last executing test programs: 26.895586054s ago: executing program 3 (id=2877): socket$kcm(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) unshare(0x20000400) r0 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c0002800500030003000000080002400000001008000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x400c001}, 0x24000000) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x0, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x2000c004) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x11c, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r11, 0x0) (async) close(0x3) (async) r12 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r12, 0x1, 0x1c, 0x0, &(0x7f0000000f00)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x3}, 0x8) (rerun: 64) 26.331482575s ago: executing program 3 (id=2883): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24008810) 26.148971196s ago: executing program 3 (id=2885): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x0, 0x70bd27, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004001}, 0x48084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@generic={0x7, 0x1, 0x2, 0xa4e1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xd9, &(0x7f00000001c0)=""/217, 0x100, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x6, 0xfffffffa}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r3, 0x1, r4, r5, 0x1], &(0x7f0000000480)=[{0x1, 0x1, 0x4, 0x9}, {0x3, 0x4, 0x5, 0x2}, {0x1, 0x5, 0x9, 0x2}, {0x0, 0x3, 0xd, 0xc}, {0x5, 0x2, 0x6, 0x7}, {0x1, 0x1, 0x10, 0xc}, {0x5, 0x2, 0xe, 0xb}], 0x10, 0xd}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x401}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0xa, 0xa, 0x1, 0x10}], &(0x7f0000000740)='GPL\x00', 0x800, 0x40, &(0x7f0000000780)=""/64, 0x41000, 0x12, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x8, 0x6f, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r5, r5, r3, r4, r4]}, 0x94) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0x100, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x13, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x8, 0x15, &(0x7f0000000ac0)=""/21, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r4, r4, r3, r5, r4, r3, r3], 0x0, 0x10, 0xc0e2}, 0x94) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x20000084) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x814) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f0000000e80)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) writev(r5, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="2d23703a5863577ed9ed22aa71fb01bd3f3766a8c46b3012da4b472b98f1fc11cd0401a1350560f8679ce1998b", 0x2d}, {&(0x7f0000000f00)="be70d252dc39fdea767d323fca32086671ac4d13786f7715913414788d0a6b316f49c4a7a89c185f674a3c0404cfff351b873520562ac53314ff3abd42bc8641f0701c563393beb9581d1da3", 0x4c}, {&(0x7f0000000f80)="1c558055aeb9c4071d12bd7555d29c837d0776cec0157d9b9f6eb8cc48d00833498be683935d665cd3513ae8e9c9b32f14492786cb1782db18d5676d672e7ae5a1ec95c3ceecab75ecc8f50f8d20900171aa8270b47c85667ea6e0a239395be52c9e5d31d9c9e231", 0x68}, {&(0x7f0000001000)="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", 0xff}, {&(0x7f0000001100)="54af0804bf3928c27945f176321300595efc4bb3226f41ddc162f7808e489cd6ffed0825c030dfaf24f4e451568adfd5fb4fae0234fe5a348b554e001aac5ad156985675c05b600d0c3e26ad51aad3faf8392c37bd30062d8eb8a68a12bd83496ed55316bba0a7bc06cf99f6b164419da5a9401b23c587aa9d308bc361cd8f44bafda704ec75e3ac7ba3beece072f7234ee7204c5d3bf1394475456d7485aa8f42d910c841f6b4227f7ef44b2dff9d", 0xaf}], 0x5) (rerun: 64) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000015c0)=@o_path={&(0x7f0000001580)='./file0\x00', 0x0, 0x10, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x29, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x0, 0x4, 0x7, 0x5, 0x100, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x8, 0xb, 0x6, 0x6, 0x10}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000013c0)='GPL\x00', 0x7, 0xee, &(0x7f0000001400)=""/238, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0x7, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001600)=[r12, r4], &(0x7f0000001640)=[{0x0, 0x2, 0x9, 0x8}, {0x1, 0x3, 0xb, 0x1}, {0x2, 0x2, 0x5, 0xc}, {0x0, 0x1, 0x10, 0x4}, {0x5, 0x1, 0x2, 0x2}, {0x3, 0x5, 0xe, 0xb}, {0x2, 0x2, 0x4, 0x9}, {0x3, 0x3, 0x4, 0x6}], 0x10, 0x4}, 0x94) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0x0, 0xf7a7, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x1d, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x66}, @alu={0x4, 0x1, 0x0, 0x1, 0xb, 0xfffffffffffffff4}, @alu={0x4, 0x0, 0x7, 0x2, 0xa, 0x30}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @ldst={0x0, 0x1, 0x6, 0x2, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3ff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x1, 0x0, 0x5, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001880)='GPL\x00', 0x9, 0xf5, &(0x7f00000018c0)=""/245, 0x41000, 0x24, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000019c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001a00)={0x3, 0x9, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001a80)=[r3, r11, r12, r13, r3, r12, r4, r3], &(0x7f0000001ac0)=[{0x1, 0x5, 0x3, 0x2}, {0x0, 0x3, 0x10, 0x7}, {0x0, 0x3, 0xc, 0x4}], 0x10, 0x5}, 0x94) (async) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x10, 0x3fb, 0x2, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8881}, 0x24008040) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), r14) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, r15, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}}, 0x40) (async, rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xd4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x1ff]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044854}, 0x40000) (rerun: 32) 25.985103607s ago: executing program 3 (id=2890): r0 = socket$kcm(0x10, 0x7, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x4, 0x4, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x66, 0x0, 0xd, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x7, 0x9, "07700caeaa6f89"}, {0x2, 0x5, "7eaa37"}, {0x7, 0x3, 'L'}, {0x6, 0x3, 'C'}, {0x1, 0x8, "d3322b0d7ce0"}]}, @lsrr={0x83, 0x13, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x23}]}, @ssrr={0x89, 0x7, 0xf8, [@broadcast]}]}}}}}) (async) r5 = socket(0x1d, 0x2, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0xdc2658be) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) accept4$alg(r5, 0x0, 0x0, 0x80000) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 25.896909195s ago: executing program 3 (id=2893): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0xfffffffffffffe92, 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000700000002000000010000130400e945000004002000000000f00900000000305f005f60002b5b73937e0b554bdf82118f78d68030b89f52c1a1ed1d722ed0c34b3ae6d8c5cba8d825a2cef6ac28892ad8b13c1d984a455d04dfaf0624d7ef18450397295ec5486a86a5ca69850e"], 0x0, 0x37, 0x0, 0x1, 0x1}, 0x28) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711086000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)='V'}, 0x20) 25.78658551s ago: executing program 3 (id=2896): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004846) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.798592661s ago: executing program 0 (id=2936): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0xc000, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x63, 0xffffff9f, &(0x7f0000000180)="09676997b49b3267ba2ed3a03ea2a1bc223bc356a197d4a6e75d8342a918e57cde7ac8fcc1f342a66c785b32a09ba98cdc8e91ee669e4091562ec035127bd0fd9c527e6de408ebb5aae81663d5f009209207a7720add36da4cb17c566e13a1a57f04dd", 0x0, 0x1, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x9, 0xffffffff}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) shutdown(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, 0x0, 0x0, 0x10000, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r9, &(0x7f00000003c0)={0xa, 0x0, 0x800000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4f) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @private=0xa010102}, 0x10) listen(r10, 0x0) 18.557062123s ago: executing program 2 (id=2938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0x2, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040811}, 0x4000800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.132603943s ago: executing program 2 (id=2945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}, {&(0x7f0000000400)=""/123, 0x7b}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000002b000b000000000000000000040000000800030004fd02000c000180", @ANYBLOB="a2aee561d9177e3e9a649254a38f3f1539ce69a18721d2227ddcd2f95a15787a91e1343f92db5a4a1ef31d67b2343a07f781e38834da7dc28f0369e3b4e179918c80800fbd2e0fffa301c7bd6e31ad47dd60540f33a5a331a66aec655037e402bd343b98d8d93e7c9235a6c2acbfd51e6250efc1929907e3c8e4482ab21e9bac5eca923fab6220f1dba18493983e662af5bf52e714ed28f565aacf2fd893a951ec90e11dae5941156e98a6c2eb5a586aa47ae6c7e9e96d39714b9f2c87"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 17.920937229s ago: executing program 4 (id=2946): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESDEC=r0], 0xfc}}, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0b0000000500000001000100090002000100000039a1d57b8a1839223de32c6080cede27d4f46b14239b0b90dd8e2af21d797c16d6b13ded016762a2a33793c8de196abe222abc7873b903acb769d44c90c695d378f0111b9344d4fc06e8af032ac1c4943390479086cd0496", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r4}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) setsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f00000012c0)="d8010198", 0x4) (async) sendto$inet6(r7, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r7, &(0x7f000000d5c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/65, 0x41}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 32) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) 17.919536859s ago: executing program 2 (id=2947): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYBLOB="a2b403551f327b71a3cbe63d560118e2df69a28f9c617f0cf2d0b6370d8e43102e85a84767c3285b042948ab807637e492b7c12126907066224a0dd2782cf5864b537727d710e46a1b79b3687f708820ebb2c694a16bd5e1a0ead2ef94e8458604609d0ed7a46341e172"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="770000001900000016000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000330001002abd70000500db25020000080800040024000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtclass={0x8e4, 0x28, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0xc}, {0xf, 0xffe0}, {0xffff, 0x6}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x4}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2202, 0x3ff, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x7, 0x2}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1, 0xf}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x6, 0x1}}, @TCA_HFSC_USC={0x10, 0x3, {0x7fff, 0xcb5c, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0xfffffff7, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0xffff8000}}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x80c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x3, 0x10001, 0x9, 0x8, 0x4, 0x1, 0x3, 0x4, 0xc1c, 0x8, 0x6, 0x1ff, 0x5, 0xffff, 0x8b2d, 0x2d67, 0x1000, 0x7f, 0x3ff, 0x26, 0x2, 0x9, 0x2, 0x5, 0xe000, 0x3, 0x0, 0x4, 0x7fffffff, 0xa3, 0x466, 0x7, 0xfffffffe, 0x6, 0x1ff, 0x40, 0x3, 0x0, 0x697f, 0x3, 0x8, 0x9, 0x2, 0x0, 0x80, 0x1, 0xb, 0x0, 0x10, 0xffffffff, 0x4, 0x513, 0x6, 0x3, 0xe, 0x3, 0x3, 0x23bd, 0x9, 0xd19, 0x7ff, 0x80000001, 0x19, 0x31ca, 0xe, 0x8, 0x1, 0x6, 0x1, 0x0, 0xf8, 0x7, 0x9, 0x3c3d, 0xfe4, 0xfa, 0x4, 0x40, 0x0, 0x1000, 0x7, 0x50, 0x7, 0x5, 0x3, 0x6, 0x7, 0x3, 0x3, 0x100, 0xe0, 0xa5b, 0x1, 0x9, 0x0, 0xb5, 0x40, 0x4, 0x1, 0x9642, 0x2, 0xf6, 0xff, 0xe, 0x1, 0x5, 0x3, 0x3, 0x2, 0x657, 0xc0000000, 0x2, 0x0, 0x6, 0x6, 0x0, 0x5, 0xc, 0x295a, 0x4, 0x5, 0x9, 0x5, 0x2, 0xa33, 0x2, 0x6, 0x7, 0x0, 0xf, 0x7, 0xfffffffe, 0x9, 0x4, 0xfffffffe, 0x3, 0x7, 0x36b33742, 0x2, 0xb, 0x7, 0x6, 0xfff, 0x4, 0x5b, 0x8, 0x7, 0x5, 0x3ff, 0x80000001, 0x6, 0x8, 0x2, 0x1000, 0xd, 0xfb, 0x8, 0x3, 0x8, 0x1e0a, 0xc697, 0x8, 0x80000000, 0x7fff, 0x2, 0x8ec, 0x7, 0x80000000, 0x5, 0x3, 0x4, 0x1, 0x9, 0x7, 0x7, 0x3, 0x7fff, 0x2, 0x4, 0x9, 0x5acc492d, 0xfb1, 0x6, 0x46, 0x4, 0x2, 0x9, 0x0, 0x7, 0x9, 0xb8, 0x6, 0x4, 0x6, 0x5, 0x4, 0x200, 0xa, 0x8, 0x63, 0x4, 0x9, 0x9, 0x401, 0x7, 0x40, 0x35, 0x0, 0x4, 0x5d9d, 0x0, 0x3, 0x8, 0x3, 0x3, 0x4, 0xfffff66f, 0x0, 0xfffff3b8, 0x4, 0xa1dc, 0x3, 0xfffffffa, 0x8, 0xfffffe20, 0x0, 0x87e, 0x7, 0x1, 0x8, 0x7, 0x7fffffff, 0x8, 0x400, 0x2, 0x4, 0xbc60, 0x7, 0x5, 0x80000000, 0x2, 0x4, 0xffff, 0x80000000, 0x0, 0x73, 0x6, 0xffff, 0x8, 0xfffff950, 0x1, 0x2, 0xb2b6, 0x9, 0x8]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0x80000001, 0x6, 0x6, 0x7, 0x1, 0x8, 0x9, 0xffff, 0xc, 0x7fffffff, 0x101, 0x6, 0x3, 0x6, 0x6, 0x401, 0x4, 0x6, 0x9, 0x3, 0x62, 0x8001, 0x100, 0xf3, 0x80000000, 0x5, 0x5, 0xb7, 0x8001, 0x8, 0x8000, 0x6, 0x10001, 0x3, 0x0, 0xd, 0x8, 0x2, 0x6, 0x7f, 0x3, 0xb8b, 0x81, 0xfffffffd, 0x9, 0x1, 0x3, 0x5, 0x2, 0x1, 0xfffffff7, 0x258f, 0x4, 0x3, 0x9, 0xa3, 0xff, 0xe, 0x8bc, 0x2, 0x81, 0x2c, 0x9, 0x8e, 0x7, 0x8001, 0x5, 0xff, 0x9, 0xa966, 0x2, 0x5, 0x5, 0x6fa, 0x2, 0x7, 0x8000, 0x6, 0x3, 0x9, 0xfffffff4, 0x5a8, 0x1, 0xfffffffa, 0x6, 0x2, 0xff, 0x3, 0x6, 0x26, 0x1, 0xb7, 0x0, 0x5, 0x6a494681, 0x8, 0x582a, 0x40, 0x3, 0x3, 0x9, 0x14, 0xe4, 0x10, 0xc, 0x8000, 0xd, 0x80, 0xb2, 0xfff, 0xff, 0x5d49, 0x8, 0x8, 0x81, 0x1, 0x9, 0x4, 0x4, 0x3, 0x25, 0x6, 0x6, 0x4, 0x800, 0x800, 0x4, 0x10001, 0x73, 0x3, 0xfff, 0x827, 0x7fff00, 0x7, 0xffff, 0x9, 0x2, 0x8, 0x48000000, 0x2, 0x4, 0x9, 0xffffffe4, 0x4, 0x0, 0xa, 0x7, 0x40, 0xff, 0x8, 0x1, 0x7, 0x5, 0xa, 0x4, 0x10000, 0xfffffff7, 0x80000001, 0xb54, 0x9, 0xffffff6d, 0x3, 0x7, 0x1493, 0x1, 0x7, 0x2, 0x7e6fc14d, 0x3, 0x2, 0x200, 0x100, 0x5, 0x6, 0x40, 0x0, 0x8, 0x70fc, 0x7, 0x5, 0xfffffffd, 0xfe8, 0x8, 0x2, 0x9, 0x9, 0xffffff01, 0xe2c, 0x40, 0x1, 0x1, 0x5, 0x3, 0x6, 0xfff, 0x2, 0x5, 0x100, 0x8, 0x7cb, 0xfc49, 0x4, 0x3f4, 0x7, 0x8, 0x9, 0x0, 0x40, 0x0, 0x2, 0x1ff, 0x101, 0x4, 0x2, 0xf5, 0x9, 0x80000001, 0xc, 0x0, 0x7fff, 0x7, 0x3, 0x9a2, 0x1, 0xfffffff7, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8, 0x7fff, 0x3, 0x6, 0xdf6, 0x2, 0xd2, 0x4, 0x2, 0x1, 0xd, 0x0, 0x1, 0x2, 0xaff3, 0x193, 0x5, 0x3, 0xc, 0x8, 0x7, 0x10001, 0x1000, 0x0, 0x2]}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}, @tclass_kind_options=@c_mq={0x7}]}, 0x8e4}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x58) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r5, 0x3320}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)={r8, 0x6, 0x71, "2b868257c335ac3898aaa7a60456606b064fb307213d02c198630621716600d4c33945b954eea7074403ca13bb59dd94b567e723a94a4d1b4c63d55d6b4c7d713839e116f5676ce896941533cceab67baaa36473558d0336db660efb5dc36219a4cd5023631f858eb423c4d393271dc0fb"}, 0x79) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @private=0xa010101}}}, 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r9, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r9, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r10, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x6bb6}}}, &(0x7f00000006c0)=0x84) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x56}) accept$alg(r0, 0x0, 0x0) 17.771121504s ago: executing program 4 (id=2948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x150, 0x0, 0x1, [@nested={0x96, 0x12, 0x0, 0x1, [@generic="a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c5ebd28b4b4513d200e3c56c2dfd37d0f42fb34dc396d5a11005f6bfe5993e5c04528fba03ac92ee6ed1d968a7554517590de2c1900000000", @nested={0x29, 0xde, 0x0, 0x1, [@generic="d3915f12712a643d4966212c4f25b0f088ecbcca05e2c38719e4adaad0c012779c2e654b7a"]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x24, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}, 0x1, 0x0, 0x0, 0x44090}, 0x800) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000300)=0x4) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c5000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x28}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 17.704979877s ago: executing program 0 (id=2950): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x8, 0x2371}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000080), 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001a00010a"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r3, 0x787ecabe3cdcaa4b, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) (rerun: 64) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$inet6(r0, &(0x7f0000001340)="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", 0x1000, 0x400c080, &(0x7f0000000200)={0xa, 0x4e21, 0x401, @dev={0xfe, 0x80, '\x00', 0x10}, 0x2}, 0x1c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf254500000008000300", @ANYRES32=r9, @ANYBLOB="cec637944f995a68af393ce5fda2ae1917911cc815ca39240ea1731e444d3a6b2d504e26cb50a529bd7f25bbdc033f32b3b235f3bc3ce225cb8dafbf495185e7c411015a19b944cccd864bcd73806fec55296dbb911d17d2a45e4d4a4c03462f8f43f607d7f76a8f03b98c86d93d1122492f27f16f789086708ec5e0a7feb6c8ce52941e7c4b2024a2eb069e29ed0a1d831feaf9c6532f2aea0651706ad730c5e479e5b81041667a3b2d6a7858ab4b1602da234138575c57a0b2939ed67541a7146cedb1ecb09e824d235f0b1c9a841d5f77aff1040c9a0d4de26e33dbcfbfe3bf3706916f12"], 0x1c}, 0x1, 0x0, 0x0, 0xc094}, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004010) (async, rerun: 32) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x60}}, 0x4004) bind$bt_hci(r10, &(0x7f00000001c0)={0x1f, 0x2, 0x3}, 0x6) 17.619897513s ago: executing program 4 (id=2951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x800004, 0x8, 0x8}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x19, r4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.568403196s ago: executing program 0 (id=2952): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x8804}, 0x240008c1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x10001, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x10001, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48800, 0x0) 17.296029784s ago: executing program 0 (id=2954): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005001800"], 0x78}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000004}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) getpeername(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000000)=0x80) 17.295794573s ago: executing program 4 (id=2955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r1, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x5, 0x0, &(0x7f0000000300)) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000906010800000001000000000200ffff0900020073797a310000000008000940000000390600010007000000100008"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 17.203436853s ago: executing program 0 (id=2956): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xc19, 0x4) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) (async) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x20000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r5}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r5}, 0xc) 17.164619439s ago: executing program 1 (id=2957): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x39e) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d61637365630000", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaabbf5ff090002"], 0x54}}, 0x0) listen(0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000190001090000000000000000021800000000fd000000000008000100ac141400080005000a0101020c00168008000300e0000002060015000600000008000400", @ANYRES32=r8, @ANYBLOB="56fc654eedd68dcb58e12a2ca51561ea20de6c7fdae0933e593b5570aea502036f56f422cd228684dc22ebaf8bf4e9c918cd5dc47f27b9d54c51330dc9e61feb055f22bf06f7ae4e6ca11340767a0d274123835df61149f7e9877ab1c468bcadaebe87d9823f8f81c7ebbe3863ffe74e25a1777dcf92fde718fafbdfbd"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) 17.053159755s ago: executing program 4 (id=2958): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = epoll_create1(0x80000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100e4ff"], 0x6c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2014}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002e0000001600000000f390bdcd8000000000000095400000000000002a8a7c612f3ed23fe89ce9237346cc7d8a6a80b8d1edcff038ae414012ed885b5f4055ce6b5b8fcce0f2b2bbb92abad37979137ec4"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 17.025521917s ago: executing program 0 (id=2959): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1}, 0x10100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x4000080) 17.020280352s ago: executing program 2 (id=2960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003d00)={0x7f, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004440)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x1b4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000090) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000004540)={&(0x7f00000045c0)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000100)=""/6, 0x6}, 0x4}, {{&(0x7f00000023c0)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f0000002440)=""/166, 0xa6}], 0x1, &(0x7f0000002500)=""/6, 0xffffffffffffff4b}}, {{&(0x7f0000002540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002840)=[{&(0x7f00000025c0)=""/252, 0xfc}, {&(0x7f00000026c0)=""/129, 0x81}, {&(0x7f0000002780)=""/174, 0xae}], 0x3, &(0x7f0000002880)=""/138, 0x8a}, 0x4}, {{&(0x7f0000002940)=@sco, 0x80, &(0x7f0000003a40)=[{&(0x7f00000029c0)=""/26, 0x1a}, {&(0x7f0000002a00)=""/57, 0x39}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x3}, 0x9}, {{&(0x7f0000003a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003b00)=""/244, 0xf4}, {&(0x7f0000003c00)=""/31, 0x1f}, {&(0x7f0000003c40)=""/154, 0x9a}, {&(0x7f0000003d00)}], 0x4, &(0x7f0000003d80)=""/1, 0x1}, 0x401}, {{0x0, 0x4b, &(0x7f0000003e00)=[{&(0x7f0000003dc0)=""/2, 0x2}], 0x1, &(0x7f0000003e40)=""/228, 0xe4}, 0x9}, {{&(0x7f0000003f40)=@ax25={{0x3, @default}, [@default, @bcast, @netrom, @null, @remote, @remote, @default, @netrom]}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003fc0)=""/233, 0xe9}, {&(0x7f00000040c0)=""/158, 0x9e}, {&(0x7f0000004180)=""/113, 0x71}], 0x3}}], 0x7, 0x40002020, &(0x7f0000004400)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000004480)={0x1}, 0x8) 16.877104537s ago: executing program 2 (id=2961): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000005e00000000000000180000000000000029000000370000003a00000000000010"], 0x30}, 0xc4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb0}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f006d030000000000000000000000000000000800010000000000a3bd44d5584086bcb8b4e32ffc568e5f2702ab0158e511480c9a7bf8e29c7e9479e7d0da294a3c9454c14a72e5e37a3eecbf777938116ae8e5da8d23510d75fa0098db782f57d52e81c7d13b6c8500000000"], 0x24}}, 0x0) 16.876731761s ago: executing program 4 (id=2962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x1, 0x20000006, 0x6, 0x4, 0xffff, 0x2, 0x9, 0x3e4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x10}, {0xfff2, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 16.712521338s ago: executing program 2 (id=2963): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @broadcast}, 0x268, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0d2, 0x8000000000000000, 0x1}) close(r2) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @rose, @rose, @default, @remote, @null, @null, @rose]}, &(0x7f0000000080)=0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="01000000fffe000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) getuid() sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0xffffffffffffff5c, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x4, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 16.335769582s ago: executing program 1 (id=2964): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aa"], 0xf0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000180)={r2, 0x8ae}, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @broadcast, 0xffffff00, 0x0, 'team0\x00', 'syzkaller1\x00', {}, {}, 0x2, 0x0, 0x42}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="010000000000000014001a"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061299a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) 16.009010928s ago: executing program 1 (id=2965): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0xfffffff9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000100)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xfffff954, 0xc1b, 0x1, 0x4, 0x10, 0xb, 0x3b}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000001140)={r10, 0xa0e1}, 0x8) socket$netlink(0x10, 0x3, 0x5) 15.846033787s ago: executing program 1 (id=2966): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000002f80)=[{r3, 0x8e}], 0x1, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x2cbd}, {0x6, 0x0, 0x0, 0xdf57}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x31005, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 15.502435429s ago: executing program 1 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc1", 0x77}], 0x1, 0x0, 0x0, 0x80}, 0x4004080) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00"], 0x38}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x58, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000043c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xc8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040) r7 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000500)={@dev, @dev, 0x0}, &(0x7f0000000540)=0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000007c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}], &(0x7f0000000800)='GPL\x00', 0xf1, 0xc3, &(0x7f0000000840)=""/195, 0x41000, 0x60, '\x00', r6, 0x25, r4, 0x8, &(0x7f0000000940)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x9, 0xa2, 0x200}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x1, 0x1], &(0x7f0000000a00)=[{0x3, 0x2, 0xa, 0x9}, {0x1, 0x4, 0x4, 0xa}], 0x10, 0x7f}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x2, &(0x7f0000000480)=@raw=[@alu={0x4, 0x0, 0x2, 0x0, 0xb, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x9, 0x1, 0xc, 0x9b, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0xc72, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x0, '\x00', r8, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x8, 0x4, 0x3}, 0x10, 0xffffffffffffffff, r9, 0x8, &(0x7f0000000bc0)=[r10], &(0x7f0000000c00)=[{0x1, 0x5, 0xb, 0xa}, {0x1, 0x5, 0x4, 0xa}, {0x0, 0x1, 0x10, 0xb}, {0x1, 0x1, 0x0, 0xb}, {0x0, 0x5, 0x6, 0x1}, {0x2, 0x2, 0x3, 0xc}, {0x4, 0x3, 0x9}, {0x4, 0x3, 0x6, 0x4}], 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r11}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f00000003c0)={&(0x7f0000000300)={0x6, 0x100, 0x6, {0x0, 0x2710}, {r12, r13/1000+60000}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x3e, 0x0, 0x0, 0x0, "60a8b7acef9b11c26d2828d2aa208c0faae89de1b9fd8cabc25444d753d4aac424815c309b6b9321eb4c1ceff508e17317eca6b62848050098eda7f9035eeb33"}}, 0x80}, 0x1, 0x0, 0x0, 0x100}, 0x4040) 15.365297604s ago: executing program 1 (id=2968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bdf000fbdbdf2501000000080002000200000008000100faffffff240004800d00030002000000050003000500000005000300010000000500030080"], 0x48}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 1.523331651s ago: executing program 32 (id=2959): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1}, 0x10100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x4000080) 1.494419897s ago: executing program 33 (id=2963): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @broadcast}, 0x268, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0d2, 0x8000000000000000, 0x1}) close(r2) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @rose, @rose, @default, @remote, @null, @null, @rose]}, &(0x7f0000000080)=0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="01000000fffe000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) getuid() sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0xffffffffffffff5c, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x4, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 1.438211144s ago: executing program 34 (id=2962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x1, 0x20000006, 0x6, 0x4, 0xffff, 0x2, 0x9, 0x3e4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x10}, {0xfff2, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 0s ago: executing program 35 (id=2968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bdf000fbdbdf2501000000080002000200000008000100faffffff240004800d00030002000000050003000500000005000300010000000500030080"], 0x48}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) kernel console output (not intermixed with test programs): netlink: 'syz.0.2237': attribute type 4 has an invalid length. [ 351.131840][T14587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.332744][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 351.358452][T14600] tipc: Enabling of bearer rejected, already enabled [ 351.444526][T14603] lo speed is unknown, defaulting to 1000 [ 351.466723][T14603] wg1 speed is unknown, defaulting to 1000 [ 351.484705][T14612] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 351.557993][T14617] sctp: [Deprecated]: syz.2.2249 (pid 14617) Use of int in maxseg socket option. [ 351.557993][T14617] Use struct sctp_assoc_value instead [ 352.465510][T14664] bond0: left promiscuous mode [ 352.502846][T14664] geneve2: left promiscuous mode [ 352.540149][T14667] erspan0: entered promiscuous mode [ 352.565120][T12656] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.583828][T12656] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.792134][T14672] wg1: left promiscuous mode [ 352.807188][T14672] wg1: left allmulticast mode [ 352.841500][T14672] team_slave_0: left promiscuous mode [ 352.865234][T14672] team_slave_0: left allmulticast mode [ 352.892088][T14672] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 352.915138][T14672] vlan0: left allmulticast mode [ 352.921371][T14672] veth0_vlan: left allmulticast mode [ 352.937657][T14672] vlan0: left promiscuous mode [ 352.948570][T14672] macvtap1: left promiscuous mode [ 352.957808][T14672] macvtap1: left allmulticast mode [ 353.002437][T12656] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.011490][T12656] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.020646][T12656] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 353.039373][T12663] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.051787][T12656] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.075519][T12656] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.084907][T12656] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.191948][ T30] audit: type=1800 audit(1757581620.651:7): pid=14684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2267" name="memory.events" dev="tmpfs" ino=2379 res=0 errno=0 [ 353.542558][T14707] lo speed is unknown, defaulting to 1000 [ 353.565329][T14707] wg1 speed is unknown, defaulting to 1000 [ 353.678629][T14714] tipc: Enabling of bearer rejected, already enabled [ 353.722677][T14714] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 353.730557][T14714] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 353.801637][T14717] syzkaller0: entered promiscuous mode [ 353.807283][T14717] syzkaller0: entered allmulticast mode [ 353.928079][T14722] tipc: Enabled bearer , priority 0 [ 353.998064][T14722] syzkaller0: entered promiscuous mode [ 354.004834][T14722] syzkaller0: entered allmulticast mode [ 354.284001][T14731] tipc: Resetting bearer [ 354.351214][T14718] tipc: Resetting bearer [ 354.425649][T14718] tipc: Disabling bearer [ 354.526847][T14735] erspan0: left promiscuous mode [ 354.755253][T14735] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 354.770191][T14735] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 354.810743][T14742] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 354.832431][T14742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.915914][T14742] validate_nla: 5 callbacks suppressed [ 354.915933][T14742] netlink: 'syz.4.2284': attribute type 10 has an invalid length. [ 354.966977][T14743] lo speed is unknown, defaulting to 1000 [ 354.971179][T14749] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 354.993227][T14743] wg1 speed is unknown, defaulting to 1000 [ 354.995500][T14749] netlink: 'syz.3.2286': attribute type 2 has an invalid length. [ 355.160724][T14755] macvtap2: entered promiscuous mode [ 355.166406][T14755] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 355.175889][T14755] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 355.210208][T14761] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 355.405246][T14773] __nla_validate_parse: 8 callbacks suppressed [ 355.405260][T14773] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2292'. [ 355.422084][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2292'. [ 355.431339][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2292'. [ 355.525699][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 355.541201][T14779] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 355.548905][T14779] team0: Device ipvlan2 is already an upper device of the team interface [ 355.583485][T14740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.591549][T14740] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 355.604533][T14740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 355.610470][T14740] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 355.625519][T14740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.631567][T14740] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 355.640618][T14740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 355.647021][T14740] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 355.842888][T14792] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 355.847379][T14791] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 355.890067][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 355.913243][ T30] audit: type=1800 audit(1757581623.361:8): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2296" name="memory.events" dev="tmpfs" ino=2372 res=0 errno=0 [ 356.393522][T14805] tipc: Enabled bearer , priority 0 [ 356.403057][T14805] syzkaller0: entered promiscuous mode [ 356.408570][T14805] syzkaller0: entered allmulticast mode [ 356.416970][T14812] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2303'. [ 356.427796][T14805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.441185][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 356.450480][T14812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2303'. [ 356.469423][T14781] lo speed is unknown, defaulting to 1000 [ 356.472122][T14805] tipc: Resetting bearer [ 356.493530][T14781] wg1 speed is unknown, defaulting to 1000 [ 356.501752][T14805] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 356.540549][T14804] tipc: Resetting bearer [ 356.572517][T14804] tipc: Disabling bearer [ 356.694306][T14816] netlink: 'syz.4.2304': attribute type 13 has an invalid length. [ 356.715498][T14816] netlink: 'syz.4.2304': attribute type 17 has an invalid length. [ 356.934825][T14816] 8021q: adding VLAN 0 to HW filter on device  [ 356.984316][T14816] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.998952][T14816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.021932][T14820] xfrm0: entered promiscuous mode [ 357.027213][T14820] xfrm0: entered allmulticast mode [ 357.159543][T14823] lo speed is unknown, defaulting to 1000 [ 357.169244][T14830] syzkaller0: entered promiscuous mode [ 357.175546][T14830] syzkaller0: entered allmulticast mode [ 357.208964][T14823] wg1 speed is unknown, defaulting to 1000 [ 357.478217][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 357.758727][T14860] lo speed is unknown, defaulting to 1000 [ 357.778266][T14860] wg1 speed is unknown, defaulting to 1000 [ 358.297052][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 358.422706][T14885] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 358.723804][T14904] tap0: tun_chr_ioctl cmd 1074025676 [ 358.729286][T14904] tap0: owner set to 0 [ 358.998692][T14907] lo speed is unknown, defaulting to 1000 [ 359.021509][T14907] wg1 speed is unknown, defaulting to 1000 [ 359.738948][T14946] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 359.749819][T14946] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 359.837545][T14947] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 360.195459][T14968] syzkaller1: entered promiscuous mode [ 360.251131][T14968] syzkaller1: entered allmulticast mode [ 360.729691][T14998] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 360.809815][T14998] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 360.824427][T14990] netlink: 'syz.1.2354': attribute type 12 has an invalid length. [ 360.848101][T14990] __nla_validate_parse: 4 callbacks suppressed [ 360.848119][T14990] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2354'. [ 361.048524][T15012] tipc: Enabled bearer , priority 0 [ 361.126428][T15012] syzkaller0: entered promiscuous mode [ 361.138200][T15012] syzkaller0: entered allmulticast mode [ 361.178570][T15012] tipc: Resetting bearer [ 361.179603][T15020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2362'. [ 361.210087][T15009] tipc: Resetting bearer [ 361.250588][T15009] tipc: Disabling bearer [ 361.298394][T15023] netlink: 'syz.4.2363': attribute type 10 has an invalid length. [ 361.403997][T15026] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 361.424741][T15026] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 361.518904][T15031] !: renamed from dummy0 [ 361.690108][T15039] lo speed is unknown, defaulting to 1000 [ 361.707871][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 361.757892][T15039] wg1 speed is unknown, defaulting to 1000 [ 361.859370][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'. [ 362.085982][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 362.104677][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 362.141750][T15070] netlink: 'syz.1.2376': attribute type 18 has an invalid length. [ 362.308403][T15078] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2378'. [ 362.525928][T15053] xfrm0: left promiscuous mode [ 362.536189][T15053] xfrm0: left allmulticast mode [ 362.548024][T15053] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 362.638430][T15068] lo speed is unknown, defaulting to 1000 [ 362.647340][T15068] wg1 speed is unknown, defaulting to 1000 [ 362.867852][T15091] netlink: 'syz.4.2379': attribute type 13 has an invalid length. [ 362.909234][T15091] netlink: 'syz.4.2379': attribute type 17 has an invalid length. [ 362.962778][T15091] 8021q: adding VLAN 0 to HW filter on device  [ 362.970513][T15091] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.012326][T15091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.327530][T15114] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2384'. [ 363.345748][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2384'. [ 363.356437][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2384'. [ 363.495162][ T5879] Bluetooth: hci0: command tx timeout [ 363.585743][T15129] netlink: 'syz.0.2389': attribute type 10 has an invalid length. [ 363.597250][T15129] veth0_macvtap: left promiscuous mode [ 363.604180][T15129] team0: Device veth0_macvtap failed to register rx_handler [ 363.925539][T15133] lo speed is unknown, defaulting to 1000 [ 363.937991][T15133] wg1 speed is unknown, defaulting to 1000 [ 364.332240][T15163] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 364.413014][T15163] veth9: entered promiscuous mode [ 364.592705][T15176] netlink: 'syz.4.2403': attribute type 15 has an invalid length. [ 364.600565][T15176] netlink: 'syz.4.2403': attribute type 17 has an invalid length. [ 364.654463][T15176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.770282][T15184] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 365.027700][T15192] lo speed is unknown, defaulting to 1000 [ 365.036262][T15192] wg1 speed is unknown, defaulting to 1000 [ 365.246097][T15198] lo speed is unknown, defaulting to 1000 [ 365.279592][T15198] wg1 speed is unknown, defaulting to 1000 [ 365.645489][T15208] sit2: entered promiscuous mode [ 366.017107][T15225] __nla_validate_parse: 11 callbacks suppressed [ 366.017125][T15225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2419'. [ 366.068282][T15227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2420'. [ 366.115607][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2421'. [ 366.228160][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'. [ 366.237803][T15237] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 366.284308][T15238] lo speed is unknown, defaulting to 1000 [ 366.293546][T15238] wg1 speed is unknown, defaulting to 1000 [ 366.518881][T15247] netlink: 'syz.3.2427': attribute type 4 has an invalid length. [ 366.587939][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2427'. [ 366.700678][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 366.856676][T15257] netlink: 'syz.3.2429': attribute type 1 has an invalid length. [ 366.985390][T15259] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2430'. [ 367.093692][T15264] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2431'. [ 367.117896][T15264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2431'. [ 367.194504][T15267] lo speed is unknown, defaulting to 1000 [ 367.205377][T15269] netlink: 'syz.3.2432': attribute type 12 has an invalid length. [ 367.213418][T15269] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2432'. [ 367.227299][T15267] wg1 speed is unknown, defaulting to 1000 [ 367.367902][T15279] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 367.429599][T15279] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.451611][T15278] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 367.459722][T15279] : (slave team0): Enslaving as an active interface with an up link [ 367.570075][T15294] tipc: Enabled bearer , priority 0 [ 368.004169][T15318] netlink: 'syz.0.2449': attribute type 1 has an invalid length. [ 368.214213][T15329] tipc: Enabling of bearer rejected, already enabled [ 368.288213][T15330] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 368.317144][T15330] tipc: Resetting bearer [ 368.602533][ T5938] tipc: Node number set to 3337948132 [ 368.946232][T15369] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 369.326017][T15384] tipc: Enabling of bearer rejected, already enabled [ 369.347507][T15388] netlink: 'syz.4.2472': attribute type 30 has an invalid length. [ 369.777356][T15424] tipc: Enabling of bearer rejected, already enabled [ 369.962852][T15433] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 370.223078][T15442] syzkaller1: entered promiscuous mode [ 370.234889][T15442] syzkaller1: entered allmulticast mode [ 370.429269][T15447] pim6reg: entered allmulticast mode [ 370.447618][T15447] pim6reg: left allmulticast mode [ 370.623048][T15458] geneve0: entered allmulticast mode [ 370.696552][T15456] lo speed is unknown, defaulting to 1000 [ 370.753525][T15456] wg1 speed is unknown, defaulting to 1000 [ 371.671961][T15464] tipc: Enabling of bearer rejected, already enabled [ 371.846401][T15471] netlink: 'syz.3.2498': attribute type 2 has an invalid length. [ 371.978206][T15471] : entered promiscuous mode [ 373.173196][T15507] tipc: Enabling of bearer rejected, already enabled [ 373.341569][T15509] __nla_validate_parse: 19 callbacks suppressed [ 373.341588][T15509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2509'. [ 373.451308][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 373.506572][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 373.557990][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2511'. [ 373.731762][T15526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.787666][T15526] netlink: 'syz.2.2514': attribute type 10 has an invalid length. [ 373.807951][T15526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2514'. [ 374.077189][T15539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.111363][T15541] tipc: Enabling of bearer rejected, failed to enable media [ 374.123928][T15545] netlink: 'syz.3.2521': attribute type 2 has an invalid length. [ 374.141619][T15548] syzkaller1: entered promiscuous mode [ 374.147135][T15548] syzkaller1: entered allmulticast mode [ 374.223639][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 180 seconds [ 374.234845][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 180 seconds [ 374.246015][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 180 seconds [ 374.257377][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 180 seconds [ 374.318137][T15556] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 374.368360][T15556] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 374.404223][T15563] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 374.548411][T15570] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2525'. [ 374.923543][T15588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2530'. [ 374.998998][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 375.022444][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2530'. [ 375.053770][T15596] netlink: 'syz.1.2530': attribute type 10 has an invalid length. [ 375.058408][T15592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2530'. [ 375.254479][T15601] tipc: Enabled bearer , priority 0 [ 375.264100][T15601] syzkaller0: entered promiscuous mode [ 375.274514][T15601] syzkaller0: entered allmulticast mode [ 375.284520][T15606] tipc: Enabling of bearer rejected, failed to enable media [ 375.699607][T15628] netlink: 'syz.3.2543': attribute type 1 has an invalid length. [ 375.868308][T15649] netlink: 'syz.1.2548': attribute type 21 has an invalid length. [ 375.959537][T15653] sctp: [Deprecated]: syz.4.2549 (pid 15653) Use of int in max_burst socket option deprecated. [ 375.959537][T15653] Use struct sctp_assoc_value instead [ 376.118620][T15600] tipc: Resetting bearer [ 376.200579][T15600] tipc: Disabling bearer [ 376.375645][T15671] tipc: Enabling of bearer rejected, already enabled [ 376.389976][T15671] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 376.406020][T15671] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 376.620138][T15684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.887137][T15700] tipc: Enabling of bearer rejected, failed to enable media [ 376.919313][T15703] tipc: Enabled bearer , priority 0 [ 376.955243][T15701] lo speed is unknown, defaulting to 1000 [ 376.955509][T15704] syzkaller0: entered promiscuous mode [ 376.988989][T15704] syzkaller0: entered allmulticast mode [ 376.999133][T15701] wg1 speed is unknown, defaulting to 1000 [ 377.083038][T15704] tipc: Resetting bearer [ 377.132569][T15704] tipc: Disabling bearer [ 378.210388][T15761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.512498][T15769] tipc: Enabling of bearer rejected, failed to enable media [ 378.534437][T15771] __nla_validate_parse: 10 callbacks suppressed [ 378.534456][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 378.553335][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 378.583594][T15771] netlink: 'syz.1.2582': attribute type 7 has an invalid length. [ 378.616020][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 378.659955][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 378.716199][T15771] netlink: 'syz.1.2582': attribute type 7 has an invalid length. [ 378.755852][T15784] syzkaller0: entered promiscuous mode [ 378.767545][T15784] syzkaller0: entered allmulticast mode [ 378.939586][T15791] tipc: Enabling of bearer rejected, already enabled [ 379.144252][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 379.393158][T15821] veth0_to_bond: entered allmulticast mode [ 379.453195][T15830] tipc: Enabling of bearer rejected, failed to enable media [ 379.506132][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'. [ 379.536601][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 379.609426][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 379.900389][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 379.925665][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 380.008470][T15853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.033485][T15855] veth1_to_bond: entered allmulticast mode [ 380.240557][T15855] veth1_to_bond (unregistering): left allmulticast mode [ 380.268916][T15872] smc: net device bond0 applied user defined pnetid SYZ [ 380.286111][T15874] sctp: [Deprecated]: syz.2.2607 (pid 15874) Use of int in max_burst socket option. [ 380.286111][T15874] Use struct sctp_assoc_value instead [ 380.302423][T15876] macvlan3: entered promiscuous mode [ 380.307851][T15876] vlan0: entered promiscuous mode [ 380.381685][T15876] xt_socket: unknown flags 0x50 [ 380.515057][T15886] tipc: Enabling of bearer rejected, already enabled [ 380.598607][T15888] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 380.626184][T15891] netlink: 'syz.2.2614': attribute type 11 has an invalid length. [ 380.669963][T15891] netlink: 'syz.2.2614': attribute type 4 has an invalid length. [ 380.746207][T15901] IPv6: Can't replace route, no match found [ 380.770136][T15902] syzkaller0: entered promiscuous mode [ 380.776832][T15902] syzkaller0: entered allmulticast mode [ 381.166368][T15924] netlink: 'syz.2.2621': attribute type 9 has an invalid length. [ 381.328781][T15934] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 381.374362][T15934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.427516][T15934] bond3: (slave veth7): Enslaving as an active interface with a down link [ 381.459825][T15934] gretap1: entered promiscuous mode [ 381.467941][T15934] bond3: (slave gretap1): making interface the new active one [ 381.477628][T15934] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 381.547168][T15934] macvlan3: entered promiscuous mode [ 381.556671][T15934] macvlan3: entered allmulticast mode [ 381.564481][T15934] bond3: entered promiscuous mode [ 381.571697][T15934] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 381.579308][T15934] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 381.596431][T15934] bond3: left promiscuous mode [ 381.621293][T15941] tipc: Enabling of bearer rejected, already enabled [ 382.158571][T15962] lo speed is unknown, defaulting to 1000 [ 382.197211][T15962] wg1 speed is unknown, defaulting to 1000 [ 382.494885][T15988] geneve4: entered promiscuous mode [ 382.500253][T15988] geneve4: entered allmulticast mode [ 382.509065][T12658] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.528148][T12658] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.655027][T12658] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.679918][T12658] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.699534][T16002] netlink: 'syz.0.2640': attribute type 4 has an invalid length. [ 382.861899][T16009] netlink: 'syz.3.2643': attribute type 12 has an invalid length. [ 382.953843][T15987] lo speed is unknown, defaulting to 1000 [ 383.024701][T15987] wg1 speed is unknown, defaulting to 1000 [ 383.268840][T16021] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 383.344257][T16021] netlink: 'syz.3.2647': attribute type 4 has an invalid length. [ 383.537679][T16025] lo speed is unknown, defaulting to 1000 [ 383.633330][T16036] FAULT_INJECTION: forcing a failure. [ 383.633330][T16036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.659155][T16036] CPU: 1 UID: 0 PID: 16036 Comm: syz.3.2652 Not tainted syzkaller #0 PREEMPT(full) [ 383.659197][T16036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.659211][T16036] Call Trace: [ 383.659218][T16036] [ 383.659227][T16036] dump_stack_lvl+0x189/0x250 [ 383.659253][T16036] ? __pfx____ratelimit+0x10/0x10 [ 383.659273][T16036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.659292][T16036] ? __pfx__printk+0x10/0x10 [ 383.659313][T16036] ? __might_fault+0xb0/0x130 [ 383.659345][T16036] should_fail_ex+0x414/0x560 [ 383.659373][T16036] _copy_from_user+0x2d/0xb0 [ 383.659393][T16036] ___sys_sendmsg+0x158/0x2a0 [ 383.659415][T16036] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.659472][T16036] ? __fget_files+0x2a/0x420 [ 383.659486][T16036] ? __fget_files+0x3a0/0x420 [ 383.659512][T16036] __x64_sys_sendmsg+0x19b/0x260 [ 383.659534][T16036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.659563][T16036] ? __pfx_ksys_write+0x10/0x10 [ 383.659582][T16036] ? rcu_is_watching+0x15/0xb0 [ 383.659604][T16036] ? do_syscall_64+0xbe/0x3b0 [ 383.659627][T16036] do_syscall_64+0xfa/0x3b0 [ 383.659644][T16036] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.659661][T16036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.659675][T16036] ? clear_bhb_loop+0x60/0xb0 [ 383.659695][T16036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.659715][T16036] RIP: 0033:0x7f3f5378eba9 [ 383.659731][T16036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.659746][T16036] RSP: 002b:00007f3f5464b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.659765][T16036] RAX: ffffffffffffffda RBX: 00007f3f539d5fa0 RCX: 00007f3f5378eba9 [ 383.659778][T16036] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 383.659790][T16036] RBP: 00007f3f5464b090 R08: 0000000000000000 R09: 0000000000000000 [ 383.659801][T16036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.659811][T16036] R13: 00007f3f539d6038 R14: 00007f3f539d5fa0 R15: 00007ffe99bb5648 [ 383.659843][T16036] [ 383.964145][T16025] wg1 speed is unknown, defaulting to 1000 [ 383.982787][T16046] __nla_validate_parse: 27 callbacks suppressed [ 383.982816][T16046] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2653'. [ 384.391470][T16067] bridge_slave_0: default FDB implementation only supports local addresses [ 384.712916][T16085] FAULT_INJECTION: forcing a failure. [ 384.712916][T16085] name failslab, interval 1, probability 0, space 0, times 0 [ 384.736982][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.2.2665 Not tainted syzkaller #0 PREEMPT(full) [ 384.737009][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.737019][T16085] Call Trace: [ 384.737026][T16085] [ 384.737033][T16085] dump_stack_lvl+0x189/0x250 [ 384.737057][T16085] ? __pfx____ratelimit+0x10/0x10 [ 384.737075][T16085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.737092][T16085] ? __pfx__printk+0x10/0x10 [ 384.737118][T16085] ? __pfx___might_resched+0x10/0x10 [ 384.737138][T16085] should_fail_ex+0x414/0x560 [ 384.737165][T16085] should_failslab+0xa8/0x100 [ 384.737188][T16085] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 384.737209][T16085] ? __alloc_skb+0x112/0x2d0 [ 384.737231][T16085] __alloc_skb+0x112/0x2d0 [ 384.737252][T16085] netlink_sendmsg+0x5c6/0xb30 [ 384.737281][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.737302][T16085] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.737320][T16085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.737337][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.737355][T16085] __sock_sendmsg+0x21c/0x270 [ 384.737380][T16085] ____sys_sendmsg+0x505/0x830 [ 384.737406][T16085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.737434][T16085] ? import_iovec+0x74/0xa0 [ 384.737456][T16085] ___sys_sendmsg+0x21f/0x2a0 [ 384.737477][T16085] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.737527][T16085] ? __fget_files+0x2a/0x420 [ 384.737540][T16085] ? __fget_files+0x3a0/0x420 [ 384.737560][T16085] __x64_sys_sendmsg+0x19b/0x260 [ 384.737577][T16085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.737600][T16085] ? __pfx_ksys_write+0x10/0x10 [ 384.737615][T16085] ? rcu_is_watching+0x15/0xb0 [ 384.737632][T16085] ? do_syscall_64+0xbe/0x3b0 [ 384.737655][T16085] do_syscall_64+0xfa/0x3b0 [ 384.737668][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.737682][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.737694][T16085] ? clear_bhb_loop+0x60/0xb0 [ 384.737721][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.737733][T16085] RIP: 0033:0x7ff99b58eba9 [ 384.737746][T16085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.737757][T16085] RSP: 002b:00007ff99c36f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.737773][T16085] RAX: ffffffffffffffda RBX: 00007ff99b7d5fa0 RCX: 00007ff99b58eba9 [ 384.737782][T16085] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 384.737791][T16085] RBP: 00007ff99c36f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.737799][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.737807][T16085] R13: 00007ff99b7d6038 R14: 00007ff99b7d5fa0 R15: 00007ffcf91c69e8 [ 384.737829][T16085] [ 385.019321][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 385.076763][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'. [ 385.318161][T16108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2671'. [ 385.387437][T16108] netlink: 'syz.4.2671': attribute type 7 has an invalid length. [ 385.401271][T16108] netlink: 'syz.4.2671': attribute type 8 has an invalid length. [ 385.419154][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2671'. [ 385.458295][T16120] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 385.483464][T16120] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2675'. [ 385.498792][T16120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.652121][T16133] ip6tnl2: entered promiscuous mode [ 385.657368][T16133] ip6tnl2: entered allmulticast mode [ 385.684632][T16136] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2682'. [ 385.697631][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2682'. [ 385.712849][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2682'. [ 385.735491][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2681'. [ 385.839237][T16145] macsec1: entered promiscuous mode [ 385.849468][T16145] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 385.864495][T16145] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 385.972384][T16150] vxcan4: entered promiscuous mode [ 386.134195][T16168] FAULT_INJECTION: forcing a failure. [ 386.134195][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.175805][T16168] CPU: 1 UID: 0 PID: 16168 Comm: syz.0.2690 Not tainted syzkaller #0 PREEMPT(full) [ 386.175829][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.175839][T16168] Call Trace: [ 386.175847][T16168] [ 386.175861][T16168] dump_stack_lvl+0x189/0x250 [ 386.175886][T16168] ? __pfx____ratelimit+0x10/0x10 [ 386.175903][T16168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.175919][T16168] ? __pfx__printk+0x10/0x10 [ 386.175938][T16168] ? __might_fault+0xb0/0x130 [ 386.175967][T16168] should_fail_ex+0x414/0x560 [ 386.175990][T16168] _copy_from_iter+0x1de/0x1790 [ 386.176014][T16168] ? rcu_is_watching+0x15/0xb0 [ 386.176031][T16168] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 386.176050][T16168] ? __pfx__copy_from_iter+0x10/0x10 [ 386.176066][T16168] ? __build_skb_around+0x257/0x3e0 [ 386.176085][T16168] ? netlink_sendmsg+0x642/0xb30 [ 386.176101][T16168] ? skb_put+0x11b/0x210 [ 386.176122][T16168] netlink_sendmsg+0x6b2/0xb30 [ 386.176149][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.176171][T16168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.176190][T16168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.176206][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.176224][T16168] __sock_sendmsg+0x21c/0x270 [ 386.176247][T16168] ____sys_sendmsg+0x505/0x830 [ 386.176270][T16168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.176296][T16168] ? import_iovec+0x74/0xa0 [ 386.176316][T16168] ___sys_sendmsg+0x21f/0x2a0 [ 386.176336][T16168] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.176386][T16168] ? __fget_files+0x2a/0x420 [ 386.176417][T16168] ? __fget_files+0x3a0/0x420 [ 386.176440][T16168] __x64_sys_sendmsg+0x19b/0x260 [ 386.176460][T16168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.176487][T16168] ? __pfx_ksys_write+0x10/0x10 [ 386.176504][T16168] ? rcu_is_watching+0x15/0xb0 [ 386.176523][T16168] ? do_syscall_64+0xbe/0x3b0 [ 386.176543][T16168] do_syscall_64+0xfa/0x3b0 [ 386.176558][T16168] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.176573][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.176588][T16168] ? clear_bhb_loop+0x60/0xb0 [ 386.176605][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.176619][T16168] RIP: 0033:0x7fdda9d8eba9 [ 386.176634][T16168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.176647][T16168] RSP: 002b:00007fddaac5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.176664][T16168] RAX: ffffffffffffffda RBX: 00007fdda9fd5fa0 RCX: 00007fdda9d8eba9 [ 386.176676][T16168] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 386.176685][T16168] RBP: 00007fddaac5c090 R08: 0000000000000000 R09: 0000000000000000 [ 386.176694][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.176701][T16168] R13: 00007fdda9fd6038 R14: 00007fdda9fd5fa0 R15: 00007ffe37993858 [ 386.176722][T16168] [ 386.740618][T16175] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 386.755061][T16175] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 386.794217][T16185] geneve0: left allmulticast mode [ 386.803171][T16185] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 386.810417][T16185] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 386.818497][T16185] sit2: left promiscuous mode [ 386.872718][T16185] geneve4: left promiscuous mode [ 386.877712][T16185] geneve4: left allmulticast mode [ 386.889154][T16190] FAULT_INJECTION: forcing a failure. [ 386.889154][T16190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.905708][T16190] CPU: 1 UID: 0 PID: 16190 Comm: syz.0.2697 Not tainted syzkaller #0 PREEMPT(full) [ 386.905734][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.905744][T16190] Call Trace: [ 386.905751][T16190] [ 386.905759][T16190] dump_stack_lvl+0x189/0x250 [ 386.905789][T16190] ? __pfx____ratelimit+0x10/0x10 [ 386.905808][T16190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.905828][T16190] ? __pfx__printk+0x10/0x10 [ 386.905849][T16190] ? __might_fault+0xb0/0x130 [ 386.905881][T16190] should_fail_ex+0x414/0x560 [ 386.905907][T16190] _copy_from_iter+0x1de/0x1790 [ 386.905932][T16190] ? rcu_is_watching+0x15/0xb0 [ 386.905950][T16190] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 386.905974][T16190] ? __pfx__copy_from_iter+0x10/0x10 [ 386.905994][T16190] ? __build_skb_around+0x257/0x3e0 [ 386.906015][T16190] ? netlink_sendmsg+0x642/0xb30 [ 386.906031][T16190] ? skb_put+0x11b/0x210 [ 386.906053][T16190] netlink_sendmsg+0x6b2/0xb30 [ 386.906080][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.906102][T16190] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.906120][T16190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.906138][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.906158][T16190] __sock_sendmsg+0x21c/0x270 [ 386.906184][T16190] ____sys_sendmsg+0x505/0x830 [ 386.906209][T16190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.906238][T16190] ? import_iovec+0x74/0xa0 [ 386.906261][T16190] ___sys_sendmsg+0x21f/0x2a0 [ 386.906283][T16190] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.906340][T16190] ? __fget_files+0x2a/0x420 [ 386.906355][T16190] ? __fget_files+0x3a0/0x420 [ 386.906381][T16190] __x64_sys_sendmsg+0x19b/0x260 [ 386.906403][T16190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.906433][T16190] ? __pfx_ksys_write+0x10/0x10 [ 386.906451][T16190] ? rcu_is_watching+0x15/0xb0 [ 386.906473][T16190] ? do_syscall_64+0xbe/0x3b0 [ 386.906495][T16190] do_syscall_64+0xfa/0x3b0 [ 386.906512][T16190] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.906529][T16190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.906545][T16190] ? clear_bhb_loop+0x60/0xb0 [ 386.906565][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.906582][T16190] RIP: 0033:0x7fdda9d8eba9 [ 386.906597][T16190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.906611][T16190] RSP: 002b:00007fddaac5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.906630][T16190] RAX: ffffffffffffffda RBX: 00007fdda9fd5fa0 RCX: 00007fdda9d8eba9 [ 386.906643][T16190] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.906654][T16190] RBP: 00007fddaac5c090 R08: 0000000000000000 R09: 0000000000000000 [ 386.906665][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.906680][T16190] R13: 00007fdda9fd6038 R14: 00007fdda9fd5fa0 R15: 00007ffe37993858 [ 386.906709][T16190] [ 387.239320][T12660] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.262005][T16193] netlink: 'syz.4.2698': attribute type 11 has an invalid length. [ 387.271452][T12660] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.295341][T16193] netlink: 'syz.4.2698': attribute type 4 has an invalid length. [ 387.315256][T12660] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.328101][T12660] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.472212][T16201] nbd: socks must be embedded in a SOCK_ITEM attr [ 388.099034][T16237] FAULT_INJECTION: forcing a failure. [ 388.099034][T16237] name failslab, interval 1, probability 0, space 0, times 0 [ 388.119390][T16237] CPU: 0 UID: 0 PID: 16237 Comm: syz.4.2710 Not tainted syzkaller #0 PREEMPT(full) [ 388.119428][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.119438][T16237] Call Trace: [ 388.119445][T16237] [ 388.119453][T16237] dump_stack_lvl+0x189/0x250 [ 388.119475][T16237] ? __pfx____ratelimit+0x10/0x10 [ 388.119493][T16237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.119511][T16237] ? __pfx__printk+0x10/0x10 [ 388.119538][T16237] ? __pfx___might_resched+0x10/0x10 [ 388.119553][T16237] ? fs_reclaim_acquire+0x7d/0x100 [ 388.119573][T16237] should_fail_ex+0x414/0x560 [ 388.119598][T16237] should_failslab+0xa8/0x100 [ 388.119622][T16237] __kmalloc_noprof+0xcb/0x4f0 [ 388.119642][T16237] ? fib_create_info+0x1728/0x3210 [ 388.119662][T16237] fib_create_info+0x1728/0x3210 [ 388.119682][T16237] ? rcu_is_watching+0x15/0xb0 [ 388.119702][T16237] ? __mutex_lock+0x335/0x1350 [ 388.119721][T16237] ? __lock_acquire+0xab9/0xd20 [ 388.119754][T16237] fib_table_insert+0xc6/0x1b50 [ 388.119771][T16237] ? lwtunnel_valid_encap_type+0xb7/0x210 [ 388.119795][T16237] ? __pfx___mutex_lock+0x10/0x10 [ 388.119811][T16237] ? rtm_to_fib_config+0x107f/0x13c0 [ 388.119855][T16237] inet_rtm_newroute+0x12b/0x210 [ 388.119877][T16237] ? __lock_acquire+0xab9/0xd20 [ 388.119900][T16237] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 388.119945][T16237] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 388.119966][T16237] rtnetlink_rcv_msg+0x7cc/0xb70 [ 388.119983][T16237] ? __lock_acquire+0xab9/0xd20 [ 388.120007][T16237] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 388.120024][T16237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.120057][T16237] netlink_rcv_skb+0x208/0x470 [ 388.120074][T16237] ? __lock_acquire+0xab9/0xd20 [ 388.120097][T16237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.120116][T16237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.120142][T16237] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.120162][T16237] netlink_unicast+0x82f/0x9e0 [ 388.120192][T16237] ? __pfx_netlink_unicast+0x10/0x10 [ 388.120216][T16237] ? netlink_sendmsg+0x642/0xb30 [ 388.120231][T16237] ? skb_put+0x11b/0x210 [ 388.120252][T16237] netlink_sendmsg+0x805/0xb30 [ 388.120277][T16237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.120296][T16237] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.120313][T16237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.120330][T16237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.120347][T16237] __sock_sendmsg+0x21c/0x270 [ 388.120373][T16237] ____sys_sendmsg+0x505/0x830 [ 388.120399][T16237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.120437][T16237] ? import_iovec+0x74/0xa0 [ 388.120460][T16237] ___sys_sendmsg+0x21f/0x2a0 [ 388.120480][T16237] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.120537][T16237] ? __fget_files+0x2a/0x420 [ 388.120552][T16237] ? __fget_files+0x3a0/0x420 [ 388.120578][T16237] __x64_sys_sendmsg+0x19b/0x260 [ 388.120600][T16237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.120631][T16237] ? __pfx_ksys_write+0x10/0x10 [ 388.120649][T16237] ? rcu_is_watching+0x15/0xb0 [ 388.120670][T16237] ? do_syscall_64+0xbe/0x3b0 [ 388.120692][T16237] do_syscall_64+0xfa/0x3b0 [ 388.120707][T16237] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.120724][T16237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.120740][T16237] ? clear_bhb_loop+0x60/0xb0 [ 388.120764][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.120777][T16237] RIP: 0033:0x7fdf2a78eba9 [ 388.120793][T16237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.120809][T16237] RSP: 002b:00007fdf2b67f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.120828][T16237] RAX: ffffffffffffffda RBX: 00007fdf2a9d5fa0 RCX: 00007fdf2a78eba9 [ 388.120841][T16237] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 388.120851][T16237] RBP: 00007fdf2b67f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.120860][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.120870][T16237] R13: 00007fdf2a9d6038 R14: 00007fdf2a9d5fa0 R15: 00007ffc98c47358 [ 388.120895][T16237] [ 388.619670][T16235] lo speed is unknown, defaulting to 1000 [ 388.653155][T16235] wg1 speed is unknown, defaulting to 1000 [ 389.135550][T16262] __nla_validate_parse: 6 callbacks suppressed [ 389.135568][T16262] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2717'. [ 389.169979][T16262] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2717'. [ 389.189174][T16262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2717'. [ 389.341446][T16265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.399171][T16272] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 389.407432][ T5938] lo speed is unknown, defaulting to 1000 [ 389.440599][ T5938] syz2: Port: 1 Link ACTIVE [ 389.454810][T16264] lo speed is unknown, defaulting to 1000 [ 389.647768][T16264] wg1 speed is unknown, defaulting to 1000 [ 389.798493][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2727'. [ 389.889250][T16305] pim6reg: left allmulticast mode [ 389.953656][T16307] tipc: Enabling of bearer rejected, already enabled [ 390.126185][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 390.195072][T16318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2731'. [ 390.397549][T16331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2737'. [ 390.414053][T16331] netlink: 'syz.1.2737': attribute type 1 has an invalid length. [ 390.430109][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'. [ 390.451657][T16336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2738'. [ 390.940436][T16368] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 390.987388][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'. [ 391.223054][T16383] netlink: 'syz.2.2752': attribute type 21 has an invalid length. [ 391.448534][T16396] netlink: 'syz.4.2757': attribute type 10 has an invalid length. [ 391.477843][T16396] : (slave team0): Releasing backup interface [ 391.510356][T16396] team0: Cannot enslave team device to itself [ 391.623468][T16396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.684380][T16398] bond0: (slave rose0): Error: Device can not be enslaved while up [ 391.726862][T16407] lo speed is unknown, defaulting to 1000 [ 391.742582][T16417] tipc: Enabling of bearer rejected, already enabled [ 391.759843][T16417] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 391.788941][T16417] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 391.851094][T16407] wg1 speed is unknown, defaulting to 1000 [ 391.864595][T16419] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 391.900101][T16419] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 391.929633][T16419] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 392.014313][T16417] syzkaller0: mtu greater than device maximum [ 392.213786][T16431] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 392.246712][T16431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.265717][T16431] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 392.276604][T16431] bond4: (slave batadv1): making interface the new active one [ 392.286431][T16431] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 392.730115][T16454] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 392.749964][T16454] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 392.783661][T16461] tipc: Enabling of bearer rejected, already enabled [ 392.826558][T16461] syzkaller0: mtu greater than device maximum [ 392.902602][T16464] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 392.941740][T16464] netlink: 'syz.4.2777': attribute type 2 has an invalid length. [ 392.951270][T16464] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 392.973852][T16475] FAULT_INJECTION: forcing a failure. [ 392.973852][T16475] name failslab, interval 1, probability 0, space 0, times 0 [ 392.990364][T16464] netlink: 'syz.4.2777': attribute type 2 has an invalid length. [ 393.015914][T16475] CPU: 1 UID: 0 PID: 16475 Comm: syz.1.2780 Not tainted syzkaller #0 PREEMPT(full) [ 393.015942][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.015952][T16475] Call Trace: [ 393.015968][T16475] [ 393.015976][T16475] dump_stack_lvl+0x189/0x250 [ 393.016001][T16475] ? __pfx____ratelimit+0x10/0x10 [ 393.016020][T16475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.016039][T16475] ? __pfx__printk+0x10/0x10 [ 393.016067][T16475] ? __pfx___might_resched+0x10/0x10 [ 393.016082][T16475] ? fs_reclaim_acquire+0x7d/0x100 [ 393.016103][T16475] should_fail_ex+0x414/0x560 [ 393.016130][T16475] should_failslab+0xa8/0x100 [ 393.016155][T16475] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 393.016178][T16475] ? kasprintf+0xd4/0x120 [ 393.016202][T16475] kvasprintf+0xdc/0x190 [ 393.016219][T16475] ? __kmalloc_noprof+0x27a/0x4f0 [ 393.016237][T16475] ? nla_strdup+0x9d/0x140 [ 393.016250][T16475] ? nf_tables_newset+0x136a/0x2530 [ 393.016271][T16475] ? __pfx_kvasprintf+0x10/0x10 [ 393.016287][T16475] ? ____sys_sendmsg+0x505/0x830 [ 393.016307][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.016336][T16475] kasprintf+0xd4/0x120 [ 393.016361][T16475] ? __pfx_kasprintf+0x10/0x10 [ 393.016394][T16475] nf_tables_set_alloc_name+0x109/0x720 [ 393.016419][T16475] ? rcu_is_watching+0x15/0xb0 [ 393.016438][T16475] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 393.016452][T16475] ? nla_strdup+0xb8/0x140 [ 393.016478][T16475] nf_tables_newset+0x138b/0x2530 [ 393.016513][T16475] ? __pfx_nf_tables_newset+0x10/0x10 [ 393.016556][T16475] ? __nla_parse+0x40/0x60 [ 393.016576][T16475] nfnetlink_rcv+0x1132/0x2520 [ 393.016632][T16475] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 393.016708][T16475] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.016746][T16475] netlink_unicast+0x82f/0x9e0 [ 393.016778][T16475] ? __pfx_netlink_unicast+0x10/0x10 [ 393.016803][T16475] ? netlink_sendmsg+0x642/0xb30 [ 393.016818][T16475] ? skb_put+0x11b/0x210 [ 393.016841][T16475] netlink_sendmsg+0x805/0xb30 [ 393.016869][T16475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.016890][T16475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 393.016910][T16475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.016927][T16475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.016946][T16475] __sock_sendmsg+0x21c/0x270 [ 393.016979][T16475] ____sys_sendmsg+0x505/0x830 [ 393.017005][T16475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.017034][T16475] ? import_iovec+0x74/0xa0 [ 393.017057][T16475] ___sys_sendmsg+0x21f/0x2a0 [ 393.017080][T16475] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.017138][T16475] ? __fget_files+0x2a/0x420 [ 393.017152][T16475] ? __fget_files+0x3a0/0x420 [ 393.017179][T16475] __x64_sys_sendmsg+0x19b/0x260 [ 393.017202][T16475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.017232][T16475] ? __pfx_ksys_write+0x10/0x10 [ 393.017250][T16475] ? rcu_is_watching+0x15/0xb0 [ 393.017271][T16475] ? do_syscall_64+0xbe/0x3b0 [ 393.017295][T16475] do_syscall_64+0xfa/0x3b0 [ 393.017311][T16475] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.017328][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.017345][T16475] ? clear_bhb_loop+0x60/0xb0 [ 393.017366][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.017382][T16475] RIP: 0033:0x7f151898eba9 [ 393.017397][T16475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.017412][T16475] RSP: 002b:00007f15198a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.017430][T16475] RAX: ffffffffffffffda RBX: 00007f1518bd5fa0 RCX: 00007f151898eba9 [ 393.017442][T16475] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 393.017454][T16475] RBP: 00007f15198a0090 R08: 0000000000000000 R09: 0000000000000000 [ 393.017464][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.017474][T16475] R13: 00007f1518bd6038 R14: 00007f1518bd5fa0 R15: 00007fffa6208978 [ 393.017504][T16475] [ 393.983824][T16494] netlink: 'syz.3.2788': attribute type 1 has an invalid length. [ 394.016783][T16494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.299392][T16512] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 394.658907][T16524] __nla_validate_parse: 16 callbacks suppressed [ 394.658927][T16524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2794'. [ 394.694589][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 394.788622][T16530] FAULT_INJECTION: forcing a failure. [ 394.788622][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 394.817979][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.0.2796 Not tainted syzkaller #0 PREEMPT(full) [ 394.818005][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.818015][T16530] Call Trace: [ 394.818022][T16530] [ 394.818030][T16530] dump_stack_lvl+0x189/0x250 [ 394.818053][T16530] ? __pfx____ratelimit+0x10/0x10 [ 394.818072][T16530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.818092][T16530] ? __pfx__printk+0x10/0x10 [ 394.818119][T16530] ? __pfx___might_resched+0x10/0x10 [ 394.818134][T16530] ? fs_reclaim_acquire+0x7d/0x100 [ 394.818155][T16530] should_fail_ex+0x414/0x560 [ 394.818181][T16530] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 394.818197][T16530] should_failslab+0xa8/0x100 [ 394.818221][T16530] __kvmalloc_node_noprof+0x161/0x5f0 [ 394.818244][T16530] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 394.818268][T16530] rhashtable_init_noprof+0x4ee/0xbb0 [ 394.818291][T16530] nft_rhash_init+0x10b/0x3a0 [ 394.818314][T16530] ? __pfx_nft_rhash_init+0x10/0x10 [ 394.818332][T16530] ? __pfx_nft_rhash_key+0x10/0x10 [ 394.818348][T16530] ? __pfx_nft_rhash_obj+0x10/0x10 [ 394.818364][T16530] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 394.818385][T16530] ? nf_tables_newset+0x1396/0x2530 [ 394.818404][T16530] ? kfree+0x18e/0x440 [ 394.818428][T16530] nf_tables_newset+0x1c04/0x2530 [ 394.818462][T16530] ? __pfx_nf_tables_newset+0x10/0x10 [ 394.818506][T16530] ? __nla_parse+0x40/0x60 [ 394.818528][T16530] nfnetlink_rcv+0x1132/0x2520 [ 394.818583][T16530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 394.818659][T16530] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.818696][T16530] netlink_unicast+0x82f/0x9e0 [ 394.818730][T16530] ? __pfx_netlink_unicast+0x10/0x10 [ 394.818755][T16530] ? netlink_sendmsg+0x642/0xb30 [ 394.818770][T16530] ? skb_put+0x11b/0x210 [ 394.818792][T16530] netlink_sendmsg+0x805/0xb30 [ 394.818826][T16530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.818847][T16530] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.818864][T16530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.818881][T16530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.818899][T16530] __sock_sendmsg+0x21c/0x270 [ 394.818924][T16530] ____sys_sendmsg+0x505/0x830 [ 394.818950][T16530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.818983][T16530] ? import_iovec+0x74/0xa0 [ 394.819005][T16530] ___sys_sendmsg+0x21f/0x2a0 [ 394.819028][T16530] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.819084][T16530] ? __fget_files+0x2a/0x420 [ 394.819099][T16530] ? __fget_files+0x3a0/0x420 [ 394.819126][T16530] __x64_sys_sendmsg+0x19b/0x260 [ 394.819148][T16530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.819180][T16530] ? rcu_is_watching+0x15/0xb0 [ 394.819198][T16530] ? trace_sys_enter+0x25/0x100 [ 394.819227][T16530] do_syscall_64+0xfa/0x3b0 [ 394.819245][T16530] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.819262][T16530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.819279][T16530] ? clear_bhb_loop+0x60/0xb0 [ 394.819299][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.819315][T16530] RIP: 0033:0x7fdda9d8eba9 [ 394.819331][T16530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.819344][T16530] RSP: 002b:00007fddaac5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.819361][T16530] RAX: ffffffffffffffda RBX: 00007fdda9fd5fa0 RCX: 00007fdda9d8eba9 [ 394.819372][T16530] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 394.819382][T16530] RBP: 00007fddaac5c090 R08: 0000000000000000 R09: 0000000000000000 [ 394.819392][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.819402][T16530] R13: 00007fdda9fd6038 R14: 00007fdda9fd5fa0 R15: 00007ffe37993858 [ 394.819433][T16530] [ 395.348522][T16492] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2782'. [ 395.606572][T16541] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2799'. [ 396.151675][T16568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2805'. [ 396.194956][T16571] sctp: [Deprecated]: syz.4.2804 (pid 16571) Use of int in max_burst socket option. [ 396.194956][T16571] Use struct sctp_assoc_value instead [ 396.217191][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 396.226908][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 396.237164][T16570] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2806'. [ 396.237559][T16573] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 396.254737][T16573] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 396.276124][T16573] vlan0: left promiscuous mode [ 396.281938][T16573] macvlan3: left promiscuous mode [ 396.308420][T16575] netlink: 'syz.2.2808': attribute type 4 has an invalid length. [ 396.316290][T16575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2808'. [ 396.337384][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2809'. [ 396.636519][T16591] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 396.732483][T16594] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 396.744438][T16594] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 396.772997][T16591] gretap2: entered promiscuous mode [ 396.784754][T16597] lo speed is unknown, defaulting to 1000 [ 396.793443][T16597] wg1 speed is unknown, defaulting to 1000 [ 396.845487][T16604] lo speed is unknown, defaulting to 1000 [ 396.894192][T16591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.940907][T16604] wg1 speed is unknown, defaulting to 1000 [ 397.224531][T16622] tipc: Enabling of bearer rejected, already enabled [ 397.619560][T16646] netlink: 'syz.2.2826': attribute type 13 has an invalid length. [ 397.644264][T16646] netlink: 'syz.2.2826': attribute type 17 has an invalid length. [ 397.897918][T16646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.956682][T16641] bond3: entered promiscuous mode [ 397.962299][T16641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 398.198086][T16664] lo speed is unknown, defaulting to 1000 [ 398.229542][T16664] wg1 speed is unknown, defaulting to 1000 [ 398.470030][T16692] FAULT_INJECTION: forcing a failure. [ 398.470030][T16692] name failslab, interval 1, probability 0, space 0, times 0 [ 398.519096][T16692] CPU: 0 UID: 0 PID: 16692 Comm: syz.3.2838 Not tainted syzkaller #0 PREEMPT(full) [ 398.519123][T16692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.519132][T16692] Call Trace: [ 398.519140][T16692] [ 398.519148][T16692] dump_stack_lvl+0x189/0x250 [ 398.519173][T16692] ? __pfx____ratelimit+0x10/0x10 [ 398.519191][T16692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.519211][T16692] ? __pfx__printk+0x10/0x10 [ 398.519239][T16692] ? __pfx___might_resched+0x10/0x10 [ 398.519255][T16692] ? fs_reclaim_acquire+0x7d/0x100 [ 398.519277][T16692] should_fail_ex+0x414/0x560 [ 398.519304][T16692] should_failslab+0xa8/0x100 [ 398.519328][T16692] __kmalloc_cache_noprof+0x70/0x3d0 [ 398.519348][T16692] ? nft_connlimit_do_init+0x11b/0x2e0 [ 398.519365][T16692] ? rcu_is_watching+0x15/0xb0 [ 398.519387][T16692] nft_connlimit_do_init+0x11b/0x2e0 [ 398.519404][T16692] ? nft_connlimit_init+0x17/0x30 [ 398.519424][T16692] nft_set_elem_expr_alloc+0x1d8/0x590 [ 398.519451][T16692] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 398.519489][T16692] ? nft_rhash_init+0x2b3/0x3a0 [ 398.519510][T16692] ? __pfx_nft_rhash_init+0x10/0x10 [ 398.519527][T16692] ? __pfx_nft_rhash_key+0x10/0x10 [ 398.519543][T16692] ? __pfx_nft_rhash_obj+0x10/0x10 [ 398.519559][T16692] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 398.519581][T16692] nft_set_expr_alloc+0x68/0x760 [ 398.519596][T16692] ? kfree+0x18e/0x440 [ 398.519620][T16692] nf_tables_newset+0x1c47/0x2530 [ 398.519655][T16692] ? __pfx_nf_tables_newset+0x10/0x10 [ 398.519706][T16692] ? __nla_parse+0x40/0x60 [ 398.519727][T16692] nfnetlink_rcv+0x1132/0x2520 [ 398.519789][T16692] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 398.519865][T16692] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.519903][T16692] netlink_unicast+0x82f/0x9e0 [ 398.519936][T16692] ? __pfx_netlink_unicast+0x10/0x10 [ 398.519961][T16692] ? netlink_sendmsg+0x642/0xb30 [ 398.519976][T16692] ? skb_put+0x11b/0x210 [ 398.519999][T16692] netlink_sendmsg+0x805/0xb30 [ 398.520028][T16692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.520049][T16692] ? aa_sock_msg_perm+0xf1/0x1d0 [ 398.520069][T16692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.520086][T16692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.520105][T16692] __sock_sendmsg+0x21c/0x270 [ 398.520132][T16692] ____sys_sendmsg+0x505/0x830 [ 398.520159][T16692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.520190][T16692] ? import_iovec+0x74/0xa0 [ 398.520213][T16692] ___sys_sendmsg+0x21f/0x2a0 [ 398.520236][T16692] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.520293][T16692] ? __fget_files+0x2a/0x420 [ 398.520307][T16692] ? __fget_files+0x3a0/0x420 [ 398.520331][T16692] __x64_sys_sendmsg+0x19b/0x260 [ 398.520352][T16692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.520379][T16692] ? __pfx_ksys_write+0x10/0x10 [ 398.520398][T16692] ? rcu_is_watching+0x15/0xb0 [ 398.520420][T16692] ? do_syscall_64+0xbe/0x3b0 [ 398.520444][T16692] do_syscall_64+0xfa/0x3b0 [ 398.520460][T16692] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.520478][T16692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.520495][T16692] ? clear_bhb_loop+0x60/0xb0 [ 398.520516][T16692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.520532][T16692] RIP: 0033:0x7f3f5378eba9 [ 398.520548][T16692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.520562][T16692] RSP: 002b:00007f3f5464b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.520581][T16692] RAX: ffffffffffffffda RBX: 00007f3f539d5fa0 RCX: 00007f3f5378eba9 [ 398.520594][T16692] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 398.520605][T16692] RBP: 00007f3f5464b090 R08: 0000000000000000 R09: 0000000000000000 [ 398.520616][T16692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.520627][T16692] R13: 00007f3f539d6038 R14: 00007f3f539d5fa0 R15: 00007ffe99bb5648 [ 398.520658][T16692] [ 399.144558][T16700] lo speed is unknown, defaulting to 1000 [ 399.152246][T16700] wg1 speed is unknown, defaulting to 1000 [ 399.555942][T16724] nbd: must specify a size in bytes for the device [ 399.823960][T16734] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 400.067758][T16735] bond0: (slave gretap0): Opening slave failed [ 400.166650][T16742] __nla_validate_parse: 5 callbacks suppressed [ 400.166670][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 400.375447][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2856'. [ 400.552205][T16770] netlink: 'syz.3.2860': attribute type 4 has an invalid length. [ 400.578408][T16770] netlink: 'syz.3.2860': attribute type 4 has an invalid length. [ 400.579988][T16774] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 400.627421][T16774] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 400.649471][T16772] syzkaller1: entered promiscuous mode [ 400.665640][T16772] syzkaller1: entered allmulticast mode [ 400.671453][T16774] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 400.671578][T16774] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 400.754046][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 400.796114][T16779] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 400.806950][T16779] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 400.817143][T16777] lo speed is unknown, defaulting to 1000 [ 400.825384][T16777] wg1 speed is unknown, defaulting to 1000 [ 401.436065][T16802] tipc: Enabling of bearer rejected, already enabled [ 402.002752][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 402.300458][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 402.317038][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 402.318887][T16828] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2873'. [ 402.326166][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 402.326282][T16830] openvswitch: netlink: nsh attr 20 is out of range max 3 [ 402.353002][T16829] openvswitch: netlink: nsh attr 20 is out of range max 3 [ 402.360266][T16829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.382003][T16828] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2873'. [ 402.392349][T16830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.392731][T16833] netlink: 212172 bytes leftover after parsing attributes in process `syz.4.2874'. [ 402.542978][T16837] validate_nla: 29 callbacks suppressed [ 402.542998][T16837] netlink: 'syz.0.2878': attribute type 2 has an invalid length. [ 402.554012][T16835] syzkaller0: entered promiscuous mode [ 402.573110][T16835] syzkaller0: entered allmulticast mode [ 402.629064][T16837] k›*·: entered promiscuous mode [ 402.706756][T16840] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.732487][T16840] batman_adv: batadv0: Interface activated: 0! [ 402.753806][T16840] batadv0: mtu less than device minimum [ 402.766512][T16840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 402.778508][T16840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 402.790326][T16840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 402.802265][T16840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 402.814274][T16840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 403.109491][T16861] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 403.229410][T16873] netlink: 'syz.2.2886': attribute type 7 has an invalid length. [ 403.426132][T16895] netlink: 'syz.2.2891': attribute type 32 has an invalid length. [ 403.451434][T16895] (unnamed net_device) (uninitialized): option coupled_control: invalid value (24) [ 403.518552][T16897] netlink: 'syz.0.2892': attribute type 11 has an invalid length. [ 404.292609][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 210 seconds [ 404.303862][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 210 seconds [ 404.315748][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 210 seconds [ 404.327734][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 210 seconds [ 404.378655][T16920] lo speed is unknown, defaulting to 1000 [ 404.482035][T16920] wg1 speed is unknown, defaulting to 1000 [ 404.967780][T16949] batman_adv: batadv0: Removing interface: ipvlan1 [ 404.993590][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.997578][T16949] batman_adv: batadv0: Removing interface: ipvlan2 [ 405.011731][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.053245][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.087951][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.096161][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.183485][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.191055][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.199803][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.212037][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.222563][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.302157][T16956] lo speed is unknown, defaulting to 1000 [ 405.309594][T16956] wg1 speed is unknown, defaulting to 1000 [ 405.370176][T16968] __nla_validate_parse: 11 callbacks suppressed [ 405.370192][T16968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2911'. [ 405.760346][T16956] chnl_net:caif_netlink_parms(): no params data found [ 405.786131][T16990] FAULT_INJECTION: forcing a failure. [ 405.786131][T16990] name failslab, interval 1, probability 0, space 0, times 0 [ 405.801299][T16990] CPU: 1 UID: 0 PID: 16990 Comm: syz.2.2917 Not tainted syzkaller #0 PREEMPT(full) [ 405.801340][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.801357][T16990] Call Trace: [ 405.801369][T16990] [ 405.801382][T16990] dump_stack_lvl+0x189/0x250 [ 405.801408][T16990] ? __pfx____ratelimit+0x10/0x10 [ 405.801428][T16990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.801448][T16990] ? __pfx__printk+0x10/0x10 [ 405.801476][T16990] ? __pfx___might_resched+0x10/0x10 [ 405.801490][T16990] ? fs_reclaim_acquire+0x7d/0x100 [ 405.801512][T16990] should_fail_ex+0x414/0x560 [ 405.801539][T16990] ? nf_hook_entries_grow+0x27c/0x710 [ 405.801556][T16990] should_failslab+0xa8/0x100 [ 405.801580][T16990] __kvmalloc_node_noprof+0x161/0x5f0 [ 405.801603][T16990] ? nf_hook_entries_grow+0x27c/0x710 [ 405.801627][T16990] nf_hook_entries_grow+0x27c/0x710 [ 405.801661][T16990] __nf_register_net_hook+0x2c9/0x930 [ 405.801685][T16990] ? nf_register_net_hook+0xc8/0x190 [ 405.801706][T16990] nf_register_net_hook+0xb2/0x190 [ 405.801727][T16990] nf_register_net_hooks+0x44/0x1b0 [ 405.801750][T16990] nf_ct_netns_do_get+0x212/0x5a0 [ 405.801772][T16990] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 405.801807][T16990] nft_connlimit_do_init+0x1de/0x2e0 [ 405.801831][T16990] nft_set_elem_expr_alloc+0x1d8/0x590 [ 405.801857][T16990] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 405.801895][T16990] ? nft_rhash_init+0x2b3/0x3a0 [ 405.801916][T16990] ? __pfx_nft_rhash_init+0x10/0x10 [ 405.801934][T16990] ? __pfx_nft_rhash_key+0x10/0x10 [ 405.801950][T16990] ? __pfx_nft_rhash_obj+0x10/0x10 [ 405.801965][T16990] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 405.801988][T16990] nft_set_expr_alloc+0x68/0x760 [ 405.802012][T16990] ? kfree+0x18e/0x440 [ 405.802037][T16990] nf_tables_newset+0x1c47/0x2530 [ 405.802072][T16990] ? __pfx_nf_tables_newset+0x10/0x10 [ 405.802115][T16990] ? __nla_parse+0x40/0x60 [ 405.802136][T16990] nfnetlink_rcv+0x1132/0x2520 [ 405.802195][T16990] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 405.802236][T16990] ? ref_tracker_free+0x63a/0x7d0 [ 405.802294][T16990] ? __netlink_deliver_tap+0x807/0x850 [ 405.802312][T16990] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.802350][T16990] netlink_unicast+0x82f/0x9e0 [ 405.802384][T16990] ? __pfx_netlink_unicast+0x10/0x10 [ 405.802409][T16990] ? netlink_sendmsg+0x642/0xb30 [ 405.802425][T16990] ? skb_put+0x11b/0x210 [ 405.802448][T16990] netlink_sendmsg+0x805/0xb30 [ 405.802477][T16990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.802498][T16990] ? aa_sock_msg_perm+0xf1/0x1d0 [ 405.802518][T16990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.802536][T16990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.802555][T16990] __sock_sendmsg+0x21c/0x270 [ 405.802581][T16990] ____sys_sendmsg+0x505/0x830 [ 405.802608][T16990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.802637][T16990] ? import_iovec+0x74/0xa0 [ 405.802661][T16990] ___sys_sendmsg+0x21f/0x2a0 [ 405.802683][T16990] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.802744][T16990] ? __fget_files+0x2a/0x420 [ 405.802758][T16990] ? __fget_files+0x3a0/0x420 [ 405.802786][T16990] __x64_sys_sendmsg+0x19b/0x260 [ 405.802808][T16990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.802839][T16990] ? __pfx_ksys_write+0x10/0x10 [ 405.802858][T16990] ? rcu_is_watching+0x15/0xb0 [ 405.802881][T16990] ? do_syscall_64+0xbe/0x3b0 [ 405.802904][T16990] do_syscall_64+0xfa/0x3b0 [ 405.802920][T16990] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.802938][T16990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.802955][T16990] ? clear_bhb_loop+0x60/0xb0 [ 405.802976][T16990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.802992][T16990] RIP: 0033:0x7ff99b58eba9 [ 405.803013][T16990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.803027][T16990] RSP: 002b:00007ff99c36f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.803046][T16990] RAX: ffffffffffffffda RBX: 00007ff99b7d5fa0 RCX: 00007ff99b58eba9 [ 405.803059][T16990] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 405.803070][T16990] RBP: 00007ff99c36f090 R08: 0000000000000000 R09: 0000000000000000 [ 405.803081][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.803091][T16990] R13: 00007ff99b7d6038 R14: 00007ff99b7d5fa0 R15: 00007ffcf91c69e8 [ 405.803122][T16990] [ 405.824175][T16984] netlink: 'syz.1.2916': attribute type 10 has an invalid length. [ 406.360751][T16999] tipc: Enabled bearer , priority 0 [ 406.397784][T16996] syzkaller0: entered promiscuous mode [ 406.408712][T17007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2919'. [ 406.418094][T16996] syzkaller0: entered allmulticast mode [ 406.608354][T17017] siw: device registration error -23 [ 407.261182][ T5879] Bluetooth: hci2: command tx timeout [ 407.481136][ T5938] tipc: Node number set to 2955157151 [ 409.026825][T16994] tipc: Resetting bearer [ 409.088760][T16994] tipc: Disabling bearer [ 409.156973][T17039] net_ratelimit: 16 callbacks suppressed [ 409.156989][T17039] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 409.196105][T16956] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.198862][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2926'. [ 409.203789][T16956] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.204006][T16956] bridge_slave_0: entered allmulticast mode [ 409.228085][T16956] bridge_slave_0: entered promiscuous mode [ 409.237655][T16956] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.244994][T16956] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.271488][T16956] bridge_slave_1: entered allmulticast mode [ 409.279292][T16956] bridge_slave_1: entered promiscuous mode [ 409.333151][ T5879] Bluetooth: hci2: command tx timeout [ 409.379111][T16956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.398472][T16956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.474257][T16956] team0: Port device team_slave_0 added [ 409.485321][T16956] team0: Port device team_slave_1 added [ 409.495552][T17049] netlink: 'syz.2.2928': attribute type 4 has an invalid length. [ 409.513879][T17049] netlink: 'syz.2.2928': attribute type 4 has an invalid length. [ 409.552367][ T5947] lo speed is unknown, defaulting to 1000 [ 409.558287][ T5947] syz2: Port: 1 Link DOWN [ 409.566914][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2928'. [ 409.576876][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2928'. [ 409.596341][T16956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.616309][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.649828][T16956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.679267][ T5947] lo speed is unknown, defaulting to 1000 [ 409.688844][ T5947] syz2: Port: 1 Link ACTIVE [ 409.708781][T16956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.732284][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.791288][T16956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.830697][T17051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2929'. [ 409.842110][T17051] netlink: 'syz.0.2929': attribute type 9 has an invalid length. [ 409.851546][T17051] netlink: 'syz.0.2929': attribute type 7 has an invalid length. [ 409.866495][T17051] netlink: 'syz.0.2929': attribute type 8 has an invalid length. [ 410.099445][T16956] hsr_slave_0: entered promiscuous mode [ 410.106768][T16956] hsr_slave_1: entered promiscuous mode [ 410.121406][T16956] debugfs: 'hsr0' already exists in 'hsr' [ 410.127261][T16956] Cannot create hsr debugfs directory [ 410.139699][T17076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.175471][T17076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2932'. [ 410.214882][T17073] batadv0: left promiscuous mode [ 410.219921][T17073] batadv0: left allmulticast mode [ 410.227774][T17073] veth0_to_bond: left allmulticast mode [ 410.233840][T17073] veth1_to_team: left allmulticast mode [ 410.237649][T17080] Bluetooth: MGMT ver 1.23 [ 410.240730][T17073] veth9: left promiscuous mode [ 410.249936][T17073] ip6tnl2: left promiscuous mode [ 410.255132][T17073] ip6tnl2: left allmulticast mode [ 410.280184][T17068] lo speed is unknown, defaulting to 1000 [ 410.347779][ T5947] lo speed is unknown, defaulting to 1000 [ 410.354009][T17068] wg1 speed is unknown, defaulting to 1000 [ 410.380712][T17082] netlink: 'syz.2.2934': attribute type 1 has an invalid length. [ 410.388686][T17082] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2934'. [ 410.413545][ T5947] syz2: Port: 1 Link DOWN [ 410.561866][T17085] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2935'. [ 410.694743][T17087] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2937'. [ 410.786898][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2937'. [ 410.811444][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2937'. [ 410.990242][T17093] syzkaller0: entered promiscuous mode [ 411.003318][T17093] syzkaller0: entered allmulticast mode [ 411.022562][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 411.174708][T17107] bond3: left promiscuous mode [ 411.185843][T17109] ipvlan0: entered promiscuous mode [ 411.297710][T17113] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 411.310287][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 411.411322][ T5879] Bluetooth: hci2: command tx timeout [ 411.633572][T16956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.683246][T16956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.707786][T16956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.714663][T17135] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2949'. [ 411.730603][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2949'. [ 411.742055][T17135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2949'. [ 411.752045][T16956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.992462][T16956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.097403][T16956] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.125107][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.132315][T12665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.169128][T12656] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.176408][T12656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.177317][T17160] netlink: 'syz.4.2955': attribute type 1 has an invalid length. [ 412.325514][T17171] nbd: illegal input index 65508 [ 412.455414][T17169] lo speed is unknown, defaulting to 1000 [ 412.503145][T17169] wg1 speed is unknown, defaulting to 1000 [ 412.678738][T17183] lo speed is unknown, defaulting to 1000 [ 412.956639][T17183] wg1 speed is unknown, defaulting to 1000 [ 413.186708][T16956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.338180][T16956] veth0_vlan: entered promiscuous mode [ 413.359022][T16956] veth1_vlan: entered promiscuous mode [ 413.428320][T16956] veth0_macvtap: entered promiscuous mode [ 413.456585][T16956] veth1_macvtap: entered promiscuous mode [ 413.487979][T16956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.494212][ T5879] Bluetooth: hci2: command tx timeout [ 413.514281][T16956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.587179][T12661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.599616][T17207] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 413.609789][T17207] netlink: 'syz.1.2966': attribute type 2 has an invalid length. [ 413.635363][T12661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.644882][T12661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.671929][T12661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.311689][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.321267][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.332222][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.341547][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.349676][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.357260][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.374788][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.382389][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.393266][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.402039][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.421720][ T5873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.451370][ T5876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 428.459603][T17221] lo speed is unknown, defaulting to 1000 [ 428.471371][ T5876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 428.475586][T17221] wg1 speed is unknown, defaulting to 1000 [ 428.482155][T17223] lo speed is unknown, defaulting to 1000 [ 428.495584][ T5876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 428.498194][T17223] wg1 speed is unknown, defaulting to 1000 [ 428.503411][ T5876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 428.607551][T17225] lo speed is unknown, defaulting to 1000 [ 428.620062][T17225] wg1 speed is unknown, defaulting to 1000 [ 428.837024][T17221] chnl_net:caif_netlink_parms(): no params data found [ 428.930062][T17223] chnl_net:caif_netlink_parms(): no params data found [ 429.080470][T17221] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.088222][T17221] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.096020][T17221] bridge_slave_0: entered allmulticast mode [ 429.104084][T17221] bridge_slave_0: entered promiscuous mode [ 429.126717][T17221] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.134871][T17221] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.142288][T17221] bridge_slave_1: entered allmulticast mode [ 429.149298][T17221] bridge_slave_1: entered promiscuous mode [ 429.176925][T17223] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.184380][T17223] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.191947][T17223] bridge_slave_0: entered allmulticast mode [ 429.198974][T17223] bridge_slave_0: entered promiscuous mode [ 429.220636][T17225] chnl_net:caif_netlink_parms(): no params data found [ 429.231299][T17223] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.238442][T17223] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.246280][T17223] bridge_slave_1: entered allmulticast mode [ 429.255917][T17223] bridge_slave_1: entered promiscuous mode [ 429.296834][T17221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.338074][T17221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.409848][T17223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.460144][T17223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.490145][T17221] team0: Port device team_slave_0 added [ 429.537989][T17221] team0: Port device team_slave_1 added [ 429.568962][T17223] team0: Port device team_slave_0 added [ 429.590017][T17223] team0: Port device team_slave_1 added [ 429.691113][ T5879] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 429.705068][ T5879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 429.718669][ T5879] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 429.728154][ T5879] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 429.736617][ T5879] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 429.765134][T17223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.774562][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.801575][T17223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.816155][T17221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.823898][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.850510][T17221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.869220][T17225] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.877578][T17225] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.885138][T17225] bridge_slave_0: entered allmulticast mode [ 429.892986][T17225] bridge_slave_0: entered promiscuous mode [ 429.901659][T17223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.908621][T17223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.934777][T17223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.955275][T17221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.962513][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.988672][T17221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.008932][T17225] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.016942][T17225] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.024624][T17225] bridge_slave_1: entered allmulticast mode [ 430.032987][T17225] bridge_slave_1: entered promiscuous mode [ 430.111699][T17225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.147150][T17223] hsr_slave_0: entered promiscuous mode [ 430.154947][T17223] hsr_slave_1: entered promiscuous mode [ 430.161672][T17223] debugfs: 'hsr0' already exists in 'hsr' [ 430.167420][T17223] Cannot create hsr debugfs directory [ 430.177529][T17221] hsr_slave_0: entered promiscuous mode [ 430.187706][T17221] hsr_slave_1: entered promiscuous mode [ 430.194427][T17221] debugfs: 'hsr0' already exists in 'hsr' [ 430.200371][T17221] Cannot create hsr debugfs directory [ 430.211757][T17225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.297412][T17225] team0: Port device team_slave_0 added [ 430.306611][T17225] team0: Port device team_slave_1 added [ 430.319605][T17246] lo speed is unknown, defaulting to 1000 [ 430.376396][T17246] wg1 speed is unknown, defaulting to 1000 [ 430.416724][T17225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.424080][T17225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.450336][T17225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.450969][ T5876] Bluetooth: hci5: command tx timeout [ 430.461680][ T5879] Bluetooth: hci6: command tx timeout [ 430.503573][T17225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.510550][T17225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.537271][ T5879] Bluetooth: hci7: command tx timeout [ 430.542341][T17225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.724058][T17225] hsr_slave_0: entered promiscuous mode [ 430.730613][T17225] hsr_slave_1: entered promiscuous mode [ 430.737625][T17225] debugfs: 'hsr0' already exists in 'hsr' [ 430.743532][T17225] Cannot create hsr debugfs directory [ 431.106907][T17246] chnl_net:caif_netlink_parms(): no params data found [ 431.230026][T17246] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.237578][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.245293][T17246] bridge_slave_0: entered allmulticast mode [ 431.255183][T17246] bridge_slave_0: entered promiscuous mode [ 431.275487][T17246] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.282878][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.290075][T17246] bridge_slave_1: entered allmulticast mode [ 431.297524][T17246] bridge_slave_1: entered promiscuous mode [ 431.343931][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.357411][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.392603][T17246] team0: Port device team_slave_0 added [ 431.400289][T17246] team0: Port device team_slave_1 added [ 431.433527][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.440500][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.467455][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.479560][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.486802][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.513434][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.559366][T17246] hsr_slave_0: entered promiscuous mode [ 431.566314][T17246] hsr_slave_1: entered promiscuous mode [ 431.573274][T17246] debugfs: 'hsr0' already exists in 'hsr' [ 431.579011][T17246] Cannot create hsr debugfs directory [ 431.811376][ T5879] Bluetooth: hci8: command tx timeout [ 432.531084][ T5876] Bluetooth: hci5: command tx timeout [ 432.532594][ T5879] Bluetooth: hci6: command tx timeout [ 432.611888][ T5879] Bluetooth: hci7: command tx timeout [ 433.891755][ T5879] Bluetooth: hci8: command tx timeout [ 434.371800][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 240 seconds [ 434.383399][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 240 seconds [ 434.395116][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 240 seconds [ 434.406195][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 240 seconds [ 434.610931][ T5879] Bluetooth: hci5: command tx timeout [ 434.614663][ T5876] Bluetooth: hci6: command tx timeout [ 434.691246][ T5876] Bluetooth: hci7: command tx timeout [ 435.971078][ T5876] Bluetooth: hci8: command tx timeout [ 436.691104][ T5876] Bluetooth: hci6: command tx timeout [ 436.691501][ T5879] Bluetooth: hci5: command tx timeout [ 436.772044][ T5879] Bluetooth: hci7: command tx timeout [ 438.051159][ T5879] Bluetooth: hci8: command tx timeout [ 464.456608][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 270 seconds [ 464.467586][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 270 seconds [ 464.478860][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 270 seconds [ 464.490259][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 270 seconds [ 465.066947][ T5876] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 465.077939][ T5876] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 465.086813][ T5876] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 465.096679][ T5876] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 465.106289][ T5876] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 465.141522][T17255] lo speed is unknown, defaulting to 1000 [ 465.148211][T17255] wg1 speed is unknown, defaulting to 1000 [ 465.298214][T17255] chnl_net:caif_netlink_parms(): no params data found [ 465.378762][T17255] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.386644][T17255] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.393942][T17255] bridge_slave_0: entered allmulticast mode [ 465.402289][T17255] bridge_slave_0: entered promiscuous mode [ 465.409981][T17255] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.417554][T17255] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.425132][T17255] bridge_slave_1: entered allmulticast mode [ 465.433115][T17255] bridge_slave_1: entered promiscuous mode [ 465.469558][T17255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.482038][T17255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.517609][T17255] team0: Port device team_slave_0 added [ 465.526714][T17255] team0: Port device team_slave_1 added [ 465.560686][T17255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.567821][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.594638][T17255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.607602][T17255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.615886][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.642166][T17255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.690879][T17255] hsr_slave_0: entered promiscuous mode [ 465.697728][T17255] hsr_slave_1: entered promiscuous mode [ 465.704127][T17255] debugfs: 'hsr0' already exists in 'hsr' [ 465.709848][T17255] Cannot create hsr debugfs directory [ 465.857366][T17255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.934787][T17255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.018141][T17255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.089414][T17255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.171209][ T5876] Bluetooth: hci9: command tx timeout [ 469.251304][ T5876] Bluetooth: hci9: command tx timeout [ 471.331040][ T5876] Bluetooth: hci9: command tx timeout [ 473.411219][ T5876] Bluetooth: hci9: command tx timeout [ 488.262231][ T5879] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 488.272044][ T5879] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 488.282603][ T5879] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 488.292672][ T5879] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 488.300509][ T5879] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 488.317010][ T5873] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 488.326601][ T5876] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 488.342206][ T5876] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 488.352117][ T5876] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 488.357696][T17265] lo speed is unknown, defaulting to 1000 [ 488.366269][ T5876] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 488.367448][T17265] wg1 speed is unknown, defaulting to 1000 [ 488.539576][T17267] lo speed is unknown, defaulting to 1000 [ 488.567207][T17267] wg1 speed is unknown, defaulting to 1000 [ 488.731639][ T5876] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 488.741340][ T5876] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 488.750574][ T5876] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 488.759955][ T5876] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 488.768797][ T5876] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 488.833011][T17265] chnl_net:caif_netlink_parms(): no params data found [ 488.869500][T17272] lo speed is unknown, defaulting to 1000 [ 488.893885][T17272] wg1 speed is unknown, defaulting to 1000 [ 489.072207][T17265] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.079452][T17265] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.087671][T17265] bridge_slave_0: entered allmulticast mode [ 489.095829][T17265] bridge_slave_0: entered promiscuous mode [ 489.110053][T17265] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.117339][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.124973][T17265] bridge_slave_1: entered allmulticast mode [ 489.134030][T17265] bridge_slave_1: entered promiscuous mode [ 489.192295][T17265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.203055][T17267] chnl_net:caif_netlink_parms(): no params data found [ 489.217287][T17265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.289774][T17265] team0: Port device team_slave_0 added [ 489.314684][T17265] team0: Port device team_slave_1 added [ 489.408266][T17265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.416613][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.443066][T17265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.456146][T17265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.463501][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.490217][T17265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.587828][T17267] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.607125][T17267] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.620596][T17267] bridge_slave_0: entered allmulticast mode [ 489.629210][T17267] bridge_slave_0: entered promiscuous mode [ 489.672973][T17267] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.680246][T17267] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.688608][T17267] bridge_slave_1: entered allmulticast mode [ 489.696990][T17267] bridge_slave_1: entered promiscuous mode [ 489.788526][T17272] chnl_net:caif_netlink_parms(): no params data found [ 489.817536][T17265] hsr_slave_0: entered promiscuous mode [ 489.837925][T17265] hsr_slave_1: entered promiscuous mode [ 489.855599][T17265] debugfs: 'hsr0' already exists in 'hsr' [ 489.862520][ T5876] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 489.867633][T17265] Cannot create hsr debugfs directory [ 489.873630][ T5876] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 489.884168][ T5876] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 489.898198][ T5876] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 489.906353][ T5876] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 489.956402][T17267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.000080][T17267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.087365][T17267] team0: Port device team_slave_0 added [ 490.102848][T17267] team0: Port device team_slave_1 added [ 490.243817][T17267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.251027][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.277322][T17267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.290413][T17267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.297664][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.323981][T17267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.335389][T17272] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.344486][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.352143][T17272] bridge_slave_0: entered allmulticast mode [ 490.359369][T17272] bridge_slave_0: entered promiscuous mode [ 490.366812][T17288] lo speed is unknown, defaulting to 1000 [ 490.367746][T17272] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.379808][ T5879] Bluetooth: hci10: command tx timeout [ 490.385503][T17272] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.394080][T17272] bridge_slave_1: entered allmulticast mode [ 490.402523][T17272] bridge_slave_1: entered promiscuous mode [ 490.424010][T17288] wg1 speed is unknown, defaulting to 1000 [ 490.451084][ T5879] Bluetooth: hci11: command tx timeout [ 490.532271][T17272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.577070][T17272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.611220][T17267] hsr_slave_0: entered promiscuous mode [ 490.617691][T17267] hsr_slave_1: entered promiscuous mode [ 490.625120][T17267] debugfs: 'hsr0' already exists in 'hsr' [ 490.630961][T17267] Cannot create hsr debugfs directory [ 490.669537][T17272] team0: Port device team_slave_0 added [ 490.679128][T17272] team0: Port device team_slave_1 added [ 490.787746][T17272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.794922][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.821364][T17272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.834683][T17272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.841919][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.869564][T17272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.869831][ T5879] Bluetooth: hci12: command tx timeout [ 491.026863][T17272] hsr_slave_0: entered promiscuous mode [ 491.034609][T17272] hsr_slave_1: entered promiscuous mode [ 491.041144][T17272] debugfs: 'hsr0' already exists in 'hsr' [ 491.046889][T17272] Cannot create hsr debugfs directory [ 491.267045][T17288] chnl_net:caif_netlink_parms(): no params data found [ 491.485657][T17288] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.494473][T17288] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.502260][T17288] bridge_slave_0: entered allmulticast mode [ 491.509412][T17288] bridge_slave_0: entered promiscuous mode [ 491.517946][T17288] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.525432][T17288] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.532885][T17288] bridge_slave_1: entered allmulticast mode [ 491.540081][T17288] bridge_slave_1: entered promiscuous mode [ 491.606566][T17288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.620471][T17288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.675184][T17288] team0: Port device team_slave_0 added [ 491.698207][T17288] team0: Port device team_slave_1 added [ 491.742854][T17288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.749834][T17288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.776645][T17288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.804777][T17288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.812552][T17288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.840572][T17288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.922777][T17288] hsr_slave_0: entered promiscuous mode [ 491.929379][T17288] hsr_slave_1: entered promiscuous mode [ 491.937284][T17288] debugfs: 'hsr0' already exists in 'hsr' [ 491.943125][T17288] Cannot create hsr debugfs directory [ 491.971429][ T5879] Bluetooth: hci13: command tx timeout [ 492.451289][ T5879] Bluetooth: hci10: command tx timeout [ 492.531126][ T5879] Bluetooth: hci11: command tx timeout [ 492.931194][ T5879] Bluetooth: hci12: command tx timeout [ 494.054620][ T5879] Bluetooth: hci13: command tx timeout [ 494.531751][ T5879] Bluetooth: hci10: command tx timeout [ 494.540780][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 300 seconds [ 494.551967][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 300 seconds [ 494.563195][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 300 seconds [ 494.574225][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 300 seconds [ 494.611846][ T5879] Bluetooth: hci11: command tx timeout [ 495.011036][ T5879] Bluetooth: hci12: command tx timeout [ 496.131307][ T5879] Bluetooth: hci13: command tx timeout [ 496.611024][ T5879] Bluetooth: hci10: command tx timeout [ 496.691050][ T5879] Bluetooth: hci11: command tx timeout [ 497.091132][ T5879] Bluetooth: hci12: command tx timeout [ 498.211325][ T5879] Bluetooth: hci13: command tx timeout [ 524.612738][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 330 seconds [ 524.624015][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 330 seconds [ 524.635099][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 330 seconds [ 524.646156][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 330 seconds [ 525.655844][ T5876] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 525.665338][ T5876] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 525.674504][ T5876] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 525.683495][ T5876] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 525.692500][ T5876] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 525.727237][T17300] lo speed is unknown, defaulting to 1000 [ 525.734851][T17300] wg1 speed is unknown, defaulting to 1000 [ 525.894979][T17300] chnl_net:caif_netlink_parms(): no params data found [ 525.983833][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.991273][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.998804][T17300] bridge_slave_0: entered allmulticast mode [ 526.007006][T17300] bridge_slave_0: entered promiscuous mode [ 526.015986][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.024358][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.032111][T17300] bridge_slave_1: entered allmulticast mode [ 526.039707][T17300] bridge_slave_1: entered promiscuous mode [ 526.078606][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.092099][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.129566][T17300] team0: Port device team_slave_0 added [ 526.139885][T17300] team0: Port device team_slave_1 added [ 526.177694][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.184772][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.212104][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.225159][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.232895][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.259824][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.316886][T17300] hsr_slave_0: entered promiscuous mode [ 526.323861][T17300] hsr_slave_1: entered promiscuous mode [ 526.330041][T17300] debugfs: 'hsr0' already exists in 'hsr' [ 526.336012][T17300] Cannot create hsr debugfs directory [ 527.731109][ T5876] Bluetooth: hci14: command tx timeout [ 529.251111][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 529.811003][ T5879] Bluetooth: hci14: command tx timeout [ 531.891024][ T5879] Bluetooth: hci14: command tx timeout [ 533.971074][ T5879] Bluetooth: hci14: command tx timeout [ 548.901852][ T5876] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 548.912315][ T5876] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 548.931185][ T5876] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 548.939363][ T5876] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 548.947582][ T5876] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 548.990467][T17311] lo speed is unknown, defaulting to 1000 [ 548.998318][T17311] wg1 speed is unknown, defaulting to 1000 [ 549.125667][ T5876] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 549.136132][ T5876] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 549.145584][ T5876] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 549.154491][ T5876] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 549.162464][ T5876] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 549.217948][ T5876] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 549.228102][ T5876] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 549.236856][ T5876] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 549.252126][ T5876] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 549.261452][ T5876] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 549.354679][T17314] lo speed is unknown, defaulting to 1000 [ 549.369359][T17311] chnl_net:caif_netlink_parms(): no params data found [ 549.384625][T17316] lo speed is unknown, defaulting to 1000 [ 549.391551][T17314] wg1 speed is unknown, defaulting to 1000 [ 549.405102][T17316] wg1 speed is unknown, defaulting to 1000 [ 549.637184][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.644740][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.652749][T17311] bridge_slave_0: entered allmulticast mode [ 549.660770][T17311] bridge_slave_0: entered promiscuous mode [ 549.678609][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.686224][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.694072][T17311] bridge_slave_1: entered allmulticast mode [ 549.702440][T17311] bridge_slave_1: entered promiscuous mode [ 549.764351][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.777412][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.880628][T17311] team0: Port device team_slave_0 added [ 549.890396][T17311] team0: Port device team_slave_1 added [ 550.078994][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.092326][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.123272][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.144927][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.158964][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.193686][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.268265][T17311] hsr_slave_0: entered promiscuous mode [ 550.344966][T17311] hsr_slave_1: entered promiscuous mode [ 550.356014][T17311] debugfs: 'hsr0' already exists in 'hsr' [ 550.356697][ T5876] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 550.362208][T17311] Cannot create hsr debugfs directory [ 550.376792][ T5876] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 550.387729][ T5876] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 550.402169][ T5876] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 550.411213][ T5876] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 550.418259][T17314] chnl_net:caif_netlink_parms(): no params data found [ 550.459681][T17316] chnl_net:caif_netlink_parms(): no params data found [ 550.629956][T17330] lo speed is unknown, defaulting to 1000 [ 550.729431][T17330] wg1 speed is unknown, defaulting to 1000 [ 550.763124][T17314] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.770321][T17314] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.778420][T17314] bridge_slave_0: entered allmulticast mode [ 550.787163][T17314] bridge_slave_0: entered promiscuous mode [ 550.799086][T17314] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.806751][T17314] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.814227][T17314] bridge_slave_1: entered allmulticast mode [ 550.822581][T17314] bridge_slave_1: entered promiscuous mode [ 550.920474][T17316] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.927859][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.936688][T17316] bridge_slave_0: entered allmulticast mode [ 550.946650][T17316] bridge_slave_0: entered promiscuous mode [ 550.989316][T17316] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.996966][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.004818][T17316] bridge_slave_1: entered allmulticast mode [ 551.011296][ T5876] Bluetooth: hci15: command tx timeout [ 551.019584][T17316] bridge_slave_1: entered promiscuous mode [ 551.044770][T17314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.058522][T17314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.159711][T17316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.189151][T17314] team0: Port device team_slave_0 added [ 551.204619][T17314] team0: Port device team_slave_1 added [ 551.224930][T17316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.255576][ T5876] Bluetooth: hci16: command tx timeout [ 551.329999][T17314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.337199][ T5876] Bluetooth: hci17: command tx timeout [ 551.343886][T17314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.371543][T17314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.384548][T17314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.391703][T17314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.418031][T17314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.433043][T17316] team0: Port device team_slave_0 added [ 551.442788][T17316] team0: Port device team_slave_1 added [ 551.530653][T17316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.538136][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.571459][T17316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.623129][T17316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.630101][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.656908][T17316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.714137][T17314] hsr_slave_0: entered promiscuous mode [ 551.720661][T17314] hsr_slave_1: entered promiscuous mode [ 551.727524][T17314] debugfs: 'hsr0' already exists in 'hsr' [ 551.734857][T17314] Cannot create hsr debugfs directory [ 551.882090][T17316] hsr_slave_0: entered promiscuous mode [ 551.889102][T17316] hsr_slave_1: entered promiscuous mode [ 551.896568][T17316] debugfs: 'hsr0' already exists in 'hsr' [ 551.902514][T17316] Cannot create hsr debugfs directory [ 552.019056][T17330] chnl_net:caif_netlink_parms(): no params data found [ 552.451359][ T5876] Bluetooth: hci18: command tx timeout [ 552.602856][T17330] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.610033][T17330] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.626842][T17330] bridge_slave_0: entered allmulticast mode [ 552.651398][T17330] bridge_slave_0: entered promiscuous mode [ 552.770518][T17330] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.788323][T17330] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.813159][T17330] bridge_slave_1: entered allmulticast mode [ 552.824070][T17330] bridge_slave_1: entered promiscuous mode [ 552.943180][T17330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.999682][T17330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.100308][T17330] team0: Port device team_slave_0 added [ 553.106023][T17344] Bluetooth: hci15: command tx timeout [ 553.116052][T17330] team0: Port device team_slave_1 added [ 553.179555][T17330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.187355][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.214438][T17330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.227987][T17330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.235112][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.262763][T17330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.329436][T17330] hsr_slave_0: entered promiscuous mode [ 553.341044][T17344] Bluetooth: hci16: command tx timeout [ 553.348893][T17330] hsr_slave_1: entered promiscuous mode [ 553.355626][T17330] debugfs: 'hsr0' already exists in 'hsr' [ 553.362762][T17330] Cannot create hsr debugfs directory [ 553.411567][T17344] Bluetooth: hci17: command tx timeout [ 554.531414][T17344] Bluetooth: hci18: command tx timeout [ 554.701312][ T55] block nbd0: Possible stuck request ffff888025695080: control (read@0,1024B). Runtime 360 seconds [ 554.712249][ T55] block nbd0: Possible stuck request ffff888025695240: control (read@1024,1024B). Runtime 360 seconds [ 554.723341][ T55] block nbd0: Possible stuck request ffff888025695400: control (read@2048,1024B). Runtime 360 seconds [ 554.734396][ T55] block nbd0: Possible stuck request ffff8880256955c0: control (read@3072,1024B). Runtime 360 seconds [ 554.855188][T17344] Bluetooth: hci6: command 0x0406 tx timeout [ 554.855876][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 554.861615][T17344] Bluetooth: hci7: command 0x0406 tx timeout [ 554.868416][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 555.171032][ T5875] Bluetooth: hci15: command tx timeout [ 555.411014][ T5875] Bluetooth: hci16: command tx timeout [ 555.491107][ T5875] Bluetooth: hci17: command tx timeout [ 556.611054][ T5875] Bluetooth: hci18: command tx timeout [ 557.251279][ T5875] Bluetooth: hci15: command tx timeout [ 557.490863][ T5875] Bluetooth: hci16: command tx timeout [ 557.570984][ T5875] Bluetooth: hci17: command tx timeout [ 558.690943][ T5875] Bluetooth: hci18: command tx timeout [ 564.291631][ T31] INFO: task syz-executor:16956 blocked for more than 143 seconds. [ 564.299580][ T31] Not tainted syzkaller #0 [ 564.304691][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.314159][ T31] task:syz-executor state:D stack:21832 pid:16956 tgid:16956 ppid:1 task_flags:0x400140 flags:0x00004004 [ 564.326357][ T31] Call Trace: [ 564.329650][ T31] [ 564.332978][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 564.337579][ T31] ? __lock_acquire+0xab9/0xd20 [ 564.342646][ T31] ? __lock_acquire+0xab9/0xd20 [ 564.347707][ T31] ? __pfx___schedule+0x10/0x10 [ 564.353658][ T31] ? schedule+0x91/0x360 [ 564.357977][ T31] schedule+0x165/0x360 [ 564.362283][ T31] schedule_preempt_disabled+0x13/0x30 [ 564.368112][ T31] __mutex_lock+0x7e6/0x1350 [ 564.373335][ T31] ? __mutex_lock+0x5bb/0x1350 [ 564.378134][ T31] ? genl_rcv_msg+0x10d/0x790 [ 564.383031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 564.388624][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 564.431124][ T31] ? radix_tree_lookup+0x240/0x290 [ 564.441009][ T31] genl_rcv_msg+0x10d/0x790 [ 564.445587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.450633][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 564.468732][ T31] ? __asan_memcpy+0x40/0x70 [ 564.473771][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 564.479192][ T31] netlink_rcv_skb+0x208/0x470 [ 564.484676][ T31] ? __lock_acquire+0xab9/0xd20 [ 564.489745][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.495253][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.500567][ T31] ? down_read+0x1ad/0x2e0 [ 564.505102][ T31] genl_rcv+0x28/0x40 [ 564.509098][ T31] netlink_unicast+0x82f/0x9e0 [ 564.514229][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 564.519642][ T31] ? netlink_sendmsg+0x642/0xb30 [ 564.524789][ T31] ? skb_put+0x11b/0x210 [ 564.529045][ T31] netlink_sendmsg+0x805/0xb30 [ 564.534855][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.540186][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.545449][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.551082][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.556388][ T31] __sock_sendmsg+0x21c/0x270 [ 564.561197][ T31] __sys_sendto+0x3bd/0x520 [ 564.565731][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 564.571204][ T31] ? fd_install+0x97/0x540 [ 564.575905][ T31] ? fd_install+0x30d/0x540 [ 564.580434][ T31] __x64_sys_sendto+0xde/0x100 [ 564.585276][ T31] do_syscall_64+0xfa/0x3b0 [ 564.589797][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.596204][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.602521][ T31] ? clear_bhb_loop+0x60/0xb0 [ 564.607219][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.613561][ T31] RIP: 0033:0x7fd842d90a3c [ 564.617996][ T31] RSP: 002b:00007ffcf65cffe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 564.626570][ T31] RAX: ffffffffffffffda RBX: 00007fd843b04620 RCX: 00007fd842d90a3c [ 564.634903][ T31] RDX: 0000000000000028 RSI: 00007fd843b04670 RDI: 0000000000000003 [ 564.643006][ T31] RBP: 0000000000000000 R08: 00007ffcf65d0034 R09: 000000000000000c [ 564.651682][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 564.659753][ T31] R13: 00007ffcf65d0088 R14: 00007fd843b04670 R15: 0000000000000000 [ 564.667863][ T31] [ 564.671373][ T31] INFO: task syz.0.2959:17176 blocked for more than 143 seconds. [ 564.679106][ T31] Not tainted syzkaller #0 [ 564.684323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.693557][ T31] task:syz.0.2959 state:D stack:25736 pid:17176 tgid:17175 ppid:5860 task_flags:0x480140 flags:0x00004004 [ 564.705596][ T31] Call Trace: [ 564.708884][ T31] [ 564.712099][ T31] __schedule+0x1798/0x4cc0 [ 564.716636][ T31] ? __lock_acquire+0xab9/0xd20 [ 564.721593][ T31] ? __lock_acquire+0xab9/0xd20 [ 564.726464][ T31] ? __pfx___schedule+0x10/0x10 [ 564.731675][ T31] ? schedule+0x91/0x360 [ 564.735934][ T31] schedule+0x165/0x360 [ 564.740116][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 564.745731][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 564.752392][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 564.758488][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 564.764503][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 564.771381][ T31] nbd_set_size+0x47e/0x6a0 [ 564.775921][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 564.781215][ T31] ? nla_memcpy+0x5b/0xc0 [ 564.785658][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 564.790615][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 564.796385][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 564.802461][ T31] ? bpf_lsm_capable+0x9/0x20 [ 564.807153][ T31] ? security_capable+0x7e/0x2e0 [ 564.812476][ T31] ? radix_tree_lookup+0x240/0x290 [ 564.817606][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 564.822981][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 564.828739][ T31] ? __nla_parse+0x40/0x60 [ 564.833561][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 564.840070][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 564.845910][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 564.852724][ T31] ? stack_trace_save+0x9c/0xe0 [ 564.857697][ T31] genl_rcv_msg+0x60e/0x790 [ 564.862269][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.867387][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 564.873485][ T31] netlink_rcv_skb+0x208/0x470 [ 564.878278][ T31] ? __lock_acquire+0xab9/0xd20 [ 564.883284][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.888353][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.894112][ T31] ? down_read+0x1ad/0x2e0 [ 564.898551][ T31] genl_rcv+0x28/0x40 [ 564.902595][ T31] netlink_unicast+0x82f/0x9e0 [ 564.907378][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 564.913003][ T31] ? netlink_sendmsg+0x642/0xb30 [ 564.917949][ T31] ? skb_put+0x11b/0x210 [ 564.922322][ T31] netlink_sendmsg+0x805/0xb30 [ 564.927101][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.932846][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.937807][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.943142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.948436][ T31] __sock_sendmsg+0x21c/0x270 [ 564.953462][ T31] ____sys_sendmsg+0x505/0x830 [ 564.958341][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.963766][ T31] ? import_iovec+0x74/0xa0 [ 564.968420][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 564.973429][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.978690][ T31] ? __fget_files+0x2a/0x420 [ 564.983447][ T31] ? __fget_files+0x3a0/0x420 [ 564.988237][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 564.993704][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.999186][ T31] ? rcu_is_watching+0x15/0xb0 [ 565.004081][ T31] ? do_syscall_64+0xbe/0x3b0 [ 565.008769][ T31] do_syscall_64+0xfa/0x3b0 [ 565.014080][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.019301][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.025478][ T31] ? clear_bhb_loop+0x60/0xb0 [ 565.030170][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.036433][ T31] RIP: 0033:0x7fdda9d8eba9 [ 565.041017][ T31] RSP: 002b:00007fddaac5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.049449][ T31] RAX: ffffffffffffffda RBX: 00007fdda9fd5fa0 RCX: 00007fdda9d8eba9 [ 565.057802][ T31] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 565.065872][ T31] RBP: 00007fdda9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 565.074160][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.082314][ T31] R13: 00007fdda9fd6038 R14: 00007fdda9fd5fa0 R15: 00007ffe37993858 [ 565.090325][ T31] [ 565.094263][ T31] INFO: task syz.4.2962:17180 blocked for more than 144 seconds. [ 565.104451][ T31] Not tainted syzkaller #0 [ 565.109417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.118832][ T31] task:syz.4.2962 state:D stack:28616 pid:17180 tgid:17179 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 565.133824][ T31] Call Trace: [ 565.137179][ T31] [ 565.140105][ T31] __schedule+0x1798/0x4cc0 [ 565.144696][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.149572][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.154842][ T31] ? __pfx___schedule+0x10/0x10 [ 565.159751][ T31] ? schedule+0x91/0x360 [ 565.164562][ T31] schedule+0x165/0x360 [ 565.168736][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.174609][ T31] __mutex_lock+0x7e6/0x1350 [ 565.179230][ T31] ? __mutex_lock+0x5bb/0x1350 [ 565.184236][ T31] ? genl_rcv_msg+0x10d/0x790 [ 565.188935][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.194290][ T31] ? stack_trace_save+0x9c/0xe0 [ 565.199155][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 565.204766][ T31] ? radix_tree_lookup+0x240/0x290 [ 565.209906][ T31] genl_rcv_msg+0x10d/0x790 [ 565.214941][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.219814][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.224910][ T31] netlink_rcv_skb+0x208/0x470 [ 565.229689][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.234895][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.239936][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.245353][ T31] ? down_read+0x1ad/0x2e0 [ 565.249787][ T31] genl_rcv+0x28/0x40 [ 565.254463][ T31] netlink_unicast+0x82f/0x9e0 [ 565.259253][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 565.264607][ T31] ? netlink_sendmsg+0x642/0xb30 [ 565.269558][ T31] ? skb_put+0x11b/0x210 [ 565.274128][ T31] netlink_sendmsg+0x805/0xb30 [ 565.278907][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.284309][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.289264][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.294969][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.300271][ T31] __sock_sendmsg+0x21c/0x270 [ 565.305005][ T31] __sys_sendto+0x3bd/0x520 [ 565.309871][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 565.315231][ T31] ? count_memcg_event_mm+0x21/0x260 [ 565.320541][ T31] ? exc_page_fault+0x76/0xf0 [ 565.325358][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 565.331366][ T31] __x64_sys_sendto+0xde/0x100 [ 565.336167][ T31] do_syscall_64+0xfa/0x3b0 [ 565.340757][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.345976][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.352362][ T31] ? clear_bhb_loop+0x60/0xb0 [ 565.357059][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.363084][ T31] RIP: 0033:0x7fdf2a790a3c [ 565.367519][ T31] RSP: 002b:00007fdf2b67dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 565.376427][ T31] RAX: ffffffffffffffda RBX: 00007fdf2b67dfc0 RCX: 00007fdf2a790a3c [ 565.384458][ T31] RDX: 0000000000000020 RSI: 00007fdf2b67e010 RDI: 0000000000000005 [ 565.392944][ T31] RBP: 0000000000000000 R08: 00007fdf2b67df14 R09: 000000000000000c [ 565.401133][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 565.409207][ T31] R13: 00007fdf2b67df68 R14: 00007fdf2b67e010 R15: 0000000000000000 [ 565.417554][ T31] [ 565.420830][ T31] INFO: task syz.2.2963:17190 blocked for more than 144 seconds. [ 565.428638][ T31] Not tainted syzkaller #0 [ 565.433969][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.442771][ T31] task:syz.2.2963 state:D stack:28328 pid:17190 tgid:17189 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 565.455124][ T31] Call Trace: [ 565.458439][ T31] [ 565.461448][ T31] __schedule+0x1798/0x4cc0 [ 565.465989][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.471297][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.476173][ T31] ? __pfx___schedule+0x10/0x10 [ 565.481278][ T31] ? schedule+0x91/0x360 [ 565.485555][ T31] schedule+0x165/0x360 [ 565.489943][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.495928][ T31] __mutex_lock+0x7e6/0x1350 [ 565.500548][ T31] ? __mutex_lock+0x5bb/0x1350 [ 565.505733][ T31] ? genl_rcv_msg+0x10d/0x790 [ 565.510435][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.515891][ T31] ? stack_trace_save+0x9c/0xe0 [ 565.520872][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 565.526399][ T31] ? radix_tree_lookup+0x240/0x290 [ 565.531948][ T31] genl_rcv_msg+0x10d/0x790 [ 565.536481][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.541393][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.546456][ T31] netlink_rcv_skb+0x208/0x470 [ 565.551631][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.556518][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.561709][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.567035][ T31] ? down_read+0x1ad/0x2e0 [ 565.572084][ T31] genl_rcv+0x28/0x40 [ 565.576198][ T31] netlink_unicast+0x82f/0x9e0 [ 565.581312][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 565.586882][ T31] ? netlink_sendmsg+0x642/0xb30 [ 565.592230][ T31] ? skb_put+0x11b/0x210 [ 565.596506][ T31] netlink_sendmsg+0x805/0xb30 [ 565.601398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.606700][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.612035][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.617337][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.622734][ T31] __sock_sendmsg+0x21c/0x270 [ 565.627437][ T31] __sys_sendto+0x3bd/0x520 [ 565.632284][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 565.637424][ T31] ? count_memcg_event_mm+0x21/0x260 [ 565.642978][ T31] ? exc_page_fault+0x76/0xf0 [ 565.647678][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 565.653562][ T31] __x64_sys_sendto+0xde/0x100 [ 565.658455][ T31] do_syscall_64+0xfa/0x3b0 [ 565.663060][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.668278][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.674676][ T31] ? clear_bhb_loop+0x60/0xb0 [ 565.679369][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.685424][ T31] RIP: 0033:0x7ff99b590a3c [ 565.689864][ T31] RSP: 002b:00007ff99c36dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 565.698599][ T31] RAX: ffffffffffffffda RBX: 00007ff99c36dfc0 RCX: 00007ff99b590a3c [ 565.706715][ T31] RDX: 0000000000000028 RSI: 00007ff99c36e010 RDI: 0000000000000007 [ 565.715106][ T31] RBP: 0000000000000000 R08: 00007ff99c36df14 R09: 000000000000000c [ 565.723197][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 565.731620][ T31] R13: 00007ff99c36df68 R14: 00007ff99c36e010 R15: 0000000000000000 [ 565.739636][ T31] [ 565.742760][ T31] INFO: task syz.1.2968:17215 blocked for more than 144 seconds. [ 565.750478][ T31] Not tainted syzkaller #0 [ 565.755813][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.764633][ T31] task:syz.1.2968 state:D stack:28328 pid:17215 tgid:17214 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 565.776946][ T31] Call Trace: [ 565.780277][ T31] [ 565.783259][ T31] __schedule+0x1798/0x4cc0 [ 565.787789][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.792964][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.798006][ T31] ? __pfx___schedule+0x10/0x10 [ 565.802999][ T31] ? schedule+0x91/0x360 [ 565.807279][ T31] schedule+0x165/0x360 [ 565.811971][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.817657][ T31] __mutex_lock+0x7e6/0x1350 [ 565.822416][ T31] ? __mutex_lock+0x5bb/0x1350 [ 565.827203][ T31] ? genl_rcv_msg+0x10d/0x790 [ 565.832292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.837539][ T31] ? stack_trace_save+0x9c/0xe0 [ 565.842516][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 565.847921][ T31] ? radix_tree_lookup+0x240/0x290 [ 565.853614][ T31] genl_rcv_msg+0x10d/0x790 [ 565.858146][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.863572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.868645][ T31] netlink_rcv_skb+0x208/0x470 [ 565.873632][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.878514][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.883800][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.889107][ T31] ? down_read+0x1ad/0x2e0 [ 565.893823][ T31] genl_rcv+0x28/0x40 [ 565.897820][ T31] netlink_unicast+0x82f/0x9e0 [ 565.902739][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 565.908053][ T31] ? netlink_sendmsg+0x642/0xb30 [ 565.913268][ T31] ? skb_put+0x11b/0x210 [ 565.917532][ T31] netlink_sendmsg+0x805/0xb30 [ 565.922498][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.927896][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.933726][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.939052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.944486][ T31] __sock_sendmsg+0x21c/0x270 [ 565.949184][ T31] __sys_sendto+0x3bd/0x520 [ 565.953998][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 565.959067][ T31] ? count_memcg_event_mm+0x21/0x260 [ 565.964539][ T31] ? exc_page_fault+0x76/0xf0 [ 565.969323][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 565.975259][ T31] __x64_sys_sendto+0xde/0x100 [ 565.980139][ T31] do_syscall_64+0xfa/0x3b0 [ 565.984845][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.990059][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.996533][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.001434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.007352][ T31] RIP: 0033:0x7f1518990a3c [ 566.012064][ T31] RSP: 002b:00007f151989eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.020488][ T31] RAX: ffffffffffffffda RBX: 00007f151989efc0 RCX: 00007f1518990a3c [ 566.028827][ T31] RDX: 0000000000000028 RSI: 00007f151989f010 RDI: 0000000000000005 [ 566.037076][ T31] RBP: 0000000000000000 R08: 00007f151989ef14 R09: 000000000000000c [ 566.045319][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 566.053691][ T31] R13: 00007f151989ef68 R14: 00007f151989f010 R15: 0000000000000000 [ 566.061816][ T31] [ 566.064940][ T31] [ 566.064940][ T31] Showing all locks held in the system: [ 566.073018][ T31] 1 lock held by khungtaskd/31: [ 566.077874][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 566.087944][ T31] 2 locks held by getty/5624: [ 566.093013][ T31] #0: ffff88803431b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 566.102953][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 566.113475][ T31] 1 lock held by udevd/9033: [ 566.118090][ T31] #0: ffff888143368358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 566.127839][ T31] 2 locks held by kworker/u8:101/12659: [ 566.133827][ T31] 3 locks held by kworker/u8:102/12660: [ 566.139388][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 566.149871][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 566.159192][ T31] #2: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: rds_queue_reconnect+0x20d/0x870 [ 566.169241][ T31] 2 locks held by syz-executor/16956: [ 566.174921][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.183375][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.192689][ T31] 6 locks held by syz.0.2959/17176: [ 566.197983][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.206319][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.215717][ T31] #2: ffff888025583230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 566.226174][ T31] #3: ffff888142395f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 566.235999][ T31] #4: ffff8881423958f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 566.248239][ T31] #5: ffff888142395930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 566.261090][ T31] 2 locks held by syz.4.2962/17180: [ 566.266405][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.274703][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.284043][ T31] 2 locks held by syz.2.2963/17190: [ 566.289271][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.297683][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.307010][ T31] 2 locks held by syz.1.2968/17215: [ 566.312286][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.320595][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.329947][ T31] 2 locks held by syz-executor/17221: [ 566.335411][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.344021][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.353188][ T31] 2 locks held by syz-executor/17223: [ 566.358566][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.367095][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.376345][ T31] 2 locks held by syz-executor/17225: [ 566.382034][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.390340][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.399371][ T31] 2 locks held by syz-executor/17246: [ 566.405060][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.413336][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.422658][ T31] 2 locks held by syz-executor/17255: [ 566.428131][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.436398][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.445754][ T31] 2 locks held by syz-executor/17265: [ 566.451194][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.459426][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.468733][ T31] 2 locks held by syz-executor/17267: [ 566.474145][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.482727][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.491828][ T31] 2 locks held by syz-executor/17272: [ 566.497270][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.505770][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.514861][ T31] 2 locks held by syz-executor/17288: [ 566.520245][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.528620][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.537893][ T31] 2 locks held by syz-executor/17300: [ 566.543851][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.552535][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.561882][ T31] 2 locks held by syz-executor/17311: [ 566.567265][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.575543][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.584973][ T31] 2 locks held by syz-executor/17314: [ 566.590351][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.598614][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.607951][ T31] 2 locks held by syz-executor/17316: [ 566.613941][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.622477][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.631544][ T31] 2 locks held by syz-executor/17330: [ 566.636964][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 566.645646][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 566.654834][ T31] [ 566.657243][ T31] ============================================= [ 566.657243][ T31] [ 566.665998][ T31] NMI backtrace for cpu 0 [ 566.666016][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 566.666035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 566.666045][ T31] Call Trace: [ 566.666054][ T31] [ 566.666063][ T31] dump_stack_lvl+0x189/0x250 [ 566.666090][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.666110][ T31] ? __pfx__printk+0x10/0x10 [ 566.666142][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 566.666168][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 566.666192][ T31] ? __pfx__printk+0x10/0x10 [ 566.666218][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 566.666243][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 566.666268][ T31] watchdog+0xf93/0xfe0 [ 566.666295][ T31] ? watchdog+0x1de/0xfe0 [ 566.666322][ T31] kthread+0x70e/0x8a0 [ 566.666345][ T31] ? __pfx_watchdog+0x10/0x10 [ 566.666364][ T31] ? __pfx_kthread+0x10/0x10 [ 566.666386][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.666402][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.666417][ T31] ? __pfx_kthread+0x10/0x10 [ 566.666438][ T31] ret_from_fork+0x3fc/0x770 [ 566.666458][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 566.666482][ T31] ? __switch_to_asm+0x39/0x70 [ 566.666500][ T31] ? __switch_to_asm+0x33/0x70 [ 566.666516][ T31] ? __pfx_kthread+0x10/0x10 [ 566.666537][ T31] ret_from_fork_asm+0x1a/0x30 [ 566.666572][ T31] [ 566.666579][ T31] Sending NMI from CPU 0 to CPUs 1: [ 566.814066][ C1] NMI backtrace for cpu 1 [ 566.814085][ C1] CPU: 1 UID: 0 PID: 12660 Comm: kworker/u8:102 Not tainted syzkaller #0 PREEMPT(full) [ 566.814102][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 566.814112][ C1] Workqueue: bat_events batadv_nc_worker [ 566.814138][ C1] RIP: 0010:__lock_acquire+0x121/0xd20 [ 566.814160][ C1] Code: f5 28 5c 8f 48 0f af f0 45 85 f6 0f 85 4a 01 00 00 45 85 ed 0f 84 41 01 00 00 41 83 fd 31 0f 83 12 01 00 00 48 83 7c 24 68 00 <0f> 84 2b 01 00 00 48 8d 87 f0 0a 00 00 4a 8d 0c ad 00 00 00 00 4c [ 566.814173][ C1] RSP: 0018:ffffc9000c0078f0 EFLAGS: 00000046 [ 566.814186][ C1] RAX: 00000000000000af RBX: ffffffff8e139f20 RCX: ffffffff93498310 [ 566.814197][ C1] RDX: 0000000000000002 RSI: 0000000000000007 RDI: ffff88802bf4bc00 [ 566.814207][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.814216][ C1] R10: dffffc0000000000 R11: ffffffff8b481e30 R12: 0000000000000002 [ 566.814227][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 566.814237][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 566.814249][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.814261][ C1] CR2: 0000562338fd4000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 566.814276][ C1] Call Trace: [ 566.814282][ C1] [ 566.814293][ C1] ? batadv_nc_worker+0xd2/0x610 [ 566.814312][ C1] lock_acquire+0x120/0x360 [ 566.814329][ C1] ? batadv_nc_worker+0xd2/0x610 [ 566.814351][ C1] ? batadv_nc_worker+0xd2/0x610 [ 566.814369][ C1] ? batadv_nc_worker+0xd2/0x610 [ 566.814388][ C1] batadv_nc_worker+0xef/0x610 [ 566.814407][ C1] ? batadv_nc_worker+0xd2/0x610 [ 566.814452][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 566.814468][ C1] process_scheduled_works+0xae1/0x17b0 [ 566.814493][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.814514][ C1] worker_thread+0x8a0/0xda0 [ 566.814539][ C1] kthread+0x70e/0x8a0 [ 566.814557][ C1] ? __pfx_worker_thread+0x10/0x10 [ 566.814571][ C1] ? __pfx_kthread+0x10/0x10 [ 566.814589][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.814603][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.814617][ C1] ? __pfx_kthread+0x10/0x10 [ 566.814634][ C1] ret_from_fork+0x3fc/0x770 [ 566.814650][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 566.814667][ C1] ? __switch_to_asm+0x39/0x70 [ 566.814684][ C1] ? __switch_to_asm+0x33/0x70 [ 566.814700][ C1] ? __pfx_kthread+0x10/0x10 [ 566.814717][ C1] ret_from_fork_asm+0x1a/0x30 [ 566.814740][ C1] [ 566.815117][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 567.068525][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 567.077625][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 567.087678][ T31] Call Trace: [ 567.090966][ T31] [ 567.093892][ T31] dump_stack_lvl+0x99/0x250 [ 567.098483][ T31] ? __asan_memcpy+0x40/0x70 [ 567.103079][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.108356][ T31] ? __pfx__printk+0x10/0x10 [ 567.112950][ T31] vpanic+0x281/0x750 [ 567.116933][ T31] ? __pfx_vpanic+0x10/0x10 [ 567.121430][ T31] ? preempt_schedule+0xae/0xc0 [ 567.126273][ T31] ? preempt_schedule_common+0x83/0xd0 [ 567.131730][ T31] panic+0xb9/0xc0 [ 567.135468][ T31] ? __pfx_panic+0x10/0x10 [ 567.139877][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 567.145243][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 567.151395][ T31] watchdog+0xfd2/0xfe0 [ 567.155553][ T31] ? watchdog+0x1de/0xfe0 [ 567.159878][ T31] kthread+0x70e/0x8a0 [ 567.163940][ T31] ? __pfx_watchdog+0x10/0x10 [ 567.168613][ T31] ? __pfx_kthread+0x10/0x10 [ 567.173196][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.178385][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.183578][ T31] ? __pfx_kthread+0x10/0x10 [ 567.188177][ T31] ret_from_fork+0x3fc/0x770 [ 567.192789][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 567.198083][ T31] ? __switch_to_asm+0x39/0x70 [ 567.202840][ T31] ? __switch_to_asm+0x33/0x70 [ 567.207599][ T31] ? __pfx_kthread+0x10/0x10 [ 567.212184][ T31] ret_from_fork_asm+0x1a/0x30 [ 567.216951][ T31] [ 567.220246][ T31] Kernel Offset: disabled [ 567.224571][ T31] Rebooting in 86400 seconds..