last executing test programs: 1m12.256996854s ago: executing program 3 (id=1059): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 59.047422793s ago: executing program 3 (id=1059): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 45.459743647s ago: executing program 3 (id=1059): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 30.443400203s ago: executing program 3 (id=1059): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 16.63996609s ago: executing program 3 (id=1059): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.291661207s ago: executing program 2 (id=1690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="310c00000000000000008900000008000300", @ANYBLOB="2621e6b36710b8c9c66f6228ea893f66dbc1", @ANYBLOB="18001d801400008006000500e800000005000700bb000000", @ANYRES64=r5, @ANYRESHEX=r0], 0x34}}, 0x0) 3.004051371s ago: executing program 1 (id=1691): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2000000}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="01fadc2602c776d617257db5939d145814dcfdb11448362f2aeb6a578ca143e3c6c3f3260596a730970ac98b9f935d84fd22e4d8772c4fa662a14ca1c6e7ff663ebf3f1aeefc4337079b381f5152708a2adb8301f2c903d3e9725793a757918a1fef0f0691366d38b3d41f35134c5e", @ANYRES32=r2, @ANYRES32=r1], 0x70}}, 0x4008040) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r4, 0x114, 0x271d, 0x0, 0x20000008) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{r3}, 0x0, 0x1e, @unused=[0x72, 0x3ff, 0x81, 0xffffffff], @subvolid}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @any, 0x7, 0x2}, 0xe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b00)="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", 0x137}, {&(0x7f0000001c80)="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", 0x472}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r10, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r8, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "1a41f9992f060760b56fb56e78b50270f8588cdb93dab021f811cdd27f9112d690797ed4779c6441d4e1649fe81a6b0c37525f69f4ac47e6c91800ba514ee65eb17ea4"}, 0x4e) sendmsg$tipc(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000300)={0x4, 0x7fffffffffffffff}) r11 = accept4(r5, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_tcp_int(r11, 0x6, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2.998254111s ago: executing program 0 (id=1692): epoll_create1(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e1c}]}, 0x2c}}, 0x0) 2.962981555s ago: executing program 3 (id=1059): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.917151724s ago: executing program 0 (id=1693): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x6a, 0x0, 0x1}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x46}, 0x20) r5 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x6, 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x228, 0x1, 0x3, 0x201, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFQA_EXP={0x194, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7f}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}]}, @CTA_EXPECT_MASTER={0xc8, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x1}}, @NFQA_PAYLOAD={0x14, 0xa, "76e4390dfbae3e59a217e4a44ec2eb2c"}, @NFQA_CT={0x1c, 0xb, 0x0, 0x1, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xf8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFQA_EXP={0x20, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}]}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8001}]}, 0x228}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad0000000000000000", 0x9) write$binfmt_misc(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00\a'], 0xd) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) getuid() r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r9, r4, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000380)="b1af58c9d8292c4d082bc8892895d649ddec0ef5b9474d2cb5be5d38c1a4a8c9f654ed56cdd84e2fe2e1c53bedcce809d90cc2e97d22799a4797c5cbc789b5634c791d4577c0f62cdabad4fb31", &(0x7f0000000400)=""/164}, 0x20) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001d0000000000000007000000a08c327345d04eb2e00b811d", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) 1.916718303s ago: executing program 1 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x15}]}, @TCA_NETEM_RATE64={0xc}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_ECN={0x8}]}}}, @qdisc_kind_options=@q_ingress]}, 0xb4}}, 0x0) 1.914814616s ago: executing program 2 (id=1695): socket$can_raw(0x1d, 0x3, 0x1) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0x8001) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x4) 1.706889818s ago: executing program 1 (id=1697): socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='\x00', 0x0, 0x18}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xfffffe40, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xf6, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0xffffffffffffff48, &(0x7f00000001c0), &(0x7f0000000440), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x5}, 0x90) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.647723176s ago: executing program 2 (id=1698): ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000000)=@null) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)="4180e70008a10a83febfe5d50e31e3163139bf4233ee19fde8447fc4d4779b75a81f44738d29e33cda5e212b4f0d65decc98ad39752c0e0044b6a3801a23690314bb30255934b98d23490b3c7f058c0b64", 0x51, 0x4000010, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff1}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x2, 0x1, 0x3, 0xd, 0x8, 0xecfb}, &(0x7f0000000140)=0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1298008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xa, 0x7}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8801}, 0x4004) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0xe, '\x00', 0x0, r6, 0x2, 0x4, 0x5}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0xe, 0x207, 0xb3000000, 0xfffff800, 0x0}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000005c0)={r7, 0x1000, "e7aadef4f6261c3f03b08039cc39f03f36ea43b2eb03355adb88668dfc4e744c846ecf873747a87e76717e8d147544f0b0ce76882f85229d1052663de2c33e66a53c6f7409fe4248139ba826136ad588644950d42803ae0abdcd01962fc888126d1139395517611572e2c1eec939653d99e630633a9b56cc70f829b028467d35b8dd558929d7244e230b428ea141f579938306b96d535520f6713c85ac2534b07793ae69e6116d0b5e6cd20f541f32b6bdf4f83b85c8844e9390ce86f5665627e978582575580fa1190773a0d463b09bb22b49e3e42c308f192c5254e4ed7354046a219e480ca63474e680242e7e933196f54af24b4a31a2099f30d5fd6ae07124e10b659a1b2aa186b3b2b14a8cd62a0700da09525a9cfa383385693973187eeb35f1a147cf3b303f390e8cb7e0d390f8bac2642a6222428bcb3a20e82349cad4a0759500f6713b2f6cd28d95aa0f2c8577fdc060227d97cc26aedf264ed2f0a7fae87fe4ad3b4a4f1b246af836ca64c2156e2b1a64a6b843bf755032b14829312356d0afc87bc61c7ba22dac5bfda0a745a2d4069c732580a1fe67f19c7c5b8d8c4de83d2804bd44bf0756d44a6737e96c32224ae160e6c9387ada4f38845f59fde58955d233ef6ce015ccb841da560cc379dbe7c8d10d154053dde26099f2ab87fcb1f7e403ce525610b31316a32fafa711453fc186c76d5bf5b7eeb7aefcf50f1045eb1bdf058e2a15a81807f9391e558b54b87cb03cae6fc13f1e3c9aa7ee447058d192fe5c845772c7335a30b15ee4ec9052ddd3d1b5f215b200736e0e4d74a5e05a7a4decca03eb8c6db0fd73a9c7a88aa9ff7911e137d96de0f48ef6d6646bf4e67d6181484c607a18168e09dbebacd382190717d3b5a921b96d824ed3929ca672c2e31d29c24c8ac677a2f9f7a7ac8555d2668c1983b984f0eac1a3dc17baabd348e586c028c812d2c724e0a5dd6075ecec33c18a4656361e5c5cd44823a58839acf7d3c98b274313b4761e458a611f24ac9fa3e796903e1236779233624ca2b30c16f41857cff41ed7d92c75b24169054c05f93f8fdcbdd848c61ac35e10f856accce434406a49d6216d6bf1ee4a960e6f6a73955db10a0e6f2ee3b2777b01adc81eca44220f96a2ced74cd23828558502211889d6ab57b4a7af351b8083349df81148b83516443194a504039766f02a8b1d568bfad9e8f64e212255b52c43a5d3a1ffc594e923f9b61f95f6b16ebd4f83779ab4cdb599ee31947a3fcc8cf3a3be4a4750e14260018cfd7b0996f6c70895056ee864e235ad0f42779a6d3cad7bc60d95f8ec114f2f0016471adad71ace51e0b1ad6f08ee60a5b8ccda8d5c4523283682ddafb04e6de9c11feab74ebfede0643b933fdc5af55cdda7429b5a11e8a073bb1f89c33d9910d61ed8d636533f2731979617bfc0909a3267b9c29b7e920a0a49b946e6b1073f7fb087f6805adab693961dae1bb9825b80c769d677a069425fd753ab29694ce8c53aa72b5363c97ed5330a97fff1f63cc183d3cfea203988d0746f9a89bf6d58d75fdc2dc5c2f624c07fa3aeed05fbdf909b1414dd520c0990ac80a0a2f2efef884078e00ae5bf56104f6f86d3075f935d0eda670a3f4f4ddffbf22794e9f41fe2f35f2b5ddfd07690ff39669443d46f9b4aefae7650425581cf71d3f050e5aa83eb3e42f7e6adf5d7eeccd159f143bef6edac85cfbe9730d228fd0ee92105efae93b88760df5e2a3f093886d06abcef3895b1865dc182d0fd8dfedfc9a2d29855d54fee21afe34e2c8c3fd80eb4275bb3b33692820a9b24adf2c05e299188b57bd8441938876ac6cc948f0f7d050e6314c8d32c7eba06d28a5c2245f22e6df979c651caf69c4d08e5476de4e93ca0c37bf99cf4ce066fe072ee8bda8b1ec9d06836351538ef6d3f820f044c57620834739abdec261b6fc309f4bf0df7c327684b81895faaecc2767c260932abb1611dd23ab7f3e1b7addd2154727f1d75d637e0304602bc8f42716668d29e7e4990a354fd73e260fbd8e2bf483550aac5d779749ee2569fa0dc5fac0dc94bbbe79e07cdd8a16b869dba4ef59d83b6f453a76353ed9f1a431e410fcb87f5b3a7d8529a69ed60457a039ea9728feb7be6d2f7b96b412ba74e6557873fe6f2e11577b2140fef428c9c9d76f0e3247950283eb43ea2ce8e0dac505c7bd55b61c84c8a3740825565a15f5bafa049a944405eeaeecf83ff7f22ec6b9b6a0d1d9bfea0e88b4aa0bb62acdbde3cc0c404d13121834c77e253d0d3470d2da07808054a9a1bb9fc3721f9d093cbf977883c56eafd5ea287e4fa903e4700d2025a27a3dac77a1fa830b45801ff142e224dd0d1339cf79a275779650a56ab3582112ceb717114b197bab4ff3022f61812e6d6035b5deba26702312b38a4561f986162f62255a6a5681588b2bfa8abaa6d0c2dae6c3daad7264745b9ab5046f3ca9e642356bd53e705712d55aa5a936c210bbdae8a9c9bf7348dc819bd244b7a2ea8abf67fbeba4292045bf0a2f890bbd957b0b9e331fb2236ff4d32397349924edfb0f5d2426cfcab2c4e535dcc44802ea4d3694be95279e5d43adcc681be86eeaa822f15ab1ada26653486dde36f3c99f80bfd65a17280e020f0aa845bbe2c684d03dde0e549deff2a18e652dee332db9238672fdc22d134d47c3b3257fe92c60c184bd3ef0cc2b750b7260ff94dd25c5f7c6c95093473996e817f4e9e4c1c1369bbb4bb6f3cbb1521f46d3311c68ba8709c06768f3ae41aceefc9382090359a21ea225abe65201501c01d51531419298d2170eee67d0ff0e99ee85dac6b212694155f591e9ec7aa61ff389b63fd23151f10e441cb938bc736b83012399c05d28add5b2cd42c3f4b3200aa79b9fd2e3977ddfca1459534b730e6b18f42d5f067e621fc75cad002ef0fa1b9b8d62d9787eb6266ea25eacf5099cb69977b0e544cb6998711233cece3d3348057ca1f67f87e95fd16e8a2d4466790dcd4433bf67b7febec13dc54868fd0627d4721d2af108dc654051e998880cdb82692a33a5f0837f401b3ba136353893a1e9a8e079fdb6f5059aabedddc45b6d0d9127b95b8e07afb7b0d7d947f1455d12d5b2ddb0de0183becd53ebbb39d69f1c8b5413f6603b176e7a19248361c3bc7bf5d031a07bed777d420b860ed040f92ff64522516735031fc376905253fa542a0e771da8d6ff66548fb51b8c51f23c60a8f46998035410a8155557d2a457c35e8530852aeeba88d39b9187694427c5e394fcfd9958f9c6eff5247eafe4940e3a65a3bed42fc94948d391fa2f74a34c94d09fecaf835ec0fb8243e0def417dee76c32ae72f5f09642423ad1a707aacecf2a5a3454e0fa47515bcd12a34d8a15833d565fe144e2c39ce1d0ffe8a86dd029cf090b4208fc0839996711b45b4cf2115f2d7236903dba03feb0634f9378e66009f5815f6495e9f6504c59903417a3cadbd81b72eb1eb78601c7ffe759f05ff5589195a445ae4f51bd11f1cbbdeb54f43a698731bf93c18a6c3c3637d0b9976fa175b96e013d7234bc42c7b173ebc35a2f8b2258276f0bdc6056bdc9e93c124913f348deef62aab21b7370dcee71491fa1c55d241f0d14881118f3997f834456d08e33eedd0d6cbe7f81f388b95039aaf8c63e90223b10c5de5cf56dae7e8284052c55d14d612f3eeabd7e74c58496d64b00722e01745d05084b7c9d525f9ae00b0602fbab93d6591f850ec66a37b5665aba2d17ec5eca0165a5105e165bf53e776aa5565fa6f28ae99ee11ed9a2796bb731d273b0cf2276ebf80416bde8038b891002c701f9d62b26327f217cd6b0ebecbbebf0e75df5cb54da799df6bd25710f0f87833ae9cd88c3d71068d45028246765cc96ad12138fb3a6ba79d8896dce2e6e1f87b52ee3dcc60d727b60745b711891ffa724f6430cd0aa108c1cd0e95481e8d6b05fd716bca449aebf1f365ef7fbe1a416e063216815f73ebaa37d8dc473b5bbcd6f267b9e9145ac656d3c0f4a37123ebfcc448aaeba0580d3c9a2802ff02b27a5d5254ad43c6ebf496802a8910b12c52cc0b3c5bef40649d07701e54fcab4988572222c726a502e20e515be20109020f1b6346771fa96ee42fe301b4a6358438611b34ecf25d454f4f224865ad2263ed52fa8ffd61ce3ce55c226374a0ba3e155d281bab4baccc7082e9ccf6fce378308b7a84c1865f7e986dc3b95eb461100dceb2eaf4188678dc7281c3052c76ef0cc75fe76bf59b3bfb8c6a489e73d72a7c592b55bace6c55b05b6caaaccfba0a4afb57f32d29d294d15e456e4656699e1544d0eeca3593a3a5493c0abb53cad6bc1cf075d2884a42108af6f3ba7999195f9c52fb4de8a07b2ec960871c83e0ae77b6120b0d7cad77d7d1ef4abb0cfe0703fed4e7936f171c704bf9d0cbfab12735f04d0f1bb3afa3898857a4bbc8443f1b49f7b65d13264d32841b021970527d8b78296aa3d9b5df9adb4397c8ebe548f0dff12e2e6f3ee1f97a327db1410a1e865b122791d1c1b42037374a89b8738077c465ee7ea839b5883da68fc725a8dc1e2da3f96c300376a1967c97cda65c1333e9c9df15b9d64ce43be81a1f0a56328fd3bb53004f6a8c5a4132d4ab7bd7cc550736879505e4ad2995b401041191ff66894b53c3794faec18edca5633ed0e67b6a99b9a59150c5ac9eca532c111528ac8b232ca418dd2c83111b931aac4b43096ab9c8020ff950d0558c793a31d5638430bd8af687534719b7603c6a0364d82ac9a450d76d54d42edf17a65b442bf979526304b59e111fdd3e598e19e9881d2c3262b9da604e9a947ded46247ae386ad217b0d37bd8612f86a5cf84954cc0f537ee0e253b8337c356e9c383a3a0ed045b4279c1acfc84b1e94a3347db3f3857bd9afc06b57bdb64aa062c05a3ae5c54c8200c0ddbe0dd6bdf85cfa8c726e3034404f6a1f1132e585f2f15e99d7a96b2e963040febe27bb7bc83c9cc1548e8e93aa07a8465e94badb7c8a9781cedec41e4f9633e96441c9094bf829a2be4fa65c8fa5f69e6f45bf30aa5bd2a147b70072f5ee5a40040fe8326f5829078d2222f75f7518442b90b99f04d520c0909b580a695124be9d4af5dd3b9e2bec115b52bcb086785963dd03a385610d0b240dafd481bcd279aa022633734d5dfdc4e2413d4a412d3a4842b669194815e2e3c044391da8344124a35e258b71a7bfbd944223ff1dc9f6d739b4db58f1797c290343c66689ed5f002f0b4d24b85744394111ce199cbb0b31eb389717646e2f2fda2876c9e8cb741afa463ea2451e899f7a000f43385ed3040b3f5bd9fa756adff0f9a95eaaf344d5f0cdc0c889ba497e1f994b20c55fb03da02135ae46eddecc7315eaa6d2987a0813b4f113c71350f44e5588833d15dc221ac907afdbc04e4a9b6ed4ff881126a1e5e755ad422979fd5aeaea3cd403131751f3231b8a77335ec0b2f5b3b27668aeb8ebfad1d8809b975cf06041f0e72aa24a738b913ca23c7d10c2db080349f1a8119e927f2ac54bdc0b88196d3b6263ca70aec4fec7796f12ed8fcc6076e6451775c5c884ad63c12e27c9aff3e5aa433b7473b4b104abd894211873e18a1350491f526c3c955b7ce0022d0c6ab7615bb4d55eea65cb139b7032bb64321e51591c51c876f0a67d58b84c075bd882c22bc2b58fc42be869986c2627218b51701b591604a9b8d243ca37ee44778941feab7751263b5d00c4f4574e644d73bcdf2e7889bfb5d9e2c3a0d151efee99673df037be5d5554d4214e"}, &(0x7f0000001600)=0x1008) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x3}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x5262b3ca339541ce) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001740)={r3}) accept4$bt_l2cap(r8, &(0x7f0000001780)={0x1f, 0x0, @fixed}, &(0x7f00000017c0)=0xe, 0x0) ioctl$FICLONE(r5, 0x40049409, r8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000002d80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d40)={&(0x7f0000001840)={0x1500, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80}, @ETHTOOL_A_LINKMODES_OURS={0x208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&@}\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1efe}]}]}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "9126439e1ebdf08b17cac966edc7b9530bdb92b766d7bea8955a2dc8442b98a1b8e169c9c1cbe6a31e4006504ce67323e842479101bbe3ebf5196ecdf7c2e6cc424b8c89cce0410293957d8b13aa43ea2ba0fb7b0c9e0699b132dac50d7dd07b8ca4700e619b3f9022c7b689e2ac7909ad50ff5b41d58c1fe1ac3d4845232bb252a59167a77a2ef1f6ad2f6ffb861f6262d354d3396e04160650b52ff1cd4f9c3b88e463e327117d97a0cb3f8255a03b9a909e0d7b4228e8030bcae7f057553080037135e3d20c8300a34c36682fae6f57c226ce3962a53427f6"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':@+!.]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x690e21f1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0x12d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8e6b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\'\xf9]$@\\-!*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!$*\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\\#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xf3}@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x4}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '{X-+{;$[/@1\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4c6}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "b67a2103d47b98a0c9bd486419d06aadff06ec50326566d057fdafd69ac7cb9d4e43fcfdfcf6f3c8db55745ee9822b8bcec0d97df5578bc3e53dda9ba692c60392761ce249050ab31080e4695986721f6cebb9a45483ba181b6cdd62456460d7a76819b08406c1a9c7011fdcd5dc6e2aadad196699eb6760ea8a173232df557b62875616f9e68a1e18c26ec2393e1f79fc44197b209965333039a0898d44e3b88683fa22"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x1500}, 0x1, 0x0, 0x0, 0xc000090}, 0x40001) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r8) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x1410}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x5c, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x951}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xd6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x56}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x33}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002f80), r8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x40, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4ddb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000030c0), r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003180)={r5, 0x58, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000031c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003280)={'syztnl2\x00', &(0x7f0000003200)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0xc5, 0x7, 0xc, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000003880)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003840)={&(0x7f0000003500)={0x340, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x43, 0x5, "9ccf05c5af9124c1c5c240b4d11fbe2483d6f68731a804623055134b6b4304456a235f3403f1ed6c749808401b0a2c6e48771250807e633b6fab82bb301bd1"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&)\x92{:$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '--\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7392}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x89, 0x5, "54410f0bb74897820f0acb9fb89a915edc01717d0ebd7490c6b038f2ac4a4140ed05a936798220260668519e8638886bdf9b33cd007bb44cf142017df75d4ed4f0bdde582730c730a409cb1c7b3e4a1270bccd887cb8c2ff0c077903767bc97d89fa321ba63363325c2bf0e452f9b4a73593bd68fc92b9e3ccf0ad9905eb60726e376faa35"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000000) 1.471540245s ago: executing program 0 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="080005251ea2401cee8f9a7be51f5019c10002000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="100000000100000002000000"], 0x10}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001080)=@security={'security\x00', 0x4, 0x4, 0x3f0, 0xffffffff, 0x0, 0x0, 0x1e0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xffffff00], [], 'bridge_slave_1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010102, [0x0, 0x0, 0xffffff00, 0xff], 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x1, 0x81, 0x5, 0x4, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9}}}, {{@ipv6={@private1, @mcast1, [0xff], [], 'geneve1\x00', 'macvlan0\x00', {}, {}, 0x62}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@ipv6header={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="09000000833ebc74da5de8dbc3b35e32836f7696e8edd44d2c9b991d93ebd4c6b4618a838b71c8e78fe41c6ef91bb4b945b7ebb8805574adc5232a257e9aa4a54aa58c0b7ea9d6a249a132109e50cdffec2170f0bd45bf81c83faeb22066839e1c1c79d2ebd7", @ANYRES16=r1, @ANYBLOB="20002cbd7000fbdbdf251d0000000c009900010000006100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) connect$netrom(r4, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x81764109abc7f5ee, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0xca8, 0x10001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x4) 1.437175567s ago: executing program 4 (id=1700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x3, 0x10000}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) unshare(0x2c020400) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80cadce98420c622, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r3, 0x40047440, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 1.215939227s ago: executing program 1 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @rand_addr=0x640100ff}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6c, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000d00)=0x84) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000400)=""/163, &(0x7f0000000100)=0xa3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 1.203734809s ago: executing program 0 (id=1702): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a3f000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) 1.160257396s ago: executing program 4 (id=1703): epoll_create1(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e1c}]}, 0x2c}}, 0x0) 1.108707815s ago: executing program 4 (id=1704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf100}, 0x90) 1.00639048s ago: executing program 4 (id=1705): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) (async) r2 = socket$inet(0x2, 0x4, 0x3) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x30]}}, &(0x7f0000000640)=""/4096, 0x1c, 0x1000, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="181000000000000000000000000000007112350000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000), 0x4) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, &(0x7f0000000440)) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/132, 0x84}}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_int(r5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110510", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207d1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000001600030006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x1e, &(0x7f0000001640)=ANY=[@ANYBLOB="180300084049d0395ee7d4000800000000ef5bed88c4529bf0000000", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x100, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x2, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0xffff, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x7, &(0x7f0000000700)=[r5, r6], &(0x7f0000000740)=[{0x5, 0x2, 0x0, 0xa}, {0x5, 0x5, 0x3, 0x4}, {0x1, 0x5, 0x3, 0xa}, {0x1, 0x1, 0xc, 0x9}, {0x4, 0x5, 0xb}, {0x3, 0x5, 0x8, 0x6}, {0x5, 0x5, 0x6, 0x9}], 0x10, 0x1ff}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x7ff, 0x8}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 714.316814ms ago: executing program 0 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) socket(0x200000000000011, 0x3, 0x0) (async) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2, 0x2, 0x8, 0x88, 0x400, {0x0, @in6={{0xa, 0x4e20, 0x81, @private2, 0x6}}, 0x3, 0x200, 0x4, 0x0, 0x1ff}}, &(0x7f0000000440)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000480)={r5, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x7, 0x1f, 0x71, 0x80000000}, &(0x7f0000000540)=0x98) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@dev, @empty, 0x0}, &(0x7f0000000300)=0xc) sendmmsg$inet(r3, &(0x7f0000003f80)=[{{0x0, 0x22, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x0, 0x0, 0x7, {[@generic={0x44, 0x0, "42b2b2363e"}]}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r6, @local, @remote}}}], 0x10}}], 0x1, 0x4000855) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x40, 0x3, 0x42, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', 0x8, 0x10, 0x800, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x40, 0x3, 0x42, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', 0x8, 0x10, 0x800, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000000000)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=@newnexthop={0x88, 0x68, 0x200, 0x6, 0x25dfdbfc, {0x0, 0x0, 0x2, 0x0, 0x5}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_ENCAP_TYPE={0x6}, @NHA_GROUP={0x34, 0x2, [{0x2, 0x7f}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0xffffffff, 0x3}, {0x2, 0x6}]}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r9}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048084}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r12}, 0x14) getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000000)=0x14) (async) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x48}}, 0x0) 694.542636ms ago: executing program 2 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE64={0xc}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xac}}, 0x0) 246.108117ms ago: executing program 2 (id=1708): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="00000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="e800000012000b3600000000000000007874732d63617374362d61767800"/91], 0xe8}}, 0x0) 204.290411ms ago: executing program 4 (id=1709): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000009030049ea000010000"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001400e9990000000003000000fc000000000000000000000000000000fc000000000000000000000000000000000000004e230000020000802b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000c1ffffffffffffff0000000000000000000000002000000000000000006c09851312b70026000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc6b6e000001020200000000"], 0xb8}}, 0x0) 202.410814ms ago: executing program 1 (id=1710): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r5}}}], 0x28}}], 0x1, 0x0) 173.109372ms ago: executing program 0 (id=1711): syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)='V', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001", @ANYRESOCT=r0, @ANYRES32=r2], 0x18}, 0x4011) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000012008188e6b62aa73772cc9f1ba1f8484300006c5e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x70}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='syzkaller\x00'}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x30}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x144}}, 0x0) 73.975028ms ago: executing program 2 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="080005251ea2401cee8f9a7be51f5019c10002000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="100000000100000002000000"], 0x10}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001080)=@security={'security\x00', 0x4, 0x4, 0x3f0, 0xffffffff, 0x0, 0x0, 0x1e0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [0x0, 0xffffff00], [], 'bridge_slave_1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010102, [0x0, 0x0, 0xffffff00, 0xff], 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x1, 0x81, 0x5, 0x4, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x9}}}, {{@ipv6={@private1, @mcast1, [0xff], [], 'geneve1\x00', 'macvlan0\x00', {}, {}, 0x62}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@ipv6header={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="09000000833ebc74da5de8dbc3b35e32836f7696e8edd44d2c9b991d93ebd4c6b4618a838b71c8e78fe41c6ef91bb4b945b7ebb8805574adc5232a257e9aa4a54aa58c0b7ea9d6a249a132109e50cdffec2170f0bd45bf81c83faeb22066839e1c1c79d2ebd7", @ANYRES16=r1, @ANYBLOB="20002cbd7000fbdbdf251d0000000c009900010000006100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) connect$netrom(r4, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x81764109abc7f5ee, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0xca8, 0x10001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x4) 167.417µs ago: executing program 4 (id=1713): socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x0, 0x300) socket$kcm(0x10, 0x0, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0xfdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x4, 0x60cd894) socket(0x2c, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote, @local, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3, 0xb750, 0x5, 0x100, 0x0, 0x11, r6}) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r10, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) 0s ago: executing program 1 (id=1714): epoll_create1(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e1c}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'. [ 141.297216][ T7980] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 141.319433][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 141.342041][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 141.779884][ T7999] FAULT_INJECTION: forcing a failure. [ 141.779884][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.821091][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.2.795 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 141.831733][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 141.841815][ T7999] Call Trace: [ 141.845110][ T7999] [ 141.848052][ T7999] dump_stack_lvl+0x241/0x360 [ 141.852772][ T7999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.858084][ T7999] ? __pfx__printk+0x10/0x10 [ 141.862699][ T7999] ? __pfx_lock_release+0x10/0x10 [ 141.867762][ T7999] should_fail_ex+0x3b0/0x4e0 [ 141.872468][ T7999] _copy_from_user+0x2f/0xe0 [ 141.877074][ T7999] core_sys_select+0x508/0x910 [ 141.881843][ T7999] ? __pfx_core_sys_select+0x10/0x10 [ 141.887122][ T7999] ? ksys_write+0x23e/0x2c0 [ 141.891636][ T7999] ? __pfx_set_user_sigmask+0x10/0x10 [ 141.897009][ T7999] ? __fget_files+0x3f6/0x470 [ 141.901686][ T7999] __se_sys_pselect6+0x319/0x3f0 [ 141.906624][ T7999] ? __pfx___se_sys_pselect6+0x10/0x10 [ 141.912078][ T7999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.918403][ T7999] ? do_syscall_64+0x100/0x230 [ 141.923159][ T7999] ? __x64_sys_pselect6+0x21/0xf0 [ 141.928184][ T7999] do_syscall_64+0xf3/0x230 [ 141.932687][ T7999] ? clear_bhb_loop+0x35/0x90 [ 141.937352][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.943246][ T7999] RIP: 0033:0x7f7b915779f9 [ 141.947656][ T7999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.967256][ T7999] RSP: 002b:00007f7b923f3048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 141.975670][ T7999] RAX: ffffffffffffffda RBX: 00007f7b91705f80 RCX: 00007f7b915779f9 [ 141.983631][ T7999] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 141.991590][ T7999] RBP: 00007f7b923f30a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.999545][ T7999] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 142.007502][ T7999] R13: 000000000000000b R14: 00007f7b91705f80 R15: 00007ffd960e3e48 [ 142.015515][ T7999] [ 142.052013][ T8002] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 142.118401][ T8014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.353363][ T8022] siw: device registration error -23 [ 142.378956][ T8022] syz.3.802 (8022) used obsolete PPPIOCDETACH ioctl [ 142.592043][ T8036] nbd: nbd4 already in use [ 142.597003][ T8036] block nbd4: must specify backend [ 142.693791][ T8042] FAULT_INJECTION: forcing a failure. [ 142.693791][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.709414][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.0.810 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 142.720034][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 142.730104][ T8042] Call Trace: [ 142.733392][ T8042] [ 142.736330][ T8042] dump_stack_lvl+0x241/0x360 [ 142.741037][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.746259][ T8042] ? __pfx__printk+0x10/0x10 [ 142.750876][ T8042] ? __pfx_lock_release+0x10/0x10 [ 142.755936][ T8042] should_fail_ex+0x3b0/0x4e0 [ 142.760643][ T8042] _copy_from_user+0x2f/0xe0 [ 142.765256][ T8042] core_sys_select+0x639/0x910 [ 142.770048][ T8042] ? __pfx_core_sys_select+0x10/0x10 [ 142.775360][ T8042] ? ksys_write+0x23e/0x2c0 [ 142.779907][ T8042] ? __pfx_set_user_sigmask+0x10/0x10 [ 142.781482][ T8045] netlink: 'syz.4.811': attribute type 4 has an invalid length. [ 142.785280][ T8042] ? __fget_files+0x3f6/0x470 [ 142.785316][ T8042] __se_sys_pselect6+0x319/0x3f0 [ 142.785349][ T8042] ? __pfx___se_sys_pselect6+0x10/0x10 [ 142.808002][ T8042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.814351][ T8042] ? do_syscall_64+0x100/0x230 [ 142.819138][ T8042] ? __x64_sys_pselect6+0x21/0xf0 [ 142.824183][ T8042] do_syscall_64+0xf3/0x230 [ 142.828704][ T8042] ? clear_bhb_loop+0x35/0x90 [ 142.833399][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.839315][ T8042] RIP: 0033:0x7f64869779f9 [ 142.843743][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.863362][ T8042] RSP: 002b:00007f6487786048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 142.871802][ T8042] RAX: ffffffffffffffda RBX: 00007f6486b05f80 RCX: 00007f64869779f9 [ 142.879787][ T8042] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 142.887772][ T8042] RBP: 00007f64877860a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.895760][ T8042] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 142.903745][ T8042] R13: 000000000000000b R14: 00007f6486b05f80 R15: 00007ffe8133ee38 [ 142.911746][ T8042] [ 143.086737][ T8056] lo speed is unknown, defaulting to 1000 [ 143.567856][ T8087] netlink: 'syz.0.820': attribute type 6 has an invalid length. [ 143.641148][ T5242] block nbd17: Receive control failed (result -107) [ 143.674556][ T8082] nbd17: detected capacity change from 0 to 256 [ 143.723707][ T8056] lo speed is unknown, defaulting to 1000 [ 144.073496][ T8101] lo speed is unknown, defaulting to 1000 [ 144.239942][ T8098] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 144.677122][ T8097] FAULT_INJECTION: forcing a failure. [ 144.677122][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.698878][ T8124] pimreg: entered allmulticast mode [ 144.721790][ T8101] lo speed is unknown, defaulting to 1000 [ 144.733690][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: syz.0.824 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 144.744314][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 144.754390][ T8097] Call Trace: [ 144.757687][ T8097] [ 144.760630][ T8097] dump_stack_lvl+0x241/0x360 [ 144.765338][ T8097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.770557][ T8097] ? __pfx__printk+0x10/0x10 [ 144.775170][ T8097] ? __pfx_lock_release+0x10/0x10 [ 144.780221][ T8097] should_fail_ex+0x3b0/0x4e0 [ 144.784923][ T8097] set_fd_set+0x3a/0xa0 [ 144.789099][ T8097] core_sys_select+0x72c/0x910 [ 144.793892][ T8097] ? __pfx_core_sys_select+0x10/0x10 [ 144.799202][ T8097] ? ksys_write+0x23e/0x2c0 [ 144.803752][ T8097] ? __pfx_set_user_sigmask+0x10/0x10 [ 144.809146][ T8097] ? __fget_files+0x3f6/0x470 [ 144.813854][ T8097] __se_sys_pselect6+0x319/0x3f0 [ 144.818822][ T8097] ? __pfx___se_sys_pselect6+0x10/0x10 [ 144.824298][ T8097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.830654][ T8097] ? do_syscall_64+0x100/0x230 [ 144.835443][ T8097] ? __x64_sys_pselect6+0x21/0xf0 [ 144.840488][ T8097] do_syscall_64+0xf3/0x230 [ 144.845006][ T8097] ? clear_bhb_loop+0x35/0x90 [ 144.849701][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.855614][ T8097] RIP: 0033:0x7f64869779f9 [ 144.860043][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.879667][ T8097] RSP: 002b:00007f6487786048 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 144.888109][ T8097] RAX: ffffffffffffffda RBX: 00007f6486b05f80 RCX: 00007f64869779f9 [ 144.896150][ T8097] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 144.904152][ T8097] RBP: 00007f64877860a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.912144][ T8097] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 144.920137][ T8097] R13: 000000000000000b R14: 00007f6486b05f80 R15: 00007ffe8133ee38 [ 144.928148][ T8097] [ 145.461486][ T8150] __nla_validate_parse: 12 callbacks suppressed [ 145.461506][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 145.702451][ T8158] raw_sendmsg: syz.1.839 forgot to set AF_INET. Fix it! [ 145.931286][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.841'. [ 146.274182][ T8168] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 146.425801][ T8183] validate_nla: 1 callbacks suppressed [ 146.425820][ T8183] netlink: 'syz.3.849': attribute type 21 has an invalid length. [ 146.606471][ T5233] cgroup: fork rejected by pids controller in /syz1 [ 146.737832][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.849'. [ 146.822498][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 147.440223][ T8206] netlink: 104 bytes leftover after parsing attributes in process `syz.0.857'. [ 147.485674][ T8208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.859'. [ 147.657936][ T8216] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 147.688858][ T8216] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 147.875320][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.891291][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.900135][ T8229] ip6gretap0: entered promiscuous mode [ 147.906893][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.916003][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.918126][ T8229] macvtap1: entered allmulticast mode [ 147.929334][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.937923][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.967739][ T8229] ip6gretap0: entered allmulticast mode [ 147.982596][ T8229] ip6gretap0: left allmulticast mode [ 148.004405][ T8229] ip6gretap0: left promiscuous mode [ 148.073248][ T8226] lo speed is unknown, defaulting to 1000 [ 148.283127][ T8226] lo speed is unknown, defaulting to 1000 [ 148.429727][ T8252] xt_TCPMSS: Only works on TCP SYN packets [ 148.635177][ T8257] netlink: 104 bytes leftover after parsing attributes in process `syz.4.872'. [ 148.755889][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 148.790966][ T8264] ip6t_rpfilter: unknown options [ 148.945477][ T8272] netlink: 248 bytes leftover after parsing attributes in process `syz.0.877'. [ 148.961131][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 149.209618][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.223709][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.239485][ T8226] bridge_slave_0: entered allmulticast mode [ 149.247357][ T8226] bridge_slave_0: entered promiscuous mode [ 149.258760][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.266080][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.273395][ T8226] bridge_slave_1: entered allmulticast mode [ 149.281000][ T8226] bridge_slave_1: entered promiscuous mode [ 149.338887][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.352044][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.427483][ T8226] team0: Port device team_slave_0 added [ 149.449627][ T8226] team0: Port device team_slave_1 added [ 149.517271][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 149.518922][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.568225][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.615952][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.638709][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.647769][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.678656][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.877991][ T8297] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 149.957499][ T8226] hsr_slave_0: entered promiscuous mode [ 149.966256][ T8226] hsr_slave_1: entered promiscuous mode [ 149.987453][ T8226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.996571][ T5242] Bluetooth: hci4: command tx timeout [ 150.012273][ T8226] Cannot create hsr debugfs directory [ 150.079165][ T8313] pim6reg1: entered promiscuous mode [ 150.096850][ T8313] pim6reg1: entered allmulticast mode [ 150.611914][ T8226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.641576][ T8226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35197 - 0 [ 150.797961][ T8226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.816828][ T8226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35197 - 0 [ 150.851620][ T8349] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 150.860355][ T8349] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 150.937571][ T8226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.949425][ T8226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35197 - 0 [ 151.031959][ T8226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.043785][ T8226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35197 - 0 [ 151.067546][ T8359] syzkaller0: entered promiscuous mode [ 151.073156][ T8359] syzkaller0: entered allmulticast mode [ 151.271145][ T8226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.286363][ T8364] __nla_validate_parse: 3 callbacks suppressed [ 151.286380][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 151.318383][ T8226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.337897][ T8226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.350774][ T8226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.518459][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.566288][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.614005][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.621196][ T940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.623037][ T8373] netlink: 248 bytes leftover after parsing attributes in process `syz.0.902'. [ 151.631174][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.644647][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.074524][ T5242] Bluetooth: hci4: command tx timeout [ 152.160878][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.265200][ T8397] lo speed is unknown, defaulting to 1000 [ 152.379241][ T8226] veth0_vlan: entered promiscuous mode [ 152.413299][ T8226] veth1_vlan: entered promiscuous mode [ 152.555073][ T8226] veth0_macvtap: entered promiscuous mode [ 152.581424][ T8226] veth1_macvtap: entered promiscuous mode [ 152.638751][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.684461][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.687375][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 152.706585][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.733034][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.776913][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.811232][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.838219][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.862102][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.905761][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.953006][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.997249][ T8416] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.912'. [ 152.999467][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.037480][ T8417] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.912'. [ 153.054454][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.085357][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.114690][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.159855][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.178729][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.198297][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.212995][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.242613][ T8397] lo speed is unknown, defaulting to 1000 [ 153.256463][ T8226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.285308][ T8226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.312317][ T8226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.321383][ T8226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.530911][ T2544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.552440][ T2544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.654154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.662220][ T8432] netlink: 248 bytes leftover after parsing attributes in process `syz.2.916'. [ 153.671379][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.058902][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz.2.917'. [ 154.154870][ T5242] Bluetooth: hci4: command tx timeout [ 154.707171][ T8455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.764137][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 154.821839][ T8460] tipc: Enabling of bearer rejected, failed to enable media [ 155.148449][ T8469] netlink: 210616 bytes leftover after parsing attributes in process `syz.2.926'. [ 155.446949][ T8477] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.927'. [ 156.220667][ T8503] ipip0: entered promiscuous mode [ 156.234867][ T5242] Bluetooth: hci4: command tx timeout [ 156.803722][ T8520] syzkaller0: entered promiscuous mode [ 156.833815][ T8520] syzkaller0: entered allmulticast mode [ 158.725053][ T8537] ip6gretap1: entered allmulticast mode [ 158.742348][ T8544] lo speed is unknown, defaulting to 1000 [ 159.119364][ T8544] lo speed is unknown, defaulting to 1000 [ 159.176791][ T8573] lo speed is unknown, defaulting to 1000 [ 159.414474][ T8585] __nla_validate_parse: 4 callbacks suppressed [ 159.414493][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 159.486056][ T8585] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 159.493741][ T8585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.954'. [ 159.649426][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 159.702072][ T8591] netlink: 'syz.0.960': attribute type 2 has an invalid length. [ 159.739177][ T8591] : entered promiscuous mode [ 159.755697][ T8573] lo speed is unknown, defaulting to 1000 [ 159.925928][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 160.331132][ T8610] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 160.386663][ T8610] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.965'. [ 160.402676][ T8610] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 160.680056][ T8636] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 161.754461][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 161.778949][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 162.303103][ T8690] lo speed is unknown, defaulting to 1000 [ 162.315873][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 162.548227][ T8703] netlink: 'syz.1.983': attribute type 4 has an invalid length. [ 162.712041][ T8699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.983'. [ 162.746797][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 163.245820][ T8690] lo speed is unknown, defaulting to 1000 [ 163.544344][ T8728] dvmrp0: entered allmulticast mode [ 164.154404][ T29] audit: type=1107 audit(1722990655.881:4): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­:ä˜åØÔY$øÉøìnJšð5…£ ÕÝ9Iàcc}·Ö¨“ Vä}L(‡š¿Î¤Oé*?Sý\H¤SsdÄȈùLâ©YÛž‚ÓD|·UòªsH;‰Éó=' [ 164.245401][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.253075][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.353636][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.360906][ T8755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.368449][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.375639][ T8755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.404906][ T8755] bridge0: entered promiscuous mode [ 164.424418][ T8755] bridge0: entered allmulticast mode [ 164.577242][ T8754] __nla_validate_parse: 2 callbacks suppressed [ 164.577261][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 164.617532][ T8754] netlink: 'syz.4.997': attribute type 18 has an invalid length. [ 164.642307][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 164.647442][ T8754] netlink: 3 bytes leftover after parsing attributes in process `syz.4.997'. [ 164.696559][ T8754] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.705545][ T8754] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.715115][ T8754] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.723820][ T8754] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.742321][ T8754] vxlan0: entered promiscuous mode [ 164.825369][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1000'. [ 164.988446][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 165.045243][ T8763] bridge_slave_1: left allmulticast mode [ 165.066016][ T8763] bridge_slave_1: left promiscuous mode [ 165.088407][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.214840][ T8763] bridge_slave_0: left allmulticast mode [ 165.275247][ T8763] bridge_slave_0: left promiscuous mode [ 165.281175][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.369946][ T8783] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1008'. [ 165.458271][ T8765] netlink: 'syz.3.1002': attribute type 4 has an invalid length. [ 165.475921][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 165.487942][ T8773] netlink: 'syz.3.1002': attribute type 4 has an invalid length. [ 165.513966][ T8773] infiniband syz0: set active [ 165.528737][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 165.626641][ T5281] lo speed is unknown, defaulting to 1000 [ 165.632516][ T5281] lo speed is unknown, defaulting to 1000 [ 165.763442][ T8790] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1010'. [ 166.022651][ T8800] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 166.033527][ T8800] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1015'. [ 166.682730][ T8823] xt_NFQUEUE: number of total queues is 0 [ 166.805076][ T8822] lo speed is unknown, defaulting to 1000 [ 167.593226][ T8822] lo speed is unknown, defaulting to 1000 [ 169.035517][ T5229] block nbd5: shutting down sockets [ 169.049952][ T5229] blk_print_req_error: 27 callbacks suppressed [ 169.049969][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.125458][ T5229] buffer_io_error: 27 callbacks suppressed [ 169.125476][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.181744][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.228161][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.266725][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.319333][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.343479][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.399999][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.448209][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.491049][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.525404][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.565240][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.582580][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.614398][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.622253][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.684426][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.692262][ T5229] ldm_validate_partition_table(): Disk read failed. [ 169.736793][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.774351][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.811565][ T5229] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.844295][ T5229] Buffer I/O error on dev nbd5, logical block 0, async page read [ 169.871551][ T5229] Dev nbd5: unable to read RDB block 0 [ 169.883232][ T5229] nbd5: unable to read partition table [ 169.901929][ T5229] ldm_validate_partition_table(): Disk read failed. [ 169.920587][ T5229] Dev nbd5: unable to read RDB block 0 [ 169.951026][ T5229] nbd5: unable to read partition table [ 170.990001][ T5229] block nbd17: Dead connection, failed to find a fallback [ 171.095021][ T8932] __nla_validate_parse: 5 callbacks suppressed [ 171.095041][ T8932] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1051'. [ 171.821565][ T8954] netlink: 'syz.3.1055': attribute type 1 has an invalid length. [ 172.174727][ T8965] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 172.194393][ T8965] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1058'. [ 173.101006][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 173.455344][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.467264][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.494412][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.519936][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.557839][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.574389][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.686319][ T8982] lo speed is unknown, defaulting to 1000 [ 174.115155][ T8982] lo speed is unknown, defaulting to 1000 [ 174.716447][ T8990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1064'. [ 174.894187][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 175.291343][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.314462][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.336551][ T8982] bridge_slave_0: entered allmulticast mode [ 175.362436][ T8982] bridge_slave_0: entered promiscuous mode [ 175.371251][ T9005] x_tables: duplicate underflow at hook 2 [ 175.389247][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.414473][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.442137][ T8982] bridge_slave_1: entered allmulticast mode [ 175.454455][ T8982] bridge_slave_1: entered promiscuous mode [ 175.522536][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 175.667809][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.677561][ T5242] Bluetooth: hci0: command tx timeout [ 175.736378][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.802734][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1070'. [ 175.857089][ T8982] team0: Port device team_slave_0 added [ 175.870814][ T8982] team0: Port device team_slave_1 added [ 176.010274][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.052039][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.110955][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.128384][ T9021] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1075'. [ 176.143143][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.160697][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.245248][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.289248][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 176.442105][ T8982] hsr_slave_0: entered promiscuous mode [ 176.478603][ T8982] hsr_slave_1: entered promiscuous mode [ 176.503926][ T8982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.515227][ T8982] Cannot create hsr debugfs directory [ 176.578700][ T9028] lo speed is unknown, defaulting to 1000 [ 177.155804][ T8982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.184658][ T8982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41545 - 0 [ 177.311553][ T8982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.336302][ T8982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41545 - 0 [ 177.496794][ T8982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.518549][ T8982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41545 - 0 [ 177.533751][ T9039] lo speed is unknown, defaulting to 1000 [ 177.539785][ T9028] lo speed is unknown, defaulting to 1000 [ 177.558492][ T9050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1084'. [ 177.600994][ T9052] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1084'. [ 177.680832][ T8982] team0: Port device netdevsim0 removed [ 177.713445][ T8982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.742000][ T8982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41545 - 0 [ 177.754731][ T5242] Bluetooth: hci0: command tx timeout [ 177.761216][ T9059] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1086'. [ 178.062235][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 178.090278][ T9039] lo speed is unknown, defaulting to 1000 [ 178.374780][ T8982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.403210][ T8982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.449252][ T8982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.487646][ T8982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.530159][ T9074] team0: Device sit1 is of different type [ 178.971778][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1094'. [ 178.981125][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1094'. [ 179.112075][ T9082] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 179.652118][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.726516][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.783517][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.790701][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.834464][ T5236] Bluetooth: hci0: command tx timeout [ 179.843613][ T1852] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.850790][ T1852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.874071][ T9096] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1098'. [ 180.049203][ T8982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.307599][ T9103] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1101'. [ 180.509794][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.686927][ T8982] veth0_vlan: entered promiscuous mode [ 180.706186][ T9120] openvswitch: netlink: Missing key (keys=20040, expected=10000000) [ 180.796337][ T9118] lo speed is unknown, defaulting to 1000 [ 180.806238][ T8982] veth1_vlan: entered promiscuous mode [ 180.918184][ T8982] veth0_macvtap: entered promiscuous mode [ 180.942738][ T8982] veth1_macvtap: entered promiscuous mode [ 180.981043][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.024285][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.054403][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.081763][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.101209][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.119589][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.137739][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.160101][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.170347][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.190111][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.216271][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.365117][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 181.366519][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 181.371885][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 181.853048][ T9118] lo speed is unknown, defaulting to 1000 [ 181.857390][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.887704][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.898386][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.910371][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.921706][ T5230] Bluetooth: hci0: command tx timeout [ 181.932916][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.947110][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.961992][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.982460][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.995012][ T8982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.006629][ T8982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.019621][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.071153][ T8982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.096363][ T8982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.107488][ T8982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.122771][ T8982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.259376][ T9162] netlink: 'syz.0.1115': attribute type 5 has an invalid length. [ 182.713722][ T8630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.743385][ T8630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.864855][ T2524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.892694][ T2524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.682905][ T9219] Unknown options in mask 1f4 [ 183.897021][ T9232] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 183.935342][ T9232] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 184.171874][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 184.301252][ T9257] tipc: MTU too low for tipc bearer [ 184.454098][ T8630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.745497][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1143'. [ 184.756888][ T9266] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1143'. [ 185.077285][ T8630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.118127][ T9283] netlink: 'syz.4.1147': attribute type 2 has an invalid length. [ 185.256702][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.267002][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.277099][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.299313][ T8630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.337857][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.348017][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.357274][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.413281][ T9277] lo speed is unknown, defaulting to 1000 [ 185.547498][ T8630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.681457][ T9308] syzkaller1: entered promiscuous mode [ 185.690896][ T9308] syzkaller1: entered allmulticast mode [ 185.839476][ T8630] bridge_slave_1: left allmulticast mode [ 185.845923][ T8630] bridge_slave_1: left promiscuous mode [ 185.855974][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.928191][ T8630] bridge_slave_0: left allmulticast mode [ 185.941784][ T8630] bridge_slave_0: left promiscuous mode [ 185.965828][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.652612][ T8630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.665519][ T8630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.677559][ T8630] bond0 (unregistering): Released all slaves [ 186.693168][ T9277] lo speed is unknown, defaulting to 1000 [ 186.694052][ T9288] lo speed is unknown, defaulting to 1000 [ 186.840992][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 187.035974][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 187.096155][ T5244] block nbd18: Receive control failed (result -107) [ 187.156809][ T9330] nbd18: detected capacity change from 0 to 256 [ 187.205677][ T9305] lo speed is unknown, defaulting to 1000 [ 187.224737][ T9288] lo speed is unknown, defaulting to 1000 [ 187.355336][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1159'. [ 187.439580][ T5244] Bluetooth: hci0: command tx timeout [ 187.810162][ T9305] lo speed is unknown, defaulting to 1000 [ 188.428402][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 188.478676][ T9354] netlink: 'syz.0.1163': attribute type 58 has an invalid length. [ 188.496515][ T9354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1163'. [ 189.173853][ T8630] hsr_slave_0: left promiscuous mode [ 189.214299][ T8630] hsr_slave_1: left promiscuous mode [ 189.250899][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.259116][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.272573][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.281725][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.321895][ T8630] veth1_macvtap: left promiscuous mode [ 189.332931][ T8630] veth0_macvtap: left promiscuous mode [ 189.351510][ T8630] veth1_vlan: left promiscuous mode [ 189.360952][ T8630] veth0_vlan: left promiscuous mode [ 189.520728][ T5244] Bluetooth: hci0: command 0x041b tx timeout [ 190.171075][ T8630] team0 (unregistering): Port device team_slave_1 removed [ 190.234606][ T8630] team0 (unregistering): Port device team_slave_0 removed [ 190.776117][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.792977][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.811057][ T9288] bridge_slave_0: entered allmulticast mode [ 190.835971][ T9288] bridge_slave_0: entered promiscuous mode [ 190.863742][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.885833][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.893095][ T9288] bridge_slave_1: entered allmulticast mode [ 190.919389][ T9288] bridge_slave_1: entered promiscuous mode [ 191.088495][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.101333][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.309323][ T9288] team0: Port device team_slave_0 added [ 191.319344][ T9288] team0: Port device team_slave_1 added [ 191.452899][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.473486][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.531280][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.594344][ T5230] Bluetooth: hci0: command 0x041b tx timeout [ 191.595306][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.632235][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.666515][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.803810][ T9288] hsr_slave_0: entered promiscuous mode [ 191.831395][ T9288] hsr_slave_1: entered promiscuous mode [ 191.874528][ T9378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1170'. [ 191.883810][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.906915][ T9288] Cannot create hsr debugfs directory [ 191.984881][ T9376] tap0: tun_chr_ioctl cmd 2147767517 [ 192.435346][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 192.546439][ T9401] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 192.564536][ T9401] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.1176'. [ 192.574179][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.612047][ T9409] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 192.662537][ T9409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1179'. [ 192.722521][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 192.776037][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 192.875772][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1182'. [ 192.891343][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1182'. [ 192.939383][ T9288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.968237][ T9288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.004119][ T9288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.058815][ T9288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.198581][ T9427] pim6reg527: entered allmulticast mode [ 193.208405][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 193.333186][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.361966][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.395825][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.403920][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.447210][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.454428][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.566353][ T9440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1188'. [ 193.685729][ T5230] Bluetooth: hci0: command 0x041b tx timeout [ 193.798528][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.889523][ T9288] veth0_vlan: entered promiscuous mode [ 193.939115][ T9288] veth1_vlan: entered promiscuous mode [ 194.066649][ T9288] veth0_macvtap: entered promiscuous mode [ 194.093006][ T9288] veth1_macvtap: entered promiscuous mode [ 194.141506][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.179279][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.207263][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.250705][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.269619][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.304531][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.319922][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.332574][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.342868][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.353440][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.366408][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.377191][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.419114][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.442051][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.464335][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.485407][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.502901][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.534259][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.554708][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.582835][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.603854][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.616141][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.643627][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.718762][ T9288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.750774][ T9288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.763781][ T9288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.793556][ T9288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.810218][ T9484] x_tables: duplicate underflow at hook 3 [ 195.000697][ T8630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.034762][ T8630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.045590][ T9492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.111288][ T2544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.144917][ T2544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.850800][ T9542] netem: incorrect gi model size [ 195.859226][ T9542] netem: change failed [ 196.440370][ T9579] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 196.469433][ T9579] bond2: entered promiscuous mode [ 196.482181][ T9581] sctp: [Deprecated]: syz.1.1228 (pid 9581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.482181][ T9581] Use struct sctp_sack_info instead [ 196.500286][ T9581] netlink: 'syz.1.1228': attribute type 11 has an invalid length. [ 196.518965][ T9579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 196.542769][ T9579] bond2: (slave ip6gretap2): making interface the new active one [ 196.552852][ T9579] ip6gretap2: entered promiscuous mode [ 196.561514][ T9579] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 196.575587][ T9583] bond2: left promiscuous mode [ 196.580386][ T9583] ip6gretap2: left promiscuous mode [ 196.587709][ T9583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.127286][ T9610] __nla_validate_parse: 10 callbacks suppressed [ 197.127304][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 197.166544][ T9616] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1238'. [ 197.193162][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 197.429401][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 197.475529][ T9632] netlink: 'syz.2.1245': attribute type 11 has an invalid length. [ 197.629947][ T2524] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.676431][ T9633] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 198.059112][ T9650] team0: Device sit1 is of different type [ 198.124544][ T9651] netlink: 'syz.4.1251': attribute type 17 has an invalid length. [ 198.137026][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 198.287291][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 198.304529][ T9654] bridge_slave_1: left allmulticast mode [ 198.312560][ T9654] bridge_slave_1: left promiscuous mode [ 198.313286][ T9669] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1254'. [ 198.324476][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.364553][ T9654] bridge_slave_0: left allmulticast mode [ 198.383016][ T9654] bridge_slave_0: left promiscuous mode [ 198.383518][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.395919][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.404983][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.414895][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.424577][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.439661][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.457286][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.633043][ T9670] lo speed is unknown, defaulting to 1000 [ 198.698806][ T9675] syzkaller1: entered promiscuous mode [ 198.724355][ T9675] syzkaller1: entered allmulticast mode [ 199.025518][ T9670] lo speed is unknown, defaulting to 1000 [ 199.111909][ T2524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.173724][ T9689] netlink: 'syz.2.1260': attribute type 4 has an invalid length. [ 199.342136][ T2524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.383366][ T9698] netlink: 'syz.0.1264': attribute type 11 has an invalid length. [ 199.412645][ T9698] netlink: 'syz.0.1264': attribute type 11 has an invalid length. [ 199.503844][ T2524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.532854][ T9698] debugfs: Directory 'netdev:,' with parent 'phy7' already present! [ 199.573764][ T9704] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1267'. [ 199.798373][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 199.916271][ T9720] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1272'. [ 200.152889][ T9720] pim6reg1: entered promiscuous mode [ 200.158892][ T9723] dccp_v6_rcv: dropped packet with invalid checksum [ 200.174622][ T9720] pim6reg1: entered allmulticast mode [ 200.218406][ T9720] Bluetooth: MGMT ver 1.23 [ 200.218459][ T2524] bridge_slave_1: left allmulticast mode [ 200.263655][ T2524] bridge_slave_1: left promiscuous mode [ 200.269659][ T2524] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.352296][ T2524] bridge_slave_0: left allmulticast mode [ 200.371896][ T2524] bridge_slave_0: left promiscuous mode [ 200.380303][ T2524] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.406784][ T5230] block nbd19: Receive control failed (result -107) [ 200.434344][ T9732] nbd19: detected capacity change from 0 to 256 [ 200.556609][ T5230] Bluetooth: hci0: command tx timeout [ 200.931355][ T2524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.949606][ T2524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.961503][ T2524] bond0 (unregistering): Released all slaves [ 201.002017][ T9742] netlink: 'syz.4.1277': attribute type 4 has an invalid length. [ 201.558021][ T9670] chnl_net:caif_netlink_parms(): no params data found [ 202.138519][ T9783] __nla_validate_parse: 5 callbacks suppressed [ 202.138539][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 202.242768][ T5230] block nbd20: Receive control failed (result -107) [ 202.280427][ T9802] netlink: 'syz.4.1288': attribute type 4 has an invalid length. [ 202.284672][ T9783] nbd20: detected capacity change from 0 to 256 [ 202.324934][ T2524] hsr_slave_0: left promiscuous mode [ 202.377606][ T2524] hsr_slave_1: left promiscuous mode [ 202.427980][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.441198][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.452838][ T2524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.464840][ T2524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.500144][ T2524] veth1_macvtap: left promiscuous mode [ 202.506412][ T2524] veth0_macvtap: left promiscuous mode [ 202.512105][ T2524] veth1_vlan: left promiscuous mode [ 202.520489][ T2524] veth0_vlan: left promiscuous mode [ 202.635852][ T5230] Bluetooth: hci0: command tx timeout [ 203.087774][ T2524] team0 (unregistering): Port device team_slave_1 removed [ 203.132654][ T2524] team0 (unregistering): Port device team_slave_0 removed [ 203.579310][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.586771][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.592602][ T9829] xt_TCPMSS: Only works on TCP SYN packets [ 203.593986][ T9670] bridge_slave_0: entered allmulticast mode [ 203.603279][ T9829] rdma_op ffff88805c5141f0 conn xmit_rdma 0000000000000000 [ 203.615718][ T9829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1296'. [ 203.617941][ T9670] bridge_slave_0: entered promiscuous mode [ 203.634051][ T9829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1296'. [ 203.647341][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.654546][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.661746][ T9670] bridge_slave_1: entered allmulticast mode [ 203.669618][ T9670] bridge_slave_1: entered promiscuous mode [ 203.678827][ T9815] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1291'. [ 203.687323][ T9830] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1296'. [ 203.703340][ T9815] 0ªX¹¦D: renamed from gretap0 (while UP) [ 203.712261][ T9815] 0ªX¹¦D: entered allmulticast mode [ 203.718404][ T9815] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 203.928947][ T9831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 203.998876][ T9670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.037463][ T9670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.169684][ T9670] team0: Port device team_slave_0 added [ 204.229704][ T9670] team0: Port device team_slave_1 added [ 204.320224][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.354681][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.459850][ T9670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.483893][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.512025][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.548536][ T9670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.574573][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 204.615716][ T9859] netlink: 'syz.2.1302': attribute type 4 has an invalid length. [ 204.715365][ T5230] Bluetooth: hci0: command tx timeout [ 204.810448][ T9670] hsr_slave_0: entered promiscuous mode [ 204.825516][ T9867] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1304'. [ 204.839878][ T9670] hsr_slave_1: entered promiscuous mode [ 204.851895][ T9670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.864916][ T9670] Cannot create hsr debugfs directory [ 204.898977][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 204.932677][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 205.081399][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'. [ 205.198912][ T9886] veth1_macvtap: Caught tx_queue_len zero misconfig [ 205.480400][ T9894] netlink: 'syz.2.1314': attribute type 4 has an invalid length. [ 206.110907][ T9670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.148973][ T9670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.179290][ T9670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.233533][ T9670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.286728][ T9934] netlink: 'syz.4.1325': attribute type 13 has an invalid length. [ 206.372755][ T9937] netlink: 'syz.0.1326': attribute type 4 has an invalid length. [ 206.650537][ T9670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.722048][ T9670] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.762925][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.770171][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.796295][ T5230] Bluetooth: hci0: command tx timeout [ 206.838851][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.846074][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.870178][ T29] audit: type=1107 audit(1722990698.611:5): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­:ä˜åØÔY$øÉøìnJšð5…£ ÕÝ9Iàcc}·Ö¨“ Vä}L(‡š¿Î¤Oé*?Sý\H¤SsdÄȈùLâ©YÛž‚ÓD|·UòªsH;‰Éó=' [ 206.893057][ T9957] netlink: 'syz.2.1331': attribute type 96 has an invalid length. [ 206.942557][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.950287][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.993752][ T9967] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 207.045227][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.052447][ T9966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.060174][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.067396][ T9966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.110753][ T9966] bridge0: entered promiscuous mode [ 207.132113][ T9966] bridge0: entered allmulticast mode [ 207.430545][ T9982] can: request_module (can-proto-0) failed. [ 207.436647][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.461623][ T9990] __nla_validate_parse: 12 callbacks suppressed [ 207.461642][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 207.631999][ T9670] veth0_vlan: entered promiscuous mode [ 207.698750][ T9670] veth1_vlan: entered promiscuous mode [ 207.796287][ T9670] veth0_macvtap: entered promiscuous mode [ 207.828671][ T9670] veth1_macvtap: entered promiscuous mode [ 207.935603][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.967692][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.986493][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.014432][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.044286][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.069503][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.103996][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.114151][T10009] IPVS: length: 96 != 8 [ 208.117976][T10007] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1346'. [ 208.120070][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 208.143194][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.175706][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.187081][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.201785][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.259068][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.276283][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.286624][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.297718][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.308229][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.318972][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.337982][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.352091][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.367186][ T9670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.381813][ T9670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.399247][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.407610][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 208.433479][T10020] ax25_connect(): syz.2.1348 uses autobind, please contact jreuter@yaina.de [ 208.471867][ T9670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.483942][ T9670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.496559][ T9670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.511578][ T9670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.594597][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 208.703614][ T8631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.757397][ T8631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.807098][T10037] FAULT_INJECTION: forcing a failure. [ 208.807098][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.826216][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.1.1352 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 208.837022][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 208.847096][T10037] Call Trace: [ 208.850390][T10037] [ 208.853334][T10037] dump_stack_lvl+0x241/0x360 [ 208.853721][ T8630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.858010][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.858036][T10037] ? __pfx__printk+0x10/0x10 [ 208.858061][T10037] ? vfs_write+0x7c4/0xc90 [ 208.866494][ T8630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.871015][T10037] should_fail_ex+0x3b0/0x4e0 [ 208.871053][T10037] _copy_from_user+0x2f/0xe0 [ 208.896560][T10037] move_addr_to_kernel+0x82/0x150 [ 208.901686][T10037] __sys_bind+0x168/0x2f0 [ 208.906019][T10037] ? __pfx___sys_bind+0x10/0x10 [ 208.910872][T10037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.917196][T10037] ? do_syscall_64+0x100/0x230 [ 208.921955][T10037] __x64_sys_bind+0x7a/0x90 [ 208.926451][T10037] do_syscall_64+0xf3/0x230 [ 208.930947][T10037] ? clear_bhb_loop+0x35/0x90 [ 208.935617][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.941505][T10037] RIP: 0033:0x7fce015779f9 [ 208.945909][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.965505][T10037] RSP: 002b:00007fce02290048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 208.973910][T10037] RAX: ffffffffffffffda RBX: 00007fce01705f80 RCX: 00007fce015779f9 [ 208.981870][T10037] RDX: 0000000000000058 RSI: 0000000020000300 RDI: 0000000000000003 [ 208.989829][T10037] RBP: 00007fce022900a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.997789][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.005748][T10037] R13: 000000000000000b R14: 00007fce01705f80 R15: 00007ffe1d0bc3d8 [ 209.013725][T10037] [ 209.290688][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 209.424407][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 209.476476][ T5230] block nbd21: Receive control failed (result -107) [ 209.534825][T10048] nbd21: detected capacity change from 0 to 256 [ 209.557188][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1358'. [ 209.650768][T10063] lo: Caught tx_queue_len zero misconfig [ 210.073406][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1363'. [ 210.190548][T10078] FAULT_INJECTION: forcing a failure. [ 210.190548][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.215920][T10078] CPU: 1 UID: 0 PID: 10078 Comm: syz.4.1366 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 210.226814][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 210.236891][T10078] Call Trace: [ 210.240196][T10078] [ 210.243126][T10078] dump_stack_lvl+0x241/0x360 [ 210.247799][T10078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.252999][T10078] ? __pfx__printk+0x10/0x10 [ 210.257709][T10078] ? snprintf+0xda/0x120 [ 210.261980][T10078] should_fail_ex+0x3b0/0x4e0 [ 210.266692][T10078] _copy_to_user+0x2f/0xb0 [ 210.271144][T10078] simple_read_from_buffer+0xca/0x150 [ 210.276557][T10078] proc_fail_nth_read+0x1e9/0x250 [ 210.281608][T10078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.287179][T10078] ? rw_verify_area+0x520/0x6b0 [ 210.292053][T10078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.297623][T10078] vfs_read+0x204/0xbc0 [ 210.301807][T10078] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.306687][T10078] ? __might_fault+0xaa/0x120 [ 210.311399][T10078] ? __pfx_vfs_read+0x10/0x10 [ 210.316118][T10078] ? bpf_lsm_socket_bind+0x9/0x10 [ 210.321177][T10078] ? security_socket_bind+0x87/0xb0 [ 210.326408][T10078] ? packet_bind+0xcb/0x130 [ 210.330946][T10078] ? __sys_bind+0x256/0x2f0 [ 210.335491][T10078] ksys_read+0x1a0/0x2c0 [ 210.339772][T10078] ? __pfx_ksys_read+0x10/0x10 [ 210.340215][T10075] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1365'. [ 210.344544][T10078] ? do_syscall_64+0x100/0x230 [ 210.344578][T10078] ? do_syscall_64+0xb6/0x230 [ 210.344600][T10078] do_syscall_64+0xf3/0x230 [ 210.344621][T10078] ? clear_bhb_loop+0x35/0x90 [ 210.344642][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.344665][T10078] RIP: 0033:0x7f891357643c [ 210.344683][T10078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 210.344700][T10078] RSP: 002b:00007f8914324040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.344721][T10078] RAX: ffffffffffffffda RBX: 00007f8913705f80 RCX: 00007f891357643c [ 210.344735][T10078] RDX: 000000000000000f RSI: 00007f89143240b0 RDI: 0000000000000004 [ 210.344747][T10078] RBP: 00007f89143240a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.344759][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.344771][T10078] R13: 000000000000000b R14: 00007f8913705f80 R15: 00007ffecb80c498 [ 210.344800][T10078] [ 210.621499][T10085] xt_hashlimit: overflow, try lower: 18446744073709551613/4294967303 [ 210.677675][T10090] Dead loop on virtual device ipvlan1, fix it urgently! [ 210.772775][T10090] syz.2.1371 (10090) used greatest stack depth: 6008 bytes left [ 210.849095][ T5230] block nbd22: Receive control failed (result -107) [ 210.914689][T10092] nbd22: detected capacity change from 0 to 256 [ 211.263802][T10127] sctp: [Deprecated]: syz.4.1381 (pid 10127) Use of int in max_burst socket option. [ 211.263802][T10127] Use struct sctp_assoc_value instead [ 211.321115][ T2555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.981450][T10139] lo speed is unknown, defaulting to 1000 [ 212.333001][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.354142][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.384486][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.392827][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.403022][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.416192][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.550156][ T2555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.614558][T10181] __nla_validate_parse: 9 callbacks suppressed [ 212.614577][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 212.707543][ T5230] block nbd23: Receive control failed (result -107) [ 212.744893][T10181] nbd23: detected capacity change from 0 to 256 [ 212.826469][ T2555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.867502][T10139] lo speed is unknown, defaulting to 1000 [ 212.895644][T10177] lo speed is unknown, defaulting to 1000 [ 213.093191][ T2555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.297137][T10213] netlink: 'syz.0.1392': attribute type 4 has an invalid length. [ 213.324820][T10213] netlink: 'syz.0.1392': attribute type 4 has an invalid length. [ 213.478049][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 213.524521][T10219] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.1394'. [ 213.535299][T10177] lo speed is unknown, defaulting to 1000 [ 213.547103][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'. [ 213.569073][T10219] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.1394'. [ 213.603604][ T2555] bridge_slave_1: left allmulticast mode [ 213.613021][ T2555] bridge_slave_1: left promiscuous mode [ 213.627728][ T2555] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.645448][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 213.656858][ T2555] bridge_slave_0: left allmulticast mode [ 213.674363][ T2555] bridge_slave_0: left promiscuous mode [ 213.680138][ T2555] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.414975][ T2555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.432739][ T2555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.455150][ T2555] bond0 (unregistering): Released all slaves [ 214.476322][ T5230] Bluetooth: hci0: command tx timeout [ 215.809845][T10177] chnl_net:caif_netlink_parms(): no params data found [ 215.831398][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 215.974527][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 215.995392][ T2555] hsr_slave_0: left promiscuous mode [ 216.001738][ T2555] hsr_slave_1: left promiscuous mode [ 216.013818][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.028771][ T5230] block nbd24: Receive control failed (result -107) [ 216.041007][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.071600][ T2555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.082660][T10243] nbd24: detected capacity change from 0 to 256 [ 216.094447][ T2555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.178802][ T2555] veth1_macvtap: left promiscuous mode [ 216.205249][ T2555] veth0_macvtap: left promiscuous mode [ 216.210966][ T2555] veth1_vlan: left promiscuous mode [ 216.237994][ T2555] veth0_vlan: left promiscuous mode [ 216.556235][ T5230] Bluetooth: hci0: command tx timeout [ 216.995942][ T2555] team0 (unregistering): Port device team_slave_1 removed [ 217.042464][ T2555] team0 (unregistering): Port device team_slave_0 removed [ 217.471958][T10250] tap0: tun_chr_ioctl cmd 2147767517 [ 217.642799][T10177] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.673979][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.703552][T10177] bridge_slave_0: entered allmulticast mode [ 217.719817][T10177] bridge_slave_0: entered promiscuous mode [ 217.742215][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.753146][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.771516][T10177] bridge_slave_1: entered allmulticast mode [ 217.789834][T10177] bridge_slave_1: entered promiscuous mode [ 217.818723][T10269] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1408'. [ 217.942292][T10271] lo speed is unknown, defaulting to 1000 [ 218.037101][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.083539][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.155179][T10280] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 218.200031][T10177] team0: Port device team_slave_0 added [ 218.227451][T10177] team0: Port device team_slave_1 added [ 218.344935][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.373880][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.416488][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.439197][T10271] lo speed is unknown, defaulting to 1000 [ 218.457999][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.483354][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.521388][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.634789][ T5230] Bluetooth: hci0: command tx timeout [ 218.723154][T10177] hsr_slave_0: entered promiscuous mode [ 218.745529][T10177] hsr_slave_1: entered promiscuous mode [ 218.763607][T10177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.788934][T10177] Cannot create hsr debugfs directory [ 219.213960][T10311] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1419'. [ 219.599131][T10317] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 219.638775][T10317] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 220.111585][T10177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.145949][T10177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.177081][T10177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.193185][T10177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.201555][T10331] Dead loop on virtual device ipvlan1, fix it urgently! [ 220.396871][T10331] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1426'. [ 220.422007][T10177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.490438][T10177] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.536993][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'. [ 220.583770][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.591025][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.651586][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.658883][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.714869][ T5230] Bluetooth: hci0: command tx timeout [ 220.740255][T10347] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1430'. [ 220.880823][T10350] FAULT_INJECTION: forcing a failure. [ 220.880823][T10350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.905968][T10350] CPU: 1 UID: 0 PID: 10350 Comm: syz.0.1431 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 220.916785][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 220.926864][T10350] Call Trace: [ 220.930154][T10350] [ 220.933091][T10350] dump_stack_lvl+0x241/0x360 [ 220.937889][T10350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.943110][T10350] ? __pfx__printk+0x10/0x10 [ 220.947725][T10350] ? __pfx_lock_release+0x10/0x10 [ 220.952782][T10350] should_fail_ex+0x3b0/0x4e0 [ 220.957491][T10350] _copy_from_iter+0x1f6/0x1960 [ 220.962356][T10350] ? __virt_addr_valid+0x183/0x530 [ 220.967482][T10350] ? __pfx_lock_release+0x10/0x10 [ 220.972534][T10350] ? __alloc_skb+0x28f/0x440 [ 220.977146][T10350] ? __pfx__copy_from_iter+0x10/0x10 [ 220.982450][T10350] ? __virt_addr_valid+0x183/0x530 [ 220.987573][T10350] ? __virt_addr_valid+0x183/0x530 [ 220.992695][T10350] ? __virt_addr_valid+0x45f/0x530 [ 220.997837][T10350] ? __check_object_size+0x49c/0x900 [ 221.003143][T10350] netlink_sendmsg+0x73d/0xcb0 [ 221.007945][T10350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.013254][T10350] ? __import_iovec+0x536/0x820 [ 221.018123][T10350] ? aa_sock_msg_perm+0x91/0x160 [ 221.023084][T10350] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 221.028393][T10350] ? security_socket_sendmsg+0x87/0xb0 [ 221.033881][T10350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.039195][T10350] __sock_sendmsg+0x221/0x270 [ 221.043989][T10350] ____sys_sendmsg+0x525/0x7d0 [ 221.048781][T10350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.054097][T10350] __sys_sendmsg+0x2b0/0x3a0 [ 221.058705][T10350] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.063835][T10350] ? vfs_write+0x7c4/0xc90 [ 221.068317][T10350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.074670][T10350] ? do_syscall_64+0x100/0x230 [ 221.079458][T10350] ? do_syscall_64+0xb6/0x230 [ 221.084157][T10350] do_syscall_64+0xf3/0x230 [ 221.088682][T10350] ? clear_bhb_loop+0x35/0x90 [ 221.093376][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.099297][T10350] RIP: 0033:0x7f64869779f9 [ 221.103727][T10350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.123351][T10350] RSP: 002b:00007f6487786048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.131793][T10350] RAX: ffffffffffffffda RBX: 00007f6486b05f80 RCX: 00007f64869779f9 [ 221.139790][T10350] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 221.147787][T10350] RBP: 00007f64877860a0 R08: 0000000000000000 R09: 0000000000000000 [ 221.155781][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.163773][T10350] R13: 000000000000000b R14: 00007f6486b05f80 R15: 00007ffe8133ee38 [ 221.171781][T10350] [ 221.366993][T10359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.411923][T10177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.486252][T10359] lo speed is unknown, defaulting to 1000 [ 221.555940][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 221.648984][T10368] team0: Device sit1 is of different type [ 221.768995][T10177] veth0_vlan: entered promiscuous mode [ 221.806778][T10177] veth1_vlan: entered promiscuous mode [ 221.929160][T10177] veth0_macvtap: entered promiscuous mode [ 221.969213][T10177] veth1_macvtap: entered promiscuous mode [ 221.994082][T10377] x_tables: duplicate underflow at hook 3 [ 222.027538][T10378] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1437'. [ 222.075840][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1437'. [ 222.125878][T10359] lo speed is unknown, defaulting to 1000 [ 222.155890][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.204887][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.244399][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.274468][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.304013][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.334610][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.376561][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.414155][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.459559][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.484284][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.507156][T10177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.597162][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.615380][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.634361][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.656452][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.694331][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.721001][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.736968][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.754663][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.774290][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.795141][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.816943][T10177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.845842][T10177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.865848][T10177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.889081][T10177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.904393][T10177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.950597][T10395] netlink: 'syz.0.1440': attribute type 5 has an invalid length. [ 222.995430][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 223.407427][T10160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.431633][T10160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.555933][ T8620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.586185][ T8620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.714839][T10409] FAULT_INJECTION: forcing a failure. [ 223.714839][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 223.764460][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.0.1444 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 223.775307][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 223.785649][T10409] Call Trace: [ 223.788950][T10409] [ 223.791889][T10409] dump_stack_lvl+0x241/0x360 [ 223.796601][T10409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.801819][T10409] ? __pfx__printk+0x10/0x10 [ 223.806458][T10409] ? ref_tracker_alloc+0x332/0x490 [ 223.811589][T10409] should_fail_ex+0x3b0/0x4e0 [ 223.816380][T10409] ? skb_clone+0x20c/0x390 [ 223.820809][T10409] should_failslab+0xac/0x100 [ 223.825519][T10409] ? skb_clone+0x20c/0x390 [ 223.829957][T10409] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 223.835364][T10409] skb_clone+0x20c/0x390 [ 223.839633][T10409] __netlink_deliver_tap+0x3cc/0x7c0 [ 223.844950][T10409] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.850176][T10409] netlink_deliver_tap+0x19d/0x1b0 [ 223.855316][T10409] netlink_unicast+0x7be/0x990 [ 223.860109][T10409] ? __pfx_netlink_unicast+0x10/0x10 [ 223.865412][T10409] ? __virt_addr_valid+0x183/0x530 [ 223.870543][T10409] ? __check_object_size+0x49c/0x900 [ 223.875850][T10409] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.880983][T10409] netlink_sendmsg+0x8e4/0xcb0 [ 223.886117][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.891403][T10409] ? __import_iovec+0x536/0x820 [ 223.896248][T10409] ? aa_sock_msg_perm+0x91/0x160 [ 223.901184][T10409] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.906467][T10409] ? security_socket_sendmsg+0x87/0xb0 [ 223.911927][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.917207][T10409] __sock_sendmsg+0x221/0x270 [ 223.921883][T10409] ____sys_sendmsg+0x525/0x7d0 [ 223.926653][T10409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.931949][T10409] __sys_sendmsg+0x2b0/0x3a0 [ 223.936543][T10409] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.941658][T10409] ? vfs_write+0x7c4/0xc90 [ 223.946107][T10409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.952470][T10409] ? do_syscall_64+0x100/0x230 [ 223.957240][T10409] ? do_syscall_64+0xb6/0x230 [ 223.961920][T10409] do_syscall_64+0xf3/0x230 [ 223.966420][T10409] ? clear_bhb_loop+0x35/0x90 [ 223.971091][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.976982][T10409] RIP: 0033:0x7f64869779f9 [ 223.981389][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.000985][T10409] RSP: 002b:00007f6487786048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.009395][T10409] RAX: ffffffffffffffda RBX: 00007f6486b05f80 RCX: 00007f64869779f9 [ 224.017355][T10409] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 224.025321][T10409] RBP: 00007f64877860a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.033281][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.041241][T10409] R13: 000000000000000b R14: 00007f6486b05f80 R15: 00007ffe8133ee38 [ 224.049215][T10409] [ 224.055260][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 224.580190][T10359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.993860][T10452] FAULT_INJECTION: forcing a failure. [ 224.993860][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 225.009700][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.0.1456 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 225.020516][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 225.030596][T10452] Call Trace: [ 225.033889][T10452] [ 225.036847][T10452] dump_stack_lvl+0x241/0x360 [ 225.041567][T10452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.046800][T10452] ? __pfx__printk+0x10/0x10 [ 225.051418][T10452] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 225.056894][T10452] ? __pfx___might_resched+0x10/0x10 [ 225.062174][T10452] ? trace_contention_end+0x3c/0x120 [ 225.067463][T10452] should_fail_ex+0x3b0/0x4e0 [ 225.072144][T10452] should_failslab+0xac/0x100 [ 225.076822][T10452] ? genl_start+0x1cb/0x6d0 [ 225.081320][T10452] __kmalloc_cache_noprof+0x6c/0x2c0 [ 225.086608][T10452] genl_start+0x1cb/0x6d0 [ 225.090944][T10452] __netlink_dump_start+0x45c/0x780 [ 225.096149][T10452] genl_rcv_msg+0x88c/0xec0 [ 225.100752][T10452] ? mark_lock+0x9a/0x350 [ 225.105119][T10452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.110155][T10452] ? __pfx_genl_start+0x10/0x10 [ 225.115000][T10452] ? __pfx_genl_dumpit+0x10/0x10 [ 225.119926][T10452] ? __pfx_genl_done+0x10/0x10 [ 225.124695][T10452] ? __pfx_lock_acquire+0x10/0x10 [ 225.129725][T10452] ? __pfx_fou_nl_get_dumpit+0x10/0x10 [ 225.135179][T10452] ? __pfx___might_resched+0x10/0x10 [ 225.140468][T10452] netlink_rcv_skb+0x1e3/0x430 [ 225.145232][T10452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.150250][T10452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.155542][T10452] ? __netlink_deliver_tap+0x77e/0x7c0 [ 225.161007][T10452] genl_rcv+0x28/0x40 [ 225.164983][T10452] netlink_unicast+0x7f0/0x990 [ 225.169747][T10452] ? __pfx_netlink_unicast+0x10/0x10 [ 225.175023][T10452] ? __virt_addr_valid+0x183/0x530 [ 225.180137][T10452] ? __check_object_size+0x49c/0x900 [ 225.185418][T10452] ? bpf_lsm_netlink_send+0x9/0x10 [ 225.190529][T10452] netlink_sendmsg+0x8e4/0xcb0 [ 225.195304][T10452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.200588][T10452] ? __import_iovec+0x536/0x820 [ 225.205433][T10452] ? aa_sock_msg_perm+0x91/0x160 [ 225.210366][T10452] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 225.215651][T10452] ? security_socket_sendmsg+0x87/0xb0 [ 225.221106][T10452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.226473][T10452] __sock_sendmsg+0x221/0x270 [ 225.231185][T10452] ____sys_sendmsg+0x525/0x7d0 [ 225.235967][T10452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.241264][T10452] __sys_sendmsg+0x2b0/0x3a0 [ 225.245854][T10452] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.250956][T10452] ? vfs_write+0x7c4/0xc90 [ 225.255403][T10452] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.261733][T10452] ? do_syscall_64+0x100/0x230 [ 225.266502][T10452] ? do_syscall_64+0xb6/0x230 [ 225.271181][T10452] do_syscall_64+0xf3/0x230 [ 225.275683][T10452] ? clear_bhb_loop+0x35/0x90 [ 225.280357][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.286257][T10452] RIP: 0033:0x7f64869779f9 [ 225.290667][T10452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.310276][T10452] RSP: 002b:00007f6487786048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.318687][T10452] RAX: ffffffffffffffda RBX: 00007f6486b05f80 RCX: 00007f64869779f9 [ 225.326653][T10452] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 225.334618][T10452] RBP: 00007f64877860a0 R08: 0000000000000000 R09: 0000000000000000 [ 225.342577][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.350541][T10452] R13: 000000000000000b R14: 00007f6486b05f80 R15: 00007ffe8133ee38 [ 225.358519][T10452] [ 225.426967][T10454] netlink: 'syz.1.1459': attribute type 13 has an invalid length. [ 225.520058][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 225.525918][T10460] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 225.542806][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 225.638896][T10468] netlink: 'syz.1.1460': attribute type 3 has an invalid length. [ 225.708101][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 225.772503][T10472] x_tables: duplicate underflow at hook 3 [ 225.890393][T10482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1465'. [ 225.919235][T10485] netlink: 'syz.0.1465': attribute type 21 has an invalid length. [ 225.927215][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 225.958131][T10485] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1465'. [ 225.990018][T10485] netlink: 'syz.0.1465': attribute type 4 has an invalid length. [ 226.016769][T10485] netlink: 'syz.0.1465': attribute type 5 has an invalid length. [ 226.041797][T10485] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1465'. [ 226.102968][T10495] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1468'. [ 226.271867][T10499] netlink: 'syz.2.1469': attribute type 7 has an invalid length. [ 226.400970][ T8620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.659617][ T8620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.734990][ T8620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.812184][ T8620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.930972][T10506] ip6t_srh: unknown srh match flags 4001 [ 226.950224][T10506] netlink: 'syz.0.1471': attribute type 11 has an invalid length. [ 227.043441][T10512] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 227.176857][ T8620] bridge_slave_1: left allmulticast mode [ 227.204384][ T8620] bridge_slave_1: left promiscuous mode [ 227.225471][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.296787][ T8620] bridge_slave_0: left allmulticast mode [ 227.316994][ T8620] bridge_slave_0: left promiscuous mode [ 227.339856][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.452089][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.466002][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.475279][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.483457][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.493176][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.500740][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.745274][T10509] xt_recent: Unsupported userspace flags (00000042) [ 228.141022][ T8620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.163171][ T8620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.181786][ T8620] bond0 (unregistering): Released all slaves [ 228.248381][T10529] netlink: 'syz.1.1472': attribute type 4 has an invalid length. [ 228.264400][T10529] __nla_validate_parse: 1 callbacks suppressed [ 228.264431][T10529] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1472'. [ 228.362015][T10527] lo speed is unknown, defaulting to 1000 [ 228.381782][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 228.877077][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1480'. [ 228.918233][T10527] lo speed is unknown, defaulting to 1000 [ 229.605402][ T5230] Bluetooth: hci0: command tx timeout [ 230.201885][ T8620] hsr_slave_0: left promiscuous mode [ 230.220421][ T8620] hsr_slave_1: left promiscuous mode [ 230.236469][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.261995][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.288417][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.314442][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.361991][ T8620] veth1_macvtap: left promiscuous mode [ 230.370201][ T8620] veth0_macvtap: left promiscuous mode [ 230.376144][ T8620] veth1_vlan: left promiscuous mode [ 230.384737][ T8620] veth0_vlan: left promiscuous mode [ 231.308156][ T8620] team0 (unregistering): Port device team_slave_1 removed [ 231.365693][ T8620] team0 (unregistering): Port device team_slave_0 removed [ 231.685311][ T5230] Bluetooth: hci0: command tx timeout [ 232.089804][T10604] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1493'. [ 232.113336][T10584] netlink: 'syz.1.1490': attribute type 3 has an invalid length. [ 232.142002][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.263290][T10527] chnl_net:caif_netlink_parms(): no params data found [ 232.317042][T10604] pim6reg1: entered promiscuous mode [ 232.334354][T10604] pim6reg1: entered allmulticast mode [ 232.353700][T10608] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 232.374861][T10608] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 232.405479][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 232.646178][T10527] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.664024][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.683061][T10527] bridge_slave_0: entered allmulticast mode [ 232.707007][T10527] bridge_slave_0: entered promiscuous mode [ 232.735104][T10527] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.766838][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.790853][T10527] bridge_slave_1: entered allmulticast mode [ 232.811643][T10527] bridge_slave_1: entered promiscuous mode [ 232.906611][T10527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.929802][T10527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.171489][T10527] team0: Port device team_slave_0 added [ 233.200104][T10527] team0: Port device team_slave_1 added [ 233.260400][T10647] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.270519][T10647] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.279750][T10647] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.288551][T10647] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.505961][T10527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.518572][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.566774][T10527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.601820][T10527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.609217][T10527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.636951][T10527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.755553][ T5244] Bluetooth: hci0: command tx timeout [ 233.852054][T10671] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1509'. [ 233.872310][T10527] hsr_slave_0: entered promiscuous mode [ 233.887547][T10527] hsr_slave_1: entered promiscuous mode [ 233.913817][T10527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.935505][T10527] Cannot create hsr debugfs directory [ 233.960085][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'. [ 234.299630][T10686] netlink: 'syz.4.1514': attribute type 4 has an invalid length. [ 234.475071][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1518'. [ 234.670227][T10705] lo speed is unknown, defaulting to 1000 [ 234.825590][T10527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.834875][T10712] sctp: [Deprecated]: syz.2.1522 (pid 10712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.834875][T10712] Use struct sctp_sack_info instead [ 234.869482][T10527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.900108][T10527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.923721][T10709] sctp: [Deprecated]: syz.2.1522 (pid 10709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.923721][T10709] Use struct sctp_sack_info instead [ 234.968811][T10527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.196854][T10724] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1524'. [ 235.269953][T10527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.297839][T10705] lo speed is unknown, defaulting to 1000 [ 235.348651][T10527] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.439378][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.446730][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.491423][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.498668][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.734890][T10741] netlink: 'syz.2.1530': attribute type 4 has an invalid length. [ 235.844400][ T5244] Bluetooth: hci0: command 0x0419 tx timeout [ 236.185889][T10527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.321228][T10527] veth0_vlan: entered promiscuous mode [ 236.410649][T10527] veth1_vlan: entered promiscuous mode [ 236.464966][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 236.511229][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1534'. [ 236.517390][T10527] veth0_macvtap: entered promiscuous mode [ 236.612234][T10776] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1536'. [ 236.614950][T10527] veth1_macvtap: entered promiscuous mode [ 236.675771][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.697075][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.717341][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.750243][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.771759][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.808408][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.829205][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.856801][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.893663][T10527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.936773][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.975317][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.001323][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.035879][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.045942][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.057056][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.070635][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.081361][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.091794][T10527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.121154][T10527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.143990][T10527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.248389][T10527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.270130][T10527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.288074][T10527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.300607][T10527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.316776][T10794] netlink: 'syz.2.1541': attribute type 4 has an invalid length. [ 237.340149][T10785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1538'. [ 237.620950][T10160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.639593][T10160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.757502][T10160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.775839][T10160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.914851][ T5230] Bluetooth: hci0: command 0x0419 tx timeout [ 238.171817][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 238.181439][T10828] netlink: 'syz.2.1554': attribute type 4 has an invalid length. [ 238.561285][T10848] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 238.579951][T10848] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1559'. [ 239.043361][T10843] infiniband syz1: set active [ 239.072176][T10843] infiniband syz1: added bond0 [ 239.112377][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 239.177673][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 239.215660][T10843] RDS/IB: syz1: added [ 239.219938][T10843] smc: adding ib device syz1 with port count 1 [ 239.226727][T10843] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 239.403982][T10884] netlink: 'syz.4.1568': attribute type 4 has an invalid length. [ 239.443841][T10883] Dead loop on virtual device ipvlan1, fix it urgently! [ 239.474650][T10883] Dead loop on virtual device ipvlan1, fix it urgently! [ 239.775055][T10897] netlink: 2096 bytes leftover after parsing attributes in process `syz.0.1574'. [ 239.814384][T10897] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1574'. [ 239.834417][T10897] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1574'. [ 239.843560][T10895] can: request_module (can-proto-5) failed. [ 240.051114][T10908] netlink: 'syz.2.1578': attribute type 4 has an invalid length. [ 240.115891][T10160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.982016][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.041397][T10160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.080125][T10920] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1579'. [ 241.101352][T10922] netlink: 'syz.1.1580': attribute type 4 has an invalid length. [ 241.205254][T10160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.233954][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 241.256679][T10924] netlink: 'syz.4.1582': attribute type 4 has an invalid length. [ 241.271410][T10927] netlink: 'syz.4.1582': attribute type 4 has an invalid length. [ 241.272306][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.301249][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.311575][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 241.321983][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.333185][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.353704][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 241.366999][T10160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.377508][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 241.387037][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.416643][ T5244] block nbd25: Receive control failed (result -107) [ 241.458646][T10931] lo speed is unknown, defaulting to 1000 [ 241.474961][T10930] nbd25: detected capacity change from 0 to 256 [ 241.590417][T10160] bridge_slave_1: left allmulticast mode [ 241.604059][T10160] bridge_slave_1: left promiscuous mode [ 241.616774][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.636515][T10160] bridge_slave_0: left allmulticast mode [ 241.643554][T10160] bridge_slave_0: left promiscuous mode [ 241.652446][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.802386][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 242.084056][T10950] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 242.358454][T10160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.371422][T10160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.383694][T10160] bond0 (unregistering): Released all slaves [ 242.400434][T10931] lo speed is unknown, defaulting to 1000 [ 242.407072][T10941] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 242.444006][T10941] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 243.287824][T10985] xt_bpf: check failed: parse error [ 243.434932][ T5244] Bluetooth: hci0: command tx timeout [ 244.300965][T10160] hsr_slave_0: left promiscuous mode [ 244.330452][T11005] IPVS: length: 4096 != 8 [ 244.342015][T10160] hsr_slave_1: left promiscuous mode [ 244.354821][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.362304][T10160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.394040][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.413634][T10160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.458320][T10160] veth1_macvtap: left promiscuous mode [ 244.463909][T10160] veth0_macvtap: left promiscuous mode [ 244.484879][T10160] veth1_vlan: left promiscuous mode [ 244.490277][T10160] veth0_vlan: left promiscuous mode [ 245.036806][T11018] __nla_validate_parse: 4 callbacks suppressed [ 245.036827][T11018] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1610'. [ 245.508509][T10160] team0 (unregistering): Port device team_slave_1 removed [ 245.517922][ T5244] Bluetooth: hci0: command tx timeout [ 245.572414][T10160] team0 (unregistering): Port device team_slave_0 removed [ 246.264348][T11005] netlink: 'syz.4.1605': attribute type 8 has an invalid length. [ 246.299975][T11018] openvswitch: Êü: Dropping previously announced user features [ 246.316811][T10931] chnl_net:caif_netlink_parms(): no params data found [ 246.685642][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.692826][T10931] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.706857][T10931] bridge_slave_0: entered allmulticast mode [ 246.723267][T10931] bridge_slave_0: entered promiscuous mode [ 246.748031][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.763220][T10931] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.792947][T10931] bridge_slave_1: entered allmulticast mode [ 246.816560][T10931] bridge_slave_1: entered promiscuous mode [ 247.020275][T10931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.059036][T10931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.199456][T10931] team0: Port device team_slave_0 added [ 247.242305][T10931] team0: Port device team_slave_1 added [ 247.343259][T10931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.358101][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.431606][T10931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.482671][T10931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.490029][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.507283][T11061] Bluetooth: MGMT ver 1.23 [ 247.520295][T10931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.594686][ T5244] Bluetooth: hci0: command tx timeout [ 247.613842][T10931] hsr_slave_0: entered promiscuous mode [ 247.632384][T10931] hsr_slave_1: entered promiscuous mode [ 247.640883][T10931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.650883][T10931] Cannot create hsr debugfs directory [ 247.755553][T11068] sit0: entered promiscuous mode [ 247.789698][T11068] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 247.805260][T11068] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1624'. [ 247.876588][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1624'. [ 248.221253][T11096] netlink: 'syz.0.1631': attribute type 13 has an invalid length. [ 248.245502][T11096] macvtap0: entered allmulticast mode [ 248.250932][T11096] veth0_macvtap: entered allmulticast mode [ 248.258766][T11096] macvtap0: refused to change device tx_queue_len [ 248.313825][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 248.380398][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 248.553773][T11112] Dead loop on virtual device ipvlan1, fix it urgently! [ 248.667535][T10931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.678568][T10931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.690515][T10931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.701794][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1636'. [ 248.714458][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1636'. [ 248.724850][T10931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.937704][T10931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.032037][T10931] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.056366][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.063599][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.096975][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.104166][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.193413][T11138] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 249.207243][T11138] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 249.229399][T10931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.257183][T10931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.385045][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 249.551968][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 249.584444][T11153] netlink: 'syz.0.1648': attribute type 4 has an invalid length. [ 249.674703][ T5244] Bluetooth: hci0: command tx timeout [ 249.709741][T10931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.802869][T10931] veth0_vlan: entered promiscuous mode [ 249.833524][T10931] veth1_vlan: entered promiscuous mode [ 249.965216][T10931] veth0_macvtap: entered promiscuous mode [ 249.988038][T10931] veth1_macvtap: entered promiscuous mode [ 250.056466][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.091524][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.120649][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.140029][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.152580][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.199324][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.237167][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.261351][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.291082][T10931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.334753][T11184] tipc: Can't bind to reserved service type 0 [ 250.362696][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 250.442458][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.496561][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.536638][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.560987][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.580178][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.612402][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.630643][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 250.650600][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.673847][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.695704][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.731904][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.759662][T10931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.800631][T10931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.831362][T10931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.856015][T10931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.865085][T11198] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1657'. [ 250.885594][T10931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.008283][T11202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1658'. [ 251.130651][T10166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.148331][T10166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.180488][T11204] netlink: 'syz.4.1660': attribute type 4 has an invalid length. [ 251.263092][ T2555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.289605][ T2555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.399250][T11217] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1663'. [ 251.571569][T11226] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1666'. [ 251.693869][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 251.791439][T11236] netlink: 'syz.0.1669': attribute type 23 has an invalid length. [ 251.963613][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 251.983940][T11244] netlink: 'syz.4.1673': attribute type 4 has an invalid length. [ 252.005173][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 252.046312][ T5244] block nbd26: Receive control failed (result -107) [ 252.050276][T11246] lo speed is unknown, defaulting to 1000 [ 252.075688][T11243] nbd26: detected capacity change from 0 to 256 [ 252.186087][T11254] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1678'. [ 252.346427][T11257] IPVS: Scheduler module ip_vs_sip not found [ 252.716139][T11274] TCP: TCP_TX_DELAY enabled [ 252.745626][T11274] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 252.753098][T11246] lo speed is unknown, defaulting to 1000 [ 252.958880][T11277] openvswitch: Êü: Dropping previously announced user features [ 253.179373][T11287] netlink: 'syz.4.1686': attribute type 4 has an invalid length. [ 253.406642][ T5244] block nbd27: Receive control failed (result -107) [ 253.466914][T11291] nbd27: detected capacity change from 0 to 256 [ 254.286491][T10160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.621639][T10160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.781469][T10160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.013112][T10160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.018201][T11326] Dead loop on virtual device ipvlan1, fix it urgently! [ 255.278086][T11334] netlink: 'syz.0.1699': attribute type 4 has an invalid length. [ 255.281226][T11336] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 255.311880][T10160] bridge_slave_1: left allmulticast mode [ 255.333209][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.356356][T10160] bridge_slave_1: left promiscuous mode [ 255.356405][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.373857][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.379493][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.408880][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.417249][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.429313][T10160] bridge_slave_0: left allmulticast mode [ 255.434987][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.481337][T10160] bridge_slave_0: left promiscuous mode [ 255.496975][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.561643][T11347] __nla_validate_parse: 8 callbacks suppressed [ 255.561663][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 255.695473][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 255.770704][ T5244] block nbd28: Receive control failed (result -107) [ 255.794478][T11347] nbd28: detected capacity change from 0 to 256 [ 256.173106][T10160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.186666][T10160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.201671][T10160] bond0 (unregistering): Released all slaves [ 256.357618][T11337] lo speed is unknown, defaulting to 1000 [ 256.424104][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 256.443111][T11372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1709'. [ 256.695301][T11381] pim6reg1: entered promiscuous mode [ 256.714874][ T30] INFO: task udevd:5224 blocked for more than 143 seconds. [ 256.723636][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 256.734566][T11381] pim6reg1: entered allmulticast mode [ 256.748610][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.767103][T11337] lo speed is unknown, defaulting to 1000 [ 256.772868][T11386] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 256.774863][T11385] netlink: 'syz.2.1712': attribute type 4 has an invalid length. [ 256.789601][ T30] task:udevd state:D stack:20280 pid:5224 tgid:5224 ppid:1 flags:0x00004002 [ 256.811110][ T30] Call Trace: [ 256.821042][ T30] [ 256.824045][ T30] __schedule+0x1800/0x4a60 [ 256.841339][ T30] ? __pfx___schedule+0x10/0x10 [ 256.846370][ T30] ? __blk_flush_plug+0x449/0x500 [ 256.864568][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.869687][ T30] ? __asan_memset+0x23/0x50 [ 256.884329][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 256.890229][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.896919][ T30] ? schedule+0x90/0x320 [ 256.901191][ T30] schedule+0x14b/0x320 [ 256.907699][ T30] schedule_timeout+0x1be/0x310 [ 256.912614][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 256.918247][ T30] ? __pfx_process_timeout+0x10/0x10 [ 256.924039][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 256.932318][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 256.937169][ T30] ? __pfx_validate_chain+0x10/0x10 [ 256.942589][ T30] ? validate_chain+0x11e/0x5900 [ 256.947883][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 256.953217][ T30] ? __lock_acquire+0x137a/0x2040 [ 256.967400][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.973754][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 256.979718][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 256.985313][ T30] ? sbitmap_get+0x289/0x3f0 [ 256.990131][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 256.996406][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 257.002438][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 257.017341][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 257.032446][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 257.040945][ T30] ? __pfx___might_resched+0x10/0x10 [ 257.046631][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 257.052746][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 257.058556][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 257.063725][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 257.069159][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 257.074839][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 257.080758][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 257.086384][ T30] __blk_flush_plug+0x420/0x500 [ 257.091273][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 257.096892][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 257.102071][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 257.107377][ T30] __submit_bio+0x422/0x560 [ 257.111904][ T30] ? __pfx___submit_bio+0x10/0x10 [ 257.117538][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 257.123838][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 257.130729][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 257.138807][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 257.145286][ T30] ? __pfx___might_resched+0x10/0x10 [ 257.150610][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 257.158529][ T30] block_read_full_folio+0x93b/0xcd0 [ 257.163851][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 257.169384][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 257.175537][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 257.180418][ T30] ? folio_add_lru+0x357/0xd70 [ 257.185295][ T30] ? folio_add_lru+0x58f/0xd70 [ 257.190086][ T30] filemap_read_folio+0x1a0/0x790 [ 257.195316][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.200797][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 257.206685][ T30] ? __filemap_get_folio+0x984/0xc10 [ 257.212025][ T30] do_read_cache_folio+0x134/0x820 [ 257.217226][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.222712][ T30] read_part_sector+0xb3/0x330 [ 257.227561][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 257.232729][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 257.237849][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.243422][ T30] ? snprintf+0xda/0x120 [ 257.250034][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 257.255823][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 257.260449][ T30] ? vsnprintf+0x184/0x1da0 [ 257.267790][ T30] ? __pfx_snprintf+0x10/0x10 [ 257.272521][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 257.277741][ T30] bdev_disk_changed+0x72c/0x13d0 [ 257.282813][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 257.288364][ T30] blkdev_get_whole+0x2d2/0x450 [ 257.293251][ T30] bdev_open+0x2d4/0xc60 [ 257.297714][ T30] blkdev_open+0x3e8/0x570 [ 257.302142][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 257.307202][ T30] do_dentry_open+0x970/0x1440 [ 257.312024][ T30] vfs_open+0x3e/0x330 [ 257.316281][ T30] path_openat+0x2b3e/0x3470 [ 257.320905][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 257.326631][ T30] ? __lock_acquire+0x137a/0x2040 [ 257.332036][ T30] ? __pfx_path_openat+0x10/0x10 [ 257.337119][ T30] do_filp_open+0x235/0x490 [ 257.341665][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 257.346811][ T30] ? _raw_spin_unlock+0x28/0x50 [ 257.351692][ T30] ? alloc_fd+0x5a1/0x640 [ 257.358369][ T30] do_sys_openat2+0x13e/0x1d0 [ 257.363115][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.368688][ T30] __x64_sys_openat+0x247/0x2a0 [ 257.373598][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.380371][ T30] ? do_syscall_64+0x100/0x230 [ 257.385522][ T30] ? do_syscall_64+0xb6/0x230 [ 257.390235][ T30] do_syscall_64+0xf3/0x230 [ 257.394801][ T30] ? clear_bhb_loop+0x35/0x90 [ 257.399474][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.405459][ T30] RIP: 0033:0x7f7f619169a4 [ 257.409886][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.418518][ T30] RAX: ffffffffffffffda RBX: 000056537fdb4e10 RCX: 00007f7f619169a4 [ 257.426558][ T30] RDX: 00000000000a0800 RSI: 000056537fd94560 RDI: 00000000ffffff9c [ 257.435308][ T30] RBP: 000056537fd94560 R08: 0000000000000001 R09: 7fffffffffffffff [ 257.443314][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 257.451475][ T30] R13: 000056537fda4a70 R14: 0000000000000001 R15: 000056537fd93910 [ 257.459514][ T30] [ 257.462552][ T30] INFO: task udevd:5237 blocked for more than 144 seconds. [ 257.472170][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 257.480000][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.491225][ T30] task:udevd state:D stack:20536 pid:5237 tgid:5237 ppid:1 flags:0x00004002 [ 257.501713][ T30] Call Trace: [ 257.505312][ T30] [ 257.508274][ T30] __schedule+0x1800/0x4a60 [ 257.512831][ T30] ? __pfx___schedule+0x10/0x10 [ 257.518034][ T5244] Bluetooth: hci0: command tx timeout [ 257.518074][ T30] ? __blk_flush_plug+0x449/0x500 [ 257.518099][ T30] ? __pfx_lock_release+0x10/0x10 [ 257.533909][ T30] ? __asan_memset+0x23/0x50 [ 257.539193][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 257.545107][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.551459][ T30] ? schedule+0x90/0x320 [ 257.555779][ T30] schedule+0x14b/0x320 [ 257.559953][ T30] schedule_timeout+0x1be/0x310 [ 257.565129][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 257.570526][ T30] ? __pfx_process_timeout+0x10/0x10 [ 257.577393][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 257.582875][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 257.587546][ T30] ? __pfx_validate_chain+0x10/0x10 [ 257.592761][ T30] ? validate_chain+0x11e/0x5900 [ 257.599710][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 257.604849][ T30] ? __lock_acquire+0x137a/0x2040 [ 257.609926][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 257.616166][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 257.621755][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 257.627183][ T30] ? sbitmap_get+0x289/0x3f0 [ 257.631820][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 257.637889][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 257.644003][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 257.650458][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 257.657401][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 257.662697][ T30] ? __pfx___might_resched+0x10/0x10 [ 257.668110][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 257.674117][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 257.680371][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 257.688244][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 257.693582][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 257.699211][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 257.707638][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 257.712973][ T30] __blk_flush_plug+0x420/0x500 [ 257.718143][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 257.723546][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 257.728748][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 257.733969][ T30] __submit_bio+0x422/0x560 [ 257.738625][ T30] ? __pfx___submit_bio+0x10/0x10 [ 257.743836][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 257.750401][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 257.757148][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 257.762820][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 257.769597][ T30] ? __pfx___might_resched+0x10/0x10 [ 257.775212][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 257.781423][ T30] block_read_full_folio+0x93b/0xcd0 [ 257.786838][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 257.792229][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 257.798169][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 257.803050][ T30] ? folio_add_lru+0x357/0xd70 [ 257.809273][ T30] ? folio_add_lru+0x58f/0xd70 [ 257.814055][ T30] filemap_read_folio+0x1a0/0x790 [ 257.820543][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.826132][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 257.831704][ T30] ? __filemap_get_folio+0x984/0xc10 [ 257.848289][ T30] do_read_cache_folio+0x134/0x820 [ 257.853474][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.858998][ T30] read_part_sector+0xb3/0x330 [ 257.863775][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 257.868811][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 257.873603][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.879348][ T30] ? snprintf+0xda/0x120 [ 257.883619][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 257.889384][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 257.894013][ T30] ? vsnprintf+0x184/0x1da0 [ 257.898602][ T30] ? __pfx_snprintf+0x10/0x10 [ 257.903299][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 257.908249][ T30] bdev_disk_changed+0x72c/0x13d0 [ 257.913284][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 257.921409][ T30] blkdev_get_whole+0x2d2/0x450 [ 257.928384][ T30] bdev_open+0x2d4/0xc60 [ 257.932657][ T30] blkdev_open+0x3e8/0x570 [ 257.937421][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 257.942386][ T30] do_dentry_open+0x970/0x1440 [ 257.947584][ T30] vfs_open+0x3e/0x330 [ 257.951685][ T30] path_openat+0x2b3e/0x3470 [ 257.956362][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 257.961775][ T30] ? __lock_acquire+0x137a/0x2040 [ 257.967158][ T30] ? __pfx_path_openat+0x10/0x10 [ 257.972125][ T30] do_filp_open+0x235/0x490 [ 257.976723][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 257.981777][ T30] ? _raw_spin_unlock+0x28/0x50 [ 257.986705][ T30] ? alloc_fd+0x5a1/0x640 [ 257.991078][ T30] do_sys_openat2+0x13e/0x1d0 [ 258.004242][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.009504][ T30] __x64_sys_openat+0x247/0x2a0 [ 258.014604][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.020008][ T30] ? do_syscall_64+0x100/0x230 [ 258.027267][ T30] ? do_syscall_64+0xb6/0x230 [ 258.032030][ T30] do_syscall_64+0xf3/0x230 [ 258.038862][ T30] ? clear_bhb_loop+0x35/0x90 [ 258.043564][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.049909][ T30] RIP: 0033:0x7f7f619169a4 [ 258.054636][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.063093][ T30] RAX: ffffffffffffffda RBX: 000056537fda8c10 RCX: 00007f7f619169a4 [ 258.071159][ T30] RDX: 00000000000a0800 RSI: 000056537fdb3a10 RDI: 00000000ffffff9c [ 258.079356][ T30] RBP: 000056537fdb3a10 R08: 0000000000000001 R09: 7fffffffffffffff [ 258.087747][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 258.095863][ T30] R13: 000056537fda4a70 R14: 0000000000000001 R15: 000056537fd93910 [ 258.103876][ T30] [ 258.107096][ T30] INFO: task udevd:5240 blocked for more than 144 seconds. [ 258.117374][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 258.125142][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.133946][ T30] task:udevd state:D stack:21072 pid:5240 tgid:5240 ppid:1 flags:0x00004002 [ 258.147747][ T30] Call Trace: [ 258.151272][ T30] [ 258.154618][ T30] __schedule+0x1800/0x4a60 [ 258.159189][ T30] ? __pfx___schedule+0x10/0x10 [ 258.164088][ T30] ? __blk_flush_plug+0x449/0x500 [ 258.169177][ T30] ? __pfx_lock_release+0x10/0x10 [ 258.174545][ T30] ? __asan_memset+0x23/0x50 [ 258.179171][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 258.185088][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.191446][ T30] ? schedule+0x90/0x320 [ 258.195788][ T30] schedule+0x14b/0x320 [ 258.199976][ T30] schedule_timeout+0x1be/0x310 [ 258.205158][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 258.210546][ T30] ? __pfx_process_timeout+0x10/0x10 [ 258.215919][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 258.221406][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 258.226067][ T30] ? __pfx_validate_chain+0x10/0x10 [ 258.231279][ T30] ? validate_chain+0x11e/0x5900 [ 258.238083][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 258.243265][ T30] ? __lock_acquire+0x137a/0x2040 [ 258.248582][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 258.259430][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 258.265456][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 258.270517][ T30] ? sbitmap_get+0x289/0x3f0 [ 258.275194][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 258.281198][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 258.287073][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 258.293418][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 258.300369][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 258.305709][ T30] ? __pfx___might_resched+0x10/0x10 [ 258.311026][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 258.317153][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 258.322519][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 258.327834][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 258.333124][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 258.338760][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 258.344743][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 258.350072][ T30] __blk_flush_plug+0x420/0x500 [ 258.355249][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 258.360828][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 258.369672][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 258.374989][ T30] __submit_bio+0x422/0x560 [ 258.379532][ T30] ? __pfx___submit_bio+0x10/0x10 [ 258.384891][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 258.391153][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 258.397927][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 258.403585][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 258.409682][ T30] ? __pfx___might_resched+0x10/0x10 [ 258.415307][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 258.421507][ T30] block_read_full_folio+0x93b/0xcd0 [ 258.426893][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 258.432281][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 258.438185][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 258.443060][ T30] ? folio_add_lru+0x357/0xd70 [ 258.447997][ T30] ? folio_add_lru+0x58f/0xd70 [ 258.452791][ T30] filemap_read_folio+0x1a0/0x790 [ 258.457909][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 258.463542][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 258.469179][ T30] ? __filemap_get_folio+0x984/0xc10 [ 258.479026][ T30] do_read_cache_folio+0x134/0x820 [ 258.484242][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 258.489720][ T30] read_part_sector+0xb3/0x330 [ 258.494587][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 258.499554][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 258.504836][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 258.510405][ T30] ? snprintf+0xda/0x120 [ 258.514730][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 258.520477][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 258.525143][ T30] ? vsnprintf+0x184/0x1da0 [ 258.529952][ T30] ? __pfx_snprintf+0x10/0x10 [ 258.534981][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 258.539780][ T30] bdev_disk_changed+0x72c/0x13d0 [ 258.544888][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 258.550370][ T30] blkdev_get_whole+0x2d2/0x450 [ 258.555689][ T30] bdev_open+0x2d4/0xc60 [ 258.559960][ T30] blkdev_open+0x3e8/0x570 [ 258.564924][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 258.569888][ T30] do_dentry_open+0x970/0x1440 [ 258.574771][ T30] vfs_open+0x3e/0x330 [ 258.578851][ T30] path_openat+0x2b3e/0x3470 [ 258.583438][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 258.592540][ T30] ? __lock_acquire+0x137a/0x2040 [ 258.597993][ T30] ? __pfx_path_openat+0x10/0x10 [ 258.602967][ T30] do_filp_open+0x235/0x490 [ 258.607547][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 258.612585][ T30] ? _raw_spin_unlock+0x28/0x50 [ 258.617511][ T30] ? alloc_fd+0x5a1/0x640 [ 258.621866][ T30] do_sys_openat2+0x13e/0x1d0 [ 258.626875][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.632099][ T30] __x64_sys_openat+0x247/0x2a0 [ 258.644306][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.649750][ T30] ? do_syscall_64+0x100/0x230 [ 258.658104][ T30] ? do_syscall_64+0xb6/0x230 [ 258.663041][ T30] do_syscall_64+0xf3/0x230 [ 258.667662][ T30] ? clear_bhb_loop+0x35/0x90 [ 258.672360][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.678332][ T30] RIP: 0033:0x7f7f619169a4 [ 258.682746][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.691391][ T30] RAX: ffffffffffffffda RBX: 000056537fda7230 RCX: 00007f7f619169a4 [ 258.702314][ T30] RDX: 00000000000a0800 RSI: 000056537fda0ff0 RDI: 00000000ffffff9c [ 258.710436][ T30] RBP: 000056537fda0ff0 R08: 00000000ffffffff R09: 7fffffffffffffff [ 258.719541][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 258.727612][ T30] R13: 000056537fd9ca90 R14: 0000000000000001 R15: 000056537fd93910 [ 258.735672][ T30] [ 258.738722][ T30] INFO: task udevd:6472 blocked for more than 145 seconds. [ 258.749991][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 258.757724][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.766631][ T30] task:udevd state:D stack:22032 pid:6472 tgid:6472 ppid:1 flags:0x00004002 [ 258.777158][ T30] Call Trace: [ 258.780452][ T30] [ 258.783390][ T30] __schedule+0x1800/0x4a60 [ 258.787988][ T30] ? __pfx___schedule+0x10/0x10 [ 258.792861][ T30] ? __blk_flush_plug+0x449/0x500 [ 258.798788][ T30] ? __pfx_lock_release+0x10/0x10 [ 258.803816][ T30] ? __asan_memset+0x23/0x50 [ 258.813504][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 258.819481][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.825899][ T30] ? schedule+0x90/0x320 [ 258.830152][ T30] schedule+0x14b/0x320 [ 258.834606][ T30] schedule_timeout+0x1be/0x310 [ 258.839472][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 258.844902][ T30] ? __pfx_process_timeout+0x10/0x10 [ 258.850202][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 258.855738][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 258.860358][ T30] ? __pfx_validate_chain+0x10/0x10 [ 258.865884][ T30] ? validate_chain+0x11e/0x5900 [ 258.870966][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 258.877038][ T30] ? __lock_acquire+0x137a/0x2040 [ 258.882211][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 258.888399][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 258.893945][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 258.899150][ T30] ? sbitmap_get+0x289/0x3f0 [ 258.903742][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 258.909776][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 258.920021][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 258.926712][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 258.933498][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 258.938848][ T30] ? __pfx___might_resched+0x10/0x10 [ 258.944146][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 258.950176][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 258.955915][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 258.961071][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 258.966468][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 258.972243][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 258.978205][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 258.983511][ T30] __blk_flush_plug+0x420/0x500 [ 258.988643][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 258.994011][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 258.999182][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 259.004455][ T30] __submit_bio+0x422/0x560 [ 259.008974][ T30] ? __pfx___submit_bio+0x10/0x10 [ 259.013987][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 259.020532][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 259.031982][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 259.037823][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 259.043848][ T30] ? __pfx___might_resched+0x10/0x10 [ 259.053840][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 259.060111][ T30] block_read_full_folio+0x93b/0xcd0 [ 259.065455][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 259.070841][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 259.077210][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 259.082107][ T30] ? folio_add_lru+0x357/0xd70 [ 259.086965][ T30] ? folio_add_lru+0x58f/0xd70 [ 259.091746][ T30] filemap_read_folio+0x1a0/0x790 [ 259.096858][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 259.102339][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 259.108283][ T30] ? __filemap_get_folio+0x984/0xc10 [ 259.113597][ T30] do_read_cache_folio+0x134/0x820 [ 259.118845][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 259.124368][ T30] read_part_sector+0xb3/0x330 [ 259.129151][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 259.134084][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 259.143530][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 259.149160][ T30] ? snprintf+0xda/0x120 [ 259.153425][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 259.159141][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 259.163821][ T30] ? vsnprintf+0x184/0x1da0 [ 259.168504][ T30] ? __pfx_snprintf+0x10/0x10 [ 259.173185][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 259.178284][ T30] bdev_disk_changed+0x72c/0x13d0 [ 259.183343][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 259.188927][ T30] blkdev_get_whole+0x2d2/0x450 [ 259.193912][ T30] bdev_open+0x2d4/0xc60 [ 259.198914][ T30] blkdev_open+0x3e8/0x570 [ 259.203385][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 259.208451][ T30] do_dentry_open+0x970/0x1440 [ 259.213272][ T30] vfs_open+0x3e/0x330 [ 259.217428][ T30] path_openat+0x2b3e/0x3470 [ 259.222029][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 259.227735][ T30] ? __lock_acquire+0x137a/0x2040 [ 259.232788][ T30] ? __pfx_path_openat+0x10/0x10 [ 259.237789][ T30] do_filp_open+0x235/0x490 [ 259.242294][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 259.251725][ T30] ? _raw_spin_unlock+0x28/0x50 [ 259.256821][ T30] ? alloc_fd+0x5a1/0x640 [ 259.261161][ T30] do_sys_openat2+0x13e/0x1d0 [ 259.265944][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.271185][ T30] __x64_sys_openat+0x247/0x2a0 [ 259.276283][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.281822][ T30] ? do_syscall_64+0x100/0x230 [ 259.286976][ T30] ? do_syscall_64+0xb6/0x230 [ 259.291695][ T30] do_syscall_64+0xf3/0x230 [ 259.296312][ T30] ? clear_bhb_loop+0x35/0x90 [ 259.301006][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.306983][ T30] RIP: 0033:0x7f7f619169a4 [ 259.311419][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.320064][ T30] RAX: ffffffffffffffda RBX: 000056537fdb4e10 RCX: 00007f7f619169a4 [ 259.328086][ T30] RDX: 00000000000a0800 RSI: 000056537fd94750 RDI: 00000000ffffff9c [ 259.336121][ T30] RBP: 000056537fd94750 R08: 0000000000000001 R09: 0000000000000000 [ 259.344132][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 259.352270][ T30] R13: 000056537fda6250 R14: 0000000000000001 R15: 000056537fd93910 [ 259.363104][ T30] [ 259.366281][ T30] INFO: task udevd:6606 blocked for more than 146 seconds. [ 259.373557][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 259.382911][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.391696][ T30] task:udevd state:D stack:22032 pid:6606 tgid:6606 ppid:1 flags:0x00004002 [ 259.401948][ T30] Call Trace: [ 259.405506][ T30] [ 259.408466][ T30] __schedule+0x1800/0x4a60 [ 259.413044][ T30] ? __pfx___schedule+0x10/0x10 [ 259.417962][ T30] ? __blk_flush_plug+0x449/0x500 [ 259.422981][ T30] ? __pfx_lock_release+0x10/0x10 [ 259.428049][ T30] ? __asan_memset+0x23/0x50 [ 259.432658][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 259.438784][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.445300][ T30] ? schedule+0x90/0x320 [ 259.449647][ T30] schedule+0x14b/0x320 [ 259.453810][ T30] schedule_timeout+0x1be/0x310 [ 259.458728][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 259.464234][ T30] ? __pfx_process_timeout+0x10/0x10 [ 259.469554][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 259.479558][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 259.484446][ T30] ? __pfx_validate_chain+0x10/0x10 [ 259.489967][ T30] ? validate_chain+0x11e/0x5900 [ 259.495316][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 259.500574][ T30] ? __lock_acquire+0x137a/0x2040 [ 259.505916][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 259.512131][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 259.518623][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 259.523725][ T30] ? sbitmap_get+0x289/0x3f0 [ 259.528421][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 259.534747][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 259.540597][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 259.546991][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 259.553760][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 259.559160][ T30] ? __pfx___might_resched+0x10/0x10 [ 259.564835][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 259.570850][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 259.576207][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 259.581351][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 259.589470][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 259.595772][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 259.596727][ T5244] Bluetooth: hci0: command tx timeout [ 259.601682][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 259.612450][ T30] __blk_flush_plug+0x420/0x500 [ 259.617494][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 259.622890][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 259.628361][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 259.633603][ T30] __submit_bio+0x422/0x560 [ 259.638257][ T30] ? __pfx___submit_bio+0x10/0x10 [ 259.643283][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 259.649617][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 259.656514][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 259.662157][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 259.668221][ T30] ? __pfx___might_resched+0x10/0x10 [ 259.673542][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 259.679793][ T30] block_read_full_folio+0x93b/0xcd0 [ 259.685433][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 259.690978][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 259.699271][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 259.704160][ T30] ? folio_add_lru+0x357/0xd70 [ 259.709061][ T30] ? folio_add_lru+0x58f/0xd70 [ 259.713856][ T30] filemap_read_folio+0x1a0/0x790 [ 259.719059][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 259.724598][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 259.730183][ T30] ? __filemap_get_folio+0x984/0xc10 [ 259.735581][ T30] do_read_cache_folio+0x134/0x820 [ 259.740732][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 259.746490][ T30] read_part_sector+0xb3/0x330 [ 259.751287][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 259.756735][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 259.761548][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 259.767820][ T30] ? snprintf+0xda/0x120 [ 259.772133][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 259.777963][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 259.782571][ T30] ? vsnprintf+0x184/0x1da0 [ 259.787136][ T30] ? __pfx_snprintf+0x10/0x10 [ 259.792085][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 259.796946][ T30] bdev_disk_changed+0x72c/0x13d0 [ 259.801991][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 259.812218][ T30] blkdev_get_whole+0x2d2/0x450 [ 259.817174][ T30] bdev_open+0x2d4/0xc60 [ 259.821424][ T30] blkdev_open+0x3e8/0x570 [ 259.825957][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 259.830916][ T30] do_dentry_open+0x970/0x1440 [ 259.836086][ T30] vfs_open+0x3e/0x330 [ 259.840212][ T30] path_openat+0x2b3e/0x3470 [ 259.844902][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 259.850307][ T30] ? __lock_acquire+0x137a/0x2040 [ 259.855403][ T30] ? __pfx_path_openat+0x10/0x10 [ 259.860352][ T30] do_filp_open+0x235/0x490 [ 259.865176][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 259.870336][ T30] ? _raw_spin_unlock+0x28/0x50 [ 259.875277][ T30] ? alloc_fd+0x5a1/0x640 [ 259.879635][ T30] do_sys_openat2+0x13e/0x1d0 [ 259.884410][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.889627][ T30] __x64_sys_openat+0x247/0x2a0 [ 259.895023][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.900423][ T30] ? do_syscall_64+0x100/0x230 [ 259.905271][ T30] ? do_syscall_64+0xb6/0x230 [ 259.909959][ T30] do_syscall_64+0xf3/0x230 [ 259.919760][ T30] ? clear_bhb_loop+0x35/0x90 [ 259.924806][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.930728][ T30] RIP: 0033:0x7f7f619169a4 [ 259.935245][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.943676][ T30] RAX: ffffffffffffffda RBX: 000056537fdb9f40 RCX: 00007f7f619169a4 [ 259.951700][ T30] RDX: 00000000000a0800 RSI: 000056537fda2c20 RDI: 00000000ffffff9c [ 259.960012][ T30] RBP: 000056537fda2c20 R08: 0000000000000001 R09: 7fffffffffffffff [ 259.968049][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 259.976087][ T30] R13: 000056537fda6250 R14: 0000000000000001 R15: 000056537fd93910 [ 259.984082][ T30] [ 259.987281][ T30] INFO: task udevd:6639 blocked for more than 146 seconds. [ 259.995742][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 260.003419][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.012140][ T30] task:udevd state:D stack:22032 pid:6639 tgid:6639 ppid:1 flags:0x00004002 [ 260.022669][ T30] Call Trace: [ 260.030678][ T30] [ 260.033643][ T30] __schedule+0x1800/0x4a60 [ 260.038262][ T30] ? __pfx___schedule+0x10/0x10 [ 260.043137][ T30] ? __blk_flush_plug+0x449/0x500 [ 260.048499][ T30] ? __pfx_lock_release+0x10/0x10 [ 260.053557][ T30] ? __asan_memset+0x23/0x50 [ 260.058205][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 260.064020][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.070428][ T30] ? schedule+0x90/0x320 [ 260.081272][ T30] schedule+0x14b/0x320 [ 260.085541][ T30] schedule_timeout+0x1be/0x310 [ 260.090415][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 260.095858][ T30] ? __pfx_process_timeout+0x10/0x10 [ 260.101315][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 260.107154][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 260.111786][ T30] ? __pfx_validate_chain+0x10/0x10 [ 260.117061][ T30] ? validate_chain+0x11e/0x5900 [ 260.122087][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 260.127272][ T30] ? __lock_acquire+0x137a/0x2040 [ 260.132332][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 260.138910][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 260.149082][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 260.154222][ T30] ? sbitmap_get+0x289/0x3f0 [ 260.158850][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 260.165323][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 260.171183][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 260.177607][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 260.184490][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 260.189810][ T30] ? __pfx___might_resched+0x10/0x10 [ 260.195415][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 260.201563][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 260.206954][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 260.212088][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 260.217402][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 260.222968][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 260.229212][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 260.234988][ T30] __blk_flush_plug+0x420/0x500 [ 260.239880][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 260.245424][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 260.250573][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 260.259271][ T30] __submit_bio+0x422/0x560 [ 260.263801][ T30] ? __pfx___submit_bio+0x10/0x10 [ 260.268943][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 260.275264][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 260.281893][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 260.287860][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 260.293866][ T30] ? __pfx___might_resched+0x10/0x10 [ 260.299243][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 260.305774][ T30] block_read_full_folio+0x93b/0xcd0 [ 260.311102][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 260.317472][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 260.323312][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 260.328257][ T30] ? folio_add_lru+0x357/0xd70 [ 260.333038][ T30] ? folio_add_lru+0x58f/0xd70 [ 260.337828][ T30] filemap_read_folio+0x1a0/0x790 [ 260.342854][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 260.348649][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 260.354288][ T30] ? __filemap_get_folio+0x984/0xc10 [ 260.359602][ T30] do_read_cache_folio+0x134/0x820 [ 260.369189][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 260.375003][ T30] read_part_sector+0xb3/0x330 [ 260.379796][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 260.384824][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 260.389630][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 260.395522][ T30] ? snprintf+0xda/0x120 [ 260.399798][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 260.405958][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 260.410580][ T30] ? vsnprintf+0x184/0x1da0 [ 260.415188][ T30] ? __pfx_snprintf+0x10/0x10 [ 260.419892][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 260.424760][ T30] bdev_disk_changed+0x72c/0x13d0 [ 260.429922][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 260.435561][ T30] blkdev_get_whole+0x2d2/0x450 [ 260.440497][ T30] bdev_open+0x2d4/0xc60 [ 260.444858][ T30] blkdev_open+0x3e8/0x570 [ 260.449313][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 260.454341][ T30] do_dentry_open+0x970/0x1440 [ 260.459135][ T30] vfs_open+0x3e/0x330 [ 260.463207][ T30] path_openat+0x2b3e/0x3470 [ 260.468124][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 260.473522][ T30] ? __lock_acquire+0x137a/0x2040 [ 260.481454][ T30] ? __pfx_path_openat+0x10/0x10 [ 260.486584][ T30] do_filp_open+0x235/0x490 [ 260.491114][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 260.496303][ T30] ? _raw_spin_unlock+0x28/0x50 [ 260.501284][ T30] ? alloc_fd+0x5a1/0x640 [ 260.505739][ T30] do_sys_openat2+0x13e/0x1d0 [ 260.510685][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.515986][ T30] __x64_sys_openat+0x247/0x2a0 [ 260.520839][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 260.526538][ T30] ? do_syscall_64+0x100/0x230 [ 260.531323][ T30] ? do_syscall_64+0xb6/0x230 [ 260.536043][ T30] do_syscall_64+0xf3/0x230 [ 260.540552][ T30] ? clear_bhb_loop+0x35/0x90 [ 260.545305][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.551229][ T30] RIP: 0033:0x7f7f619169a4 [ 260.555946][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.564458][ T30] RAX: ffffffffffffffda RBX: 000056537fdb8550 RCX: 00007f7f619169a4 [ 260.572450][ T30] RDX: 00000000000a0800 RSI: 000056537fda2c20 RDI: 00000000ffffff9c [ 260.580465][ T30] RBP: 000056537fda2c20 R08: 0000000000000001 R09: 7fffffffffffffff [ 260.593514][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 260.601591][ T30] R13: 000056537fdb62b0 R14: 0000000000000001 R15: 000056537fd93910 [ 260.609777][ T30] [ 260.612817][ T30] INFO: task udevd:6685 blocked for more than 147 seconds. [ 260.620503][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 260.628251][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.637153][ T30] task:udevd state:D stack:22032 pid:6685 tgid:6685 ppid:1 flags:0x00004002 [ 260.647747][ T30] Call Trace: [ 260.651038][ T30] [ 260.653977][ T30] __schedule+0x1800/0x4a60 [ 260.658549][ T30] ? __pfx___schedule+0x10/0x10 [ 260.663484][ T30] ? __blk_flush_plug+0x449/0x500 [ 260.668575][ T30] ? __pfx_lock_release+0x10/0x10 [ 260.673608][ T30] ? __asan_memset+0x23/0x50 [ 260.678351][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 260.684223][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.690570][ T30] ? schedule+0x90/0x320 [ 260.699658][ T30] schedule+0x14b/0x320 [ 260.703874][ T30] schedule_timeout+0x1be/0x310 [ 260.708891][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 260.714866][ T30] ? __pfx_process_timeout+0x10/0x10 [ 260.720192][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 260.725745][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 260.730375][ T30] ? __pfx_validate_chain+0x10/0x10 [ 260.735913][ T30] ? validate_chain+0x11e/0x5900 [ 260.740869][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 260.745977][ T30] ? __lock_acquire+0x137a/0x2040 [ 260.751031][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 260.757207][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 260.762770][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 260.768120][ T30] ? sbitmap_get+0x289/0x3f0 [ 260.772726][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 260.778746][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 260.784690][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 260.791112][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 260.798554][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 260.803873][ T30] ? __pfx___might_resched+0x10/0x10 [ 260.814285][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 260.820335][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 260.825949][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 260.831094][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 260.836499][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 260.842086][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 260.848137][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 260.853456][ T30] __blk_flush_plug+0x420/0x500 [ 260.858469][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 260.863857][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 260.869096][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 260.874423][ T30] __submit_bio+0x422/0x560 [ 260.878935][ T30] ? __pfx___submit_bio+0x10/0x10 [ 260.883952][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 260.890760][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 260.897444][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 260.903080][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 260.909212][ T30] ? __pfx___might_resched+0x10/0x10 [ 260.917995][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 260.924258][ T30] block_read_full_folio+0x93b/0xcd0 [ 260.929593][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 260.935089][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 260.940899][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 260.946068][ T30] ? folio_add_lru+0x357/0xd70 [ 260.950859][ T30] ? folio_add_lru+0x58f/0xd70 [ 260.956102][ T30] filemap_read_folio+0x1a0/0x790 [ 260.961172][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 260.966706][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 260.972277][ T30] ? __filemap_get_folio+0x984/0xc10 [ 260.977745][ T30] do_read_cache_folio+0x134/0x820 [ 260.982869][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 260.988375][ T30] read_part_sector+0xb3/0x330 [ 260.993159][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 260.998163][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 261.002947][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 261.008792][ T30] ? snprintf+0xda/0x120 [ 261.013056][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 261.018997][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 261.023598][ T30] ? vsnprintf+0x184/0x1da0 [ 261.032398][ T30] ? __pfx_snprintf+0x10/0x10 [ 261.037626][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 261.042518][ T30] bdev_disk_changed+0x72c/0x13d0 [ 261.047649][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 261.053135][ T30] blkdev_get_whole+0x2d2/0x450 [ 261.058051][ T30] bdev_open+0x2d4/0xc60 [ 261.062316][ T30] blkdev_open+0x3e8/0x570 [ 261.067074][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 261.072099][ T30] do_dentry_open+0x970/0x1440 [ 261.076958][ T30] vfs_open+0x3e/0x330 [ 261.081054][ T30] path_openat+0x2b3e/0x3470 [ 261.085719][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 261.091092][ T30] ? __lock_acquire+0x137a/0x2040 [ 261.096485][ T30] ? __pfx_path_openat+0x10/0x10 [ 261.101451][ T30] do_filp_open+0x235/0x490 [ 261.105991][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 261.111027][ T30] ? _raw_spin_unlock+0x28/0x50 [ 261.124468][ T30] ? alloc_fd+0x5a1/0x640 [ 261.128868][ T30] do_sys_openat2+0x13e/0x1d0 [ 261.133546][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.141470][ T30] __x64_sys_openat+0x247/0x2a0 [ 261.146560][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.151952][ T30] ? do_syscall_64+0x100/0x230 [ 261.157066][ T30] ? do_syscall_64+0xb6/0x230 [ 261.161765][ T30] do_syscall_64+0xf3/0x230 [ 261.166326][ T30] ? clear_bhb_loop+0x35/0x90 [ 261.171030][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.177010][ T30] RIP: 0033:0x7f7f619169a4 [ 261.181439][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.190008][ T30] RAX: ffffffffffffffda RBX: 000056537fdb4e10 RCX: 00007f7f619169a4 [ 261.200030][ T30] RDX: 00000000000a0800 RSI: 000056537fdbfce0 RDI: 00000000ffffff9c [ 261.208226][ T30] RBP: 000056537fdbfce0 R08: 0000000000000001 R09: 7fffffffffffffff [ 261.223875][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 261.231998][ T30] R13: 000056537fda8540 R14: 0000000000000001 R15: 000056537fd93910 [ 261.240206][ T30] [ 261.243339][ T30] INFO: task udevd:6790 blocked for more than 147 seconds. [ 261.265676][ T30] Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 261.273385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.282581][ T30] task:udevd state:D stack:22032 pid:6790 tgid:6790 ppid:1 flags:0x00004002 [ 261.292858][ T30] Call Trace: [ 261.296551][ T30] [ 261.299518][ T30] __schedule+0x1800/0x4a60 [ 261.304071][ T30] ? __pfx___schedule+0x10/0x10 [ 261.309238][ T30] ? __blk_flush_plug+0x449/0x500 [ 261.314396][ T30] ? __pfx_lock_release+0x10/0x10 [ 261.319461][ T30] ? __asan_memset+0x23/0x50 [ 261.324098][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 261.330288][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.337030][ T30] ? schedule+0x90/0x320 [ 261.341307][ T30] schedule+0x14b/0x320 [ 261.345574][ T30] schedule_timeout+0x1be/0x310 [ 261.350453][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 261.358112][ T30] ? __pfx_process_timeout+0x10/0x10 [ 261.363492][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 261.381685][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 261.391484][ T30] ? validate_chain+0x11e/0x5900 [ 261.396884][ T30] ? __pfx_validate_chain+0x10/0x10 [ 261.402114][ T30] ? validate_chain+0x11e/0x5900 [ 261.415173][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 261.420258][ T30] ? __lock_acquire+0x137a/0x2040 [ 261.428281][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 261.443212][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 261.448943][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 261.454016][ T30] ? sbitmap_get+0x289/0x3f0 [ 261.464253][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 261.470294][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 261.476321][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 261.482704][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 261.494042][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 261.499887][ T30] ? __pfx___might_resched+0x10/0x10 [ 261.505308][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 261.511323][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 261.517028][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 261.522182][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 261.527595][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 261.533659][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 261.544159][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 261.553219][ T30] __blk_flush_plug+0x420/0x500 [ 261.562757][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 261.571668][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 261.577267][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 261.582506][ T30] __submit_bio+0x422/0x560 [ 261.599637][ T30] ? __pfx___submit_bio+0x10/0x10 [ 261.611911][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 261.618342][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 261.632884][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 261.639157][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 261.652441][ T30] ? __pfx___might_resched+0x10/0x10 [ 261.657909][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 261.664129][ T30] block_read_full_folio+0x93b/0xcd0 [ 261.669932][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 261.675421][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 261.681256][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 261.682207][ T5244] Bluetooth: hci0: command tx timeout [ 261.686159][ T30] ? folio_add_lru+0x357/0xd70 [ 261.686187][ T30] ? folio_add_lru+0x58f/0xd70 [ 261.686215][ T30] filemap_read_folio+0x1a0/0x790 [ 261.706646][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 261.712141][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 261.722007][ T30] ? __filemap_get_folio+0x984/0xc10 [ 261.727658][ T30] do_read_cache_folio+0x134/0x820 [ 261.732805][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 261.738622][ T30] read_part_sector+0xb3/0x330 [ 261.743423][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 261.754015][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 261.763527][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 261.777282][ T30] ? snprintf+0xda/0x120 [ 261.781672][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 261.791122][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 261.800376][ T30] ? vsnprintf+0x184/0x1da0 [ 261.808322][ T30] ? __pfx_snprintf+0x10/0x10 [ 261.813168][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 261.823145][ T30] bdev_disk_changed+0x72c/0x13d0 [ 261.832681][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 261.845555][ T30] blkdev_get_whole+0x2d2/0x450 [ 261.850480][ T30] bdev_open+0x2d4/0xc60 [ 261.854911][ T30] blkdev_open+0x3e8/0x570 [ 261.859327][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 261.864317][ T30] do_dentry_open+0x970/0x1440 [ 261.869127][ T30] vfs_open+0x3e/0x330 [ 261.873207][ T30] path_openat+0x2b3e/0x3470 [ 261.877858][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 261.883239][ T30] ? __lock_acquire+0x137a/0x2040 [ 261.888577][ T30] ? __pfx_path_openat+0x10/0x10 [ 261.893538][ T30] do_filp_open+0x235/0x490 [ 261.898165][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 261.903213][ T30] ? _raw_spin_unlock+0x28/0x50 [ 261.908133][ T30] ? alloc_fd+0x5a1/0x640 [ 261.912481][ T30] do_sys_openat2+0x13e/0x1d0 [ 261.917426][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.922662][ T30] __x64_sys_openat+0x247/0x2a0 [ 261.927625][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.933014][ T30] ? do_syscall_64+0x100/0x230 [ 261.941179][ T30] ? do_syscall_64+0xb6/0x230 [ 261.950348][ T30] do_syscall_64+0xf3/0x230 [ 261.954929][ T30] ? clear_bhb_loop+0x35/0x90 [ 261.959623][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.965761][ T30] RIP: 0033:0x7f7f619169a4 [ 261.970193][ T30] RSP: 002b:00007fff0e3d2a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.978802][ T30] RAX: ffffffffffffffda RBX: 000056537fdb8550 RCX: 00007f7f619169a4 [ 261.986897][ T30] RDX: 00000000000a0800 RSI: 000056537fdb8dd0 RDI: 00000000ffffff9c [ 261.995000][ T30] RBP: 000056537fdb8dd0 R08: 0000000000000001 R09: 7fffffffffffffff [ 262.002989][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 262.011317][ T30] R13: 000056537fda4a70 R14: 0000000000000001 R15: 000056537fd93910 [ 262.019356][ T30] [ 262.022420][ T30] [ 262.022420][ T30] Showing all locks held in the system: [ 262.031016][ T30] 1 lock held by khungtaskd/30: [ 262.036065][ T30] #0: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 262.051272][ T30] 2 locks held by getty/4978: [ 262.056051][ T30] #0: ffff88802af660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 262.065932][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 262.076658][ T30] 3 locks held by udevd/5224: [ 262.081353][ T30] #0: ffff8880211e04c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.090745][ T30] #1: ffff88801eafe510 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.100320][ T30] #2: ffff888021238180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.109656][ T30] 3 locks held by udevd/5229: [ 262.114377][ T30] #0: ffff88807a5f14c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.123641][ T30] #1: ffff88802c13c290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.133180][ T30] #2: ffff888058420180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.142311][ T30] 3 locks held by udevd/5237: [ 262.147292][ T30] #0: ffff8880210a04c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.166536][ T30] #1: ffff88801ea95990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.176481][ T30] #2: ffff8880210e8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.185533][ T30] 3 locks held by udevd/5240: [ 262.190215][ T30] #0: ffff8880210134c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.199482][ T30] #1: ffff88801d31de10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.209312][ T30] #2: ffff888021080180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.218413][ T30] 3 locks held by kworker/1:3/5273: [ 262.223608][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 262.235134][ T30] #1: ffffc90004147d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 262.246489][ T30] #2: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 262.255815][ T30] 3 locks held by udevd/6472: [ 262.260498][ T30] #0: ffff8880210174c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.274738][ T30] #1: ffff88801d358790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.284470][ T30] #2: ffff888021118180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.293487][ T30] 3 locks held by udevd/6606: [ 262.298515][ T30] #0: ffff8880210a44c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.307849][ T30] #1: ffff88801eafe010 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.317840][ T30] #2: ffff888021188180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.327055][ T30] 3 locks held by udevd/6639: [ 262.331726][ T30] #0: ffff8880211e44c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.341090][ T30] #1: ffff88801eafeb90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.350762][ T30] #2: ffff888021298180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.360226][ T30] 3 locks held by udevd/6685: [ 262.365050][ T30] #0: ffff8880211b34c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.376853][ T30] #1: ffff888021143290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.386796][ T30] #2: ffff888021260180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.398260][ T30] 3 locks held by udevd/6750: [ 262.402963][ T30] #0: ffff8880212ac4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.412290][ T30] #1: ffff88801f8ec710 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.422134][ T30] #2: ffff8880213e8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.431247][ T30] 3 locks held by udevd/6790: [ 262.436007][ T30] #0: ffff8880212a84c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.445605][ T30] #1: ffff88801f8ec210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.455428][ T30] #2: ffff888021378180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.464513][ T30] 3 locks held by udevd/6853: [ 262.469198][ T30] #0: ffff88801d2984c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.479071][ T30] #1: ffff888025313210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.492974][ T30] #2: ffff88807a478180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.502178][ T30] 3 locks held by udevd/7278: [ 262.509602][ T30] #0: ffff8880211b74c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 262.518941][ T30] #1: ffff888021143e90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 262.528507][ T30] #2: ffff888021400180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 262.537847][ T30] 3 locks held by kworker/u8:18/8625: [ 262.543310][ T30] #0: ffff888016786948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 262.555021][ T30] #1: ffffc90003f27d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 262.569464][ T30] #2: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 262.580307][ T30] 6 locks held by kworker/u8:42/10160: [ 262.585839][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 262.598341][ T30] #1: ffffc90004897d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 262.608991][ T30] #2: ffffffff8fc735d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 262.619837][ T30] #3: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 262.629953][ T30] #4: ffff888025130768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 262.640837][ T30] #5: ffffffff8e93cb78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 262.651818][ T30] 3 locks held by kworker/u8:48/10166: [ 262.657717][ T30] #0: ffff88802a5d5948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 262.669383][ T30] #1: ffffc9001670fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 262.682287][ T30] #2: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 262.691996][ T30] 2 locks held by kworker/u8:51/10169: [ 262.697542][ T30] 6 locks held by syz-executor/11337: [ 262.702916][ T30] #0: ffffffff8fc735d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x560 [ 262.713860][ T30] #1: ffffffff8f9f16f0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 262.723743][ T30] #2: ffffffff8f9f18b0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 262.735544][ T30] #3: ffff88805fe38f40 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 262.747109][ T30] #4: ffff88805fe39238 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 262.756734][ T30] #5: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 262.766403][ T30] 1 lock held by syz.0.1711/11375: [ 262.771521][ T30] #0: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 262.780645][ T30] 1 lock held by syz.4.1713/11389: [ 262.785816][ T30] #0: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_route_ioctl+0x4cb/0x870 [ 262.795652][ T30] [ 262.798000][ T30] ============================================= [ 262.798000][ T30] [ 262.811312][ T30] NMI backtrace for cpu 1 [ 262.815683][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 262.826180][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 262.836227][ T30] Call Trace: [ 262.839497][ T30] [ 262.842419][ T30] dump_stack_lvl+0x241/0x360 [ 262.847097][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.852289][ T30] ? __pfx__printk+0x10/0x10 [ 262.856894][ T30] ? vprintk_emit+0x631/0x770 [ 262.861568][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 262.866595][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 262.871537][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 262.876990][ T30] ? _printk+0xd5/0x120 [ 262.881141][ T30] ? __pfx__printk+0x10/0x10 [ 262.885814][ T30] ? __wake_up_klogd+0xcc/0x110 [ 262.890657][ T30] ? __pfx__printk+0x10/0x10 [ 262.895239][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 262.900255][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 262.906228][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 262.912207][ T30] watchdog+0xfee/0x1030 [ 262.916448][ T30] ? watchdog+0x1ea/0x1030 [ 262.920862][ T30] ? __pfx_watchdog+0x10/0x10 [ 262.925540][ T30] kthread+0x2f0/0x390 [ 262.929596][ T30] ? __pfx_watchdog+0x10/0x10 [ 262.934266][ T30] ? __pfx_kthread+0x10/0x10 [ 262.938845][ T30] ret_from_fork+0x4b/0x80 [ 262.943257][ T30] ? __pfx_kthread+0x10/0x10 [ 262.947837][ T30] ret_from_fork_asm+0x1a/0x30 [ 262.952609][ T30] [ 262.956768][ T30] Sending NMI from CPU 1 to CPUs 0: [ 262.962024][ C0] NMI backtrace for cpu 0 [ 262.962038][ C0] CPU: 0 UID: 0 PID: 940 Comm: kworker/0:2 Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 262.962058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 262.962068][ C0] Workqueue: events nsim_dev_trap_report_work [ 262.962095][ C0] RIP: 0010:preempt_count_sub+0x32/0x170 [ 262.962117][ C0] Code: fb 48 c7 c0 80 19 f2 94 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 d0 00 00 00 83 3d 1e 39 8f 13 00 <75> 22 65 8b 05 dd f6 a0 7e 89 c1 81 e1 ff ff ff 7f 39 d9 7c 27 81 [ 262.962138][ C0] RSP: 0018:ffffc90003edf590 EFLAGS: 00000246 [ 262.962151][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff94f21903 [ 262.962163][ C0] RDX: 0000000000000000 RSI: ffffc90003edf810 RDI: 0000000000000001 [ 262.962173][ C0] RBP: ffffc90003edf680 R08: ffffffff81412545 R09: ffffffff814120bf [ 262.962185][ C0] R10: 0000000000000003 R11: ffff8880212c5a00 R12: ffffc90003edfa50 [ 262.962196][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffc90003edfa58 [ 262.962208][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 262.962222][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.962234][ C0] CR2: 00005555901085c8 CR3: 00000000224de000 CR4: 00000000003506f0 [ 262.962248][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.962257][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.962268][ C0] Call Trace: [ 262.962274][ C0] [ 262.962281][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 262.962304][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 262.962326][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 262.962346][ C0] ? nmi_handle+0x2a/0x5a0 [ 262.962370][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 262.962388][ C0] ? nmi_handle+0x14f/0x5a0 [ 262.962403][ C0] ? nmi_handle+0x2a/0x5a0 [ 262.962419][ C0] ? preempt_count_sub+0x32/0x170 [ 262.962436][ C0] ? default_do_nmi+0x63/0x160 [ 262.962452][ C0] ? exc_nmi+0x123/0x1f0 [ 262.962466][ C0] ? end_repeat_nmi+0xf/0x53 [ 262.962483][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 262.962503][ C0] ? unwind_next_frame+0x1df5/0x2a00 [ 262.962525][ C0] ? preempt_count_sub+0x32/0x170 [ 262.962543][ C0] ? preempt_count_sub+0x32/0x170 [ 262.962562][ C0] ? preempt_count_sub+0x32/0x170 [ 262.962580][ C0] [ 262.962585][ C0] [ 262.962591][ C0] unwind_next_frame+0x1e65/0x2a00 [ 262.962617][ C0] ? kasan_save_track+0x3f/0x80 [ 262.962638][ C0] ? kasan_save_track+0x3f/0x80 [ 262.962655][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 262.962674][ C0] arch_stack_walk+0x151/0x1b0 [ 262.962693][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 262.962712][ C0] ? kasan_save_free_info+0x40/0x50 [ 262.962732][ C0] stack_trace_save+0x118/0x1d0 [ 262.962751][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 262.962770][ C0] ? mark_lock+0x9a/0x350 [ 262.962794][ C0] kasan_save_track+0x3f/0x80 [ 262.962811][ C0] ? kasan_save_track+0x3f/0x80 [ 262.962857][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 262.962877][ C0] kasan_save_free_info+0x40/0x50 [ 262.962893][ C0] poison_slab_object+0xe0/0x150 [ 262.962913][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 262.962933][ C0] __kasan_slab_free+0x37/0x60 [ 262.962952][ C0] kmem_cache_free+0x145/0x350 [ 262.962971][ C0] nsim_dev_trap_report_work+0x765/0xaa0 [ 262.963001][ C0] ? process_scheduled_works+0x945/0x1830 [ 262.963022][ C0] process_scheduled_works+0xa2c/0x1830 [ 262.963056][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.963080][ C0] ? assign_work+0x364/0x3d0 [ 262.963101][ C0] worker_thread+0x86d/0xd40 [ 262.963124][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.963149][ C0] ? __kthread_parkme+0x169/0x1d0 [ 262.963170][ C0] ? __pfx_worker_thread+0x10/0x10 [ 262.963188][ C0] kthread+0x2f0/0x390 [ 262.963202][ C0] ? __pfx_worker_thread+0x10/0x10 [ 262.963220][ C0] ? __pfx_kthread+0x10/0x10 [ 262.963235][ C0] ret_from_fork+0x4b/0x80 [ 262.963254][ C0] ? __pfx_kthread+0x10/0x10 [ 262.963268][ C0] ret_from_fork_asm+0x1a/0x30 [ 262.963296][ C0] [ 263.014395][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 263.014414][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00266-g45160cebd6ac #0 [ 263.014437][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 263.014447][ T30] Call Trace: [ 263.014454][ T30] [ 263.014462][ T30] dump_stack_lvl+0x241/0x360 [ 263.014492][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.014513][ T30] ? __pfx__printk+0x10/0x10 [ 263.014539][ T30] ? vscnprintf+0x5d/0x90 [ 263.014564][ T30] panic+0x349/0x860 [ 263.014586][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.014611][ T30] ? __pfx_panic+0x10/0x10 [ 263.014628][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 263.014648][ T30] ? __irq_work_queue_local+0x137/0x410 [ 263.014672][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 263.014691][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.014713][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 263.014740][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 263.014767][ T30] watchdog+0x102d/0x1030 [ 263.014791][ T30] ? watchdog+0x1ea/0x1030 [ 263.014819][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.014841][ T30] kthread+0x2f0/0x390 [ 263.014858][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.014878][ T30] ? __pfx_kthread+0x10/0x10 [ 263.014895][ T30] ret_from_fork+0x4b/0x80 [ 263.014917][ T30] ? __pfx_kthread+0x10/0x10 [ 263.014933][ T30] ret_from_fork_asm+0x1a/0x30 [ 263.014968][ T30] [ 263.020990][ T30] Kernel Offset: disabled [ 263.514405][ T30] Rebooting in 86400 seconds..