last executing test programs: 28.229486106s ago: executing program 2 (id=2438): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in=@loopback, 0xfffc, 0x3, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0xfff, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x5, 0x800010}, 0x7fffffff, 0x6e6bb9, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x3502, 0x1, 0x0, 0x6, 0x45, 0x2c19, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in=@loopback, 0xfffc, 0x3, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0xfff, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x5, 0x800010}, 0x7fffffff, 0x6e6bb9, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x3502, 0x1, 0x0, 0x6, 0x45, 0x2c19, 0x3}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f728028de700"}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000906050600000000000000000200000005000100070000000900020073797a3000000000240007800c000180080001407f0000010c000280080001407ffd000108000a4000000001"], 0x4c}}, 0x0) socketpair(0x2, 0x4, 0x4, &(0x7f0000000040)) (async) socketpair(0x2, 0x4, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000004bc0)=0x6, 0x4) r5 = socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r3, &(0x7f0000000140)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @random="a492f957724d"}, 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 27.472579288s ago: executing program 2 (id=2442): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 27.016691194s ago: executing program 1 (id=2444): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80080002"], 0x30}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x148, r2, 0x528, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff086}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x38}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x13, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa8000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9ebf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f00000014c0)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x401, 0x0, 0x1, 0x4, 0x3, 0x2}, 0x20) 26.11439089s ago: executing program 2 (id=2448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bind$l2tp(r1, &(0x7f0000000000), 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x64}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r6, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 26.044135078s ago: executing program 3 (id=2449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r1, 0x0, &(0x7f0000000ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0xfffffda0, 0x10, 0x1, 0x70bd25, 0x25dfd400, {0x0, 0x0, 0x0, r3}}, 0x20}, 0x1, 0x0, 0x0, 0x4a080}, 0x200088c2) 25.916022259s ago: executing program 1 (id=2450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000012028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 25.445643095s ago: executing program 3 (id=2451): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000080)="fea951df88d111cac1fadfbdf79cbf1289e52274492035cb83ea8be7a3b336e25854e95eb2a2a3bff297cc1b6231c24ad52c55c270a3cbe67feccdd553cd81b50096a96c1ef55240d4e4809d80e4744f328f755d71") (async) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000080)="fea951df88d111cac1fadfbdf79cbf1289e52274492035cb83ea8be7a3b336e25854e95eb2a2a3bff297cc1b6231c24ad52c55c270a3cbe67feccdd553cd81b50096a96c1ef55240d4e4809d80e4744f328f755d71") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff0700000099231c6c335197390c811682bee6dd93beacca90c04d07cdbb6f58d39714caa457e56116ab1af9efdd2af28811b203671a0c7a289a310000cd7849f964c85a31a851e1dc78e8c31bc42714ae3c86aa1a75c7cb927e6308e7c6db0e15ff21225911997746c024f7102c59603f552d55fa1a95db379d37259449cd6f6c7740856d101d5a3c0dd33f5184bdd4e2128f5f51037f2569", @ANYRESDEC=r1, @ANYBLOB="37000100aa02406ca9c9923e7ff260f4bf295cf2dda34e69a6db7505a46418c0b7fee97793c27c629be362ad288d2d41a718c47c9e90271ff901b796b9058bc9759401c311c6c38c008dd959c8dff6a669ec083504f213842ddcf637d8f30df68963c81311f9c388ad82131a8a9faed08227d92c7db1a541db12a97c001306003db88231802f8e1ae0fe1845989cb3803312cc174e3d29b735c6df77d660b6c63fffb227fe1b78f485e76b67e693148118b807de7e91e74253a556bda15c8f41ff49f8566cd7a6f0d6503a184c60e3572ebb4acad5e91c52f83899541f1acd1dc925f9000000000000000000ad53", @ANYRES16=r3, @ANYBLOB="f6edc877"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 25.299585718s ago: executing program 2 (id=2452): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x100, &(0x7f00000001c0)={@align=0x7, {0x5, 0x8000, 0x6}}, 0x1000, &(0x7f0000000200), &(0x7f0000000240)=0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 24.886030846s ago: executing program 2 (id=2453): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@iter={&(0x7f0000000140)=@task={0x0, 0xffffffffffffffff}, 0x10}}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000240)='vxcan1\x00', 0x24b40, &(0x7f0000000380)={@align=0xfffffffffffffff8, {0x2, 0xd3, 0x7, 0xffffffffffffffff}}, 0x6bd2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x2}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000480)={r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r6 = accept(r1, &(0x7f0000000500)=@sco={0x1f, @fixed}, &(0x7f0000000580)=0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) sendto(r7, 0x0, 0x0, 0x4008044, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r9}, 0x38) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x400019e, 0x24044005) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2b, 0x801, 0x0) socketpair(0x10, 0x3, 0x3, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f0000000640)) connect$inet(r10, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.610338176s ago: executing program 1 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)={0x14, 0x23, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0a02, 0x0) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000f80)={0x281, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = socket(0x29, 0x3, 0xaf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000001000000000000000000711012000000000095000000000000004e2e09fa35c9d8167fb4f955e04b4dc48a917570e4fecfead9b6b417116caab4de60584653a7bb5bb423e80574c5c7ec264286095e3419b375bfb37df3a45f6e84c2add73314387962a9623b2a07955345d8e5a8b6a4a2629141ced5216e1656270673a332ac06c8da7249bc08cb689372de208fbb085cf49b93c155fd388e36ac6297d7da4e4ddad625461606889cf61b5a23dddc41d80a326271d0315c9abf39223b6b8981fbfe9f7d601a2a3bf9e26b91640cd6b31a8f9f6af8cd070426c8833b8267365b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 23.958737953s ago: executing program 1 (id=2455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 23.896203648s ago: executing program 1 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) (async) 18.948726895s ago: executing program 2 (id=2458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.945192462s ago: executing program 1 (id=2459): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}}, 0x810) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 18.913901891s ago: executing program 3 (id=2460): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0x2, 0x7, 0x3], 0x4, 0x2}}}, @common=@ah={{0x30}, {[0x7, 0xc078]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@private=0xa010100, @private=0xa010102, 0xffffff00, 0x0, 'veth0_to_team\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "336a3c59cec032da", "ae0a0a37bacb76b3b4fa6e04b8b5a15c343a529f53a1ad50e9f799c2f3906062", "6703af03", "e2e71e22ea5d8b5e"}, 0x38) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 18.754717764s ago: executing program 0 (id=2461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f384", 0x6}], 0x1}, 0x4048081) 18.248877762s ago: executing program 3 (id=2463): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080)="b22cbadcc72633aa913ab88c6e7e163e12453d81e5d4b5e4eb884806dd5486ed41646e6b0ce740b834da2c9142a1842ac3ddfc8cf38fbc998d8ef6820db9ed2c152b84738f89f145438d3b577ae9f0f5a805d4a3bf74e2cbeadd0461291373afccfc72c2fb55993330837ad110358ed6160184f1d93ef4612d8dd4bd0ed0d12725d426fee19a432f4d7bff235733b185f5627413dfc52eb0c58738fae83f3b7931861540756ab4d7f9b3755859f8a3a33d9e3e6be47e8967", &(0x7f0000000140)=""/62}, 0x20) 18.108794462s ago: executing program 0 (id=2465): r0 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) 17.975641201s ago: executing program 3 (id=2466): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300005611000005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17.64370285s ago: executing program 0 (id=2468): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000012b000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b024b8bbb5f0ebb360a000000000000000000000014000e0000000000000000"], 0x104}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) splice(r0, &(0x7f0000000300)=0x6, r0, &(0x7f0000000500)=0xe255, 0x40, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000014000300686173683a69702c706f72740400000000000900020073797a3000000000050001000700000005000500"/76], 0x4c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) 17.555038854s ago: executing program 3 (id=2469): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010102, 0x0, 0x0, 0x50, 0x0, [{@initdev}, {@initdev}, {@broadcast}, {@loopback}, {@private}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8850}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x2000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x444}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x538}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @multicast2}, 0x3, 0x3, 0x2, 0x2}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000640), 0x0, 0x8000) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf9d}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x5c}}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, r6, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10ff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbef}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x96b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd74}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x362}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4080005) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r10, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x80) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, {&(0x7f0000000c00)=""/239, 0xef}, &(0x7f0000000d00), 0x20}, 0xa0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x64, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}], @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "5657fd6ae6ab19be"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9c67c764ce97d18d"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x4000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x5c, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = accept4(r1, &(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000001100)=0x80, 0x40800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) sendmsg$NL80211_CMD_GET_COALESCE(r11, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r12, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x79}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f00000013c0)=0x0, &(0x7f0000001400)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x178, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xc1}, 0x80) 17.17201956s ago: executing program 0 (id=2471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 17.040168172s ago: executing program 0 (id=2473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="140001"], 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltfilter={0x4c, 0x2d, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xb}, {0x0, 0x10}, {0xc, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) 16.892646819s ago: executing program 4 (id=2474): r0 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="2c385aa3d49100dc6626c892b6bc436a456d08f6c82a1cc8dd15b2e9a390bb983806d71ba939322573a104cf9729076ef9a124f175f46ab61eebdb404c03226717df5c642083a0a3b0f6e628b414da30f5186e", 0x53) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x17, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd051}, 0x4014) 16.708040412s ago: executing program 0 (id=2475): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x26e1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e929610faca2000000000000000000060000000000000010"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r5) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x7f, 0x7, 0xd, 0x41, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x708, 0x9, 0x8}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', r6, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000008900e800950000000000000030359533f0ecac5b6b4a0ad4899147f8d9de3b01fd8fc10189f5bc869b53952f40d3401d58ae977ba4afa1cd762e3428ecb3a8df5cb1dd5dbd39ea96c56b88b80497dc69f6b5533c9318a8bc8a7fc76bdf35d67271fe4de7e87390131a2b9063fd92d831a39651c22e6f257af3566f12dd68927bee1c30c3b70dc8299cf5969c96bac3f362ca1643b751042150807ff4da8209e5b671f06d0e86339527728972d8d739654721d2368381c36397261a444407d1019a1f3eb27f9d6e"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 16.379660105s ago: executing program 4 (id=2476): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) socket$inet(0x2, 0x16, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x3d, 0x2, 0x9, 0x4, 0x0, 0x5, 0xea}, &(0x7f00000000c0)=0x9c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0) 16.261101706s ago: executing program 4 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6, 0x0, 0x0, 0x2000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) 15.768232059s ago: executing program 4 (id=2478): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) 15.682280012s ago: executing program 4 (id=2479): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0x80, 0x0, 0x1bb, 0x400}}]}}}]}, 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x50}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0x80, 0x0, 0x1bb, 0x400}}]}}}]}, 0x78}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x50}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) 15.509850999s ago: executing program 4 (id=2480): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_NUM_RX_QUEUES={0xfffffffffffffffd, 0x20, 0x9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x8010, 0xaa0}}}}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x20040090) socket$netlink(0x10, 0x3, 0x0) (async) accept(r0, 0x0, &(0x7f00000001c0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) socket(0x1, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r5) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_NUM_RX_QUEUES={0xfffffffffffffffd, 0x20, 0x9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x8010, 0xaa0}}}}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x20040090) (async) 3.464656833s ago: executing program 32 (id=2459): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}}, 0x810) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.402448536s ago: executing program 33 (id=2458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.243301753s ago: executing program 34 (id=2469): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010102, 0x0, 0x0, 0x50, 0x0, [{@initdev}, {@initdev}, {@broadcast}, {@loopback}, {@private}]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8850}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x2000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x444}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x538}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @multicast2}, 0x3, 0x3, 0x2, 0x2}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000640), 0x0, 0x8000) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf9d}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x5c}}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, r6, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10ff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbef}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x96b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd74}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x362}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4080005) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r10, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x80) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, {&(0x7f0000000c00)=""/239, 0xef}, &(0x7f0000000d00), 0x20}, 0xa0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x64, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}], @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "5657fd6ae6ab19be"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "9c67c764ce97d18d"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x4000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x5c, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = accept4(r1, &(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000001100)=0x80, 0x40800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) sendmsg$NL80211_CMD_GET_COALESCE(r11, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r12, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x79}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f00000013c0)=0x0, &(0x7f0000001400)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000001600)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001440)={0x178, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xc1}, 0x80) 1.102541817s ago: executing program 35 (id=2475): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x26e1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e929610faca2000000000000000000060000000000000010"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r5) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x7f, 0x7, 0xd, 0x41, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x708, 0x9, 0x8}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', r6, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000008900e800950000000000000030359533f0ecac5b6b4a0ad4899147f8d9de3b01fd8fc10189f5bc869b53952f40d3401d58ae977ba4afa1cd762e3428ecb3a8df5cb1dd5dbd39ea96c56b88b80497dc69f6b5533c9318a8bc8a7fc76bdf35d67271fe4de7e87390131a2b9063fd92d831a39651c22e6f257af3566f12dd68927bee1c30c3b70dc8299cf5969c96bac3f362ca1643b751042150807ff4da8209e5b671f06d0e86339527728972d8d739654721d2368381c36397261a444407d1019a1f3eb27f9d6e"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 0s ago: executing program 36 (id=2480): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_NUM_RX_QUEUES={0xfffffffffffffffd, 0x20, 0x9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x8010, 0xaa0}}}}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x20040090) socket$netlink(0x10, 0x3, 0x0) (async) accept(r0, 0x0, &(0x7f00000001c0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) socket(0x1, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r5) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_NUM_RX_QUEUES={0xfffffffffffffffd, 0x20, 0x9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x8010, 0xaa0}}}}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x58}}, 0x20040090) (async) kernel console output (not intermixed with test programs): invalid length. [ 200.460772][ T9728] __nla_validate_parse: 2 callbacks suppressed [ 200.460793][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1067'. [ 200.733958][ T9717] 8021q: adding VLAN 0 to HW filter on device bond10 [ 200.895112][ T9731] bond10: (slave gretap0): making interface the new active one [ 200.916431][ T9731] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 200.939370][ T9731] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 201.253001][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 201.656124][ T9759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.692606][ T9759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.886326][ T9759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.897963][ T9759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.047116][ T9759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.073850][ T9759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.245477][ T9759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.263149][ T9759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.558970][ T8999] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.577924][ T8999] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.597971][ T8999] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.620257][ T8999] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.798058][ T8999] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.820169][ T8999] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.851162][ T8999] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.885162][ T8999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.988492][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.630332][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 30 seconds [ 220.643866][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 30 seconds [ 220.655308][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 30 seconds [ 220.667475][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 30 seconds [ 225.731109][ T9831] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1076'. [ 226.321509][ T9858] ipt_REJECT: TCP_RESET invalid for non-tcp [ 226.352462][ T9858] xt_hashlimit: size too large, truncated to 1048576 [ 226.815562][ T9871] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 226.889162][ T9871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.124903][ T9875] syzkaller0: entered promiscuous mode [ 227.138841][ T9875] syzkaller0: entered allmulticast mode [ 227.672532][ T9892] openvswitch: netlink: Missing key (keys=40, expected=100) [ 227.719148][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'. [ 227.879071][ T9894] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 227.897968][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1094'. [ 228.038263][ T9894] team0: Port device geneve1 added [ 228.269310][ T9908] openvswitch: netlink: Actions may not be safe on all matching packets [ 228.311426][ T9912] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 228.647317][ T9922] v: renamed from dummy0 [ 228.680866][ T9922] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.730958][ T9922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.739629][ T9922] IPv6: NLM_F_CREATE should be set when creating new route [ 228.747026][ T9922] IPv6: NLM_F_CREATE should be set when creating new route [ 228.860199][ T9932] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1104'. [ 228.896758][ T30] audit: type=1804 audit(1786014837.726:3): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1104" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1125 res=1 errno=0 [ 228.985963][ T30] audit: type=1800 audit(1786014837.726:4): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1104" name="cgroup.controllers" dev="tmpfs" ino=1125 res=0 errno=0 [ 229.505547][ T9950] openvswitch: netlink: Flow key attr not present in new flow. [ 229.518667][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 229.555594][ T9955] netlink: 'syz.4.1110': attribute type 2 has an invalid length. [ 229.801090][ T9956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.810891][ T9956] bond0: (slave bond5): Enslaving as an active interface with an up link [ 230.438325][ T9984] bond6 (unregistering): Released all slaves [ 230.765609][ T9992] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1120'. [ 230.818885][T10000] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 231.606659][T10034] lo: entered promiscuous mode [ 231.668685][T10034] lo: left promiscuous mode [ 231.742792][T10038] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.279316][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'. [ 232.720321][T10072] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 232.842575][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 233.269276][T10095] netlink: 'syz.3.1147': attribute type 2 has an invalid length. [ 233.337195][T10100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1146'. [ 233.790762][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 233.934586][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 234.033257][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 235.031269][T10149] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1159'. [ 235.161591][T10157] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1162'. [ 235.350614][T10162] hsr0: entered promiscuous mode [ 235.820796][T10187] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1168'. [ 236.441427][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 236.573050][T10206] netlink: Invalid conntrack timeout [ 236.588228][T10206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.784565][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1178'. [ 237.114800][T10230] netlink: 'syz.1.1181': attribute type 12 has an invalid length. [ 237.243454][T10233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1183'. [ 237.629801][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 237.782335][T10258] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 238.032439][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1191'. [ 238.533243][T10277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.596530][T10284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.608346][T10280] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1196'. [ 238.650927][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1195'. [ 239.551883][T10312] ip_tables: iptables: counters copy to user failed while replacing table [ 239.895806][T10321] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1206'. [ 240.281711][T10342] sctp: [Deprecated]: syz.2.1208 (pid 10342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.281711][T10342] Use struct sctp_sack_info instead [ 240.401630][T10341] syzkaller0: entered promiscuous mode [ 240.418260][T10341] syzkaller0: entered allmulticast mode [ 240.495217][T10346] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1212'. [ 241.311913][T10368] __nla_validate_parse: 1 callbacks suppressed [ 241.311933][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 241.501290][T10371] openvswitch: netlink: Duplicate or invalid key (type 0). [ 241.755729][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 241.881963][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1222'. [ 241.938130][T10391] netlink: 'syz.4.1224': attribute type 30 has an invalid length. [ 241.950164][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1222'. [ 241.968184][T10393] IPVS: ip_vs_edit_dest(): server weight less than zero [ 242.715766][T10422] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1234'. [ 243.256421][T10437] tipc: Can't bind to reserved service type 3 [ 243.493213][T10424] infiniband syz0: set down [ 243.498702][T10424] infiniband syz0: added veth1 [ 243.542700][T10424] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 243.559571][T10424] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 243.578259][T10424] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 243.637079][T10424] RDS/IB: syz0: added [ 243.649320][T10424] smc: adding ib device syz0 with port count 1 [ 243.657565][T10424] smc: ib device syz0 port 1 has no pnetid [ 244.049638][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 244.220460][T10451] netlink: 'syz.2.1243': attribute type 1 has an invalid length. [ 244.534791][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1243'. [ 244.676482][T10451] bond7 (unregistering): Released all slaves [ 244.755138][T10466] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 244.940332][T10471] xt_hashlimit: size too large, truncated to 1048576 [ 245.435238][T10477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.635462][T10485] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 245.673169][T10485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1250'. [ 245.725900][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1250'. [ 246.096076][T10494] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1254'. [ 246.545597][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.552933][T10503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.854693][T10510] ip_tables: iptables: counters copy to user failed while replacing table [ 247.447497][T10535] netlink: 'syz.0.1266': attribute type 11 has an invalid length. [ 247.804563][T10527] vlan0 (unregistering): left allmulticast mode [ 247.812310][T10527] veth0_vlan (unregistering): left allmulticast mode [ 247.820441][T10527] vlan0 (unregistering): left promiscuous mode [ 248.935048][T10552] netlink: 'syz.4.1270': attribute type 2 has an invalid length. [ 249.122123][T10552] : entered promiscuous mode [ 249.477814][T10572] veth1_macvtap: left promiscuous mode [ 249.941125][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 249.972141][T10580] bond4 (unregistering): Released all slaves [ 250.264786][T10599] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 250.294475][T10599] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1281'. [ 250.330676][T10599] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 250.393799][T10586] hsr_slave_1 (unregistering): left promiscuous mode [ 250.426720][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1280'. [ 250.533444][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 250.711865][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 60 seconds [ 250.722854][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 60 seconds [ 250.736982][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 60 seconds [ 250.751390][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 60 seconds [ 250.934201][T10617] netlink: zone id is out of range [ 250.981054][T10617] netlink: zone id is out of range [ 251.008157][T10617] netlink: zone id is out of range [ 251.032272][T10617] netlink: set zone limit has 4 unknown bytes [ 251.103479][T10624] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1289'. [ 251.854958][T10633] syzkaller0: entered promiscuous mode [ 251.889268][T10633] syzkaller0: entered allmulticast mode [ 252.174462][T10645] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 252.420100][T10655] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 252.513794][T10655] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 252.525925][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'. [ 252.712940][T10668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1301'. [ 255.595675][T10679] xt_hashlimit: max too large, truncated to 1048576 [ 255.681703][T10679] No such timeout policy "syz1" [ 255.774617][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 255.832780][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839390][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.097770][T10694] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 256.181143][T10697] sctp: [Deprecated]: syz.4.1308 (pid 10697) Use of int in maxseg socket option. [ 256.181143][T10697] Use struct sctp_assoc_value instead [ 256.210281][T10700] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1310'. [ 256.364613][T10693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.780520][T10716] Unknown options in mask 4 [ 256.804082][T10716] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 256.827685][T10716] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1314'. [ 256.867235][T10716] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 256.991445][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 257.041516][T10716] hsr_slave_0: left promiscuous mode [ 257.056411][T10716] hsr_slave_1: left promiscuous mode [ 257.340505][T10734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.850152][T10748] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 257.875097][T10742] syzkaller1: entered promiscuous mode [ 257.893813][T10742] syzkaller1: entered allmulticast mode [ 258.073259][T10754] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 258.081639][T10754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1326'. [ 258.110000][T10748] bond6: entered promiscuous mode [ 258.135003][T10748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.584398][T10750] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.607414][T10750] bond6: (slave ipip0): The slave device specified does not support setting the MAC address [ 258.618398][T10750] bond6: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 258.656308][T10750] bond6: (slave ipip0): making interface the new active one [ 258.670791][T10750] ipip0: entered promiscuous mode [ 258.687763][T10750] bond6: (slave ipip0): Enslaving as an active interface with an up link [ 258.744894][T10765] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 258.868512][T10774] No such timeout policy " " [ 258.874393][T10774] netlink: Failed to associated timeout policy ' ' [ 258.961513][T10772] tls_set_device_offload: netdev not found [ 259.382754][T10779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 259.483598][T10784] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.634323][T10788] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 259.774873][T10790] netlink: 4148 bytes leftover after parsing attributes in process `syz.1.1338'. [ 260.448365][T10820] netlink: 'syz.2.1344': attribute type 2 has an invalid length. [ 260.475899][T10825] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 260.563818][T10820] : entered promiscuous mode [ 260.619173][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1349'. [ 260.827092][T10828] bond8: (slave geneve2): making interface the new active one [ 260.871737][T10828] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 260.882931][T10839] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1351'. [ 260.997967][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 261.038697][T10839] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 261.081936][T10839] 0ªX¹¦Dö»: entered allmulticast mode [ 261.128455][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 261.164275][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 261.203145][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 261.235279][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 261.310412][T10851] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1355'. [ 261.367180][T10851] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1355'. [ 261.410291][T10851] netlink: 'syz.2.1355': attribute type 5 has an invalid length. [ 261.447545][T10858] ip_tables: iptables: counters copy to user failed while replacing table [ 261.461607][T10851] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1355'. [ 261.803757][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 261.887579][T10872] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 262.697798][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 262.741489][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 263.015480][T10909] v: renamed from veth0_vlan (while UP) [ 263.112703][T10921] netlink: 'syz.4.1369': attribute type 33 has an invalid length. [ 263.530849][T10934] syzkaller1: entered promiscuous mode [ 263.560073][T10934] syzkaller1: entered allmulticast mode [ 263.706290][T10935] xt_CT: No such helper "snmp" [ 263.716624][T10941] netlink: 'syz.2.1374': attribute type 4 has an invalid length. [ 263.750174][T10932] xt_CT: No such helper "snmp" [ 264.044563][T10952] sctp: [Deprecated]: syz.1.1379 (pid 10952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.044563][T10952] Use struct sctp_sack_info instead [ 264.614898][T10975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1387'. [ 264.646248][T10975] openvswitch: netlink: Flow key attr not present in new flow. [ 264.674979][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1385'. [ 264.902605][T10987] netlink: 'syz.2.1390': attribute type 30 has an invalid length. [ 264.907631][T10983] xt_hashlimit: size too large, truncated to 1048576 [ 265.612626][T10983] xt_hashlimit: size too large, truncated to 1048576 [ 265.785312][T11018] netlink: 'syz.1.1399': attribute type 2 has an invalid length. [ 266.616855][T11050] __nla_validate_parse: 2 callbacks suppressed [ 266.616874][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 267.292324][T11076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.367775][T11076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.465556][T11084] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.582144][T11086] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.669945][T11076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.699742][T11076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.718615][T11075] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.741133][T11075] syzkaller0: entered promiscuous mode [ 267.749991][T11075] syzkaller0: entered allmulticast mode [ 267.750438][T11084] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.758377][T11079] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 267.808572][T11076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.926531][T11084] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.985548][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 268.007486][T11076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 268.058574][T11093] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 268.188568][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 268.299881][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 268.312757][T11103] netlink: 'syz.0.1424': attribute type 12 has an invalid length. [ 268.347355][T11103] netlink: 'syz.0.1424': attribute type 29 has an invalid length. [ 268.391525][T11103] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1424'. [ 268.418124][T11103] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1424'. [ 268.488813][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 268.982183][T11135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1430'. [ 269.047164][T11134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1430'. [ 269.832595][T11165] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20001 [ 269.871300][T11167] sctp: [Deprecated]: syz.0.1441 (pid 11167) Use of int in maxseg socket option. [ 269.871300][T11167] Use struct sctp_assoc_value instead [ 269.894235][T11169] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1442'. [ 270.566217][T11193] netlink: 'syz.3.1449': attribute type 19 has an invalid length. [ 271.707009][T11235] __nla_validate_parse: 6 callbacks suppressed [ 271.707029][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 272.141088][T11244] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 272.188718][T11245] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 272.242704][T11244] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 272.254282][T11245] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 272.946833][T11280] ip6t_rpfilter: unknown options [ 273.424164][T11291] xt_check_target_common: 1 callbacks suppressed [ 273.424191][T11291] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 273.625002][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 273.705678][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 273.889626][T11313] syzkaller0: entered promiscuous mode [ 273.925163][T11313] syzkaller0: entered allmulticast mode [ 273.972758][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1488'. [ 274.196903][T11330] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1491'. [ 274.312579][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1492'. [ 274.348352][T11336] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1492'. [ 274.434088][T11336] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1492'. [ 275.290437][T11373] bond12: option all_slaves_active: invalid value (222) [ 275.303130][T11373] bond12 (unregistering): Released all slaves [ 275.343766][T11379] tipc: Enabling of bearer rejected, failed to enable media [ 275.896986][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 276.197121][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 277.080535][T11457] __nla_validate_parse: 1 callbacks suppressed [ 277.080556][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 277.602801][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 277.625548][T11481] netlink: 'syz.2.1530': attribute type 11 has an invalid length. [ 277.650137][T11481] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1530'. [ 277.774742][T11479] bond9: entered promiscuous mode [ 277.831076][T11479] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.906475][T11492] netlink: 'syz.0.1532': attribute type 12 has an invalid length. [ 278.023435][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 278.104461][T11494] 8021q: adding VLAN 0 to HW filter on device bond9 [ 278.111983][T11494] bond9: (slave sit3): The slave device specified does not support setting the MAC address [ 278.136538][T11494] bond9: (slave sit3): Error -95 calling set_mac_address [ 278.366985][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 278.591930][T11515] xt_limit: Overflow, try lower: 536871034/127 [ 279.165087][T11539] IPVS: set_ctl: invalid protocol: 115 172.20.20.53:20004 [ 279.674826][T11544] syzkaller1: entered promiscuous mode [ 279.711927][T11544] syzkaller1: entered allmulticast mode [ 279.758084][T11561] netlink: 'syz.0.1550': attribute type 9 has an invalid length. [ 279.891464][T11567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.986875][T11568] x_tables: duplicate underflow at hook 1 [ 280.013975][T11563] can: request_module (can-proto-0) failed. [ 280.067150][T11567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.258825][T11571] 8021q: VLANs not supported on wg1 [ 280.393958][T11582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1553'. [ 280.619844][T11587] tap0: tun_chr_ioctl cmd 1074025672 [ 280.682463][T11587] tap0: ignored: set checksum disabled [ 280.788460][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 90 seconds [ 280.801166][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 90 seconds [ 280.812374][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 90 seconds [ 280.823874][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 90 seconds [ 281.213510][T11608] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 281.240536][T11608] netlink: 'syz.3.1559': attribute type 2 has an invalid length. [ 281.250373][T11607] syzkaller1: entered promiscuous mode [ 281.268269][T11607] syzkaller1: entered allmulticast mode [ 281.278222][T11608] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 281.306402][T11608] netlink: 'syz.3.1559': attribute type 2 has an invalid length. [ 281.347434][T11608] netlink: 'syz.3.1559': attribute type 2 has an invalid length. [ 281.368946][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 281.442201][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 281.499521][ T769] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.540879][ T769] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.584835][ T769] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.620467][ T769] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.793076][T11628] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 281.809354][T11629] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 281.831410][T11628] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1568'. [ 281.839357][T11629] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 282.155572][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'. [ 282.406851][T11659] sctp: [Deprecated]: syz.1.1574 (pid 11659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.406851][T11659] Use struct sctp_sack_info instead [ 282.445551][ T5642] block nbd0: Receive control failed (result -32) [ 282.556410][T11662] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 282.810813][T11668] syzkaller0: entered promiscuous mode [ 282.816610][T11668] syzkaller0: entered allmulticast mode [ 282.935759][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 283.081252][T11674] netlink: 'syz.3.1581': attribute type 13 has an invalid length. [ 283.485543][T11684] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 283.494924][T11684] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1583'. [ 283.532392][T11688] IPv6: sit1: Disabled Multicast RS [ 283.794905][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 284.299332][T11703] syzkaller1: entered promiscuous mode [ 284.316234][T11703] syzkaller1: entered allmulticast mode [ 284.324530][T11725] netlink: 'syz.0.1593': attribute type 1 has an invalid length. [ 284.513165][T11720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.736301][T11725] bond6: entered promiscuous mode [ 284.741985][T11739] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 284.744941][T11725] bond6: entered allmulticast mode [ 284.786037][T11725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.930237][T11727] erspan2: entered allmulticast mode [ 284.984516][T11727] bond6: (slave erspan2): making interface the new active one [ 285.030023][T11727] erspan2: entered promiscuous mode [ 285.095955][T11727] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 285.140597][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 285.175229][T11755] x_tables: unsorted entry at hook 2 [ 285.455974][T11745] sit0: Caught tx_queue_len zero misconfig [ 286.107858][T11775] bond0: entered promiscuous mode [ 286.142090][T11775] bond_slave_0: entered promiscuous mode [ 286.178917][T11775] bond_slave_1: entered promiscuous mode [ 286.201194][T11775] bond5: entered promiscuous mode [ 286.439299][T11791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1611'. [ 286.569602][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 286.612618][T11797] netlink: 'syz.3.1614': attribute type 13 has an invalid length. [ 286.674991][T11797] syzkaller0: Caught tx_queue_len zero misconfig [ 286.705295][T11802] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1615'. [ 286.774893][T11801] netlink: 'syz.0.1613': attribute type 4 has an invalid length. [ 287.240532][T11813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1618'. [ 287.362032][T11817] netlink: 'syz.4.1620': attribute type 21 has an invalid length. [ 287.410458][T11817] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1620'. [ 288.370435][T11857] : renamed from bond0 (while UP) [ 288.702822][T11867] netlink: 'syz.3.1633': attribute type 23 has an invalid length. [ 288.754988][T11869] openvswitch: netlink: Message has 8 unknown bytes. [ 288.843371][T11870] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.029538][T11880] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 289.110227][T11884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1637'. [ 289.191331][T11886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1637'. [ 289.219745][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1638'. [ 289.253127][T11884] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1637'. [ 289.664113][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1642'. [ 289.917065][T11914] tipc: Started in network mode [ 289.953865][T11914] tipc: Node identity aa045945a1f3, cluster identity 4711 [ 290.001383][T11914] tipc: Enabled bearer , priority 0 [ 290.056809][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 290.450663][T11935] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 290.496743][T11930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1650'. [ 290.515230][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1653'. [ 290.682539][T11946] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 290.771143][T11935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 290.806074][T11950] bond0 (unregistering): Released all slaves [ 290.951817][T11935] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 290.978855][T11935] netlink: 'syz.4.1652': attribute type 10 has an invalid length. [ 290.988687][ T1116] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.042177][T11935] dummy0: entered promiscuous mode [ 291.088032][ T1116] bond7: (slave dummy0): link status up again after 0 ms [ 291.097474][T11935] bond7: (slave dummy0): Removing an active aggregator [ 291.121442][T11935] bond7: (slave dummy0): Releasing backup interface [ 291.160760][T11963] sctp: [Deprecated]: syz.0.1660 (pid 11963) Use of int in max_burst socket option. [ 291.160760][T11963] Use struct sctp_assoc_value instead [ 291.185695][ T9230] tipc: Node number set to 200759621 [ 291.264438][T11970] lo: Caught tx_queue_len zero misconfig [ 291.476725][T11975] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.522099][T11980] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.810679][T11991] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 291.901617][ T769] smc: removing ib device syz0 [ 292.198415][T12009] netlink: 'syz.2.1669': attribute type 7 has an invalid length. [ 292.339769][ T769] smbdirect: ib_dev[syz0] removed [ 294.174692][T12071] ip6tnl0: Caught tx_queue_len zero misconfig [ 295.143437][T12093] __nla_validate_parse: 5 callbacks suppressed [ 295.146419][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 295.411111][T12101] x_tables: unsorted underflow at hook 1 [ 295.673361][T12109] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1693'. [ 296.136575][T12125] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 296.260150][T12125] bond12: entered promiscuous mode [ 296.266484][T12125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.286569][T12130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 296.509165][T12125] bond12: (slave bridge10): making interface the new active one [ 296.527970][T12125] bridge10: entered promiscuous mode [ 296.571587][T12125] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 296.948703][T12137] syzkaller0: entered allmulticast mode [ 297.256943][T12151] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 297.474489][T12153] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 297.503217][T12147] batadv_slave_0: Caught tx_queue_len zero misconfig [ 297.765199][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.890509][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1712'. [ 297.900069][T12170] block nbd2: Unsupported socket: should be TCP or UNIX. [ 297.912756][T12165] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 297.934977][T12165] bond7 (unregistering): Released all slaves [ 298.047065][T12176] Cannot find del_set index 0 as target [ 298.216080][T12175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1713'. [ 298.995556][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 299.693360][T12242] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 299.718321][T12240] vcan1: entered promiscuous mode [ 299.741580][T12242] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1731'. [ 299.760669][T12240] vcan1: entered allmulticast mode [ 299.801782][T12242] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 299.853873][T12243] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 299.868076][T12243] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1731'. [ 299.883894][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 299.890351][T12243] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 300.800259][T12268] netlink: 'syz.2.1737': attribute type 3 has an invalid length. [ 300.837751][T12272] team_slave_1: Caught tx_queue_len zero misconfig [ 301.166348][T12279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 301.205345][T12279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 301.280854][T12284] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1744'. [ 301.321038][T12284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1744'. [ 301.405828][T12290] netlink: 'syz.0.1746': attribute type 2 has an invalid length. [ 301.569739][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 302.436258][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 302.532938][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 302.680747][T12325] team1: entered promiscuous mode [ 302.686237][T12325] team1: entered allmulticast mode [ 302.972113][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 302.998332][T12355] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1759'. [ 303.214914][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 303.243515][T12361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.369378][T12366] xfrm1: entered allmulticast mode [ 303.554479][T12370] ªªªªª»: renamed from dummy0 [ 303.595654][T12373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.742576][T12377] tipc: Enabling of bearer rejected, already enabled [ 305.259513][T12424] netlink: 'syz.2.1778': attribute type 32 has an invalid length. [ 305.390578][T12424] bond7: Setting coupled_control to off (0) [ 305.800067][T12445] SET target dimension over the limit! [ 306.877099][T12484] vlan3: entered promiscuous mode [ 306.899452][T12484] gretap0: entered promiscuous mode [ 307.388748][T12502] __nla_validate_parse: 5 callbacks suppressed [ 307.388769][T12502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1795'. [ 307.424141][T12502] netlink: 'syz.4.1795': attribute type 7 has an invalid length. [ 307.448741][T12504] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 307.451227][T12502] netlink: 'syz.4.1795': attribute type 8 has an invalid length. [ 307.465947][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 308.152188][T12532] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 308.190076][T12532] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 308.441000][T12539] nftables ruleset with unbound chain [ 308.973797][T12553] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1811'. [ 309.370250][T12534] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1806'. [ 309.798346][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 310.262977][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 310.433422][T12590] hsr_slave_0: left promiscuous mode [ 310.482198][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 310.889688][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 120 seconds [ 310.901231][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 120 seconds [ 310.913269][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 120 seconds [ 310.925638][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 120 seconds [ 312.129602][T12648] netlink: 'syz.2.1832': attribute type 3 has an invalid length. [ 312.142191][T12648] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1832'. [ 312.188549][T12645] netlink: Conntrack attr has 12 unknown bytes [ 312.213983][T12645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.242697][T12639] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 312.273852][T12645] Cannot find del_set index 4 as target [ 312.990286][T12658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1838'. [ 313.283073][T12655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.710457][T12679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1844'. [ 313.731241][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1845'. [ 313.757297][T12655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.772375][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1845'. [ 313.773488][T12680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1842'. [ 313.836929][T12680] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.187011][T12655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.643598][T12655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.248437][ T1116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.324782][T12725] netlink: 'syz.0.1860': attribute type 3 has an invalid length. [ 315.413284][ T1116] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.502463][ T1116] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.768165][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.401149][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 317.272767][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279281][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.282080][T12792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1880'. [ 317.648496][T12802] xt_ecn: cannot match TCP bits for non-tcp packets [ 318.023982][T12819] netlink: 'syz.0.1887': attribute type 3 has an invalid length. [ 318.178685][ T30] audit: type=1804 audit(1786014926.996:5): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1889" name="/newroot/389/cgroup.controllers" dev="tmpfs" ino=1996 res=1 errno=0 [ 318.207002][T12819] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 318.278638][T12819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1887'. [ 318.323905][ T30] audit: type=1800 audit(1786014927.006:6): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1889" name="cgroup.controllers" dev="tmpfs" ino=1996 res=0 errno=0 [ 318.355558][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1890'. [ 318.914397][T12838] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1895'. [ 319.111826][T12846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.034852][T12870] xt_hashlimit: size too large, truncated to 1048576 [ 320.067779][T12870] xt_hashlimit: max too large, truncated to 1048576 [ 320.105962][T12870] xt_hashlimit: overflow, rate too high: 0 [ 320.370806][T12879] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 320.412147][T12879] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.1908'. [ 320.747525][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 320.849091][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 320.907511][T12900] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 321.099986][T12900] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.243417][T12903] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 321.254241][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 321.343340][T12914] netlink: 'syz.2.1915': attribute type 15 has an invalid length. [ 321.409291][T12912] pim6reg: entered allmulticast mode [ 321.429981][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 321.488832][ T36] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 321.502289][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 321.532838][T12914] netlink: 'syz.2.1915': attribute type 15 has an invalid length. [ 321.541390][ T36] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 321.561248][ T36] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 321.590540][ T36] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 321.693506][T12922] SET target dimension over the limit! [ 321.730104][T12923] SET target dimension over the limit! [ 321.762907][T12928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.810196][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 322.105115][T12945] x_tables: duplicate entry at hook 4 [ 322.133884][T12946] x_tables: duplicate entry at hook 4 [ 322.871288][T12970] vlan1: entered allmulticast mode [ 322.888897][T12970] veth1_virt_wifi: entered allmulticast mode [ 323.364720][T12987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.458137][T12988] __nla_validate_parse: 2 callbacks suppressed [ 323.458158][T12988] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1939'. [ 323.537514][T12986] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 324.139132][T13004] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 324.678109][T13014] netlink: 'syz.4.1945': attribute type 16 has an invalid length. [ 324.767998][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1945'. [ 325.158455][T13022] xt_recent: Unsupported userspace flags (000000b1) [ 325.263786][T13024] syzkaller0: entered promiscuous mode [ 325.290452][T13024] syzkaller0: entered allmulticast mode [ 326.012687][T13045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 326.409744][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 326.799793][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 327.398457][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 328.062172][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 328.106837][T13118] netlink: 'syz.3.1974': attribute type 10 has an invalid length. [ 328.170947][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 328.440827][T13133] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1981'. [ 328.479500][T13133] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.488378][T13133] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.504622][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1979'. [ 328.546172][T13129] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 328.667691][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'. [ 328.957646][T13148] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 329.190133][T13154] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 329.346632][T13158] macvlan2: entered promiscuous mode [ 329.395997][T13158] macvlan2: entered allmulticast mode [ 329.435097][T13158] bond13: entered promiscuous mode [ 329.491116][T13158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.569903][T13158] bond13: left promiscuous mode [ 329.605176][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 329.887348][T13180] xt_l2tp: unknown flags: 10 [ 330.032715][T13182] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1995'. [ 330.057504][T13186] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 330.076949][T13182] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1995'. [ 330.102280][T13189] netlink: 'syz.1.1998': attribute type 12 has an invalid length. [ 330.190410][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1998'. [ 330.430370][T13186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.681270][T13200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2000'. [ 330.748153][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'. [ 330.884728][T13213] ÿÿÿÿÿÿ: renamed from vlan1 [ 331.067430][T13223] Unsupported ieee802154 address type: 0 [ 331.766964][T13253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2012'. [ 332.106041][T13262] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 332.532489][T13276] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 333.193584][T13304] set match dimension is over the limit! [ 333.362490][T13304] bridge_slave_0: left allmulticast mode [ 333.387010][T13304] bridge_slave_0: left promiscuous mode [ 333.419312][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.463172][T13304] bridge_slave_1: left allmulticast mode [ 333.499593][T13304] bridge_slave_1: left promiscuous mode [ 333.519574][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.602645][T13304] bond8: (slave veth0_to_bond): Releasing backup interface [ 333.797073][T13304] bond0: (slave bond_slave_0): Releasing backup interface [ 333.811538][T13304] bond_slave_0: left promiscuous mode [ 333.845422][T13304] bond0: (slave bond_slave_1): Releasing backup interface [ 333.863185][T13304] bond_slave_1: left promiscuous mode [ 334.036832][T13304] team0: Port device team_slave_0 removed [ 334.069443][T13304] team0: Port device team_slave_1 removed [ 334.086275][T13304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.102278][T13304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.126096][T13304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.137024][T13304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.162503][T13304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.541536][T13347] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2034'. [ 335.255713][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.263565][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 335.346435][T13365] veth0_macvtap: left promiscuous mode [ 335.822468][T13389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.855409][T13393] netlink: 'syz.4.2045': attribute type 1 has an invalid length. [ 335.952867][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2047'. [ 336.115304][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 336.152989][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 336.181856][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2045'. [ 336.264458][T13393] bridge2: entered promiscuous mode [ 336.329189][T13393] bond9: (slave bridge2): making interface the new active one [ 336.394526][T13393] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 336.612365][T13412] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 336.831602][T13427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.860992][T13417] 0ªX¹¦Dö»: left allmulticast mode [ 336.909268][T13417] bond0: left promiscuous mode [ 336.915130][T13417] bond5: left promiscuous mode [ 336.925953][T13417] dummy0: left promiscuous mode [ 337.123594][T13417] ip6gre1: left allmulticast mode [ 337.145429][T13417] bond2: left promiscuous mode [ 337.204634][T13417] bond6: left promiscuous mode [ 337.218237][T13417] ipip0: left promiscuous mode [ 337.236778][T13417] syzkaller0: left promiscuous mode [ 337.252703][T13417] syzkaller0: left allmulticast mode [ 337.295525][T13417] bridge2: left promiscuous mode [ 337.388602][ T1116] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.422820][ T1116] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.474172][ T1116] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.515415][ T1116] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.545644][ T1116] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.591831][ T1116] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.627998][ T1116] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.657283][ T1116] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.354873][T13461] tunl0: entered promiscuous mode [ 338.380941][T13461] netlink: 'syz.2.2064': attribute type 4 has an invalid length. [ 338.398509][T13461] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2064'. [ 338.450562][T13465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2065'. [ 338.812312][T13477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.431387][T13497] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2075'. [ 339.581325][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 339.875306][T13511] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 339.980477][T13513] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 340.074129][T13514] bond14: (slave geneve2): making interface the new active one [ 340.084920][T13514] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 340.178331][T13513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2079'. [ 340.397942][ T1116] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.454933][ T1116] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.509777][ T1116] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.572940][ T1116] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.949008][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 150 seconds [ 340.960596][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 150 seconds [ 340.972589][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 150 seconds [ 340.985609][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 150 seconds [ 341.298509][T13543] netlink: 'syz.0.2086': attribute type 10 has an invalid length. [ 341.569360][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 342.584048][T13580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2098'. [ 342.723184][T13583] netlink: 'syz.3.2099': attribute type 11 has an invalid length. [ 342.770325][T13583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2099'. [ 342.807692][T13587] team0: Device gtp1 is up. Set it down before adding it as a team port [ 343.503018][T13616] netlink: 4848 bytes leftover after parsing attributes in process `syz.4.2108'. [ 343.628789][T13625] netlink: 'syz.2.2110': attribute type 32 has an invalid length. [ 343.672856][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 344.176289][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2114'. [ 344.269167][T13638] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 345.231479][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 345.356536][T13683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.388347][T13683] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 345.795259][T13711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2137'. [ 346.025375][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 346.062627][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 346.485684][T13735] netlink: 'syz.3.2143': attribute type 21 has an invalid length. [ 346.529083][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 347.354322][T13756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2148'. [ 347.719755][T13778] netlink: 'syz.3.2155': attribute type 7 has an invalid length. [ 347.738017][T13780] x_tables: unsorted underflow at hook 1 [ 347.764793][T13781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2154'. [ 348.214008][T13795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2158'. [ 348.591875][T13805] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2160'. [ 348.668773][T13813] bond0: Error: Cannot enslave bond to itself. [ 349.175294][T13831] netlink: 'syz.4.2166': attribute type 2 has an invalid length. [ 349.261764][T13831] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2166'. [ 349.409456][T13836] macsec1: entered promiscuous mode [ 349.432916][T13836] dummy0: entered promiscuous mode [ 349.459549][T13836] macsec1: entered allmulticast mode [ 349.479355][T13836] dummy0: entered allmulticast mode [ 349.517493][T13836] dummy0: left allmulticast mode [ 349.532784][T13836] dummy0: left promiscuous mode [ 350.301660][T13867] syzkaller1: entered promiscuous mode [ 350.323304][T13867] syzkaller1: entered allmulticast mode [ 350.662964][T13881] openvswitch: netlink: Duplicate or invalid key (type 0). [ 350.758060][T13883] __nla_validate_parse: 1 callbacks suppressed [ 350.758152][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 351.185881][T13899] netlink: 'syz.4.2184': attribute type 21 has an invalid length. [ 351.432759][T13908] netlink: 'syz.2.2187': attribute type 30 has an invalid length. [ 351.468857][T13908] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2187'. [ 351.601954][T13916] netlink: 3080 bytes leftover after parsing attributes in process `syz.1.2190'. [ 351.638108][T13916] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2190'. [ 351.787237][T13917] netlink: 'syz.0.2191': attribute type 4 has an invalid length. [ 351.819778][T13923] bond0: Caught tx_queue_len zero misconfig [ 351.895316][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 352.043964][T13923] veth1_to_bond: entered allmulticast mode [ 352.220245][T13929] veth1_to_bond: entered promiscuous mode [ 352.255578][T13929] syzkaller0: left promiscuous mode [ 352.274491][T13929] syzkaller0: left allmulticast mode [ 352.571089][T13921] veth1_to_bond: left promiscuous mode [ 352.612207][T13921] veth1_to_bond: left allmulticast mode [ 352.681954][T13953] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2198'. [ 353.801293][T13988] lo: entered promiscuous mode [ 353.853051][T13988] tunl0: entered promiscuous mode [ 353.878320][T13988] gre0: entered promiscuous mode [ 353.898800][T13988] ip_vti0: entered promiscuous mode [ 353.919380][T13988] ip6_vti0: entered promiscuous mode [ 353.936313][T13988] sit0: entered promiscuous mode [ 353.957408][T13988] ip6tnl0: entered promiscuous mode [ 353.989852][T13988] ip6gre0: entered promiscuous mode [ 354.013277][T13988] syz_tun: entered promiscuous mode [ 354.033817][T13988] ip6gretap0: entered promiscuous mode [ 354.048782][T13988] bridge0: entered promiscuous mode [ 354.057027][T13988] vcan0: entered promiscuous mode [ 354.064228][T13988] bond0: entered promiscuous mode [ 354.070057][T13988] bond_slave_0: entered promiscuous mode [ 354.077338][T13988] bond_slave_1: entered promiscuous mode [ 354.086403][T13988] team0: entered promiscuous mode [ 354.092276][T13988] team_slave_0: entered promiscuous mode [ 354.101869][T13988] team_slave_1: entered promiscuous mode [ 354.109148][T13988] ªªªªª»: entered promiscuous mode [ 354.115342][T13988] nlmon0: entered promiscuous mode [ 354.121560][T13988] batadv0: entered promiscuous mode [ 354.127051][T13988] vxcan0: entered promiscuous mode [ 354.132983][T13988] vxcan1: entered promiscuous mode [ 354.139520][T13988] wg0: entered promiscuous mode [ 354.144744][T13988] wg1: entered promiscuous mode [ 354.150531][T13988] wg2: entered promiscuous mode [ 354.155796][T13988] veth0_to_bridge: entered promiscuous mode [ 354.162695][T13988] veth1_to_bridge: entered promiscuous mode [ 354.170310][T13988] veth0_to_bond: entered promiscuous mode [ 354.179716][T13988] veth1_to_bond: entered promiscuous mode [ 354.186005][T13988] veth0_to_team: entered promiscuous mode [ 354.192886][T13988] veth1_to_team: entered promiscuous mode [ 354.199700][T13988] veth0_to_batadv: entered promiscuous mode [ 354.206298][T13988] batadv_slave_0: entered promiscuous mode [ 354.213019][T13988] veth1_to_batadv: entered promiscuous mode [ 354.220052][T13988] batadv_slave_1: entered promiscuous mode [ 354.226171][T13988] xfrm0: entered promiscuous mode [ 354.234124][T13988] veth0_to_hsr: entered promiscuous mode [ 354.240939][T13988] hsr_slave_0: entered promiscuous mode [ 354.247039][T13988] veth1_to_hsr: entered promiscuous mode [ 354.253636][T13988] hsr_slave_1: entered promiscuous mode [ 354.260700][T13988] veth1_virt_wifi: entered promiscuous mode [ 354.267008][T13988] veth0_virt_wifi: entered promiscuous mode [ 354.273781][T13988] virt_wifi0: entered promiscuous mode [ 354.280648][T13988] vlan0: entered promiscuous mode [ 354.286288][T13988] macvlan0: entered promiscuous mode [ 354.292555][T13988] macvlan1: entered promiscuous mode [ 354.298922][T13988] ipvlan0: entered promiscuous mode [ 354.304439][T13988] ipvlan1: entered promiscuous mode [ 354.311439][T13988] macvtap0: entered promiscuous mode [ 354.317471][T13988] geneve0: entered promiscuous mode [ 354.324054][T13988] geneve1: entered promiscuous mode [ 354.329833][T13988] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 354.337720][T13988] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 354.345854][T13988] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 354.354455][T13988] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 354.362466][T13988] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 354.370907][T13988] bond1: entered promiscuous mode [ 354.376240][T13988] xfrm1: left allmulticast mode [ 354.382375][T13988] ip6tnl1: entered promiscuous mode [ 354.389261][T13988] ip6tnl1: left allmulticast mode [ 354.395261][T13988] bond2: entered promiscuous mode [ 354.400963][T13988] bond2: left allmulticast mode [ 354.408372][T13988] dvmrp8: entered promiscuous mode [ 354.416431][T13988] tun0: entered promiscuous mode [ 354.422346][T13988] erspan1: entered promiscuous mode [ 354.429266][T13988] bond3: left allmulticast mode [ 354.435628][T13988] bond4: left allmulticast mode [ 354.441821][T13988] bond5: entered promiscuous mode [ 354.447590][T13988] bridge1: entered promiscuous mode [ 354.456887][T13988] bond6: entered promiscuous mode [ 354.464994][T13988] bridge2: entered promiscuous mode [ 354.475036][T13988] vlan2: entered promiscuous mode [ 354.481228][T13988] vlan2: left allmulticast mode [ 354.486407][T13988] bridge2: left allmulticast mode [ 354.492646][T13988] ip6tnl2: entered promiscuous mode [ 354.500045][T13988] sit1: entered promiscuous mode [ 354.505441][T13988] gtp0: entered promiscuous mode [ 354.513752][T13988] ÿÿÿÿÿÿ: entered promiscuous mode [ 354.520116][T13988] ÿÿÿÿÿÿ: left allmulticast mode [ 354.525421][T13988] bond0: left allmulticast mode [ 354.531479][T13988] bond_slave_0: left allmulticast mode [ 354.537309][T13988] bond_slave_1: left allmulticast mode [ 354.544262][T13988] pimreg: entered promiscuous mode [ 354.552347][T13988] xfrm2: entered promiscuous mode [ 354.557716][T13988] mac80211_hwsim hwsim18 wlan2: entered promiscuous mode [ 354.566251][T13988] ipvlan2: entered promiscuous mode [ 354.572185][T13988] vti0: entered promiscuous mode [ 354.577565][T13988] gtp1: entered promiscuous mode [ 354.583844][T13988] bond7: entered promiscuous mode [ 354.589926][T13988] mac80211_hwsim hwsim19 wlan3: entered promiscuous mode [ 354.597338][T13988] ip6gretap1: entered promiscuous mode [ 354.603841][T13988] bond8: entered promiscuous mode [ 354.609440][T13988] geneve2: entered promiscuous mode [ 354.616884][T13988] gtp2: entered promiscuous mode [ 354.625615][T13988] sit2: entered promiscuous mode [ 354.633659][T13988] sit3: entered promiscuous mode [ 354.642283][T13988] vlan0.4: entered promiscuous mode [ 354.649111][T13988] sit4: entered promiscuous mode [ 354.654813][T13988] syzkaller0: entered promiscuous mode [ 354.663276][T13988] vti60: entered promiscuous mode [ 354.669176][T13988] batadv0.5: entered promiscuous mode [ 354.675229][T13988] gre1: entered promiscuous mode [ 354.683674][T13988] mac80211_hwsim hwsim28 wlan4: entered promiscuous mode [ 354.692909][T13988] macvlan2: entered promiscuous mode [ 354.699368][T13988] xfrm3: entered promiscuous mode [ 354.704944][T13988] veth0: entered promiscuous mode [ 354.711442][T13988] veth1: entered promiscuous mode [ 354.721504][T13988] macsec1: entered promiscuous mode [ 354.760767][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 354.809658][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 354.871278][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 355.203824][T14014] bond15: option packets_per_slave: invalid value (18446744073709551615) [ 355.251297][T14014] bond15: option packets_per_slave: allowed values 0 - 65535 [ 355.282860][T14014] bond15 (unregistering): Released all slaves [ 355.641664][T14035] netlink: 'syz.4.2222': attribute type 2 has an invalid length. [ 356.011969][T14051] IPv4: Oversized IP packet from 127.202.26.0 [ 356.022754][T14056] sch_tbf: peakrate 33554439 is lower than or equals to rate 2147483647 ! [ 356.046146][T14053] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2226'. [ 356.390104][T14065] xt_recent: Unsupported userspace flags (000000b1) [ 356.475562][T14069] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2233'. [ 356.499885][T14069] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2233'. [ 356.581861][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2233'. [ 356.685782][T14073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2235'. [ 356.794631][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 356.880577][T14075] bond11: entered promiscuous mode [ 356.900640][T14075] bond11: entered allmulticast mode [ 357.004950][T14081] No such timeout policy "s" [ 357.031464][T14081] netlink: Failed to associated timeout policy 's' [ 357.276535][T14085] tipc: Enabled bearer , priority 31 [ 357.698916][T14101] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 357.746215][T14101] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.2243'. [ 357.798432][T14101] xt_hashlimit: size too large, truncated to 1048576 [ 357.813250][T14106] xt_hashlimit: size too large, truncated to 1048576 [ 357.876887][T14111] xt_hashlimit: size too large, truncated to 1048576 [ 357.900666][T14109] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes. [ 358.671905][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 358.706566][T14137] ip6gre3: entered promiscuous mode [ 358.797307][T14134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.365662][T14151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.424492][T14151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.554048][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 359.571659][T14158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.574500][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 360.237435][T14185] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 360.720573][T14200] netlink: 'syz.0.2273': attribute type 8 has an invalid length. [ 361.393349][T14212] 8021q: adding VLAN 0 to HW filter on device bond7 [ 361.423017][T14226] __nla_validate_parse: 1 callbacks suppressed [ 361.423039][T14226] netlink: 5428 bytes leftover after parsing attributes in process `syz.1.2278'. [ 361.508274][T14212] bond7 (unregistering): Released all slaves [ 361.528284][T14226] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.636017][T14226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2278'. [ 362.503012][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2283'. [ 363.231972][T14266] bridge0: port 1(wlan1) entered blocking state [ 363.282329][T14266] bridge0: port 1(wlan1) entered disabled state [ 363.322324][T14266] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 363.372216][T14266] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 363.534322][T14289] netlink: 'syz.0.2293': attribute type 13 has an invalid length. [ 363.751542][T14295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2296'. [ 363.816185][T14298] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2296'. [ 364.266677][T14307] sctp: [Deprecated]: syz.3.2299 (pid 14307) Use of int in max_burst socket option. [ 364.266677][T14307] Use struct sctp_assoc_value instead [ 364.684456][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 364.708900][T14292] bond0: (slave ip6gre0): Error: Device type is different from other slaves [ 365.323644][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2305'. [ 365.810445][T14352] netlink: 'syz.0.2311': attribute type 21 has an invalid length. [ 365.868112][T14352] netlink: 'syz.0.2311': attribute type 21 has an invalid length. [ 365.928072][T14352] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2311'. [ 366.015503][T14352] netlink: 'syz.0.2311': attribute type 5 has an invalid length. [ 366.091946][T14352] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2311'. [ 366.377047][T14358] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.479831][T14363] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 367.135143][T14363] bond10: entered promiscuous mode [ 367.182508][T14363] 8021q: adding VLAN 0 to HW filter on device bond10 [ 367.406622][T14370] ipvlan3: entered allmulticast mode [ 367.438155][T14370] bond10: entered allmulticast mode [ 367.529473][T14371] ipvlan4: entered allmulticast mode [ 367.562152][T14373] lo: Caught tx_queue_len zero misconfig [ 367.711209][T14374] bond10: (slave bridge3): making interface the new active one [ 367.727123][T14374] bridge3: entered promiscuous mode [ 367.735129][T14374] bridge3: entered allmulticast mode [ 367.744100][T14374] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 367.906772][T14387] tipc: Enabling of bearer rejected, failed to enable media [ 368.386177][T14395] sctp: [Deprecated]: syz.2.2323 (pid 14395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.386177][T14395] Use struct sctp_sack_info instead [ 368.588764][T14402] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2322'. [ 368.611266][T14391] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 368.735261][T14391] bond7 (unregistering): Released all slaves [ 368.829377][T14408] openvswitch: netlink: IP tunnel dst address not specified [ 368.836989][T14408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.850964][T14408] netlink: 'syz.3.2326': attribute type 23 has an invalid length. [ 368.978206][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2325'. [ 369.172057][T14419] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2328'. [ 369.289201][T14421] netlink: 'syz.2.2329': attribute type 13 has an invalid length. [ 369.359772][T14423] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2329'. [ 369.426212][T14421] netlink: 'syz.2.2329': attribute type 58 has an invalid length. [ 369.528328][T14421] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2329'. [ 369.893040][T14431] vlan2: entered promiscuous mode [ 369.924168][T14431] bridge0: entered promiscuous mode [ 371.079201][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 180 seconds [ 371.091310][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 180 seconds [ 371.103101][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 180 seconds [ 371.119513][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 180 seconds [ 371.152896][T14456] netlink: zone id is out of range [ 371.159101][T14456] netlink: del zone limit has 4 unknown bytes [ 371.264859][T14454] netlink: 'syz.3.2340': attribute type 2 has an invalid length. [ 371.410598][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2340'. [ 371.525887][T14454] netlink: 'syz.3.2340': attribute type 39 has an invalid length. [ 371.565561][T14463] x_tables: unsorted entry at hook 3 [ 371.574525][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 372.246608][T14477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.367598][T14480] netlink: 'syz.0.2350': attribute type 3 has an invalid length. [ 372.410497][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 372.485952][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'. [ 372.702901][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 373.113988][T14505] netlink: 'syz.4.2356': attribute type 11 has an invalid length. [ 373.170450][T14483] 8021q: adding VLAN 0 to HW filter on device bond15 [ 374.218707][T14528] netlink: zone id is out of range [ 374.273375][T14528] netlink: zone id is out of range [ 374.319960][T14528] netlink: zone id is out of range [ 374.355634][T14528] netlink: zone id is out of range [ 374.378261][T14528] netlink: zone id is out of range [ 374.399004][T14528] netlink: zone id is out of range [ 374.435887][T14528] netlink: zone id is out of range [ 374.477531][T14528] netlink: zone id is out of range [ 374.522851][T14528] netlink: zone id is out of range [ 374.598710][T14528] netlink: zone id is out of range [ 375.044291][T14549] __nla_validate_parse: 1 callbacks suppressed [ 375.044315][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 375.379303][T14558] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 375.401510][T14558] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 375.483693][T14558] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2371'. [ 375.582713][T14558] NCSI netlink: No device for ifindex 813332851 [ 375.626624][T14561] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 375.683899][T14561] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 375.756775][T14561] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2371'. [ 375.825684][T14561] NCSI netlink: No device for ifindex 813332851 [ 375.903640][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 376.008137][T14566] netlink: 'syz.1.2373': attribute type 30 has an invalid length. [ 376.338173][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.367230][T14580] netlink: 'syz.2.2376': attribute type 2 has an invalid length. [ 376.409229][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.495675][ T1116] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.762163][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 377.742793][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 378.408475][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2386'. [ 378.469117][T14621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2386'. [ 378.617548][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2377'. [ 378.729871][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.736513][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.811386][T14631] netlink: 'syz.2.2390': attribute type 9 has an invalid length. [ 378.849907][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 379.517415][T14651] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.899826][T14663] net_ratelimit: 18 callbacks suppressed [ 379.899908][T14663] openvswitch: netlink: IP tunnel dst address not specified [ 379.970699][T14663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.544212][T14673] __nla_validate_parse: 1 callbacks suppressed [ 380.544235][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2401'. [ 380.756707][T14686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2403'. [ 381.599136][T14703] xt_cgroup: xt_cgroup: no path or classid specified [ 381.714818][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 381.787098][T14707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2411'. [ 382.124146][T14711] netlink: 'syz.2.2412': attribute type 3 has an invalid length. [ 382.858608][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 383.106838][T14732] openvswitch: netlink: IP tunnel dst address not specified [ 383.180422][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 384.795882][T14763] IPVS: set_ctl: invalid protocol: 46 172.20.20.44:21 [ 384.864946][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 385.128757][T14775] netlink: 'syz.1.2431': attribute type 12 has an invalid length. [ 385.180190][T14775] netlink: 'syz.1.2431': attribute type 29 has an invalid length. [ 385.209626][T14775] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2431'. [ 385.252010][T14775] netlink: 'syz.1.2431': attribute type 2 has an invalid length. [ 386.997686][T14824] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 387.165224][T14830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2443'. [ 387.250911][T14826] erspan1: entered allmulticast mode [ 387.436425][T14838] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 387.795471][T14824] bond16: entered promiscuous mode [ 387.801397][T14824] bond16: entered allmulticast mode [ 387.809826][T14824] 8021q: adding VLAN 0 to HW filter on device bond16 [ 387.819908][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 387.854677][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 388.391231][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'. [ 388.466877][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2450'. [ 388.666693][T14855] : renamed from bond0 [ 389.031824][T14872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 389.757203][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'. [ 393.255485][ T4990] udevd[4990]: worker [8931] /devices/virtual/block/nbd1 timeout; kill it [ 393.280300][ T4990] udevd[4990]: seq 14387 '/devices/virtual/block/nbd1' killed [ 395.414407][T14898] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 395.464909][T14898] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2459'. [ 395.490977][T14901] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 395.719009][T14907] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 396.313217][T14920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2466'. [ 396.516124][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2468'. [ 396.577548][T14924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2468'. [ 396.986885][T14936] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2472'. [ 397.739018][T14948] syzkaller0: entered promiscuous mode [ 397.744997][T14948] syzkaller0: entered allmulticast mode [ 397.890179][T14950] netlink: 'syz.4.2477': attribute type 49 has an invalid length. [ 398.054956][T14950] ip6gretap0: entered promiscuous mode [ 398.087567][T14950] ip6gretap0: entered allmulticast mode [ 398.140437][T14951] netlink: 'syz.4.2477': attribute type 4 has an invalid length. [ 398.669741][T14960] netlink: 'syz.4.2480': attribute type 1 has an invalid length. [ 398.784925][T14960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2480'. [ 401.109566][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 210 seconds [ 401.120996][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 210 seconds [ 401.138492][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 210 seconds [ 401.149806][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 210 seconds [ 410.930313][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.945062][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.958662][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.974201][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.983094][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.043398][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 411.057035][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 411.072614][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 411.088355][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 411.095780][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.105644][T14971] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.108551][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.135496][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.146203][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.159998][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.187414][T14971] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 412.206370][T14971] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 412.218319][T14971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 412.499642][T14971] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 412.518436][T14971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 413.196119][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 413.206438][ T5642] Bluetooth: hci6: command tx timeout [ 413.222031][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 413.230787][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 413.241380][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 413.253752][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 413.280233][T14971] Bluetooth: hci5: command tx timeout [ 413.644617][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.698685][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.726576][T14969] bridge_slave_0: entered allmulticast mode [ 413.751542][T14969] bridge_slave_0: entered promiscuous mode [ 413.824740][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.862921][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.898339][T14969] bridge_slave_1: entered allmulticast mode [ 413.933625][T14969] bridge_slave_1: entered promiscuous mode [ 414.286002][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.516421][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.630416][ T5629] Bluetooth: hci7: command tx timeout [ 414.745153][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.786780][T14966] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.825263][T14966] bridge_slave_0: entered allmulticast mode [ 414.860103][T14971] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 414.875714][T14971] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 414.893361][T14971] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 414.906610][T14971] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 414.916131][T14971] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 414.975039][T14966] bridge_slave_0: entered promiscuous mode [ 415.167324][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.195359][T14966] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.208389][T14966] bridge_slave_1: entered allmulticast mode [ 415.216731][T14966] bridge_slave_1: entered promiscuous mode [ 415.241252][T14969] team0: Port device team_slave_0 added [ 415.271461][T14971] Bluetooth: hci6: command tx timeout [ 415.310250][T14969] team0: Port device team_slave_1 added [ 415.348195][T14971] Bluetooth: hci5: command tx timeout [ 415.348383][ T5629] Bluetooth: hci8: command tx timeout [ 415.570946][T14966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.592120][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.599305][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.627458][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.671200][T14966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.735861][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.770764][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.805111][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.934159][T14966] team0: Port device team_slave_0 added [ 415.962554][T14966] team0: Port device team_slave_1 added [ 416.101767][T14969] hsr_slave_0: entered promiscuous mode [ 416.109679][T14969] hsr_slave_1: entered promiscuous mode [ 416.209127][T14966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.226382][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.256472][T14966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.279800][T14966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.292896][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.428754][T14966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.710145][ T5629] Bluetooth: hci7: command tx timeout [ 416.912038][T14966] hsr_slave_0: entered promiscuous mode [ 416.919718][T14966] hsr_slave_1: entered promiscuous mode [ 416.926581][T14966] debugfs: 'hsr0' already exists in 'hsr' [ 416.933486][T14966] Cannot create hsr debugfs directory [ 416.948792][ T5629] Bluetooth: hci9: command tx timeout [ 417.349165][ T5629] Bluetooth: hci6: command tx timeout [ 417.429242][ T5629] Bluetooth: hci5: command tx timeout [ 417.438051][ T5629] Bluetooth: hci8: command tx timeout [ 418.434942][T15003] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.445164][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.456554][T15003] bridge_slave_0: entered allmulticast mode [ 418.465851][T15003] bridge_slave_0: entered promiscuous mode [ 418.568197][T14991] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.584448][T14991] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.593595][T14991] bridge_slave_0: entered allmulticast mode [ 418.612153][T14991] bridge_slave_0: entered promiscuous mode [ 418.647161][T15003] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.665254][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.677545][T15003] bridge_slave_1: entered allmulticast mode [ 418.687376][T15003] bridge_slave_1: entered promiscuous mode [ 418.737075][T14991] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.745685][T14991] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.756167][T14991] bridge_slave_1: entered allmulticast mode [ 418.765177][T14991] bridge_slave_1: entered promiscuous mode [ 418.788059][ T5629] Bluetooth: hci7: command tx timeout [ 418.852643][T15003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.028594][ T5629] Bluetooth: hci9: command tx timeout [ 419.054044][T15003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.179546][T14991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.221720][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.230732][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.238819][T15026] bridge_slave_0: entered allmulticast mode [ 419.247029][T15026] bridge_slave_0: entered promiscuous mode [ 419.279540][T14991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.301298][T15003] team0: Port device team_slave_0 added [ 419.338663][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.347582][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.358248][T15026] bridge_slave_1: entered allmulticast mode [ 419.366822][T15026] bridge_slave_1: entered promiscuous mode [ 419.397055][T15003] team0: Port device team_slave_1 added [ 419.428261][ T5629] Bluetooth: hci6: command tx timeout [ 419.517969][ T5629] Bluetooth: hci8: command tx timeout [ 419.523498][T14971] Bluetooth: hci5: command tx timeout [ 419.579161][T14991] team0: Port device team_slave_0 added [ 419.631055][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.646883][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.662829][T14991] team0: Port device team_slave_1 added [ 419.672520][T15003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.681279][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.709390][T15003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.882340][T15003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.893444][T15003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.948266][T15003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.982480][T15026] team0: Port device team_slave_0 added [ 420.026595][T15026] team0: Port device team_slave_1 added [ 420.044779][T14991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.052578][T14991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.098291][T14991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.141163][T14991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.151033][T14991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.178796][T14991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.252620][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.261528][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.289339][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.373239][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.382316][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.429458][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.475216][T15003] hsr_slave_0: entered promiscuous mode [ 420.485596][T15003] hsr_slave_1: entered promiscuous mode [ 420.493807][T15003] debugfs: 'hsr0' already exists in 'hsr' [ 420.501296][T15003] Cannot create hsr debugfs directory [ 420.560914][T14991] hsr_slave_0: entered promiscuous mode [ 420.579868][T14991] hsr_slave_1: entered promiscuous mode [ 420.587308][T14991] debugfs: 'hsr0' already exists in 'hsr' [ 420.596408][T14991] Cannot create hsr debugfs directory [ 420.737532][T15026] hsr_slave_0: entered promiscuous mode [ 420.746584][T15026] hsr_slave_1: entered promiscuous mode [ 420.756994][T15026] debugfs: 'hsr0' already exists in 'hsr' [ 420.764434][T15026] Cannot create hsr debugfs directory [ 420.868175][ T5629] Bluetooth: hci7: command tx timeout [ 421.108790][ T5629] Bluetooth: hci9: command tx timeout [ 421.588267][ T5629] Bluetooth: hci8: command tx timeout [ 423.188278][ T5629] Bluetooth: hci9: command tx timeout [ 431.190120][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 240 seconds [ 431.201523][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 240 seconds [ 431.214259][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 240 seconds [ 431.225840][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 240 seconds [ 440.151426][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.158221][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.272893][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 270 seconds [ 461.284158][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 270 seconds [ 461.301494][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 270 seconds [ 461.312716][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 270 seconds [ 471.476093][T14971] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 471.491927][T14971] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 471.502115][T14971] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 471.512613][T14971] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 471.521555][T14971] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 471.602486][T14971] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 471.615760][T14971] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 471.628496][T14971] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 471.636926][T14971] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 471.646926][T14971] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 472.553765][ T5629] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 472.568727][ T5629] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 472.586383][ T5629] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 472.634089][ T5629] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 472.644476][ T5629] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 473.471086][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.502068][T15059] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.520037][T15059] bridge_slave_0: entered allmulticast mode [ 473.558155][T15059] bridge_slave_0: entered promiscuous mode [ 473.590719][T14971] Bluetooth: hci10: command tx timeout [ 473.620679][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.699675][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.759526][T14971] Bluetooth: hci11: command tx timeout [ 473.771124][T15059] bridge_slave_1: entered allmulticast mode [ 473.831964][T15059] bridge_slave_1: entered promiscuous mode [ 474.078783][ T5642] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 474.111042][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 474.131950][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 474.142409][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 474.151121][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 474.336348][T15059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.447399][T15059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.718455][T14971] Bluetooth: hci12: command tx timeout [ 474.813565][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.838849][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.879796][T15062] bridge_slave_0: entered allmulticast mode [ 474.894935][T15062] bridge_slave_0: entered promiscuous mode [ 475.024337][T15059] team0: Port device team_slave_0 added [ 475.054689][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.083371][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.119324][T15062] bridge_slave_1: entered allmulticast mode [ 475.144978][ T5642] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 475.159054][ T5642] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 475.168705][ T5642] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 475.181127][ T5642] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 475.189995][ T5642] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 475.243347][T15062] bridge_slave_1: entered promiscuous mode [ 475.292506][T15059] team0: Port device team_slave_1 added [ 475.644247][T15059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.668620][ T5642] Bluetooth: hci10: command tx timeout [ 475.674304][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.717801][T15059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.754823][T15059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.763233][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.818217][T15059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.829574][ T5642] Bluetooth: hci11: command tx timeout [ 475.846203][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.906014][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.240068][ T5642] Bluetooth: hci13: command tx timeout [ 476.350504][T15059] hsr_slave_0: entered promiscuous mode [ 476.359468][T15059] hsr_slave_1: entered promiscuous mode [ 476.366113][T15059] debugfs: 'hsr0' already exists in 'hsr' [ 476.372885][T15059] Cannot create hsr debugfs directory [ 476.449118][T15062] team0: Port device team_slave_0 added [ 476.605845][T15062] team0: Port device team_slave_1 added [ 476.788207][ T5642] Bluetooth: hci12: command tx timeout [ 477.015353][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.024491][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.062380][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.166958][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.224533][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.285828][ T5642] Bluetooth: hci14: command tx timeout [ 477.321666][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.732409][T15062] hsr_slave_0: entered promiscuous mode [ 477.740219][T15062] hsr_slave_1: entered promiscuous mode [ 477.747046][T15062] debugfs: 'hsr0' already exists in 'hsr' [ 477.753175][ T5642] Bluetooth: hci10: command tx timeout [ 477.778037][T15062] Cannot create hsr debugfs directory [ 477.908629][ T5642] Bluetooth: hci11: command tx timeout [ 478.055941][T15082] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.065890][T15082] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.077071][T15082] bridge_slave_0: entered allmulticast mode [ 478.095694][T15082] bridge_slave_0: entered promiscuous mode [ 478.175061][T15082] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.189673][T15082] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.197210][T15082] bridge_slave_1: entered allmulticast mode [ 478.207056][T15082] bridge_slave_1: entered promiscuous mode [ 478.309606][ T5642] Bluetooth: hci13: command tx timeout [ 478.487624][T15082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.620666][T15082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.860594][T15082] team0: Port device team_slave_0 added [ 478.869002][ T5642] Bluetooth: hci12: command tx timeout [ 479.127623][T15082] team0: Port device team_slave_1 added [ 479.348459][ T5642] Bluetooth: hci14: command tx timeout [ 479.454706][T15082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.463632][T15082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.497138][T15082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.554960][T15082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.562374][T15082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.595346][T15082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.829488][ T5642] Bluetooth: hci10: command tx timeout [ 479.988689][ T5642] Bluetooth: hci11: command tx timeout [ 480.036713][T15082] hsr_slave_0: entered promiscuous mode [ 480.044265][T15082] hsr_slave_1: entered promiscuous mode [ 480.052758][T15082] debugfs: 'hsr0' already exists in 'hsr' [ 480.059216][T15082] Cannot create hsr debugfs directory [ 480.129221][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.151274][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.160106][T15112] bridge_slave_0: entered allmulticast mode [ 480.168874][T15112] bridge_slave_0: entered promiscuous mode [ 480.288856][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.296186][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.305135][T15112] bridge_slave_1: entered allmulticast mode [ 480.330250][T15112] bridge_slave_1: entered promiscuous mode [ 480.362513][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.371289][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.379598][T15100] bridge_slave_0: entered allmulticast mode [ 480.388476][ T5642] Bluetooth: hci13: command tx timeout [ 480.414638][T15100] bridge_slave_0: entered promiscuous mode [ 480.464292][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.488629][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.505477][T15100] bridge_slave_1: entered allmulticast mode [ 480.514384][T15100] bridge_slave_1: entered promiscuous mode [ 480.547463][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.654301][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.755748][T15100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.811269][T15100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.836307][T15112] team0: Port device team_slave_0 added [ 480.887318][T15112] team0: Port device team_slave_1 added [ 480.948080][ T5642] Bluetooth: hci12: command tx timeout [ 481.123759][T15100] team0: Port device team_slave_0 added [ 481.149141][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.156150][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.217098][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.233970][T15100] team0: Port device team_slave_1 added [ 481.289463][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.297236][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.328917][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.438428][ T5642] Bluetooth: hci14: command tx timeout [ 481.553380][T15100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.584472][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.616923][T15100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.655066][T15100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.665537][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.764528][T15100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.856079][T15112] hsr_slave_0: entered promiscuous mode [ 481.863751][T15112] hsr_slave_1: entered promiscuous mode [ 481.871456][T15112] debugfs: 'hsr0' already exists in 'hsr' [ 481.877241][T15112] Cannot create hsr debugfs directory [ 482.090814][T15100] hsr_slave_0: entered promiscuous mode [ 482.100485][T15100] hsr_slave_1: entered promiscuous mode [ 482.107466][T15100] debugfs: 'hsr0' already exists in 'hsr' [ 482.114495][T15100] Cannot create hsr debugfs directory [ 482.469313][ T5642] Bluetooth: hci13: command tx timeout [ 483.510666][ T5642] Bluetooth: hci14: command tx timeout [ 491.349426][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 300 seconds [ 491.360717][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 300 seconds [ 491.372378][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 300 seconds [ 491.384328][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 300 seconds [ 501.591406][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.599002][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.428612][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 330 seconds [ 521.439944][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 330 seconds [ 521.451204][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 330 seconds [ 521.468229][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 330 seconds [ 532.109792][T14971] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 532.122299][T14971] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 532.135075][T14971] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 532.145517][T14971] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 532.154051][T14971] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 532.364307][T14967] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 532.377171][T14967] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 532.387697][T14967] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 532.402768][T14967] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 532.411333][T14967] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 533.441772][ T5629] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 533.455688][ T5629] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 533.464529][ T5629] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 533.480516][ T5629] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 533.490063][ T5629] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 534.237866][ T5629] Bluetooth: hci15: command tx timeout [ 534.388318][ T5629] Bluetooth: hci6: command 0x0406 tx timeout [ 534.394553][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 534.468720][ T5642] Bluetooth: hci16: command tx timeout [ 534.806222][T14971] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 534.822432][T14971] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 534.832869][T14971] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 534.843018][T14971] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 534.852041][T14971] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 535.424446][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.460483][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.478518][T15149] bridge_slave_0: entered allmulticast mode [ 535.515065][T15149] bridge_slave_0: entered promiscuous mode [ 535.553549][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.567269][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.582483][T15149] bridge_slave_1: entered allmulticast mode [ 535.589291][ T5642] Bluetooth: hci17: command tx timeout [ 535.610644][T15149] bridge_slave_1: entered promiscuous mode [ 535.779705][T14971] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 535.798231][T14971] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 535.807559][T14971] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 535.824482][T14971] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 535.847109][T14971] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 535.891550][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.947105][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.240392][T15149] team0: Port device team_slave_0 added [ 536.270879][T15149] team0: Port device team_slave_1 added [ 536.318546][ T5642] Bluetooth: hci15: command tx timeout [ 536.548520][ T5642] Bluetooth: hci16: command tx timeout [ 536.739607][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.764025][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.806825][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.822809][T15153] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.831475][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.839354][T15153] bridge_slave_0: entered allmulticast mode [ 536.848401][T15153] bridge_slave_0: entered promiscuous mode [ 536.860638][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.874055][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.902109][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.920900][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.930473][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.938368][T15153] bridge_slave_1: entered allmulticast mode [ 536.947569][T15153] bridge_slave_1: entered promiscuous mode [ 536.955459][ T5642] Bluetooth: hci18: command tx timeout [ 537.019111][T15153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.033509][T15153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.319611][T15153] team0: Port device team_slave_0 added [ 537.480571][T15153] team0: Port device team_slave_1 added [ 537.573307][T15149] hsr_slave_0: entered promiscuous mode [ 537.582183][T15149] hsr_slave_1: entered promiscuous mode [ 537.600373][T15149] debugfs: 'hsr0' already exists in 'hsr' [ 537.607393][T15149] Cannot create hsr debugfs directory [ 537.667812][T15154] Bluetooth: hci17: command tx timeout [ 537.684412][T15153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.704521][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.731878][T15153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.747184][T15153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.756295][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.783607][T15153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.908436][T15154] Bluetooth: hci19: command tx timeout [ 538.296217][T15153] hsr_slave_0: entered promiscuous mode [ 538.304507][T15153] hsr_slave_1: entered promiscuous mode [ 538.315233][T15153] debugfs: 'hsr0' already exists in 'hsr' [ 538.322052][T15153] Cannot create hsr debugfs directory [ 538.389417][T15154] Bluetooth: hci15: command tx timeout [ 538.628546][T15154] Bluetooth: hci16: command tx timeout [ 539.033870][T15154] Bluetooth: hci18: command tx timeout [ 539.166885][T15170] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.175576][T15170] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.186482][T15170] bridge_slave_0: entered allmulticast mode [ 539.211730][T15170] bridge_slave_0: entered promiscuous mode [ 539.264588][T15170] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.272436][T15170] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.280797][T15170] bridge_slave_1: entered allmulticast mode [ 539.290971][T15170] bridge_slave_1: entered promiscuous mode [ 539.393218][T15170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.407661][T15170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.516843][T15154] Bluetooth: hci7: command 0x0406 tx timeout [ 539.529700][T15154] Bluetooth: hci8: command 0x0406 tx timeout [ 539.540246][T15154] Bluetooth: hci9: command 0x0406 tx timeout [ 539.758421][T14971] Bluetooth: hci17: command tx timeout [ 539.989458][T14971] Bluetooth: hci19: command tx timeout [ 539.995871][T15170] team0: Port device team_slave_0 added [ 540.058961][T15170] team0: Port device team_slave_1 added [ 540.289827][T15170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.306932][T15170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.358348][T15170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.468910][T14971] Bluetooth: hci15: command tx timeout [ 540.527461][T15170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.536881][T15170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.588426][T15170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.620508][T15200] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.653576][T15200] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.661912][T15200] bridge_slave_0: entered allmulticast mode [ 540.670664][T15200] bridge_slave_0: entered promiscuous mode [ 540.699589][T15185] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.708790][T14971] Bluetooth: hci16: command tx timeout [ 540.730307][T15185] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.758847][T15185] bridge_slave_0: entered allmulticast mode [ 540.775288][T15185] bridge_slave_0: entered promiscuous mode [ 540.812413][T15200] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.821912][T15200] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.830644][T15200] bridge_slave_1: entered allmulticast mode [ 540.842046][T15200] bridge_slave_1: entered promiscuous mode [ 540.877277][T15185] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.885841][T15185] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.895440][T15185] bridge_slave_1: entered allmulticast mode [ 540.910942][T15185] bridge_slave_1: entered promiscuous mode [ 541.074065][T15170] hsr_slave_0: entered promiscuous mode [ 541.081870][T15170] hsr_slave_1: entered promiscuous mode [ 541.089315][T15170] debugfs: 'hsr0' already exists in 'hsr' [ 541.095187][T15170] Cannot create hsr debugfs directory [ 541.124104][T14971] Bluetooth: hci18: command tx timeout [ 541.170438][T15185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.206356][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.280582][T15185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.323365][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.505673][T15185] team0: Port device team_slave_0 added [ 541.550140][T15185] team0: Port device team_slave_1 added [ 541.579472][T15200] team0: Port device team_slave_0 added [ 541.663563][T15200] team0: Port device team_slave_1 added [ 541.735942][T15185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.744630][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.773451][T15185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.828950][T14971] Bluetooth: hci17: command tx timeout [ 541.860442][T15185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.881308][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.929361][T15185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.954011][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.961857][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.991712][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.065642][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.073407][T14971] Bluetooth: hci19: command tx timeout [ 542.097173][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.154550][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.449303][T15200] hsr_slave_0: entered promiscuous mode [ 542.456760][T15200] hsr_slave_1: entered promiscuous mode [ 542.466621][T15200] debugfs: 'hsr0' already exists in 'hsr' [ 542.475828][T15200] Cannot create hsr debugfs directory [ 542.534464][T15185] hsr_slave_0: entered promiscuous mode [ 542.542469][T15185] hsr_slave_1: entered promiscuous mode [ 542.570419][T15185] debugfs: 'hsr0' already exists in 'hsr' [ 542.586247][T15185] Cannot create hsr debugfs directory [ 543.191777][T14971] Bluetooth: hci18: command tx timeout [ 544.148128][T14971] Bluetooth: hci19: command tx timeout [ 544.471026][ T31] INFO: task dhcpcd:5284 blocked for more than 143 seconds. [ 544.486960][ T31] Not tainted syzkaller #0 [ 544.503974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 544.518744][ T31] task:dhcpcd state:D stack:23400 pid:5284 tgid:5284 ppid:1 task_flags:0x400140 flags:0x00080000 [ 544.547875][ T31] Call Trace: [ 544.595897][ T31] [ 544.654116][ T31] __schedule+0x17d9/0x56c0 [ 544.705549][ T31] ? __lock_acquire+0x683/0x2cf0 [ 544.736609][ T31] ? __lock_acquire+0x683/0x2cf0 [ 544.743657][ T31] ? unwind_next_frame+0x8f/0x2550 [ 544.758773][ T31] ? __pfx___schedule+0x10/0x10 [ 544.769712][ T31] ? schedule+0x90/0x2b0 [ 544.782890][ T31] schedule+0x164/0x2b0 [ 544.803423][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.819897][ T31] __mutex_lock+0x7bf/0x1550 [ 544.833943][ T31] ? __mutex_lock+0x5d4/0x1550 [ 544.839687][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 544.844565][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.850544][ T31] ? stack_trace_save+0xa9/0x100 [ 544.856014][ T31] ? __lock_acquire+0x683/0x2cf0 [ 544.861662][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.867041][ T31] genl_rcv_msg+0x10b/0x7a0 [ 544.878996][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.890156][ T31] ? __lock_acquire+0x683/0x2cf0 [ 544.904397][ T31] netlink_rcv_skb+0x226/0x4a0 [ 544.910049][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.915272][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.922671][ T31] ? down_read+0x2be/0x330 [ 544.927478][ T31] genl_rcv+0x28/0x40 [ 544.932612][ T31] netlink_unicast+0x7bb/0x940 [ 544.940708][ T31] netlink_sendmsg+0x813/0xb40 [ 544.946186][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.961404][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.978133][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.983758][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 544.990674][ T31] ____sys_sendmsg+0x54e/0x850 [ 544.995514][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.002882][ T31] ? import_iovec+0x73/0xa0 [ 545.007596][ T31] ___sys_sendmsg+0x2a5/0x360 [ 545.013080][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.018887][ T31] ? netdev_run_todo+0x1045/0x10d0 [ 545.024188][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 545.033731][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 545.039182][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.044709][ T31] ? __secure_computing+0xe7/0x2b0 [ 545.052167][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.068202][ T31] do_syscall_64+0x174/0x580 [ 545.078306][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.089341][ T31] ? clear_bhb_loop+0x40/0x90 [ 545.094366][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.101158][ T31] RIP: 0033:0x7f41a0807407 [ 545.105675][ T31] RSP: 002b:00007ffd624441b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 545.125204][ T31] RAX: ffffffffffffffda RBX: 00007f41a077d780 RCX: 00007f41a0807407 [ 545.133664][ T31] RDX: 0000000000000000 RSI: 00007ffd62444230 RDI: 000000000000000e [ 545.143410][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.152091][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562839662e10 [ 545.162273][ T31] R13: 000000000000000e R14: 00007ffd624586f0 R15: 0000562859a59040 [ 545.171033][ T31] [ 545.182296][ T31] INFO: task udevd:8931 blocked in I/O wait for more than 144 seconds. [ 545.223238][ T31] Not tainted syzkaller #0 [ 545.251134][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.288472][ T31] task:udevd state:D stack:25960 pid:8931 tgid:8931 ppid:4990 task_flags:0x400140 flags:0x00080002 [ 545.309484][ T31] Call Trace: [ 545.313202][ T31] [ 545.316539][ T31] __schedule+0x17d9/0x56c0 [ 545.321575][ T31] ? __lock_acquire+0x683/0x2cf0 [ 545.326636][ T31] ? __pfx___schedule+0x10/0x10 [ 545.333012][ T31] ? schedule+0x90/0x2b0 [ 545.337465][ T31] schedule+0x164/0x2b0 [ 545.343334][ T31] io_schedule+0x7f/0xd0 [ 545.360823][ T31] folio_wait_bit_common+0x836/0xbc0 [ 545.368981][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 545.381822][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 545.389944][ T31] ? filemap_read_folio+0x234/0x3a0 [ 545.395503][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 545.401899][ T31] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 545.408390][ T31] do_read_cache_folio+0x1ac/0x590 [ 545.413582][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 545.420340][ T31] read_part_sector+0xb6/0x2b0 [ 545.425450][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 545.432654][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 545.438887][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 545.446191][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 545.453537][ T31] ? bdev_disk_changed+0x56c/0x17a0 [ 545.460027][ T31] bdev_disk_changed+0x851/0x17a0 [ 545.465273][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 545.489628][ T31] blkdev_get_whole+0x372/0x510 [ 545.494710][ T31] bdev_open+0x324/0xd70 [ 545.501420][ T31] blkdev_open+0x461/0x600 [ 545.505973][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 545.511786][ T31] do_dentry_open+0x816/0x1380 [ 545.516674][ T31] vfs_open+0x3b/0x340 [ 545.521401][ T31] ? path_openat+0x2e2d/0x3830 [ 545.526436][ T31] path_openat+0x2e44/0x3830 [ 545.532038][ T31] ? kasan_save_track+0x3e/0x80 [ 545.537048][ T31] ? do_sys_openat2+0xcc/0x200 [ 545.543008][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.549533][ T31] do_file_open+0x23e/0x4a0 [ 545.554196][ T31] ? __pfx_do_file_open+0x10/0x10 [ 545.560651][ T31] ? _raw_spin_unlock+0x28/0x50 [ 545.565566][ T31] ? alloc_fd+0x651/0x6c0 [ 545.570898][ T31] do_sys_openat2+0x115/0x200 [ 545.575762][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 545.583248][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 545.601504][ T31] __x64_sys_openat+0x138/0x170 [ 545.610208][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.628666][ T31] do_syscall_64+0x174/0x580 [ 545.633442][ T31] ? clear_bhb_loop+0x40/0x90 [ 545.647883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.656703][ T31] RIP: 0033:0x7f63718a7407 [ 545.662519][ T31] RSP: 002b:00007ffd8d0b51e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 545.688622][ T31] RAX: ffffffffffffffda RBX: 00007f6371f98880 RCX: 00007f63718a7407 [ 545.704943][ T31] RDX: 00000000000a0800 RSI: 000055df69e1a4d0 RDI: ffffffffffffff9c [ 545.719394][ T31] RBP: 000055df69e19910 R08: 0000000000000000 R09: 0000000000000000 [ 545.727450][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055df69e31e00 [ 545.736068][ T31] R13: 000055df69e27190 R14: 0000000000000000 R15: 000055df69e31e00 [ 545.744874][ T31] [ 545.752263][ T31] INFO: task syz.1.2459:14898 blocked for more than 144 seconds. [ 545.761881][ T31] Not tainted syzkaller #0 [ 545.767085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.776420][ T31] task:syz.1.2459 state:D stack:26312 pid:14898 tgid:14897 ppid:5623 task_flags:0x480140 flags:0x00080002 [ 545.789988][ T31] Call Trace: [ 545.793971][ T31] [ 545.797001][ T31] __schedule+0x17d9/0x56c0 [ 545.805786][ T31] ? __lock_acquire+0x683/0x2cf0 [ 545.811516][ T31] ? __pfx___schedule+0x10/0x10 [ 545.816511][ T31] ? schedule+0x90/0x2b0 [ 545.822843][ T31] schedule+0x164/0x2b0 [ 545.827161][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 545.868062][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 545.887646][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 545.897482][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 545.904962][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 545.915008][ T31] nbd_set_size+0x454/0x680 [ 545.920770][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 545.925968][ T31] ? nla_memcpy+0x5b/0xc0 [ 545.931534][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 545.937441][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 545.944237][ T31] ? rcu_is_watching+0x15/0xb0 [ 545.958171][ T31] ? trace_kmalloc+0x2a/0xf0 [ 545.968465][ T31] ? __kmalloc_noprof+0x396/0x720 [ 545.978079][ T31] ? __nla_parse+0x40/0x60 [ 545.983264][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 545.989937][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 545.996478][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 546.002693][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 546.009449][ T31] ? __lock_acquire+0x683/0x2cf0 [ 546.014602][ T31] genl_rcv_msg+0x614/0x7a0 [ 546.029366][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.044039][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 546.051915][ T31] netlink_rcv_skb+0x226/0x4a0 [ 546.057588][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.064705][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.072583][ T31] ? down_read+0x2be/0x330 [ 546.078141][ T31] genl_rcv+0x28/0x40 [ 546.082381][ T31] netlink_unicast+0x7bb/0x940 [ 546.087260][ T31] netlink_sendmsg+0x813/0xb40 [ 546.093009][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.098740][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.103872][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.109764][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 546.115096][ T31] ____sys_sendmsg+0x54e/0x850 [ 546.120819][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.126187][ T31] ? import_iovec+0x73/0xa0 [ 546.131483][ T31] ___sys_sendmsg+0x2a5/0x360 [ 546.136233][ T31] ? __lock_acquire+0x683/0x2cf0 [ 546.141921][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.147270][ T31] ? futex_wait+0x2a2/0x390 [ 546.156156][ T31] ? __fget_files+0x2a/0x420 [ 546.161009][ T31] ? __fget_files+0x3a2/0x420 [ 546.165891][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 546.190870][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.196625][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.203128][ T31] do_syscall_64+0x174/0x580 [ 546.208392][ T31] ? trace_irq_disable+0x3b/0x140 [ 546.213629][ T31] ? clear_bhb_loop+0x40/0x90 [ 546.219478][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.225456][ T31] RIP: 0033:0x7f29d559e0d9 [ 546.230776][ T31] RSP: 002b:00007f29d64b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.240154][ T31] RAX: ffffffffffffffda RBX: 00007f29d5825fa0 RCX: 00007f29d559e0d9 [ 546.259575][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 546.275771][ T31] RBP: 00007f29d5635024 R08: 0000000000000000 R09: 0000000000000000 [ 546.285399][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.295454][ T31] R13: 00007f29d5826038 R14: 00007f29d5825fa0 R15: 00007fff64a95058 [ 546.304898][ T31] [ 546.343623][ T31] INFO: task syz.2.2458:14902 blocked for more than 145 seconds. [ 546.370460][ T31] Not tainted syzkaller #0 [ 546.375562][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.384701][ T31] task:syz.2.2458 state:D stack:25808 pid:14902 tgid:14900 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 546.401452][ T31] Call Trace: [ 546.405066][ T31] [ 546.408401][ T31] __schedule+0x17d9/0x56c0 [ 546.413166][ T31] ? __lock_acquire+0x683/0x2cf0 [ 546.419036][ T31] ? __lock_acquire+0x683/0x2cf0 [ 546.424056][ T31] ? __pfx___schedule+0x10/0x10 [ 546.429125][ T31] ? schedule+0x90/0x2b0 [ 546.433660][ T31] schedule+0x164/0x2b0 [ 546.438201][ T31] schedule_preempt_disabled+0x13/0x30 [ 546.443885][ T31] __mutex_lock+0x7bf/0x1550 [ 546.449231][ T31] ? __mutex_lock+0x5d4/0x1550 [ 546.454108][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 546.459436][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 546.464667][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 546.472100][ T31] ? radix_tree_lookup+0x240/0x290 [ 546.477289][ T31] genl_rcv_msg+0x10b/0x7a0 [ 546.482552][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.487660][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 546.493827][ T31] netlink_rcv_skb+0x226/0x4a0 [ 546.518036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.524488][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.538362][ T31] ? down_read+0x2be/0x330 [ 546.548002][ T31] genl_rcv+0x28/0x40 [ 546.553465][ T31] netlink_unicast+0x7bb/0x940 [ 546.560558][ T31] netlink_sendmsg+0x813/0xb40 [ 546.565735][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.571664][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.576960][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.583185][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 546.589153][ T31] __sys_sendto+0x408/0x5a0 [ 546.594554][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 546.600347][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 546.606112][ T31] __x64_sys_sendto+0xde/0x100 [ 546.612372][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.619559][ T31] do_syscall_64+0x174/0x580 [ 546.624456][ T31] ? trace_irq_disable+0x3b/0x140 [ 546.630237][ T31] ? clear_bhb_loop+0x40/0x90 [ 546.635212][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.643835][ T31] RIP: 0033:0x7fd93255e90e [ 546.649136][ T31] RSP: 002b:00007fd9333c9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 546.658446][ T31] RAX: ffffffffffffffda RBX: 00007fd9333cb6c0 RCX: 00007fd93255e90e [ 546.667377][ T31] RDX: 000000000000001c RSI: 00007fd9333ca000 RDI: 0000000000000008 [ 546.676192][ T31] RBP: 0000000000000000 R08: 00007fd9333c9f04 R09: 000000000000000c [ 546.685721][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 546.694319][ T31] R13: 00007fd9333c9f58 R14: 00007fd9333ca000 R15: 0000000000000000 [ 546.703117][ T31] [ 546.707154][ T31] INFO: task syz.3.2469:14926 blocked for more than 145 seconds. [ 546.752225][ T31] Not tainted syzkaller #0 [ 546.781859][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.863216][ T31] task:syz.3.2469 state:D stack:28808 pid:14926 tgid:14925 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 546.918566][ T31] Call Trace: [ 546.921956][ T31] [ 546.925105][ T31] __schedule+0x17d9/0x56c0 [ 546.955214][ T31] ? __lock_acquire+0x683/0x2cf0 [ 546.980662][ T31] ? __lock_acquire+0x683/0x2cf0 [ 546.988551][ T31] ? unwind_next_frame+0x8f/0x2550 [ 547.000792][ T31] ? __pfx___schedule+0x10/0x10 [ 547.018582][ T31] ? schedule+0x90/0x2b0 [ 547.023142][ T31] schedule+0x164/0x2b0 [ 547.027454][ T31] schedule_preempt_disabled+0x13/0x30 [ 547.048273][ T31] __mutex_lock+0x7bf/0x1550 [ 547.054489][ T31] ? __mutex_lock+0x5d4/0x1550 [ 547.065763][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 547.079863][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 547.095554][ T31] ? stack_trace_save+0xa9/0x100 [ 547.101272][ T31] ? __lock_acquire+0x683/0x2cf0 [ 547.106405][ T31] ? radix_tree_lookup+0x240/0x290 [ 547.114728][ T31] genl_rcv_msg+0x10b/0x7a0 [ 547.119884][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.125037][ T31] ? __lock_acquire+0x683/0x2cf0 [ 547.130929][ T31] netlink_rcv_skb+0x226/0x4a0 [ 547.135780][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.166193][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.176102][ T31] ? down_read+0x2be/0x330 [ 547.192069][ T31] genl_rcv+0x28/0x40 [ 547.199170][ T31] netlink_unicast+0x7bb/0x940 [ 547.210087][ T31] netlink_sendmsg+0x813/0xb40 [ 547.220809][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.250133][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 547.262314][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.273271][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 547.299619][ T31] __sys_sendto+0x408/0x5a0 [ 547.304303][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 547.310483][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 547.316160][ T31] __x64_sys_sendto+0xde/0x100 [ 547.327951][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.346334][ T31] do_syscall_64+0x174/0x580 [ 547.357355][ T31] ? trace_irq_disable+0x3b/0x140 [ 547.370386][ T31] ? clear_bhb_loop+0x40/0x90 [ 547.385774][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.394101][ T31] RIP: 0033:0x7f3370d5e90e [ 547.398939][ T31] RSP: 002b:00007f3371d03e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 547.410018][ T31] RAX: ffffffffffffffda RBX: 00007f3371d056c0 RCX: 00007f3370d5e90e [ 547.419919][ T31] RDX: 0000000000000020 RSI: 00007f3371d04000 RDI: 0000000000000005 [ 547.452603][ T31] RBP: 0000000000000000 R08: 00007f3371d03f04 R09: 000000000000000c [ 547.461163][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 547.469858][ T31] R13: 00007f3371d03f58 R14: 00007f3371d04000 R15: 0000000000000000 [ 547.478601][ T31] [ 547.507205][ T31] INFO: task syz.3.2469:14928 blocked for more than 146 seconds. [ 547.556627][ T31] Not tainted syzkaller #0 [ 547.562452][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.597955][ T31] task:syz.3.2469 state:D stack:28752 pid:14928 tgid:14925 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 547.630622][ T31] Call Trace: [ 547.638210][ T31] [ 547.641446][ T31] __schedule+0x17d9/0x56c0 [ 547.658115][ T31] ? __lock_acquire+0x683/0x2cf0 [ 547.663162][ T31] ? __lock_acquire+0x683/0x2cf0 [ 547.678334][ T31] ? unwind_next_frame+0x8f/0x2550 [ 547.699532][ T31] ? __pfx___schedule+0x10/0x10 [ 547.724782][ T31] ? schedule+0x90/0x2b0 [ 547.729732][ T31] schedule+0x164/0x2b0 [ 547.740160][ T31] schedule_preempt_disabled+0x13/0x30 [ 547.807984][ T31] __mutex_lock+0x7bf/0x1550 [ 547.825951][ T31] ? __mutex_lock+0x5d4/0x1550 [ 547.865712][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 547.882959][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 547.898184][ T31] ? stack_trace_save+0xa9/0x100 [ 547.911250][ T31] ? __lock_acquire+0x683/0x2cf0 [ 547.927954][ T31] ? radix_tree_lookup+0x240/0x290 [ 547.949920][ T31] genl_rcv_msg+0x10b/0x7a0 [ 547.959406][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.973580][ T31] ? __lock_acquire+0x683/0x2cf0 [ 548.027942][ T31] netlink_rcv_skb+0x226/0x4a0 [ 548.049601][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.082648][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.138273][ T31] ? down_read+0x2be/0x330 [ 548.157260][ T31] genl_rcv+0x28/0x40 [ 548.171285][ T31] netlink_unicast+0x7bb/0x940 [ 548.196092][ T31] netlink_sendmsg+0x813/0xb40 [ 548.228405][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.253685][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 548.296854][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.337123][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 548.362997][ T31] __sys_sendto+0x408/0x5a0 [ 548.399586][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 548.420437][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 548.442735][ T31] __x64_sys_sendto+0xde/0x100 [ 548.464323][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.477959][ T31] do_syscall_64+0x174/0x580 [ 548.488527][ T31] ? trace_irq_disable+0x3b/0x140 [ 548.499730][ T31] ? clear_bhb_loop+0x40/0x90 [ 548.527969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.534153][ T31] RIP: 0033:0x7f3370d5e90e [ 548.543541][ T31] RSP: 002b:00007f3371ce2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 548.561896][ T31] RAX: ffffffffffffffda RBX: 00007f3371ce46c0 RCX: 00007f3370d5e90e [ 548.583737][ T31] RDX: 0000000000000020 RSI: 00007f3371ce3000 RDI: 0000000000000004 [ 548.592351][ T31] RBP: 0000000000000000 R08: 00007f3371ce2f04 R09: 000000000000000c [ 548.601560][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 548.610682][ T31] R13: 00007f3371ce2f58 R14: 00007f3371ce3000 R15: 0000000000000000 [ 548.619327][ T31] [ 548.622516][ T31] INFO: task syz.3.2469:14930 blocked for more than 147 seconds. [ 548.640053][ T31] Not tainted syzkaller #0 [ 548.657108][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.667279][ T31] task:syz.3.2469 state:D stack:28752 pid:14930 tgid:14925 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 548.682986][ T31] Call Trace: [ 548.686474][ T31] [ 548.691050][ T31] __schedule+0x17d9/0x56c0 [ 548.696422][ T31] ? __lock_acquire+0x683/0x2cf0 [ 548.702499][ T31] ? __lock_acquire+0x683/0x2cf0 [ 548.709797][ T31] ? unwind_next_frame+0x8f/0x2550 [ 548.716247][ T31] ? __pfx___schedule+0x10/0x10 [ 548.723527][ T31] ? schedule+0x90/0x2b0 [ 548.728556][ T31] schedule+0x164/0x2b0 [ 548.732915][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.739596][ T31] __mutex_lock+0x7bf/0x1550 [ 548.744619][ T31] ? __mutex_lock+0x5d4/0x1550 [ 548.749951][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 548.754701][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.763014][ T31] ? stack_trace_save+0xa9/0x100 [ 548.778362][ T31] ? __lock_acquire+0x683/0x2cf0 [ 548.793049][ T31] ? radix_tree_lookup+0x240/0x290 [ 548.818316][ T31] genl_rcv_msg+0x10b/0x7a0 [ 548.823047][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.831820][ T31] ? __lock_acquire+0x683/0x2cf0 [ 548.836869][ T31] netlink_rcv_skb+0x226/0x4a0 [ 548.842324][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.847417][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.853335][ T31] ? down_read+0x2be/0x330 [ 548.858578][ T31] genl_rcv+0x28/0x40 [ 548.862665][ T31] netlink_unicast+0x7bb/0x940 [ 548.867499][ T31] netlink_sendmsg+0x813/0xb40 [ 548.904136][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.934939][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 548.963545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.974966][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 548.980809][ T31] __sys_sendto+0x408/0x5a0 [ 548.985401][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 548.996116][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 549.019788][ T31] __x64_sys_sendto+0xde/0x100 [ 549.033958][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.059130][ T31] do_syscall_64+0x174/0x580 [ 549.068768][ T31] ? trace_irq_disable+0x3b/0x140 [ 549.079614][ T31] ? clear_bhb_loop+0x40/0x90 [ 549.086739][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.093742][ T31] RIP: 0033:0x7f3370d5e90e [ 549.101249][ T31] RSP: 002b:00007f3371cc1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 549.111621][ T31] RAX: ffffffffffffffda RBX: 00007f3371cc36c0 RCX: 00007f3370d5e90e [ 549.122615][ T31] RDX: 0000000000000020 RSI: 00007f3371cc2000 RDI: 0000000000000004 [ 549.131800][ T31] RBP: 0000000000000000 R08: 00007f3371cc1f04 R09: 000000000000000c [ 549.141205][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 549.150079][ T31] R13: 00007f3371cc1f58 R14: 00007f3371cc2000 R15: 0000000000000000 [ 549.159158][ T31] [ 549.170415][ T31] INFO: task syz.3.2469:14932 blocked for more than 148 seconds. [ 549.178562][ T31] Not tainted syzkaller #0 [ 549.183740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.218728][ T31] task:syz.3.2469 state:D stack:28208 pid:14932 tgid:14925 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 549.254272][ T31] Call Trace: [ 549.257688][ T31] [ 549.261578][ T31] __schedule+0x17d9/0x56c0 [ 549.266229][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.275311][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.288196][ T31] ? unwind_next_frame+0x8f/0x2550 [ 549.299612][ T31] ? __pfx___schedule+0x10/0x10 [ 549.310484][ T31] ? schedule+0x90/0x2b0 [ 549.315397][ T31] schedule+0x164/0x2b0 [ 549.322797][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.329714][ T31] __mutex_lock+0x7bf/0x1550 [ 549.334842][ T31] ? __mutex_lock+0x5d4/0x1550 [ 549.341653][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 549.347666][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.373785][ T31] ? stack_trace_save+0xa9/0x100 [ 549.381674][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.387009][ T31] ? radix_tree_lookup+0x240/0x290 [ 549.393402][ T31] genl_rcv_msg+0x10b/0x7a0 [ 549.398660][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.403765][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.409722][ T31] netlink_rcv_skb+0x226/0x4a0 [ 549.414645][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.444674][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.459212][ T31] ? down_read+0x2be/0x330 [ 549.468081][ T31] genl_rcv+0x28/0x40 [ 549.478141][ T31] netlink_unicast+0x7bb/0x940 [ 549.484458][ T31] netlink_sendmsg+0x813/0xb40 [ 549.490374][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.495767][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 549.501116][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.507317][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 549.515475][ T31] __sys_sendto+0x408/0x5a0 [ 549.520731][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 549.525793][ T31] ? errseq_sample+0x40/0x70 [ 549.539176][ T31] ? fd_install+0x94/0x3d0 [ 549.548251][ T31] ? fd_install+0x306/0x3d0 [ 549.558214][ T31] __x64_sys_sendto+0xde/0x100 [ 549.565211][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.572594][ T31] do_syscall_64+0x174/0x580 [ 549.577397][ T31] ? trace_irq_disable+0x3b/0x140 [ 549.584364][ T31] ? clear_bhb_loop+0x40/0x90 [ 549.592657][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.599885][ T31] RIP: 0033:0x7f3370d5e90e [ 549.605134][ T31] RSP: 002b:00007f3371ca0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 549.614141][ T31] RAX: ffffffffffffffda RBX: 00007f3371ca26c0 RCX: 00007f3370d5e90e [ 549.623020][ T31] RDX: 0000000000000024 RSI: 00007f3371ca1000 RDI: 0000000000000007 [ 549.631257][ T31] RBP: 0000000000000000 R08: 00007f3371ca0f04 R09: 000000000000000c [ 549.639972][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 549.649206][ T31] R13: 00007f3371ca0f58 R14: 00007f3371ca1000 R15: 0000000000000000 [ 549.657367][ T31] [ 549.674210][ T31] INFO: task syz.3.2469:14937 blocked for more than 148 seconds. [ 549.699107][ T31] Not tainted syzkaller #0 [ 549.704152][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.714485][ T31] task:syz.3.2469 state:D stack:28752 pid:14937 tgid:14925 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 549.727138][ T31] Call Trace: [ 549.731139][ T31] [ 549.734127][ T31] __schedule+0x17d9/0x56c0 [ 549.739272][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.744276][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.758464][ T31] ? unwind_next_frame+0x8f/0x2550 [ 549.769497][ T31] ? __pfx___schedule+0x10/0x10 [ 549.779560][ T31] ? schedule+0x90/0x2b0 [ 549.789553][ T31] schedule+0x164/0x2b0 [ 549.800914][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.814967][ T31] __mutex_lock+0x7bf/0x1550 [ 549.821486][ T31] ? __mutex_lock+0x5d4/0x1550 [ 549.826566][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 549.872328][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.902807][ T31] ? stack_trace_save+0xa9/0x100 [ 549.928090][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.942937][ T31] ? radix_tree_lookup+0x240/0x290 [ 549.956172][ T31] genl_rcv_msg+0x10b/0x7a0 [ 549.961136][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.966375][ T31] ? __lock_acquire+0x683/0x2cf0 [ 549.972030][ T31] netlink_rcv_skb+0x226/0x4a0 [ 549.976899][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.985570][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.006318][ T31] ? down_read+0x2be/0x330 [ 550.019579][ T31] genl_rcv+0x28/0x40 [ 550.028441][ T31] netlink_unicast+0x7bb/0x940 [ 550.035180][ T31] netlink_sendmsg+0x813/0xb40 [ 550.040604][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.046214][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 550.051866][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.057474][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 550.063901][ T31] __sys_sendto+0x408/0x5a0 [ 550.071237][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 550.076365][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 550.082142][ T31] __x64_sys_sendto+0xde/0x100 [ 550.087069][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.094207][ T31] do_syscall_64+0x174/0x580 [ 550.099344][ T31] ? trace_irq_disable+0x3b/0x140 [ 550.104520][ T31] ? clear_bhb_loop+0x40/0x90 [ 550.111390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.117567][ T31] RIP: 0033:0x7f3370d5e90e [ 550.122739][ T31] RSP: 002b:00007f3371c7fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 550.133459][ T31] RAX: ffffffffffffffda RBX: 00007f3371c816c0 RCX: 00007f3370d5e90e [ 550.141897][ T31] RDX: 0000000000000020 RSI: 00007f3371c80000 RDI: 0000000000000004 [ 550.154413][ T31] RBP: 0000000000000000 R08: 00007f3371c7ff04 R09: 000000000000000c [ 550.162751][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 550.171441][ T31] R13: 00007f3371c7ff58 R14: 00007f3371c80000 R15: 0000000000000000 [ 550.180237][ T31] [ 550.192873][ T31] INFO: task syz.0.2475:14945 blocked for more than 149 seconds. [ 550.235671][ T31] Not tainted syzkaller #0 [ 550.277211][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.299014][ T31] task:syz.0.2475 state:D stack:27256 pid:14945 tgid:14943 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 550.358194][ T31] Call Trace: [ 550.361557][ T31] [ 550.364561][ T31] __schedule+0x17d9/0x56c0 [ 550.371677][ T31] ? __lock_acquire+0x683/0x2cf0 [ 550.376796][ T31] ? __lock_acquire+0x683/0x2cf0 [ 550.382682][ T31] ? __pfx___schedule+0x10/0x10 [ 550.397991][ T31] ? schedule+0x90/0x2b0 [ 550.411121][ T31] schedule+0x164/0x2b0 [ 550.428197][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.440017][ T31] __mutex_lock+0x7bf/0x1550 [ 550.446762][ T31] ? __mutex_lock+0x5d4/0x1550 [ 550.473743][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 550.486179][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.504878][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 550.514175][ T31] ? radix_tree_lookup+0x240/0x290 [ 550.520166][ T31] genl_rcv_msg+0x10b/0x7a0 [ 550.524756][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.530575][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 550.536324][ T31] netlink_rcv_skb+0x226/0x4a0 [ 550.542197][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.547299][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.556860][ T31] ? down_read+0x2be/0x330 [ 550.561863][ T31] genl_rcv+0x28/0x40 [ 550.565940][ T31] netlink_unicast+0x7bb/0x940 [ 550.571718][ T31] netlink_sendmsg+0x813/0xb40 [ 550.576709][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.598659][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 550.603889][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.614493][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 550.620180][ T31] __sys_sendto+0x408/0x5a0 [ 550.624792][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 550.634320][ T31] ? rcu_is_watching+0x15/0xb0 [ 550.648238][ T31] __x64_sys_sendto+0xde/0x100 [ 550.654558][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.672054][ T31] do_syscall_64+0x174/0x580 [ 550.685721][ T31] ? trace_irq_disable+0x3b/0x140 [ 550.691555][ T31] ? clear_bhb_loop+0x40/0x90 [ 550.696315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.704249][ T31] RIP: 0033:0x7fb79ed5e90e [ 550.718603][ T31] RSP: 002b:00007fb79fcb1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 550.737540][ T31] RAX: ffffffffffffffda RBX: 00007fb79fcb36c0 RCX: 00007fb79ed5e90e [ 550.757849][ T31] RDX: 0000000000000020 RSI: 00007fb79fcb2000 RDI: 0000000000000007 [ 550.767421][ T31] RBP: 0000000000000000 R08: 00007fb79fcb1f04 R09: 000000000000000c [ 550.782245][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 550.791070][ T31] R13: 00007fb79fcb1f58 R14: 00007fb79fcb2000 R15: 0000000000000000 [ 550.799924][ T31] [ 550.803016][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 550.863051][ T31] INFO: task syz.4.2480:14959 blocked for more than 149 seconds. [ 550.904218][ T31] Not tainted syzkaller #0 [ 550.919665][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.936797][ T31] task:syz.4.2480 state:D stack:28568 pid:14959 tgid:14958 ppid:5626 task_flags:0x400040 flags:0x00080002 [ 550.953258][ T31] Call Trace: [ 550.956838][ T31] [ 550.961536][ T31] __schedule+0x17d9/0x56c0 [ 550.966125][ T31] ? __lock_acquire+0x683/0x2cf0 [ 550.972013][ T31] ? __lock_acquire+0x683/0x2cf0 [ 550.977152][ T31] ? unwind_next_frame+0x8f/0x2550 [ 550.983345][ T31] ? __pfx___schedule+0x10/0x10 [ 550.989271][ T31] ? schedule+0x90/0x2b0 [ 550.994317][ T31] schedule+0x164/0x2b0 [ 551.000720][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.006287][ T31] __mutex_lock+0x7bf/0x1550 [ 551.031809][ T31] ? __mutex_lock+0x5d4/0x1550 [ 551.040903][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 551.045888][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.051702][ T31] ? stack_trace_save+0xa9/0x100 [ 551.056990][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.065311][ T31] ? radix_tree_lookup+0x240/0x290 [ 551.071827][ T31] genl_rcv_msg+0x10b/0x7a0 [ 551.076534][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.082487][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.087515][ T31] netlink_rcv_skb+0x226/0x4a0 [ 551.093114][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.098922][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.104291][ T31] ? down_read+0x2be/0x330 [ 551.111083][ T31] genl_rcv+0x28/0x40 [ 551.115377][ T31] netlink_unicast+0x7bb/0x940 [ 551.121887][ T31] netlink_sendmsg+0x813/0xb40 [ 551.126846][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.134072][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.139748][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.145102][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 551.150842][ T31] __sys_sendto+0x408/0x5a0 [ 551.155409][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 551.161313][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 551.166752][ T31] __x64_sys_sendto+0xde/0x100 [ 551.173315][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.180393][ T31] do_syscall_64+0x174/0x580 [ 551.185181][ T31] ? trace_irq_disable+0x3b/0x140 [ 551.198422][ T31] ? clear_bhb_loop+0x40/0x90 [ 551.208064][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.220642][ T31] RIP: 0033:0x7f2ade15e90e [ 551.225115][ T31] RSP: 002b:00007f2adf10be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 551.234880][ T31] RAX: ffffffffffffffda RBX: 00007f2adf10d6c0 RCX: 00007f2ade15e90e [ 551.271042][ T31] RDX: 0000000000000020 RSI: 00007f2adf10c000 RDI: 0000000000000004 [ 551.292130][ T31] RBP: 0000000000000000 R08: 00007f2adf10bf04 R09: 000000000000000c [ 551.300971][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 551.309995][ T31] R13: 00007f2adf10bf58 R14: 00007f2adf10c000 R15: 0000000000000000 [ 551.318740][ T31] [ 551.321858][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 551.376820][ T31] INFO: task syz.4.2480:14962 blocked for more than 150 seconds. [ 551.399697][ T31] Not tainted syzkaller #0 [ 551.410187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.419283][ T31] task:syz.4.2480 state:D stack:28424 pid:14962 tgid:14958 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 551.449396][ T31] Call Trace: [ 551.453037][ T31] [ 551.456031][ T31] __schedule+0x17d9/0x56c0 [ 551.461078][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.466239][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.472312][ T31] ? unwind_next_frame+0x8f/0x2550 [ 551.477605][ T31] ? __pfx___schedule+0x10/0x10 [ 551.483290][ T31] ? schedule+0x90/0x2b0 [ 551.487593][ T31] schedule+0x164/0x2b0 [ 551.492291][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.499995][ T31] __mutex_lock+0x7bf/0x1550 [ 551.504772][ T31] ? __mutex_lock+0x5d4/0x1550 [ 551.534071][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 551.539064][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.544496][ T31] ? stack_trace_save+0xa9/0x100 [ 551.550243][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.555466][ T31] ? radix_tree_lookup+0x240/0x290 [ 551.560860][ T31] genl_rcv_msg+0x10b/0x7a0 [ 551.565413][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.570881][ T31] ? __lock_acquire+0x683/0x2cf0 [ 551.576104][ T31] netlink_rcv_skb+0x226/0x4a0 [ 551.582269][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.587579][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.594239][ T31] ? down_read+0x2be/0x330 [ 551.600445][ T31] genl_rcv+0x28/0x40 [ 551.605275][ T31] netlink_unicast+0x7bb/0x940 [ 551.619647][ T31] netlink_sendmsg+0x813/0xb40 [ 551.624807][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.630431][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.635529][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.641499][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 551.647229][ T31] __sys_sendto+0x408/0x5a0 [ 551.652371][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 551.657482][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 551.663420][ T31] __x64_sys_sendto+0xde/0x100 [ 551.669577][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.675900][ T31] do_syscall_64+0x174/0x580 [ 551.680626][ T31] ? trace_irq_disable+0x3b/0x140 [ 551.685690][ T31] ? clear_bhb_loop+0x40/0x90 [ 551.691447][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.702626][ T31] RIP: 0033:0x7f2ade15e90e [ 551.707625][ T31] RSP: 002b:00007f2adf0c9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 551.719004][ T31] RAX: ffffffffffffffda RBX: 00007f2adf0cb6c0 RCX: 00007f2ade15e90e [ 551.727074][ T31] RDX: 0000000000000024 RSI: 00007f2adf0ca000 RDI: 0000000000000008 [ 551.737006][ T31] RBP: 0000000000000000 R08: 00007f2adf0c9f04 R09: 000000000000000c [ 551.745813][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 551.754819][ T31] R13: 00007f2adf0c9f58 R14: 00007f2adf0ca000 R15: 0000000000000000 [ 551.763500][ T31] [ 551.766571][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 551.801103][ T31] [ 551.801103][ T31] Showing all locks held in the system: [ 551.823753][ T31] 1 lock held by khungtaskd/31: [ 551.840873][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 551.851906][ T31] 5 locks held by kworker/u8:3/47: [ 551.857206][ T31] 2 locks held by kworker/1:1H/1690: [ 551.863600][ T31] #0: ffff88801e6fc540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 551.875477][ T31] #1: ffffc9000670fc40 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 551.888766][ T31] 2 locks held by dhcpcd/5284: [ 551.893617][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 551.902585][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 551.928025][ T31] 2 locks held by getty/5380: [ 551.938935][ T31] #0: ffff88803346a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 551.951640][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 551.962841][ T31] 1 lock held by udevd/8931: [ 551.967479][ T31] #0: ffff888026b43350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 551.977555][ T31] 6 locks held by kworker/u8:10/9002: [ 551.983812][ T31] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 552.032434][ T31] #1: ffffc9000324fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 552.050206][ T31] #2: ffffffff9001ef08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 552.061705][ T31] #3: ffff888050b45128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 552.089458][ T31] #4: ffff888050919258 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 552.101642][ T31] #5: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 552.111829][ T31] 6 locks held by syz.1.2459/14898: [ 552.117103][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.127111][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.137170][ T31] #2: ffff888026b30260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 552.163015][ T31] #3: ffff888026b23e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 552.183535][ T31] #4: ffff888026b23840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 552.197573][ T31] #5: ffff888026b23878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 552.211048][ T31] 2 locks held by syz.2.2458/14902: [ 552.216470][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.225682][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.248334][ T1690] block nbd1: Possible stuck request ffff888027090000: control (read@0,1024B). Runtime 360 seconds [ 552.259843][ T1690] block nbd1: Possible stuck request ffff8880270901c0: control (read@1024,1024B). Runtime 360 seconds [ 552.271259][ T1690] block nbd1: Possible stuck request ffff888027090380: control (read@2048,1024B). Runtime 360 seconds [ 552.283222][ T1690] block nbd1: Possible stuck request ffff888027090540: control (read@3072,1024B). Runtime 360 seconds [ 552.294710][ T31] 2 locks held by syz.3.2469/14926: [ 552.300331][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.315573][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.324846][ T31] 2 locks held by syz.3.2469/14928: [ 552.330436][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.339300][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.348772][ T31] 2 locks held by syz.3.2469/14930: [ 552.354551][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.363069][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.372975][ T31] 2 locks held by syz.3.2469/14932: [ 552.378397][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.386683][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.396455][ T31] 2 locks held by syz.3.2469/14937: [ 552.402112][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.417914][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.427033][ T31] 2 locks held by syz.0.2475/14945: [ 552.445234][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.456686][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.473351][ T31] 2 locks held by syz.4.2480/14959: [ 552.479299][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.488158][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.519119][ T31] 2 locks held by syz.4.2480/14962: [ 552.525651][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.535229][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.545133][ T31] 2 locks held by syz-executor/14966: [ 552.557615][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.566674][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.576512][ T31] 2 locks held by syz-executor/14969: [ 552.585283][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.595836][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.606504][ T31] 2 locks held by syz-executor/14991: [ 552.612835][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.639534][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.653424][ T31] 2 locks held by syz-executor/15003: [ 552.659303][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.668590][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.677664][ T31] 2 locks held by syz-executor/15026: [ 552.683939][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.694744][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.704397][ T31] 2 locks held by syz-executor/15059: [ 552.720097][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.739785][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.749994][ T31] 2 locks held by syz-executor/15062: [ 552.755452][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.765845][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.791042][ T31] 2 locks held by syz-executor/15082: [ 552.796786][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.818113][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.836132][ T31] 2 locks held by syz-executor/15100: [ 552.842426][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.852447][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.862797][ T31] 2 locks held by syz-executor/15112: [ 552.878730][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.895937][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.907951][ T31] 2 locks held by syz-executor/15149: [ 552.914282][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.926914][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 552.977296][ T31] 2 locks held by syz-executor/15153: [ 552.989497][ T31] #0: ffffffff9009e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.000757][ T31] #1: ffffffff9009e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 553.012426][ T31] 1 lock held by syz-executor/15185: [ 553.019304][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 553.044322][ T31] 2 locks held by syz-executor/15200: [ 553.058500][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 553.072719][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 553.104703][ T31] [ 553.116641][ T31] ============================================= [ 553.116641][ T31] [ 553.164747][ T31] NMI backtrace for cpu 1 [ 553.164772][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.164794][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.164805][ T31] Call Trace: [ 553.164813][ T31] [ 553.164823][ T31] dump_stack_lvl+0xe8/0x150 [ 553.164885][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 553.164910][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 553.164951][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 553.164977][ T31] sys_info+0x135/0x170 [ 553.165005][ T31] watchdog+0xfd7/0x1030 [ 553.165038][ T31] ? watchdog+0x1c7/0x1030 [ 553.165070][ T31] kthread+0x388/0x470 [ 553.165099][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.165120][ T31] ? __pfx_kthread+0x10/0x10 [ 553.165150][ T31] ret_from_fork+0x514/0xb70 [ 553.165194][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 553.165223][ T31] ? __switch_to+0xc89/0x1420 [ 553.165250][ T31] ? __pfx_kthread+0x10/0x10 [ 553.165280][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.165315][ T31] [ 553.165323][ T31] Sending NMI from CPU 1 to CPUs 0: [ 553.286057][ C0] NMI backtrace for cpu 0 [ 553.286078][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 553.286097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.286107][ C0] Workqueue: krds_cp_wq#6/3 rds_connect_worker [ 553.286235][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x82/0x90 [ 553.286260][ C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 d9 8e 0e 0a cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 553.286274][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00000006 [ 553.286288][ C0] RAX: ffffffff81b3a7af RBX: ffff8880b86281c0 RCX: 0000000000010100 [ 553.286300][ C0] RDX: ffff88801dec0000 RSI: 0000000000000001 RDI: 0000000000000000 [ 553.286311][ C0] RBP: dffffc0000000000 R08: 1ffff110170c5047 R09: 1ffff110170c5045 [ 553.286323][ C0] R10: 0000000000000000 R11: ffffffff9a7d2748 R12: 00000080d02be4ee [ 553.286333][ C0] R13: 0000000000000002 R14: ffff8880b86283e8 R15: 0000000000000001 [ 553.286344][ C0] FS: 0000000000000000(0000) GS:ffff888124f47000(0000) knlGS:0000000000000000 [ 553.286357][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.286369][ C0] CR2: 000056038345aee8 CR3: 000000007f5ea000 CR4: 00000000003526f0 [ 553.286385][ C0] Call Trace: [ 553.286394][ C0] [ 553.286400][ C0] hrtimer_interrupt+0x3cf/0x910 [ 553.286457][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 553.286483][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 553.286505][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.286522][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 553.286542][ C0] Code: f7 e8 1d 0b ce f5 f7 c3 00 02 00 00 74 05 e8 90 ef f9 f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 24 21 bf f5 65 8b 05 1d 31 98 07 85 c0 74 18 5b 41 5e e9 81 48 [ 553.286554][ C0] RSP: 0018:ffffc90000007f40 EFLAGS: 00000206 [ 553.286567][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000102 [ 553.286577][ C0] RDX: 0000000000000002 RSI: ffffffff8e22efdb RDI: 0000000000000001 [ 553.286587][ C0] RBP: ffffffff8e80a100 R08: ffffffff9057a237 R09: 1ffffffff20af446 [ 553.286598][ C0] R10: dffffc0000000000 R11: fffffbfff20af447 R12: 0000000000000009 [ 553.286609][ C0] R13: 0000000000000008 R14: ffff8880b86281c0 R15: ffff88807e932740 [ 553.286629][ C0] handle_softirqs+0x225/0x840 [ 553.286658][ C0] ? do_softirq+0x76/0xd0 [ 553.286677][ C0] ? __inet6_bind+0x386/0xf30 [ 553.286749][ C0] do_softirq+0x76/0xd0 [ 553.286766][ C0] [ 553.286771][ C0] [ 553.286777][ C0] __local_bh_enable_ip+0xf8/0x130 [ 553.286796][ C0] __inet6_bind+0x386/0xf30 [ 553.286821][ C0] kernel_bind+0x13e/0x1c0 [ 553.286844][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 553.286869][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 553.286907][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 553.286929][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 553.286945][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 553.286966][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 553.286986][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 553.287007][ C0] rds_connect_worker+0x1d8/0x290 [ 553.287028][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 553.287046][ C0] process_scheduled_works+0xa8e/0x14e0 [ 553.287077][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.287097][ C0] ? assign_work+0x3cf/0x5d0 [ 553.287117][ C0] worker_thread+0xa47/0xfb0 [ 553.287148][ C0] kthread+0x388/0x470 [ 553.287170][ C0] ? __pfx_worker_thread+0x10/0x10 [ 553.287187][ C0] ? __pfx_kthread+0x10/0x10 [ 553.287209][ C0] ret_from_fork+0x514/0xb70 [ 553.287233][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 553.287255][ C0] ? __switch_to+0xc89/0x1420 [ 553.287276][ C0] ? __pfx_kthread+0x10/0x10 [ 553.287297][ C0] ret_from_fork_asm+0x1a/0x30 [ 553.287321][ C0] [ 553.797830][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 553.804759][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.813971][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.824387][ T31] Call Trace: [ 553.827775][ T31] [ 553.830723][ T31] vpanic+0x56c/0xa60 [ 553.834736][ T31] ? __pfx___schedule+0x10/0x10 [ 553.839618][ T31] ? __pfx_vpanic+0x10/0x10 [ 553.844183][ T31] panic+0xc5/0xd0 [ 553.848068][ T31] ? __pfx_panic+0x10/0x10 [ 553.852632][ T31] ? preempt_schedule_common+0x82/0xd0 [ 553.858238][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 553.863650][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 553.869830][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 553.876114][ T31] watchdog+0x1030/0x1030 [ 553.880537][ T31] ? watchdog+0x1c7/0x1030 [ 553.885048][ T31] kthread+0x388/0x470 [ 553.889527][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.894281][ T31] ? __pfx_kthread+0x10/0x10 [ 553.898939][ T31] ret_from_fork+0x514/0xb70 [ 553.903736][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 553.908880][ T31] ? __switch_to+0xc89/0x1420 [ 553.913592][ T31] ? __pfx_kthread+0x10/0x10 [ 553.918408][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.923403][ T31] [ 553.926818][ T31] Kernel Offset: disabled [ 553.931148][ T31] Rebooting in 86400 seconds..