last executing test programs: 20.515876989s ago: executing program 3 (id=8627): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @window={0x3, 0xe, 0x7fff}], 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280601, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'pim6reg\x00', 0x600}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000080)={0x0, 0xce, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000380)={0x0, 0x8, 0x7, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000780)={0x11, 0x4, {0xfffffffffffffff8, @usage=0x1d, 0x0, 0x2, 0x4, 0x7, 0x4, 0x0, 0x88, @usage=0x5, 0x7fff, 0x8, [0x5, 0xc, 0x3be550dd, 0x4a2, 0xa3, 0xb]}, {0xad7, @struct={0x101, 0x4}, 0x0, 0x7, 0xc, 0x7, 0x4, 0x80000001, 0x20, @usage=0x10001, 0xa197, 0x0, [0x8, 0x2, 0x9, 0x7, 0x3, 0xffffffff]}, {0x1, @struct={0x5, 0x2b2}, 0x0, 0x5, 0x5, 0xfffffffffffff001, 0x8, 0x2, 0x9, @struct={0xb03, 0x56f}, 0xfffffffc, 0x10, [0x9, 0x6, 0xffffffffffffffff, 0x2, 0x0, 0xb9]}, {0x1, 0x70d, 0xfffffffffffffffd}}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, 0x0) r7 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r7, 0x400261f3, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000b80)={0x2, 0x4, {0x2, @usage=0xffffffff, r4, 0x7, 0x4, 0x1, 0x3, 0x1, 0xa66, @usage=0x3, 0x4, 0x5, [0x14688c01, 0x68e, 0x1, 0x9, 0x7fffffffffffffff, 0x10000]}, {0x6, @usage=0x7f, r5, 0x8f, 0x1a, 0x3, 0x9, 0x6a31, 0x8, @usage=0x9, 0x7, 0x400, [0xff3, 0x7, 0x8000, 0x8, 0xb25, 0x80]}, {0x5536, @struct={0x2, 0x2}, 0x0, 0x5dc34628, 0x2, 0x3, 0x3, 0x5, 0x0, @usage=0x12, 0x30c, 0x2, [0x100000000, 0x0, 0xffffffffffffffff, 0xd75, 0xffffffff, 0x15a]}, {0xe, 0x7, 0xffffffffffff7a34}}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)=ANY=[@ANYBLOB="42000408", @ANYRES16=r3, @ANYBLOB="01002abd7000feffffff060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000120000008000b000010000006001600940700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 19.683214259s ago: executing program 3 (id=8640): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) 19.5421513s ago: executing program 3 (id=8641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0900000000000000140075006e657464657673696d3000000000000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4000054) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000180)={@multicast2, @multicast1, 0xffffffffffffffff, "c38b4269971864a84e15900a806315e411b90a7b51b7e47064a9fc759ebfebbc", 0x8, 0x634dc9fb, 0x8, 0x6}, 0x3c) 19.419364244s ago: executing program 3 (id=8642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x6fe558b252b9a96f, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x4008000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x20) getsockopt$inet_tcp_int(r4, 0x6, 0xc, 0x0, &(0x7f0000000280)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010a03000000000000000000000000020900010073797a3161050000"], 0x20}, 0x1, 0x0, 0x0, 0x200460d0}, 0x4) recvfrom$l2tp6(r1, &(0x7f0000000040)=""/27, 0x1b, 0x40000040, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 19.023142962s ago: executing program 3 (id=8649): syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x1200}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6000, 0x2, 0xff, 0x4, 0x10, 0x925}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x100, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x101, 0x400}}, @common=@icmp={{0x28}, {0xb, "ea49", 0x3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xe0, 0x2, {0xd}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x4, 0x7, [0x2, 0xb, 0x3d, 0x2b, 0x37, 0x3c, 0xd, 0x29, 0x26, 0x32, 0x1, 0x20, 0x0, 0x27, 0x37, 0x28], 0x1, 0xffff2219, 0x7}}}, {{@ip={@broadcast, @empty, 0xff000000, 0xff, 'tunl0\x00', 'nr0\x00', {}, {}, 0x67, 0x1, 0x40}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@length={{0x28}, {0x3, 0x7f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x1, 0x6, 0x4, 0x6, 0x1], 0x5, 0x3}, {0x1, [0x4, 0x4, 0x1, 0x4, 0x1, 0x1], 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 18.757656145s ago: executing program 3 (id=8651): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x3, 0x20}, &(0x7f0000000180)=0xc) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@generic={0x806, "ce538c68d647e5a1fa5ef6f2e28de01c87b181db160a573ce395aabf"}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 18.475857837s ago: executing program 4 (id=8657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x2, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x79}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x99b0519ad86494a7, 0x70bd27, 0x0, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x4800) 18.251816746s ago: executing program 4 (id=8661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r3, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c2801400018006000600843b000006001700843b0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='ip6gretap0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128048000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) 17.977076183s ago: executing program 4 (id=8665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4043, 0x8000}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x40000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x10, 0x62ac8000, 0x1, 0x6, 0x10, 0x61, 0x8}, 0x1c) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) (async) bind$tipc(r1, 0x0, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) 17.677909473s ago: executing program 1 (id=8667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) recvmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8e73eda5a8caf70487ea6", 0x13a}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x20}}], 0x1, 0x8000) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@gettfilter={0x74, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xc}, {0x0, 0xfff1}, {0x0, 0x7}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xf94}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xe8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 17.337413421s ago: executing program 1 (id=8671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r2, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r1, 0x100, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) 17.223998484s ago: executing program 2 (id=8672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r5) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (async) sendmsg$unix(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) write$6lowpan_enable(r2, &(0x7f0000000140)='0', 0x1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (rerun: 64) bind$packet(r1, &(0x7f0000000040)={0x11, 0x6, r8, 0x1, 0x14, 0x6, @random="6d3f19e96d2f"}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) 17.223395124s ago: executing program 0 (id=8673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) (async) unshare(0xa020480) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f00000000c0)=0xb) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) (async) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) r9 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xfff3}, {0x0, 0xffe0}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40884}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000150a010200000000000000000000fffd090001"], 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 17.183461109s ago: executing program 1 (id=8674): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x3, 0x6, [0x81, 0x6, 0x400, 0xd0, 0xa, 0x7]}, 0x14) (async) r3 = socket$packet(0x11, 0x4000000000002, 0x300) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r5, 0x1, 0xda, 0x6, @remote}, 0x14) 17.100168837s ago: executing program 2 (id=8675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 17.010984222s ago: executing program 1 (id=8676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r1 = socket$inet6(0xa, 0x2, 0x0) read(r1, &(0x7f0000000080)=""/58, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000017c00000800b900", @ANYRES32=r5, @ANYBLOB="0c00018006000600800a000004008280"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) 17.009735445s ago: executing program 0 (id=8677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x80}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x10, r1, 0x4fa08000) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x20008025) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0)=0x12, 0x4) 16.936848102s ago: executing program 4 (id=8678): syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) 16.862978422s ago: executing program 0 (id=8679): syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @random="e278c8b9b5d9", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x8000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7a7289590b36af5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 16.799054811s ago: executing program 2 (id=8680): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110b0000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000000", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 16.798774624s ago: executing program 4 (id=8681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r4, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff5", 0xca}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e09f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f31be5fae8ab75f88ff7687f9143eb2c30f42e2659c8f7f2eea31b74e233226f1965762bb075dcb39d9130dd1cef7b04035bd0fe45803ec1e165d4340d55eaae5c40d7bf46712a2bb2ed87c9b84e4bd49775c10e86b58d47fadbc520d8d", 0xcc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000140)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2d", 0x59}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000706ebe8000000000000d83f0a000004050001000700000003000000720a033cbafff565ca985e1942baac6d0d42170c87a5f92b5f658dc04c6454f8d92fcb2a69c9876f12d9807df520d492"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 16.715671783s ago: executing program 0 (id=8682): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0xc0800) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000300)={{r0, &(0x7f0000000140)='\x00', 0x121501, &(0x7f0000000180)={@_ha_fsid={[0x8]}, {0x8, 0x1, 0x3}}, 0x8001, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x5}, 0x1, &(0x7f00000002c0)=[{0x1, 0xb9, &(0x7f0000000240)='&!\x00', &(0x7f0000000280)="ce4fbc4193e1d686be939348d935", 0xe, 0x32}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000380)={0x1f, 0x8, @none, 0x2}, 0xe) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000003c0), &(0x7f0000000400)=0x14) r6 = socket(0x16, 0x5, 0x9) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000440)={0x87, @broadcast, 0x4e22, 0x0, 'wrr\x00', 0x2, 0x7fffffff, 0x1b}, 0x2c) (async) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000540)=@buf={0x8b, &(0x7f0000000480)="845c736b8a52732c0e1a6bd956a8a10a6bf297cdb138b7a42af3e22049833f5060253baa0a6a34dd3a46b8b8d878cca656deccf4366bb733bcb6bf561c9625757ea97c790d006a6da161fcd275a7b76720269b372d7b26dbf4694de7410e736a0af7e587c47b7ac8fef00fa5cd7491ad57ac515805d608753eda99c77360b0e55e35ea8c3bb8e75052ce13"}) (async) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000580), &(0x7f0000000600)=0x68) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000640)) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) r7 = openat$cgroup_ro(r2, &(0x7f0000000680)='cpuacct.usage_user\x00', 0x0, 0x0) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000001, 0x100010, r7, 0x74c99000) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0x89, "235acd864bc2f091a0ca2e6fee2473c79001dde6729f6eb1be8dd710f9338b07c9841813fc65889247e68795710f6bd5c61a5f9d5524bb93ec80fb7f0d8ce4a37e9fa8de0f5d147fd571e7d12e042e653847fcf95dc8c0782535a56a4b4c6d51a290ccd7ea0a6d5dce2709bd84bcdbf064e284b5d2304cf7781438f521329b48dc0dae7b53fc7575bd"}, &(0x7f0000000780)=0x91) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000007c0)=r8, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x2c) (async) ioctl$FIOCLEX(r9, 0x5451) (async) writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000840)="b39694fd2588fdf822ee50a6ff14f73da9df016a43c1fed7da3f114cfe35896042ea6ae4a55402a1a99dbace276ee5206bbfb44b76d3478c5ea6440e72da1814efe80f7e5879a1d1b2afb907b5db568b9e3414bcafcf69a8483aa6ff6e252738ff5336f51991d880a4308fdd322f122291b55d87c0ac10b8c3ba898ad9a4d24e6c8ad6dbe3ff8b4e0c56b760e87041058f8e35603fef718dfcd41c002b", 0x9d}, {&(0x7f0000000900)="e9af6a93af30edb0c2c8897a15d0431a3287b82b3514970d603f8f7eaf314eb627b3a1702fe781bf5a61c8b97bf26cf10dd03704e27a39fb9f59dee37ce203703225997ad707f42408b96b3bd714b675b8ec195b1ed71925386aaf44a7f27b2c37079cf7e76a2a2d387f26679506f978e3cb1abd9b95353d02e2c2d0082328b89266a6fd7a3221c327a952c6422fde7010de0176a10a628b3e22087a85eb7fd2947dffa278bf1436c80aff6eac5a6bd3f9739dd491b9d503a668a29056ddd9a4a5fa0a648e6ec7736c75868f2bb475f63e53503f309a9661bacdbab338ffb65ee48246fe51ee1cffdc3781198bb7", 0xee}, {&(0x7f0000000a00)="db3c9568ba0f8581975d80e400833e6b17217c46c684e29c68a9e31a8bac4113a5435713aaaffa3da66b0719beaf527747078d9d1ce5c6118ea5c8c6ac2bab7fe72bc6a6d552cd0cc7b26b4a48c956fb7b2e062bec37bdb87a4942c50198d5a17e1c118f0ffd1657a3014748859009722e61d7d59511e4360e9e67855dafc12d463ab004ff0e24d5cb5fe1a60aeeefbb7e60adb589c12311ef791d0efdda86531c2e08242aa82ed7b62f0e78e1df554b9164101d6692e8dc4ddf6ebbfa3b351cbd51b9fb1dc77673eaff409cbcf71f698e71c35c8eb1f8f1f70fa1a44d1a8384a7654e268c45a2b37dc284c5b514", 0xee}, {&(0x7f0000000b00)="38f593333b40ff749ce2211d20211d99cdbdd1997a7aa52145f4f4a4cb7a2cfe59940f0a8cc1353b9f135c3a8c22737fd4d14bb06fcd1d4367170842c3ab95499a5ce9ec2b542bcc849e372ce04107d4cec73aaed4a9809b197e6d98fb973555c30ec532235f23c3289adc8b4e58e531db6df59c793492d57b7551b1ef81850c11cc427cc0bfdee01e17178ba0c2902b5996eb6da27223c68c4d99d314d774ceb7699886bf68859e", 0xa8}, {&(0x7f0000000bc0)="13fbfcbff2824228ef85617defd2f600116e0cabec960510194fb0e742f106222e57984265ec83e8368ccb538b9287613727733db8b53924254b00f6995195479634dbea844c0c5992ccb4dbb4c717c5cd06ade92aa4df8048506d4c054404b4a3252596e21fdafff6bf7a6207ef21cea0f0b49e1d3c467ce6cf4285a590f24f6077c5eecad3eb4ee50e322ad7ccf5f036de311d7de4633f1323db43a3d293cb7e3802ffe688cbf6804de622e580bc9eed8ac5c34ed320b656adb1e002b4a535f8ddea7272eb2cc9d5b7a5f781440c9b5fcab970", 0xd4}], 0x5) (async) pread64(r0, &(0x7f0000000d40)=""/149, 0x95, 0x100000000) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000e00)={0xa8}) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000e40)={0xc0, 0x81, 0x9, 0x9}, 0x10) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, &(0x7f0000000e80)) 16.676809867s ago: executing program 1 (id=8683): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8af8ff00000000b6080000000000007b8af0ff00000000bda100000000000007000000f8ffffff5aa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000005b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.595454578s ago: executing program 4 (id=8684): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket(0x400000000010, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) 16.541162502s ago: executing program 0 (id=8685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x14c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x128, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x57, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53d}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x194}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0x2, 0x3, 0x40, 0xffffffffffffffe8}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, &(0x7f0000000140), 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x4, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x4, 0x1, 0x6}, {0x2, 0x3, 0xf, 0x2}, {0x0, 0x5, 0xd, 0xb}, {0x5, 0x5, 0xc}, {0x3, 0x5, 0x1, 0x5}, {0x5, 0x3, 0x1, 0x7}, {0x5, 0x4, 0x8, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000640)=""/192, 0xc0, 0x0, &(0x7f0000000300)=""/19, 0x13}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, 0x0, 0x25, 0xb, @val=@target_btf_id=r2}, 0x14) 16.467733228s ago: executing program 2 (id=8686): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1c, 0x0, &(0x7f0000000080)) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x40, "72f4497c7ffa62e9cf91fc2b0b9cec3ad6cbfb2ebe822c352188d57cfe813722961a7326073c22ce600547da1b43904fbc757aaa2d4881f7b95758760603013a"}, &(0x7f0000000240)=0x48) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r4, @in6={{0xa, 0x4e20, 0xf6a48f8e, @dev={0xfe, 0x80, '\x00', 0x29}, 0xde8}}, 0x8, 0x2}, 0x90) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x20004001) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 16.367470079s ago: executing program 0 (id=8687): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) 16.257511648s ago: executing program 1 (id=8688): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa288, 0x1, 0xf851}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 15.535538037s ago: executing program 2 (id=8689): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00'}, 0x94) (async) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 15.423159799s ago: executing program 2 (id=8690): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x8000}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x4, 0x0, &(0x7f0000000040)="2805246c", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x8000}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) (async) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x4, 0x0, &(0x7f0000000040)="2805246c", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.122544856s ago: executing program 32 (id=8687): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}]}, 0x40}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) 1.08945018s ago: executing program 33 (id=8688): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa288, 0x1, 0xf851}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.044020342s ago: executing program 34 (id=8684): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket(0x400000000010, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) 0s ago: executing program 35 (id=8690): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x8000}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x4, 0x0, &(0x7f0000000040)="2805246c", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x8000}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) (async) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x90d, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x4, 0x0, &(0x7f0000000040)="2805246c", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) kernel console output (not intermixed with test programs): kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 900.149129][ T1219] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 900.183941][ T1229] netlink: 'syz.4.7457': attribute type 33 has an invalid length. [ 900.196865][ T1219] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 900.202836][ T1219] Node 0 DMA32 free:1393196kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24380kB inactive_anon:0kB active_file:10784kB inactive_file:161876kB unevictable:1536kB writepending:360kB zspages:0kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:27536kB local_pcp:18020kB free_cma:0kB [ 900.241191][ T1219] lowmem_reserve[]: 0 0 0 0 0 [ 900.246005][ T1219] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 900.280213][ T1219] lowmem_reserve[]: 0 0 0 0 0 [ 900.285055][ T1219] Node 1 Normal free:3712840kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61772kB local_pcp:29468kB free_cma:0kB [ 900.348129][ T1219] lowmem_reserve[]: 0 0 0 0 0 [ 900.352949][ T1219] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 900.381066][ T1219] Node 0 DMA32: 11017*4kB (UME) 8021*8kB (UME) 4388*16kB (UME) 377*32kB (UM) 138*64kB (UME) 579*128kB (UM) 738*256kB (UME) 528*512kB (UM) 375*1024kB (UME) 135*2048kB (UM) 0*4096kB = 1393196kB [ 900.404240][ T1219] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 900.417037][ T1219] Node 1 Normal: 6*4kB (UME) 14*8kB (UME) 20*16kB (UME) 10*32kB (UME) 17*64kB (UME) 12*128kB (UME) 14*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 5*2048kB (UE) 900*4096kB (UM) = 3712840kB [ 900.435745][ T1229] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 900.448036][ T1219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 900.457991][ T1219] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 900.467707][ T1219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 900.478019][ T1219] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 900.487657][ T1219] 44584 total pagecache pages [ 900.492378][ T1219] 0 pages in swap cache [ 900.496662][ T1219] Free swap = 124996kB [ 900.500944][ T1219] Total swap = 124996kB [ 900.505142][ T1219] 2097051 pages RAM [ 900.510027][ T1219] 0 pages HighMem/MovableOnly [ 900.514839][ T1219] 427019 pages reserved [ 900.519217][ T1219] 0 pages cma reserved [ 900.524410][ T1229] bond3 (unregistering): Released all slaves [ 901.061010][ T1269] netlink: 'syz.4.7471': attribute type 10 has an invalid length. [ 901.120591][ T1269] netlink: 'syz.4.7471': attribute type 10 has an invalid length. [ 901.129528][ T1273] delete_channel: no stack [ 901.157354][ T1275] netlink: 'syz.1.7473': attribute type 27 has an invalid length. [ 901.415167][ T1287] netlink: 'syz.1.7477': attribute type 13 has an invalid length. [ 901.479339][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.479361][ T1287] netlink: 'syz.1.7477': attribute type 13 has an invalid length. [ 901.533147][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.571807][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.602285][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.725774][ T1291] netlink: 'syz.3.7478': attribute type 13 has an invalid length. [ 902.208234][ T1318] netlink: 'syz.4.7483': attribute type 1 has an invalid length. [ 902.709870][ T1338] syzkaller0: entered promiscuous mode [ 902.715844][ T1338] syzkaller0: entered allmulticast mode [ 902.943208][ T12] wlan1: Trigger new scan to find an IBSS to join [ 903.000234][ T1346] __nla_validate_parse: 69 callbacks suppressed [ 903.000257][ T1346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7492'. [ 904.936898][ T12] wlan1: Creating new IBSS network, BSSID 5e:c1:25:16:50:68 [ 905.000107][ T1367] netlink: 'syz.4.7500': attribute type 13 has an invalid length. [ 905.038056][ T1367] veth0_macvtap: left promiscuous mode [ 905.056681][ T1367] macvtap0: entered allmulticast mode [ 905.070645][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7501'. [ 905.093314][ T1372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7501'. [ 905.095805][ T1367] macvtap0: refused to change device tx_queue_len [ 905.145665][ T1378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7501'. [ 905.202940][ T1378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7501'. [ 905.564282][ T1389] bond3: Unable to set up delay as MII monitoring is disabled [ 905.575525][ T1389] bond3 (unregistering): Released all slaves [ 905.795345][ T1400] xt_hashlimit: size too large, truncated to 1048576 [ 905.918260][ T1411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7511'. [ 905.930057][ T1411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7511'. [ 905.945300][ T1411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7511'. [ 905.972231][ T1414] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 906.192276][ T1422] bridge0: port 3(ipvlan2) entered blocking state [ 906.200558][ T1422] bridge0: port 3(ipvlan2) entered disabled state [ 906.207993][ T1422] ipvlan2: entered allmulticast mode [ 906.213627][ T1422] bridge0: entered allmulticast mode [ 906.225616][ T1422] ipvlan2: left allmulticast mode [ 906.232174][ T1422] bridge0: left allmulticast mode [ 906.414362][ T1427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7516'. [ 906.572187][ T1434] xt_socket: unknown flags 0xe4 [ 906.894450][ T1449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7524'. [ 907.043991][ T1459] block nbd0: Unsupported socket: should be TCP or UNIX. [ 907.120630][ T1452] sctp: [Deprecated]: syz.3.7526 (pid 1452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 907.120630][ T1452] Use struct sctp_sack_info instead [ 907.195236][ T1454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.273032][ T1475] syzkaller1: entered promiscuous mode [ 907.279000][ T1475] syzkaller1: entered allmulticast mode [ 907.768611][ T1497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.836314][ T1498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.923544][ T1499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.016302][ T1500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.166631][T21521] Bluetooth: hci3: command 0x041b tx timeout [ 908.421213][ T1505] netlink: 'syz.4.7540': attribute type 30 has an invalid length. [ 908.474608][ T1505] bond3: option arp_missed_max: invalid value (0) [ 908.482769][ T1505] bond3: option arp_missed_max: allowed values 1 - 255 [ 908.510040][ T1505] bond3 (unregistering): Released all slaves [ 908.514937][ T1507] __nla_validate_parse: 5 callbacks suppressed [ 908.514992][ T1507] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7540'. [ 908.577742][ T1514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7543'. [ 908.587818][ T1514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7543'. [ 908.751552][ T1511] lo speed is unknown, defaulting to 1000 [ 908.776456][ T1511] lo speed is unknown, defaulting to 1000 [ 908.810139][ T1511] lo speed is unknown, defaulting to 1000 [ 908.829048][ T1525] xt_l2tp: v2 doesn't support IP mode [ 908.834676][ T1526] xt_l2tp: v2 doesn't support IP mode [ 908.866043][ T1511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 908.868822][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7545'. [ 908.887365][ T1528] delete_channel: no stack [ 908.936536][ T1511] lo speed is unknown, defaulting to 1000 [ 908.949095][ T1511] lo speed is unknown, defaulting to 1000 [ 908.959183][ T1511] lo speed is unknown, defaulting to 1000 [ 908.968083][ T1511] lo speed is unknown, defaulting to 1000 [ 908.976008][ T1511] lo speed is unknown, defaulting to 1000 [ 908.984148][ T1511] lo speed is unknown, defaulting to 1000 [ 908.992904][ T1511] lo speed is unknown, defaulting to 1000 [ 909.001889][ T1511] lo speed is unknown, defaulting to 1000 [ 909.011066][ T1511] lo speed is unknown, defaulting to 1000 [ 909.019601][ T1511] lo speed is unknown, defaulting to 1000 [ 909.112378][ T1537] netlink: 'syz.4.7547': attribute type 11 has an invalid length. [ 909.244971][ T1546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7549'. [ 909.289603][ T1554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7549'. [ 909.306765][ T1554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7549'. [ 909.534252][ T1564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7557'. [ 909.628088][ T1572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7559'. [ 909.660458][ T1572] netlink: 'syz.0.7559': attribute type 3 has an invalid length. [ 909.679863][ T1572] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7559'. [ 910.295697][ T1594] netlink: 'syz.4.7567': attribute type 2 has an invalid length. [ 910.431550][ T1602] IPv6: NLM_F_REPLACE set, but no existing node found! [ 911.362276][ T1657] bridge_slave_1: left allmulticast mode [ 911.376485][ T1657] bridge_slave_1: left promiscuous mode [ 911.389317][ T1657] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.389500][ T1665] netlink: 'syz.4.7591': attribute type 13 has an invalid length. [ 911.407736][ T1657] bridge_slave_0: left allmulticast mode [ 911.413561][ T1657] bridge_slave_0: left promiscuous mode [ 911.422433][ T1657] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.538205][ T1667] syzkaller1: entered promiscuous mode [ 911.546634][ T1667] syzkaller1: entered allmulticast mode [ 911.557656][ T1665] macvtap0: refused to change device tx_queue_len [ 911.790567][ T1691] FAULT_INJECTION: forcing a failure. [ 911.790567][ T1691] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 911.815774][ T1691] CPU: 0 UID: 0 PID: 1691 Comm: syz.3.7596 Not tainted syzkaller #0 PREEMPT(full) [ 911.815807][ T1691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.815822][ T1691] Call Trace: [ 911.815831][ T1691] [ 911.815841][ T1691] dump_stack_lvl+0xe8/0x150 [ 911.815880][ T1691] should_fail_ex+0x412/0x560 [ 911.816029][ T1691] _copy_from_user+0x2d/0xb0 [ 911.816127][ T1691] ___sys_sendmsg+0x1c6/0x360 [ 911.816157][ T1691] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.816217][ T1691] ? __fget_files+0x2a/0x420 [ 911.816261][ T1691] ? __fget_files+0x3a0/0x420 [ 911.816304][ T1691] __x64_sys_sendmsg+0x1bd/0x2a0 [ 911.816329][ T1691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 911.816361][ T1691] ? __pfx_ksys_write+0x10/0x10 [ 911.816404][ T1691] do_syscall_64+0x14d/0xf80 [ 911.816437][ T1691] ? trace_irq_disable+0x3b/0x150 [ 911.816469][ T1691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.816491][ T1691] ? clear_bhb_loop+0x40/0x90 [ 911.816518][ T1691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.816545][ T1691] RIP: 0033:0x7fe36b99c799 [ 911.816565][ T1691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.816584][ T1691] RSP: 002b:00007fe36c800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.816609][ T1691] RAX: ffffffffffffffda RBX: 00007fe36bc15fa0 RCX: 00007fe36b99c799 [ 911.816625][ T1691] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 911.816638][ T1691] RBP: 00007fe36c800090 R08: 0000000000000000 R09: 0000000000000000 [ 911.816652][ T1691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.816664][ T1691] R13: 00007fe36bc16038 R14: 00007fe36bc15fa0 R15: 00007ffe5fc3d1f8 [ 911.816698][ T1691] [ 912.118369][ T1700] netlink: 'syz.0.7600': attribute type 2 has an invalid length. [ 912.148818][ T1699] bridge_slave_1: entered promiscuous mode [ 912.408223][ T1713] Cannot find map_set index 65533 as target [ 912.409326][ T1716] set match dimension is over the limit! [ 912.432748][ T1713] bond0: (slave gre0): Error: Device type is different from other slaves [ 912.642277][ T1729] netlink: 'syz.4.7612': attribute type 1 has an invalid length. [ 912.668909][ T1732] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 912.677618][ T1729] netlink: 'syz.4.7612': attribute type 15 has an invalid length. [ 912.711369][ T1731] syzkaller0: entered allmulticast mode [ 912.818142][ T1744] delete_channel: no stack [ 912.929368][ T1759] netlink: 'syz.2.7615': attribute type 2 has an invalid length. [ 913.097975][ T1769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.258706][T21521] Bluetooth: hci5: command 0x0406 tx timeout [ 913.373744][ T1780] ip6gre1: entered promiscuous mode [ 913.397583][ T1780] ip6gre1: entered allmulticast mode [ 913.489172][ T1793] netlink: 'syz.4.7630': attribute type 11 has an invalid length. [ 913.519672][ T1793] __nla_validate_parse: 14 callbacks suppressed [ 913.519693][ T1793] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7630'. [ 913.538796][ T1796] syzkaller0: entered promiscuous mode [ 913.544341][ T1796] syzkaller0: entered allmulticast mode [ 913.553093][ T1796] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 913.745496][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 60 seconds [ 913.757303][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 60 seconds [ 913.770235][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 60 seconds [ 913.781626][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 60 seconds [ 913.785656][ T1807] syzkaller1: entered promiscuous mode [ 913.811472][ T1807] syzkaller1: entered allmulticast mode [ 913.830965][ T1807] delete_channel: no stack [ 913.879685][ T1813] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7637'. [ 914.168507][ T1832] syzkaller0: entered promiscuous mode [ 914.174220][ T1832] syzkaller0: entered allmulticast mode [ 914.392424][ T1840] netlink: 252 bytes leftover after parsing attributes in process `syz.1.7643'. [ 914.601438][ T1845] bond4: option resend_igmp: invalid value (32767) [ 914.608199][ T1845] bond4: option resend_igmp: allowed values 0 - 255 [ 914.619856][ T1845] bond4 (unregistering): Released all slaves [ 914.642530][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7644'. [ 914.659116][ T1856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7647'. [ 914.684471][ T1856] openvswitch: netlink: Flow actions attr not present in new flow. [ 914.802751][ T1851] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 914.821681][ T1861] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7648'. [ 914.832882][ T1851] bond9 (unregistering): Released all slaves [ 914.869710][ T1865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7650'. [ 914.884923][ T1859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7648'. [ 914.912203][ T1862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7649'. [ 915.055270][ T1862] syzkaller0: entered promiscuous mode [ 915.061082][ T1862] syzkaller0: entered allmulticast mode [ 915.088632][ T1871] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7652'. [ 915.168904][ T1879] netlink: 'syz.3.7654': attribute type 3 has an invalid length. [ 916.327425][ T5190] udevd[5190]: worker [31295] /devices/virtual/block/nbd4 is taking a long time [ 917.398274][ T1916] netlink: 'syz.1.7661': attribute type 1 has an invalid length. [ 917.528005][ T1916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 917.611123][ T1928] bond3: (slave veth0_to_bond): making interface the new active one [ 917.625783][ T1928] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 917.705568][ T1916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 917.715909][ T1916] bond3: (slave bond4): Enslaving as an active interface with a down link [ 918.134404][ T1961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 918.341760][ T1978] netlink: 'syz.2.7676': attribute type 2 has an invalid length. [ 918.436780][ T1984] netlink: 'syz.0.7675': attribute type 64 has an invalid length. [ 918.574925][ T1999] __nla_validate_parse: 6 callbacks suppressed [ 918.574948][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7680'. [ 918.633147][ T1999] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 918.661245][ T1999] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 918.696044][ T1999] gretap1: entered promiscuous mode [ 918.710096][ T2010] netlink: 'syz.2.7680': attribute type 4 has an invalid length. [ 918.718374][ T2010] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7680'. [ 918.727750][ T2005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7682'. [ 918.730886][ T1999] gretap1: entered allmulticast mode [ 918.769261][ T1999] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.7680'. [ 918.797664][ T2012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7682'. [ 918.836333][ T2012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.849912][ T2012] bond_slave_0: left allmulticast mode [ 918.872678][ T2012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.889488][ T2012] bond_slave_1: left allmulticast mode [ 918.898859][ T2012] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 918.901705][ T2009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7683'. [ 918.926930][ T2012] bond0 (unregistering): Released all slaves [ 918.955392][ T2014] IPVS: Unknown mcast interface: vcan0 [ 918.991423][ T2016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7684'. [ 919.945937][ T2076] netlink: 'syz.1.7705': attribute type 1 has an invalid length. [ 919.955027][ T2076] netlink: 'syz.1.7705': attribute type 1 has an invalid length. [ 920.808099][ T2110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7715'. [ 920.837367][ T2079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.019201][ T2116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7717'. [ 921.030594][ T2114] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 921.046522][ T2116] netlink: 'syz.4.7717': attribute type 8 has an invalid length. [ 921.271014][ T2133] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7719'. [ 921.958182][ T2172] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 925.105608][ T2188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 925.389996][ T2236] __nla_validate_parse: 3 callbacks suppressed [ 925.390018][ T2236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7748'. [ 925.442528][ T2241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7751'. [ 925.487858][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7752'. [ 925.729407][ T2260] netlink: 'syz.4.7758': attribute type 8 has an invalid length. [ 925.745720][ T2264] netlink: 'syz.2.7757': attribute type 16 has an invalid length. [ 925.777519][ T2264] netlink: 'syz.2.7757': attribute type 17 has an invalid length. [ 925.786077][ T2257] tipc: Resetting bearer [ 925.793623][ T2257] tipc: Resetting bearer [ 925.818262][ T2268] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7760'. [ 925.839856][ T6922] tipc: Resetting bearer [ 925.907333][ T2264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.929970][ T2269] netem: change failed [ 925.947058][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7761'. [ 926.036487][ T2271] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 926.128752][ T2271] bond5 (unregistering): Released all slaves [ 926.485197][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7767'. [ 926.496413][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7767'. [ 926.746190][ T2307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7770'. [ 926.823320][ T2310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7772'. [ 926.947788][ T2315] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7774'. [ 926.978890][ T2321] netlink: 'syz.2.7775': attribute type 9 has an invalid length. [ 927.264138][ T2328] ip6t_srh: unknown srh invflags 4000 [ 927.288123][ T2331] netlink: 'syz.2.7776': attribute type 1 has an invalid length. [ 927.466502][ T2331] bond4: (slave bridge8): Enslaving as a backup interface with an up link [ 927.531116][ T2331] bond4: (slave bridge9): Enslaving as a backup interface with a down link [ 928.006039][ T2384] netlink: 'syz.2.7791': attribute type 1 has an invalid length. [ 928.032974][ T2384] netlink: 'syz.2.7791': attribute type 2 has an invalid length. [ 928.287801][ T2414] nbd: couldn't find a device at index 1 [ 928.416951][ T2430] syz_tun: entered allmulticast mode [ 928.489593][ T2429] syz_tun (unregistering): left allmulticast mode [ 928.580384][ T2440] syzkaller0: entered promiscuous mode [ 928.593957][ T2440] syzkaller0: entered allmulticast mode [ 928.621099][ T2299] Bluetooth: hci4: command 0x0406 tx timeout [ 928.627488][ T2299] Bluetooth: hci2: command 0x0406 tx timeout [ 928.911498][ T2462] macvtap1: entered allmulticast mode [ 928.918576][ T2462] veth0_macvtap: entered allmulticast mode [ 929.050302][ T2467] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 929.059530][T27849] IPVS: starting estimator thread 0... [ 929.170065][ T2469] IPVS: using max 24 ests per chain, 57600 per kthread [ 929.789759][ T2529] syzkaller0: entered promiscuous mode [ 929.809602][ T2529] syzkaller0: entered allmulticast mode [ 930.065301][T27849] IPVS: starting estimator thread 0... [ 930.160956][ T2549] IPVS: using max 29 ests per chain, 69600 per kthread [ 930.438975][ T2564] __nla_validate_parse: 11 callbacks suppressed [ 930.439000][ T2564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7833'. [ 930.531363][ T2575] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7837'. [ 930.569684][ T2575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7837'. [ 930.584664][ T2575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7837'. [ 930.729757][ T2579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7839'. [ 931.424458][ T2613] pimreg3: entered allmulticast mode [ 931.539222][ T2622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7849'. [ 931.666407][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 931.675974][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 931.685559][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.697814][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 931.905899][ T2644] openvswitch: netlink: IP tunnel dst address not specified [ 931.928957][ T2642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7855'. [ 932.074037][ T2658] ipt_ECN: cannot use operation on non-tcp rule [ 932.099184][ T30] audit: type=1107 audit(1772929846.593:10): pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 932.697783][ T2697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'. [ 932.708899][ T2696] netlink: 'syz.3.7869': attribute type 3 has an invalid length. [ 932.717138][ T2696] netlink: 'syz.3.7869': attribute type 3 has an invalid length. [ 932.988222][ T2717] syzkaller0: entered promiscuous mode [ 933.000318][ T2717] syzkaller0: entered allmulticast mode [ 933.789520][ T2773] syzkaller0: entered promiscuous mode [ 933.795144][ T2773] syzkaller0: entered allmulticast mode [ 934.997523][ T2831] netlink: 'syz.1.7896': attribute type 5 has an invalid length. [ 935.421834][ T2884] netlink: 'syz.1.7906': attribute type 1 has an invalid length. [ 935.554116][ T2884] bond5: entered promiscuous mode [ 935.564710][ T2884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 935.840321][ T2892] syzkaller0: entered promiscuous mode [ 935.859483][ T2892] syzkaller0: entered allmulticast mode [ 936.100154][ T2924] netlink: 'syz.4.7913': attribute type 1 has an invalid length. [ 936.116380][ T2927] netlink: 'syz.1.7912': attribute type 1 has an invalid length. [ 936.124935][ T2927] __nla_validate_parse: 5 callbacks suppressed [ 936.124957][ T2927] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7912'. [ 936.149896][ T2927] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7912'. [ 936.162274][ T2927] netlink: 'syz.1.7912': attribute type 1 has an invalid length. [ 936.172404][ T2927] netlink: 618 bytes leftover after parsing attributes in process `syz.1.7912'. [ 936.466920][ T2939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.492514][ T2935] xt_socket: unknown flags 0x50 [ 937.026608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 937.034693][ C0] lec:lec_tx_timeout: lec0 [ 937.040042][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 938.234034][ T2922] syzkaller0: entered promiscuous mode [ 938.239658][ T2922] syzkaller0: entered allmulticast mode [ 938.251740][ T2924] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 938.395518][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7917'. [ 938.458938][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7917'. [ 938.495114][T27850] hid-generic 0005:0B57:0101.0002: item fetching failed at offset 0/1 [ 938.512467][T27850] hid-generic 0005:0B57:0101.0002: probe with driver hid-generic failed with error -22 [ 939.256978][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7923'. [ 939.269434][ T2968] netlink: 'syz.0.7923': attribute type 1 has an invalid length. [ 940.838107][ T2968] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 940.986745][ T2976] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7925'. [ 941.087683][ T2985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7928'. [ 941.256493][ T2995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7931'. [ 941.321304][ T2995] macsec1: entered promiscuous mode [ 941.328342][ T2995] bridge0: entered promiscuous mode [ 941.333776][ T2995] macsec1: entered allmulticast mode [ 941.339607][ T2995] bridge0: entered allmulticast mode [ 941.350164][ T2995] bridge0: port 3(macsec1) entered blocking state [ 941.372018][ T2995] bridge0: port 3(macsec1) entered disabled state [ 941.411108][ T2995] bridge0: left allmulticast mode [ 941.430790][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7935'. [ 941.433297][ T2995] bridge0: left promiscuous mode [ 941.567888][ T3018] x_tables: unsorted entry at hook 3 [ 941.735500][ T3028] netlink: 'syz.4.7940': attribute type 1 has an invalid length. [ 941.778294][ T3028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 941.803421][ T3028] vlan0: entered promiscuous mode [ 941.808888][ T3028] bond6: entered promiscuous mode [ 941.814140][ T3028] vlan0: entered allmulticast mode [ 941.823630][ T3028] bond6: entered allmulticast mode [ 941.842258][ T3028] syzkaller0: entered promiscuous mode [ 941.848705][ T3028] syzkaller0: entered allmulticast mode [ 942.029480][ T3038] xt_l2tp: invalid flags combination: 8 [ 942.056098][ T3041] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7943'. [ 942.065371][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 942.065413][ C0] lec:lec_tx_timeout: lec0 [ 942.115585][ T3041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7943'. [ 942.320968][ T3051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7945'. [ 942.465007][ T3064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7947'. [ 942.494629][ T3060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7947'. [ 942.713008][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7953'. [ 942.806129][ T3091] netlink: 'syz.4.7955': attribute type 11 has an invalid length. [ 942.882425][ T3096] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7956'. [ 942.974490][ T3106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7957'. [ 943.091368][ T3106] netlink: 'syz.0.7957': attribute type 5 has an invalid length. [ 943.111889][ T3106] syzkaller1: entered promiscuous mode [ 943.142863][ T3106] syzkaller1: entered allmulticast mode [ 943.817152][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 90 seconds [ 943.828697][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 90 seconds [ 943.840421][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 90 seconds [ 943.851825][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 90 seconds [ 945.680296][ T3083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.014701][ T3150] netlink: 'syz.4.7963': attribute type 1 has an invalid length. [ 946.043401][ T3150] netlink: 'syz.4.7963': attribute type 2 has an invalid length. [ 946.140439][ T3159] netlink: 'syz.1.7961': attribute type 21 has an invalid length. [ 946.150061][ T3159] IPv6: NLM_F_CREATE should be specified when creating new route [ 946.159070][ T3159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.166427][ T3159] IPv6: NLM_F_CREATE should be set when creating new route [ 946.173788][ T3159] IPv6: NLM_F_CREATE should be set when creating new route [ 946.181086][ T3159] IPv6: NLM_F_CREATE should be set when creating new route [ 946.190735][ T3159] netlink: 'syz.1.7961': attribute type 21 has an invalid length. [ 946.200677][ T3159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.263096][ T3163] openvswitch: netlink: Key type 158 is out of range max 32 [ 946.318311][ T3165] netlink: 'syz.2.7970': attribute type 1 has an invalid length. [ 946.346190][ T3165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 946.378335][ T3165] bond5: (slave veth7): Enslaving as an active interface with a down link [ 947.030847][ T3185] __nla_validate_parse: 1 callbacks suppressed [ 947.030871][ T3185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7975'. [ 948.927321][ T3140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.133679][ T3204] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7981'. [ 949.160242][ T3206] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7981'. [ 949.319742][ T3216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7983'. [ 949.642917][ T3228] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7985'. [ 949.661132][ T3238] netlink: 'syz.2.7988': attribute type 1 has an invalid length. [ 949.718458][ T3244] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7989'. [ 949.793209][ T3238] bond6: entered promiscuous mode [ 949.812472][ T3238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 949.919165][ T3255] bond6: (slave bridge10): making interface the new active one [ 949.955606][ T3255] bridge10: entered promiscuous mode [ 949.998249][ T3255] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 950.294411][ T3277] netlink: 'syz.2.7999': attribute type 3 has an invalid length. [ 950.313820][ T3277] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7999'. [ 950.388816][ T3287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8002'. [ 950.497748][ T3292] erspan0: entered allmulticast mode [ 950.599360][ T3304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8007'. [ 950.680273][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8009'. [ 953.428231][ T3292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 953.609074][ T3331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8016'. [ 953.681798][ T3331] bridge0: port 3(gretap0) entered blocking state [ 953.693928][ T3331] bridge0: port 3(gretap0) entered disabled state [ 953.727944][ T3331] gretap0: entered allmulticast mode [ 953.735230][ T3331] gretap0: entered promiscuous mode [ 953.980265][ T3351] netlink: 'syz.1.8023': attribute type 142 has an invalid length. [ 953.997068][ T3361] tipc: Started in network mode [ 954.002108][ T3361] tipc: Node identity 2a56daef67b6, cluster identity 4711 [ 954.042417][ T3361] tipc: Enabled bearer , priority 0 [ 954.153524][ T3361] tipc: Disabling bearer [ 954.255742][ T3378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8028'. [ 954.319998][ T3385] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 954.347035][ T3380] lo speed is unknown, defaulting to 1000 [ 954.525232][ T3404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8032'. [ 954.536885][ T3404] netlink: 'syz.1.8032': attribute type 7 has an invalid length. [ 954.544688][ T3404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8032'. [ 954.615262][ T3411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8033'. [ 954.730857][ T3404] erspan0: entered promiscuous mode [ 954.738237][ T3404] gretap0: entered promiscuous mode [ 954.745247][ T3404] debugfs: 'hsr1' already exists in 'hsr' [ 954.753798][ T3404] Cannot create hsr debugfs directory [ 954.767859][ T3409] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8031'. [ 954.890281][ T3416] bridge6: port 1(veth0_to_bond) entered blocking state [ 954.902318][ T3416] bridge6: port 1(veth0_to_bond) entered disabled state [ 954.912237][ T3426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8036'. [ 954.924907][ T3416] veth0_to_bond: entered allmulticast mode [ 954.935807][ T3416] veth0_to_bond: entered promiscuous mode [ 954.995198][ T3425] syzkaller0: entered promiscuous mode [ 955.009462][ T3425] syzkaller0: entered allmulticast mode [ 955.228880][ T3437] netlink: 'syz.0.8040': attribute type 2 has an invalid length. [ 955.241766][ T3437] netlink: 'syz.0.8040': attribute type 11 has an invalid length. [ 955.266674][ T3437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8040'. [ 955.315365][ T3440] netlink: 'syz.3.8041': attribute type 1 has an invalid length. [ 955.356438][ T3440] bond9: entered promiscuous mode [ 955.362291][ T3440] 8021q: adding VLAN 0 to HW filter on device bond9 [ 955.373165][ T3444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8043'. [ 955.450694][ T3440] 8021q: adding VLAN 0 to HW filter on device bond9 [ 955.459264][ T3440] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 955.469511][ T3445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8041'. [ 955.482515][ T3440] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 955.507309][ T3440] bond9: (slave vti0): making interface the new active one [ 955.515517][ T3440] vti0: entered promiscuous mode [ 955.524593][ T3440] bond9: (slave vti0): Enslaving as an active interface with an up link [ 955.553161][ T3455] syz.4.8042: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 955.591168][ T3455] CPU: 1 UID: 0 PID: 3455 Comm: syz.4.8042 Not tainted syzkaller #0 PREEMPT(full) [ 955.591198][ T3455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.591212][ T3455] Call Trace: [ 955.591222][ T3455] [ 955.591232][ T3455] dump_stack_lvl+0xe8/0x150 [ 955.591266][ T3455] warn_alloc+0x249/0x340 [ 955.591291][ T3455] ? stack_trace_save+0xa9/0x100 [ 955.591316][ T3455] ? __pfx_warn_alloc+0x10/0x10 [ 955.591350][ T3455] ? kasan_save_track+0x4f/0x80 [ 955.591372][ T3455] ? kasan_save_track+0x3e/0x80 [ 955.591395][ T3455] ? __kasan_kmalloc+0x93/0xb0 [ 955.591418][ T3455] ? __kmalloc_cache_noprof+0x31c/0x660 [ 955.591441][ T3455] ? xskq_create+0x56/0x170 [ 955.591467][ T3455] ? xsk_setsockopt+0x54c/0x990 [ 955.591489][ T3455] ? do_sock_setsockopt+0x17c/0x1b0 [ 955.591517][ T3455] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 955.591549][ T3455] ? do_syscall_64+0x14d/0xf80 [ 955.591585][ T3455] __vmalloc_node_range_noprof+0x132/0x1730 [ 955.591645][ T3455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 955.591674][ T3455] ? __kasan_kmalloc+0x93/0xb0 [ 955.591701][ T3455] vmalloc_user_noprof+0xad/0xe0 [ 955.591724][ T3455] ? xskq_create+0xbf/0x170 [ 955.591754][ T3455] xskq_create+0xbf/0x170 [ 955.591790][ T3455] xsk_init_queue+0x8a/0xe0 [ 955.591824][ T3455] xsk_setsockopt+0x54c/0x990 [ 955.591858][ T3455] ? __pfx_xsk_setsockopt+0x10/0x10 [ 955.591899][ T3455] ? __pfx_aa_sk_perm+0x10/0x10 [ 955.591932][ T3455] ? aa_sock_opt_perm+0xff/0x1a0 [ 955.591962][ T3455] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 955.591986][ T3455] ? __pfx_xsk_setsockopt+0x10/0x10 [ 955.592015][ T3455] do_sock_setsockopt+0x17c/0x1b0 [ 955.592053][ T3455] __x64_sys_setsockopt+0x13d/0x1b0 [ 955.592089][ T3455] do_syscall_64+0x14d/0xf80 [ 955.592122][ T3455] ? trace_irq_disable+0x3b/0x150 [ 955.592154][ T3455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.592178][ T3455] ? clear_bhb_loop+0x40/0x90 [ 955.592206][ T3455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.592229][ T3455] RIP: 0033:0x7fb1fb59c799 [ 955.592250][ T3455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.592271][ T3455] RSP: 002b:00007fb1f97d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 955.592295][ T3455] RAX: ffffffffffffffda RBX: 00007fb1fb816180 RCX: 00007fb1fb59c799 [ 955.592312][ T3455] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 955.592326][ T3455] RBP: 00007fb1fb632bd9 R08: 0000000000000004 R09: 0000000000000000 [ 955.592340][ T3455] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.592356][ T3455] R13: 00007fb1fb816218 R14: 00007fb1fb816180 R15: 00007ffe119d4078 [ 955.592391][ T3455] [ 955.592400][ T3455] Mem-Info: [ 955.921236][ T3455] active_anon:6412 inactive_anon:0 isolated_anon:0 [ 955.921236][ T3455] active_file:2761 inactive_file:40539 isolated_file:0 [ 955.921236][ T3455] unevictable:768 dirty:78 writeback:0 [ 955.921236][ T3455] slab_reclaimable:13452 slab_unreclaimable:129020 [ 955.921236][ T3455] mapped:29576 shmem:1376 pagetables:1490 [ 955.921236][ T3455] sec_pagetables:0 bounce:0 [ 955.921236][ T3455] kernel_misc_reclaimable:0 [ 955.921236][ T3455] free:1270871 free_pcp:26863 free_cma:0 [ 956.038363][ T3455] Node 0 active_anon:25504kB inactive_anon:0kB active_file:11044kB inactive_file:161960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28052kB dirty:308kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17824kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 956.124570][ T3455] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90112kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 956.158285][ T3455] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 956.189912][ T3455] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 956.200221][ T3455] Node 0 DMA32 free:1365452kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25404kB inactive_anon:0kB active_file:11044kB inactive_file:161960kB unevictable:1536kB writepending:308kB zspages:0kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:40448kB local_pcp:21260kB free_cma:0kB [ 956.248021][ T3455] lowmem_reserve[]: 0 0 0 0 0 [ 956.253032][ T3455] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 956.284036][ T3455] lowmem_reserve[]: 0 0 0 0 0 [ 956.290292][ T3455] Node 1 Normal free:3709536kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:65076kB local_pcp:32480kB free_cma:0kB [ 956.324409][ T3455] lowmem_reserve[]: 0 0 0 0 0 [ 956.330537][ T3455] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 956.363001][ T3455] Node 0 DMA32: 10091*4kB (UME) 8698*8kB (UME) 4954*16kB (UME) 205*32kB (UME) 87*64kB (UME) 352*128kB (UME) 739*256kB (UM) 526*512kB (UM) 375*1024kB (UME) 135*2048kB (UM) 0*4096kB = 1365372kB [ 956.388693][ T3455] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 956.412730][ T3455] Node 1 Normal: 6*4kB (UME) 15*8kB (UME) 19*16kB (UME) 11*32kB (UME) 15*64kB (UME) 9*128kB (UME) 11*256kB (UME) 10*512kB (UME) 6*1024kB (UM) 5*2048kB (UE) 899*4096kB (UM) = 3709536kB [ 956.434412][ T3455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 956.444535][ T3455] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 956.454258][ T3455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 956.468447][ T3455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 956.479249][ T3455] 44672 total pagecache pages [ 956.484069][ T3455] 0 pages in swap cache [ 956.489514][ T3455] Free swap = 124996kB [ 956.493833][ T3455] Total swap = 124996kB [ 956.499609][ T3455] 2097051 pages RAM [ 956.503682][ T3455] 0 pages HighMem/MovableOnly [ 956.509401][ T3455] 427019 pages reserved [ 956.513894][ T3455] 0 pages cma reserved [ 957.149970][ T3518] netlink: 'syz.2.8058': attribute type 1 has an invalid length. [ 957.255595][ T3518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 957.350246][ T3533] IPv6: sit1: Disabled Multicast RS [ 957.359092][ T3533] sit1: entered allmulticast mode [ 957.451317][ T3536] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 957.685201][ T3549] 8021q: VLANs not supported on lo [ 957.714666][ T3555] sctp: [Deprecated]: syz.1.8072 (pid 3555) Use of int in maxseg socket option. [ 957.714666][ T3555] Use struct sctp_assoc_value instead [ 957.738985][ T3555] Cannot find add_set index 0 as target [ 957.745443][ T3552] sctp: [Deprecated]: syz.0.8071 (pid 3552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.745443][ T3552] Use struct sctp_sack_info instead [ 957.903632][ T3564] sctp: [Deprecated]: syz.0.8074 (pid 3564) Use of int in maxseg socket option. [ 957.903632][ T3564] Use struct sctp_assoc_value instead [ 957.960112][ T3564] openvswitch: netlink: Flow key attr not present in new flow. [ 959.983520][ T3502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 960.184663][ T3589] Cannot find add_set index 65532 as target [ 960.320345][T20734] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe2 [ 960.364168][ T3592] __nla_validate_parse: 9 callbacks suppressed [ 960.364193][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8082'. [ 960.380448][ T3592] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8082'. [ 960.477932][ T3608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8085'. [ 960.530163][ T3610] sch_fq: defrate 53322 ignored. [ 960.539463][ T3615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.144209][ T3637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8093'. [ 961.195733][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8093'. [ 961.234249][ T3640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8093'. [ 961.284320][ T3638] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8094'. [ 961.319648][ T3638] nbd: illegal input index -8454144 [ 961.341840][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8094'. [ 961.438792][ T3638] bond0: option xmit_hash_policy: invalid value (64) [ 961.451493][ T3638] bond0 (unregistering): Released all slaves [ 961.505810][ T3654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8098'. [ 961.676324][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8102'. [ 962.178469][ T3691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 962.286881][ T3694] block nbd7: server does not support multiple connections per device. [ 962.310298][ T3694] block nbd7: shutting down sockets [ 962.331227][ T3701] netlink: 'syz.3.8116': attribute type 2 has an invalid length. [ 963.423386][T20734] bond0 (unregistering): Released all slaves [ 963.434766][T20734] bond1 (unregistering): Released all slaves [ 963.450839][T20734] bond2 (unregistering): Released all slaves [ 963.474664][T20734] bond3 (unregistering): Released all slaves [ 963.490967][T20734] bond4 (unregistering): Released all slaves [ 963.540725][T20734] bond5 (unregistering): Released all slaves [ 963.555606][T20734] bond6 (unregistering): Released all slaves [ 963.581662][T20734] bond7 (unregistering): Released all slaves [ 963.601856][T20734] bond8 (unregistering): Released all slaves [ 963.620231][T20734] bond9 (unregistering): Released all slaves [ 963.640032][T20734] bond10 (unregistering): (slave team_slave_0): Releasing backup interface [ 963.657335][T20734] bond10 (unregistering): Released all slaves [ 963.676405][T20734] bond11 (unregistering): Released all slaves [ 963.693264][ T3717] sit0: entered promiscuous mode [ 963.703459][ T3717] netlink: 'syz.3.8121': attribute type 1 has an invalid length. [ 963.713187][ T3718] veth1_to_team: entered promiscuous mode [ 963.876420][ T3741] netlink: 'syz.3.8129': attribute type 12 has an invalid length. [ 963.940001][ T3741] bond10: option primary_reselect: invalid value (255) [ 963.959966][ T3741] bond10 (unregistering): Released all slaves [ 964.015363][T20734] tipc: Left network mode [ 964.051365][ T3741] netlink: 'syz.3.8129': attribute type 12 has an invalid length. [ 964.195940][ T3741] bond10: option primary_reselect: invalid value (255) [ 964.251870][ T3741] bond10 (unregistering): Released all slaves [ 964.401255][ T3741] netlink: 'syz.3.8129': attribute type 12 has an invalid length. [ 964.558182][ T3741] bond10: option primary_reselect: invalid value (255) [ 964.588492][ T3741] bond10 (unregistering): Released all slaves [ 965.130036][ T3787] syzkaller0: entered promiscuous mode [ 965.136158][ T3787] syzkaller0: entered allmulticast mode [ 965.184358][ T3800] netlink: 'syz.0.8144': attribute type 21 has an invalid length. [ 965.284190][ T3800] netlink: 'syz.0.8144': attribute type 21 has an invalid length. [ 965.323318][T20713] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.378645][T20713] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.395834][T20713] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.446760][T20713] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.409818][ T3855] syzkaller0: entered promiscuous mode [ 966.415536][ T3855] syzkaller0: entered allmulticast mode [ 966.635861][ T3864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.875727][ T3875] __nla_validate_parse: 16 callbacks suppressed [ 966.875750][ T3875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8168'. [ 966.897745][ T3875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8168'. [ 967.184992][ T3885] syzkaller1: entered promiscuous mode [ 967.207596][ T3885] syzkaller1: entered allmulticast mode [ 967.268855][T20734] IPVS: stop unused estimator thread 0... [ 967.341006][ T3902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8176'. [ 967.376837][ T3902] netlink: 'syz.1.8176': attribute type 7 has an invalid length. [ 967.403234][ T3902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8176'. [ 967.549977][T20728] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.581029][T20728] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.603032][T20728] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.910620][ T3939] netlink: 'syz.4.8188': attribute type 2 has an invalid length. [ 968.049225][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8189'. [ 970.706208][ T3917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 970.717074][ T3921] nbd: must specify at least one socket [ 970.870628][ T3949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.895599][ T3951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8193'. [ 970.926217][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8192'. [ 971.001091][ T3955] 8021q: adding VLAN 0 to HW filter on device bond7 [ 971.127976][ T3971] IPVS: set_ctl: invalid protocol: 117 0.0.0.0:20000 [ 971.463828][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8200'. [ 971.677182][ T4002] netlink: 'syz.4.8208': attribute type 10 has an invalid length. [ 971.705730][ T4000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8207'. [ 971.718162][ T4002] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 971.784871][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8209'. [ 971.978026][ T4013] syzkaller0: entered promiscuous mode [ 971.983710][ T4013] syzkaller0: entered allmulticast mode [ 972.102300][ T4026] __nla_validate_parse: 1 callbacks suppressed [ 972.102321][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8214'. [ 972.137974][ T4027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8214'. [ 972.168497][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8214'. [ 972.766263][ T4052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8219'. [ 972.885920][ T4056] nbd: must specify at least one socket [ 973.154307][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8222'. [ 973.899072][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 120 seconds [ 973.912794][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 120 seconds [ 973.924106][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 120 seconds [ 973.935338][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 120 seconds [ 974.653781][ T4067] hsr_slave_1 (unregistering): left promiscuous mode [ 974.864115][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8224'. [ 974.908605][ T4080] netlink: 294 bytes leftover after parsing attributes in process `syz.4.8226'. [ 974.924983][ T4081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8228'. [ 974.947526][ T4080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.956444][ T4081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8228'. [ 974.957620][ T4081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8228'. [ 975.260138][ T4096] netlink: 'syz.0.8232': attribute type 7 has an invalid length. [ 975.284011][ T4096] netlink: 'syz.0.8232': attribute type 7 has an invalid length. [ 975.382708][ T4108] netlink: 'syz.2.8236': attribute type 21 has an invalid length. [ 975.414416][ T4109] SET target dimension over the limit! [ 975.430736][ T4108] SET target dimension over the limit! [ 976.255797][ T4143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.403684][ T4153] bridge0: port 3(gretap0) entered blocking state [ 976.410372][ T4153] bridge0: port 3(gretap0) entered forwarding state [ 976.453180][ T4170] netlink: 'syz.4.8252': attribute type 2 has an invalid length. [ 976.506752][ T4174] delete_channel: no stack [ 976.519418][ T4153] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.539298][ T4153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 976.622802][ T4170] 9: entered promiscuous mode [ 977.133330][ T4211] __nla_validate_parse: 11 callbacks suppressed [ 977.133354][ T4211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8266'. [ 977.180086][ T4211] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8266'. [ 977.412427][T20715] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 977.424223][ T4232] netlink: 'syz.2.8269': attribute type 10 has an invalid length. [ 977.470915][ T4232] mac80211_hwsim hwsim62 wlan1: entered promiscuous mode [ 977.483024][ T4232] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 977.500753][ T4224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.673783][ T4244] tipc: New replicast peer: 255.255.255.255 [ 977.681120][ T4244] tipc: Enabled bearer , priority 10 [ 978.020012][ T4269] netlink: 'syz.2.8282': attribute type 1 has an invalid length. [ 978.197628][ T4269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 978.332019][ T4287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 978.339386][ T4287] IPv6: NLM_F_CREATE should be set when creating new route [ 978.764396][ T4324] netlink: 'syz.3.8299': attribute type 1 has an invalid length. [ 978.773168][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8299'. [ 978.939501][ T4335] bond10: option all_slaves_active: invalid value (222) [ 978.963018][ T4335] bond10 (unregistering): Released all slaves [ 979.496383][ T4372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8315'. [ 979.531134][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8315'. [ 979.544818][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8315'. [ 979.607483][ T4377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8316'. [ 979.888311][ T4394] sctp: [Deprecated]: syz.2.8318 (pid 4394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 979.888311][ T4394] Use struct sctp_sack_info instead [ 980.107963][ T4405] gre0: entered promiscuous mode [ 980.113102][ T4405] gre0: entered allmulticast mode [ 980.124847][ T4408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8320'. [ 980.141496][ T4411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8323'. [ 980.217457][ T4414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8320'. [ 980.235685][ T4414] nbd: nbd64 already in use [ 980.449058][ T2324] udevd[2324]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 980.678933][T20728] nci: nci_ntf_packet: unknown ntf opcode 0x10d [ 980.769267][ T4442] bond0: entered allmulticast mode [ 980.925701][ T4453] netlink: 'syz.3.8336': attribute type 1 has an invalid length. [ 980.954149][ T4453] netlink: 'syz.3.8336': attribute type 2 has an invalid length. [ 981.234323][ T4474] netlink: 'syz.2.8342': attribute type 3 has an invalid length. [ 983.506375][ T4428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.663436][ T4487] __nla_validate_parse: 9 callbacks suppressed [ 983.663460][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8345'. [ 983.824724][ T4498] netlink: 'syz.2.8350': attribute type 1 has an invalid length. [ 984.044666][ T4514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8354'. [ 984.057638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.135744][ T4524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8354'. [ 984.261846][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8356'. [ 984.655327][ T4543] netlink: 'syz.4.8363': attribute type 4 has an invalid length. [ 984.751380][ T4562] netlink: 'syz.0.8366': attribute type 1 has an invalid length. [ 984.755807][ T4563] netlink: 'syz.0.8366': attribute type 1 has an invalid length. [ 984.786489][ T4563] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8366'. [ 984.809938][ T4562] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8366'. [ 985.136618][ T4582] netlink: 'syz.2.8371': attribute type 7 has an invalid length. [ 987.579200][ T4551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.715222][ T4594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.844011][ T4604] netlink: 'syz.3.8379': attribute type 11 has an invalid length. [ 987.858346][ T4604] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8379'. [ 987.882792][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8379'. [ 988.110867][ T4612] syzkaller0: entered promiscuous mode [ 988.129846][ T4612] syzkaller0: entered allmulticast mode [ 988.149748][ T4617] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 988.241031][ T4612] bridge_slave_0 (unregistering): left allmulticast mode [ 988.249106][ T4612] bridge_slave_0 (unregistering): left promiscuous mode [ 988.256203][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.291194][ T4619] syzkaller0: entered allmulticast mode [ 988.303361][ T4621] syzkaller0 (unregistering): left allmulticast mode [ 988.574843][ T4632] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8386'. [ 988.607370][ T4632] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8386'. [ 988.616414][ T4632] netlink: 'syz.3.8386': attribute type 5 has an invalid length. [ 989.199838][ T4684] vlan1: entered allmulticast mode [ 989.205220][ T4684] bridge0: entered allmulticast mode [ 989.261902][ T4684] bridge0: port 3(vlan1) entered blocking state [ 989.289418][ T4684] bridge0: port 3(vlan1) entered disabled state [ 989.368779][ T4695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.390101][ T4688] __nla_validate_parse: 1 callbacks suppressed [ 989.390126][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8401'. [ 989.455241][ T4688] netlink: 'syz.4.8401': attribute type 10 has an invalid length. [ 989.486833][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8401'. [ 989.548957][ T4705] netlink: 'syz.1.8404': attribute type 1 has an invalid length. [ 989.570816][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8404'. [ 989.572551][ T4688] netlink: 'syz.4.8401': attribute type 1 has an invalid length. [ 989.600871][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8401'. [ 989.621983][ T4705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8404'. [ 989.660918][ T4705] tc_dump_action: action bad kind [ 989.737749][ T4710] bridge7: entered promiscuous mode [ 989.745394][ T4710] bridge7: entered allmulticast mode [ 989.850162][ T4716] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8409'. [ 989.906224][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8411'. [ 990.001289][ T4727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8412'. [ 990.030504][ T4725] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8410'. [ 990.059779][ T4725] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8410'. [ 990.349854][ T4741] veth0_to_team: entered allmulticast mode [ 990.617369][ T796] lo speed is unknown, defaulting to 1000 [ 990.623754][T27849] lo speed is unknown, defaulting to 1000 [ 990.671969][ T4755] netlink: 'syz.1.8418': attribute type 10 has an invalid length. [ 991.391963][ T4802] lo speed is unknown, defaulting to 1000 [ 991.782242][ T4825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 991.784030][ T4831] netlink: 'syz.3.8433': attribute type 32 has an invalid length. [ 991.971860][ T4831] bond11: Setting coupled_control to off (0) [ 992.177978][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 992.193400][ T4852] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 992.239657][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 992.295062][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 992.694114][ T4880] netlink: 'syz.0.8449': attribute type 1 has an invalid length. [ 992.870988][ T4880] bond4: entered promiscuous mode [ 992.884609][ T4880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 992.973704][ T4888] 8021q: adding VLAN 0 to HW filter on device bond4 [ 992.985272][ T4888] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 992.997637][ T4888] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 993.014369][ T4850] infiniband syz2: set active [ 993.021257][ T4850] infiniband syz2: added ip6_vti0 [ 993.033577][ T4888] bond4: (slave vti0): making interface the new active one [ 993.041927][ T4850] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 993.047924][ T4850] infiniband syz2: Couldn't open port 1 [ 993.059953][ T4888] vti0: entered promiscuous mode [ 993.089273][ T4888] bond4: (slave vti0): Enslaving as an active interface with an up link [ 993.103661][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.114754][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 993.131247][ T5845] ip6_vti0 speed is unknown, defaulting to 1000 [ 993.140615][ T4902] netlink: 'syz.3.8453': attribute type 12 has an invalid length. [ 993.149572][ T4902] netlink: 'syz.3.8453': attribute type 29 has an invalid length. [ 993.171359][ T4898] syzkaller1: left promiscuous mode [ 993.176761][ T4898] syzkaller1: left allmulticast mode [ 993.275536][ T4850] RDS/IB: syz2: added [ 993.280989][ T4850] smc: adding ib device syz2 with port count 1 [ 993.307229][ T4850] smc: ib device syz2 port 1 has no pnetid [ 993.313464][T29533] ip6_vti0 speed is unknown, defaulting to 1000 [ 993.330522][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 993.364115][ T4911] IPv6: NLM_F_CREATE should be specified when creating new route [ 994.140508][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 994.639727][ T4978] netlink: 'syz.3.8475': attribute type 1 has an invalid length. [ 994.922287][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 995.022073][ T4994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 995.088604][ T4997] xfrm3: entered promiscuous mode [ 995.104575][ T4997] xfrm3: entered allmulticast mode [ 995.552112][ T5021] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 995.617456][ T5017] netlink: 'syz.1.8483': attribute type 21 has an invalid length. [ 995.628472][ T5017] IPv6: NLM_F_CREATE should be specified when creating new route [ 995.793258][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 995.879134][ T5034] __nla_validate_parse: 15 callbacks suppressed [ 995.879157][ T5034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8488'. [ 995.918651][ T5036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 995.964528][ T5034] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 996.095386][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8490'. [ 996.156323][ T5047] netlink: 'syz.0.8490': attribute type 16 has an invalid length. [ 996.207737][ T5047] netlink: 'syz.0.8490': attribute type 17 has an invalid length. [ 996.207923][ T5042] netlink: 'syz.0.8490': attribute type 1 has an invalid length. [ 996.265105][ T5042] netlink: 'syz.0.8490': attribute type 2 has an invalid length. [ 996.282988][ T5047] gre0: left promiscuous mode [ 996.327804][ T5047] gre0: left allmulticast mode [ 996.402520][ T5047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 996.594331][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 996.689647][ T5072] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.8495'. [ 996.721200][ T5060] syzkaller0: entered promiscuous mode [ 996.726947][ T5060] syzkaller0: entered allmulticast mode [ 997.193255][T20715] tipc: Subscription rejected, illegal request [ 997.268226][ T5104] syz_tun: entered promiscuous mode [ 997.293732][ T5104] macvtap1: entered promiscuous mode [ 997.320819][ T5104] syz_tun: left promiscuous mode [ 997.474389][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 997.809041][ T5129] bond0: entered promiscuous mode [ 997.826287][ T5129] batadv0: entered promiscuous mode [ 997.849198][ T5129] debugfs: 'hsr0' already exists in 'hsr' [ 997.877174][ T5129] Cannot create hsr debugfs directory [ 997.886596][ T5129] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 997.909475][ T5129] hsr0: entered promiscuous mode [ 997.914515][ T5129] hsr0: entered allmulticast mode [ 997.950093][ T5129] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 997.968492][ T5129] bond0: left promiscuous mode [ 997.989346][ T5129] batadv0: left promiscuous mode [ 998.126582][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.134707][ C0] lec:lec_tx_timeout: lec0 [ 998.228797][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 998.313597][ T8795] lec:lec_start_xmit: lec0:No lecd attached [ 998.391327][ T5162] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8511'. [ 998.449718][ T5161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 998.457069][ T5161] IPv6: NLM_F_CREATE should be set when creating new route [ 998.464354][ T5161] IPv6: NLM_F_CREATE should be set when creating new route [ 998.471680][ T5161] IPv6: NLM_F_CREATE should be set when creating new route [ 998.501153][ T5161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 998.757906][ T5182] netlink: 'syz.1.8515': attribute type 1 has an invalid length. [ 998.810813][ T5182] bond6: entered promiscuous mode [ 998.820983][ T5182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 998.870747][ T5187] bond6: (slave bridge5): making interface the new active one [ 998.928619][ T5187] bridge5: entered promiscuous mode [ 998.935616][ T5187] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 999.031076][ T5183] bond6: (slave bridge6): Enslaving as a backup interface with an up link [ 999.125440][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 999.238649][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8518'. [ 999.738016][ T5225] netlink: 'syz.3.8524': attribute type 62 has an invalid length. [ 999.753959][ T5228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8524'. [ 999.862635][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 1000.613247][ T5275] netlink: 'syz.3.8534': attribute type 1 has an invalid length. [ 1000.736310][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8536'. [ 1000.760380][ T5279] syzkaller0: entered allmulticast mode [ 1001.023439][ T5297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.062789][ T5298] siw: device registration error -23 [ 1001.209112][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8542'. [ 1001.355348][ T5310] geneve2: entered promiscuous mode [ 1001.361581][ T5310] geneve2: entered allmulticast mode [ 1001.459406][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8545'. [ 1001.538339][ T5321] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1001.551181][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1001.631667][ T5319] team1: entered promiscuous mode [ 1001.637851][ T5319] team1: entered allmulticast mode [ 1001.824680][ T5332] syzkaller0: entered promiscuous mode [ 1001.836046][ T5332] syzkaller0: entered allmulticast mode [ 1002.923902][ T5396] syzkaller1: entered promiscuous mode [ 1002.935525][ T5396] syzkaller1: entered allmulticast mode [ 1003.001480][ T5405] syzkaller1: entered promiscuous mode [ 1003.025125][ T5405] syzkaller1: entered allmulticast mode [ 1003.199952][ T5411] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8569'. [ 1003.552177][ T5437] nbd: must specify an index to disconnect [ 1003.591543][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8576'. [ 1003.601580][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8576'. [ 1003.611760][ T5440] openvswitch: netlink: Unknown nsh attribute 0 [ 1003.978159][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 150 seconds [ 1003.986698][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1003.989841][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 150 seconds [ 1003.996957][ C0] lec:lec_tx_timeout: lec0 [ 1004.013404][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 150 seconds [ 1004.024655][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 150 seconds [ 1004.109037][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1004.162371][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1004.451468][ T5482] netlink: 'syz.3.8587': attribute type 58 has an invalid length. [ 1004.470738][ T5482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1004.568945][ T5497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.589343][ T5497] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1004.962037][ T5523] x_tables: duplicate underflow at hook 1 [ 1005.363295][ T5544] sctp: [Deprecated]: syz.1.8600 (pid 5544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1005.363295][ T5544] Use struct sctp_sack_info instead [ 1005.407654][ T5544] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1005.435683][ T5544] team0: Port device batadv1 added [ 1005.600747][ T5556] sctp: [Deprecated]: syz.3.8604 (pid 5556) Use of int in maxseg socket option. [ 1005.600747][ T5556] Use struct sctp_assoc_value instead [ 1005.786201][ T5568] syzkaller1: entered promiscuous mode [ 1005.793144][ T5568] syzkaller1: entered allmulticast mode [ 1006.069987][ T5535] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1006.227584][ T5583] syzkaller0: entered promiscuous mode [ 1006.250075][ T5583] syzkaller0: entered allmulticast mode [ 1006.275060][ T5590] __nla_validate_parse: 4 callbacks suppressed [ 1006.275166][ T5590] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8617'. [ 1006.339897][ T5583] 0: reclassify loop, rule prio 0, protocol 800 [ 1006.552906][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.565437][ T5615] netlink: 'syz.2.8621': attribute type 23 has an invalid length. [ 1006.568441][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.584632][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.596021][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.608291][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.623079][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.637868][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.649369][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.661386][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.673815][ T5613] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1006.765200][ T5621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8624'. [ 1006.796005][ T5623] netlink: 'syz.4.8625': attribute type 12 has an invalid length. [ 1006.827741][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8625'. [ 1006.858919][ T5623] netlink: 'syz.4.8625': attribute type 12 has an invalid length. [ 1006.878357][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8625'. [ 1006.906400][ T5627] bond9: entered promiscuous mode [ 1007.072239][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8628'. [ 1007.118118][ T5632] lo speed is unknown, defaulting to 1000 [ 1007.134219][ T5632] ip6_vti0 speed is unknown, defaulting to 1000 [ 1007.239529][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8630'. [ 1007.259145][T21521] Bluetooth: hci4: command 0x0406 tx timeout [ 1007.405197][ T5648] dvmrp6: entered allmulticast mode [ 1007.429559][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1007.440022][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1007.516445][T29535] IPVS: starting estimator thread 0... [ 1007.546256][ T5664] IPv6: NLM_F_CREATE should be specified when creating new route [ 1007.554604][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8636'. [ 1007.703499][ T5652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1007.712872][ T5660] IPVS: using max 28 ests per chain, 67200 per kthread [ 1007.893300][ T5676] team0: Device ip6gre2 is of different type [ 1008.000422][ T5673] bond5: entered promiscuous mode [ 1008.317775][ T5694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.562219][ T5712] netlink: 'syz.2.8648': attribute type 1 has an invalid length. [ 1008.580831][ T5709] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1008.581098][ T5710] netlink: 'syz.2.8648': attribute type 1 has an invalid length. [ 1008.620033][ T5714] netlink: ct family unspecified [ 1008.648559][ T5714] x_tables: duplicate underflow at hook 2 [ 1008.960282][ T5730] xt_policy: output policy not valid in PREROUTING and INPUT [ 1009.387392][ T5747] openvswitch: netlink: Flow actions attr not present in new flow. [ 1009.507589][T18578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.518334][T18578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.540171][T18578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.589842][T18578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.606110][T18578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.681707][ T5748] lo speed is unknown, defaulting to 1000 [ 1009.700782][ T5748] ip6_vti0 speed is unknown, defaulting to 1000 [ 1010.249622][ T5788] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1010.481380][ T5748] chnl_net:caif_netlink_parms(): no params data found [ 1010.728238][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.736872][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.744259][ T5748] bridge_slave_0: entered allmulticast mode [ 1010.752402][ T5748] bridge_slave_0: entered promiscuous mode [ 1010.797232][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.813488][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.827025][ T5748] bridge_slave_1: entered allmulticast mode [ 1010.843543][ T5748] bridge_slave_1: entered promiscuous mode [ 1010.863082][ T5831] syzkaller0: entered promiscuous mode [ 1010.873218][ T5831] syzkaller0: entered allmulticast mode [ 1010.983954][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.042212][ T5839] bond7: entered allmulticast mode [ 1011.054345][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.086073][ T5848] bridge7: entered promiscuous mode [ 1011.094505][ T5848] bridge7: entered allmulticast mode [ 1011.111222][ T5848] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1011.155346][ T5748] team0: Port device team_slave_0 added [ 1011.165613][ T5748] team0: Port device team_slave_1 added [ 1011.210668][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.219171][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.259585][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.307692][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.315273][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.343480][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.355833][ T5858] __nla_validate_parse: 11 callbacks suppressed [ 1011.355853][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8688'. [ 1011.407462][ T5858] bond8: Invalid ad_actor_system MAC address. [ 1011.413615][ T5858] bond8: option ad_actor_system: invalid value (1) [ 1011.423429][ T5858] bond8 (unregistering): Released all slaves [ 1011.481807][ T5748] hsr_slave_0: entered promiscuous mode [ 1011.489974][ T5748] hsr_slave_1: entered promiscuous mode [ 1011.497581][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 1011.503479][ T5748] Cannot create hsr debugfs directory [ 1011.660391][T21521] Bluetooth: hci0: command tx timeout [ 1011.680495][ T5748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.693083][ T5748] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.774836][ T5748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.789095][ T5748] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.857203][ T5748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.868843][ T5748] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.737111][T21521] Bluetooth: hci0: command tx timeout [ 1015.817303][T21521] Bluetooth: hci0: command tx timeout [ 1017.897260][T21521] Bluetooth: hci0: command tx timeout [ 1026.581924][T18578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.594482][T18578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.604508][T18578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.615424][T18578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.625185][T18578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.665070][T18578] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1026.676135][T18578] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1026.685719][T18578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1026.708354][T18578] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1026.716111][T18578] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1026.750267][ T5877] lo speed is unknown, defaulting to 1000 [ 1026.770080][ T5877] ip6_vti0 speed is unknown, defaulting to 1000 [ 1026.795028][T18578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1026.806125][T18578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1026.815095][T18578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1026.825136][T18578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1026.835302][ T5880] lo speed is unknown, defaulting to 1000 [ 1026.842391][T18578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1026.912110][ T5882] lo speed is unknown, defaulting to 1000 [ 1027.015082][ T5880] ip6_vti0 speed is unknown, defaulting to 1000 [ 1027.194428][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 1027.267417][ T5882] ip6_vti0 speed is unknown, defaulting to 1000 [ 1027.384935][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.392967][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.402252][ T5877] bridge_slave_0: entered allmulticast mode [ 1027.411275][ T5877] bridge_slave_0: entered promiscuous mode [ 1027.427523][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.434801][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.444434][ T5877] bridge_slave_1: entered allmulticast mode [ 1027.453819][ T5877] bridge_slave_1: entered promiscuous mode [ 1027.562013][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.624604][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.697595][T18578] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1027.709973][T18578] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1027.719592][T18578] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1027.736279][ T5877] team0: Port device team_slave_0 added [ 1027.745648][T18578] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1027.757420][T18578] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1027.766168][ T5877] team0: Port device team_slave_1 added [ 1027.843442][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.855783][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.883186][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.918247][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.925312][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.952485][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.972030][ T5892] lo speed is unknown, defaulting to 1000 [ 1028.012916][ T5892] ip6_vti0 speed is unknown, defaulting to 1000 [ 1028.060557][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 1028.083700][ T5877] hsr_slave_0: entered promiscuous mode [ 1028.092029][ T5877] hsr_slave_1: entered promiscuous mode [ 1028.099238][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 1028.105013][ T5877] Cannot create hsr debugfs directory [ 1028.309979][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 1028.422744][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.430095][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.438163][ T5880] bridge_slave_0: entered allmulticast mode [ 1028.445763][ T5880] bridge_slave_0: entered promiscuous mode [ 1028.480471][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.488184][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.495701][ T5880] bridge_slave_1: entered allmulticast mode [ 1028.504471][ T5880] bridge_slave_1: entered promiscuous mode [ 1028.606861][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.635442][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.643158][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.650750][ T5882] bridge_slave_0: entered allmulticast mode [ 1028.659169][ T5882] bridge_slave_0: entered promiscuous mode [ 1028.673531][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.683501][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.691960][ T5882] bridge_slave_1: entered allmulticast mode [ 1028.698392][T21521] Bluetooth: hci3: command tx timeout [ 1028.705819][ T5882] bridge_slave_1: entered promiscuous mode [ 1028.716086][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.773820][ T5880] team0: Port device team_slave_0 added [ 1028.783935][T21521] Bluetooth: hci6: command tx timeout [ 1028.829287][ T5880] team0: Port device team_slave_1 added [ 1028.854583][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.869385][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.937497][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.944595][T18578] Bluetooth: hci7: command tx timeout [ 1028.951330][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.978119][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.014118][ T5882] team0: Port device team_slave_0 added [ 1029.021470][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.030616][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.058078][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.089209][ T5882] team0: Port device team_slave_1 added [ 1029.159172][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 1029.174262][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.182065][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.208984][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.221869][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.229044][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.256421][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.329619][ T5880] hsr_slave_0: entered promiscuous mode [ 1029.336314][ T5880] hsr_slave_1: entered promiscuous mode [ 1029.344387][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 1029.350416][ T5880] Cannot create hsr debugfs directory [ 1029.430247][ T5882] hsr_slave_0: entered promiscuous mode [ 1029.437193][ T5882] hsr_slave_1: entered promiscuous mode [ 1029.444103][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 1029.450272][ T5882] Cannot create hsr debugfs directory [ 1029.516399][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.523804][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.532272][ T5892] bridge_slave_0: entered allmulticast mode [ 1029.539927][ T5892] bridge_slave_0: entered promiscuous mode [ 1029.573934][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.582867][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.592168][ T5892] bridge_slave_1: entered allmulticast mode [ 1029.600442][ T5892] bridge_slave_1: entered promiscuous mode [ 1029.680380][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.709950][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.773987][ T5892] team0: Port device team_slave_0 added [ 1029.812975][ T5892] team0: Port device team_slave_1 added [ 1029.822081][T18578] Bluetooth: hci8: command tx timeout [ 1029.877540][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.884545][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.912269][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.945330][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.953157][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.981465][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.072364][ T5892] hsr_slave_0: entered promiscuous mode [ 1030.079775][ T5892] hsr_slave_1: entered promiscuous mode [ 1030.086145][ T5892] debugfs: 'hsr0' already exists in 'hsr' [ 1030.092328][ T5892] Cannot create hsr debugfs directory [ 1030.776713][T18578] Bluetooth: hci3: command tx timeout [ 1030.857091][T18578] Bluetooth: hci6: command tx timeout [ 1031.018182][T18578] Bluetooth: hci7: command tx timeout [ 1031.896938][T18578] Bluetooth: hci8: command tx timeout [ 1032.857342][T18578] Bluetooth: hci3: command tx timeout [ 1032.936898][T18578] Bluetooth: hci6: command tx timeout [ 1033.097061][T18578] Bluetooth: hci7: command tx timeout [ 1033.987665][T18578] Bluetooth: hci8: command tx timeout [ 1034.060660][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 180 seconds [ 1034.071572][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 180 seconds [ 1034.083058][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 180 seconds [ 1034.095148][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 180 seconds [ 1034.936880][T18578] Bluetooth: hci3: command tx timeout [ 1035.016743][T18578] Bluetooth: hci6: command tx timeout [ 1035.188383][T18578] Bluetooth: hci7: command tx timeout [ 1036.057074][T18578] Bluetooth: hci8: command tx timeout [ 1036.353413][ T5190] udevd[5190]: worker [31295] /devices/virtual/block/nbd4 timeout; kill it [ 1036.362461][ T5190] udevd[5190]: seq 33902 '/devices/virtual/block/nbd4' killed [ 1039.177136][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.550455][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.561728][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1059.976676][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1059.984783][ C0] lec:lec_tx_timeout: lec0 [ 1061.679844][ T8795] lec:lec_start_xmit: lec0:No lecd attached [ 1064.142155][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 210 seconds [ 1064.153539][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 210 seconds [ 1064.165157][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 210 seconds [ 1064.176390][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 210 seconds [ 1067.026654][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 1067.034750][ C0] lec:lec_tx_timeout: lec0 [ 1070.074664][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1070.085498][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1070.098629][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1070.107196][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1070.114916][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1070.174174][ T5923] lo speed is unknown, defaulting to 1000 [ 1070.182985][ T5923] ip6_vti0 speed is unknown, defaulting to 1000 [ 1070.489722][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 1070.575231][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.582506][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.590971][ T5923] bridge_slave_0: entered allmulticast mode [ 1070.598864][ T5923] bridge_slave_0: entered promiscuous mode [ 1070.607930][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.615115][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.623240][ T5923] bridge_slave_1: entered allmulticast mode [ 1070.630980][ T5923] bridge_slave_1: entered promiscuous mode [ 1070.664352][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.677737][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.712111][ T5923] team0: Port device team_slave_0 added [ 1070.721411][ T5923] team0: Port device team_slave_1 added [ 1070.750734][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.757780][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.784919][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.798500][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.805468][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.832780][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.881368][ T5923] hsr_slave_0: entered promiscuous mode [ 1070.888605][ T5923] hsr_slave_1: entered promiscuous mode [ 1070.895023][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 1070.900963][ T5923] Cannot create hsr debugfs directory [ 1071.986808][T18578] Bluetooth: hci1: command 0x0406 tx timeout [ 1072.217518][T21521] Bluetooth: hci9: command tx timeout [ 1074.307680][T21521] Bluetooth: hci9: command tx timeout [ 1076.377394][T21521] Bluetooth: hci9: command tx timeout [ 1078.456713][T21521] Bluetooth: hci9: command tx timeout [ 1087.182968][T18578] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1087.194486][T18578] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1087.205967][T18578] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1087.226039][T18578] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1087.234719][T18578] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1087.254706][T18578] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1087.283022][T18578] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1087.291819][ T2299] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1087.304241][ T2299] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1087.315161][T18578] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1087.323300][ T2299] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1087.333035][T18578] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1087.343790][T18578] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1087.351757][ T2299] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1087.363397][T21521] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1087.400438][ T5937] lo speed is unknown, defaulting to 1000 [ 1087.429711][ T5937] ip6_vti0 speed is unknown, defaulting to 1000 [ 1087.449156][ T5939] lo speed is unknown, defaulting to 1000 [ 1087.459949][ T5941] lo speed is unknown, defaulting to 1000 [ 1087.604344][ T5941] ip6_vti0 speed is unknown, defaulting to 1000 [ 1087.803446][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 1087.863515][ T5939] ip6_vti0 speed is unknown, defaulting to 1000 [ 1088.001095][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.009266][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.017714][ T5937] bridge_slave_0: entered allmulticast mode [ 1088.026087][ T5937] bridge_slave_0: entered promiscuous mode [ 1088.050426][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.076840][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.084271][ T5937] bridge_slave_1: entered allmulticast mode [ 1088.104160][ T5937] bridge_slave_1: entered promiscuous mode [ 1088.188747][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.205874][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.306416][ T2299] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1088.317752][ T2299] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1088.330318][ T2299] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1088.339523][ T2299] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1088.346294][ T5937] team0: Port device team_slave_0 added [ 1088.355489][ T2299] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1088.394942][ T5937] team0: Port device team_slave_1 added [ 1088.448400][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.455405][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.483686][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.511575][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.533182][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.560632][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.613271][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 1088.677521][ T5937] hsr_slave_0: entered promiscuous mode [ 1088.685332][ T5937] hsr_slave_1: entered promiscuous mode [ 1088.692377][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 1088.699308][ T5937] Cannot create hsr debugfs directory [ 1088.720841][ T5952] lo speed is unknown, defaulting to 1000 [ 1088.760938][ T5952] ip6_vti0 speed is unknown, defaulting to 1000 [ 1088.915162][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.923440][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.932334][ T5941] bridge_slave_0: entered allmulticast mode [ 1088.943306][ T5941] bridge_slave_0: entered promiscuous mode [ 1088.980778][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.996994][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.004448][ T5941] bridge_slave_1: entered allmulticast mode [ 1089.024212][ T5941] bridge_slave_1: entered promiscuous mode [ 1089.139002][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 1089.155548][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.175866][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.301593][ T5941] team0: Port device team_slave_0 added [ 1089.333294][ T5941] team0: Port device team_slave_1 added [ 1089.339621][T21521] Bluetooth: hci10: command tx timeout [ 1089.417586][T21521] Bluetooth: hci11: command tx timeout [ 1089.426963][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.428696][T21521] Bluetooth: hci12: command tx timeout [ 1089.433955][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.467909][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.482171][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.489561][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.517307][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.528910][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.536095][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.543796][ T5939] bridge_slave_0: entered allmulticast mode [ 1089.552617][ T5939] bridge_slave_0: entered promiscuous mode [ 1089.562932][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.570322][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.578825][ T5939] bridge_slave_1: entered allmulticast mode [ 1089.586930][ T5939] bridge_slave_1: entered promiscuous mode [ 1089.644269][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.678465][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.742926][ T5941] hsr_slave_0: entered promiscuous mode [ 1089.751207][ T5941] hsr_slave_1: entered promiscuous mode [ 1089.758946][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 1089.764695][ T5941] Cannot create hsr debugfs directory [ 1089.790912][ T5939] team0: Port device team_slave_0 added [ 1089.821243][ T5939] team0: Port device team_slave_1 added [ 1089.935967][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.943624][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.971099][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.984276][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.991756][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.018521][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.030081][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 1090.161624][ T5939] hsr_slave_0: entered promiscuous mode [ 1090.169202][ T5939] hsr_slave_1: entered promiscuous mode [ 1090.175529][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 1090.181724][ T5939] Cannot create hsr debugfs directory [ 1090.325443][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.332913][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.340604][ T5952] bridge_slave_0: entered allmulticast mode [ 1090.349620][ T5952] bridge_slave_0: entered promiscuous mode [ 1090.358910][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.366135][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.374498][ T5952] bridge_slave_1: entered allmulticast mode [ 1090.385715][ T5952] bridge_slave_1: entered promiscuous mode [ 1090.455745][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.465275][T21521] Bluetooth: hci13: command tx timeout [ 1090.498132][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.562396][ T5952] team0: Port device team_slave_0 added [ 1090.579266][ T5952] team0: Port device team_slave_1 added [ 1090.661261][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.669371][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.698738][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.720995][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.728614][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.754904][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.811034][ T5952] hsr_slave_0: entered promiscuous mode [ 1090.826363][ T5952] hsr_slave_1: entered promiscuous mode [ 1090.835383][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 1090.841435][ T5952] Cannot create hsr debugfs directory [ 1091.417687][T21521] Bluetooth: hci10: command tx timeout [ 1091.498017][T21521] Bluetooth: hci12: command tx timeout [ 1091.503610][T21521] Bluetooth: hci11: command tx timeout [ 1092.536875][T21521] Bluetooth: hci13: command tx timeout [ 1093.497385][T21521] Bluetooth: hci10: command tx timeout [ 1093.577212][T21521] Bluetooth: hci11: command tx timeout [ 1093.577222][ T2299] Bluetooth: hci12: command tx timeout [ 1094.222685][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 240 seconds [ 1094.234201][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 240 seconds [ 1094.246451][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 240 seconds [ 1094.258140][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 240 seconds [ 1094.618569][T21521] Bluetooth: hci13: command tx timeout [ 1095.577800][T21521] Bluetooth: hci10: command tx timeout [ 1095.657080][T21521] Bluetooth: hci12: command tx timeout [ 1095.657087][ T2299] Bluetooth: hci11: command tx timeout [ 1096.696834][ T2299] Bluetooth: hci13: command tx timeout [ 1110.877472][T20713] veth5: left allmulticast mode [ 1110.882386][T20713] veth5: left promiscuous mode [ 1110.889059][T20713] bridge5: port 1(veth5) entered disabled state [ 1111.601670][T20713] bond1 (unregistering): Released all slaves [ 1111.616190][T20713] bond2 (unregistering): Released all slaves [ 1111.632765][T20713] bond3 (unregistering): Released all slaves [ 1111.652087][T20713] bond4 (unregistering): Released all slaves [ 1111.675911][T20713] bond0 (unregistering): Released all slaves [ 1111.694713][T20713] bond5 (unregistering): Released all slaves [ 1111.710461][T20713] bond6 (unregistering): Released all slaves [ 1111.725378][T20713] bond7 (unregistering): Released all slaves [ 1111.902390][T20713] 9: left promiscuous mode [ 1111.948224][T20713] : left promiscuous mode [ 1112.017913][T20713] tipc: Disabling bearer [ 1112.023497][T20713] tipc: Disabling bearer [ 1112.029427][T20713] tipc: Left network mode [ 1112.550794][T20713] hsr_slave_0: left promiscuous mode [ 1112.564164][T20713] hsr_slave_1: left promiscuous mode [ 1113.071107][T20713] IPVS: stop unused estimator thread 0... [ 1115.981485][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.993687][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1121.026648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1121.034741][ C0] lec:lec_tx_timeout: lec0 [ 1124.300017][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 270 seconds [ 1124.311028][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 270 seconds [ 1124.322119][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 270 seconds [ 1124.333817][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 270 seconds [ 1125.604421][ T8795] lec:lec_start_xmit: lec0:No lecd attached [ 1130.093322][T21521] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1130.104572][T21521] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1130.113202][T21521] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1130.121565][T21521] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1130.129978][T21521] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1130.170987][ T5977] lo speed is unknown, defaulting to 1000 [ 1130.178524][ T5977] ip6_vti0 speed is unknown, defaulting to 1000 [ 1130.442258][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 1130.526066][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.533639][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.541741][ T5977] bridge_slave_0: entered allmulticast mode [ 1130.549723][ T5977] bridge_slave_0: entered promiscuous mode [ 1130.558475][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.565673][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.573956][ T5977] bridge_slave_1: entered allmulticast mode [ 1130.581734][ T5977] bridge_slave_1: entered promiscuous mode [ 1130.615780][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.629984][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.663725][ T5977] team0: Port device team_slave_0 added [ 1130.672206][ T5977] team0: Port device team_slave_1 added [ 1130.704111][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.711254][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.738707][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.751728][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.758959][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.785866][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.834377][ T5977] hsr_slave_0: entered promiscuous mode [ 1130.841839][ T5977] hsr_slave_1: entered promiscuous mode [ 1130.848735][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 1130.854500][ T5977] Cannot create hsr debugfs directory [ 1131.016774][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1131.024883][ C0] lec:lec_tx_timeout: lec0 [ 1132.217077][T21521] Bluetooth: hci14: command tx timeout [ 1133.417206][T21521] Bluetooth: hci0: command 0x0406 tx timeout [ 1134.297365][ T2299] Bluetooth: hci14: command tx timeout [ 1136.376875][ T2299] Bluetooth: hci14: command tx timeout [ 1138.457545][ T2299] Bluetooth: hci14: command tx timeout [ 1147.102248][T18578] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1147.111341][T18578] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1147.121265][T18578] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1147.130711][T18578] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1147.139421][T18578] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1147.182316][ T5987] lo speed is unknown, defaulting to 1000 [ 1147.190537][ T5987] ip6_vti0 speed is unknown, defaulting to 1000 [ 1147.470281][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 1147.557332][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.564533][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.572104][ T5987] bridge_slave_0: entered allmulticast mode [ 1147.580264][ T5987] bridge_slave_0: entered promiscuous mode [ 1147.589692][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.597083][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.604399][ T5987] bridge_slave_1: entered allmulticast mode [ 1147.613240][ T5987] bridge_slave_1: entered promiscuous mode [ 1147.646985][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.660520][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.694492][ T5987] team0: Port device team_slave_0 added [ 1147.703116][ T5987] team0: Port device team_slave_1 added [ 1147.733979][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.741757][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.768766][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.781938][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.789083][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.815830][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.871729][ T5987] hsr_slave_0: entered promiscuous mode [ 1147.878849][ T5987] hsr_slave_1: entered promiscuous mode [ 1147.885311][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 1147.891277][ T5987] Cannot create hsr debugfs directory [ 1148.206168][T18578] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1148.220039][T18578] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1148.231370][T18578] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1148.241682][T18578] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1148.255287][T18578] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1148.264154][T18578] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1148.278798][T18578] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1148.289118][ T6001] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1148.300910][ T6001] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1148.318143][ T6001] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1148.351758][ T5998] lo speed is unknown, defaulting to 1000 [ 1148.359463][ T5998] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.471938][ T5999] lo speed is unknown, defaulting to 1000 [ 1148.604372][ T5999] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.780147][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1148.857943][ T5998] chnl_net:caif_netlink_parms(): no params data found [ 1148.991044][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.998925][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.007733][ T5998] bridge_slave_0: entered allmulticast mode [ 1149.015438][ T5998] bridge_slave_0: entered promiscuous mode [ 1149.024396][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.031895][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.040521][ T5998] bridge_slave_1: entered allmulticast mode [ 1149.049156][ T5998] bridge_slave_1: entered promiscuous mode [ 1149.151226][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.178520][ T2299] Bluetooth: hci15: command tx timeout [ 1149.193855][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.251720][ T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1149.271055][ T51] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1149.280538][ T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1149.289204][ T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1149.301066][ T51] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1149.332006][ T5998] team0: Port device team_slave_0 added [ 1149.341638][ T5998] team0: Port device team_slave_1 added [ 1149.348104][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 1149.411051][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.421225][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.448016][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.483304][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.490695][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.518315][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.573924][ T6013] lo speed is unknown, defaulting to 1000 [ 1149.605302][ T6013] ip6_vti0 speed is unknown, defaulting to 1000 [ 1149.610288][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.618972][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.627600][ T5999] bridge_slave_0: entered allmulticast mode [ 1149.635819][ T5999] bridge_slave_0: entered promiscuous mode [ 1149.661279][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.670432][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.678390][ T5999] bridge_slave_1: entered allmulticast mode [ 1149.686951][ T5999] bridge_slave_1: entered promiscuous mode [ 1149.703258][ T5998] hsr_slave_0: entered promiscuous mode [ 1149.711074][ T5998] hsr_slave_1: entered promiscuous mode [ 1149.717887][ T5998] debugfs: 'hsr0' already exists in 'hsr' [ 1149.723664][ T5998] Cannot create hsr debugfs directory [ 1149.798804][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.839160][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.930838][ T5999] team0: Port device team_slave_0 added [ 1149.945911][ T5999] team0: Port device team_slave_1 added [ 1150.022824][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.029905][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.057513][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.082387][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.090032][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.117192][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.239135][ T5999] hsr_slave_0: entered promiscuous mode [ 1150.246091][ T5999] hsr_slave_1: entered promiscuous mode [ 1150.253615][ T5999] debugfs: 'hsr0' already exists in 'hsr' [ 1150.259484][ T5999] Cannot create hsr debugfs directory [ 1150.306965][ T2299] Bluetooth: hci16: command tx timeout [ 1150.377921][ T2299] Bluetooth: hci17: command tx timeout [ 1150.522056][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 1150.661028][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.668498][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.676072][ T6013] bridge_slave_0: entered allmulticast mode [ 1150.684942][ T6013] bridge_slave_0: entered promiscuous mode [ 1150.695786][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.703560][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.711038][ T6013] bridge_slave_1: entered allmulticast mode [ 1150.720575][ T6013] bridge_slave_1: entered promiscuous mode [ 1150.771052][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.785210][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.835313][ T6013] team0: Port device team_slave_0 added [ 1150.844499][ T6013] team0: Port device team_slave_1 added [ 1150.887905][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.895270][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.922240][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.935126][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.949517][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.976040][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.042891][ T6013] hsr_slave_0: entered promiscuous mode [ 1151.050572][ T6013] hsr_slave_1: entered promiscuous mode [ 1151.057193][ T6013] debugfs: 'hsr0' already exists in 'hsr' [ 1151.062968][ T6013] Cannot create hsr debugfs directory [ 1151.258155][ T2299] Bluetooth: hci15: command tx timeout [ 1151.338211][ T2299] Bluetooth: hci18: command tx timeout [ 1152.376762][ T2299] Bluetooth: hci16: command tx timeout [ 1152.457986][ T2299] Bluetooth: hci17: command tx timeout [ 1153.337196][ T2299] Bluetooth: hci15: command tx timeout [ 1153.417116][ T2299] Bluetooth: hci18: command tx timeout [ 1153.900464][ T2299] Bluetooth: hci7: command 0x0406 tx timeout [ 1153.901890][T21521] Bluetooth: hci6: command 0x0406 tx timeout [ 1153.906793][ T2299] Bluetooth: hci8: command 0x0406 tx timeout [ 1154.382297][ T5155] block nbd4: Possible stuck request ffff8880276f0000: control (read@0,1024B). Runtime 300 seconds [ 1154.393281][ T5155] block nbd4: Possible stuck request ffff888027708000: control (read@1024,1024B). Runtime 300 seconds [ 1154.404629][ T5155] block nbd4: Possible stuck request ffff8880276f0200: control (read@2048,1024B). Runtime 300 seconds [ 1154.416269][ T5155] block nbd4: Possible stuck request ffff8880276f0400: control (read@3072,1024B). Runtime 300 seconds [ 1154.456743][ T51] Bluetooth: hci16: command tx timeout [ 1154.537739][ T51] Bluetooth: hci17: command tx timeout [ 1155.417315][ T51] Bluetooth: hci15: command tx timeout [ 1155.497233][ T51] Bluetooth: hci18: command tx timeout [ 1156.537425][ T51] Bluetooth: hci16: command tx timeout [ 1156.617106][ T51] Bluetooth: hci17: command tx timeout [ 1157.577112][ T51] Bluetooth: hci18: command tx timeout [ 1167.816986][ T31] INFO: task syz-executor:5748 blocked for more than 143 seconds. [ 1167.824985][ T31] Not tainted syzkaller #0 [ 1167.830188][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1167.839535][ T31] task:syz-executor state:D stack:22880 pid:5748 tgid:5748 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1167.851760][ T31] Call Trace: [ 1167.855077][ T31] [ 1167.858144][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1167.862824][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.868609][ T31] ? __pfx___schedule+0x10/0x10 [ 1167.873536][ T31] ? schedule+0x90/0x360 [ 1167.879883][ T31] schedule+0x164/0x360 [ 1167.884117][ T31] schedule_preempt_disabled+0x13/0x30 [ 1167.890880][ T31] __mutex_lock+0x7fe/0x1300 [ 1167.895525][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1167.901843][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1167.907923][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1167.912776][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1167.918474][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.923479][ T31] ? radix_tree_lookup+0x240/0x290 [ 1167.929388][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1167.933966][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.976997][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1167.982054][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1168.006571][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.012461][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1168.018246][ T31] ? down_read+0x272/0x2e0 [ 1168.022719][ T31] ? genl_rcv+0xd/0x40 [ 1168.027747][ T31] genl_rcv+0x28/0x40 [ 1168.031796][ T31] netlink_unicast+0x80f/0x9b0 [ 1168.037223][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1168.042583][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1168.048099][ T31] ? skb_put+0x11b/0x210 [ 1168.052509][ T31] netlink_sendmsg+0x813/0xb40 [ 1168.058548][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.063917][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1168.069430][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.074799][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.080732][ T31] __sys_sendto+0x672/0x710 [ 1168.086286][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1168.092519][ T31] ? fd_install+0x94/0x3d0 [ 1168.097116][ T31] ? fd_install+0x306/0x3d0 [ 1168.101677][ T31] __x64_sys_sendto+0xde/0x100 [ 1168.106659][ T31] do_syscall_64+0x14d/0xf80 [ 1168.111302][ T31] ? trace_irq_disable+0x3b/0x150 [ 1168.116362][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.123295][ T31] ? clear_bhb_loop+0x40/0x90 [ 1168.128150][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.134082][ T31] RIP: 0033:0x7fb79b95cfce [ 1168.138811][ T31] RSP: 002b:00007ffd4b326ea8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1168.152170][ T31] RAX: ffffffffffffffda RBX: 0000555572b9b500 RCX: 00007fb79b95cfce [ 1168.160629][ T31] RDX: 0000000000000020 RSI: 00007fb79c744670 RDI: 0000000000000005 [ 1168.169037][ T31] RBP: 0000000000000001 R08: 00007ffd4b326f24 R09: 000000000000000c [ 1168.177822][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1168.185850][ T31] R13: 00007ffd4b326f78 R14: 00007fb79c744670 R15: 0000000000000000 [ 1168.195163][ T31] [ 1168.198529][ T31] INFO: task syz.4.8684:5838 blocked for more than 143 seconds. [ 1168.206196][ T31] Not tainted syzkaller #0 [ 1168.211816][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.220889][ T31] task:syz.4.8684 state:D stack:26240 pid:5838 tgid:5836 ppid:29304 task_flags:0x480140 flags:0x00080002 [ 1168.232971][ T31] Call Trace: [ 1168.236292][ T31] [ 1168.239925][ T31] __schedule+0x15dd/0x52d0 [ 1168.244490][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.249607][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1168.254673][ T31] ? __pfx___schedule+0x10/0x10 [ 1168.259829][ T31] ? schedule+0x90/0x360 [ 1168.264126][ T31] schedule+0x164/0x360 [ 1168.269049][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1168.274779][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1168.280991][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1168.287344][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1168.293648][ T31] nbd_set_size+0x454/0x680 [ 1168.299752][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1168.304851][ T31] ? nla_memcpy+0x5b/0xc0 [ 1168.309622][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 1168.315065][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1168.320948][ T31] ? rcu_is_watching+0x15/0xb0 [ 1168.325761][ T31] ? trace_kmalloc+0x2a/0x110 [ 1168.331161][ T31] ? __nla_parse+0x40/0x60 [ 1168.335613][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1168.342218][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1168.347918][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1168.354017][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.359965][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1168.364516][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.369757][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1168.375534][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.380607][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1168.385439][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.391194][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1168.396642][ T31] ? down_read+0x272/0x2e0 [ 1168.401617][ T31] ? genl_rcv+0xd/0x40 [ 1168.405733][ T31] genl_rcv+0x28/0x40 [ 1168.410130][ T31] netlink_unicast+0x80f/0x9b0 [ 1168.414946][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1168.420896][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1168.425863][ T31] ? skb_put+0x11b/0x210 [ 1168.430237][ T31] netlink_sendmsg+0x813/0xb40 [ 1168.435060][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.440547][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1168.445581][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.451616][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1168.457091][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.462455][ T31] ? import_iovec+0x73/0xa0 [ 1168.467225][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1168.471965][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.478124][ T31] ? futex_wake+0x4ac/0x580 [ 1168.482757][ T31] ? __fget_files+0x2a/0x420 [ 1168.487534][ T31] ? __fget_files+0x3a0/0x420 [ 1168.492276][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1168.497394][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1168.503413][ T31] ? rcu_is_watching+0x15/0xb0 [ 1168.508774][ T31] do_syscall_64+0x14d/0xf80 [ 1168.513745][ T31] ? trace_irq_disable+0x3b/0x150 [ 1168.518997][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.525114][ T31] ? clear_bhb_loop+0x40/0x90 [ 1168.529942][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.535974][ T31] RIP: 0033:0x7fb1fb59c799 [ 1168.541433][ T31] RSP: 002b:00007fb1fc389028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.550033][ T31] RAX: ffffffffffffffda RBX: 00007fb1fb815fa0 RCX: 00007fb1fb59c799 [ 1168.558169][ T31] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000005 [ 1168.566176][ T31] RBP: 00007fb1fb632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1168.574907][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.583263][ T31] R13: 00007fb1fb816038 R14: 00007fb1fb815fa0 R15: 00007ffe119d4078 [ 1168.591421][ T31] [ 1168.594501][ T31] INFO: task syz.4.8684:5842 blocked for more than 144 seconds. [ 1168.602975][ T31] Not tainted syzkaller #0 [ 1168.608718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.617763][ T31] task:syz.4.8684 state:D stack:28752 pid:5842 tgid:5836 ppid:29304 task_flags:0x400040 flags:0x00080002 [ 1168.633542][ T31] Call Trace: [ 1168.636993][ T31] [ 1168.640119][ T31] __schedule+0x15dd/0x52d0 [ 1168.644661][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.649760][ T31] ? __pfx___schedule+0x10/0x10 [ 1168.654667][ T31] ? schedule+0x90/0x360 [ 1168.659601][ T31] schedule+0x164/0x360 [ 1168.663793][ T31] schedule_preempt_disabled+0x13/0x30 [ 1168.669399][ T31] __mutex_lock+0x7fe/0x1300 [ 1168.674032][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1168.679415][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1168.684227][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1168.689591][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1168.694655][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.700603][ T31] ? radix_tree_lookup+0x240/0x290 [ 1168.705794][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1168.711125][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.716219][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1168.721744][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1168.726664][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1168.731758][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1168.737403][ T31] ? down_read+0x272/0x2e0 [ 1168.742094][ T31] ? genl_rcv+0xd/0x40 [ 1168.746233][ T31] genl_rcv+0x28/0x40 [ 1168.750948][ T31] netlink_unicast+0x80f/0x9b0 [ 1168.755859][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1168.761281][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1168.766264][ T31] ? skb_put+0x11b/0x210 [ 1168.770728][ T31] netlink_sendmsg+0x813/0xb40 [ 1168.775593][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.781828][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1168.786891][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.792288][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1168.797735][ T31] __sys_sendto+0x672/0x710 [ 1168.802295][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1168.808187][ T31] ? exc_page_fault+0x6a/0xc0 [ 1168.813809][ T31] __x64_sys_sendto+0xde/0x100 [ 1168.818785][ T31] do_syscall_64+0x14d/0xf80 [ 1168.823429][ T31] ? trace_irq_disable+0x3b/0x150 [ 1168.828725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.834880][ T31] ? clear_bhb_loop+0x40/0x90 [ 1168.840585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.846789][ T31] RIP: 0033:0x7fb1fb55cfce [ 1168.851381][ T31] RSP: 002b:00007fb1f97f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1168.860752][ T31] RAX: ffffffffffffffda RBX: 00007fb1f97f66c0 RCX: 00007fb1fb55cfce [ 1168.869566][ T31] RDX: 0000000000000024 RSI: 00007fb1f97f5000 RDI: 0000000000000005 [ 1168.877763][ T31] RBP: 0000000000000000 R08: 00007fb1f97f4f04 R09: 000000000000000c [ 1168.885788][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1168.893973][ T31] R13: 00007fb1f97f4f58 R14: 00007fb1f97f5000 R15: 0000000000000000 [ 1168.902540][ T31] [ 1168.905654][ T31] INFO: task syz.0.8687:5853 blocked for more than 144 seconds. [ 1168.914477][ T31] Not tainted syzkaller #0 [ 1168.921093][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1168.930071][ T31] task:syz.0.8687 state:D stack:27512 pid:5853 tgid:5852 ppid:29016 task_flags:0x400040 flags:0x00080002 [ 1168.942856][ T31] Call Trace: [ 1168.946166][ T31] [ 1168.949298][ T31] __schedule+0x15dd/0x52d0 [ 1168.953876][ T31] ? __pfx___schedule+0x10/0x10 [ 1168.959601][ T31] ? schedule+0x90/0x360 [ 1168.963911][ T31] schedule+0x164/0x360 [ 1168.968243][ T31] schedule_preempt_disabled+0x13/0x30 [ 1168.973770][ T31] __mutex_lock+0x7fe/0x1300 [ 1168.978494][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1168.983301][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1168.988802][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1168.993889][ T31] ? radix_tree_lookup+0x240/0x290 [ 1168.999313][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1169.003885][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.009962][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.015308][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1169.020525][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.025612][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1169.031579][ T31] ? down_read+0x272/0x2e0 [ 1169.036046][ T31] ? genl_rcv+0xd/0x40 [ 1169.040883][ T31] genl_rcv+0x28/0x40 [ 1169.044888][ T31] netlink_unicast+0x80f/0x9b0 [ 1169.049939][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1169.055279][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1169.060370][ T31] ? skb_put+0x11b/0x210 [ 1169.064669][ T31] netlink_sendmsg+0x813/0xb40 [ 1169.069761][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.075121][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1169.081403][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.086876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.092345][ T31] __sys_sendto+0x672/0x710 [ 1169.102884][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1169.109325][ T31] ? exc_page_fault+0x6a/0xc0 [ 1169.114134][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1169.120192][ T31] __x64_sys_sendto+0xde/0x100 [ 1169.125022][ T31] do_syscall_64+0x14d/0xf80 [ 1169.129793][ T31] ? trace_irq_disable+0x3b/0x150 [ 1169.135010][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.141842][ T31] ? clear_bhb_loop+0x40/0x90 [ 1169.146674][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.152617][ T31] RIP: 0033:0x7fad6135cfce [ 1169.157393][ T31] RSP: 002b:00007fad62249e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1169.165852][ T31] RAX: ffffffffffffffda RBX: 00007fad6224b6c0 RCX: 00007fad6135cfce [ 1169.174550][ T31] RDX: 0000000000000020 RSI: 00007fad6224a000 RDI: 0000000000000005 [ 1169.183021][ T31] RBP: 0000000000000000 R08: 00007fad62249f04 R09: 000000000000000c [ 1169.191350][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1169.200202][ T31] R13: 00007fad62249f58 R14: 00007fad6224a000 R15: 0000000000000000 [ 1169.209461][ T31] [ 1169.212565][ T31] INFO: task syz.1.8688:5857 blocked for more than 144 seconds. [ 1169.221826][ T31] Not tainted syzkaller #0 [ 1169.227549][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1169.236248][ T31] task:syz.1.8688 state:D stack:27104 pid:5857 tgid:5856 ppid:29811 task_flags:0x400040 flags:0x00080002 [ 1169.248650][ T31] Call Trace: [ 1169.251968][ T31] [ 1169.254909][ T31] __schedule+0x15dd/0x52d0 [ 1169.260488][ T31] ? __pfx___schedule+0x10/0x10 [ 1169.265420][ T31] ? schedule+0x90/0x360 [ 1169.270139][ T31] schedule+0x164/0x360 [ 1169.274357][ T31] schedule_preempt_disabled+0x13/0x30 [ 1169.280390][ T31] __mutex_lock+0x7fe/0x1300 [ 1169.285040][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1169.291009][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1169.295750][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1169.301605][ T31] ? radix_tree_lookup+0x240/0x290 [ 1169.307219][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1169.311764][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.317802][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.323233][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1169.329024][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.334112][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1169.340102][ T31] ? down_read+0x272/0x2e0 [ 1169.344587][ T31] ? genl_rcv+0xd/0x40 [ 1169.349326][ T31] genl_rcv+0x28/0x40 [ 1169.353360][ T31] netlink_unicast+0x80f/0x9b0 [ 1169.358977][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1169.364298][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1169.369551][ T31] ? skb_put+0x11b/0x210 [ 1169.373865][ T31] netlink_sendmsg+0x813/0xb40 [ 1169.379351][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.384682][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1169.389867][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.395199][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.400781][ T31] __sys_sendto+0x672/0x710 [ 1169.405339][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1169.411101][ T31] ? exc_page_fault+0x6a/0xc0 [ 1169.415813][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1169.421255][ T31] __x64_sys_sendto+0xde/0x100 [ 1169.426839][ T31] do_syscall_64+0x14d/0xf80 [ 1169.431505][ T31] ? trace_irq_disable+0x3b/0x150 [ 1169.438216][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.444449][ T31] ? clear_bhb_loop+0x40/0x90 [ 1169.449520][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.455446][ T31] RIP: 0033:0x7fb5edb5cfce [ 1169.460666][ T31] RSP: 002b:00007fb5ee9bae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1169.469204][ T31] RAX: ffffffffffffffda RBX: 00007fb5ee9bc6c0 RCX: 00007fb5edb5cfce [ 1169.477484][ T31] RDX: 0000000000000020 RSI: 00007fb5ee9bb000 RDI: 0000000000000004 [ 1169.485478][ T31] RBP: 0000000000000000 R08: 00007fb5ee9baf04 R09: 000000000000000c [ 1169.494281][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1169.503352][ T31] R13: 00007fb5ee9baf58 R14: 00007fb5ee9bb000 R15: 0000000000000000 [ 1169.511505][ T31] [ 1169.514784][ T31] INFO: task syz.2.8690:5865 blocked for more than 145 seconds. [ 1169.523678][ T31] Not tainted syzkaller #0 [ 1169.529165][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1169.538080][ T31] task:syz.2.8690 state:D stack:26800 pid:5865 tgid:5863 ppid:28709 task_flags:0x400140 flags:0x00080002 [ 1169.550400][ T31] Call Trace: [ 1169.553727][ T31] [ 1169.557733][ T31] __schedule+0x15dd/0x52d0 [ 1169.562324][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.567701][ T31] ? __pfx___schedule+0x10/0x10 [ 1169.572601][ T31] ? schedule+0x90/0x360 [ 1169.577480][ T31] schedule+0x164/0x360 [ 1169.581698][ T31] schedule_preempt_disabled+0x13/0x30 [ 1169.588064][ T31] __mutex_lock+0x7fe/0x1300 [ 1169.592681][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1169.597998][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1169.602810][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1169.607752][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1169.612875][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.618511][ T31] ? radix_tree_lookup+0x240/0x290 [ 1169.623735][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1169.628775][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.633846][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.638904][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1169.643721][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1169.649515][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1169.654865][ T31] ? down_read+0x272/0x2e0 [ 1169.659514][ T31] ? genl_rcv+0xd/0x40 [ 1169.663632][ T31] genl_rcv+0x28/0x40 [ 1169.667844][ T31] netlink_unicast+0x80f/0x9b0 [ 1169.672683][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1169.678868][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1169.683862][ T31] ? skb_put+0x11b/0x210 [ 1169.688301][ T31] netlink_sendmsg+0x813/0xb40 [ 1169.693116][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.698539][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1169.703520][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.709528][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.714840][ T31] __sys_sendto+0x672/0x710 [ 1169.719450][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1169.724534][ T31] ? exc_page_fault+0x6a/0xc0 [ 1169.729465][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 1169.735142][ T31] __x64_sys_sendto+0xde/0x100 [ 1169.740914][ T31] do_syscall_64+0x14d/0xf80 [ 1169.745590][ T31] ? trace_irq_disable+0x3b/0x150 [ 1169.754019][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.760240][ T31] ? clear_bhb_loop+0x40/0x90 [ 1169.764959][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.771556][ T31] RIP: 0033:0x7fd37ed5cfce [ 1169.776010][ T31] RSP: 002b:00007fd37fc71e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1169.784525][ T31] RAX: ffffffffffffffda RBX: 00007fd37fc736c0 RCX: 00007fd37ed5cfce [ 1169.792877][ T31] RDX: 000000000000001c RSI: 00007fd37fc72000 RDI: 0000000000000009 [ 1169.801680][ T31] RBP: 0000000000000000 R08: 00007fd37fc71f04 R09: 000000000000000c [ 1169.809965][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1169.818165][ T31] R13: 00007fd37fc71f58 R14: 00007fd37fc72000 R15: 0000000000000000 [ 1169.826205][ T31] [ 1169.830128][ T31] [ 1169.830128][ T31] Showing all locks held in the system: [ 1169.840277][ T31] 1 lock held by khungtaskd/31: [ 1169.845176][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1169.855649][ T31] 2 locks held by getty/5578: [ 1169.861807][ T31] #0: ffff8880377590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1169.872161][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1169.882541][ T31] 5 locks held by kworker/u8:2/18334: [ 1169.888823][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1169.899440][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1169.908970][ T31] #2: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1169.919630][ T31] #3: ffffffff9a562d88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 1169.930236][ T31] #4: ffffffff8e604ca8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1169.941214][ T31] 1 lock held by udevd/31295: [ 1169.945927][ T31] #0: ffff888027594358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1169.956140][ T31] 2 locks held by syz-executor/5748: [ 1169.961733][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1169.970225][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1169.980481][ T31] 6 locks held by syz.4.8684/5838: [ 1169.985606][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1169.994112][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.003215][ T31] #2: ffff888027623278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 1170.014337][ T31] #3: ffff888027613668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1170.024029][ T31] #4: ffff888027613008 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1170.036388][ T31] #5: ffff888027613040 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1170.050156][ T31] 2 locks held by syz.4.8684/5842: [ 1170.055317][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.063937][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.073645][ T31] 2 locks held by syz.0.8687/5853: [ 1170.078880][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.087362][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.096415][ T31] 2 locks held by syz.1.8688/5857: [ 1170.102333][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.110651][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.119745][ T31] 2 locks held by syz.2.8690/5865: [ 1170.124884][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.133914][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.143709][ T31] 2 locks held by syz-executor/5877: [ 1170.149101][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.158003][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.167238][ T31] 2 locks held by syz-executor/5880: [ 1170.172563][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.181033][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.190686][ T31] 2 locks held by syz-executor/5882: [ 1170.195980][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.204355][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.213635][ T31] 2 locks held by syz-executor/5892: [ 1170.224330][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.232665][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.241844][ T31] 2 locks held by syz-executor/5923: [ 1170.248323][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.256710][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.265793][ T31] 2 locks held by syz-executor/5937: [ 1170.271289][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.280148][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.289320][ T31] 2 locks held by syz-executor/5939: [ 1170.294642][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.303179][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.313141][ T31] 2 locks held by syz-executor/5941: [ 1170.318570][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.327288][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.336345][ T31] 2 locks held by syz-executor/5952: [ 1170.342622][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.351995][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.361167][ T31] 2 locks held by syz-executor/5977: [ 1170.367191][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.375464][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.385685][ T31] 2 locks held by syz-executor/5987: [ 1170.391262][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.400246][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.409358][ T31] 2 locks held by syz-executor/5998: [ 1170.414650][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.423142][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.432738][ T31] 2 locks held by syz-executor/5999: [ 1170.438156][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.446421][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.456069][ T31] 2 locks held by syz-executor/6013: [ 1170.462069][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.470423][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1170.480006][ T31] [ 1170.482359][ T31] ============================================= [ 1170.482359][ T31] [ 1170.491467][ T31] NMI backtrace for cpu 1 [ 1170.491481][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1170.491498][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.491509][ T31] Call Trace: [ 1170.491516][ T31] [ 1170.491522][ T31] dump_stack_lvl+0xe8/0x150 [ 1170.491550][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1170.491571][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1170.491594][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1170.491616][ T31] sys_info+0x135/0x170 [ 1170.491632][ T31] watchdog+0xfd9/0x1030 [ 1170.491660][ T31] ? watchdog+0x21a/0x1030 [ 1170.491689][ T31] kthread+0x388/0x470 [ 1170.491705][ T31] ? __pfx_watchdog+0x10/0x10 [ 1170.491727][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.491743][ T31] ret_from_fork+0x51e/0xb90 [ 1170.491766][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1170.491786][ T31] ? __switch_to+0xc7d/0x1450 [ 1170.491835][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.491851][ T31] ret_from_fork_asm+0x1a/0x30 [ 1170.491886][ T31] [ 1170.491892][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1170.604570][ C0] NMI backtrace for cpu 0 [ 1170.604588][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1170.604608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.604620][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1170.604654][ C0] Code: 0e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a0 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1170.604670][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 1170.604688][ C0] RAX: 0000000000479327 RBX: ffffffff819a88ed RCX: 0000000080000001 [ 1170.604702][ C0] RDX: 0000000000000001 RSI: ffffffff8def3498 RDI: ffffffff8c27b280 [ 1170.604715][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1170.604729][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901196b0 [ 1170.604743][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1170.604756][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 1170.604771][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1170.604784][ C0] CR2: 000055f3a5515168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1170.604801][ C0] Call Trace: [ 1170.604810][ C0] [ 1170.604817][ C0] default_idle+0x9/0x20 [ 1170.604837][ C0] default_idle_call+0x72/0xb0 [ 1170.604858][ C0] do_idle+0x1bd/0x500 [ 1170.604884][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.604914][ C0] ? __pfx_do_idle+0x10/0x10 [ 1170.604944][ C0] cpu_startup_entry+0x43/0x60 [ 1170.604968][ C0] rest_init+0x2de/0x300 [ 1170.604991][ C0] start_kernel+0x385/0x3d0 [ 1170.605198][ C0] x86_64_start_reservations+0x24/0x30 [ 1170.605248][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1170.605274][ C0] common_startup_64+0x13e/0x147 [ 1170.605302][ C0] [ 1170.791862][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1170.798779][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1170.807925][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.818019][ T31] Call Trace: [ 1170.821310][ T31] [ 1170.824247][ T31] vpanic+0x56c/0xa60 [ 1170.828242][ T31] ? __pfx___schedule+0x10/0x10 [ 1170.833105][ T31] ? __pfx_vpanic+0x10/0x10 [ 1170.837620][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1170.842837][ T31] panic+0xc5/0xd0 [ 1170.846580][ T31] ? __pfx_panic+0x10/0x10 [ 1170.851048][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1170.856508][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1170.862707][ T31] watchdog+0x1023/0x1030 [ 1170.867077][ T31] ? watchdog+0x21a/0x1030 [ 1170.871526][ T31] kthread+0x388/0x470 [ 1170.875618][ T31] ? __pfx_watchdog+0x10/0x10 [ 1170.880322][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.884945][ T31] ret_from_fork+0x51e/0xb90 [ 1170.889586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1170.894745][ T31] ? __switch_to+0xc7d/0x1450 [ 1170.899461][ T31] ? __pfx_kthread+0x10/0x10 [ 1170.904189][ T31] ret_from_fork_asm+0x1a/0x30 [ 1170.909002][ T31] [ 1170.912660][ T31] Kernel Offset: disabled [ 1170.917061][ T31] Rebooting in 86400 seconds..