last executing test programs: 2.606023437s ago: executing program 3 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x20, 0x1, 0x0, 0x4}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.516361009s ago: executing program 3 (id=2822): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xd, 0x4) (async, rerun: 32) r1 = socket(0x200000100000011, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) accept4$inet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80800) connect$can_bcm(r5, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000740)={0x5, 0x244, 0x300, {0x0, 0x2710}, {r6, r7/1000+10000}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="0201140088dc19000e000002ad000114000000840600ac141420e0010001808a8972bd0b72e410820c520f0688097dea4c3511f6567f7219891727af628d6d00621adfe968fad5d78d003c981e9878a79858ce656361d7bf8cdace98667294195b5063"], 0xdd12}], 0x1}, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', r8, 0x20, 0x10, 0xa291, 0x3b, {{0x19, 0x4, 0x1, 0x8, 0x64, 0x64, 0x0, 0x7, 0x4, 0x0, @remote, @empty, {[@end, @cipso={0x86, 0x4f, 0x0, [{0x1, 0xf, "02717c5585a13a64a1b0cf5577"}, {0x0, 0x12, "bdc77049869c9414e5c03c95477feb62"}, {0x7, 0x3, "a7"}, {0x0, 0x6, "dfedb222"}, {0x7, 0x4, "2cef"}, {0x2, 0x12, "2e56c07a9a0c571f75ebfb8cd27e8e68"}, {0x5, 0x3, "19"}, {0x1, 0x6, "8a97f03f"}]}]}}}}}) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001640)=""/4122, 0x101a}], 0x1) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r11, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x44840) 2.153704969s ago: executing program 3 (id=2830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000002f00020000002400028014000180080001000000000008000200ac1414010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800400010000000000240001"], 0x80}}, 0x0) 1.993361443s ago: executing program 2 (id=2831): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00060005000000000000000c0002000000000000000000040007800c00080000000c0000000000080001"], 0x90}}, 0x0) 1.909991994s ago: executing program 4 (id=2832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00060000000000000000000c0002000000000000000000040007800c000800000000000000000a080001"], 0x90}}, 0x0) 1.908625941s ago: executing program 1 (id=2833): syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560208005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000090ff0000000001"], 0xfdef) 1.900756129s ago: executing program 3 (id=2834): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) socket(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x84) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x700000000000000, 0x4}, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0xa03, 0x0, 0x8001}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) recvmmsg(r0, &(0x7f0000002580), 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) 1.742049433s ago: executing program 2 (id=2835): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x38) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket(0x11, 0x800000003, 0x0) (async) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x101}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xbc}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x101}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xbc}}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.641842632s ago: executing program 4 (id=2836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x840000000002, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) clock_gettime(0x8, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000110008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\x00 \x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES64=r2], 0x90}}, 0x0) 1.478088151s ago: executing program 1 (id=2837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000030801020000000000000000000000001400048008000340000000ec07000540000000000500030084"], 0x30}}, 0x0) 1.447348866s ago: executing program 2 (id=2838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x3e8}, 0x6e) 1.261743406s ago: executing program 2 (id=2839): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f00000007c0)=0x7, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x0, 0x0, 0x56}, 0x48) (async) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/27, 0x1b}}], 0x1, 0x0, 0x0) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62a0", @ANYRESDEC], 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001fc0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{}, 0x0, &(0x7f00000019c0)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1867000001000000185700000a000000cb65e5501f46d49c1b7b127e00"/44], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0x58, &(0x7f0000001b80)}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)="a0ec9117cfe49f05000000a6911d92109feb68d514638e8de555887ac5e5", &(0x7f0000000240), 0xc30, r2}, 0x38) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0), 0x4) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000012bf0000000000004409000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000141fc400b7030019e39e783800000000008500000083000000bf090000000000005509010000000000950000003d34dc0dc4b07306d2359ce51c7c9548aae84ae496b87987b808b82746c27ffcc178c804d96df18e04523187e250ade55359573c0f4cdbd133f1995b69280ceb849a4059b15d367df22dcd64c36550c8eab4e08d476aff012e6d42dcc863b04683e51d848a6a909103b64dd504ea02dc7ecc8fd8b32ff345be9c5b63e89c8211be178b2948c100725c72a7357fb04d5ee1c0d7aab55b9e59fad932688374b72f425a8186df1fb301af0703b4b8d556d630c5f128", @ANYRES32, @ANYBLOB="00000000002000208500000048000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x20, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x4da, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[r3, r5, 0xffffffffffffffff], &(0x7f0000000640)=[{0x5, 0x3, 0x10, 0x7}, {0x2, 0x5, 0xa}, {0x4, 0x3, 0x10, 0x2}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x30, r1, 0x8, &(0x7f0000001d80)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0xe, 0x401, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001e00)=[{0x3, 0x5, 0x7, 0x6}, {0x0, 0x2, 0x7, 0x9}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x7, 0x4, 0x0, 0xf1b, 0x14, 0xffffffffffffffff, 0x1ff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.227958525s ago: executing program 4 (id=2840): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000041000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000008080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.224203341s ago: executing program 1 (id=2841): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async, rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000020000008e000280053e0100000000003000"/37], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000500), &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8), 0x8) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r6 = socket(0x10, 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r3}, 0x8) connect$pppl2tp(r9, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e20, 0x9, @local, 0x8}}}, 0x32) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@getchain={0x74, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0x7}, {0x2, 0xfff2}, {0xa, 0xf}}, [{0x8, 0xb, 0xffffff80}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x440}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x400}, {0x2, 0xb, 0x64cb5e2c}, {0x8, 0xb, 0x10001}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bind$packet(r5, &(0x7f0000000400)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) (async) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r11) (async, rerun: 64) sendmsg$IPSET_CMD_PROTOCOL(r11, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="242f5aab41965fc036000000000000000700000305000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (rerun: 64) 1.11771929s ago: executing program 4 (id=2842): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pB \x00'}, 0x20) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000300)="609ef2bdcc75b90f32b498cb217bfbbf836da917f6f195d688ee43249b70e86f567077b2cae8db47f52ac88d6c4fb20cf4997b34a456d8913b127048570f99c5733c1cc52e60f72dcce4d35081437857e33f3f1da22894f6273c149cbd4f08447a4e2e4832d1d91e1a16940650a88f41a19893876d84ac90d7a9a5c80e1c98f82d71de6f4f9ed2214c8d5c66f5c0e9cfc5d972ce26ceaa8f20d1ff3bbac1c2cc4edd780f35b0d128dc1c0650c06d0ed2ed4a952ff089593b363c9a0ae19220bd7313a4321f98fd11014737e238f21e521e", 0xd1}, {&(0x7f0000000400)="0d4418f69b", 0x5}, {&(0x7f0000000440)="5fcd60a0a285f32e24b6c36034455730096e18ba3de25039e4fef5a159a818f24e16bdf2bb38a373f4adc1d48fe660dc3452bbf7d81b63361f66789fe0e7fc68d715be98b60db09c5ba1cf236f7251d1f036cb4483a78b0bd17e66971d534768d90a7b7d44043b2dee5b77869b64ca8dddec97c7df61e9c443fa363e812bca22934b84b709ffa8ff9ac1c1693915e5b0fb396675b771e2a4cb02e09237b19b51745f8a43847379f65533b0de5cf7299c6bda58cc5ce5ccca10792fa28725263b4672228579388fed07e27672db775fa06912349666bf3097730899140acfae708842db87aaea4e281bcdc3fc9b887a20057b422a4dcac66f", 0xf8}], 0x3, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r6, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)='%pi6 \x00'}, 0x20) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r7, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x4000850) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='f2fs_gc_begin\x00', r3}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000940)={0x6, 'veth1\x00', {0x9}, 0x1}) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80d0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000b00)={0x0, 0x10, 0xb914}, 0x8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000b40)) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', r8, 0x10, 0x40, 0x0, 0x7, {{0x22, 0x4, 0x1, 0x0, 0x88, 0x68, 0x0, 0x7f, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x9, [{@multicast2, 0xd}]}, @timestamp={0x44, 0x20, 0x49, 0x0, 0x9, [0x7, 0x200, 0x4, 0x80000001, 0x2, 0x2d, 0x9]}, @timestamp={0x44, 0x28, 0xb2, 0x0, 0x9, [0x7, 0x800, 0xb, 0x2, 0x8, 0x6, 0x1, 0xc, 0x9]}, @rr={0x7, 0xb, 0x6a, [@broadcast, @empty]}, @noop, @ssrr={0x89, 0x13, 0xff, [@local, @local, @local, @local]}]}}}}}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000c80)={0x9, {0xf, 0x4, 0xe, 0xffffffffffffffff, 0x4}}) (async) write(r10, &(0x7f0000000cc0)="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", 0xfe) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000e00)={'lo\x00', &(0x7f0000000dc0)=@ethtool_link_settings={0x4d, 0x9, 0x5, 0x0, 0x12, 0x1, 0x69, 0x7f, 0x4, 0x9, [0x0, 0x81, 0x2e56, 0x80000, 0xfffffc00, 0x0, 0x4, 0x5], [0x5, 0x3]}}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000e40)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) accept4$ax25(r3, &(0x7f0000000ec0)={{0x3, @rose}, [@bcast, @default, @netrom, @remote, @null, @default, @rose, @netrom]}, &(0x7f0000000f40)=0x48, 0x800) 1.117447717s ago: executing program 2 (id=2843): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x24, r4, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x5c}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6(0xa, 0x5, 0x7) socket$netlink(0x10, 0x3, 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r13, 0x10e, 0x8, 0x0, &(0x7f0000000140)) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r11, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) 1.010264163s ago: executing program 1 (id=2845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00060005000000000000000c0002000000000000000000040007800c00080000000d0000000000080001"], 0x90}}, 0x0) 1.009819095s ago: executing program 4 (id=2846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x0, 0x200003, @loopback, 0xfffffff7}, 0x21) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080), &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f00000003c0)=0xff9b) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x218, 0x0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2], 0x7ffffffd}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000a00)=ANY=[@ANYBLOB="2e120009000000f24e8000000000000000000000000000bbff02000000000000000000000000000100000000000000000000000000000001fc01000000000000000000000000000121d151132a539d090000000000000000fc01000000000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001"], 0x98) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote}, @in=@rand_addr=0x64010102}}, 0xf0}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x508, 0xf8, 0x1d8, 0x508, 0xf8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xf3dd}}}, {{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:etc_mail_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40030}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x8917, 0x0) 873.947423ms ago: executing program 3 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001000010400000000000000ffffa88800", @ANYRES32=r4, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000001b", @ANYBLOB], 0x60}}, 0x0) 839.000262ms ago: executing program 1 (id=2848): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9}], {0x95, 0x0, 0x0, 0xaae11900}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 755.163037ms ago: executing program 3 (id=2849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c0005000a000000000000000c000200000c000000000000040007800c00080000000000000000000800010000000000", @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}}, 0x0) 677.929582ms ago: executing program 4 (id=2850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x840000000002, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) clock_gettime(0x8, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000110008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\x00 \x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES64=r2], 0x90}}, 0x0) 601.226614ms ago: executing program 2 (id=2851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000011000000030000000c00060000000000000000000c0002000000000000000000100007800c0008000000000000000000080001"], 0x90}}, 0x0) 579.922053ms ago: executing program 1 (id=2853): socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x30, r3, 0x100000000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 461.999943ms ago: executing program 0 (id=2854): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/141, 0x8d}], 0x2}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000b00)="bbd3ca9ef019f4f2c885347d149fbea158e8492c5f453c7cceb1a0db488d5a7b19af270b29d58e7f69f0db6ad97713080280fbf6c1e70176ad4395c55f597d09cfba39e945740ac485e561cbd1e98c756a437e0b33bfe2339b9dbb9e90dc493f4001bf778490dcdb8735611f2b4e32bc4278ebceac0841046821bc54a986e76817b5d25c84dd9ef5daa210061a469fd9733d481278a5f1de1f6c5acb5275e2972701275caee26d80c448d5a6e50cbf5a47488bcb09e45e09f9fe9266d03fd0047dd8e1de1ae0096c3a95dfec1ce663dedca81de04be27ddcbbc5f8", 0xdb}], 0x1}], 0x1, 0x0) 456.707951ms ago: executing program 0 (id=2855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/141, 0x8d}], 0x2}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000b00)="bbd3ca9ef019f4f2c885347d149fbea158e8492c5f453c7cceb1a0db488d5a7b19af270b29d58e7f69f0db6ad97713080280fbf6c1e70176ad4395c55f597d09cfba39e945740ac485e561cbd1e98c756a437e0b33bfe2339b9dbb9e90dc493f4001bf778490dcdb8735611f2b4e32bc4278ebceac0841046821bc54a986e76817b5d25c84dd9ef5daa210061a469fd9733d481278a5f1de1f6c5acb5275e2972701275caee26d80c448d5a6e50cbf5a47488bcb09e45e09f9fe9266d03fd0047dd8e1de1ae0096c3a95dfec1ce663dedca81de04be27ddcbbc5f8", 0xdb}], 0x1}], 0x1, 0x0) 354.291453ms ago: executing program 0 (id=2856): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/141, 0x8d}], 0x2}, 0x0) (fail_nth: 1) sendmmsg$inet_sctp(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000b00)="bbd3ca9ef019f4f2c885347d149fbea158e8492c5f453c7cceb1a0db488d5a7b19af270b29d58e7f69f0db6ad97713080280fbf6c1e70176ad4395c55f597d09cfba39e945740ac485e561cbd1e98c756a437e0b33bfe2339b9dbb9e90dc493f4001bf778490dcdb8735611f2b4e32bc4278ebceac0841046821bc54a986e76817b5d25c84dd9ef5daa210061a469fd9733d481278a5f1de1f6c5acb5275e2972701275caee26d80c448d5a6e50cbf5a47488bcb09e45e09f9fe9266d03fd0047dd8e1de1ae0096c3a95dfec1ce663dedca81de04be27ddcbbc5f8", 0xdb}], 0x1}], 0x1, 0x0) 65.850141ms ago: executing program 0 (id=2857): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@p, {0x3, 0x0, 0x6}, {}, {}, {}, {0x4, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x200}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000600)={r3, 0x38, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xb68f, @private0, 0x9}, @in6={0xa, 0x4e21, 0x9, @remote, 0x3}]}, &(0x7f0000000640)=0x10) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$netlink(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r8, @ANYBLOB="00000000adb32c4dae20bf2ddc0000000008001d000000000008000a008b76757d444fdb90148452b6f684cd0a7e52efbf231037187e267b2206aaf9acf82ce28e48d53e34669a06721c909cf4ec01a0c525af9ac414ab1bd542ecc53e9e82c94aa62a07c9aa804b5a75a39a1854e246ac05ac52ac4c17f7f01c408ae1b0b58d051ac1a3578a89c191316e5f83f516f17753cb43728bc9e446b2d61a662c7da9ff360b9d3a32084d5b7b80927ff6721be234692d376e", @ANYRES32=0x0, @ANYRESHEX=r6], 0x54}}, 0x40001) getsockopt$nfc_llcp(r5, 0x6a, 0x0, 0x0, 0x20000071) 43.562869ms ago: executing program 0 (id=2858): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100", 0x16}], 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040), 0xc) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080), 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80c00) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$unix(0x1, 0x1, 0x0) getpid() (async) sendmmsg$unix(r4, &(0x7f0000013300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r4]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x40}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)=@abs={0x1}, 0x6e, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000680)="beadfa687cfb0cb0673970c11908fcfc3f48405cad8cf6084f27ab141cc246c1109f70e6f112405e37d2d0171a3ad0b9ec21d5ecbbfeb9c4a374fe72bf874bc91c4eab481a720163a4b03573b06369814131bdb256975c0a0d0b4a1592f66b75646cf60cac420110fb5c7ddf4cd7b22e8c0413e97c34d692d258817c8840440cbb857454969b3c19f3e2bda996d4d7524aa5e3fac0147a", 0x97}], 0x2, 0x0, 0x38}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x43, 0xe3, &(0x7f0000000080)="2c16cf60be9df1e8d4b05c14f79d6c62fc137ad25c376e6960a042375743bdf883db47030bfac58ab38baef2a66124ac8a4110564541296d52ac0999f9b6fe930ca751", &(0x7f0000000200)=""/227, 0x3, 0x0, 0x2a, 0x144, &(0x7f00000001c0)="0400000093518c3beb765f2e39aa182643abd95aa9850748f9a0a5029f692ec9ebb7f6d656f17889b7b9", &(0x7f0000000900)="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", 0x1, 0x0, 0x25}, 0x50) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0xffffffff}, 0x10) (async) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet(0x2, 0x0, 0x0) (async) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000580)={0x0, @rand_addr=0x64010100, @multicast2}, 0xc) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08005e8000"], 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x57) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x68, 0x13, 0x31c, 0x70bd26, 0x25dfdbfd, {0x5, 0x5, 0x0, 0x0, {0x4e22, 0x4e24, [0x7fff, 0x8, 0x5, 0x1], [0x6, 0x0, 0x7, 0x8], 0x0, [0x6, 0x2]}, 0x5, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "3a4a2e0846df8ce119f0a1998a25a0a402904719e8"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=2859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00060005000000000000000c0002000000000000000000040007800c00080000003f0000000000080001"], 0x90}}, 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.1.1812'. [ 297.926567][T11391] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 298.124949][T11401] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1823'. [ 298.166248][T11401] nbd: socks must be embedded in a SOCK_ITEM attr [ 298.168845][T11405] netlink: 'syz.4.1824': attribute type 4 has an invalid length. [ 298.199037][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 298.392820][ T5212] wlan0: Trigger new scan to find an IBSS to join [ 298.567846][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 298.600966][T11422] nbd: nbd0 already in use [ 298.845746][T11437] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1836'. [ 298.850396][T11434] netlink: 'syz.2.1833': attribute type 10 has an invalid length. [ 298.881137][T11437] nbd: socks must be embedded in a SOCK_ITEM attr [ 299.053647][T11441] netlink: 'syz.4.1837': attribute type 4 has an invalid length. [ 299.186497][T11448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1839'. [ 299.371168][ T5209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.435824][T11454] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1843'. [ 299.538892][T11456] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 299.598559][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1845'. [ 299.619719][T11458] nbd: nbd0 already in use [ 299.807654][T11469] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 299.949858][T11476] netlink: 'syz.2.1852': attribute type 4 has an invalid length. [ 300.486129][T11495] unsupported nlmsg_type 40 [ 301.121423][T11510] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 301.244498][T11516] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 301.470693][T11524] veth0_macvtap: left promiscuous mode [ 301.595071][T11530] netlink: 'syz.2.1871': attribute type 4 has an invalid length. [ 301.743793][T11534] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 302.557587][T11552] __nla_validate_parse: 12 callbacks suppressed [ 302.557618][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 302.760654][T11556] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 303.039733][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'. [ 303.074148][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 303.103036][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 303.136295][T11573] netlink: 'syz.4.1885': attribute type 14 has an invalid length. [ 303.136444][T11569] nbd: nbd0 already in use [ 303.206401][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 303.554197][T11587] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 303.606984][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1891'. [ 303.618878][T11587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.642488][T11587] bond2: (slave gretap1): making interface the new active one [ 303.652184][T11587] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 303.781268][T11596] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1895'. [ 303.800902][T11598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1893'. [ 304.615399][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1900'. [ 304.749116][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1903'. [ 305.097989][T11637] nbd: socks must be embedded in a SOCK_ITEM attr [ 305.145014][T11638] netlink: 'syz.2.1907': attribute type 14 has an invalid length. [ 305.177361][T11638] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.187217][T11638] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.196570][T11638] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.205508][T11638] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.238899][T11638] vxlan0: entered promiscuous mode [ 305.930336][T11649] bond2: (slave macvlan2): Opening slave failed [ 306.446178][T11668] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 306.657177][T11676] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 306.683647][T11676] netlink: 'syz.3.1921': attribute type 1 has an invalid length. [ 306.766139][T11680] batadv0: entered promiscuous mode [ 306.847310][T11681] team0: Device batadv0 is up. Set it down before adding it as a team port [ 306.908106][T11680] team0: Device batadv0 is up. Set it down before adding it as a team port [ 307.178824][T11695] nbd: socks must be embedded in a SOCK_ITEM attr [ 307.273009][T11697] bond9: (slave macvlan3): Opening slave failed [ 307.538489][T11704] netlink: 'syz.3.1930': attribute type 5 has an invalid length. [ 307.569663][T11704] nbd: must specify a device to reconfigure [ 307.938761][T11716] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 307.968873][T11714] netlink: 'syz.2.1934': attribute type 4 has an invalid length. [ 307.986849][T11715] __nla_validate_parse: 18 callbacks suppressed [ 307.986874][T11715] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1931'. [ 308.182977][T11721] netlink: 'syz.3.1935': attribute type 2 has an invalid length. [ 308.217244][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1935'. [ 308.248638][T11721] nbd: must specify a device to reconfigure [ 308.345364][T11726] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 308.460147][T11726] netlink: 'syz.0.1938': attribute type 309 has an invalid length. [ 308.476638][T11730] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1939'. [ 308.494769][T11730] nbd: socks must be embedded in a SOCK_ITEM attr [ 308.628706][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1940'. [ 308.880881][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 308.917814][T11743] nbd: socks must be embedded in a SOCK_ITEM attr [ 309.140366][T11750] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1947'. [ 309.242534][T11755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1948'. [ 309.872069][T11771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1952'. [ 309.906808][T11773] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1954'. [ 310.403872][T11792] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1960'. [ 310.418299][T11788] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.753425][T11804] validate_nla: 2 callbacks suppressed [ 310.753450][T11804] netlink: 'syz.3.1964': attribute type 4 has an invalid length. [ 311.283693][T11820] block nbd0: NBD_DISCONNECT [ 311.296015][T11820] block nbd0: Send disconnect failed -32 [ 311.312315][T11820] block nbd0: shutting down sockets [ 311.534551][T11830] nbd: couldn't find a device at index 0 [ 311.970460][T11848] nbd: couldn't find a device at index 0 [ 312.155289][T11858] nbd: couldn't find a device at index 0 [ 312.270848][T11854] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 312.378014][T11866] nbd: couldn't find a device at index 0 [ 313.053143][T11888] __nla_validate_parse: 14 callbacks suppressed [ 313.053166][T11888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1990'. [ 313.253807][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'. [ 313.409649][T11900] netlink: 73 bytes leftover after parsing attributes in process `syz.4.1995'. [ 313.428653][T11900] bond10: (slave macvlan2): Opening slave failed [ 313.719787][T11911] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 313.885490][T11916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2003'. [ 314.219141][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 314.307472][T11934] netlink: 73 bytes leftover after parsing attributes in process `syz.4.2008'. [ 314.325295][T11934] bond11: (slave macvlan2): Opening slave failed [ 314.365626][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 314.399816][T11939] nbd: couldn't find a device at index 0 [ 314.475120][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 314.479124][T11944] netlink: 'syz.2.2012': attribute type 4 has an invalid length. [ 314.563921][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 314.611787][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2011'. [ 314.684608][ T54] block nbd0: Receive control failed (result -107) [ 315.124137][T11970] sctp: [Deprecated]: syz.2.2022 (pid 11970) Use of int in max_burst socket option. [ 315.124137][T11970] Use struct sctp_assoc_value instead [ 315.370819][T11975] bond3: (slave macvlan2): Opening slave failed [ 315.499719][T11984] netlink: 'syz.3.2027': attribute type 4 has an invalid length. [ 315.781027][T11994] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 316.664497][T12016] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 316.783417][T12018] netlink: 'syz.3.2041': attribute type 4 has an invalid length. [ 317.191797][T12032] nbd: must specify a device to reconfigure [ 317.444925][T12041] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.668298][T12049] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 317.690262][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.697669][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.706279][T12047] nbd: must specify a device to reconfigure [ 317.960492][T12063] nbd: socks must be embedded in a SOCK_ITEM attr [ 318.145383][T12072] netlink: 'syz.3.2063': attribute type 8 has an invalid length. [ 318.288991][T12078] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 318.360690][T12082] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 318.516459][T12091] __nla_validate_parse: 14 callbacks suppressed [ 318.516483][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2070'. [ 318.562069][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 318.577688][T12093] macvlan2: entered promiscuous mode [ 318.588453][T12089] nbd: nbd0 already in use [ 318.602641][T12093] macvlan2: entered allmulticast mode [ 318.626553][T12093] bond0: entered allmulticast mode [ 318.655228][T12093] bond_slave_0: entered allmulticast mode [ 318.692318][T12093] bond_slave_1: entered allmulticast mode [ 318.709001][T12093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.741724][T12098] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2075'. [ 318.759268][T12098] nbd: socks must be embedded in a SOCK_ITEM attr [ 319.194654][T12113] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2079'. [ 319.219947][T12113] nbd: must specify a device to reconfigure [ 319.369354][T12117] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 319.737458][T12128] tun0: tun_chr_ioctl cmd 35108 [ 319.895798][T12128] vlan0: entered promiscuous mode [ 319.916672][T12128] bond0: (slave vlan0): Opening slave failed [ 319.941059][T12135] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2089'. [ 319.989820][T12135] nbd: socks must be embedded in a SOCK_ITEM attr [ 320.099326][T12138] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2091'. [ 320.117287][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2090'. [ 320.128572][T12138] nbd: must specify a device to reconfigure [ 320.255727][T12143] netlink: 73 bytes leftover after parsing attributes in process `syz.0.2090'. [ 320.288434][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 320.300914][T12148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2092'. [ 320.310592][T12147] nbd: socks must be embedded in a SOCK_ITEM attr [ 320.356256][T12143] bond4: (slave macvlan2): Opening slave failed [ 320.717132][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.928386][T12170] nbd: socks must be embedded in a SOCK_ITEM attr [ 321.302433][T12179] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 321.350320][ T5209] wlan1: Trigger new scan to find an IBSS to join [ 321.371782][T12179] batman_adv: batadv0: Adding interface: team0 [ 321.402095][T12179] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 321.446818][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 321.519790][T12186] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 321.527800][T12186] team0: entered promiscuous mode [ 321.559903][T12186] team_slave_0: entered promiscuous mode [ 321.586992][T12186] team_slave_1: entered promiscuous mode [ 321.615497][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.628646][T12186] batman_adv: batadv0: Interface activated: team0 [ 321.635493][T12186] batman_adv: batadv0: Interface deactivated: team0 [ 321.642778][T12186] batman_adv: batadv0: Removing interface: team0 [ 321.661197][T12186] bridge0: port 2(team0) entered blocking state [ 321.669004][T12186] bridge0: port 2(team0) entered disabled state [ 321.676405][T12186] team0: entered allmulticast mode [ 321.690396][T12186] team_slave_0: entered allmulticast mode [ 321.697693][T12186] team_slave_1: entered allmulticast mode [ 321.706958][T12186] bridge0: port 2(team0) entered blocking state [ 321.713485][T12186] bridge0: port 2(team0) entered forwarding state [ 321.784602][T12187] bond10: (slave macvlan3): Opening slave failed [ 321.933096][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 322.043343][T12199] nbd: socks must be embedded in a SOCK_ITEM attr [ 322.124165][T12203] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.245582][T12207] nbd: socks must be embedded in a SOCK_ITEM attr [ 322.663593][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 322.891823][T12231] bond5: (slave macvlan2): Opening slave failed [ 322.920899][T12233] netlink: 'syz.3.2128': attribute type 1 has an invalid length. [ 322.957682][T12235] nbd: socks must be embedded in a SOCK_ITEM attr [ 323.056535][T12237] 8021q: adding VLAN 0 to HW filter on device bond11 [ 323.112559][T12243] nbd: socks must be embedded in a SOCK_ITEM attr [ 323.157840][T12233] bond11: (slave gretap1): making interface the new active one [ 323.169301][T12233] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 323.250269][T12247] nbd: must specify a device to reconfigure [ 323.392053][T12251] netlink: 'syz.2.2135': attribute type 16 has an invalid length. [ 323.406695][T12251] netlink: 'syz.2.2135': attribute type 17 has an invalid length. [ 323.555311][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 324.075130][T12273] __nla_validate_parse: 23 callbacks suppressed [ 324.075154][T12273] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2142'. [ 324.092943][T12273] nbd: socks must be embedded in a SOCK_ITEM attr [ 324.097261][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2141'. [ 324.270146][T12276] netlink: 73 bytes leftover after parsing attributes in process `syz.0.2141'. [ 324.308196][T12276] bond6: (slave macvlan2): Opening slave failed [ 324.384773][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2145'. [ 324.394575][ T5209] wlan1: Trigger new scan to find an IBSS to join [ 324.433175][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2145'. [ 324.615478][T12291] wg1 speed is unknown, defaulting to 1000 [ 324.732307][T12298] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2148'. [ 324.835854][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 324.940345][T12304] netlink: 'syz.4.2152': attribute type 1 has an invalid length. [ 324.955182][T12306] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 324.975381][T12304] netlink: 113592 bytes leftover after parsing attributes in process `syz.4.2152'. [ 325.903571][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 325.949536][T12338] nbd: nbd0 already in use [ 326.191248][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.292156][T12348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2165'. [ 326.587760][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 326.750198][T12368] netlink: 'syz.1.2170': attribute type 5 has an invalid length. [ 327.082933][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.492020][T12404] bond12: entered promiscuous mode [ 327.766397][T12417] nbd: socks must be embedded in a SOCK_ITEM attr [ 327.964354][T12422] netlink: 'syz.3.2188': attribute type 5 has an invalid length. [ 328.279131][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.299725][T12437] IPv4: Oversized IP packet from 127.202.26.0 [ 328.312943][T12438] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 328.390178][ T2813] wlan1: Trigger new scan to find an IBSS to join [ 329.021779][T12459] nbd: nbd0 already in use [ 329.259678][T12465] __nla_validate_parse: 19 callbacks suppressed [ 329.259701][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 329.299014][T12471] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2202'. [ 329.323284][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 329.335258][ T5164] IPVS: starting estimator thread 0... [ 329.345677][T12471] nbd: must specify a device to reconfigure [ 329.360749][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 329.380048][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 329.390569][ T5209] wlan1: Creating new IBSS network, BSSID 2a:e8:06:98:41:db [ 329.398437][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2200'. [ 329.420301][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 329.474437][T12474] IPVS: using max 17 ests per chain, 40800 per kthread [ 329.547271][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 329.593936][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 329.639928][T12470] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2201'. [ 330.021512][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 330.077039][T12497] netlink: 'syz.0.2208': attribute type 5 has an invalid length. [ 330.245202][T12507] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 330.318208][T12509] nbd: nbd0 already in use [ 330.560560][T12523] tc_dump_action: action bad kind [ 330.937977][T12529] bridge2: entered promiscuous mode [ 330.954593][T12529] bridge2: entered allmulticast mode [ 330.957120][T12543] Cannot find del_set index 4 as target [ 330.968395][T12529] team0: Port device bridge2 added [ 331.143759][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.818684][T12564] 8021q: adding VLAN 0 to HW filter on device bond13 [ 331.917670][T12572] nbd: socks must be embedded in a SOCK_ITEM attr [ 332.102594][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 332.179064][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 332.410037][T12594] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 332.847861][T12611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.983746][T12618] nbd: must specify a device to reconfigure [ 333.063649][T12612] wg1 speed is unknown, defaulting to 1000 [ 333.088708][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.488900][T12637] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.836733][T12642] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 334.167421][T12649] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.215578][T12651] nbd: must specify a device to reconfigure [ 334.355947][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.604572][T12661] pimreg: entered allmulticast mode [ 334.646099][T12661] __nla_validate_parse: 51 callbacks suppressed [ 334.646122][T12661] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2265'. [ 334.709792][T12665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2267'. [ 334.740222][T12665] nbd: socks must be embedded in a SOCK_ITEM attr [ 334.740863][T12661] pimreg: left allmulticast mode [ 334.963968][T12677] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 335.067565][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'. [ 335.168530][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 335.190531][T12679] netlink: 'syz.3.2272': attribute type 10 has an invalid length. [ 335.210335][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 335.227593][T12679] netlink: 73 bytes leftover after parsing attributes in process `syz.3.2272'. [ 335.285031][T12679] bond14: (slave macvlan4): Opening slave failed [ 335.382587][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 335.526999][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 335.560556][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2276'. [ 335.589236][T12690] nbd: nbd0 already in use [ 335.750833][T12694] pimreg: entered allmulticast mode [ 336.024648][T12703] netlink: 'syz.4.2281': attribute type 2 has an invalid length. [ 336.059622][T12703] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2281'. [ 336.256975][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2285'. [ 336.433528][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 336.568442][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 336.630821][T12725] nbd: socks must be embedded in a SOCK_ITEM attr [ 336.654999][T11052] block nbd0: NBD_DISCONNECT [ 336.666565][T11052] block nbd0: Send disconnect failed -32 [ 336.685095][T11052] block nbd0: shutting down sockets [ 336.879935][T12733] netlink: 'syz.2.2290': attribute type 10 has an invalid length. [ 336.948743][T12737] nbd: couldn't find a device at index 0 [ 336.986490][T12733] bond13: (slave macvlan2): Opening slave failed [ 337.343858][T12750] nbd: couldn't find a device at index 0 [ 337.369096][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 337.571197][T12756] netlink: 'syz.0.2301': attribute type 4 has an invalid length. [ 337.684461][T12759] netlink: 'syz.4.2302': attribute type 1 has an invalid length. [ 337.904763][T12768] nbd: couldn't find a device at index 0 [ 338.130893][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.875929][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.880825][T12812] netlink: 'syz.3.2324': attribute type 2 has an invalid length. [ 338.939573][T12812] nbd: couldn't find a device at index 0 [ 339.141770][T12823] nbd: couldn't find a device at index 0 [ 339.198673][T12825] FAULT_INJECTION: forcing a failure. [ 339.198673][T12825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.227050][T12825] CPU: 0 PID: 12825 Comm: syz.0.2331 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 339.236944][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 339.247047][T12825] Call Trace: [ 339.250392][T12825] [ 339.253460][T12825] dump_stack_lvl+0x241/0x360 [ 339.258210][T12825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.263476][T12825] ? __pfx__printk+0x10/0x10 [ 339.268127][T12825] ? __pfx_lock_release+0x10/0x10 [ 339.273220][T12825] should_fail_ex+0x3b0/0x4e0 [ 339.278130][T12825] _copy_from_iter+0x1f6/0x1960 [ 339.283048][T12825] ? __virt_addr_valid+0x183/0x530 [ 339.288271][T12825] ? __pfx_lock_release+0x10/0x10 [ 339.293360][T12825] ? __alloc_skb+0x28f/0x440 [ 339.298005][T12825] ? __pfx__copy_from_iter+0x10/0x10 [ 339.303350][T12825] ? __virt_addr_valid+0x183/0x530 [ 339.308532][T12825] ? __virt_addr_valid+0x183/0x530 [ 339.313820][T12825] ? __virt_addr_valid+0x45f/0x530 [ 339.318995][T12825] ? __check_object_size+0x49c/0x900 [ 339.324430][T12825] netlink_sendmsg+0x73d/0xcb0 [ 339.329252][T12825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.334594][T12825] ? __import_iovec+0x536/0x820 [ 339.339507][T12825] ? aa_sock_msg_perm+0x91/0x160 [ 339.344770][T12825] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.350127][T12825] ? security_socket_sendmsg+0x87/0xb0 [ 339.355669][T12825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.361009][T12825] __sock_sendmsg+0x221/0x270 [ 339.365741][T12825] ____sys_sendmsg+0x525/0x7d0 [ 339.370588][T12825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.376052][T12825] __sys_sendmsg+0x2b0/0x3a0 [ 339.380817][T12825] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.385987][T12825] ? vfs_write+0x7c4/0xc90 [ 339.390510][T12825] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.396977][T12825] ? do_syscall_64+0x100/0x230 [ 339.401891][T12825] ? do_syscall_64+0xb6/0x230 [ 339.406644][T12825] do_syscall_64+0xf3/0x230 [ 339.411210][T12825] ? clear_bhb_loop+0x35/0x90 [ 339.416024][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.422056][T12825] RIP: 0033:0x7f681ed75b59 [ 339.426758][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.446503][T12825] RSP: 002b:00007f681fb4d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.454978][T12825] RAX: ffffffffffffffda RBX: 00007f681ef05f60 RCX: 00007f681ed75b59 [ 339.463122][T12825] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 339.471145][T12825] RBP: 00007f681fb4d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.479248][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.487790][T12825] R13: 000000000000000b R14: 00007f681ef05f60 R15: 00007ffc3ef0dc68 [ 339.495835][T12825] [ 339.702838][T12834] __nla_validate_parse: 15 callbacks suppressed [ 339.702861][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 339.739610][T12834] nbd: couldn't find a device at index 0 [ 340.025603][T12848] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2340'. [ 340.058145][T12848] nbd: couldn't find a device at index 0 [ 340.100879][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.114434][T12853] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2342'. [ 340.123742][T12853] nbd: couldn't find a device at index 0 [ 340.243429][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 340.378028][T12864] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2346'. [ 340.390053][T12864] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 340.404912][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2343'. [ 340.415104][T12860] netlink: 73 bytes leftover after parsing attributes in process `syz.0.2343'. [ 340.612062][T12873] netlink: 'syz.3.2349': attribute type 2 has an invalid length. [ 340.634029][T12873] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2349'. [ 340.685743][T12873] nbd: couldn't find a device at index 0 [ 340.808034][T12883] FAULT_INJECTION: forcing a failure. [ 340.808034][T12883] name failslab, interval 1, probability 0, space 0, times 0 [ 340.834167][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.869977][T12883] CPU: 0 PID: 12883 Comm: syz.0.2354 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 340.879865][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 340.889955][T12883] Call Trace: [ 340.893340][T12883] [ 340.896290][T12883] dump_stack_lvl+0x241/0x360 [ 340.901082][T12883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.906296][T12883] ? __pfx__printk+0x10/0x10 [ 340.910911][T12883] ? __pfx___might_resched+0x10/0x10 [ 340.916249][T12883] ? __mutex_lock+0x2ef/0xd70 [ 340.920995][T12883] should_fail_ex+0x3b0/0x4e0 [ 340.925710][T12883] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 340.931993][T12883] should_failslab+0x9/0x20 [ 340.936547][T12883] __kmalloc_noprof+0xd8/0x400 [ 340.941357][T12883] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 340.947489][T12883] genl_rcv_msg+0x802/0xec0 [ 340.952027][T12883] ? mark_lock+0x9a/0x350 [ 340.956388][T12883] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.961477][T12883] ? __pfx_lock_acquire+0x10/0x10 [ 340.966528][T12883] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 340.972286][T12883] ? __pfx___might_resched+0x10/0x10 [ 340.977707][T12883] netlink_rcv_skb+0x1e3/0x430 [ 340.982499][T12883] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.987587][T12883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.992930][T12883] genl_rcv+0x28/0x40 [ 340.997024][T12883] netlink_unicast+0x7f0/0x990 [ 341.001840][T12883] ? __pfx_netlink_unicast+0x10/0x10 [ 341.007152][T12883] ? __virt_addr_valid+0x183/0x530 [ 341.012325][T12883] ? __check_object_size+0x49c/0x900 [ 341.017718][T12883] ? bpf_lsm_netlink_send+0x9/0x10 [ 341.022857][T12883] netlink_sendmsg+0x8e4/0xcb0 [ 341.027654][T12883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.033004][T12883] ? __import_iovec+0x536/0x820 [ 341.037982][T12883] ? aa_sock_msg_perm+0x91/0x160 [ 341.042940][T12883] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 341.048263][T12883] ? security_socket_sendmsg+0x87/0xb0 [ 341.053762][T12883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.059064][T12883] __sock_sendmsg+0x221/0x270 [ 341.063849][T12883] ____sys_sendmsg+0x525/0x7d0 [ 341.068669][T12883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.074188][T12883] __sys_sendmsg+0x2b0/0x3a0 [ 341.078802][T12883] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.083930][T12883] ? vfs_write+0x7c4/0xc90 [ 341.088417][T12883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.094764][T12883] ? do_syscall_64+0x100/0x230 [ 341.099551][T12883] ? do_syscall_64+0xb6/0x230 [ 341.104244][T12883] do_syscall_64+0xf3/0x230 [ 341.108796][T12883] ? clear_bhb_loop+0x35/0x90 [ 341.113493][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.119408][T12883] RIP: 0033:0x7f681ed75b59 [ 341.123848][T12883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.143700][T12883] RSP: 002b:00007f681fb4d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.152137][T12883] RAX: ffffffffffffffda RBX: 00007f681ef05f60 RCX: 00007f681ed75b59 [ 341.160296][T12883] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 341.168305][T12883] RBP: 00007f681fb4d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 341.176321][T12883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.184320][T12883] R13: 000000000000000b R14: 00007f681ef05f60 R15: 00007ffc3ef0dc68 [ 341.192354][T12883] [ 341.314449][T12890] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 341.622851][T12905] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2360'. [ 341.650114][T12905] nbd: couldn't find a device at index 0 [ 341.658489][T12906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2362'. [ 341.686416][T12906] nbd: couldn't find a device at index 0 [ 342.085746][T12923] netlink: 'syz.2.2368': attribute type 2 has an invalid length. [ 342.095227][T12923] nbd: couldn't find a device at index 0 [ 342.211025][T12926] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 342.235984][T12929] sctp: [Deprecated]: syz.4.2369 (pid 12929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.235984][T12929] Use struct sctp_sack_info instead [ 342.736405][T12943] nbd: couldn't find a device at index 0 [ 342.960097][T12949] nbd: couldn't find a device at index 0 [ 343.134482][T12958] nbd: couldn't find a device at index 0 [ 343.209657][T12962] nbd: couldn't find a device at index 0 [ 343.561678][T12977] netlink: 'syz.3.2392': attribute type 11 has an invalid length. [ 343.879742][T12988] nbd: couldn't find a device at index 0 [ 344.005542][T12990] bridge0: port 3(vlan2) entered blocking state [ 344.040941][T12990] bridge0: port 3(vlan2) entered disabled state [ 344.061402][T12990] vlan2: entered allmulticast mode [ 344.123887][T12990] vlan2: left allmulticast mode [ 344.249933][T13005] nbd: couldn't find a device at index 0 [ 344.405887][T13008] nbd: couldn't find a device at index 0 [ 344.602523][T13018] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 344.761180][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.776768][T13022] netlink: 'syz.0.2406': attribute type 2 has an invalid length. [ 344.810432][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.820696][T13022] __nla_validate_parse: 13 callbacks suppressed [ 344.820715][T13022] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2406'. [ 344.844852][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.855659][T13022] nbd: couldn't find a device at index 0 [ 344.862122][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.919321][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.930784][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.948252][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.966918][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.977890][T13020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.989030][T13020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.005207][T13024] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 345.151171][T13025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2407'. [ 345.201578][T13025] 8021q: adding VLAN 0 to HW filter on device bond15 [ 345.230947][T13032] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2410'. [ 345.261900][T13032] nbd: couldn't find a device at index 0 [ 345.390121][T13035] netlink: 'syz.0.2412': attribute type 2 has an invalid length. [ 345.407732][T13035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2412'. [ 345.435415][T13035] nbd: couldn't find a device at index 0 [ 345.454178][T13039] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2413'. [ 345.519918][T13039] nbd: couldn't find a device at index 0 [ 345.530346][T13040] ipt_rpfilter: unknown options [ 345.626461][T13045] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 345.705685][T13050] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2416'. [ 345.729690][T13050] nbd: couldn't find a device at index 0 [ 345.819884][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 345.911166][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2421'. [ 345.920670][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 345.928188][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 345.991705][ T54] block nbd0: Receive control failed (result -107) [ 346.160802][T13070] nbd: socks must be embedded in a SOCK_ITEM attr [ 346.378568][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 346.614143][T13082] ipt_rpfilter: unknown options [ 346.872558][T13099] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 347.255911][T13111] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 347.290074][T13108] nbd: socks must be embedded in a SOCK_ITEM attr [ 347.359222][T13115] 8021q: adding VLAN 0 to HW filter on device bond14 [ 347.649232][T13123] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 347.921518][T13133] netlink: 'syz.4.2446': attribute type 2 has an invalid length. [ 348.039813][T13138] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 348.137524][T13144] netlink: 'syz.2.2452': attribute type 4 has an invalid length. [ 348.189241][ T5205] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.218781][T13147] ip6gre1: entered allmulticast mode [ 348.295928][T13150] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 348.350014][T13153] nbd: socks must be embedded in a SOCK_ITEM attr [ 348.375950][T11052] block nbd0: NBD_DISCONNECT [ 348.381247][T13150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.437087][T11052] block nbd0: Send disconnect failed -32 [ 348.442967][T11052] block nbd0: shutting down sockets [ 348.462437][T13164] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 348.717785][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.800569][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.170603][T13192] nbd: couldn't find a device at index 0 [ 349.251615][T13193] netlink: 'syz.1.2465': attribute type 2 has an invalid length. [ 349.288930][T13193] nbd: couldn't find a device at index 0 [ 349.386271][T13197] nbd: couldn't find a device at index 0 [ 349.463309][T13199] nbd: couldn't find a device at index 0 [ 349.653330][T13205] nbd: couldn't find a device at index 0 [ 349.731281][T13211] nbd: couldn't find a device at index 0 [ 349.852784][T13218] __nla_validate_parse: 18 callbacks suppressed [ 349.852809][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2471'. [ 349.875111][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 349.919628][T13217] nbd: couldn't find a device at index 0 [ 349.960229][T13218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2471'. [ 350.145455][T13230] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2482'. [ 350.179136][T13230] nbd: couldn't find a device at index 0 [ 350.368137][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2487'. [ 350.393025][T13242] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 350.405585][T13240] validate_nla: 1 callbacks suppressed [ 350.405606][T13240] netlink: 'syz.4.2485': attribute type 2 has an invalid length. [ 350.422980][T13240] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2485'. [ 350.434223][T13240] nbd: couldn't find a device at index 0 [ 350.576248][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 350.722619][T13257] netlink: 73 bytes leftover after parsing attributes in process `syz.3.2488'. [ 350.741972][T13257] bond16: (slave macvlan4): Opening slave failed [ 350.852194][T13264] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2492'. [ 350.867155][T13265] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 350.899886][T13264] nbd: couldn't find a device at index 0 [ 350.963915][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 351.180360][T13275] nbd: couldn't find a device at index 0 [ 351.202694][T13276] openvswitch: netlink: Multiple metadata blocks provided [ 351.203879][T13277] openvswitch: netlink: Multiple metadata blocks provided [ 351.357592][T13283] nbd: couldn't find a device at index 0 [ 351.600027][T13291] tipc: Started in network mode [ 351.605050][T13291] tipc: Node identity 1, cluster identity 4711 [ 351.665227][T13291] tipc: Node number set to 1 [ 351.709141][T13297] nbd: couldn't find a device at index 0 [ 351.931900][T13306] nbd: couldn't find a device at index 0 [ 352.104634][T13310] netlink: 'syz.3.2512': attribute type 2 has an invalid length. [ 352.135878][T13310] nbd: couldn't find a device at index 0 [ 352.157794][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.172196][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.183942][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.196277][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.206826][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 352.215258][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.295751][T13323] nbd: couldn't find a device at index 0 [ 352.390618][T13326] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 352.429849][T13312] wg1 speed is unknown, defaulting to 1000 [ 352.543743][ T5209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.557862][ T54] block nbd0: Receive control failed (result -107) [ 352.573089][ T5209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.605731][T13330] 8021q: adding VLAN 0 to HW filter on device bond15 [ 352.741925][ T5209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.779940][ T5209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.828302][ T5186] infiniband syz1: set down [ 352.901555][ T5209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.914613][ T5209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.948194][ T1149] wg1 speed is unknown, defaulting to 1000 [ 353.044206][ T1149] wg1 speed is unknown, defaulting to 1000 [ 353.134231][ T5209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.166996][ T5209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.610410][T13358] nbd0: detected capacity change from 0 to 6 [ 353.639703][T10854] block nbd0: Dead connection, failed to find a fallback [ 353.649045][T10854] block nbd0: shutting down sockets [ 353.660735][ T5209] bridge_slave_0: left allmulticast mode [ 353.675496][ T5209] bridge_slave_0: left promiscuous mode [ 353.681520][T10854] blk_print_req_error: 77 callbacks suppressed [ 353.681538][T10854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.700374][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.714965][T10854] buffer_io_error: 77 callbacks suppressed [ 353.714989][T10854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 353.741566][T10854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.751340][T10854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 353.759726][T10854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.811148][T10854] Buffer I/O error on dev nbd0, logical block 2, async page read [ 353.843868][T10854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.875243][T10854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 353.905554][T10854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 353.952318][T10854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 353.995096][T10854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 354.034537][T10854] Buffer I/O error on dev nbd0, logical block 2, async page read [ 354.067233][T10854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 354.106188][T10854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 354.137634][T10854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 354.181864][T10854] Buffer I/O error on dev nbd0, logical block 1, async page read [ 354.198228][T10854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 354.238989][T10854] Buffer I/O error on dev nbd0, logical block 2, async page read [ 354.269379][T10854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 354.278776][T10854] Buffer I/O error on dev nbd0, logical block 0, async page read [ 354.316872][ T54] Bluetooth: hci1: command tx timeout [ 354.327888][T10854] ldm_validate_partition_table(): Disk read failed. [ 354.355627][T10854] Dev nbd0: unable to read RDB block 0 [ 354.361975][T10854] nbd0: unable to read partition table [ 354.367845][T10854] nbd0: partition table beyond EOD, truncated [ 354.380638][T10854] ldm_validate_partition_table(): Disk read failed. [ 354.396660][T10854] Dev nbd0: unable to read RDB block 0 [ 354.449811][T13381] nbd0: detected capacity change from 6 to 0 [ 354.457709][T10854] nbd0: unable to read partition table [ 354.471946][T10854] nbd0: partition table beyond EOD, truncated [ 354.746294][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.010598][ T5209] bridge3 (unregistering): left promiscuous mode [ 355.199212][T13403] __nla_validate_parse: 22 callbacks suppressed [ 355.199237][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2540'. [ 355.250976][ T5209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.266237][ T5209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.278832][ T5209] bond0 (unregistering): Released all slaves [ 355.295865][ T5209] bond1 (unregistering): Released all slaves [ 355.321008][ T5209] bond2 (unregistering): Released all slaves [ 355.340770][ T5209] bond3 (unregistering): Released all slaves [ 355.364199][ T5209] bond4 (unregistering): Released all slaves [ 355.384696][ T5209] bond5 (unregistering): Released all slaves [ 355.402822][ T5209] bond6 (unregistering): Released all slaves [ 355.423274][ T5209] bond7 (unregistering): Released all slaves [ 355.438330][ T5209] bond8 (unregistering): Released all slaves [ 355.453492][ T5209] bond9 (unregistering): Released all slaves [ 355.468385][ T5209] bond10 (unregistering): Released all slaves [ 355.497827][ T5209] bond11 (unregistering): Released all slaves [ 355.515843][ T5209] bond12 (unregistering): Released all slaves [ 355.656928][ T5209] bond13 (unregistering): Released all slaves [ 355.783058][ T5209] bond14 (unregistering): Released all slaves [ 355.808228][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2532'. [ 355.818641][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 355.853339][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 355.930448][T13395] bridge4: entered promiscuous mode [ 355.948411][T13395] vlan2: entered promiscuous mode [ 355.978310][ T5209] ɶƣ0GCTw: left promiscuous mode [ 356.146819][T13405] vlan2: entered promiscuous mode [ 356.365581][ T5209] IPVS: stopping backup sync thread 7609 ... [ 356.391107][ T54] Bluetooth: hci1: command tx timeout [ 356.507123][T13312] chnl_net:caif_netlink_parms(): no params data found [ 356.600583][ T5214] tipc: Subscription rejected, illegal request [ 357.011151][T13439] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 357.059577][T13439] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.2549'. [ 357.078590][T13442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2551'. [ 357.087817][T13439] netlink: 'syz.0.2549': attribute type 2 has an invalid length. [ 357.087881][T13439] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 357.314509][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 357.338354][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2552'. [ 357.360971][T13452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2554'. [ 357.391795][ T5209] batman_adv: batadv0: Removing interface: team0 [ 357.412611][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.431249][T13452] nbd0: detected capacity change from 0 to 6 [ 357.462245][T11052] ldm_validate_partition_table(): Disk read failed. [ 357.469984][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.495374][T11052] Dev nbd0: unable to read RDB block 0 [ 357.517004][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.521476][T11052] nbd0: unable to read partition table [ 357.545321][T11052] nbd0: partition table beyond EOD, truncated [ 357.561265][T13456] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2555'. [ 357.570914][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.591660][ T5209] batman_adv: batadv0: Removing interface: virt_wifi0 [ 357.594495][T11052] ldm_validate_partition_table(): Disk read failed. [ 357.635886][ T5209] veth1_macvtap: left promiscuous mode [ 357.645753][ T5209] veth0_macvtap: left promiscuous mode [ 357.655556][T13456] nbd0: detected capacity change from 6 to 0 [ 357.662330][ T5209] veth1_vlan: left promiscuous mode [ 357.667729][ T5209] veth0_vlan: left promiscuous mode [ 357.674277][T11052] udevd: attempt to access beyond end of device [ 357.674277][T11052] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 357.705414][T11052] udevd: attempt to access beyond end of device [ 357.705414][T11052] nbd0: rw=0, sector=4, nr_sectors = 2 limit=0 [ 357.736235][T11052] Dev nbd0: unable to read RDB block 0 [ 357.746629][T11052] nbd0: unable to read partition table [ 357.757974][T11052] nbd0: partition table beyond EOD, truncated [ 357.777624][T11052] block nbd0: NBD_DISCONNECT [ 357.791555][T11052] block nbd0: Send disconnect failed -32 [ 357.802402][T13464] netlink: 'syz.0.2559': attribute type 2 has an invalid length. [ 357.825580][T13464] block nbd0: not configured, cannot reconfigure [ 357.979306][T13471] nbd: couldn't find a device at index 0 [ 358.040602][ T5209] infiniband syz1: set down [ 358.469898][ T54] Bluetooth: hci1: command tx timeout [ 359.019858][ T5209] team0 (unregistering): Port device team_slave_1 removed [ 359.085327][ T5209] team0 (unregistering): Port device team_slave_0 removed [ 359.388333][ T5212] smc: removing ib device syz1 [ 359.453034][ T5227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 359.874874][ T5186] wg1 speed is unknown, defaulting to 1000 [ 359.882121][T13479] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 359.913008][T13484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.965545][T13490] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 360.013127][T13490] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 360.017073][T13312] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.068175][T13312] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.092580][T13312] bridge_slave_0: entered allmulticast mode [ 360.204840][T13312] bridge_slave_0: entered promiscuous mode [ 360.277748][T13312] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.288214][T13312] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.312920][T13504] __nla_validate_parse: 6 callbacks suppressed [ 360.312942][T13504] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2570'. [ 360.330236][T13312] bridge_slave_1: entered allmulticast mode [ 360.373201][T13504] nbd: couldn't find a device at index 0 [ 360.412329][T13312] bridge_slave_1: entered promiscuous mode [ 360.549948][ T54] Bluetooth: hci1: command tx timeout [ 360.621282][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2572'. [ 360.700216][T13506] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 360.749146][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2572'. [ 361.178085][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 361.289218][T13312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.306534][T13530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'. [ 361.357451][T13312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.482391][T13536] netlink: 'syz.0.2579': attribute type 2 has an invalid length. [ 361.508684][T13536] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2579'. [ 361.524338][T13536] nbd: couldn't find a device at index 0 [ 361.553013][T13312] team0: Port device team_slave_0 added [ 361.568413][T13539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2580'. [ 361.581470][T13539] nbd: couldn't find a device at index 0 [ 361.595218][T13312] team0: Port device team_slave_1 added [ 361.612626][T13541] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2581'. [ 361.704578][T13543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2582'. [ 361.731234][T13543] nbd: couldn't find a device at index 0 [ 361.760902][T13312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.768103][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.825832][T13312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.854436][T13548] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2584'. [ 361.868455][T13312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.888052][T13548] nbd: couldn't find a device at index 0 [ 361.896242][T13312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.944966][T13312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.969594][T13552] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 362.156937][T13552] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 362.173594][T13552] bond5: (slave batadv1): Enslaving as a backup interface with an up link [ 362.191964][T13312] hsr_slave_0: entered promiscuous mode [ 362.201929][T13312] hsr_slave_1: entered promiscuous mode [ 362.220212][T13312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.228141][T13312] Cannot create hsr debugfs directory [ 362.268800][T13552] bond5 (unregistering): (slave batadv1): Releasing backup interface [ 362.293392][T13552] bond5 (unregistering): Released all slaves [ 362.572452][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 362.936056][T13588] netlink: 'syz.3.2597': attribute type 2 has an invalid length. [ 362.980020][T13588] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2597'. [ 363.025806][T13588] nbd: couldn't find a device at index 0 [ 363.249838][T13598] nbd: couldn't find a device at index 0 [ 363.560096][T13607] nbd: couldn't find a device at index 0 [ 363.691747][T13610] netlink: 'syz.1.2604': attribute type 25 has an invalid length. [ 363.733401][T13613] nbd: couldn't find a device at index 0 [ 363.761790][T13610] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.770856][T13610] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.779725][T13610] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.788613][T13610] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.851672][T13312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.913416][T13312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.015381][T13622] netlink: 'syz.0.2608': attribute type 4 has an invalid length. [ 364.021692][T13312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.090092][T13312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.131129][T13627] netlink: 'syz.2.2611': attribute type 2 has an invalid length. [ 364.158270][T13627] nbd: couldn't find a device at index 0 [ 364.448738][T13312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.533454][T13312] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.591860][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.600745][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.643316][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.651004][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.983756][T13659] nbd: couldn't find a device at index 0 [ 365.112900][T13664] nbd: couldn't find a device at index 0 [ 365.451102][T13312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.513249][T13678] __nla_validate_parse: 12 callbacks suppressed [ 365.513272][T13678] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2625'. [ 365.539686][T13678] nbd: couldn't find a device at index 0 [ 365.556625][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2627'. [ 365.569613][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'. [ 365.578640][T13683] nbd: couldn't find a device at index 0 [ 365.616682][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 365.696858][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 365.974587][T13699] netlink: 'syz.0.2634': attribute type 4 has an invalid length. [ 366.013042][T13699] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 366.037753][T13703] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2636'. [ 366.058803][T13703] nbd: couldn't find a device at index 0 [ 366.070180][T13701] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 366.130200][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2634'. [ 366.162742][T13701] lo: entered promiscuous mode [ 366.178741][T13701] lo: entered allmulticast mode [ 366.200125][T13701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.251783][T13698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.283949][T13711] netlink: 'syz.2.2638': attribute type 4 has an invalid length. [ 366.363561][T13312] veth0_vlan: entered promiscuous mode [ 366.416165][T13312] veth1_vlan: entered promiscuous mode [ 366.453754][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2640'. [ 366.490051][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2640'. [ 366.570104][T13312] veth0_macvtap: entered promiscuous mode [ 366.598382][T13312] veth1_macvtap: entered promiscuous mode [ 366.684089][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.696992][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.712086][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.726438][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.731151][T13726] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2643'. [ 366.736807][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.756943][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.768289][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.778865][T13726] nbd: couldn't find a device at index 0 [ 366.805346][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.826122][T13312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.884907][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.906469][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.944588][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.970074][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.006564][T13312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.036208][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 367.039448][T13312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.063407][T13730] nbd: couldn't find a device at index 0 [ 367.067014][T13312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.102799][T13312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.126621][T13312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.145225][T13312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.157977][T13312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.281349][T13734] netlink: 'syz.1.2647': attribute type 1 has an invalid length. [ 367.364839][T13736] IPv6: Can't replace route, no match found [ 367.497647][ T5209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.539539][ T5209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.576939][T13734] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 367.593205][T13734] bond5: (slave batadv2): Enslaving as a backup interface with an up link [ 367.673862][ T5214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.709571][ T5214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.710324][T13734] bond5 (unregistering): (slave batadv2): Releasing backup interface [ 367.792630][T13734] bond5 (unregistering): Released all slaves [ 368.151167][T13761] netlink: 'syz.1.2656': attribute type 10 has an invalid length. [ 368.185784][T13770] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 368.197638][T13770] nbd: couldn't find a device at index 0 [ 368.257036][T13761] batman_adv: batadv0: Adding interface: team0 [ 368.324578][T13761] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.390299][T13778] nbd: couldn't find a device at index 0 [ 368.404969][T13761] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 368.438308][T13764] netlink: 'syz.1.2656': attribute type 10 has an invalid length. [ 368.456891][T13767] netlink: 'syz.1.2656': attribute type 10 has an invalid length. [ 368.484737][T13767] team0: entered promiscuous mode [ 368.502240][T13767] team_slave_0: entered promiscuous mode [ 368.520884][T13767] team_slave_1: entered promiscuous mode [ 368.534106][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.542551][T13767] batman_adv: batadv0: Interface activated: team0 [ 368.549302][T13767] batman_adv: batadv0: Interface deactivated: team0 [ 368.556859][T13767] batman_adv: batadv0: Removing interface: team0 [ 368.564765][T13767] bridge0: port 3(team0) entered blocking state [ 368.572088][T13767] bridge0: port 3(team0) entered disabled state [ 368.578558][T13767] team0: entered allmulticast mode [ 368.586904][T13767] team_slave_0: entered allmulticast mode [ 368.593237][T13767] team_slave_1: entered allmulticast mode [ 368.602604][T13767] bridge0: port 3(team0) entered blocking state [ 368.609019][T13767] bridge0: port 3(team0) entered forwarding state [ 376.221960][T13797] __nla_validate_parse: 11 callbacks suppressed [ 376.221988][T13797] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2666'. [ 376.249030][T13797] nbd: couldn't find a device at index 0 [ 376.291639][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 376.324037][T13803] gtp0: entered promiscuous mode [ 376.329128][T13803] gtp0: entered allmulticast mode [ 376.341701][T13804] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2670'. [ 376.374697][T13804] nbd: couldn't find a device at index 0 [ 376.490081][T13811] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2672'. [ 376.566038][T13811] nbd: couldn't find a device at index 0 [ 376.757063][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2675'. [ 376.789281][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2675'. [ 376.958715][T13832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2677'. [ 377.216112][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 377.246755][T13844] nbd: couldn't find a device at index 0 [ 377.437012][T13849] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 377.506226][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2685'. [ 377.718357][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2688'. [ 377.789057][T13864] bond17: (slave macvlan4): Opening slave failed [ 378.026789][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 378.046712][T13888] netlink: 'syz.1.2692': attribute type 2 has an invalid length. [ 378.097003][T13888] nbd: couldn't find a device at index 0 [ 378.395660][T13905] nbd: couldn't find a device at index 0 [ 378.523110][T13910] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 378.736714][T13921] raw_sendmsg: syz.1.2705 forgot to set AF_INET. Fix it! [ 378.823034][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 378.956602][T13932] IPv6: addrconf: prefix option has invalid lifetime [ 379.123132][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.177726][T13940] nbd: couldn't find a device at index 0 [ 379.205288][T13941] netlink: 'syz.4.2711': attribute type 10 has an invalid length. [ 379.219979][ T5212] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.257104][T13946] nbd: couldn't find a device at index 0 [ 379.264111][T13941] bond0: (slave bond_slave_0): Releasing backup interface [ 379.292924][T13936] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 379.402665][ T54] block nbd0: Receive control failed (result -107) [ 379.460171][T13956] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 379.577435][T13961] netlink: 'syz.1.2719': attribute type 4 has an invalid length. [ 379.781364][T13973] dummy0: entered promiscuous mode [ 379.797170][T13973] dummy0: left promiscuous mode [ 380.440325][T13995] netlink: 'syz.2.2729': attribute type 10 has an invalid length. [ 380.498476][T13995] bond0: (slave bond_slave_0): Releasing backup interface [ 380.566942][T13995] bond_slave_0: left promiscuous mode [ 380.592307][T13992] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 380.726684][T13999] netlink: 'syz.3.2731': attribute type 32 has an invalid length. [ 380.752673][T13999] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 381.034082][T14005] nbd: nbd0 already in use [ 381.324497][T14018] __nla_validate_parse: 22 callbacks suppressed [ 381.324521][T14018] netlink: 54 bytes leftover after parsing attributes in process `syz.3.2735'. [ 381.377738][T14017] netlink: 'syz.2.2736': attribute type 2 has an invalid length. [ 381.408740][T14017] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2736'. [ 381.714210][T14029] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 381.823831][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 381.935294][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 382.087915][T14040] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2743'. [ 382.108151][T14040] nbd: socks must be embedded in a SOCK_ITEM attr [ 382.208989][T14049] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2747'. [ 382.233753][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 382.255293][T14045] nbd: nbd0 already in use [ 382.370572][T14052] netlink: 'syz.3.2749': attribute type 10 has an invalid length. [ 382.449139][T14052] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 382.669365][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2753'. [ 382.682133][T14063] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 382.875272][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2757'. [ 382.895120][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 382.920130][T14071] netlink: 'syz.0.2756': attribute type 2 has an invalid length. [ 382.960793][T14068] nbd: nbd0 already in use [ 383.292120][T14077] nbd: nbd0 already in use [ 383.390404][T14083] Bluetooth: MGMT ver 1.23 [ 383.421471][T14088] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 383.690856][T14101] netlink: 'syz.0.2771': attribute type 2 has an invalid length. [ 383.856432][T14109] nbd: nbd0 already in use [ 383.975446][T14111] bond16: (slave macvlan2): Opening slave failed [ 384.000926][T14115] nbd0: detected capacity change from 0 to 6 [ 384.012142][T14118] netlink: 'syz.1.2778': attribute type 2 has an invalid length. [ 384.052870][T13809] block nbd0: Dead connection, failed to find a fallback [ 384.099473][T13809] block nbd0: shutting down sockets [ 384.104765][T13809] blk_print_req_error: 108 callbacks suppressed [ 384.104784][T13809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.143636][T14122] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 384.175062][T13809] buffer_io_error: 110 callbacks suppressed [ 384.175086][T13809] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.214966][T13809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.240620][T13809] Buffer I/O error on dev nbd0, logical block 1, async page read [ 384.299682][T13809] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.336794][T13809] Buffer I/O error on dev nbd0, logical block 2, async page read [ 384.358147][T13809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.388428][T13809] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.417138][T13809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.474508][T13809] Buffer I/O error on dev nbd0, logical block 1, async page read [ 384.493704][T13809] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.526520][T13809] Buffer I/O error on dev nbd0, logical block 2, async page read [ 384.546049][T14137] nbd0: detected capacity change from 6 to 0 [ 384.546089][T13809] ldm_validate_partition_table(): Disk read failed. [ 384.559211][T13809] Dev nbd0: unable to read RDB block 0 [ 384.598090][T13809] nbd0: unable to read partition table [ 384.615331][T13809] nbd0: partition table beyond EOD, truncated [ 384.897860][T14158] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 384.914757][T14155] nbd0: detected capacity change from 0 to 6 [ 384.953937][T13842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.989645][T13842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.998861][T13842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.030400][T13842] Buffer I/O error on dev nbd0, logical block 1, async page read [ 385.038482][T13842] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.099700][T13842] Buffer I/O error on dev nbd0, logical block 2, async page read [ 385.107804][T13842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.175766][T13842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 385.219198][T13842] ldm_validate_partition_table(): Disk read failed. [ 385.234033][T13842] Dev nbd0: unable to read RDB block 0 [ 385.256132][T13842] nbd0: unable to read partition table [ 385.282805][T13842] nbd0: partition table beyond EOD, truncated [ 385.300033][T14167] nbd0: detected capacity change from 6 to 0 [ 385.760424][T14195] nbd0: detected capacity change from 0 to 6 [ 385.780385][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 385.808393][T13809] ldm_validate_partition_table(): Disk read failed. [ 385.835684][T13809] Dev nbd0: unable to read RDB block 0 [ 385.845763][T13809] nbd0: unable to read partition table [ 385.853362][T14203] tipc: Enabled bearer , priority 10 [ 385.892544][T13809] nbd0: partition table beyond EOD, truncated [ 385.922209][T13809] ldm_validate_partition_table(): Disk read failed. [ 385.957303][T13809] Dev nbd0: unable to read RDB block 0 [ 385.970887][T13809] nbd0: unable to read partition table [ 385.999868][T13809] nbd0: partition table beyond EOD, truncated [ 386.099802][T14214] nbd0: detected capacity change from 6 to 0 [ 386.329892][T14224] nbd0: detected capacity change from 0 to 1152 [ 386.341241][T14224] nbd: socks must be embedded in a SOCK_ITEM attr [ 386.350481][T13809] ldm_validate_partition_table(): Disk read failed. [ 386.350619][T14226] __nla_validate_parse: 31 callbacks suppressed [ 386.350639][T14226] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2821'. [ 386.368687][T13809] Dev nbd0: unable to read RDB block 0 [ 386.380262][T14230] netlink: 'syz.2.2819': attribute type 2 has an invalid length. [ 386.410582][T13809] nbd0: unable to read partition table [ 386.431488][T13809] ldm_validate_partition_table(): Disk read failed. [ 386.438475][T13809] Dev nbd0: unable to read RDB block 0 [ 386.449881][T14230] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2819'. [ 386.460044][T13809] nbd0: unable to read partition table [ 386.492270][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'. [ 386.510415][T14230] nbd0: detected capacity change from 1152 to 0 [ 386.565977][T13809] block nbd0: NBD_DISCONNECT [ 386.599827][T13809] block nbd0: Send disconnect failed -32 [ 386.620684][T14240] netlink: 73 bytes leftover after parsing attributes in process `syz.1.2823'. [ 386.752258][T14240] bond5: (slave macvlan4): Opening slave failed [ 386.838218][T14252] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 387.004104][T14258] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2831'. [ 387.050397][T14258] nbd: couldn't find a device at index 0 [ 387.071795][T14261] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2832'. [ 387.107911][T14261] nbd: couldn't find a device at index 0 [ 387.248008][T14268] netlink: 'syz.2.2835': attribute type 16 has an invalid length. [ 387.248009][T14269] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2835'. [ 387.289556][T14268] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2835'. [ 387.389025][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 387.480329][T14273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 387.493366][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 387.513311][T14278] netlink: 'syz.1.2837': attribute type 5 has an invalid length. [ 387.561731][ T54] block nbd0: Receive control failed (result -107) [ 388.012750][T14305] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 388.070610][T14305] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 388.191236][T14312] nbd0: detected capacity change from 0 to 1099511627776 [ 388.234587][T13809] block nbd0: Dead connection, failed to find a fallback [ 388.325813][T14320] netlink: 'syz.0.2852': attribute type 6 has an invalid length. [ 388.530317][T14333] FAULT_INJECTION: forcing a failure. [ 388.530317][T14333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.545138][T14333] CPU: 0 PID: 14333 Comm: syz.0.2856 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 388.555092][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 388.565346][T14333] Call Trace: [ 388.568634][T14333] [ 388.571585][T14333] dump_stack_lvl+0x241/0x360 [ 388.576298][T14333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.581538][T14333] ? __pfx__printk+0x10/0x10 [ 388.586278][T14333] ? __pfx_lock_release+0x10/0x10 [ 388.591371][T14333] should_fail_ex+0x3b0/0x4e0 [ 388.596113][T14333] _copy_from_user+0x2f/0xe0 [ 388.600939][T14333] copy_msghdr_from_user+0xae/0x680 [ 388.606310][T14333] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 388.612154][T14333] __sys_recvmsg+0x252/0x3e0 [ 388.616773][T14333] ? __pfx___sys_recvmsg+0x10/0x10 [ 388.621934][T14333] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.628280][T14333] ? do_syscall_64+0x100/0x230 [ 388.633069][T14333] ? do_syscall_64+0xb6/0x230 [ 388.637773][T14333] do_syscall_64+0xf3/0x230 [ 388.642559][T14333] ? clear_bhb_loop+0x35/0x90 [ 388.647256][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.653179][T14333] RIP: 0033:0x7f681ed75b59 [ 388.657610][T14333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.677425][T14333] RSP: 002b:00007f681fb4d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 388.685869][T14333] RAX: ffffffffffffffda RBX: 00007f681ef05f60 RCX: 00007f681ed75b59 [ 388.693959][T14333] RDX: 0000000000000000 RSI: 0000000020000900 RDI: 0000000000000004 [ 388.701968][T14333] RBP: 00007f681fb4d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.710223][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.718330][T14333] R13: 000000000000000b R14: 00007f681ef05f60 R15: 00007ffc3ef0dc68 [ 388.726365][T14333] [ 398.936801][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.946922][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.960784][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.972278][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.990211][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 398.997754][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.040579][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 399.051276][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 399.060216][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 399.070005][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 399.079316][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 399.087513][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 399.162787][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.173036][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.181517][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.190608][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.198839][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 399.206952][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.300647][ T5114] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 399.311343][ T5114] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 399.329928][ T5114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 399.340460][ T5114] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 399.351440][ T5114] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 399.358981][ T5114] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 399.707567][T14349] chnl_net:caif_netlink_parms(): no params data found [ 399.941892][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 399.953491][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 399.962865][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 399.972085][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 399.997516][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 400.005884][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 400.013352][T14351] chnl_net:caif_netlink_parms(): no params data found [ 400.108475][T14354] chnl_net:caif_netlink_parms(): no params data found [ 400.152190][T14349] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.159506][T14349] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.166749][T14349] bridge_slave_0: entered allmulticast mode [ 400.174137][T14349] bridge_slave_0: entered promiscuous mode [ 400.225775][T14349] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.234507][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.242461][T14349] bridge_slave_1: entered allmulticast mode [ 400.250412][T14349] bridge_slave_1: entered promiscuous mode [ 400.338992][T14349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.409926][T14349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.511779][T14349] team0: Port device team_slave_0 added [ 400.530620][T14349] team0: Port device team_slave_1 added [ 400.554428][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.562333][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.569932][T14351] bridge_slave_0: entered allmulticast mode [ 400.577944][T14351] bridge_slave_0: entered promiscuous mode [ 400.654259][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.662046][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.669354][T14351] bridge_slave_1: entered allmulticast mode [ 400.677432][T14351] bridge_slave_1: entered promiscuous mode [ 400.771888][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.785636][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.812009][T14354] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.819227][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.827606][T14354] bridge_slave_0: entered allmulticast mode [ 400.835525][T14354] bridge_slave_0: entered promiscuous mode [ 400.845366][T14349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.853876][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.880349][T14349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.893662][T14349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.900802][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.927495][T14349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.974955][T14354] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.982895][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.990425][T14354] bridge_slave_1: entered allmulticast mode [ 400.997574][T14354] bridge_slave_1: entered promiscuous mode [ 401.028114][T14351] team0: Port device team_slave_0 added [ 401.030135][ T5114] Bluetooth: hci5: command tx timeout [ 401.092801][T14356] chnl_net:caif_netlink_parms(): no params data found [ 401.108465][T14351] team0: Port device team_slave_1 added [ 401.109672][ T5114] Bluetooth: hci6: command tx timeout [ 401.156204][T14354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.206891][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.214534][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.241479][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.254727][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.261814][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.288232][ T5114] Bluetooth: hci7: command tx timeout [ 401.294934][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.310468][T14354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.341007][T14349] hsr_slave_0: entered promiscuous mode [ 401.348114][T14349] hsr_slave_1: entered promiscuous mode [ 401.356174][T14349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.364699][T14349] Cannot create hsr debugfs directory [ 401.430277][ T5114] Bluetooth: hci8: command tx timeout [ 401.447682][T14354] team0: Port device team_slave_0 added [ 401.460143][T14354] team0: Port device team_slave_1 added [ 401.640724][T14351] hsr_slave_0: entered promiscuous mode [ 401.648563][T14351] hsr_slave_1: entered promiscuous mode [ 401.655077][T14351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.663628][T14351] Cannot create hsr debugfs directory [ 401.670351][T14368] chnl_net:caif_netlink_parms(): no params data found [ 401.689315][T14354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.696851][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.725139][T14354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.801766][T14354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.808761][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.835819][T14354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.905966][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.913440][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.921482][T14356] bridge_slave_0: entered allmulticast mode [ 401.929071][T14356] bridge_slave_0: entered promiscuous mode [ 401.983407][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.991677][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.999064][T14356] bridge_slave_1: entered allmulticast mode [ 402.007226][T14356] bridge_slave_1: entered promiscuous mode [ 402.070111][ T5114] Bluetooth: hci9: command tx timeout [ 402.108084][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.187736][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.240666][T14354] hsr_slave_0: entered promiscuous mode [ 402.247636][T14354] hsr_slave_1: entered promiscuous mode [ 402.254527][T14354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.263545][T14354] Cannot create hsr debugfs directory [ 402.307515][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.315433][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.323062][T14368] bridge_slave_0: entered allmulticast mode [ 402.331033][T14368] bridge_slave_0: entered promiscuous mode [ 402.402202][T14356] team0: Port device team_slave_0 added [ 402.408921][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.416937][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.424842][T14368] bridge_slave_1: entered allmulticast mode [ 402.433103][T14368] bridge_slave_1: entered promiscuous mode [ 402.497346][T14349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.508272][T14349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.557601][T14356] team0: Port device team_slave_1 added [ 402.657170][T14349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.668677][T14349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.714101][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.729162][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.756385][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.772199][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.786387][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.861237][T14349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.872824][T14349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.889279][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.897429][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.924348][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.028415][T14349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.039763][T14349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.080974][T14368] team0: Port device team_slave_0 added [ 403.096873][T14368] team0: Port device team_slave_1 added [ 403.110240][ T5114] Bluetooth: hci5: command tx timeout [ 403.144682][T14356] hsr_slave_0: entered promiscuous mode [ 403.153848][T14356] hsr_slave_1: entered promiscuous mode [ 403.164750][T14356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.172579][T14356] Cannot create hsr debugfs directory [ 403.189916][ T5114] Bluetooth: hci6: command tx timeout [ 403.258382][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.275689][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.302830][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.344373][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.351566][ T5114] Bluetooth: hci7: command tx timeout [ 403.357016][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.383723][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.510161][ T5114] Bluetooth: hci8: command tx timeout [ 403.542165][T14368] hsr_slave_0: entered promiscuous mode [ 403.549756][T14368] hsr_slave_1: entered promiscuous mode [ 403.556430][T14368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.564382][T14368] Cannot create hsr debugfs directory [ 403.694203][T14351] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.705105][T14351] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.835829][T14351] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.848400][T14351] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.944364][T14351] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.955884][T14351] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.050121][T14351] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.063156][T14351] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.154119][ T5114] Bluetooth: hci9: command tx timeout [ 404.286576][T14354] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.382147][T14354] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.472826][T14354] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.544004][T14354] bond0: (slave netdevsim0): Releasing backup interface [ 404.555902][T14354] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.768698][T14356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.851189][T14356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.940346][T14356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.016540][T14356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.189656][ T5114] Bluetooth: hci5: command tx timeout [ 405.238449][T14368] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.269917][ T5114] Bluetooth: hci6: command tx timeout [ 405.341023][T14368] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.425181][T14368] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.436707][ T5114] Bluetooth: hci7: command tx timeout [ 405.516203][T14368] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.589745][ T5114] Bluetooth: hci8: command tx timeout [ 406.229552][ T5114] Bluetooth: hci9: command tx timeout [ 407.270037][ T5114] Bluetooth: hci5: command tx timeout [ 407.349720][ T5114] Bluetooth: hci6: command tx timeout [ 407.509561][ T5114] Bluetooth: hci7: command tx timeout [ 407.679694][ T5114] Bluetooth: hci8: command tx timeout [ 408.309719][ T5114] Bluetooth: hci9: command tx timeout [ 415.600789][ T5214] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.039822][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 440.552525][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.950109][ T5212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.084852][ T4550] udevd[4550]: worker [13809] /devices/virtual/block/nbd0 is taking a long time [ 458.820333][ T5114] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 458.831426][ T5114] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 458.841852][ T5114] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 458.850847][ T5114] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 458.860996][ T5114] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 458.870269][ T5114] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 458.881066][ T5114] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 458.894127][ T5114] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 458.905927][ T5114] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 458.916239][ T5114] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 458.924546][ T5114] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 458.932360][ T5114] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 459.316377][T14395] chnl_net:caif_netlink_parms(): no params data found [ 459.386094][T14393] chnl_net:caif_netlink_parms(): no params data found [ 459.469206][T14395] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.476987][T14395] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.485674][T14395] bridge_slave_0: entered allmulticast mode [ 459.493577][T14395] bridge_slave_0: entered promiscuous mode [ 459.522146][T14395] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.532272][T14395] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.550435][T14395] bridge_slave_1: entered allmulticast mode [ 459.558576][T14395] bridge_slave_1: entered promiscuous mode [ 459.733089][T14395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.784207][T14395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.823565][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 459.835362][ T5113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 459.844273][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 459.853578][ T5113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 459.861807][ T5113] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 459.870867][ T5113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 459.964014][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.979968][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.990974][T14393] bridge_slave_0: entered allmulticast mode [ 459.998983][T14393] bridge_slave_0: entered promiscuous mode [ 460.015355][ T5113] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 460.016215][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.031332][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.033079][ T5113] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 460.038704][T14393] bridge_slave_1: entered allmulticast mode [ 460.052420][ T5113] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 460.054025][T14393] bridge_slave_1: entered promiscuous mode [ 460.071209][ T5113] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 460.089738][ T5113] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 460.098051][ T5113] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 460.157756][T14395] team0: Port device team_slave_0 added [ 460.167952][T14395] team0: Port device team_slave_1 added [ 460.194523][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.208228][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.298672][T14393] team0: Port device team_slave_0 added [ 460.311945][T14395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.320185][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.347981][T14395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.361998][T14395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.370414][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.397649][T14395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.435490][T14393] team0: Port device team_slave_1 added [ 460.484506][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.492156][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.520321][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.573548][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.580778][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.607970][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.756533][T14395] hsr_slave_0: entered promiscuous mode [ 460.780836][T14395] hsr_slave_1: entered promiscuous mode [ 460.787546][T14395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.800068][T14395] Cannot create hsr debugfs directory [ 460.904341][ T5113] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 460.916513][ T5113] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 460.925535][ T5113] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 460.935453][ T5113] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 460.944109][ T5113] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 460.953034][ T5114] Bluetooth: hci10: command tx timeout [ 460.962514][ T5113] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 461.031065][ T5113] Bluetooth: hci11: command tx timeout [ 461.047825][T14393] hsr_slave_0: entered promiscuous mode [ 461.056151][T14393] hsr_slave_1: entered promiscuous mode [ 461.063543][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.071427][T14393] Cannot create hsr debugfs directory [ 461.561284][T14414] chnl_net:caif_netlink_parms(): no params data found [ 461.610702][T14412] chnl_net:caif_netlink_parms(): no params data found [ 461.910120][ T5113] Bluetooth: hci12: command tx timeout [ 461.926871][T14414] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.936107][T14414] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.943663][T14414] bridge_slave_0: entered allmulticast mode [ 461.951553][T14414] bridge_slave_0: entered promiscuous mode [ 461.961740][T14414] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.969047][T14414] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.977004][T14414] bridge_slave_1: entered allmulticast mode [ 461.984943][T14414] bridge_slave_1: entered promiscuous mode [ 462.109103][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.133950][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.143570][T14412] bridge_slave_0: entered allmulticast mode [ 462.151127][ T5113] Bluetooth: hci13: command tx timeout [ 462.161139][T14412] bridge_slave_0: entered promiscuous mode [ 462.175477][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.184032][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.192276][T14412] bridge_slave_1: entered allmulticast mode [ 462.200190][T14412] bridge_slave_1: entered promiscuous mode [ 462.213584][T14414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.230480][T14418] chnl_net:caif_netlink_parms(): no params data found [ 462.261447][T14414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.382814][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.400653][T14414] team0: Port device team_slave_0 added [ 462.457514][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.498966][T14414] team0: Port device team_slave_1 added [ 462.621893][T14412] team0: Port device team_slave_0 added [ 462.646399][T14414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.656201][T14414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.683260][T14414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.696992][T14414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.710109][T14414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.736676][T14414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.772304][T14412] team0: Port device team_slave_1 added [ 462.794269][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.803273][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.811744][T14418] bridge_slave_0: entered allmulticast mode [ 462.818994][T14418] bridge_slave_0: entered promiscuous mode [ 462.828467][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.836670][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.844467][T14418] bridge_slave_1: entered allmulticast mode [ 462.852375][T14418] bridge_slave_1: entered promiscuous mode [ 462.946673][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.954398][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.982472][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.029965][ T54] Bluetooth: hci10: command tx timeout [ 463.029969][ T5113] Bluetooth: hci14: command tx timeout [ 463.055585][T14414] hsr_slave_0: entered promiscuous mode [ 463.063241][T14414] hsr_slave_1: entered promiscuous mode [ 463.070479][T14414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.078180][T14414] Cannot create hsr debugfs directory [ 463.086113][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.094992][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.121320][ T5113] Bluetooth: hci11: command tx timeout [ 463.136693][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.162307][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.245842][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.324208][T14412] hsr_slave_0: entered promiscuous mode [ 463.332625][T14412] hsr_slave_1: entered promiscuous mode [ 463.339258][T14412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.347496][T14412] Cannot create hsr debugfs directory [ 463.378650][T14418] team0: Port device team_slave_0 added [ 463.427698][T14418] team0: Port device team_slave_1 added [ 463.518821][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.537001][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.564724][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.579254][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.586827][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.615305][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.776467][T14418] hsr_slave_0: entered promiscuous mode [ 463.783483][T14418] hsr_slave_1: entered promiscuous mode [ 463.791212][T14418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.799597][T14418] Cannot create hsr debugfs directory [ 463.990999][ T5113] Bluetooth: hci12: command tx timeout [ 464.230455][ T5113] Bluetooth: hci13: command tx timeout [ 465.109682][ T54] Bluetooth: hci14: command tx timeout [ 465.115392][ T5113] Bluetooth: hci10: command tx timeout [ 465.190124][ T5113] Bluetooth: hci11: command tx timeout [ 466.069839][ T5113] Bluetooth: hci12: command tx timeout [ 466.310680][ T5113] Bluetooth: hci13: command tx timeout [ 467.190501][ T5113] Bluetooth: hci10: command tx timeout [ 467.196070][ T5113] Bluetooth: hci14: command tx timeout [ 467.280187][ T5113] Bluetooth: hci11: command tx timeout [ 468.150402][ T5113] Bluetooth: hci12: command tx timeout [ 468.400136][ T5113] Bluetooth: hci13: command tx timeout [ 469.269823][ T5113] Bluetooth: hci14: command tx timeout [ 478.472837][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 478.949980][ T5214] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.993530][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.950423][ T5212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 519.506979][ T5113] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 519.520079][ T5113] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 519.530383][ T5113] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 519.540959][ T5113] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 519.548940][ T5113] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 519.556698][ T5113] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 519.594800][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 519.604845][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 519.619606][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 519.628104][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 519.636596][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 519.644866][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 520.037057][T14439] chnl_net:caif_netlink_parms(): no params data found [ 520.123650][T14441] chnl_net:caif_netlink_parms(): no params data found [ 520.369899][T14439] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.377252][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.399708][T14439] bridge_slave_0: entered allmulticast mode [ 520.410666][T14439] bridge_slave_0: entered promiscuous mode [ 520.456439][T14439] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.470351][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.477895][T14439] bridge_slave_1: entered allmulticast mode [ 520.499649][T14439] bridge_slave_1: entered promiscuous mode [ 520.551092][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 520.563318][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 520.578558][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 520.590570][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 520.598916][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 520.606664][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 520.670408][ T5113] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 520.680892][ T5113] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 520.690084][ T5113] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 520.701413][ T5113] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 520.702779][T14441] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.709718][ T5113] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 520.723867][T14441] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.731507][ T5113] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 520.740264][T14441] bridge_slave_0: entered allmulticast mode [ 520.748178][T14441] bridge_slave_0: entered promiscuous mode [ 520.761536][T14441] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.768775][T14441] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.776440][T14441] bridge_slave_1: entered allmulticast mode [ 520.784915][T14441] bridge_slave_1: entered promiscuous mode [ 520.804445][T14439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.894630][T14439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.929006][T14441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.949305][T14441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.994516][T14439] team0: Port device team_slave_0 added [ 521.063986][T14439] team0: Port device team_slave_1 added [ 521.083489][T14441] team0: Port device team_slave_0 added [ 521.094164][T14441] team0: Port device team_slave_1 added [ 521.173169][T14439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.181217][T14439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.209443][T14439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.265212][T14441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.279491][T14441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.319669][T14441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.358917][T14441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.366871][T14441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.393840][T14441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.406992][T14439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.414359][T14439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.442347][T14439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.587878][ T5113] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 521.600664][ T5113] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 521.611424][ T5113] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 521.622996][ T5113] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 521.655441][ T5113] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 521.669746][ T5113] Bluetooth: hci15: command tx timeout [ 521.679074][ T5113] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 521.688377][T14441] hsr_slave_0: entered promiscuous mode [ 521.695942][T14441] hsr_slave_1: entered promiscuous mode [ 521.705412][T14441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.724243][T14441] Cannot create hsr debugfs directory [ 521.750276][ T54] Bluetooth: hci16: command tx timeout [ 521.763446][T14439] hsr_slave_0: entered promiscuous mode [ 521.771176][T14439] hsr_slave_1: entered promiscuous mode [ 521.777799][T14439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.785642][T14439] Cannot create hsr debugfs directory [ 522.103200][T14459] chnl_net:caif_netlink_parms(): no params data found [ 522.257374][T14456] chnl_net:caif_netlink_parms(): no params data found [ 522.450632][T14459] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.457834][T14459] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.465480][T14459] bridge_slave_0: entered allmulticast mode [ 522.476673][T14459] bridge_slave_0: entered promiscuous mode [ 522.496133][T14459] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.503867][T14459] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.511800][T14459] bridge_slave_1: entered allmulticast mode [ 522.520000][T14459] bridge_slave_1: entered promiscuous mode [ 522.658785][T14459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.701737][T14459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.710331][T14474] Bluetooth: hci17: command tx timeout [ 522.796660][T14456] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.805216][T14456] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.813541][T14456] bridge_slave_0: entered allmulticast mode [ 522.822942][T14456] bridge_slave_0: entered promiscuous mode [ 522.835372][T14456] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.843081][T14456] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.851734][T14456] bridge_slave_1: entered allmulticast mode [ 522.860001][T14456] bridge_slave_1: entered promiscuous mode [ 522.871008][T14474] Bluetooth: hci18: command tx timeout [ 522.908400][T14459] team0: Port device team_slave_0 added [ 522.918982][T14459] team0: Port device team_slave_1 added [ 523.019147][T14456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.073315][T14459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.083412][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.116987][T14459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.130775][T14459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.137779][T14459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.164250][T14459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.180095][T14456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.282461][T14456] team0: Port device team_slave_0 added [ 523.305317][T14456] team0: Port device team_slave_1 added [ 523.374573][T14464] chnl_net:caif_netlink_parms(): no params data found [ 523.441570][T14456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.448678][T14456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.476285][T14456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.490395][T14456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.498501][T14456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.525326][T14456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.570812][T14459] hsr_slave_0: entered promiscuous mode [ 523.577968][T14459] hsr_slave_1: entered promiscuous mode [ 523.585869][T14459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.601087][T14459] Cannot create hsr debugfs directory [ 523.750050][T14474] Bluetooth: hci19: command tx timeout [ 523.756464][T14474] Bluetooth: hci15: command tx timeout [ 523.796934][T14456] hsr_slave_0: entered promiscuous mode [ 523.805997][T14456] hsr_slave_1: entered promiscuous mode [ 523.812750][T14456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.823517][T14456] Cannot create hsr debugfs directory [ 523.830152][T14484] Bluetooth: hci16: command tx timeout [ 523.929310][T14464] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.936919][T14464] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.944476][T14464] bridge_slave_0: entered allmulticast mode [ 523.952824][T14464] bridge_slave_0: entered promiscuous mode [ 524.004212][T14464] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.012457][T14464] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.020162][T14464] bridge_slave_1: entered allmulticast mode [ 524.027942][T14464] bridge_slave_1: entered promiscuous mode [ 524.178677][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.193628][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.344690][T14464] team0: Port device team_slave_0 added [ 524.402631][T14464] team0: Port device team_slave_1 added [ 524.467418][T14464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.484330][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.515353][T14464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.539157][T14464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.548140][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.555988][T14484] Bluetooth: hci8: command 0x0406 tx timeout [ 524.578461][T14464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.581677][T14473] Bluetooth: hci9: command 0x0406 tx timeout [ 524.594524][T14484] Bluetooth: hci5: command 0x0406 tx timeout [ 524.599264][T14473] Bluetooth: hci6: command 0x0406 tx timeout [ 524.605396][T14484] Bluetooth: hci7: command 0x0406 tx timeout [ 524.717311][T14464] hsr_slave_0: entered promiscuous mode [ 524.732043][T14464] hsr_slave_1: entered promiscuous mode [ 524.738796][T14464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.746640][T14464] Cannot create hsr debugfs directory [ 524.790049][ T5104] Bluetooth: hci17: command tx timeout [ 524.950103][ T5104] Bluetooth: hci18: command tx timeout [ 525.829648][ T5114] Bluetooth: hci19: command tx timeout [ 525.835534][ T5104] Bluetooth: hci15: command tx timeout [ 525.910158][ T5104] Bluetooth: hci16: command tx timeout [ 526.879891][ T5104] Bluetooth: hci17: command tx timeout [ 527.030027][ T5104] Bluetooth: hci18: command tx timeout [ 527.910211][ T5104] Bluetooth: hci15: command tx timeout [ 527.916132][ T5104] Bluetooth: hci19: command tx timeout [ 527.989678][ T5104] Bluetooth: hci16: command tx timeout [ 528.949963][ T5104] Bluetooth: hci17: command tx timeout [ 529.109661][ T5104] Bluetooth: hci18: command tx timeout [ 529.999665][ T5104] Bluetooth: hci19: command tx timeout [ 540.390534][ T30] INFO: task udevd:13809 blocked for more than 143 seconds. [ 540.399160][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 540.407424][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.416975][ T30] task:udevd state:D stack:21632 pid:13809 tgid:13809 ppid:4550 flags:0x00004002 [ 540.427514][ T30] Call Trace: [ 540.431008][ T30] [ 540.433993][ T30] __schedule+0x1800/0x4a60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 540.438591][ T30] ? __pfx___schedule+0x10/0x10 [ 540.443756][ T30] ? __blk_flush_plug+0x449/0x500 [ 540.448924][ T30] ? __pfx_lock_release+0x10/0x10 [ 540.457485][ T30] ? __asan_memset+0x23/0x50 [ 540.462246][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 540.468208][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 540.475498][ T30] ? schedule+0x90/0x320 [ 540.479967][ T30] schedule+0x14b/0x320 [ 540.507702][ T30] schedule_timeout+0x1be/0x310 [ 540.539491][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 540.544994][ T30] ? __pfx_process_timeout+0x10/0x10 [ 540.555371][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 540.561767][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 540.568105][ T30] ? __pfx_validate_chain+0x10/0x10 [ 540.573615][ T30] ? validate_chain+0x11e/0x5900 [ 540.578707][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 540.584421][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 540.589638][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 540.595771][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 540.602099][ T30] ? sbitmap_get+0x289/0x3f0 [ 540.606782][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 540.613066][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 540.619023][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 540.625650][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 540.632787][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 540.638133][ T30] ? __pfx___might_resched+0x10/0x10 [ 540.643612][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 540.649817][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 540.655415][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 540.660761][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 540.666121][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 540.672101][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 540.678134][ T30] ? blk_mq_submit_bio+0x127e/0x22d0 [ 540.683713][ T30] __blk_flush_plug+0x420/0x500 [ 540.688726][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 540.694179][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 540.699486][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 540.705582][ T30] __submit_bio+0x422/0x560 [ 540.710680][ T30] ? __pfx___submit_bio+0x10/0x10 [ 540.715774][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 540.722574][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 540.729248][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 540.735005][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 540.741331][ T30] ? __pfx___might_resched+0x10/0x10 [ 540.747674][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 540.754854][ T30] block_read_full_folio+0x93b/0xcd0 [ 540.760477][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 540.765908][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 540.771818][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 540.776722][ T30] ? folio_add_lru+0x357/0xd70 [ 540.781968][ T30] ? folio_add_lru+0x58f/0xd70 [ 540.786791][ T30] filemap_read_folio+0x1a0/0x790 [ 540.792079][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 540.797597][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 540.803957][ T30] ? __filemap_get_folio+0x984/0xc10 [ 540.809651][ T30] do_read_cache_folio+0x134/0x820 [ 540.814845][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 540.820787][ T30] read_part_sector+0xb3/0x330 [ 540.825797][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 540.830991][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 540.835823][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 540.841633][ T30] ? snprintf+0xda/0x120 [ 540.845934][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 540.852525][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 540.857493][ T30] ? vsnprintf+0x184/0x1da0 [ 540.862418][ T30] ? __pfx_snprintf+0x10/0x10 [ 540.867270][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 540.876490][ T30] bdev_disk_changed+0x72c/0x13d0 [ 540.882229][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 540.888493][ T30] blkdev_get_whole+0x2d2/0x450 [ 540.893523][ T30] bdev_open+0x2d4/0xc60 [ 540.897850][ T30] blkdev_open+0x3e8/0x570 [ 540.902642][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 540.908129][ T30] do_dentry_open+0x970/0x1440 [ 540.913607][ T30] vfs_open+0x3e/0x330 [ 540.917773][ T30] path_openat+0x2b3e/0x3470 [ 540.922783][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 540.928352][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 540.934169][ T30] ? __pfx_path_openat+0x10/0x10 [ 540.939197][ T30] do_filp_open+0x235/0x490 [ 540.944680][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 540.949932][ T30] ? _raw_spin_unlock+0x28/0x50 [ 540.955073][ T30] ? alloc_fd+0x5a1/0x640 [ 540.959598][ T30] do_sys_openat2+0x13e/0x1d0 [ 540.964612][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.970659][ T30] __x64_sys_openat+0x247/0x2a0 [ 540.976136][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 540.982219][ T30] ? do_syscall_64+0x100/0x230 [ 540.987746][ T30] ? do_syscall_64+0xb6/0x230 [ 540.993179][ T30] do_syscall_64+0xf3/0x230 [ 540.997753][ T30] ? clear_bhb_loop+0x35/0x90 [ 541.002883][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.010020][ T30] RIP: 0033:0x7f9cf79169a4 [ 541.014528][ T30] RSP: 002b:00007ffc7e4a1730 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.023519][ T30] RAX: ffffffffffffffda RBX: 0000557ca757ee40 RCX: 00007f9cf79169a4 [ 541.033334][ T30] RDX: 00000000000a0800 RSI: 0000557ca7568d90 RDI: 00000000ffffff9c [ 541.041754][ T30] RBP: 0000557ca7568d90 R08: 0000000000000001 R09: 7fffffffffffffff [ 541.050133][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 541.058175][ T30] R13: 0000557ca7569250 R14: 0000000000000001 R15: 0000557ca7556910 [ 541.066830][ T30] [ 541.070094][ T30] INFO: task syz.3.2849:14315 blocked for more than 144 seconds. [ 541.077853][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 541.085768][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.095673][ T30] task:syz.3.2849 state:D stack:25536 pid:14315 tgid:14314 ppid:5102 flags:0x00000004 [ 541.106320][ T30] Call Trace: [ 541.110217][ T30] [ 541.113505][ T30] __schedule+0x1800/0x4a60 [ 541.118096][ T30] ? __pfx___schedule+0x10/0x10 [ 541.123495][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.128576][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 541.134918][ T30] ? schedule+0x90/0x320 [ 541.139218][ T30] schedule+0x14b/0x320 [ 541.143697][ T30] blk_mq_freeze_queue_wait+0xff/0x190 [ 541.149295][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 541.155879][ T30] ? percpu_ref_put+0x1f/0x250 [ 541.160756][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 541.166868][ T30] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 541.173083][ T30] nbd_set_size+0xe2/0x7b0 [ 541.177545][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 541.183083][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 541.188683][ T30] ? __pfx___might_resched+0x10/0x10 [ 541.194588][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.200683][ T30] ? rcu_is_watching+0x15/0xb0 [ 541.205575][ T30] ? nla_memcpy+0x5d/0xc0 [ 541.210346][ T30] ? __asan_memcpy+0x40/0x70 [ 541.215572][ T30] ? nla_memcpy+0x8b/0xc0 [ 541.220282][ T30] nbd_genl_size_set+0x332/0x410 [ 541.225486][ T30] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 541.231227][ T30] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 541.237291][ T30] ? security_capable+0x90/0xb0 [ 541.243126][ T30] ? radix_tree_lookup+0x238/0x290 [ 541.248388][ T30] nbd_genl_reconfigure+0x4b5/0x1c40 [ 541.253834][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 541.260443][ T30] ? __nla_parse+0x40/0x60 [ 541.265103][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 541.272243][ T30] genl_rcv_msg+0xb14/0xec0 [ 541.276808][ T30] ? mark_lock+0x9a/0x350 [ 541.281382][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.286551][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 541.291765][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 541.297552][ T30] ? __pfx___might_resched+0x10/0x10 [ 541.303724][ T30] netlink_rcv_skb+0x1e3/0x430 [ 541.308556][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.313790][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.319775][ T30] genl_rcv+0x28/0x40 [ 541.324820][ T30] netlink_unicast+0x7f0/0x990 [ 541.330577][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 541.335930][ T30] ? __virt_addr_valid+0x183/0x530 [ 541.341267][ T30] ? __check_object_size+0x49c/0x900 [ 541.346767][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 541.353308][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 541.358194][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.363940][ T30] ? __import_iovec+0x536/0x820 [ 541.369846][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 541.374855][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.380310][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 541.385846][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.391676][ T30] __sock_sendmsg+0x221/0x270 [ 541.396500][ T30] ____sys_sendmsg+0x525/0x7d0 [ 541.401530][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.407610][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 541.412794][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.418527][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 541.425058][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.432068][ T30] ? do_syscall_64+0x100/0x230 [ 541.436923][ T30] ? do_syscall_64+0xb6/0x230 [ 541.441827][ T30] do_syscall_64+0xf3/0x230 [ 541.446390][ T30] ? clear_bhb_loop+0x35/0x90 [ 541.451567][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.457743][ T30] RIP: 0033:0x7f8094775b59 [ 541.462442][ T30] RSP: 002b:00007f80941ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.471222][ T30] RAX: ffffffffffffffda RBX: 00007f8094905f60 RCX: 00007f8094775b59 [ 541.479730][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000008 [ 541.487755][ T30] RBP: 00007f80947e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 541.495945][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.504076][ T30] R13: 000000000000000b R14: 00007f8094905f60 R15: 00007ffcbd4bd168 [ 541.512621][ T30] [ 541.515722][ T30] INFO: task syz.4.2850:14317 blocked for more than 144 seconds. [ 541.524583][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 541.532111][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.541293][ T30] task:syz.4.2850 state:D stack:23800 pid:14317 tgid:14316 ppid:13312 flags:0x00000004 [ 541.552146][ T30] Call Trace: [ 541.555796][ T30] [ 541.558955][ T30] __schedule+0x1800/0x4a60 [ 541.563722][ T30] ? __pfx___schedule+0x10/0x10 [ 541.569146][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.574692][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 541.580597][ T30] ? schedule+0x90/0x320 [ 541.584993][ T30] schedule+0x14b/0x320 [ 541.589287][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.595614][ T30] __mutex_lock+0x6a4/0xd70 [ 541.600849][ T30] ? __mutex_lock+0x527/0xd70 [ 541.605938][ T30] ? genl_rcv_msg+0x121/0xec0 [ 541.611605][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.616788][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 541.622958][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 541.628401][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 541.634375][ T30] ? radix_tree_lookup+0x238/0x290 [ 541.639771][ T30] genl_rcv_msg+0x121/0xec0 [ 541.644490][ T30] ? mark_lock+0x9a/0x350 [ 541.648952][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 541.654140][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.659750][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 541.664855][ T30] ? __pfx___might_resched+0x10/0x10 [ 541.671390][ T30] netlink_rcv_skb+0x1e3/0x430 [ 541.676230][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 541.681402][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.686770][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 541.692789][ T30] genl_rcv+0x28/0x40 [ 541.696936][ T30] netlink_unicast+0x7f0/0x990 [ 541.701956][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 541.708279][ T30] ? __virt_addr_valid+0x183/0x530 [ 541.715012][ T30] ? __check_object_size+0x49c/0x900 [ 541.721163][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 541.727061][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 541.732042][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.737402][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 541.742963][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.748573][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 541.755065][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.760574][ T30] __sock_sendmsg+0x221/0x270 [ 541.765318][ T30] __sys_sendto+0x3a4/0x4f0 [ 541.769990][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 541.775124][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.781576][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.787981][ T30] ? exc_page_fault+0x590/0x8c0 [ 541.793335][ T30] __x64_sys_sendto+0xde/0x100 [ 541.798197][ T30] do_syscall_64+0xf3/0x230 [ 541.803076][ T30] ? clear_bhb_loop+0x35/0x90 [ 541.807818][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.814137][ T30] RIP: 0033:0x7f8fc2b778ec [ 541.818600][ T30] RSP: 002b:00007f8fc391ded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 541.828028][ T30] RAX: ffffffffffffffda RBX: 00007f8fc391dfd0 RCX: 00007f8fc2b778ec [ 541.836344][ T30] RDX: 000000000000001c RSI: 00007f8fc391e020 RDI: 0000000000000011 [ 541.844999][ T30] RBP: 0000000000000000 R08: 00007f8fc391df24 R09: 000000000000000c [ 541.853406][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011 [ 541.861634][ T30] R13: 00007f8fc391df78 R14: 00007f8fc391e020 R15: 0000000000000000 [ 541.870077][ T30] [ 541.873158][ T30] INFO: task syz.2.2851:14321 blocked for more than 144 seconds. [ 541.881463][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 541.888784][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.897716][ T30] task:syz.2.2851 state:D stack:26784 pid:14321 tgid:14319 ppid:5108 flags:0x00000004 [ 541.908595][ T30] Call Trace: [ 541.915786][ T30] [ 541.918772][ T30] __schedule+0x1800/0x4a60 [ 541.923516][ T30] ? __pfx___schedule+0x10/0x10 [ 541.928444][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.934364][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 541.940132][ T30] ? schedule+0x90/0x320 [ 541.944876][ T30] schedule+0x14b/0x320 [ 541.949185][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.955580][ T30] __mutex_lock+0x6a4/0xd70 [ 541.960799][ T30] ? __mutex_lock+0x527/0xd70 [ 541.965802][ T30] ? genl_rcv_msg+0x121/0xec0 [ 541.970679][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.975769][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 541.981303][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 541.986743][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 541.992827][ T30] ? radix_tree_lookup+0x238/0x290 [ 541.998032][ T30] genl_rcv_msg+0x121/0xec0 [ 542.002846][ T30] ? mark_lock+0x9a/0x350 [ 542.007270][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 542.012443][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.017553][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 542.023120][ T30] ? __pfx___might_resched+0x10/0x10 [ 542.028556][ T30] netlink_rcv_skb+0x1e3/0x430 [ 542.034902][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.040160][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.045616][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 542.051652][ T30] genl_rcv+0x28/0x40 [ 542.055689][ T30] netlink_unicast+0x7f0/0x990 [ 542.060621][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 542.065948][ T30] ? __virt_addr_valid+0x183/0x530 [ 542.071864][ T30] ? __check_object_size+0x49c/0x900 [ 542.077215][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 542.082836][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 542.087675][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.093143][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 542.098141][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 542.103584][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 542.109121][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.114913][ T30] __sock_sendmsg+0x221/0x270 [ 542.119942][ T30] __sys_sendto+0x3a4/0x4f0 [ 542.124591][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 542.129758][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.136266][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.143104][ T30] ? exc_page_fault+0x590/0x8c0 [ 542.148229][ T30] __x64_sys_sendto+0xde/0x100 [ 542.153624][ T30] do_syscall_64+0xf3/0x230 [ 542.158190][ T30] ? clear_bhb_loop+0x35/0x90 [ 542.163068][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.169218][ T30] RIP: 0033:0x7f8613d778ec [ 542.174075][ T30] RSP: 002b:00007f8614bbfed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 542.183005][ T30] RAX: ffffffffffffffda RBX: 00007f8614bbffd0 RCX: 00007f8613d778ec [ 542.191374][ T30] RDX: 000000000000001c RSI: 00007f8614bc0020 RDI: 0000000000000003 [ 542.199744][ T30] RBP: 0000000000000000 R08: 00007f8614bbff24 R09: 000000000000000c [ 542.207862][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 542.216090][ T30] R13: 00007f8614bbff78 R14: 00007f8614bc0020 R15: 0000000000000000 [ 542.224560][ T30] [ 542.227742][ T30] INFO: task syz.1.2853:14323 blocked for more than 145 seconds. [ 542.236772][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 542.244257][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.253334][ T30] task:syz.1.2853 state:D stack:25264 pid:14323 tgid:14322 ppid:10457 flags:0x00000004 [ 542.264239][ T30] Call Trace: [ 542.267654][ T30] [ 542.270776][ T30] __schedule+0x1800/0x4a60 [ 542.275562][ T30] ? __pfx___schedule+0x10/0x10 [ 542.280624][ T30] ? __pfx_lock_release+0x10/0x10 [ 542.285712][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 542.291876][ T30] ? schedule+0x90/0x320 [ 542.296182][ T30] schedule+0x14b/0x320 [ 542.300765][ T30] schedule_preempt_disabled+0x13/0x30 [ 542.306306][ T30] __mutex_lock+0x6a4/0xd70 [ 542.311181][ T30] ? __mutex_lock+0x527/0xd70 [ 542.316026][ T30] ? genl_rcv_msg+0x121/0xec0 [ 542.321240][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 542.326337][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 542.331840][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 542.337556][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 542.343693][ T30] ? radix_tree_lookup+0x238/0x290 [ 542.348934][ T30] genl_rcv_msg+0x121/0xec0 [ 542.354304][ T30] ? mark_lock+0x9a/0x350 [ 542.358691][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 542.363974][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.369276][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 542.374477][ T30] ? __pfx___might_resched+0x10/0x10 [ 542.381828][ T30] netlink_rcv_skb+0x1e3/0x430 [ 542.386902][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.392782][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.398409][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 542.404282][ T30] genl_rcv+0x28/0x40 [ 542.408369][ T30] netlink_unicast+0x7f0/0x990 [ 542.413923][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 542.419541][ T30] ? __virt_addr_valid+0x183/0x530 [ 542.426061][ T30] ? __check_object_size+0x49c/0x900 [ 542.431866][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 542.437089][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 542.442752][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.448144][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 542.453261][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 542.458639][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 542.464327][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.470733][ T30] __sock_sendmsg+0x221/0x270 [ 542.475576][ T30] __sys_sendto+0x3a4/0x4f0 [ 542.480368][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 542.485685][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.492120][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.498522][ T30] ? exc_page_fault+0x590/0x8c0 [ 542.505599][ T30] __x64_sys_sendto+0xde/0x100 [ 542.510783][ T30] do_syscall_64+0xf3/0x230 [ 542.516461][ T30] ? clear_bhb_loop+0x35/0x90 [ 542.521325][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.527363][ T30] RIP: 0033:0x7f409ed778ec [ 542.532204][ T30] RSP: 002b:00007f409fafeed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 542.540810][ T30] RAX: ffffffffffffffda RBX: 00007f409fafefd0 RCX: 00007f409ed778ec [ 542.549676][ T30] RDX: 000000000000001c RSI: 00007f409faff020 RDI: 0000000000000009 [ 542.557719][ T30] RBP: 0000000000000000 R08: 00007f409fafef24 R09: 000000000000000c [ 542.566394][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 542.574813][ T30] R13: 00007f409fafef78 R14: 00007f409faff020 R15: 0000000000000000 [ 542.583093][ T30] [ 542.586220][ T30] INFO: task syz.0.2859:14343 blocked for more than 145 seconds. [ 542.594535][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 542.602002][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.611241][ T30] task:syz.0.2859 state:D stack:26784 pid:14343 tgid:14342 ppid:8768 flags:0x00000004 [ 542.622278][ T30] Call Trace: [ 542.625615][ T30] [ 542.628588][ T30] __schedule+0x1800/0x4a60 [ 542.633658][ T30] ? __pfx___schedule+0x10/0x10 [ 542.638745][ T30] ? __pfx_lock_release+0x10/0x10 [ 542.643994][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 542.650367][ T30] ? schedule+0x90/0x320 [ 542.655035][ T30] schedule+0x14b/0x320 [ 542.659246][ T30] schedule_preempt_disabled+0x13/0x30 [ 542.664912][ T30] __mutex_lock+0x6a4/0xd70 [ 542.669642][ T30] ? __mutex_lock+0x527/0xd70 [ 542.674482][ T30] ? genl_rcv_msg+0x121/0xec0 [ 542.679217][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 542.684969][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 542.690312][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 542.696445][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 542.702528][ T30] ? radix_tree_lookup+0x238/0x290 [ 542.708923][ T30] genl_rcv_msg+0x121/0xec0 [ 542.714260][ T30] ? mark_lock+0x9a/0x350 [ 542.718654][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 542.723826][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.728937][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 542.734348][ T30] ? __pfx___might_resched+0x10/0x10 [ 542.740115][ T30] netlink_rcv_skb+0x1e3/0x430 [ 542.744938][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.750707][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.756800][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 542.762760][ T30] genl_rcv+0x28/0x40 [ 542.766829][ T30] netlink_unicast+0x7f0/0x990 [ 542.772054][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 542.777409][ T30] ? __virt_addr_valid+0x183/0x530 [ 542.782736][ T30] ? __check_object_size+0x49c/0x900 [ 542.788076][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 542.793709][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 542.798611][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.805197][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 542.811060][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 542.816580][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 542.822253][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.827592][ T30] __sock_sendmsg+0x221/0x270 [ 542.832783][ T30] __sys_sendto+0x3a4/0x4f0 [ 542.837371][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 542.843023][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 542.849999][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 542.858597][ T30] ? exc_page_fault+0x590/0x8c0 [ 542.863958][ T30] __x64_sys_sendto+0xde/0x100 [ 542.868788][ T30] do_syscall_64+0xf3/0x230 [ 542.873693][ T30] ? clear_bhb_loop+0x35/0x90 [ 542.878436][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.884533][ T30] RIP: 0033:0x7f681ed778ec [ 542.889689][ T30] RSP: 002b:00007f681fb4bed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 542.899626][ T30] RAX: ffffffffffffffda RBX: 00007f681fb4bfd0 RCX: 00007f681ed778ec [ 542.907928][ T30] RDX: 000000000000001c RSI: 00007f681fb4c020 RDI: 0000000000000003 [ 542.916115][ T30] RBP: 0000000000000000 R08: 00007f681fb4bf24 R09: 000000000000000c [ 542.924570][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 542.932857][ T30] R13: 00007f681fb4bf78 R14: 00007f681fb4c020 R15: 0000000000000000 [ 542.941550][ T30] [ 542.944685][ T30] [ 542.944685][ T30] Showing all locks held in the system: [ 542.961281][ T30] 2 locks held by ksoftirqd/0/16: [ 542.962493][ T5212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.968464][ T30] #0: ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 542.990650][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 543.003653][ T30] 1 lock held by khungtaskd/30: [ 543.009168][ T30] #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 543.020329][ T30] 2 locks held by getty/4854: [ 543.025357][ T30] #0: ffff88807d0100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 543.035423][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 543.046026][ T30] 5 locks held by kworker/0:6/5186: [ 543.052013][ T30] #0: ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 543.063232][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 543.075136][ T30] #2: ffffffff8e336040 (rcu_read_lock_bh){....}-{1:2}, at: wg_packet_tx_worker+0x25f/0x810 [ 543.086403][ T30] #3: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ip6_input_finish+0xdc/0x2d0 [ 543.097305][ T30] #4: ffffffff8e336040 (rcu_read_lock_bh){....}-{1:2}, at: wg_packet_receive+0x11f3/0x2570 [ 543.107732][ T30] 2 locks held by kworker/u8:30/5227: [ 543.113738][ T30] 3 locks held by udevd/13809: [ 543.118545][ T30] #0: ffff888078e314c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 543.128076][ T30] #1: ffff88807b164d90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 543.137775][ T30] #2: ffff88806ba38180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 543.147878][ T30] 3 locks held by syz.3.2849/14315: [ 543.153349][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.162845][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.172829][ T30] #2: ffff88801ea22198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_genl_reconfigure+0x42d/0x1c40 [ 543.183621][ T30] 2 locks held by syz.4.2850/14317: [ 543.188861][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.197690][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.207428][ T30] 2 locks held by syz.2.2851/14321: [ 543.212893][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.221423][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.231087][ T30] 2 locks held by syz.1.2853/14323: [ 543.236421][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.244924][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.254108][ T30] 2 locks held by syz.0.2859/14343: [ 543.259744][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.268593][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.277991][ T30] 2 locks held by syz-executor/14349: [ 543.283900][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.292620][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.302080][ T30] 2 locks held by syz-executor/14351: [ 543.307587][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.316441][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.326047][ T30] 2 locks held by syz-executor/14354: [ 543.331577][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.340039][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.350211][ T30] 2 locks held by syz-executor/14356: [ 543.355655][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.364726][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.373850][ T30] 2 locks held by syz-executor/14368: [ 543.379270][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.388839][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.399910][ T30] 2 locks held by syz-executor/14393: [ 543.406313][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.415512][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.425023][ T30] 2 locks held by syz-executor/14395: [ 543.431225][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.440161][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.449274][ T30] 2 locks held by syz-executor/14412: [ 543.454836][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.463266][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.473436][ T30] 2 locks held by syz-executor/14414: [ 543.478946][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.488139][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.497936][ T30] 2 locks held by syz-executor/14418: [ 543.503749][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.512444][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.521651][ T30] 2 locks held by syz-executor/14439: [ 543.527060][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.536016][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.547445][ T30] 2 locks held by syz-executor/14441: [ 543.553003][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.562137][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.572510][ T30] 2 locks held by syz-executor/14456: [ 543.578804][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.587626][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.597202][ T30] 2 locks held by syz-executor/14459: [ 543.602777][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.611239][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.621088][ T30] 2 locks held by syz-executor/14464: [ 543.626842][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 543.635918][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 543.645293][ T30] [ 543.647655][ T30] ============================================= [ 543.647655][ T30] [ 543.656682][ T30] NMI backtrace for cpu 1 [ 543.661128][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 543.670704][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 543.681665][ T30] Call Trace: [ 543.684954][ T30] [ 543.687911][ T30] dump_stack_lvl+0x241/0x360 [ 543.692612][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.697823][ T30] ? __pfx__printk+0x10/0x10 [ 543.702452][ T30] ? vprintk_emit+0x631/0x770 [ 543.707157][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 543.712210][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 543.717264][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 543.724074][ T30] ? _printk+0xd5/0x120 [ 543.728257][ T30] ? __pfx__printk+0x10/0x10 [ 543.733124][ T30] ? __wake_up_klogd+0xcc/0x110 [ 543.738182][ T30] ? __pfx__printk+0x10/0x10 [ 543.742786][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 543.747840][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 543.753954][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 543.760133][ T30] watchdog+0xfde/0x1020 [ 543.764481][ T30] ? watchdog+0x1ea/0x1020 [ 543.769061][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.773772][ T30] kthread+0x2f0/0x390 [ 543.777866][ T30] ? __pfx_watchdog+0x10/0x10 [ 543.782560][ T30] ? __pfx_kthread+0x10/0x10 [ 543.787172][ T30] ret_from_fork+0x4b/0x80 [ 543.791607][ T30] ? __pfx_kthread+0x10/0x10 [ 543.796215][ T30] ret_from_fork_asm+0x1a/0x30 [ 543.801022][ T30] [ 543.805516][ T30] Sending NMI from CPU 1 to CPUs 0: [ 543.811148][ C0] NMI backtrace for cpu 0 [ 543.811163][ C0] CPU: 0 PID: 5209 Comm: kworker/u8:18 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 543.811182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 543.811194][ C0] Workqueue: bat_events batadv_nc_worker [ 543.811226][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 543.811251][ C0] Code: e8 65 5b 6d 03 eb 80 e8 ce 8d 0f 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 28 5b 87 7e e8 fb ab 0f 0a 89 [ 543.811266][ C0] RSP: 0018:ffffc900045afb50 EFLAGS: 00000202 [ 543.811288][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff8880183c9e00 [ 543.811300][ C0] RDX: ffff8880183c9e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 543.811311][ C0] RBP: 0000000000000000 R08: ffffffff8b5689de R09: 1ffffffff25f9eb8 [ 543.811324][ C0] R10: dffffc0000000000 R11: fffffbfff25f9eb9 R12: ffff888022c7ccc0 [ 543.811338][ C0] R13: 000000000000002c R14: ffff88801f3e94c0 R15: dffffc0000000000 [ 543.811350][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 543.811365][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.811378][ C0] CR2: 0000559d75ebb208 CR3: 000000000e134000 CR4: 00000000003506f0 [ 543.811393][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.811403][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.811414][ C0] Call Trace: [ 543.811421][ C0] [ 543.811435][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 543.811459][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 543.811483][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 543.811504][ C0] ? nmi_handle+0x2a/0x5a0 [ 543.811531][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 543.811553][ C0] ? nmi_handle+0x14f/0x5a0 [ 543.811569][ C0] ? nmi_handle+0x2a/0x5a0 [ 543.811587][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 543.811608][ C0] ? default_do_nmi+0x63/0x160 [ 543.811631][ C0] ? exc_nmi+0x123/0x1f0 [ 543.811654][ C0] ? end_repeat_nmi+0xf/0x53 [ 543.811679][ C0] ? batadv_nc_worker+0x1fe/0x610 [ 543.811706][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 543.811728][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 543.811751][ C0] ? __pfx_rcu_is_watching+0x10/0x10 [ 543.811773][ C0] [ 543.811778][ C0] [ 543.811784][ C0] batadv_nc_worker+0x207/0x610 [ 543.811810][ C0] ? batadv_nc_worker+0xcb/0x610 [ 543.811837][ C0] ? process_scheduled_works+0x945/0x1830 [ 543.811857][ C0] process_scheduled_works+0xa2c/0x1830 [ 543.811894][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 543.811920][ C0] ? assign_work+0x364/0x3d0 [ 543.811942][ C0] worker_thread+0x86d/0xd40 [ 543.811972][ C0] ? __kthread_parkme+0x169/0x1d0 [ 543.811995][ C0] ? __pfx_worker_thread+0x10/0x10 [ 543.812020][ C0] kthread+0x2f0/0x390 [ 543.812044][ C0] ? __pfx_worker_thread+0x10/0x10 [ 543.812064][ C0] ? __pfx_kthread+0x10/0x10 [ 543.812087][ C0] ret_from_fork+0x4b/0x80 [ 543.812111][ C0] ? __pfx_kthread+0x10/0x10 [ 543.812134][ C0] ret_from_fork_asm+0x1a/0x30 [ 543.812169][ C0] [ 543.813738][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 544.133521][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 544.143095][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 544.154655][ T30] Call Trace: [ 544.157960][ T30] [ 544.161170][ T30] dump_stack_lvl+0x241/0x360 [ 544.165985][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.171301][ T30] ? __pfx__printk+0x10/0x10 [ 544.175931][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 544.182046][ T30] ? vscnprintf+0x5d/0x90 [ 544.186415][ T30] panic+0x349/0x860 [ 544.190346][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 544.196554][ T30] ? __pfx_panic+0x10/0x10 [ 544.201050][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 544.206441][ T30] ? __irq_work_queue_local+0x137/0x410 [ 544.211999][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 544.217376][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 544.223559][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 544.229766][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 544.235964][ T30] watchdog+0x101d/0x1020 [ 544.240511][ T30] ? watchdog+0x1ea/0x1020 [ 544.244967][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.249673][ T30] kthread+0x2f0/0x390 [ 544.253753][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.258431][ T30] ? __pfx_kthread+0x10/0x10 [ 544.263031][ T30] ret_from_fork+0x4b/0x80 [ 544.267458][ T30] ? __pfx_kthread+0x10/0x10 [ 544.272073][ T30] ret_from_fork_asm+0x1a/0x30 [ 544.276929][ T30] [ 544.280228][ T30] Kernel Offset: disabled [ 544.284572][ T30] Rebooting in 86400 seconds..