887256fbcb63c450bb609c1772574bc477117bbacdd2637ddd1167aed386b6962783c8fccb21aa8bccb4a5083c8989b4867f357e721b85697398dd80b82f8ca9144677dea2ca8c6712ae39c90efbf4f7bd812fafa11b7b4ab7e3116be15fff98d7686eda94c2c95d075cdc23679064e687774952b0fb878d3fa480073b3cd720ec62c9a4a25b926715c2967758e9fcb9e22c0ee0746f2bba8d2b0bb2117f752fb1f85e712f6e9a011bc8fe00010016004e210000020013000100000028bd70000000000005001a0000000000000000000000ffffffffffffac1414bb0000000000000000000000002c000004"], 0x1e0}}, 0x48001) 15.798736762s ago: executing program 4 (id=1766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x5, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x2000051) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.728959376s ago: executing program 1 (id=1767): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4ba0}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) 15.707587722s ago: executing program 4 (id=1768): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$caif_stream(0x25, 0x1, 0x3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x0, @can={0x1d, r5}, @l2tp={0x2, 0x0, @broadcast, 0x1}, @l2={0x1f, 0x100, @none, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400), 0x1, 0x100000001, 0x3}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x22, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000185700000c00000000000000000000008520000002000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0005000000000000b70500000800000085060000000000000058000005000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000009960100060000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x24}}, 0x1) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r8, 0xf505, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x4, @local, 'syzkaller0\x00'}}) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 15.643666714s ago: executing program 3 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}]}, 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0xd, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 15.606269814s ago: executing program 2 (id=1770): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @const, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x0, 0x30, 0x2e, 0x30, 0x5f, 0x30]}}, &(0x7f0000000140)=""/121, 0x45, 0x79, 0x0, 0x100}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000080)=r1}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r4, &(0x7f00000009c0)="87931b6ee9ed0ea052484c2494f33672562bddde260a6ea4fa7f4bf263a4036c7164d2b072bc3a70eafc0fdfd224e53a15d1cfee46bfdbfb4085522cb9d39129054a38df210037d829e3e5ff2e2619be26f646eb1ff9b33beecea8f8d964b1f63c96d6537ef9184639d6d45ae28b7d164d658e806cfa04574e4f19d0859ad4350f0964d0243c9926e4c4505c5e177ab5c11b28cd5720aa72526f175dfbeaf97e2b69d711f6073b652bda5434735cf2f0218015a502335e49ba106b3e06828ec0a56ca1ec5e605521ff5de13ad1599c0ad2b85c1be279d14b73044b83dd2bc3bd196fd820d3b1f1e9424e22ad8622ad3e4a2520893892b5f49bc771c718", &(0x7f0000000ac0)=""/211, 0x4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x18, &(0x7f00000007c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, r0, 0x6}, 0x94) 15.590340973s ago: executing program 1 (id=1771): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x3e7a18eba4131db3}, 0x18) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@bcast, @netrom, @netrom, @default, @bcast, @netrom, @null, @default]}, &(0x7f0000000140)=0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r2}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = getpid() r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_NEWNSID={0x4c, 0x58, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xf7, 0x4, 0x16, @local, @remote, 0x1, 0x7800, 0x1, 0x7ff}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x400c8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2b, 0x1, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r7, r0, 0x8, 0x0, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1f1675ebcb2e86b4}}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "2287484163014054b312a4acb8b931d23103f247359a1c20122aeddcd93f541c286ae8c8d789ba493b11fe51ead79e1f64c581dde96e204377b65b428a4ccb9b1765865b04ef48e1fd0be6e658003847becc3ffb962c531e63ae88ce92bb8124ca5e6f60aa9dfe40630e84a1f39ceb8c7fa6ab894e08ffa70484b4122a87c0a8ef547973168a10fc67ec34905eb4035e7f018dedad97c0704776541cf12717c641b0cd042d3b7965e39b16ca0544fb0af26b11663b5dcd93d36533e792"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x194}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008084) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x274, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x101, 0x7, 0x10, 0x2}, {0xb, 0x5, 0x6, 0x1}, {0x7, 0x65, 0x9, 0x5}, {0x9, 0x9, 0x2, 0x7ff}, {0xfffc, 0xa, 0x2, 0xff}, {0x6, 0x40, 0xe}, {0x0, 0x40, 0x44, 0xa}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}]}, 0x274}}, 0x20000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0}, &(0x7f0000000d80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) sendmsg$unix(r3, &(0x7f0000000e80)={&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="9b75106f68075c16270e2c8fc2e16dce554597eb329cebf8f8c94b5c16bcc134d6b600bd83", 0x25}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r6, r10, r11}}}], 0x20}, 0x44010) recvmsg$unix(r3, &(0x7f0000002300)={&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000f40)=""/145, 0x91}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/38, 0x26}, {&(0x7f0000002140)=""/79, 0x4f}], 0x5, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x2040) close(r1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r14, 0x6, 0x1, &(0x7f0000002340)=0xf012, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000002400), r12) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x64, r15, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0xc001) ioctl$EXT4_IOC_GETSTATE(r13, 0x40046629, &(0x7f0000002540)) ioctl$PPPIOCCONNECT(r12, 0x4004743a, &(0x7f0000002580)) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=@base={0x22, 0x8000, 0x2, 0x2, 0x30, r14, 0x8, '\x00', 0x0, r14, 0x1, 0x4}, 0x50) write$bt_hci(r12, &(0x7f0000002640)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "307b1baaf8a4e704d4b77814106324e6", "2fe5bcd81fe96611c140074db8340269", "e0dba7adb36d3d821d74f33b1e75c99b", "fb20bdaf7540191815120477b50e6c72"}}}, 0x4a) 15.486124172s ago: executing program 2 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x607, 0x70bd27}, 0x14}}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 15.485550808s ago: executing program 4 (id=1773): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) (async) socket$packet(0x11, 0xa, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) (async) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x5, [@rand_addr=0x64010100, @multicast2, @remote, @multicast1, @loopback]}, 0x24) (async) syz_emit_ethernet(0x10e, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x1}}, {@mpls_mc={0x8848, {[{0xe7}, {0x3, 0x0, 0x1}, {0x8}, {0x200}, {0x4, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x7}, {0x2}, {0x8000, 0x0, 0x1}], @llc={@snap={0xaa, 0x3, "1232", "bb146b", 0x19, "a00e30417add703ebb520043b0ac347c6f806a31702fc31fc10c447a83b6104ba288e52ce0df99e28eabbe5dd5daf2d77e572e9c0471b467a5a8ff0b0112212a906e1dc5ba003bc15a2a4ac801b26e931c2b2bdc9573a223500933869c02f30727ee42446b94e2b8d83a50998e0cea6c50f04ce16c9acf6f06c37fb305e8a352e468e5ff680a7dcd1e846ddf09c2b60d4aabc57c052bc79536c81d255640c1dc443660703a2e42f70ee4977f00ada7a812b431211470a975c83898e0bc0af866fbfea831892d06b610c63e"}}}}}}, 0x0) 15.356984924s ago: executing program 4 (id=1774): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.324423024s ago: executing program 4 (id=1775): r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x60, 0xf, 0x9, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0x7, 0x4}}) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000001c0)=0x7f7, 0x4) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x9c, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x808}, 0x40) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000940)={0x3c, 0x4, 0x0, 0x0, 0x0, [@local, @private1]}, 0x28) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbc}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 15.202062357s ago: executing program 4 (id=1776): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/50], &(0x7f0000000080)=""/233, 0x32, 0x31, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="0bf49244", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYBLOB="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"], 0x260}}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf252500e0ff0e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 176.548491ms ago: executing program 32 (id=1763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r2, 0x6a, 0x6, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0x10) 150.711424ms ago: executing program 33 (id=1771): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x3e7a18eba4131db3}, 0x18) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@bcast, @netrom, @netrom, @default, @bcast, @netrom, @null, @default]}, &(0x7f0000000140)=0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r2}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = getpid() r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@RTM_NEWNSID={0x4c, 0x58, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xf7, 0x4, 0x16, @local, @remote, 0x1, 0x7800, 0x1, 0x7ff}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x400c8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2b, 0x1, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r7, r0, 0x8, 0x0, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1f1675ebcb2e86b4}}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "2287484163014054b312a4acb8b931d23103f247359a1c20122aeddcd93f541c286ae8c8d789ba493b11fe51ead79e1f64c581dde96e204377b65b428a4ccb9b1765865b04ef48e1fd0be6e658003847becc3ffb962c531e63ae88ce92bb8124ca5e6f60aa9dfe40630e84a1f39ceb8c7fa6ab894e08ffa70484b4122a87c0a8ef547973168a10fc67ec34905eb4035e7f018dedad97c0704776541cf12717c641b0cd042d3b7965e39b16ca0544fb0af26b11663b5dcd93d36533e792"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x194}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008084) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x274, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x101, 0x7, 0x10, 0x2}, {0xb, 0x5, 0x6, 0x1}, {0x7, 0x65, 0x9, 0x5}, {0x9, 0x9, 0x2, 0x7ff}, {0xfffc, 0xa, 0x2, 0xff}, {0x6, 0x40, 0xe}, {0x0, 0x40, 0x44, 0xa}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}]}, 0x274}}, 0x20000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0}, &(0x7f0000000d80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) sendmsg$unix(r3, &(0x7f0000000e80)={&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="9b75106f68075c16270e2c8fc2e16dce554597eb329cebf8f8c94b5c16bcc134d6b600bd83", 0x25}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r6, r10, r11}}}], 0x20}, 0x44010) recvmsg$unix(r3, &(0x7f0000002300)={&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000f40)=""/145, 0x91}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/214, 0xd6}, {&(0x7f0000002100)=""/38, 0x26}, {&(0x7f0000002140)=""/79, 0x4f}], 0x5, &(0x7f0000002240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x2040) close(r1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r14, 0x6, 0x1, &(0x7f0000002340)=0xf012, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000002400), r12) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x64, r15, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0xc001) ioctl$EXT4_IOC_GETSTATE(r13, 0x40046629, &(0x7f0000002540)) ioctl$PPPIOCCONNECT(r12, 0x4004743a, &(0x7f0000002580)) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=@base={0x22, 0x8000, 0x2, 0x2, 0x30, r14, 0x8, '\x00', 0x0, r14, 0x1, 0x4}, 0x50) write$bt_hci(r12, &(0x7f0000002640)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "307b1baaf8a4e704d4b77814106324e6", "2fe5bcd81fe96611c140074db8340269", "e0dba7adb36d3d821d74f33b1e75c99b", "fb20bdaf7540191815120477b50e6c72"}}}, 0x4a) 110.633272ms ago: executing program 34 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x607, 0x70bd27}, 0x14}}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 56.640127ms ago: executing program 35 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}]}, 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0xd, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 36 (id=1776): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/50], &(0x7f0000000080)=""/233, 0x32, 0x31, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="0bf49244", 0x4}], 0x1, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYBLOB="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"], 0x260}}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf252500e0ff0e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): in process `syz.0.403'. [ 111.369149][ T7419] validate_nla: 3 callbacks suppressed [ 111.369165][ T7419] netlink: 'syz.0.410': attribute type 27 has an invalid length. [ 111.800772][ T7462] netlink: 'syz.4.422': attribute type 21 has an invalid length. [ 112.666562][ T7490] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 112.692369][ T7490] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 112.706486][ T7494] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 112.732583][ T7490] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 112.794963][ T7502] netlink: del zone limit has 4 unknown bytes [ 112.850612][ T7490] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 112.894237][ T7490] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 112.911536][ T7490] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 112.959833][ T7508] netlink: 'syz.4.434': attribute type 1 has an invalid length. [ 113.037656][ T7490] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 113.059926][ T7490] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 113.113962][ T7490] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 113.152385][ T7515] netlink: 'syz.2.436': attribute type 1 has an invalid length. [ 113.220388][ T7490] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 113.258803][ T7490] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 113.294116][ T7490] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 113.349071][ T7528] Bluetooth: MGMT ver 1.23 [ 113.436643][ T7528] geneve2: entered promiscuous mode [ 113.618784][ T6336] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 113.637929][ T6336] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.665698][ T7542] FAULT_INJECTION: forcing a failure. [ 113.665698][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.681787][ T6336] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 113.700366][ T6336] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 113.708830][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.2.445 Not tainted syzkaller #0 PREEMPT(full) [ 113.708850][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.708866][ T7542] Call Trace: [ 113.708873][ T7542] [ 113.708881][ T7542] dump_stack_lvl+0x189/0x250 [ 113.708909][ T7542] ? __pfx____ratelimit+0x10/0x10 [ 113.708927][ T7542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.708945][ T7542] ? __pfx__printk+0x10/0x10 [ 113.708977][ T7542] should_fail_ex+0x414/0x560 [ 113.709005][ T7542] _copy_to_user+0x31/0xb0 [ 113.709027][ T7542] simple_read_from_buffer+0xe1/0x170 [ 113.709054][ T7542] proc_fail_nth_read+0x1b3/0x220 [ 113.709075][ T7542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.709095][ T7542] ? rw_verify_area+0x2a6/0x4d0 [ 113.709114][ T7542] ? __lock_acquire+0xab9/0xd20 [ 113.709133][ T7542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.709154][ T7542] vfs_read+0x200/0xa30 [ 113.709173][ T7542] ? fdget_pos+0x247/0x320 [ 113.709194][ T7542] ? __pfx___mutex_lock+0x10/0x10 [ 113.709212][ T7542] ? __pfx_vfs_read+0x10/0x10 [ 113.709234][ T7542] ? __fget_files+0x2a/0x420 [ 113.709254][ T7542] ? __fget_files+0x3a0/0x420 [ 113.709268][ T7542] ? __fget_files+0x2a/0x420 [ 113.709293][ T7542] ksys_read+0x145/0x250 [ 113.709316][ T7542] ? __pfx_ksys_read+0x10/0x10 [ 113.709342][ T7542] ? do_syscall_64+0xbe/0x3b0 [ 113.709364][ T7542] do_syscall_64+0xfa/0x3b0 [ 113.709380][ T7542] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.709397][ T7542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.709413][ T7542] ? clear_bhb_loop+0x60/0xb0 [ 113.709434][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.709450][ T7542] RIP: 0033:0x7f289098d63c [ 113.709471][ T7542] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.709484][ T7542] RSP: 002b:00007f288ebf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.709501][ T7542] RAX: ffffffffffffffda RBX: 00007f2890bd5fa0 RCX: 00007f289098d63c [ 113.709514][ T7542] RDX: 000000000000000f RSI: 00007f288ebf60a0 RDI: 0000000000000008 [ 113.709524][ T7542] RBP: 00007f288ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.709534][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.709544][ T7542] R13: 00007f2890bd6038 R14: 00007f2890bd5fa0 R15: 00007ffc2824c6e8 [ 113.709573][ T7542] [ 113.777624][ T6336] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 113.955790][ T6336] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 113.981502][ T7531] º: renamed from veth1_vlan (while UP) [ 114.002613][ T6336] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 114.022638][ T6336] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.081850][ T6336] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 114.123787][ T7554] __nla_validate_parse: 11 callbacks suppressed [ 114.123801][ T7554] netlink: 44 bytes leftover after parsing attributes in process `syz.1.448'. [ 114.150492][ T6932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 114.166689][ T6932] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.195435][ T6932] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 114.269989][ T7559] netlink: 596 bytes leftover after parsing attributes in process `syz.3.450'. [ 114.296277][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 114.348292][ T7559] dvmrp0: entered allmulticast mode [ 114.419503][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.452'. [ 114.861846][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.870500][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.946828][ T7585] tipc: Started in network mode [ 114.961229][ T7585] tipc: Node identity 4a754c21a3ad, cluster identity 4711 [ 114.988819][ T7585] tipc: Enabled bearer , priority 0 [ 115.015507][ T7589] syzkaller0: entered promiscuous mode [ 115.028177][ T7589] syzkaller0: entered allmulticast mode [ 115.041979][ T7585] tipc: Resetting bearer [ 115.051898][ T7583] tipc: Resetting bearer [ 115.083200][ T7583] tipc: Disabling bearer [ 115.211290][ T7591] team0 (unregistering): Port device team_slave_0 removed [ 115.230103][ T7591] team0 (unregistering): Port device team_slave_1 removed [ 115.372736][ T5875] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 115.381780][ T5875] Bluetooth: hci2: command 0x0405 tx timeout [ 115.382071][ T7608] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 115.507231][ T7611] openvswitch: netlink: IPv4 tun info is not correct [ 115.548734][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 115.584324][ T7611] netlink: 88 bytes leftover after parsing attributes in process `syz.1.465'. [ 115.731637][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 115.758004][ T7624] hsr_slave_0: left promiscuous mode [ 115.796565][ T7624] hsr_slave_1: left promiscuous mode [ 116.006344][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 116.027705][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'. [ 116.040487][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 116.060827][ T7643] bond0: entered promiscuous mode [ 116.068448][ T7643] bond_slave_0: entered promiscuous mode [ 116.077016][ T7643] bond_slave_1: entered promiscuous mode [ 116.085969][ T7643] bond0: left promiscuous mode [ 116.090852][ T7643] bond_slave_0: left promiscuous mode [ 116.097897][ T7643] bond_slave_1: left promiscuous mode [ 116.711790][ T7682] tipc: Enabled bearer , priority 0 [ 116.728310][ T7682] syzkaller0: entered promiscuous mode [ 116.735103][ T7682] syzkaller0: entered allmulticast mode [ 116.786893][ T7682] tipc: Resetting bearer [ 116.825923][ T7686] bridge1: entered promiscuous mode [ 116.834572][ T7686] bridge1: entered allmulticast mode [ 116.847196][ T7681] tipc: Resetting bearer [ 116.862800][ T7681] tipc: Disabling bearer [ 116.970440][ T7692] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 117.220035][ T7706] bond4: entered promiscuous mode [ 117.240328][ T7706] bond4: entered allmulticast mode [ 117.269453][ T7706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.273960][ T7717] netlink: 'syz.4.497': attribute type 1 has an invalid length. [ 117.707611][ T7738] bond0: entered promiscuous mode [ 117.714141][ T7738] bond_slave_0: entered promiscuous mode [ 117.719939][ T7738] bond_slave_1: entered promiscuous mode [ 117.726423][ T7738] bond0: entered allmulticast mode [ 117.731566][ T7738] bond_slave_0: entered allmulticast mode [ 117.737727][ T7738] bond_slave_1: entered allmulticast mode [ 117.746076][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.758590][ T7738] tipc: Enabled bearer , priority 0 [ 117.775852][ T7738] syzkaller0: entered promiscuous mode [ 117.807321][ T7738] syzkaller0: entered allmulticast mode [ 117.847575][ T7738] tipc: Resetting bearer [ 117.868632][ T7737] tipc: Resetting bearer [ 117.884749][ T7737] tipc: Disabling bearer [ 118.645547][ T7795] netlink: 'syz.0.521': attribute type 142 has an invalid length. [ 118.646979][ T7794] netlink: 'syz.0.521': attribute type 11 has an invalid length. [ 118.687397][ T7779] Illegal XDP return value 3568908557 on prog (id 235) dev N/A, expect packet loss! [ 119.208616][ T7830] team0: Device vti0 is of different type [ 119.265756][ T7827] __nla_validate_parse: 15 callbacks suppressed [ 119.265771][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 119.357954][ T7837] Bluetooth: MGMT ver 1.23 [ 119.376825][ T7837] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.535'. [ 119.516657][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 119.807593][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'. [ 119.811534][ T7866] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.833231][ T7865] pim6reg1: entered promiscuous mode [ 119.838539][ T7865] pim6reg1: entered allmulticast mode [ 120.068948][ T7882] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 120.118843][ T7884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.551'. [ 120.236161][ T7890] netlink: 'syz.1.552': attribute type 178 has an invalid length. [ 120.243624][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 120.281412][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 120.502698][ T6333] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.536430][ T7909] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 120.608476][ T6333] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.628513][ T6333] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.655021][ T6333] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.747514][ T7931] netlink: 64 bytes leftover after parsing attributes in process `syz.1.562'. [ 120.791154][ T7934] netlink: 60 bytes leftover after parsing attributes in process `syz.4.563'. [ 120.808878][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 120.972836][ T7941] netlink: 'syz.4.567': attribute type 10 has an invalid length. [ 121.018483][ T7941] team0: Port device dummy0 added [ 121.088498][ T7946] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 121.153185][ T7941] syz.4.567 (7941) used greatest stack depth: 18744 bytes left [ 121.233040][ T7956] ip6erspan0: entered promiscuous mode [ 121.526012][ T7969] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 121.615275][ T7978] netlink: 'syz.0.578': attribute type 29 has an invalid length. [ 121.638054][ T7975] netlink: 'syz.0.578': attribute type 29 has an invalid length. [ 121.901973][ T7999] blkio.reset_stats is deprecated [ 122.297033][ T7025] udevd[7025]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 122.434524][ T8023] netlink: 'syz.0.587': attribute type 1 has an invalid length. [ 122.536573][ T8023] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.597134][ T8024] bond2: (slave gretap1): making interface the new active one [ 122.645058][ T8024] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 123.076715][ T8054] tipc: Started in network mode [ 123.130461][ T8054] tipc: Node identity 867bf480bb37, cluster identity 4711 [ 123.170979][ T8054] tipc: Enabled bearer , priority 0 [ 123.198780][ T8053] tipc: Enabling of bearer rejected, already enabled [ 123.323680][ T8053] tipc: Disabling bearer [ 123.576578][ T8076] tipc: Enabled bearer , priority 0 [ 123.587451][ T8076] syzkaller0: entered promiscuous mode [ 123.597000][ T8074] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 123.612437][ T8076] syzkaller0: entered allmulticast mode [ 123.639254][ T8074] veth0_vlan: entered allmulticast mode [ 123.774129][ T8090] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 123.815558][ T8089] tipc: Resetting bearer [ 123.884756][ T8090] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 123.907773][ T8073] tipc: Resetting bearer [ 123.935830][ T8073] tipc: Disabling bearer [ 123.958801][ T8087] syzkaller0: entered promiscuous mode [ 123.976926][ T8087] syzkaller0: entered allmulticast mode [ 123.986868][ T8094] tipc: Enabling of bearer rejected, failed to enable media [ 124.005749][ T8105] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.017242][ T8102] netem: change failed [ 124.034429][ T8087] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.067255][ T8105] syz_tun: entered allmulticast mode [ 124.156881][ T8104] syz_tun: left allmulticast mode [ 124.185584][ T8115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.268969][ T8121] delete_channel: no stack [ 124.412760][ T55] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 30 seconds [ 124.424125][ T55] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 30 seconds [ 124.435414][ T55] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 30 seconds [ 124.451278][ T55] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 30 seconds [ 124.514839][ T8149] IPv6: sit1: Disabled Multicast RS [ 124.521009][ T8149] sit1: entered allmulticast mode [ 124.524966][ T8147] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 125.024148][ T8156] netlink: 'syz.3.622': attribute type 3 has an invalid length. [ 125.380770][ T8191] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 125.496859][ T8191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.616993][ T8198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.636899][ T8198] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 125.665784][ T8198] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 125.845561][ T8220] veth3: entered promiscuous mode [ 125.864011][ T8223] xt_HMARK: proto mask must be zero with L3 mode [ 125.868410][ T8220] bond3: (slave veth3): Enslaving as an active interface with a down link [ 125.940494][ T8185] vlan2: entered allmulticast mode [ 125.956913][ T8185] bond3: entered allmulticast mode [ 126.365487][ T8255] __nla_validate_parse: 9 callbacks suppressed [ 126.365504][ T8255] netlink: 224 bytes leftover after parsing attributes in process `syz.1.645'. [ 126.412076][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 126.509686][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.646'. [ 126.672875][ T8268] block nbd3: Unsupported socket: shutdown callout must be supported. [ 127.071146][ T8295] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 127.079291][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.657'. [ 127.211502][ T8295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 127.235805][ T8309] wg1 speed is unknown, defaulting to 1000 [ 127.244621][ T8309] wg1 speed is unknown, defaulting to 1000 [ 127.252716][ T8309] wg1 speed is unknown, defaulting to 1000 [ 127.352237][ T8315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'. [ 127.362376][ T8315] netlink: 144 bytes leftover after parsing attributes in process `syz.3.664'. [ 127.372180][ T8297] veth5: entered promiscuous mode [ 127.402080][ T8297] bond5: (slave veth5): Enslaving as an active interface with a down link [ 127.460329][ T8304] bond5: entered allmulticast mode [ 127.547936][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 127.607798][ T8329] netlink: 2 bytes leftover after parsing attributes in process `syz.4.665'. [ 127.747419][ T8309] infiniband syz0: set active [ 127.752560][ T8309] infiniband syz0: added wg1 [ 127.783330][ T5937] wg1 speed is unknown, defaulting to 1000 [ 127.814983][ T8309] RDS/IB: syz0: added [ 127.819510][ T8309] smc: adding ib device syz0 with port count 1 [ 127.829435][ T8309] smc: ib device syz0 port 1 has pnetid [ 127.839212][ T8309] wg1 speed is unknown, defaulting to 1000 [ 127.853851][ T5937] wg1 speed is unknown, defaulting to 1000 [ 128.498661][ T8309] wg1 speed is unknown, defaulting to 1000 [ 128.508278][ T8368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.676'. [ 128.541376][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 128.557014][ T8371] chnl_net:caif_netlink_parms(): no params data found [ 129.276948][ T8406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.300421][ T8309] wg1 speed is unknown, defaulting to 1000 [ 129.698802][ T8309] wg1 speed is unknown, defaulting to 1000 [ 129.836029][ T8309] wg1 speed is unknown, defaulting to 1000 [ 132.726306][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 154.500139][ T55] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 60 seconds [ 154.511505][ T55] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 60 seconds [ 154.522622][ T55] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 60 seconds [ 154.533595][ T55] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 60 seconds [ 154.769443][ T8459] sctp: [Deprecated]: syz.3.702 (pid 8459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.769443][ T8459] Use struct sctp_sack_info instead [ 155.033873][ T8476] __nla_validate_parse: 2 callbacks suppressed [ 155.033889][ T8476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 155.053685][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'. [ 155.076788][ T8477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.087998][ T8474] netlink: 256 bytes leftover after parsing attributes in process `syz.0.708'. [ 155.100363][ T8474] netlink: 'syz.0.708': attribute type 9 has an invalid length. [ 155.100411][ T8483] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 155.159405][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 155.396921][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 155.406164][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.457072][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.758232][ T8526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.725'. [ 155.787887][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 155.827860][ T8526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 155.858153][ T8526] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.889097][ T8526] gretap1: entered promiscuous mode [ 155.913108][ T8526] gretap1: entered allmulticast mode [ 156.019870][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 156.216967][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.733'. [ 156.381317][ T8567] ieee802154 phy1 wpan1: encryption failed: -90 [ 156.422299][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 156.472016][ T8572] ip6gre1: entered allmulticast mode [ 156.489115][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 156.577911][ T8577] wg1 speed is unknown, defaulting to 1000 [ 157.269725][ T8606] netlink: 'syz.3.745': attribute type 10 has an invalid length. [ 157.340832][ T8606] dummy0: entered promiscuous mode [ 157.357140][ T8606] bridge0: port 3(dummy0) entered blocking state [ 157.378661][ T8606] bridge0: port 3(dummy0) entered disabled state [ 157.434965][ T8606] dummy0: entered allmulticast mode [ 158.140981][ T8632] dvmrp0: left allmulticast mode [ 158.309234][ T8643] sctp: [Deprecated]: syz.4.759 (pid 8643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.309234][ T8643] Use struct sctp_sack_info instead [ 158.566278][ T8655] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 158.867977][ T8677] syzkaller1: entered promiscuous mode [ 158.898419][ T8677] syzkaller1: entered allmulticast mode [ 159.140818][ T8700] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 159.188120][ T8702] sctp: [Deprecated]: syz.3.773 (pid 8702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.188120][ T8702] Use struct sctp_sack_info instead [ 159.755800][ T8723] syzkaller0: entered promiscuous mode [ 159.778293][ T8723] syzkaller0: entered allmulticast mode [ 159.833399][ T8722] tipc: Enabled bearer , priority 0 [ 160.115799][ T8747] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 160.275971][ T8748] xt_bpf: check failed: parse error [ 160.309711][ T8722] tipc: Resetting bearer [ 160.786034][ T8752] __nla_validate_parse: 7 callbacks suppressed [ 160.786051][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 160.878049][ T9] tipc: Node number set to 3923266593 [ 161.569482][ T8722] tipc: Disabling bearer [ 161.579066][ T8741] veth0: entered promiscuous mode [ 161.586055][ T8744] veth0: left promiscuous mode [ 162.482132][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 162.530686][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 162.566106][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 162.631699][ T8817] netlink: 204 bytes leftover after parsing attributes in process `syz.2.814'. [ 162.632845][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.815'. [ 162.843323][ T8835] tipc: Can't bind to reserved service type 1 [ 162.858892][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 163.416676][ T8865] tipc: Enabling of bearer rejected, failed to enable media [ 163.558218][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 163.575274][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'. [ 163.838710][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 165.457601][ T8942] dummy0: left allmulticast mode [ 165.465393][ T8942] bridge0: port 3(dummy0) entered disabled state [ 165.485830][ T8942] bridge_slave_1: left allmulticast mode [ 165.491496][ T8942] bridge_slave_1: left promiscuous mode [ 165.500304][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.534008][ T8942] bridge_slave_0: left allmulticast mode [ 165.539663][ T8942] bridge_slave_0: left promiscuous mode [ 165.562547][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.869909][ T5234] udevd[5234]: worker [6068] /devices/virtual/block/nbd0 is taking a long time [ 184.573532][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 90 seconds [ 184.584188][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 90 seconds [ 184.595119][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 90 seconds [ 184.605986][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 90 seconds [ 187.856041][ T8960] netlink: 'syz.4.855': attribute type 39 has an invalid length. [ 187.916337][ T8962] block nbd1: reconnected socket [ 187.919429][ T8968] __nla_validate_parse: 3 callbacks suppressed [ 187.919443][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 187.949628][ T8962] block nbd1: Unsupported socket: shutdown callout must be supported. [ 187.981764][ T8971] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 187.989918][ T8963] netlink: 252 bytes leftover after parsing attributes in process `syz.2.853'. [ 188.002002][ T5873] block nbd1: Receive control failed (result -32) [ 188.058752][ T8971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.060555][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 188.138605][ T8968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.280863][ T8985] netlink: 'syz.4.860': attribute type 12 has an invalid length. [ 188.288754][ T8985] netlink: 'syz.4.860': attribute type 29 has an invalid length. [ 188.296551][ T8985] netlink: 148 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.306671][ T8985] netlink: 'syz.4.860': attribute type 2 has an invalid length. [ 188.338919][ T8985] netlink: 23 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.385256][ T8987] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.371233][ T9007] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 189.702003][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 189.711673][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 189.773322][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 189.792599][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 189.954897][ T9041] lo: entered allmulticast mode [ 189.961830][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.879'. [ 189.989487][ T9040] lo: left allmulticast mode [ 190.097687][ T9053] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 190.211972][ T9056] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 190.266082][ T9057] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 190.370226][ T9053] veth5: entered promiscuous mode [ 190.389214][ T9053] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 190.408889][ T6289] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.423622][ T9056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.549713][ T6932] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.735347][ T9086] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 190.769793][ T9092] netlink: 'syz.1.897': attribute type 7 has an invalid length. [ 190.778289][ T9091] netlink: 'syz.1.897': attribute type 7 has an invalid length. [ 190.790042][ T9091] netlink: 'syz.1.897': attribute type 8 has an invalid length. [ 190.808179][ T9092] syzkaller0: entered promiscuous mode [ 190.826510][ T9092] syzkaller0: entered allmulticast mode [ 190.879232][ T9091] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 191.851384][ T9112] IPVS: Unknown mcast interface: vcan0 [ 192.146742][ T9128] IPVS: Unknown mcast interface: dvmrp1 [ 192.176405][ T9135] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 192.177233][ T9128] IPVS: stopping backup sync thread 9135 ... [ 192.384879][ T9143] FAULT_INJECTION: forcing a failure. [ 192.384879][ T9143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.429958][ T9143] CPU: 1 UID: 0 PID: 9143 Comm: syz.4.912 Not tainted syzkaller #0 PREEMPT(full) [ 192.429980][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.429990][ T9143] Call Trace: [ 192.429997][ T9143] [ 192.430005][ T9143] dump_stack_lvl+0x189/0x250 [ 192.430029][ T9143] ? __pfx____ratelimit+0x10/0x10 [ 192.430047][ T9143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.430066][ T9143] ? __pfx__printk+0x10/0x10 [ 192.430103][ T9143] should_fail_ex+0x414/0x560 [ 192.430137][ T9143] _copy_from_user+0x2d/0xb0 [ 192.430159][ T9143] bpf_test_init+0xf8/0x170 [ 192.430181][ T9143] bpf_prog_test_run_skb+0x1e9/0x1560 [ 192.430198][ T9143] ? __fget_files+0x2a/0x420 [ 192.430217][ T9143] ? __fget_files+0x2a/0x420 [ 192.430240][ T9143] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 192.430259][ T9143] bpf_prog_test_run+0x2c7/0x340 [ 192.430285][ T9143] __sys_bpf+0x581/0x870 [ 192.430307][ T9143] ? __pfx___sys_bpf+0x10/0x10 [ 192.430341][ T9143] ? ksys_write+0x22a/0x250 [ 192.430364][ T9143] ? __pfx_ksys_write+0x10/0x10 [ 192.430382][ T9143] ? rcu_is_watching+0x15/0xb0 [ 192.430407][ T9143] __x64_sys_bpf+0x7c/0x90 [ 192.430427][ T9143] do_syscall_64+0xfa/0x3b0 [ 192.430443][ T9143] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.430460][ T9143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.430477][ T9143] ? clear_bhb_loop+0x60/0xb0 [ 192.430497][ T9143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.430513][ T9143] RIP: 0033:0x7f9b3d18ec29 [ 192.430535][ T9143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.430549][ T9143] RSP: 002b:00007f9b3e0c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.430570][ T9143] RAX: ffffffffffffffda RBX: 00007f9b3d3d5fa0 RCX: 00007f9b3d18ec29 [ 192.430582][ T9143] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 192.430593][ T9143] RBP: 00007f9b3e0c2090 R08: 0000000000000000 R09: 0000000000000000 [ 192.430604][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.430614][ T9143] R13: 00007f9b3d3d6038 R14: 00007f9b3d3d5fa0 R15: 00007ffd2fd90fe8 [ 192.430641][ T9143] [ 192.913256][ T9166] netlink: zone id is out of range [ 192.918954][ T9166] netlink: zone id is out of range [ 192.936592][ T9166] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 192.944110][ T9166] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.987706][ T9168] __nla_validate_parse: 10 callbacks suppressed [ 192.987721][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 192.988986][ T9164] C: renamed from team_slave_0 [ 193.020361][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.923'. [ 193.041363][ T9164] validate_nla: 4 callbacks suppressed [ 193.041377][ T9164] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 193.063105][ T9164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.303503][ T9185] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 193.313699][ T9183] team0: Device wireguard0 is of different type [ 193.321597][ T9188] FAULT_INJECTION: forcing a failure. [ 193.321597][ T9188] name failslab, interval 1, probability 0, space 0, times 1 [ 193.334605][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz.0.928 Not tainted syzkaller #0 PREEMPT(full) [ 193.334626][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.334635][ T9188] Call Trace: [ 193.334643][ T9188] [ 193.334650][ T9188] dump_stack_lvl+0x189/0x250 [ 193.334673][ T9188] ? __pfx____ratelimit+0x10/0x10 [ 193.334691][ T9188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.334709][ T9188] ? __pfx__printk+0x10/0x10 [ 193.334736][ T9188] ? __pfx___might_resched+0x10/0x10 [ 193.334756][ T9188] should_fail_ex+0x414/0x560 [ 193.334783][ T9188] should_failslab+0xa8/0x100 [ 193.334807][ T9188] __kmalloc_noprof+0xcb/0x4f0 [ 193.334826][ T9188] ? sk_prot_alloc+0xe7/0x220 [ 193.334849][ T9188] sk_prot_alloc+0xe7/0x220 [ 193.334866][ T9188] ? sk_alloc+0x24/0x370 [ 193.334885][ T9188] sk_alloc+0x3a/0x370 [ 193.334902][ T9188] ? bpf_ctx_init+0x167/0x1d0 [ 193.334922][ T9188] bpf_prog_test_run_skb+0x2ed/0x1560 [ 193.334938][ T9188] ? __fget_files+0x2a/0x420 [ 193.334967][ T9188] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 193.334984][ T9188] bpf_prog_test_run+0x2c7/0x340 [ 193.335009][ T9188] __sys_bpf+0x581/0x870 [ 193.335031][ T9188] ? __pfx___sys_bpf+0x10/0x10 [ 193.335070][ T9188] ? ksys_write+0x22a/0x250 [ 193.335093][ T9188] ? __pfx_ksys_write+0x10/0x10 [ 193.335110][ T9188] ? rcu_is_watching+0x15/0xb0 [ 193.335135][ T9188] __x64_sys_bpf+0x7c/0x90 [ 193.335155][ T9188] do_syscall_64+0xfa/0x3b0 [ 193.335171][ T9188] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.335188][ T9188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.335204][ T9188] ? clear_bhb_loop+0x60/0xb0 [ 193.335224][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.335241][ T9188] RIP: 0033:0x7fce0458ec29 [ 193.335255][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.335268][ T9188] RSP: 002b:00007fce0535d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.335285][ T9188] RAX: ffffffffffffffda RBX: 00007fce047d5fa0 RCX: 00007fce0458ec29 [ 193.335297][ T9188] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 193.335306][ T9188] RBP: 00007fce0535d090 R08: 0000000000000000 R09: 0000000000000000 [ 193.335314][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.335322][ T9188] R13: 00007fce047d6038 R14: 00007fce047d5fa0 R15: 00007ffd253285d8 [ 193.335344][ T9188] [ 194.167837][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.592809][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 194.736113][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 195.557755][ T9225] syzkaller0: entered promiscuous mode [ 195.567220][ T9225] syzkaller0: entered allmulticast mode [ 195.603782][ T9223] tipc: Started in network mode [ 195.609335][ T9223] tipc: Node identity 6afcd46cee15, cluster identity 4711 [ 195.631170][ T9223] tipc: Enabled bearer , priority 0 [ 195.655069][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'. [ 195.669040][ T9222] tipc: Resetting bearer [ 195.739118][ T9222] tipc: Disabling bearer [ 195.833412][ T9240] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 195.864609][ T9240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 195.975450][ T9250] wg1 speed is unknown, defaulting to 1000 [ 196.139888][ T9261] netlink: 'syz.1.947': attribute type 11 has an invalid length. [ 196.523710][ T9272] netlink: 204 bytes leftover after parsing attributes in process `syz.2.948'. [ 196.585320][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 196.594316][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 196.766567][ T9286] lo speed is unknown, defaulting to 1000 [ 196.774661][ T9285] tipc: Enabled bearer , priority 0 [ 196.806204][ T9285] syzkaller0: entered promiscuous mode [ 196.811681][ T9285] syzkaller0: entered allmulticast mode [ 196.858046][ T9286] lo speed is unknown, defaulting to 1000 [ 196.917410][ T9286] lo speed is unknown, defaulting to 1000 [ 196.923829][ T9285] tipc: Resetting bearer [ 196.955292][ T9286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.998687][ T9286] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.006912][ T9283] tipc: Resetting bearer [ 197.067209][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 197.087490][ T9283] tipc: Disabling bearer [ 197.110845][ T9305] netlink: 'syz.0.957': attribute type 5 has an invalid length. [ 197.119106][ T9286] lo speed is unknown, defaulting to 1000 [ 197.129764][ T9305] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 197.130296][ T9286] lo speed is unknown, defaulting to 1000 [ 197.152000][ T9286] lo speed is unknown, defaulting to 1000 [ 197.177836][ T9308] netlink: 'syz.3.956': attribute type 4 has an invalid length. [ 197.186020][ T9286] lo speed is unknown, defaulting to 1000 [ 197.229623][ T9311] netlink: 'syz.3.956': attribute type 4 has an invalid length. [ 197.245229][ T9286] lo speed is unknown, defaulting to 1000 [ 197.277167][ T9310] syzkaller0: entered promiscuous mode [ 197.295280][ T9310] syzkaller0: entered allmulticast mode [ 197.558572][ T9332] veth1_to_bond: entered allmulticast mode [ 197.566254][ T9330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.624846][ T9332] bond0: (slave bond_slave_1): Releasing backup interface [ 197.659738][ T9332] veth1_to_bond (unregistering): left allmulticast mode [ 197.800371][ T9345] bond0: left promiscuous mode [ 197.805416][ T9345] bond_slave_0: left promiscuous mode [ 197.811103][ T9345] bond_slave_1: left promiscuous mode [ 197.856534][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.094596][ T9345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.203197][ T9369] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 198.294809][ T9369] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address [ 198.309889][ T9369] bond2: (slave vxcan7): Error -95 calling set_mac_address [ 198.351174][ T9376] vlan2: entered allmulticast mode [ 198.358247][ T9376] bridge0: entered allmulticast mode [ 198.368766][ T9376] bridge0: entered promiscuous mode [ 198.385209][ T9376] bridge0: left promiscuous mode [ 198.392761][ T9376] bond2: (slave vlan2): Enslaving as an active interface with a down link [ 198.490650][ T9383] openvswitch: netlink: IPv4 tun info is not correct [ 198.620421][ T9396] team0: Device vti0 is of different type [ 198.638605][ T9399] netlink: 'syz.1.984': attribute type 8 has an invalid length. [ 198.870010][ T9410] wg1 speed is unknown, defaulting to 1000 [ 199.008392][ T9414] tap0: tun_chr_ioctl cmd 1074025676 [ 199.017050][ T9414] tap0: owner set to 0 [ 199.235701][ T9434] netlink: 'syz.2.995': attribute type 4 has an invalid length. [ 199.271548][ T9434] __nla_validate_parse: 6 callbacks suppressed [ 199.271562][ T9434] netlink: 152 bytes leftover after parsing attributes in process `syz.2.995'. [ 199.328155][ T9410] lo speed is unknown, defaulting to 1000 [ 199.349311][ T9434] `: renamed from bond0 (while UP) [ 199.404841][ T9438] netlink: 9 bytes leftover after parsing attributes in process `syz.3.996'. [ 199.550104][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.998'. [ 199.592443][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.998'. [ 199.616902][ T9449] netlink: 'syz.2.999': attribute type 10 has an invalid length. [ 199.657948][ T9449] wlan1: mtu less than device minimum [ 199.663419][ T9449] `: (slave wlan1): Error -22 calling dev_set_mtu [ 199.678242][ T9448] netlink: 6 bytes leftover after parsing attributes in process `syz.0.998'. [ 199.817499][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 199.948891][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 199.987700][ T9469] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 200.001312][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 200.023669][ T9469] bond0: (slave vcan1): Error -95 calling set_mac_address [ 200.247470][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1008'. [ 200.399258][ T9493] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 200.683118][ T9512] netlink: 'syz.3.1017': attribute type 3 has an invalid length. [ 200.702400][ T9512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1017'. [ 200.763944][ T9519] netlink: 'syz.4.1018': attribute type 11 has an invalid length. [ 200.797841][ T9519] netlink: 'syz.4.1018': attribute type 7 has an invalid length. [ 200.805940][ T9519] netlink: 'syz.4.1018': attribute type 8 has an invalid length. [ 200.846643][ T9521] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 200.859704][ T9521] bond6: (slave vcan0): Error -95 calling set_mac_address [ 201.370026][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 201.370062][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 201.379015][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 201.389140][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 201.410450][ T9563] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 201.509873][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.531544][ T9563] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 201.635863][ T9563] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 201.644249][ T9563] batadv0: entered promiscuous mode [ 201.653709][ T9563] batadv0: entered allmulticast mode [ 201.675969][ T9563] bond0: (slave batadv0): Releasing backup interface [ 201.689169][ T9563] bridge0: port 3(batadv0) entered blocking state [ 201.696633][ T9563] bridge0: port 3(batadv0) entered disabled state [ 201.906958][ T6289] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.948571][ T6336] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.965400][ T6332] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.983924][ T6329] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.993207][ T6329] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 202.004369][ T6332] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.173949][ T9610] dvmrp1: entered allmulticast mode [ 202.203422][ T9616] batadv_slave_0: entered promiscuous mode [ 202.483101][ T9612] batadv_slave_0: left promiscuous mode [ 202.694540][ T9643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.820693][ T9643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.912697][ T9643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.987705][ T9643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.660799][ T9701] validate_nla: 5 callbacks suppressed [ 203.660815][ T9701] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 203.714990][ T9702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 203.911722][ T9711] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 203.978978][ T9701] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 204.045130][ T9704] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.159758][ T9722] netlink: 'syz.3.1081': attribute type 11 has an invalid length. [ 204.181609][ T6294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.197699][ T9722] netlink: 'syz.3.1081': attribute type 4 has an invalid length. [ 204.216472][ T9726] netlink: 'syz.0.1080': attribute type 6 has an invalid length. [ 204.263346][ T6294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.271557][ T6294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.293891][ T9728] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 204.386569][ T9735] __nla_validate_parse: 24 callbacks suppressed [ 204.386584][ T9735] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1086'. [ 204.388157][ T6332] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.944768][ T9755] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 205.262018][ T9735] gretap0: entered promiscuous mode [ 205.374923][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 205.430145][ T9763] sctp: [Deprecated]: syz.4.1093 (pid 9763) Use of int in max_burst socket option deprecated. [ 205.430145][ T9763] Use struct sctp_assoc_value instead [ 205.485399][ T9765] sctp: [Deprecated]: syz.4.1093 (pid 9765) Use of int in max_burst socket option deprecated. [ 205.485399][ T9765] Use struct sctp_assoc_value instead [ 205.531846][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.565817][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 205.735848][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.743579][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.898263][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.027742][ T9760] geneve2: left promiscuous mode [ 206.042917][ T9760] geneve3: left promiscuous mode [ 206.054123][ T9760] geneve4: left promiscuous mode [ 206.069158][ T9760] ip6erspan0: left promiscuous mode [ 206.098876][ T9760] veth3: left promiscuous mode [ 206.120948][ T9760] veth5: left promiscuous mode [ 206.130282][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 206.154315][ T43] wg1 speed is unknown, defaulting to 1000 [ 206.160150][ T43] syz0: Port: 1 Link DOWN [ 206.171947][ T43] wg1 speed is unknown, defaulting to 1000 [ 206.184159][ T6932] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 206.196435][ T6932] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.221043][ T6932] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 206.250634][ T9787] wg1 speed is unknown, defaulting to 1000 [ 206.266925][ T6932] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 206.321782][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 206.345148][ T6932] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.353990][ T6932] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 206.519529][ T6932] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 206.528210][ T6932] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.541500][ T6932] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 206.557888][ T6932] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 206.583033][ T6932] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.591465][ T6932] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 206.633814][ T9787] lo speed is unknown, defaulting to 1000 [ 206.862456][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 207.111977][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 207.164723][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 207.175849][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'. [ 207.379784][ T9862] netlink: 'syz.0.1118': attribute type 4 has an invalid length. [ 207.413190][ T9862] netlink: 'syz.0.1118': attribute type 4 has an invalid length. [ 207.510363][ T9868] netlink: 'syz.2.1122': attribute type 9 has an invalid length. [ 207.527481][ T9871] xt_socket: unknown flags 0xe4 [ 207.631142][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1125'. [ 208.100695][ T9904] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 208.309680][ T9916] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 208.534739][ T9936] netlink: 'syz.3.1143': attribute type 2 has an invalid length. [ 208.593187][ T9936] netlink: 'syz.3.1143': attribute type 8 has an invalid length. [ 208.742944][ T9945] tipc: Enabled bearer , priority 0 [ 208.754423][ T9945] tipc: Disabling bearer [ 208.783911][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.975784][ T9963] tipc: Enabled bearer , priority 0 [ 209.433486][ T9977] netlink: 'syz.1.1153': attribute type 2 has an invalid length. [ 209.441486][ T9977] __nla_validate_parse: 8 callbacks suppressed [ 209.441499][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 209.713425][ T9963] tipc: Disabling bearer [ 209.762927][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 209.782659][ T9980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.923279][ T9993] tipc: Enabled bearer , priority 0 [ 209.960682][ T9993] syzkaller0: entered promiscuous mode [ 209.967303][ T9993] syzkaller0: entered allmulticast mode [ 209.976027][ T9987] syzkaller0: entered promiscuous mode [ 209.981509][ T9987] syzkaller0: entered allmulticast mode [ 210.020874][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1156'. [ 210.078187][ T9998] syzkaller1: entered promiscuous mode [ 210.108640][ T9998] syzkaller1: entered allmulticast mode [ 210.278565][ T9991] tipc: Resetting bearer [ 210.319736][ T9991] tipc: Disabling bearer [ 210.478076][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 210.499307][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 210.512799][T10033] tipc: Enabling of bearer rejected, media not registered [ 210.572708][T10037] bond0: (slave bond_slave_0): Releasing backup interface [ 210.589784][T10037] bond0: (slave bond_slave_1): Releasing backup interface [ 210.667883][T10037] team0: Port device team_slave_0 removed [ 210.709611][T10037] team0: Port device team_slave_1 removed [ 210.725729][T10037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.737780][T10037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.771962][T10037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.810677][T10037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.828278][T10037] bond0: (slave geneve1): Releasing backup interface [ 210.844647][T10037] bond0: (slave netdevsim0): Releasing backup interface [ 210.998626][T10044] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1175'. [ 211.144752][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 211.242179][T10056] bond4 (unregistering): Released all slaves [ 211.421010][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 211.506093][T10078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1186'. [ 211.713690][T10085] IPVS: length: 131 != 8 [ 211.942983][T10101] wg1 speed is unknown, defaulting to 1000 [ 212.116940][T10108] netlink: 'syz.0.1194': attribute type 7 has an invalid length. [ 212.186119][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 212.197388][T10111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.359330][T10101] lo speed is unknown, defaulting to 1000 [ 212.392662][T10122] netlink: 'syz.1.1200': attribute type 2 has an invalid length. [ 212.400636][T10122] netlink: 'syz.1.1200': attribute type 8 has an invalid length. [ 212.417655][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1200'. [ 212.961251][T10151] delete_channel: no stack [ 213.125589][T10171] tipc: Started in network mode [ 213.131407][T10171] tipc: Node identity 725cd3d8eb22, cluster identity 4711 [ 213.138947][T10171] tipc: Enabled bearer , priority 0 [ 213.174473][T10166] openvswitch: netlink: Flow key attr not present in new flow. [ 213.239946][T10171] tipc: Disabling bearer [ 213.483659][T10195] IPVS: length: 188 != 8 [ 213.509824][T10191] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 213.554339][T10197] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 213.975876][T10233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.081319][T10247] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 214.126077][T10247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.172070][T10247] bond4: (slave veth0_to_bond): making interface the new active one [ 214.181741][T10247] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.201930][T10250] netlink: 'syz.1.1239': attribute type 2 has an invalid length. [ 214.253868][T10250] tipc: Enabling of bearer rejected, failed to enable media [ 214.351467][T10266] netlink: 'syz.1.1239': attribute type 7 has an invalid length. [ 214.376704][T10270] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 214.395993][T10269] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 214.409682][T10269] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 214.491158][T10278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.509708][T10278] netlink: 'syz.3.1246': attribute type 8 has an invalid length. [ 214.648126][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 120 seconds [ 214.658976][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 120 seconds [ 214.670345][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 120 seconds [ 214.681679][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 120 seconds [ 215.071501][T10321] openvswitch: netlink: Key 6 has unexpected len 25 expected 2 [ 215.294479][T10332] __nla_validate_parse: 14 callbacks suppressed [ 215.294495][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 215.526631][T10345] tipc: Enabled bearer , priority 0 [ 215.698905][T10345] syzkaller0: entered promiscuous mode [ 215.726505][T10345] syzkaller0: entered allmulticast mode [ 215.741436][T10345] tipc: Resetting bearer [ 215.795312][T10344] tipc: Resetting bearer [ 216.124143][T10378] ieee802154 phy1 wpan1: encryption failed: -126 [ 216.193759][T10380] IPVS: length: 157 != 24 [ 216.198324][T10381] IPVS: length: 157 != 24 [ 216.645114][ T9] tipc: Node number set to 1028453504 [ 217.163371][T10344] tipc: Disabling bearer [ 217.354483][T10389] syzkaller0: entered promiscuous mode [ 217.365378][T10389] syzkaller0: entered allmulticast mode [ 217.378144][T10392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.455658][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 218.017643][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1295'. [ 218.064161][T10436] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1295'. [ 218.150292][T10451] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1298'. [ 218.450346][T10468] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1304'. [ 218.467380][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1305'. [ 218.599817][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 218.611294][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 218.658482][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 218.796769][T10493] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 218.809278][T10493] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 218.857002][ T9] IPVS: starting estimator thread 0... [ 218.956621][T10497] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 219.002363][T10499] IPVS: using max 29 ests per chain, 69600 per kthread [ 219.039931][T10513] block nbd3: not configured, cannot reconfigure [ 219.085562][T10515] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 219.114033][T10515] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 219.148709][T10521] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 219.174185][T10526] vlan1: entered allmulticast mode [ 219.232351][T10526] veth0_vlan: entered allmulticast mode [ 219.332633][T10537] netlink: 'syz.4.1327': attribute type 4 has an invalid length. [ 219.367554][T10537] netlink: 'syz.4.1327': attribute type 4 has an invalid length. [ 219.412390][ T979] lo speed is unknown, defaulting to 1000 [ 219.421622][ T979] syz2: Port: 1 Link ACTIVE [ 219.502584][T10540] openvswitch: netlink: Flow key attr not present in new flow. [ 219.693117][T10561] netlink: 'syz.3.1336': attribute type 2 has an invalid length. [ 219.819679][T10569] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 219.936783][T10580] netlink: 'syz.2.1341': attribute type 39 has an invalid length. [ 220.054092][T10587] syzkaller0: entered allmulticast mode [ 220.238888][T10598] hsr_slave_0: left promiscuous mode [ 220.284493][T10598] hsr_slave_1: left promiscuous mode [ 220.460026][T10613] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 220.501179][T10613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.505808][T10623] __nla_validate_parse: 10 callbacks suppressed [ 220.505822][T10623] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1352'. [ 220.531352][T10623] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 220.539247][T10623] netlink: 'syz.3.1352': attribute type 3 has an invalid length. [ 220.546871][T10613] bond3: (slave gretap1): making interface the new active one [ 220.547000][T10623] netlink: 'syz.3.1352': attribute type 235 has an invalid length. [ 220.556733][T10613] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 244.732370][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 150 seconds [ 244.743195][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 150 seconds [ 244.754504][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 150 seconds [ 244.765480][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 150 seconds [ 245.451840][T10642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.598219][T10654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1362'. [ 245.786498][T10668] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 245.810684][T10668] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1366'. [ 245.872040][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 245.927586][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 246.057009][T10694] unsupported nla_type 27400 [ 246.162057][T10706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 246.545371][T10723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 246.767585][T10748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.787050][T10748] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1389'. [ 246.797811][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 246.957215][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 247.057350][T10758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.070930][T10758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.088480][T10758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.109295][T10758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.146913][T10772] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 247.148777][T10758] bridge0: port 3(batadv0) entered disabled state [ 247.155359][T10772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1397'. [ 247.186365][T10758] bridge0: port 3(batadv0) entered disabled state [ 247.666282][T10802] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 248.282119][T10861] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 248.615342][T10883] macvtap1: entered promiscuous mode [ 248.632043][T10883] vlan0: entered promiscuous mode [ 248.647463][T10883] macvtap1: entered allmulticast mode [ 248.683072][T10883] vlan0: entered allmulticast mode [ 248.750261][T10892] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 248.842274][T10892] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 248.850164][T10892] netlink: 'syz.3.1434': attribute type 4 has an invalid length. [ 248.868363][T10894] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 248.892555][T10894] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 248.914958][T10894] netlink: 'syz.3.1434': attribute type 4 has an invalid length. [ 249.231029][T10932] delete_channel: no stack [ 249.578218][T10959] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 249.672784][T10959] syzkaller1: entered promiscuous mode [ 249.686560][T10959] syzkaller1: entered allmulticast mode [ 250.071131][T10996] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 250.358995][T11009] syzkaller1: entered promiscuous mode [ 250.375723][T11009] syzkaller1: entered allmulticast mode [ 250.475930][T11022] wg1 speed is unknown, defaulting to 1000 [ 250.905658][T11022] lo speed is unknown, defaulting to 1000 [ 251.111667][T11065] gretap0: left promiscuous mode [ 251.361334][T11065] dummy0: left promiscuous mode [ 251.427519][T11080] __nla_validate_parse: 19 callbacks suppressed [ 251.427534][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 251.448357][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 251.736508][T11065] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 251.743717][T11065] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 251.838514][T11065] bond1: left promiscuous mode [ 251.847569][T11065] bond1: left allmulticast mode [ 251.854959][T11065] bond2: left promiscuous mode [ 251.859799][T11065] bond2: left allmulticast mode [ 251.870579][T11065] geneve2: left promiscuous mode [ 251.881292][T11065] bridge1: left promiscuous mode [ 251.886574][T11065] bridge1: left allmulticast mode [ 251.893478][T11065] gretap1: left promiscuous mode [ 251.899357][T11065] gretap1: left allmulticast mode [ 251.915249][T11065] ip6gre1: left allmulticast mode [ 252.001228][ T6329] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.043343][ T6329] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.126397][T11106] siw: device registration error -23 [ 252.180129][ T6329] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.190517][ T6329] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.201510][ T6329] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.211150][ T6329] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.221131][ T6329] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.232683][T11109] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1491'. [ 252.242565][ T6329] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.265826][T11119] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1491'. [ 252.288933][T11111] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 252.517470][T11128] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1494'. [ 252.573880][T11128] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1494'. [ 252.598809][T11132] netlink: 'syz.3.1497': attribute type 10 has an invalid length. [ 252.642509][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 252.642623][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 252.839073][T11150] netlink: 'syz.2.1501': attribute type 3 has an invalid length. [ 252.905383][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1502'. [ 252.959310][T11152] syzkaller1: entered promiscuous mode [ 252.976193][T11152] syzkaller1: entered allmulticast mode [ 253.139769][T11165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.180618][ T8109] IPVS: starting estimator thread 0... [ 253.233643][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 253.242691][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 253.283154][T11170] IPVS: using max 31 ests per chain, 74400 per kthread [ 253.364876][T11181] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 253.447045][T11181] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.499105][T11187] bond5: (slave gretap2): making interface the new active one [ 253.510696][T11187] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 253.521473][T11194] bridge0: Device is already in use. [ 253.540265][T11181] vlan3: entered allmulticast mode [ 253.546072][T11181] bond5: entered allmulticast mode [ 253.551731][T11181] gretap2: entered allmulticast mode [ 253.558687][T11181] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 253.617969][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 253.790341][T11216] tipc: Enabled bearer , priority 0 [ 253.806285][T11214] tipc: Enabled bearer , priority 0 [ 253.813935][T11214] syzkaller0: entered promiscuous mode [ 253.819410][T11214] syzkaller0: entered allmulticast mode [ 253.857339][T11220] syzkaller0: entered promiscuous mode [ 253.869837][T11220] syzkaller0: entered allmulticast mode [ 253.887657][T11214] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 253.903046][T11214] tipc: Resetting bearer [ 253.911670][T11213] tipc: Resetting bearer [ 253.934041][T11213] tipc: Disabling bearer [ 253.975916][T11216] tipc: Resetting bearer [ 254.199798][T11240] team0: Port device dummy0 removed [ 254.207867][T11242] netlink: 'syz.2.1530': attribute type 10 has an invalid length. [ 254.214710][T11240] bridge0: port 3(batadv0) entered disabled state [ 254.229761][T11240] bridge_slave_0: left allmulticast mode [ 254.235520][T11240] bridge_slave_0: left promiscuous mode [ 254.241285][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.257340][T11240] bridge_slave_1: left allmulticast mode [ 254.263660][T11240] bridge_slave_1: left promiscuous mode [ 254.269526][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.286495][T11240] bond0: (slave bond_slave_0): Releasing backup interface [ 254.305718][T11240] bond0: (slave bond_slave_1): Releasing backup interface [ 254.331368][T11240] team0: Port device team_slave_0 removed [ 254.347805][T11240] team0: Port device team_slave_1 removed [ 254.354703][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.362678][T11240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.364985][T11250] netlink: 'syz.1.1534': attribute type 2 has an invalid length. [ 254.382143][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.389830][T11240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.407500][T11240] bond2: (slave vlan2): Releasing active interface [ 254.420064][T11240] bond3: (slave gretap1): Releasing active interface [ 254.473030][T11242] team0: Port device geneve0 added [ 254.599416][T11259] netlink: 'syz.1.1536': attribute type 2 has an invalid length. [ 254.630720][T11208] tipc: Resetting bearer [ 254.668534][T11208] tipc: Disabling bearer [ 254.709873][T11264] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 254.717385][T11256] wg1 speed is unknown, defaulting to 1000 [ 254.776612][T11264] bond9: (slave bridge4): making interface the new active one [ 254.787072][T11264] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 254.796160][T11267] bridge0: entered allmulticast mode [ 255.632803][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.653173][T11292] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 255.728359][T11256] lo speed is unknown, defaulting to 1000 [ 255.768601][ T6322] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.787275][ T6322] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.815723][T11294] lo: entered allmulticast mode [ 255.822150][T11294] lo: left allmulticast mode [ 255.827371][ T6322] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.881904][T11299] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 255.904148][ T6322] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.651309][T11337] __nla_validate_parse: 15 callbacks suppressed [ 256.651326][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 256.856943][T11352] gretap0: entered promiscuous mode [ 256.872158][T11352] vlan3: entered promiscuous mode [ 257.174405][T11376] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1570'. [ 257.204999][T11376] gretap0: entered promiscuous mode [ 257.230369][T11381] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1570'. [ 257.269955][T11381] 0ªî{X¹¦: renamed from gretap0 [ 257.345918][T11381] 0ªî{X¹¦: left promiscuous mode [ 257.351136][T11381] 0ªî{X¹¦: entered allmulticast mode [ 257.361310][T11381] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 257.899143][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 257.915560][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 258.038091][T11430] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1584'. [ 258.119738][T11415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.237274][T11452] vlan3: entered promiscuous mode [ 258.312970][T11457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1587'. [ 258.341993][T11457] netlink: 'syz.1.1587': attribute type 23 has an invalid length. [ 258.490318][T11472] IPVS: set_ctl: invalid protocol: 8 172.20.20.31:20000 [ 258.661340][T11481] : entered promiscuous mode [ 258.691846][T11481] netlink: 'syz.2.1594': attribute type 8 has an invalid length. [ 258.695641][T11486] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1596'. [ 258.806837][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 259.055055][T11516] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 259.063094][T11516] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1604'. [ 259.080399][T11516] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 259.245110][T11526] netlink: 'syz.3.1609': attribute type 23 has an invalid length. [ 259.387513][T11536] netlink: 'syz.2.1610': attribute type 2 has an invalid length. [ 259.405671][T11536] netlink: 'syz.2.1610': attribute type 2 has an invalid length. [ 259.417603][T11540] netlink: 'syz.3.1611': attribute type 9 has an invalid length. [ 259.569171][T11095] IPVS: starting estimator thread 0... [ 259.675339][T11546] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.692858][T11549] IPVS: using max 28 ests per chain, 67200 per kthread [ 259.761626][T11557] tipc: Enabled bearer , priority 0 [ 259.772693][T11557] syzkaller0: entered promiscuous mode [ 259.778166][T11557] syzkaller0: entered allmulticast mode [ 259.854314][T11558] tipc: Resetting bearer [ 259.868020][T11556] tipc: Resetting bearer [ 259.892103][T11556] tipc: Disabling bearer [ 259.921598][T11573] syzkaller1: entered promiscuous mode [ 259.927182][T11573] syzkaller1: entered allmulticast mode [ 259.942845][T11573] bridge_slave_1: left allmulticast mode [ 259.948561][T11573] bridge_slave_1: left promiscuous mode [ 259.957185][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.967795][T11573] bridge_slave_0: left allmulticast mode [ 259.974143][T11573] bridge_slave_0: left promiscuous mode [ 259.980058][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.078236][T11574] syz_tun: entered allmulticast mode [ 260.105519][T11580] netlink: 'syz.3.1621': attribute type 11 has an invalid length. [ 260.115762][T11580] netlink: 'syz.3.1621': attribute type 11 has an invalid length. [ 261.570712][T11659] tls_set_device_offload_rx: netdev not found [ 261.682634][T11663] tipc: Enabling of bearer rejected, failed to enable media [ 261.750072][T11668] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 261.775369][T11668] __nla_validate_parse: 12 callbacks suppressed [ 261.775383][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 261.837218][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 261.845927][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'. [ 261.885190][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 262.315561][T11686] syz.4.1650 (11686) used greatest stack depth: 17864 bytes left [ 262.478669][T11713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1656'. [ 262.687397][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1662'. [ 263.085249][T11760] netlink: 'syz.1.1671': attribute type 21 has an invalid length. [ 263.097970][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 263.125962][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 263.152180][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'. [ 263.174299][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'. [ 263.272788][T11775] vlan2: entered allmulticast mode [ 263.280115][T11775] bond0: entered allmulticast mode [ 263.468267][T11776] vlan0 (unregistering): left allmulticast mode [ 263.478969][T11776] vlan0 (unregistering): left promiscuous mode [ 263.557541][T11786] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.571061][T11796] tipc: Enabling of bearer rejected, failed to enable media [ 263.694054][T11806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 263.730157][T11813] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 263.768882][T11812] tipc: Enabled bearer , priority 0 [ 263.785528][T11813] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 263.805312][T11810] tipc: Disabling bearer [ 263.944280][T11829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.056113][T11836] sctp: [Deprecated]: syz.2.1694 (pid 11836) Use of int in max_burst socket option. [ 264.056113][T11836] Use struct sctp_assoc_value instead [ 264.166986][T11845] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 264.623137][T11876] team0: Device ip6gre2 is of different type [ 266.207579][T11967] gretap0: entered promiscuous mode [ 266.237432][T11967] batadv_slave_1: entered promiscuous mode [ 266.283594][T11967] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.321174][T11969] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 266.476565][T11986] netlink: 'syz.1.1738': attribute type 13 has an invalid length. [ 266.498575][T11986] netlink: 'syz.1.1738': attribute type 17 has an invalid length. [ 266.609171][T12000] netlink: 'syz.3.1739': attribute type 64 has an invalid length. [ 266.677086][T11986] bond0: left allmulticast mode [ 266.701700][T11986] bond_slave_0: left allmulticast mode [ 266.741065][T11986] bond_slave_1: left allmulticast mode [ 266.852708][T11986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.886323][T12013] __nla_validate_parse: 22 callbacks suppressed [ 266.886337][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'. [ 267.001688][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1743'. [ 267.270729][T12032] sctp: [Deprecated]: syz.2.1745 (pid 12032) Use of int in max_burst socket option deprecated. [ 267.270729][T12032] Use struct sctp_assoc_value instead [ 267.469817][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 267.479326][T12043] netlink: 'syz.4.1747': attribute type 5 has an invalid length. [ 267.543962][T12043] bridge_slave_0: entered promiscuous mode [ 267.643134][T12035] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 267.650876][T12035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1747'. [ 267.792719][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 267.794549][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 267.851542][T12067] macsec1: entered promiscuous mode [ 267.866616][T12067] bridge0: entered promiscuous mode [ 267.873709][T12067] macsec1: entered allmulticast mode [ 267.880238][T12067] bridge0: entered allmulticast mode [ 267.888563][T12067] bridge0: port 1(macsec1) entered blocking state [ 267.895373][T12067] bridge0: port 1(macsec1) entered disabled state [ 267.911237][T12067] bridge0: left allmulticast mode [ 267.919476][T12067] bridge0: left promiscuous mode [ 267.979022][T12071] bridge0: entered promiscuous mode [ 267.994825][T12071] bridge0: entered allmulticast mode [ 268.149863][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 268.216773][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 268.254377][T12100] geneve2: entered promiscuous mode [ 268.364781][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 268.373948][T12108] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.462987][T12119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1772'. [ 268.471951][T12119] netlink: 'syz.2.1772': attribute type 7 has an invalid length. [ 268.483738][T12119] netlink: 'syz.2.1772': attribute type 8 has an invalid length. [ 274.803107][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 180 seconds [ 274.814019][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 180 seconds [ 274.825236][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 180 seconds [ 274.836397][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 180 seconds [ 284.458045][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.467521][ T5875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.472391][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.486365][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.487156][ T5875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.503264][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.505745][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.519456][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.531094][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.541836][ T5873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.550919][ T5873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.559786][ T5873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.559801][ T5864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.575901][ T5873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.588131][ T5864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.658363][T12136] wg1 speed is unknown, defaulting to 1000 [ 284.658523][ T5864] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 284.673911][ T5864] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 284.685081][ T5864] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 284.693546][ T5864] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 284.701519][ T5864] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 284.727518][ T5875] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 284.738999][ T5875] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 284.747570][ T5875] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 284.755773][ T5875] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 284.763836][ T5875] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 284.869699][T12136] lo speed is unknown, defaulting to 1000 [ 284.869699][T12140] wg1 speed is unknown, defaulting to 1000 [ 285.088366][T12136] chnl_net:caif_netlink_parms(): no params data found [ 285.100754][T12140] lo speed is unknown, defaulting to 1000 [ 285.116424][T12138] wg1 speed is unknown, defaulting to 1000 [ 285.248425][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.255984][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.267627][T12136] bridge_slave_0: entered allmulticast mode [ 285.275913][T12136] bridge_slave_0: entered promiscuous mode [ 285.300182][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.311074][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.320076][T12136] bridge_slave_1: entered allmulticast mode [ 285.331729][T12136] bridge_slave_1: entered promiscuous mode [ 285.368400][T12142] wg1 speed is unknown, defaulting to 1000 [ 285.392324][T12138] lo speed is unknown, defaulting to 1000 [ 285.427978][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.484732][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.597729][T12143] wg1 speed is unknown, defaulting to 1000 [ 285.606059][T12136] team0: Port device team_slave_0 added [ 285.619223][T12142] lo speed is unknown, defaulting to 1000 [ 285.629610][T12136] team0: Port device team_slave_1 added [ 285.708157][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.719595][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.750164][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.771649][T12140] chnl_net:caif_netlink_parms(): no params data found [ 285.795474][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.803136][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.829608][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.869222][T12143] lo speed is unknown, defaulting to 1000 [ 285.939389][T12136] hsr_slave_0: entered promiscuous mode [ 285.945706][T12136] hsr_slave_1: entered promiscuous mode [ 285.951694][T12136] debugfs: 'hsr0' already exists in 'hsr' [ 285.957460][T12136] Cannot create hsr debugfs directory [ 286.139630][T12140] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.147391][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.154618][T12140] bridge_slave_0: entered allmulticast mode [ 286.161484][T12140] bridge_slave_0: entered promiscuous mode [ 286.192144][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.199750][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.207070][T12140] bridge_slave_1: entered allmulticast mode [ 286.215058][T12140] bridge_slave_1: entered promiscuous mode [ 286.326108][T12140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.375091][T12140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.471765][T12140] team0: Port device team_slave_0 added [ 286.485021][T12138] chnl_net:caif_netlink_parms(): no params data found [ 286.517361][T12140] team0: Port device team_slave_1 added [ 286.547697][T12143] chnl_net:caif_netlink_parms(): no params data found [ 286.647925][ T5875] Bluetooth: hci6: command tx timeout [ 286.647935][ T51] Bluetooth: hci7: command tx timeout [ 286.660904][ T5864] Bluetooth: hci5: command tx timeout [ 286.687480][T12140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.694621][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.720775][T12140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.731455][ T5864] Bluetooth: hci8: command tx timeout [ 286.738589][T12142] chnl_net:caif_netlink_parms(): no params data found [ 286.774740][T12140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.781681][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.807920][ T5864] Bluetooth: hci9: command tx timeout [ 286.815709][T12140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.980972][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.988538][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.996619][T12138] bridge_slave_0: entered allmulticast mode [ 287.003714][T12138] bridge_slave_0: entered promiscuous mode [ 287.010622][T12143] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.018924][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.026133][T12143] bridge_slave_0: entered allmulticast mode [ 287.033722][T12143] bridge_slave_0: entered promiscuous mode [ 287.068184][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.075626][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.082855][T12138] bridge_slave_1: entered allmulticast mode [ 287.089721][T12138] bridge_slave_1: entered promiscuous mode [ 287.096425][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.104180][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.111443][T12143] bridge_slave_1: entered allmulticast mode [ 287.118876][T12143] bridge_slave_1: entered promiscuous mode [ 287.143519][T12140] hsr_slave_0: entered promiscuous mode [ 287.149668][T12140] hsr_slave_1: entered promiscuous mode [ 287.157199][T12140] debugfs: 'hsr0' already exists in 'hsr' [ 287.163019][T12140] Cannot create hsr debugfs directory [ 287.221662][T12142] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.229160][T12142] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.237151][T12142] bridge_slave_0: entered allmulticast mode [ 287.245042][T12142] bridge_slave_0: entered promiscuous mode [ 287.266812][T12138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.307197][T12142] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.314846][T12142] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.321955][T12142] bridge_slave_1: entered allmulticast mode [ 287.329622][T12142] bridge_slave_1: entered promiscuous mode [ 287.356081][T12138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.380318][T12143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.394830][T12143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.465035][T12142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.476209][T12138] team0: Port device team_slave_0 added [ 287.485268][T12142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.527327][T12138] team0: Port device team_slave_1 added [ 287.548415][T12143] team0: Port device team_slave_0 added [ 287.557419][T12143] team0: Port device team_slave_1 added [ 287.595223][T12138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.602180][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.629418][T12138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.661576][T12142] team0: Port device team_slave_0 added [ 287.670317][T12142] team0: Port device team_slave_1 added [ 287.677144][T12138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.684191][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.710514][T12138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.763450][T12143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.770388][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.797016][T12143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.827989][T12142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.835008][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.862838][T12142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.874889][T12143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.881826][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.908829][T12143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.941763][T12142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.948960][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.974890][T12142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.067604][T12138] hsr_slave_0: entered promiscuous mode [ 288.073843][T12138] hsr_slave_1: entered promiscuous mode [ 288.079822][T12138] debugfs: 'hsr0' already exists in 'hsr' [ 288.085622][T12138] Cannot create hsr debugfs directory [ 288.145348][T12143] hsr_slave_0: entered promiscuous mode [ 288.151551][T12143] hsr_slave_1: entered promiscuous mode [ 288.158508][T12143] debugfs: 'hsr0' already exists in 'hsr' [ 288.165377][T12143] Cannot create hsr debugfs directory [ 288.174974][T12142] hsr_slave_0: entered promiscuous mode [ 288.181166][T12142] hsr_slave_1: entered promiscuous mode [ 288.187346][T12142] debugfs: 'hsr0' already exists in 'hsr' [ 288.193394][T12142] Cannot create hsr debugfs directory [ 288.722671][ T5864] Bluetooth: hci5: command tx timeout [ 288.722700][ T5875] Bluetooth: hci7: command tx timeout [ 288.728073][ T51] Bluetooth: hci6: command tx timeout [ 288.802647][ T5864] Bluetooth: hci8: command tx timeout [ 288.892374][ T5864] Bluetooth: hci9: command tx timeout [ 290.802414][ T5864] Bluetooth: hci5: command tx timeout [ 290.802434][ T51] Bluetooth: hci7: command tx timeout [ 290.802466][ T51] Bluetooth: hci6: command tx timeout [ 290.882643][ T51] Bluetooth: hci8: command tx timeout [ 290.962426][ T51] Bluetooth: hci9: command tx timeout [ 292.882576][ T5864] Bluetooth: hci6: command tx timeout [ 292.887995][ T5864] Bluetooth: hci7: command tx timeout [ 292.893479][ T51] Bluetooth: hci5: command tx timeout [ 292.962330][ T5864] Bluetooth: hci8: command tx timeout [ 293.042568][ T5864] Bluetooth: hci9: command tx timeout [ 304.892644][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 210 seconds [ 304.903616][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 210 seconds [ 304.914887][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 210 seconds [ 304.925905][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 210 seconds [ 317.044376][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.962606][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 240 seconds [ 334.973355][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 240 seconds [ 334.984451][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 240 seconds [ 334.995555][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 240 seconds [ 345.173401][ T5875] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 345.182494][ T5875] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 345.190529][ T5875] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 345.199115][ T5875] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 345.207104][ T5875] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.235707][ T5875] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 345.246790][ T5875] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 345.255478][ T5875] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 345.270082][ T5875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 345.270487][ T5873] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 345.286272][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 345.292421][ T5873] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 345.303167][ T5875] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 345.311362][ T5875] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 345.319166][ T5875] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 345.379775][T12181] wg1 speed is unknown, defaulting to 1000 [ 345.399000][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 345.407836][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 345.416195][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 345.424340][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 345.432071][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 345.586807][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 345.596142][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 345.609833][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 345.620982][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 345.633566][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 345.635714][T12183] wg1 speed is unknown, defaulting to 1000 [ 345.644908][T12181] lo speed is unknown, defaulting to 1000 [ 345.900030][T12185] wg1 speed is unknown, defaulting to 1000 [ 345.911865][T12183] lo speed is unknown, defaulting to 1000 [ 345.931580][T12181] chnl_net:caif_netlink_parms(): no params data found [ 346.142014][T12185] lo speed is unknown, defaulting to 1000 [ 346.148103][T12187] wg1 speed is unknown, defaulting to 1000 [ 346.217429][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.225038][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.233059][T12181] bridge_slave_0: entered allmulticast mode [ 346.240836][T12181] bridge_slave_0: entered promiscuous mode [ 346.305074][T12181] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.312329][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.319523][T12181] bridge_slave_1: entered allmulticast mode [ 346.340046][T12181] bridge_slave_1: entered promiscuous mode [ 346.455223][T12187] lo speed is unknown, defaulting to 1000 [ 346.461687][T12189] wg1 speed is unknown, defaulting to 1000 [ 346.462101][T12183] chnl_net:caif_netlink_parms(): no params data found [ 346.485493][T12181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.547225][T12181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.654526][T12181] team0: Port device team_slave_0 added [ 346.711193][T12181] team0: Port device team_slave_1 added [ 346.771061][T12189] lo speed is unknown, defaulting to 1000 [ 346.771944][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.784850][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.792961][T12183] bridge_slave_0: entered allmulticast mode [ 346.800558][T12183] bridge_slave_0: entered promiscuous mode [ 346.808584][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.815898][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.823793][T12183] bridge_slave_1: entered allmulticast mode [ 346.831046][T12183] bridge_slave_1: entered promiscuous mode [ 346.858776][T12181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.866175][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.892242][T12181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.950719][T12181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.957791][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.984882][T12181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.015079][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.053134][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.134550][T12183] team0: Port device team_slave_0 added [ 347.183619][T12181] hsr_slave_0: entered promiscuous mode [ 347.189828][T12181] hsr_slave_1: entered promiscuous mode [ 347.197372][T12181] debugfs: 'hsr0' already exists in 'hsr' [ 347.204472][T12181] Cannot create hsr debugfs directory [ 347.211340][T12183] team0: Port device team_slave_1 added [ 347.282320][ T5864] Bluetooth: hci10: command tx timeout [ 347.349411][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.356863][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.383589][ T5864] Bluetooth: hci12: command tx timeout [ 347.383987][ T5864] Bluetooth: hci11: command tx timeout [ 347.389498][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.407500][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.414827][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.441125][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.473497][T12185] chnl_net:caif_netlink_parms(): no params data found [ 347.522681][ T5864] Bluetooth: hci13: command tx timeout [ 347.682446][ T5864] Bluetooth: hci14: command tx timeout [ 347.800083][T12183] hsr_slave_0: entered promiscuous mode [ 347.815891][T12183] hsr_slave_1: entered promiscuous mode [ 347.821912][T12183] debugfs: 'hsr0' already exists in 'hsr' [ 347.828263][T12183] Cannot create hsr debugfs directory [ 347.834396][T12187] chnl_net:caif_netlink_parms(): no params data found [ 347.871233][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.878705][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.886221][T12185] bridge_slave_0: entered allmulticast mode [ 347.894048][T12185] bridge_slave_0: entered promiscuous mode [ 347.917226][T12189] chnl_net:caif_netlink_parms(): no params data found [ 347.936460][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.943744][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.950842][T12185] bridge_slave_1: entered allmulticast mode [ 347.958902][T12185] bridge_slave_1: entered promiscuous mode [ 348.133237][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.145786][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.247821][T12185] team0: Port device team_slave_0 added [ 348.256826][T12185] team0: Port device team_slave_1 added [ 348.276755][T12187] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.290018][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.298292][T12187] bridge_slave_0: entered allmulticast mode [ 348.306228][T12187] bridge_slave_0: entered promiscuous mode [ 348.365696][T12187] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.373148][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.380262][T12187] bridge_slave_1: entered allmulticast mode [ 348.387685][T12187] bridge_slave_1: entered promiscuous mode [ 348.440295][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.448042][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.474665][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.513131][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.520604][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.529362][T12189] bridge_slave_0: entered allmulticast mode [ 348.536923][T12189] bridge_slave_0: entered promiscuous mode [ 348.546632][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.554071][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.561238][T12189] bridge_slave_1: entered allmulticast mode [ 348.570095][T12189] bridge_slave_1: entered promiscuous mode [ 348.580214][T12187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.594182][T12187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.603974][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.610910][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.636989][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.768958][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.795574][T12187] team0: Port device team_slave_0 added [ 348.823500][T12185] hsr_slave_0: entered promiscuous mode [ 348.830052][T12185] hsr_slave_1: entered promiscuous mode [ 348.837475][T12185] debugfs: 'hsr0' already exists in 'hsr' [ 348.843420][T12185] Cannot create hsr debugfs directory [ 348.855917][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.866880][T12187] team0: Port device team_slave_1 added [ 348.977235][T12187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.984690][T12187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.011001][T12187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.045155][T12189] team0: Port device team_slave_0 added [ 349.060204][T12187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.067530][T12187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.093825][T12187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.124006][T12189] team0: Port device team_slave_1 added [ 349.243073][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.250025][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.276373][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.289920][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.297002][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.323119][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.362417][ T5864] Bluetooth: hci10: command tx timeout [ 349.384749][T12187] hsr_slave_0: entered promiscuous mode [ 349.391003][T12187] hsr_slave_1: entered promiscuous mode [ 349.397391][T12187] debugfs: 'hsr0' already exists in 'hsr' [ 349.403204][T12187] Cannot create hsr debugfs directory [ 349.442634][ T5864] Bluetooth: hci11: command tx timeout [ 349.452580][ T5864] Bluetooth: hci12: command tx timeout [ 349.535420][T12189] hsr_slave_0: entered promiscuous mode [ 349.542146][T12189] hsr_slave_1: entered promiscuous mode [ 349.548912][T12189] debugfs: 'hsr0' already exists in 'hsr' [ 349.555785][T12189] Cannot create hsr debugfs directory [ 349.602406][ T5864] Bluetooth: hci13: command tx timeout [ 349.762463][ T5864] Bluetooth: hci14: command tx timeout [ 351.442749][ T5864] Bluetooth: hci10: command tx timeout [ 351.522565][ T5864] Bluetooth: hci12: command tx timeout [ 351.522573][ T51] Bluetooth: hci11: command tx timeout [ 351.682648][ T5864] Bluetooth: hci13: command tx timeout [ 351.842482][ T5864] Bluetooth: hci14: command tx timeout [ 353.522405][ T5864] Bluetooth: hci10: command tx timeout [ 353.602260][ T5864] Bluetooth: hci12: command tx timeout [ 353.612282][ T5864] Bluetooth: hci11: command tx timeout [ 353.762439][ T5864] Bluetooth: hci13: command tx timeout [ 353.922463][ T5864] Bluetooth: hci14: command tx timeout [ 365.047724][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 270 seconds [ 365.058508][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 270 seconds [ 365.069798][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 270 seconds [ 365.080772][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 270 seconds [ 378.486743][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.802554][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 395.123524][ T123] block nbd0: Possible stuck request ffff8880251be000: control (read@0,1024B). Runtime 300 seconds [ 395.134650][ T123] block nbd0: Possible stuck request ffff8880251be1c0: control (read@1024,1024B). Runtime 300 seconds [ 395.145711][ T123] block nbd0: Possible stuck request ffff8880251be380: control (read@2048,1024B). Runtime 300 seconds [ 395.156908][ T123] block nbd0: Possible stuck request ffff8880251be540: control (read@3072,1024B). Runtime 300 seconds [ 405.096193][ T5873] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 405.114997][ T5873] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 405.128838][ T5873] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 405.134925][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 405.146805][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 405.146826][ T5873] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 405.154895][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 405.162307][ T5873] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 405.170654][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 405.177307][ T5873] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 405.184136][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 405.190764][ T5873] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 405.198671][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 405.205627][ T5873] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 405.213093][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 405.310360][T12228] wg1 speed is unknown, defaulting to 1000 [ 405.671574][T12224] wg1 speed is unknown, defaulting to 1000 [ 405.677798][T12228] lo speed is unknown, defaulting to 1000 [ 405.802508][ T5861] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 405.822441][ T5861] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 405.833906][ T5861] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 405.842655][ T5861] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 405.853313][ T5861] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 405.976753][ T5864] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 405.985986][ T5864] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 405.994625][ T5864] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 406.021122][ T5864] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 406.027579][T12224] lo speed is unknown, defaulting to 1000 [ 406.029101][T12225] wg1 speed is unknown, defaulting to 1000 [ 406.041646][ T5864] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 406.284950][T12228] chnl_net:caif_netlink_parms(): no params data found [ 406.298466][T12225] lo speed is unknown, defaulting to 1000 [ 406.302485][T12232] wg1 speed is unknown, defaulting to 1000 [ 406.585734][T12235] wg1 speed is unknown, defaulting to 1000 [ 406.591610][T12232] lo speed is unknown, defaulting to 1000 [ 406.621873][T12228] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.629732][T12228] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.637351][T12228] bridge_slave_0: entered allmulticast mode [ 406.645600][T12228] bridge_slave_0: entered promiscuous mode [ 406.655466][T12228] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.662641][T12228] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.670089][T12228] bridge_slave_1: entered allmulticast mode [ 406.679030][T12228] bridge_slave_1: entered promiscuous mode [ 406.870241][T12228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.914246][T12228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.955612][T12235] lo speed is unknown, defaulting to 1000 [ 407.039533][T12224] chnl_net:caif_netlink_parms(): no params data found [ 407.053661][T12228] team0: Port device team_slave_0 added [ 407.121822][T12228] team0: Port device team_slave_1 added [ 407.207055][T12225] chnl_net:caif_netlink_parms(): no params data found [ 407.254663][T12228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.261614][T12228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.288486][ T5864] Bluetooth: hci15: command tx timeout [ 407.289119][T12228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.294473][ T5864] Bluetooth: hci17: command tx timeout [ 407.310924][ T51] Bluetooth: hci16: command tx timeout [ 407.318179][T12228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.325178][T12228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.351446][T12228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.497109][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.505332][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.512601][T12224] bridge_slave_0: entered allmulticast mode [ 407.519597][T12224] bridge_slave_0: entered promiscuous mode [ 407.583720][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.590895][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.599551][T12224] bridge_slave_1: entered allmulticast mode [ 407.607267][T12224] bridge_slave_1: entered promiscuous mode [ 407.675711][T12228] hsr_slave_0: entered promiscuous mode [ 407.683507][T12228] hsr_slave_1: entered promiscuous mode [ 407.690098][T12228] debugfs: 'hsr0' already exists in 'hsr' [ 407.697129][T12228] Cannot create hsr debugfs directory [ 407.732080][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.739332][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.747416][T12225] bridge_slave_0: entered allmulticast mode [ 407.755524][T12225] bridge_slave_0: entered promiscuous mode [ 407.794571][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.804613][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.811732][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.820762][T12225] bridge_slave_1: entered allmulticast mode [ 407.828150][T12225] bridge_slave_1: entered promiscuous mode [ 407.849874][T12232] chnl_net:caif_netlink_parms(): no params data found [ 407.864830][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.922994][ T5864] Bluetooth: hci18: command tx timeout [ 407.978958][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.991725][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.043013][T12224] team0: Port device team_slave_0 added [ 408.082549][ T5864] Bluetooth: hci19: command tx timeout [ 408.126294][T12224] team0: Port device team_slave_1 added [ 408.156889][T12225] team0: Port device team_slave_0 added [ 408.166043][T12225] team0: Port device team_slave_1 added [ 408.284067][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.291035][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.317285][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.330146][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.338128][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.368437][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.418475][T12235] chnl_net:caif_netlink_parms(): no params data found [ 408.446975][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.453971][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.480324][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.493451][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.500404][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.527005][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.552533][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.559748][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.567677][T12232] bridge_slave_0: entered allmulticast mode [ 408.575735][T12232] bridge_slave_0: entered promiscuous mode [ 408.585072][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.592677][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.599843][T12232] bridge_slave_1: entered allmulticast mode [ 408.607881][T12232] bridge_slave_1: entered promiscuous mode [ 408.748306][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.796992][T12224] hsr_slave_0: entered promiscuous mode [ 408.805069][T12224] hsr_slave_1: entered promiscuous mode [ 408.811306][T12224] debugfs: 'hsr0' already exists in 'hsr' [ 408.817770][T12224] Cannot create hsr debugfs directory [ 408.828547][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.931439][T12225] hsr_slave_0: entered promiscuous mode [ 408.938278][T12225] hsr_slave_1: entered promiscuous mode [ 408.945404][T12225] debugfs: 'hsr0' already exists in 'hsr' [ 408.951136][T12225] Cannot create hsr debugfs directory [ 409.057326][T12232] team0: Port device team_slave_0 added [ 409.067157][T12232] team0: Port device team_slave_1 added [ 409.073867][T12235] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.080990][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.089328][T12235] bridge_slave_0: entered allmulticast mode [ 409.097951][T12235] bridge_slave_0: entered promiscuous mode [ 409.160699][T12235] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.168479][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.176424][T12235] bridge_slave_1: entered allmulticast mode [ 409.184438][T12235] bridge_slave_1: entered promiscuous mode [ 409.297281][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.304910][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.330952][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.343768][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.350710][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.377091][ T5864] Bluetooth: hci17: command tx timeout [ 409.377112][ T5184] Bluetooth: hci16: command tx timeout [ 409.382729][ T5864] Bluetooth: hci15: command tx timeout [ 409.383048][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.429656][T12235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.448710][T12235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.542021][T12235] team0: Port device team_slave_0 added [ 409.551892][T12235] team0: Port device team_slave_1 added [ 409.665985][T12235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.673383][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.701066][T12235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.738538][T12232] hsr_slave_0: entered promiscuous mode [ 409.745768][T12232] hsr_slave_1: entered promiscuous mode [ 409.751806][T12232] debugfs: 'hsr0' already exists in 'hsr' [ 409.758372][T12232] Cannot create hsr debugfs directory [ 409.765222][T12235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.772556][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.800798][T12235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.952268][T12235] hsr_slave_0: entered promiscuous mode [ 409.958609][T12235] hsr_slave_1: entered promiscuous mode [ 409.965393][T12235] debugfs: 'hsr0' already exists in 'hsr' [ 409.971130][T12235] Cannot create hsr debugfs directory [ 410.002651][ T5184] Bluetooth: hci18: command tx timeout [ 410.162614][ T5184] Bluetooth: hci19: command tx timeout [ 411.285962][T12266] Bluetooth: hci9: command 0x0406 tx timeout [ 411.292811][ T5866] Bluetooth: hci6: command 0x0406 tx timeout [ 411.299594][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 411.305668][ T5864] Bluetooth: hci8: command 0x0406 tx timeout [ 411.311599][ T5184] Bluetooth: hci7: command 0x0406 tx timeout [ 411.442416][ T5877] Bluetooth: hci15: command tx timeout [ 411.445334][ T51] Bluetooth: hci17: command tx timeout [ 411.448796][ T5877] Bluetooth: hci16: command tx timeout [ 412.082795][ T51] Bluetooth: hci18: command tx timeout [ 412.242282][ T51] Bluetooth: hci19: command tx timeout [ 413.522403][ T51] Bluetooth: hci17: command tx timeout [ 413.523031][ T5877] Bluetooth: hci15: command tx timeout [ 413.527912][ T5861] Bluetooth: hci16: command tx timeout [ 414.172276][ T5861] Bluetooth: hci18: command tx timeout [ 414.322747][ T5861] Bluetooth: hci19: command tx timeout [ 418.173019][ T31] INFO: task syz.0.1763:12094 blocked for more than 143 seconds. [ 418.180778][ T31] Not tainted syzkaller #0 [ 418.186057][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.195296][ T31] task:syz.0.1763 state:D stack:26024 pid:12094 tgid:12087 ppid:5859 task_flags:0x480140 flags:0x00004004 [ 418.207541][ T31] Call Trace: [ 418.210821][ T31] [ 418.214220][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.218742][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.223967][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.228944][ T31] ? __pfx___schedule+0x10/0x10 [ 418.234275][ T31] ? schedule+0x91/0x360 [ 418.238810][ T31] schedule+0x165/0x360 [ 418.243550][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 418.249032][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 418.257013][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 418.263621][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 418.270125][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 418.312297][ T31] nbd_set_size+0x47e/0x6a0 [ 418.316848][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 418.321904][ T31] ? nla_memcpy+0x5b/0xc0 [ 418.342849][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 418.347834][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 418.353647][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 418.359639][ T31] ? bpf_lsm_capable+0x9/0x20 [ 418.364830][ T31] ? security_capable+0x7e/0x2e0 [ 418.369802][ T31] ? radix_tree_lookup+0x240/0x290 [ 418.375630][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 418.380944][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 418.387988][ T31] ? __nla_parse+0x40/0x60 [ 418.392687][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 418.399177][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 418.405481][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 418.411597][ T31] ? stack_trace_save+0x9c/0xe0 [ 418.416973][ T31] genl_rcv_msg+0x60e/0x790 [ 418.421491][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.426636][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 418.432433][ T31] netlink_rcv_skb+0x205/0x470 [ 418.437210][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.442070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.447190][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.452641][ T31] ? down_read+0x1ad/0x2e0 [ 418.457070][ T31] genl_rcv+0x28/0x40 [ 418.461054][ T31] netlink_unicast+0x82f/0x9e0 [ 418.466170][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.471468][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.476633][ T31] ? skb_put+0x11b/0x210 [ 418.480892][ T31] netlink_sendmsg+0x805/0xb30 [ 418.486018][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.491331][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.496522][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.501947][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.507328][ T31] __sock_sendmsg+0x219/0x270 [ 418.512012][ T31] ____sys_sendmsg+0x505/0x830 [ 418.516852][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.522176][ T31] ? import_iovec+0x74/0xa0 [ 418.526686][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 418.531363][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.536860][ T31] ? __fget_files+0x2a/0x420 [ 418.541465][ T31] ? __fget_files+0x3a0/0x420 [ 418.546175][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 418.551116][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.556666][ T31] ? __sys_socketpair+0x4a9/0x560 [ 418.561694][ T31] ? do_syscall_64+0xbe/0x3b0 [ 418.566606][ T31] do_syscall_64+0xfa/0x3b0 [ 418.571110][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.576464][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.582586][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.587271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.593488][ T31] RIP: 0033:0x7fce0458ec29 [ 418.597908][ T31] RSP: 002b:00007fce0535d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.606499][ T31] RAX: ffffffffffffffda RBX: 00007fce047d5fa0 RCX: 00007fce0458ec29 [ 418.614647][ T31] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 418.622901][ T31] RBP: 00007fce04611e41 R08: 0000000000000000 R09: 0000000000000000 [ 418.630869][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.639215][ T31] R13: 00007fce047d6038 R14: 00007fce047d5fa0 R15: 00007ffd253285d8 [ 418.647613][ T31] [ 418.650641][ T31] INFO: task syz.3.1769:12102 blocked for more than 143 seconds. [ 418.658864][ T31] Not tainted syzkaller #0 [ 418.664061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.673023][ T31] task:syz.3.1769 state:D stack:26920 pid:12102 tgid:12101 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 418.685196][ T31] Call Trace: [ 418.688484][ T31] [ 418.691399][ T31] __schedule+0x1798/0x4cc0 [ 418.696053][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.700929][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.706198][ T31] ? __pfx___schedule+0x10/0x10 [ 418.711057][ T31] ? schedule+0x91/0x360 [ 418.715334][ T31] schedule+0x165/0x360 [ 418.719496][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.725204][ T31] __mutex_lock+0x7e6/0x1350 [ 418.729807][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.734704][ T31] ? genl_rcv_msg+0x10d/0x790 [ 418.739414][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.744561][ T31] ? stack_trace_save+0x9c/0xe0 [ 418.749435][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 418.754984][ T31] ? radix_tree_lookup+0x240/0x290 [ 418.760113][ T31] genl_rcv_msg+0x10d/0x790 [ 418.764693][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.769563][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.774766][ T31] netlink_rcv_skb+0x205/0x470 [ 418.779558][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.784436][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.789468][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.794833][ T31] ? down_read+0x1ad/0x2e0 [ 418.799284][ T31] genl_rcv+0x28/0x40 [ 418.803543][ T31] netlink_unicast+0x82f/0x9e0 [ 418.808460][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.814109][ T31] ? netlink_sendmsg+0x642/0xb30 [ 418.819062][ T31] ? skb_put+0x11b/0x210 [ 418.823437][ T31] netlink_sendmsg+0x805/0xb30 [ 418.828209][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.833566][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.838513][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.843869][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.849170][ T31] __sock_sendmsg+0x219/0x270 [ 418.854011][ T31] __sys_sendto+0x3bd/0x520 [ 418.858537][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 418.863838][ T31] ? count_memcg_event_mm+0x21/0x260 [ 418.869150][ T31] ? exc_page_fault+0x76/0xf0 [ 418.874107][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 418.879402][ T31] __x64_sys_sendto+0xde/0x100 [ 418.884534][ T31] do_syscall_64+0xfa/0x3b0 [ 418.889046][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.894555][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.900643][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.905536][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.911519][ T31] RIP: 0033:0x7f33b5f90abc [ 418.916256][ T31] RSP: 002b:00007f33b6d6cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 418.925119][ T31] RAX: ffffffffffffffda RBX: 00007f33b6d6cfc0 RCX: 00007f33b5f90abc [ 418.933354][ T31] RDX: 0000000000000024 RSI: 00007f33b6d6d010 RDI: 0000000000000005 [ 418.941322][ T31] RBP: 0000000000000000 R08: 00007f33b6d6cf14 R09: 000000000000000c [ 418.949525][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 418.957568][ T31] R13: 00007f33b6d6cf68 R14: 00007f33b6d6d010 R15: 0000000000000000 [ 418.965960][ T31] [ 418.969028][ T31] INFO: task syz.1.1771:12107 blocked for more than 144 seconds. [ 418.976939][ T31] Not tainted syzkaller #0 [ 418.981871][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.990608][ T31] task:syz.1.1771 state:D stack:28360 pid:12107 tgid:12106 ppid:5857 task_flags:0x400140 flags:0x00004004 [ 419.002611][ T31] Call Trace: [ 419.005896][ T31] [ 419.008835][ T31] __schedule+0x1798/0x4cc0 [ 419.013603][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.018499][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.023415][ T31] ? __pfx___schedule+0x10/0x10 [ 419.028277][ T31] ? schedule+0x91/0x360 [ 419.032793][ T31] schedule+0x165/0x360 [ 419.036962][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.042781][ T31] __mutex_lock+0x7e6/0x1350 [ 419.047388][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.052187][ T31] ? genl_rcv_msg+0x10d/0x790 [ 419.056892][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.061916][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 419.067179][ T31] ? radix_tree_lookup+0x240/0x290 [ 419.072468][ T31] genl_rcv_msg+0x10d/0x790 [ 419.076989][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.082018][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 419.087153][ T31] ? __asan_memcpy+0x40/0x70 [ 419.091743][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.097174][ T31] netlink_rcv_skb+0x205/0x470 [ 419.101937][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.106857][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.111961][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.117306][ T31] ? down_read+0x1ad/0x2e0 [ 419.121732][ T31] genl_rcv+0x28/0x40 [ 419.125867][ T31] netlink_unicast+0x82f/0x9e0 [ 419.130659][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.136046][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.140978][ T31] ? skb_put+0x11b/0x210 [ 419.145512][ T31] netlink_sendmsg+0x805/0xb30 [ 419.150289][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.155619][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.160555][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.165901][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.171187][ T31] __sock_sendmsg+0x219/0x270 [ 419.175929][ T31] __sys_sendto+0x3bd/0x520 [ 419.180444][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 419.185562][ T31] ? count_memcg_event_mm+0x21/0x260 [ 419.190856][ T31] ? exc_page_fault+0x76/0xf0 [ 419.195644][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 419.200938][ T31] __x64_sys_sendto+0xde/0x100 [ 419.205873][ T31] do_syscall_64+0xfa/0x3b0 [ 419.210383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.215767][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.221841][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.226574][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.232504][ T31] RIP: 0033:0x7f8380790abc [ 419.236922][ T31] RSP: 002b:00007f83815dfec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.245419][ T31] RAX: ffffffffffffffda RBX: 00007f83815dffc0 RCX: 00007f8380790abc [ 419.253647][ T31] RDX: 0000000000000020 RSI: 00007f83815e0010 RDI: 0000000000000006 [ 419.261620][ T31] RBP: 0000000000000000 R08: 00007f83815dff14 R09: 000000000000000c [ 419.269641][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 419.277681][ T31] R13: 00007f83815dff68 R14: 00007f83815e0010 R15: 0000000000000000 [ 419.285919][ T31] [ 419.288951][ T31] INFO: task syz.2.1772:12110 blocked for more than 144 seconds. [ 419.300530][ T31] Not tainted syzkaller #0 [ 419.305599][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.314318][ T31] task:syz.2.1772 state:D stack:27800 pid:12110 tgid:12109 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 419.326433][ T31] Call Trace: [ 419.329715][ T31] [ 419.332688][ T31] __schedule+0x1798/0x4cc0 [ 419.337207][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.342068][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.346976][ T31] ? __pfx___schedule+0x10/0x10 [ 419.351838][ T31] ? schedule+0x91/0x360 [ 419.356152][ T31] schedule+0x165/0x360 [ 419.360314][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.366134][ T31] __mutex_lock+0x7e6/0x1350 [ 419.370742][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.375574][ T31] ? genl_rcv_msg+0x10d/0x790 [ 419.380271][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.385388][ T31] ? stack_trace_save+0x9c/0xe0 [ 419.390243][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 419.395660][ T31] ? radix_tree_lookup+0x240/0x290 [ 419.400780][ T31] genl_rcv_msg+0x10d/0x790 [ 419.405394][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.410271][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.415440][ T31] netlink_rcv_skb+0x205/0x470 [ 419.420287][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.425189][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.430222][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.435583][ T31] ? down_read+0x1ad/0x2e0 [ 419.440032][ T31] genl_rcv+0x28/0x40 [ 419.444421][ T31] netlink_unicast+0x82f/0x9e0 [ 419.449223][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.454563][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.459541][ T31] ? skb_put+0x11b/0x210 [ 419.463875][ T31] netlink_sendmsg+0x805/0xb30 [ 419.468662][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.474231][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.479209][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.484556][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.489850][ T31] __sock_sendmsg+0x219/0x270 [ 419.494614][ T31] __sys_sendto+0x3bd/0x520 [ 419.499167][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 419.504285][ T31] ? count_memcg_event_mm+0x21/0x260 [ 419.509594][ T31] ? exc_page_fault+0x76/0xf0 [ 419.514339][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 419.519644][ T31] __x64_sys_sendto+0xde/0x100 [ 419.524739][ T31] do_syscall_64+0xfa/0x3b0 [ 419.529250][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.534616][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.540685][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.545429][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.551320][ T31] RIP: 0033:0x7f2890990abc [ 419.555786][ T31] RSP: 002b:00007f288ebf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.564247][ T31] RAX: ffffffffffffffda RBX: 00007f288ebf4fc0 RCX: 00007f2890990abc [ 419.572302][ T31] RDX: 0000000000000028 RSI: 00007f288ebf5010 RDI: 0000000000000006 [ 419.580301][ T31] RBP: 0000000000000000 R08: 00007f288ebf4f14 R09: 000000000000000c [ 419.588517][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 419.597141][ T31] R13: 00007f288ebf4f68 R14: 00007f288ebf5010 R15: 0000000000000000 [ 419.605555][ T31] [ 419.608634][ T31] INFO: task syz.4.1776:12129 blocked for more than 144 seconds. [ 419.616794][ T31] Not tainted syzkaller #0 [ 419.621719][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.630804][ T31] task:syz.4.1776 state:D stack:27848 pid:12129 tgid:12128 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 419.643563][ T31] Call Trace: [ 419.646865][ T31] [ 419.649806][ T31] __schedule+0x1798/0x4cc0 [ 419.654643][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.659517][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.664980][ T31] ? __pfx___schedule+0x10/0x10 [ 419.669848][ T31] ? schedule+0x91/0x360 [ 419.674200][ T31] schedule+0x165/0x360 [ 419.678368][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.684992][ T31] __mutex_lock+0x7e6/0x1350 [ 419.689604][ T31] ? __mutex_lock+0x5bb/0x1350 [ 419.694592][ T31] ? genl_rcv_msg+0x10d/0x790 [ 419.699282][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.704361][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 419.709484][ T31] ? radix_tree_lookup+0x240/0x290 [ 419.714955][ T31] genl_rcv_msg+0x10d/0x790 [ 419.719481][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.724625][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 419.729653][ T31] ? __asan_memcpy+0x40/0x70 [ 419.734322][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.739700][ T31] netlink_rcv_skb+0x205/0x470 [ 419.744777][ T31] ? __lock_acquire+0xab9/0xd20 [ 419.749645][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.754717][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.760033][ T31] ? down_read+0x1ad/0x2e0 [ 419.764747][ T31] genl_rcv+0x28/0x40 [ 419.768739][ T31] netlink_unicast+0x82f/0x9e0 [ 419.773816][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.779115][ T31] ? netlink_sendmsg+0x642/0xb30 [ 419.784171][ T31] ? skb_put+0x11b/0x210 [ 419.788455][ T31] netlink_sendmsg+0x805/0xb30 [ 419.793377][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.798701][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.804142][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.809448][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.814815][ T31] __sock_sendmsg+0x219/0x270 [ 419.819499][ T31] __sys_sendto+0x3bd/0x520 [ 419.824045][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 419.829078][ T31] ? count_memcg_event_mm+0x21/0x260 [ 419.834748][ T31] ? exc_page_fault+0x76/0xf0 [ 419.839438][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 419.845287][ T31] __x64_sys_sendto+0xde/0x100 [ 419.850068][ T31] do_syscall_64+0xfa/0x3b0 [ 419.854617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.859818][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.866190][ T31] ? clear_bhb_loop+0x60/0xb0 [ 419.870880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.876858][ T31] RIP: 0033:0x7f9b3d190abc [ 419.881290][ T31] RSP: 002b:00007f9b3e0c0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.889750][ T31] RAX: ffffffffffffffda RBX: 00007f9b3e0c0fc0 RCX: 00007f9b3d190abc [ 419.898100][ T31] RDX: 0000000000000020 RSI: 00007f9b3e0c1010 RDI: 0000000000000008 [ 419.906147][ T31] RBP: 0000000000000000 R08: 00007f9b3e0c0f14 R09: 000000000000000c [ 419.914326][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 419.922838][ T31] R13: 00007f9b3e0c0f68 R14: 00007f9b3e0c1010 R15: 0000000000000000 [ 419.930963][ T31] [ 419.934798][ T31] [ 419.934798][ T31] Showing all locks held in the system: [ 419.942804][ T31] 1 lock held by khungtaskd/31: [ 419.947650][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 419.957880][ T31] 2 locks held by getty/5618: [ 419.962681][ T31] #0: ffff88814e1160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 419.972613][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 419.982910][ T31] 1 lock held by udevd/6068: [ 419.987496][ T31] #0: ffff888142bf6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 419.996843][ T31] 2 locks held by kworker/u8:61/6932: [ 420.002407][ T31] 6 locks held by syz.0.1763/12094: [ 420.007602][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.016726][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.026188][ T31] #2: ffff8880250cfa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 420.036964][ T31] #3: ffff888024fa5f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 420.046708][ T31] #4: ffff888024fa58f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 420.059065][ T31] #5: ffff888024fa5930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 420.071742][ T31] 2 locks held by syz.3.1769/12102: [ 420.076990][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.086613][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.095995][ T31] 2 locks held by syz.1.1771/12107: [ 420.101189][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.109840][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.119025][ T31] 2 locks held by syz.2.1772/12110: [ 420.124372][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.132889][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.141879][ T31] 2 locks held by syz.4.1776/12129: [ 420.147147][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.155371][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.164733][ T31] 2 locks held by syz-executor/12136: [ 420.170109][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.178540][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.187584][ T31] 2 locks held by syz-executor/12138: [ 420.193281][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.201534][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.210555][ T31] 2 locks held by syz-executor/12140: [ 420.215936][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.224466][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.233517][ T31] 2 locks held by syz-executor/12142: [ 420.238890][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.247218][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.256536][ T31] 2 locks held by syz-executor/12143: [ 420.261946][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.270216][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.279248][ T31] 2 locks held by syz-executor/12181: [ 420.284956][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.293201][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.302239][ T31] 2 locks held by syz-executor/12183: [ 420.307605][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.316093][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.325338][ T31] 2 locks held by syz-executor/12185: [ 420.330710][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.339025][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.348275][ T31] 2 locks held by syz-executor/12187: [ 420.353684][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.361881][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.370881][ T31] 2 locks held by syz-executor/12189: [ 420.376412][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.384644][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.393740][ T31] 2 locks held by syz-executor/12224: [ 420.399102][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.407721][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.416771][ T31] 2 locks held by syz-executor/12225: [ 420.422207][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.430431][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.439564][ T31] 2 locks held by syz-executor/12228: [ 420.445203][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.453461][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.462825][ T31] 2 locks held by syz-executor/12232: [ 420.468199][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.476434][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.491256][ T31] 2 locks held by syz-executor/12235: [ 420.496911][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.505184][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.514236][ T31] [ 420.516568][ T31] ============================================= [ 420.516568][ T31] [ 420.525366][ T31] NMI backtrace for cpu 0 [ 420.525386][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 420.525405][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.525415][ T31] Call Trace: [ 420.525422][ T31] [ 420.525429][ T31] dump_stack_lvl+0x189/0x250 [ 420.525454][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.525473][ T31] ? __pfx__printk+0x10/0x10 [ 420.525507][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 420.525532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 420.525557][ T31] ? __pfx__printk+0x10/0x10 [ 420.525582][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.525608][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 420.525634][ T31] watchdog+0xf93/0xfe0 [ 420.525661][ T31] ? watchdog+0x1de/0xfe0 [ 420.525689][ T31] kthread+0x70e/0x8a0 [ 420.525713][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.525733][ T31] ? __pfx_kthread+0x10/0x10 [ 420.525754][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.525776][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.525791][ T31] ? __pfx_kthread+0x10/0x10 [ 420.525811][ T31] ret_from_fork+0x439/0x7d0 [ 420.525831][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.525853][ T31] ? __switch_to_asm+0x39/0x70 [ 420.525871][ T31] ? __switch_to_asm+0x33/0x70 [ 420.525890][ T31] ? __pfx_kthread+0x10/0x10 [ 420.525910][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.525952][ T31] [ 420.525959][ T31] Sending NMI from CPU 0 to CPUs 1: [ 420.672041][ C1] NMI backtrace for cpu 1 [ 420.672058][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 420.672076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.672086][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 420.672112][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 420.672125][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 420.672142][ C1] RAX: 9c8dfa15982a2900 RBX: ffffffff819683f8 RCX: 9c8dfa15982a2900 [ 420.672154][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba295 RDI: ffffffff8be33f00 [ 420.672164][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 420.672176][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a630 [ 420.672188][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 420.672199][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 420.672213][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.672224][ C1] CR2: 000056317c18afb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 420.672239][ C1] Call Trace: [ 420.672246][ C1] [ 420.672252][ C1] default_idle+0x13/0x20 [ 420.672270][ C1] default_idle_call+0x74/0xb0 [ 420.672290][ C1] do_idle+0x1e8/0x510 [ 420.672304][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.672325][ C1] ? __pfx_do_idle+0x10/0x10 [ 420.672345][ C1] ? do_idle+0x11/0x510 [ 420.672362][ C1] cpu_startup_entry+0x44/0x60 [ 420.672378][ C1] start_secondary+0x101/0x110 [ 420.672399][ C1] common_startup_64+0x13e/0x147 [ 420.672426][ C1] [ 420.673203][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 420.673218][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 420.673237][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.673248][ T31] Call Trace: [ 420.673255][ T31] [ 420.673263][ T31] dump_stack_lvl+0x99/0x250 [ 420.673285][ T31] ? __asan_memcpy+0x40/0x70 [ 420.673305][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.673324][ T31] ? __pfx__printk+0x10/0x10 [ 420.673358][ T31] vpanic+0x281/0x750 [ 420.673379][ T31] ? __pfx_vpanic+0x10/0x10 [ 420.673397][ T31] ? preempt_schedule+0xae/0xc0 [ 420.673415][ T31] ? preempt_schedule_common+0x83/0xd0 [ 420.673437][ T31] panic+0xb9/0xc0 [ 420.673455][ T31] ? __pfx_panic+0x10/0x10 [ 420.673475][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 420.673504][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 420.673528][ T31] watchdog+0xfd2/0xfe0 [ 420.673554][ T31] ? watchdog+0x1de/0xfe0 [ 420.673581][ T31] kthread+0x70e/0x8a0 [ 420.673604][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.673623][ T31] ? __pfx_kthread+0x10/0x10 [ 420.673645][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.673667][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.673684][ T31] ? __pfx_kthread+0x10/0x10 [ 420.673704][ T31] ret_from_fork+0x439/0x7d0 [ 420.673725][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 420.673747][ T31] ? __switch_to_asm+0x39/0x70 [ 420.673766][ T31] ? __switch_to_asm+0x33/0x70 [ 420.673784][ T31] ? __pfx_kthread+0x10/0x10 [ 420.673805][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.673838][ T31] [ 420.998576][ T31] Kernel Offset: disabled [ 421.002882][ T31] Rebooting in 86400 seconds..