last executing test programs: 2.745911344s ago: executing program 1 (id=3531): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x0, 0xc}, 0x48) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0xe00, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @func_proto]}}, 0x0, 0x52, 0x0, 0x1}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16, @ANYRES64], 0xfdef) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000100000000000800030003000000aab5081504065d5cf7cf15c7715b58ad5532ab875ffdaef365e712605c66c1784605a306c122e39b9b453c1d070d2e5cff8cb0c7c34314fd9f21f5985facd583fc90a7a4726ebb3429370024d01e2fb35a98d2d67f3b933bf006e86cfeb17d96567e6b6e3833d2afc105b59c241e1b6756d80e6554d465eb3c61113332b177a7e8f7bd060f6acafbc6464e7d0968b9103d"], 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x44, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000068000000080003ff", @ANYRES32=r6], 0x1c}}, 0x0) 2.540867422s ago: executing program 1 (id=3537): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x3, 0x9}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x100, 0x70bd2b, 0x1, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x20044005) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '^\xed[^+\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@can_newroute={0x4c, 0x18, 0x2, 0x70bd25, 0x25dfdbff, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_LIM_HOPS={0x5, 0xd, 0x53}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "77cc50cc6b660556"}, 0x4}}, @CGW_DST_IF={0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0xcb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@remote, @multicast1, 0x0}, &(0x7f0000000640)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x11c, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc00c5}, 0x4000005) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20040084) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r12, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) socket$inet_dccp(0x2, 0x6, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r13, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r14, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r15, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x9fa15fa8f9c7989e) socketpair(0x27, 0x4, 0x1, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r16, 0x0, 0x2c, &(0x7f0000000e80)={0x3, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240000cc}, 0x40000) 2.264452239s ago: executing program 2 (id=3542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x60, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x60}, 0x1, 0xffffff7f00000000}, 0x0) 2.148262218s ago: executing program 1 (id=3546): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x2b, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x7, 0x0, [@loopback]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0xcb, 0x3, 0x0, [{@empty}, {@empty}, {@loopback}, {@remote}, {@empty}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08000500020000008c879ebf6463558ab37a2b695d3de0f0ea40e4d12bed52146767c1c8e27fb75584ba43517aec67cd34b5162ec309745a6976b938b93791f8a39b8372837abce2237d6f7de038133a8078cdb7a8604cf2098d4d3039b88a8145292afc9cfedcd7f342137217b2000000008a35927dabe2fb08905ffca585e46daa7c327a783da9610b8d4d5b665442899d490114ea0abc0148c0c791f9eaa9dbcb93eb0cbc7ba19739"], 0x24}}, 0x20000000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000080000000000000000640001000006020202020202010802848b960c121824"], 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000040) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000040006800800060000000000"], 0x20}}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000004c0)}}], 0x2, 0x24045005) sendmsg$inet(r8, &(0x7f0000000180)={&(0x7f00000016c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x30064845) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="631e4155c443885d470fe7de56c9bab0246d7c7a6654f81985ca64796e6eb095fff193bae0eab22286dc0bd580d64037b1a09abbeddd149fc432936b3ebc476f4553", 0x42}], 0x1}}], 0x1, 0x41) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r10, 0x1}, 0x14}}, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x4}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 2.068507558s ago: executing program 2 (id=3548): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000090400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000000000004800128011000100a8447147afb69ea36c617665000c00003000058005000900000000000500050001000000050028"], 0x68}}, 0x0) 2.005750006s ago: executing program 2 (id=3551): unshare(0x20000400) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xcc, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b3361d", 0x10) r9 = accept$alg(r8, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f00000000c0)=""/63, 0x3f}], 0x2}}], 0x1, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000005bc0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="4b341d14ddcbfd6be3ed5e82eb31c714124b67e8c225103b4e30ecba0567c564916f6ae99d4a13829b4f2721", 0x2c}], 0x1}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10) connect$unix(r3, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r2, 0x4}, {r2, 0x222}], 0x2, 0x0, 0x0, 0xfffffffffffffe0c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='!\x00', @ANYRES8=r7, @ANYBLOB="010700000000000000006700000008000100000000000800c300000000000800c40000000000"], 0x2c}}, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1, 0x50000000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="791000000000000035000000000020dfc60000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.934712621s ago: executing program 1 (id=3553): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000009000061060000000000009500000000000000d7d64ac805f1e39987e9e08ed11552c330e8205dc01cb8efdb7358bfde15658fa93c465dcc871aeb856da4cfe23dbf9d1caa0911020b9530eb5e90db3efcf0d99b7c11"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) 1.808504414s ago: executing program 4 (id=3555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) read$alg(0xffffffffffffffff, &(0x7f0000001e00)=""/4108, 0x201) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000006000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x90) 1.807747424s ago: executing program 0 (id=3556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800ff00182300ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088}, 0x90) 1.777215118s ago: executing program 4 (id=3557): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) 1.752252522s ago: executing program 1 (id=3558): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000c300)=@newtfilter={0x2118, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000b3}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x209c, 0x2, [@TCA_U32_SEL={0x2e4, 0x5, {0x0, 0x93, 0xd4, 0x7, 0x46c3, 0xfffe, 0x0, 0x0, [{0x6, 0xf, 0x7fff, 0x3}, {0x7fff, 0xf53, 0x3832}, {0x58, 0x3, 0xfffff001, 0x7}, {0x8000, 0xc43, 0x8, 0x800}, {0xfffffffc, 0x80000001, 0x55}, {0xfffffffc, 0x4, 0x4}, {0x8, 0x200, 0x7ff, 0x6}, {0xffff7fff, 0x8, 0xfcec, 0xfffffff8}, {0x6, 0xfffffffe, 0x5, 0x101}, {0x7ff, 0x6, 0x7fff, 0x7ff}, {0x5, 0x690, 0x5, 0x10001}, {0x3, 0x8}, {0x6112, 0x6, 0xb49, 0x1ff}, {0x2, 0x5c, 0x1, 0xb}, {0x9, 0xfff, 0x482c, 0x3}, {0x6, 0x7, 0xf80e, 0x2}, {0x9, 0x9, 0x8, 0x1}, {0x1ff, 0x1ff, 0x2f14e791, 0x5}, {0x1, 0xb530, 0x1, 0x99}, {0x1, 0x8, 0xfb, 0x4}, {0x2, 0x3, 0xa7b2, 0x2}, {0xfffffffb, 0x7fffffff, 0x9, 0x5}, {0x7fff, 0xd4, 0x5, 0x1}, {0x3, 0x6c, 0xc4a, 0x2}, {0xfcd6, 0x0, 0x6, 0x4}, {0x80000001, 0x6, 0x8, 0x3}, {0x200, 0x1, 0x2, 0x1}, {0x800, 0x6, 0x9, 0x3}, {0x6, 0x8, 0x5, 0x9}, {0x400, 0x8001, 0xfffffffe, 0x8}, {0x0, 0x7, 0xcb4c, 0xe}, {0x2, 0x6, 0x9, 0xfffffffc}, {0x5, 0x9, 0xfa}, {0x1, 0x1, 0xffff, 0xd}, {0x6, 0x8001, 0x8, 0x2}, {0x9, 0x7, 0x7, 0x1}, {0x0, 0x2, 0x2, 0x7ff}, {0x6a1f, 0x9, 0x8, 0x6}, {0x10, 0x7, 0x1, 0x1000000}, {0x8001, 0x7, 0x71, 0x7}, {0x80000000, 0x5, 0x0, 0x3}, {0x2, 0x3, 0x5, 0x1}, {0x7, 0x6, 0x6, 0x5}, {0x9, 0x1, 0x10000000, 0x8}, {0x5, 0x6000000, 0x3, 0x6}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x1, 0x2}}, @TCA_U32_ACT={0x1d78, 0x7, [@m_police={0x1d44, 0x0, 0x0, 0x0, {{0xb}, {0xd18, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0xfff, 0x200, 0x0, {0x8, 0x2, 0x2, 0x9f5e, 0x8001, 0x75}, {0x6, 0x1, 0xfffe, 0x792, 0x29, 0x1}, 0x9, 0xd8db, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x90f2, 0x6, 0x0, 0x0, 0x3, 0xffff, 0x4, 0x1, 0xffffffff, 0x6, 0x9, 0x8, 0x9d, 0x80000001, 0x80, 0x1, 0x1e8cbd2b, 0x7fff, 0x2, 0x1, 0x2, 0x7, 0x7, 0x3, 0x400, 0x3, 0x4, 0x944, 0x10, 0x1, 0x8, 0x0, 0x8, 0x0, 0x6, 0x7, 0xc, 0xaa, 0x5, 0x6, 0x8001, 0x82d, 0x100, 0x5, 0xffff, 0x3, 0x4, 0x5, 0x8, 0x4, 0x400, 0xfffffff9, 0x1, 0x0, 0x1, 0xfffffff7, 0x8, 0x1ea, 0x10001, 0x5, 0x4, 0x7f, 0xbf80, 0x3ff, 0x8000, 0x5, 0x2, 0x7, 0xbbab, 0xfffff000, 0xf, 0x9, 0x9, 0x837, 0xc1a4, 0x93550026, 0x8, 0x8, 0x800, 0x2, 0x7f, 0x1, 0x5, 0xaa72, 0x7f, 0x4, 0x8, 0x3, 0x1ff, 0x5, 0x0, 0x7, 0x6, 0x1, 0xf7b, 0x8, 0x100, 0x3, 0x2, 0x9, 0x9, 0x400, 0x80, 0x7fffffff, 0x5, 0x1, 0x5, 0xc097353, 0x1f7, 0x21de, 0x7, 0x8, 0xd, 0x7fffffff, 0xfffffffe, 0x7, 0x0, 0xffff, 0x3ff, 0x0, 0xe, 0xd, 0x4d9a, 0x20, 0x3, 0x7, 0x4, 0x8, 0xc6a5, 0xfffffffd, 0x9, 0x7, 0x9, 0x400, 0x3, 0x40, 0x4, 0x2, 0x6, 0x2, 0x5, 0x7f, 0x3, 0x800, 0x80, 0x3, 0x4, 0x5, 0xb, 0x7, 0x4, 0x3, 0x8001, 0x0, 0x9, 0x9, 0x5, 0xfffffffd, 0x9, 0x100, 0xfffffe01, 0x5, 0x6f75, 0x8, 0x5, 0x4, 0x7f, 0x1, 0xb, 0x147f, 0x8, 0xd, 0x6, 0xf, 0x60b, 0x5, 0x9128, 0x8, 0x80000001, 0x9, 0x3, 0x5, 0xe, 0x1c, 0x0, 0xfffffff8, 0xe95a, 0x726a, 0x2, 0x8, 0x1, 0x6, 0xa, 0x1, 0x2, 0x8, 0x8, 0x78fe22a1, 0xfffffffb, 0x0, 0x400, 0x9bdb, 0xd, 0x0, 0x2, 0x2c, 0x9, 0x9, 0x5, 0x5, 0x101, 0x1, 0x7fffffff, 0x7, 0xb, 0x2df, 0x2, 0x5, 0x0, 0xa6, 0x4, 0x1, 0xd, 0x8, 0xfffffffc, 0x3, 0x802, 0xfffffff7, 0x8, 0xd, 0x81, 0x1, 0xf7b, 0x3, 0x8, 0x7, 0x3, 0x10001, 0x9, 0x7, 0x1000, 0xfffffffc, 0x3, 0x8a, 0x4, 0xe24, 0x5, 0x80000001, 0x101, 0x4, 0x9, 0xa, 0x1, 0x1, 0x330cd92b]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0xa, 0x0, 0x9, {0x3, 0x0, 0x2, 0x6, 0x36, 0x6}, {0x5, 0x1, 0x7, 0xfeff, 0x4, 0x2}, 0x5a82, 0x3, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x13, 0x5, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x5, 0x546a3bae, 0x5, 0x0, 0x0, 0xfff, 0x0, 0xd, 0xb48, 0x10, 0xffff0000, 0x59, 0x800, 0xfffffffd, 0x4, 0xffff91d0, 0x9, 0xc1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xaf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xffff166b, 0x0, 0x0, 0x7, 0x4, 0x80000000, 0xfff, 0x0, 0x3, 0x0, 0x800, 0x3, 0x0, 0x80000001, 0x2c, 0x9, 0x2, 0x7f, 0x5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x401, 0xa, 0xffffffff, 0x3ff, 0x200, 0xacd, 0x7497, 0x0, 0x3ff, 0x800, 0x7, 0x6, 0x357e, 0x9, 0x3, 0x8, 0x4, 0x0, 0x0, 0x2, 0x400, 0x9, 0x8, 0x8, 0x0, 0x9, 0x3, 0x4, 0x7, 0xcf, 0xaf7, 0x10, 0x7, 0x0, 0x3ff, 0x3, 0xe, 0x1, 0x0, 0xb2, 0x0, 0x0, 0x0, 0xffff0000, 0xe, 0x8, 0x9, 0x9, 0x6, 0xb, 0x3, 0x0, 0x0, 0x4, 0x401, 0x0, 0x0, 0x8, 0x895, 0x0, 0x0, 0x0, 0x0, 0x162, 0x7ff, 0x0, 0x9, 0x0, 0x2, 0x0, 0x10001, 0x0, 0xfffffffb, 0x0, 0x0, 0xabe, 0x0, 0xbf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xab6, 0xa, 0x2, 0x0, 0xb, 0x39, 0x0, 0x8, 0x7, 0x6, 0x2, 0x2, 0x7, 0x8d, 0x8, 0x0, 0x0, 0x6, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x3, 0x6, 0x9, 0x2, 0x1, 0xd, 0xf, 0xb5e0, 0x4, 0x4, 0x40, 0x2, 0x0, 0x0, 0x0, 0x1, 0xca, 0x0, 0xfff, 0x8000, 0x7, 0x700, 0x3, 0xffff, 0x2, 0x8001, 0x401, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x17, 0x0, 0xf2, 0x4, 0x3, 0x1, 0x0, 0x6, 0x0, 0xffc, 0x7, 0x0, 0x3]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffff7, 0x1c49, 0x0, 0x2, 0x0, 0x0, 0x8, 0xfff, 0x6, 0x0, 0x1, 0x6, 0x6, 0x7ff, 0xc6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xdc6, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x7fff, 0x6c1073fa, 0xa, 0x0, 0x0, 0xf6, 0x48719ff6, 0x0, 0x9b4c, 0x8, 0xf03e, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffff6747, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8001, 0x400, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3, 0x5, 0x0, 0x2, 0x4, 0x8001, 0x0, 0x8, 0x8, 0x632b, 0x0, 0xf22, 0x1000, 0x93, 0x80000000, 0x0, 0x7f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe0, 0x2, 0x3fe000, 0x5, 0x0, 0x0, 0x401, 0x8, 0x4, 0x7, 0x8, 0x3, 0x8e4, 0x0, 0x4, 0x3ff, 0x0, 0x0, 0x5, 0x40, 0xfffffffd, 0x3, 0x0, 0x6, 0x1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10d9, 0x0, 0x100, 0x5, 0x1, 0x0, 0x3, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x2ae1b164, 0x504, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x4, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xab17, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x1, 0x4, 0x5, 0x80000000, 0xf5b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2b, 0x0, 0x4b, 0x1, 0x0, 0x0, 0x400, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x80}, {0x1}}}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x5}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0xfffffff9}}]}}]}, 0x2118}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.692553405s ago: executing program 3 (id=3559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000055002500000000000000000007ffffff", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000000000000000000007000000000000000086dd"], 0x38}, 0x1, 0xf00}, 0x0) 1.691764159s ago: executing program 0 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018119cff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200000085000000a000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.691593651s ago: executing program 4 (id=3561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x64, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}, {0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x64}, 0x1, 0x2c000000}, 0x0) 1.632551695s ago: executing program 1 (id=3562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000200000030000000c000a0018000000000000000c0002000000000000000000100007800c0008000000000000000000080001"], 0x90}}, 0x0) 1.598053814s ago: executing program 4 (id=3563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x190, 0x1, 0x3, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CT={0xf0, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xaf7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe53}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x4}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x81, 0x55}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xa}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x81}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x81}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}]}}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_CT={0x5c, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x101}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xfffff801, 0x7f, 0x9, 0x0]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x80, 0x3, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x20, 0x4, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5238}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680), 0x1) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000700)=0x3ff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x1}]}, &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x82, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x4, 0x8, 0xff}, 0x10, 0xffffffffffffffff, r7, 0x4, &(0x7f00000008c0)=[r7, r7, r7, r7, r7, r8, r7, r7], &(0x7f0000000900)=[{0x1, 0x4, 0xa, 0x6}, {0x5, 0x4, 0xf, 0x8}, {0x2, 0x3, 0x5, 0x4}, {0x5, 0x4, 0x7, 0x6}], 0x10, 0x7}, 0x90) ioctl(r8, 0x8, &(0x7f0000000a00)="ab") r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0xceb1}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r10}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000c80)=@req={0x9, 0x4, 0x0, 0x7ff}, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xffffffff) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000e00)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000e40)=0x9, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)=@delqdisc={0x1a4, 0x25, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x7}, {0xfff3, 0x8}, {0x6, 0xd}}, [@TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb0, 0x9, 0x4, 0xffff, 0x2, 0x9, 0x1, 0x2}}, {0x8, 0x2, [0x7f, 0x7]}}, {{0x1c, 0x1, {0xc, 0x8, 0xde6d, 0x8, 0x2, 0x7, 0x9, 0x2}}, {0x8, 0x2, [0x3, 0x6]}}, {{0x1c, 0x1, {0xf4, 0x7, 0xbe44, 0x2, 0x0, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x5b, 0x6, 0x5, 0x7, 0x2, 0xff, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0xda9]}}, {{0x1c, 0x1, {0x0, 0x3e, 0x227, 0x2, 0x2, 0x10000, 0x9, 0x2}}, {0x8, 0x2, [0x7, 0x401]}}, {{0x1c, 0x1, {0x8, 0x2, 0x9, 0x5, 0x0, 0xe3, 0x7, 0x8}}, {0x14, 0x2, [0x1, 0x3, 0x9b, 0x7f, 0x2, 0x3, 0x7, 0x6]}}, {{0x1c, 0x1, {0x4, 0x7, 0x9, 0x4, 0x1, 0xad0, 0x9, 0x7}}, {0x12, 0x2, [0xa7d, 0x9, 0xfffb, 0x8, 0x6b09, 0x2, 0xb1]}}, {{0x1c, 0x1, {0x4, 0x5, 0xfa94, 0x7fff, 0x2, 0xd, 0x17f5, 0x2}}, {0x8, 0x2, [0x1af9, 0x455b]}}, {{0x1c, 0x1, {0x7, 0x4, 0xf3cb, 0x0, 0x2, 0x5, 0x8, 0x9}}, {0x16, 0x2, [0x0, 0xfff8, 0xfffd, 0x5, 0x1, 0x3, 0x400, 0x40be, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1e}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4010}, 0x81) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1a, 0x11, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb74b, 0x0, 0x0, 0x0, 0x67794fc7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@exit, @ldst={0x3, 0x0, 0x6, 0xa, 0x2, 0xffffffffffffff5e, 0x4}]}, &(0x7f00000011c0)='GPL\x00', 0x8001, 0xa4, &(0x7f0000001200)=""/164, 0x40f00, 0x25, '\x00', r4, 0x19, r7, 0x8, &(0x7f00000012c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0xc, 0x92b, 0x269}, 0x10, 0xffffffffffffffff, r7, 0x5, 0x0, &(0x7f0000001340)=[{0x5, 0x5, 0x4, 0xc}, {0x0, 0x5, 0x7, 0x5}, {0x1, 0x5, 0xd}, {0x1, 0x3, 0x6, 0x2}, {0x3, 0x5, 0x4, 0x8}], 0x10, 0x6}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@cgroup=r7, r9, 0xa, 0x600f, r12, @prog_fd=r9}, 0x20) 1.540171814s ago: executing program 0 (id=3564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c002300000000000000000005002a0000000000f01adf49236129e3117347518dd0309ae323300962fea0f41b19603c132102a915192fa1dc324b20539544aca887e6f83841d967abadcd4a548e8e6e2a06fa60cfd782df1a3088ff4673da5f92b9a262b65d1e015f100601c456ceabe810cf88958deccad2bda1dbf9955db4548b85dc22f9f828172971d4214fc49d99876b7d7e1c5c7538e343996f0c3629030b28b4250885714117878b6a8bdac00ec3db401fd49f1785857d89bb358305c3686528e964c138161d9e8ed1f4a540396d8a"], 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0xa, 0x60000) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @multicast1, @empty}, 0xc) r4 = accept4$alg(r0, 0x0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0x6c, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000900)=""/131, &(0x7f00000008c0)="30a0e767daa8d6c50934fbfe6e75c383880d2abc897b541fcd2baa744609decf472f36a2023c80a298a5a49676ab79", &(0x7f00000009c0)="90dfe2f9b4cd5ada764e3b20b8edfb69146f00020000000000007d638126ab1bf2c9060b7b58e98a649958fe46aa233e5585968ce1b2e7f44e620ff65426eb4c08570905002642f6f00fe15f2c0ddaf159bfc7d551bea85b7dd08847ba5574a509732f10cb81be9cd47b959c7600ee9d1c00003726499a6ace0422a2a8db4c212f952aee8b8ae981c036f738b93fef9e8810fa97c707f6ccfca94a63d7b0a53b2e0f00dedd868b66ec055f9d880a4705c36ea8c03a265f000000000000000000000000000000000000000000000000c503000000000000009762c26b3d6b1412f8651e0e9e182fc4e4d75edd43d4553707a760cc945b3fe881ed8da5dbec373c29073947e8db8257aff1ecf9340cefc01138e47591e37c58d706ffb9625809f571b7d9349944", 0x0, r5}, 0x38) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) sendmsg$alg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="63612fd063a40c374ed191064ef86a64a33fd917f04e73534505a943c7921f514e8bae109cd607cfd4a177823ca9ae3cdff21b9ef895bb352c807552ae9a1b6660c6b13883b76d0070e9478ad4b291ceba91fb5be7602be358b1e5ed470e7be277171717dd29b2b21a0741bb9a3d843ccaa5cc52eded3545450aa4971423f694c31013ad66121c3b59dcc42bd58a249e44d7f88c997cc689ee78f659257c950e", 0xa0}, {&(0x7f0000000300)="1142c4151962e7fe5559e579f2eae6d60905cf6f818e5f70024050a4c3358cee1a9fd7e91f358462d00c4bf214c3510c2bec5c0071027b631bdc47cb7fe5a74f073c910bf906f4e39ea2730c4076117b05d5f9c2e22a02a6ca72430b87d7c095a67c2ed4f11309e835b5396ced82d80db0c9c545f6fa7e0166e6181e1c364f963b8e9adc2abd961d21f825323339d50362b30afc9d4330611154bc669df1363c5398ee273cd7030f586f3aaedb9e1244b89fbe66738b5db442ee8ef3d0b4af9b6d622c7d96c66d395da778c82c71b847053844b864c3165cb14490b9240bc0", 0xdf}, {&(0x7f0000000100)="85", 0x1}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="1e51c3675088b163e1f6041f11432ecb81d60500230000d82643dd9912888afa0547f188496dfdc2704bc9eb7c7e40e0b115850000000010000000000000c41f7251702574dcbcac3747f2d173f8302e482ae51481ae269926c036f841f1648ec1a2169519c54211980700212617302fa3f88415c5f8ef81f020d851475efe0b7c2a81c3880800000000000000b92be95d3009da4e8d40a853feb96f5a46359e20b05973094428470909b1259a688d7f3345021e9edb26a5", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x8, 0x10001, 0x9, 0x2443}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='kyber_throttled\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.539568805s ago: executing program 3 (id=3565): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x8001}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b400000000000000611418000000000004000000000000009500000000000000fd3c6643e3ef0915f3c3c039ffcf25493652aee989bb5608c37b0f92109edcdb5cc54cde4325133166b190e21b41e5520c4dd4aabf0cd5d9b21a3fc1545d389c8243eb14f78b44038559f5568be3ec91bd30b651478182ece86e35402271353a89fe7d5fb4d05504489400c5cf640b9cf4aa379938d4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x80001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x5, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001d40)={'nat\x00', 0x0, 0x4, 0x0, [0x3, 0xfffffffffffffffc, 0x1, 0x9, 0xfffffffffffffffe], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), 0xffffffffffffffff) (async) write$binfmt_script(r4, &(0x7f00000004c0), 0xb) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x12c, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f8a56b7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x428}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe75}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff918}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd5c}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) (async) connect$inet6(r8, &(0x7f0000000080), 0x1c) 1.418924208s ago: executing program 0 (id=3567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c000a0000000000000000000c0002000068000000000000100007800c0008000000000000000000080001"], 0x90}}, 0x0) 1.40817936s ago: executing program 3 (id=3568): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xff85}, 0x90) 1.284063296s ago: executing program 4 (id=3569): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x17, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="5e873a1800000000000000000000000000000085000000000000009500000100"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xeb, &(0x7f00000002c0)=""/235}, 0x90) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'rose0\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f00000005c0), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2c, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000060000000000000001000100181100003ad03e939788242a9012023175858e15c07e48ac37819292bcdd6218c36c5631d3132cac20a2b0074b778216e4dcff86bc015e9e3723da41b9f52bcc08d1f3c677d2cbbb0aaa6e0bdf5abaa5fb5043049d3edfa4a661199c474663ed1cce0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000000293ab2d00000000b7080000000000007b8af8ff00000000b7080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000045212000000000000573200008000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x5, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a87080003802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x94) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_generic(0x10, 0x3, 0x10) 1.282784414s ago: executing program 3 (id=3570): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x6800}, 0x90) 1.192504503s ago: executing program 0 (id=3571): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561aad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743", 0x73}, {&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b32b", 0x3e}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6f7", 0xa5}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}, {&(0x7f0000000540)="3b645eb24aa5ebc806eab3faa6f18d93b255723549f425b3601f3cf9e6ff8c15e31d85eb95293c599d5aa08aa490d49346a247ae375960a86ff490f0535ec56bb6c173c7bfe8bf0a6288f3c78c453f21a2a43ca91b1df7143af869e19c0fa96af02f6478c18057c4c4374eed1a31be739aeb25cc237d29789d5b0a796ee2dcf1ad2fab2e366f322952047ba29118ded296b55c8e", 0x94}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1aece", 0xe5}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a8c4da8299a", 0x15}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625abe82bdc6e47e081c06eb1d6ab55a68e53e8fbb1e88e1f41a71002eb8121bf965623ce7f464c363d86743c9279b5eedf88704b6a459766bee3d50ae9f16e5653783d08bfba153d27baa1b721743cda3a1bb920780f9c522e35a37b5e0c28809f09c176c7b850753edf3b43d4e4a48ab2f932f7efea94eec44f6ce9f05082011cd49783f2a87d65315ad4fb87384295d2a51c143227c385faa381", 0xec}], 0x6}}], 0x4, 0x84) 1.15812586s ago: executing program 3 (id=3572): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="00032cbd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e6573696d0000000f0002006e657464657673696d3000000800", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800", @ANYRES32], 0xfc}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8fe}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.018767037s ago: executing program 2 (id=3573): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000002060503000000000000000000000000050004000b0000000900020073797a32000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x4c}}, 0x0) 1.018275065s ago: executing program 4 (id=3574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="010000fff00000000000030000000c000a000000000000000000100002000000000000000000100007800c0008000000000000000000080001"], 0x90}}, 0x0) 1.017721655s ago: executing program 0 (id=3575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c000a0003000000000000000c0002000000000000000000040007800c0008000000000000000018080001"], 0x90}}, 0x0) 868.500209ms ago: executing program 2 (id=3576): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x0, 0x0, 0x600) 782.764096ms ago: executing program 3 (id=3577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5}}}}}, 0x20}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r1) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001a00)={0x90, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x29, 0x83, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88"]}, @nested={0x4d, 0xf, 0x0, 0x1, [@generic="3b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71d2273b51a237f2"]}]}, 0x90}}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "74f0ffdb36"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "9721e887699e4083"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x890) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x10200, 0x2000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x30, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x1, r0}, 0x38) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x7ff, 0x3, 0x3, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x81}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000080000000000000008006300924650001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000000c6b0800080000001800000000000080000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0xac, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xb, 0x4, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000ac0)=[r0, r0, r0, r0, r0, r13], &(0x7f0000000b00)=[{0x4, 0x2, 0x6, 0x8}], 0x10, 0x9b}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 0s ago: executing program 2 (id=3578): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000bf0e000000000000e2ffffff850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095000000000000000ac79fd9134497f5c72f927feb89169bb2d66c7ff15229cc1606d7e562"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x21, 0x0, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000160000020000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x45, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/723], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0x14, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xd503}, [@IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_BROADCAST={0xa}]}, 0x34}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00\''], 0x50}}, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) kernel console output (not intermixed with test programs): ad [ 200.564835][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.579177][ T6379] ldm_validate_partition_table(): Disk read failed. [ 200.593823][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.621241][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.629817][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.662478][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.697985][ T6379] Dev nbd0: unable to read RDB block 0 [ 200.703522][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.725647][T11473] veth0_vlan: entered promiscuous mode [ 200.744776][ T6379] nbd0: unable to read partition table [ 200.780308][ T6379] nbd0: partition table beyond EOD, truncated [ 200.796696][T11473] veth1_vlan: entered promiscuous mode [ 200.810650][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.868761][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.942541][T11473] veth0_macvtap: entered promiscuous mode [ 200.960936][T11746] @ÿ: renamed from veth0_vlan (while UP) [ 200.979064][T11473] veth1_macvtap: entered promiscuous mode [ 201.049268][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.073107][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.094767][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.116473][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.126750][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.137251][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.149946][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.160744][ T4493] Bluetooth: hci4: command tx timeout [ 201.172582][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.183196][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.194147][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.209221][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.249939][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.282865][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.293262][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.304349][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.315573][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.336363][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.356411][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.370054][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.380978][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.393647][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.403944][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.415000][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.426383][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.437511][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.449412][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.472750][T11473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.487201][T11473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.496201][T11473] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.516599][T11473] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.530634][ T4493] block nbd11: Receive control failed (result -107) [ 201.640984][T11771] FAULT_INJECTION: forcing a failure. [ 201.640984][T11771] name failslab, interval 1, probability 0, space 0, times 1 [ 201.653707][T11771] CPU: 0 PID: 11771 Comm: syz.2.2365 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 201.663517][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.673569][T11771] Call Trace: [ 201.676857][T11771] [ 201.679800][T11771] dump_stack_lvl+0x241/0x360 [ 201.684514][T11771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.684644][T11774] netlink: 'syz.0.2366': attribute type 2 has an invalid length. [ 201.689712][T11771] ? __pfx__printk+0x10/0x10 [ 201.689750][T11771] ? nf_ct_pernet+0x45/0x270 [ 201.689769][T11771] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.697560][T11774] __nla_validate_parse: 12 callbacks suppressed [ 201.697572][T11774] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2366'. [ 201.702018][T11771] ? __pfx_lock_release+0x10/0x10 [ 201.732678][T11771] should_fail_ex+0x3b0/0x4e0 [ 201.737351][T11771] ? __nf_conntrack_alloc+0x8f/0x380 [ 201.742624][T11771] should_failslab+0x9/0x20 [ 201.747116][T11771] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 201.752481][T11771] __nf_conntrack_alloc+0x8f/0x380 [ 201.757588][T11771] init_conntrack+0x3c3/0x1310 [ 201.762350][T11771] ? __pfx_init_conntrack+0x10/0x10 [ 201.767546][T11771] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 201.773514][T11771] ? __local_bh_enable_ip+0x168/0x200 [ 201.778887][T11771] nf_conntrack_in+0xd59/0x1880 [ 201.783747][T11771] ? __pfx_nf_conntrack_in+0x10/0x10 [ 201.789028][T11771] ? ipt_do_table+0x312/0x1860 [ 201.793784][T11771] ? __pfx_ipt_do_table+0x10/0x10 [ 201.798801][T11771] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 201.804253][T11771] ? ip_sabotage_in+0x55/0x290 [ 201.809012][T11771] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 201.814464][T11771] nf_hook_slow+0xc3/0x220 [ 201.818875][T11771] ? __pfx_ip_rcv_finish+0x10/0x10 [ 201.823976][T11771] ? __pfx_ip_rcv_finish+0x10/0x10 [ 201.829079][T11771] NF_HOOK+0x29e/0x450 [ 201.833141][T11771] ? NF_HOOK+0x9a/0x450 [ 201.837286][T11771] ? __pfx_NF_HOOK+0x10/0x10 [ 201.841864][T11771] ? ip_rcv_core+0x801/0xd10 [ 201.846450][T11771] ? __pfx_ip_rcv_finish+0x10/0x10 [ 201.851560][T11771] ? __pfx_ip_rcv+0x10/0x10 [ 201.856056][T11771] __netif_receive_skb+0x2bf/0x650 [ 201.861169][T11771] ? __pfx_lock_acquire+0x10/0x10 [ 201.866191][T11771] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 201.872433][T11771] ? __pfx___netif_receive_skb+0x10/0x10 [ 201.878066][T11771] ? read_tsc+0x9/0x20 [ 201.882123][T11771] ? timekeeping_get_ns+0x2c0/0x420 [ 201.887318][T11771] ? netif_receive_skb+0x131/0x890 [ 201.892428][T11771] ? netif_receive_skb+0x131/0x890 [ 201.897532][T11771] netif_receive_skb+0x1e8/0x890 [ 201.902470][T11771] ? tun_rx_batched+0x160/0x8f0 [ 201.907325][T11771] ? __pfx_netif_receive_skb+0x10/0x10 [ 201.912789][T11771] ? tun_rx_batched+0x160/0x8f0 [ 201.917632][T11771] tun_rx_batched+0x1b7/0x8f0 [ 201.922299][T11771] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.928619][T11771] ? __pfx_lock_acquire+0x10/0x10 [ 201.933635][T11771] ? __pfx_tun_rx_batched+0x10/0x10 [ 201.938842][T11771] tun_get_user+0x2f84/0x4720 [ 201.943510][T11771] ? tun_get_user+0x2a78/0x4720 [ 201.948358][T11771] ? __lock_acquire+0x1346/0x1fd0 [ 201.953378][T11771] ? __pfx_tun_get_user+0x10/0x10 [ 201.958409][T11771] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 201.963860][T11771] ? tun_get+0x1e/0x2f0 [ 201.968012][T11771] ? __pfx_lock_release+0x10/0x10 [ 201.973049][T11771] ? tun_get+0x1e/0x2f0 [ 201.977193][T11771] ? tun_get+0x27d/0x2f0 [ 201.981425][T11771] tun_chr_write_iter+0x113/0x1f0 [ 201.986444][T11771] vfs_write+0xa72/0xc90 [ 201.990685][T11771] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 201.996228][T11771] ? __pfx_vfs_write+0x10/0x10 [ 202.001003][T11771] ksys_write+0x1a0/0x2c0 [ 202.005333][T11771] ? __pfx_ksys_write+0x10/0x10 [ 202.010181][T11771] ? do_syscall_64+0x100/0x230 [ 202.014955][T11771] ? do_syscall_64+0xb6/0x230 [ 202.019623][T11771] do_syscall_64+0xf3/0x230 [ 202.024117][T11771] ? clear_bhb_loop+0x35/0x90 [ 202.028791][T11771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.034673][T11771] RIP: 0033:0x7fe32ab75a99 [ 202.039088][T11771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.058700][T11771] RSP: 002b:00007fe32a5ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.067110][T11771] RAX: ffffffffffffffda RBX: 00007fe32ad03f60 RCX: 00007fe32ab75a99 [ 202.075078][T11771] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 202.083050][T11771] RBP: 00007fe32a5ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.091010][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.098971][T11771] R13: 000000000000000b R14: 00007fe32ad03f60 R15: 00007ffd06877688 [ 202.106951][T11771] [ 202.165876][T11774] nbd0: detected capacity change from 1 to 0 [ 202.412723][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.428191][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.495744][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.516605][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 202.526569][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.540519][T11792] block nbd0: must specify backend [ 202.742215][T11804] netlink: 'syz.0.2378': attribute type 4 has an invalid length. [ 202.941159][T11820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2379'. [ 202.967333][T11822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2383'. [ 203.241373][ T4493] Bluetooth: hci4: command tx timeout [ 203.380633][T11851] netlink: 'syz.4.2392': attribute type 1 has an invalid length. [ 203.503125][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2394'. [ 203.523011][T11858] netlink: zone id is out of range [ 203.542318][T11858] netlink: del zone limit has 4 unknown bytes [ 203.569091][T11862] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2397'. [ 203.599697][T11862] block nbd0: backend image doesn't match with [ 203.857517][T11877] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 203.889737][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2406'. [ 203.915252][T11877] bond6: entered promiscuous mode [ 203.928037][T11877] bond0: (slave bond_slave_0): Releasing backup interface [ 203.944312][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 203.979946][T11877] bond6: (slave bond_slave_0): making interface the new active one [ 204.021567][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 204.031359][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 204.034342][T11877] bond_slave_0: entered promiscuous mode [ 204.052143][T11877] bond6: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.108305][ T4493] block nbd12: Receive control failed (result -107) [ 204.224683][T11901] netlink: 'syz.2.2414': attribute type 2 has an invalid length. [ 204.384116][T11910] FAULT_INJECTION: forcing a failure. [ 204.384116][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 204.396853][T11910] CPU: 0 PID: 11910 Comm: syz.2.2416 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 204.406673][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 204.416743][T11910] Call Trace: [ 204.420029][T11910] [ 204.422966][T11910] dump_stack_lvl+0x241/0x360 [ 204.427669][T11910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.432883][T11910] ? __pfx__printk+0x10/0x10 [ 204.437502][T11910] ? __asan_memset+0x23/0x50 [ 204.442106][T11910] should_fail_ex+0x3b0/0x4e0 [ 204.446805][T11910] should_failslab+0x9/0x20 [ 204.451316][T11910] kmalloc_node_track_caller_noprof+0xda/0x440 [ 204.457490][T11910] ? nf_ct_ext_add+0x1a2/0x3e0 [ 204.462266][T11910] krealloc_noprof+0x7d/0x120 [ 204.466944][T11910] nf_ct_ext_add+0x1a2/0x3e0 [ 204.471532][T11910] init_conntrack+0x8bf/0x1310 [ 204.476293][T11910] ? __pfx_init_conntrack+0x10/0x10 [ 204.481488][T11910] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 204.487456][T11910] ? __local_bh_enable_ip+0x168/0x200 [ 204.492838][T11910] nf_conntrack_in+0xd59/0x1880 [ 204.497698][T11910] ? __pfx_nf_conntrack_in+0x10/0x10 [ 204.502980][T11910] ? ipt_do_table+0x312/0x1860 [ 204.507739][T11910] ? __pfx_ipt_do_table+0x10/0x10 [ 204.512757][T11910] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 204.518206][T11910] ? ip_sabotage_in+0x55/0x290 [ 204.522963][T11910] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 204.528423][T11910] nf_hook_slow+0xc3/0x220 [ 204.532849][T11910] ? __pfx_ip_rcv_finish+0x10/0x10 [ 204.537951][T11910] ? __pfx_ip_rcv_finish+0x10/0x10 [ 204.543053][T11910] NF_HOOK+0x29e/0x450 [ 204.547114][T11910] ? NF_HOOK+0x9a/0x450 [ 204.551265][T11910] ? __pfx_NF_HOOK+0x10/0x10 [ 204.555841][T11910] ? ip_rcv_core+0x801/0xd10 [ 204.560430][T11910] ? __pfx_ip_rcv_finish+0x10/0x10 [ 204.565541][T11910] ? __pfx_ip_rcv+0x10/0x10 [ 204.570037][T11910] __netif_receive_skb+0x2bf/0x650 [ 204.575147][T11910] ? __pfx_lock_acquire+0x10/0x10 [ 204.580161][T11910] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 204.586393][T11910] ? __pfx___netif_receive_skb+0x10/0x10 [ 204.592040][T11910] ? read_tsc+0x9/0x20 [ 204.596105][T11910] ? timekeeping_get_ns+0x2c0/0x420 [ 204.601304][T11910] ? netif_receive_skb+0x131/0x890 [ 204.606413][T11910] ? netif_receive_skb+0x131/0x890 [ 204.611540][T11910] netif_receive_skb+0x1e8/0x890 [ 204.616477][T11910] ? tun_rx_batched+0x160/0x8f0 [ 204.621322][T11910] ? __pfx_netif_receive_skb+0x10/0x10 [ 204.626785][T11910] ? tun_rx_batched+0x160/0x8f0 [ 204.631630][T11910] tun_rx_batched+0x1b7/0x8f0 [ 204.636306][T11910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.642642][T11910] ? __pfx_lock_acquire+0x10/0x10 [ 204.647661][T11910] ? __pfx_tun_rx_batched+0x10/0x10 [ 204.652866][T11910] tun_get_user+0x2f84/0x4720 [ 204.657620][T11910] ? tun_get_user+0x2a78/0x4720 [ 204.662471][T11910] ? __lock_acquire+0x1346/0x1fd0 [ 204.667497][T11910] ? __pfx_tun_get_user+0x10/0x10 [ 204.672535][T11910] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 204.677984][T11910] ? tun_get+0x1e/0x2f0 [ 204.682134][T11910] ? __pfx_lock_release+0x10/0x10 [ 204.687164][T11910] ? tun_get+0x1e/0x2f0 [ 204.691309][T11910] ? tun_get+0x27d/0x2f0 [ 204.695546][T11910] tun_chr_write_iter+0x113/0x1f0 [ 204.700565][T11910] vfs_write+0xa72/0xc90 [ 204.704806][T11910] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 204.710348][T11910] ? __pfx_vfs_write+0x10/0x10 [ 204.715124][T11910] ksys_write+0x1a0/0x2c0 [ 204.719451][T11910] ? __pfx_bpf_trace_run2+0x10/0x10 [ 204.724641][T11910] ? __pfx_ksys_write+0x10/0x10 [ 204.729492][T11910] ? rcu_is_watching+0x15/0xb0 [ 204.734260][T11910] ? trace_sys_enter+0x1f/0xd0 [ 204.739020][T11910] do_syscall_64+0xf3/0x230 [ 204.743519][T11910] ? clear_bhb_loop+0x35/0x90 [ 204.748191][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.754074][T11910] RIP: 0033:0x7fe32ab75a99 [ 204.758497][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.778122][T11910] RSP: 002b:00007fe32a5ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.786546][T11910] RAX: ffffffffffffffda RBX: 00007fe32ad03f60 RCX: 00007fe32ab75a99 [ 204.794508][T11910] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 204.802469][T11910] RBP: 00007fe32a5ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.810431][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.818389][T11910] R13: 000000000000000b R14: 00007fe32ad03f60 R15: 00007ffd06877688 [ 204.826361][T11910] [ 205.023741][T11915] block nbd0: must specify backend [ 205.234251][T11928] block nbd0: backend image doesn't match with [ 205.789692][T11967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.795020][T11967] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 205.874826][T11971] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 205.886676][T11971] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 205.894770][T11971] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 205.914829][T11971] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 205.944808][T11971] vlan3: entered allmulticast mode [ 205.970579][T11971] macvlan0: entered allmulticast mode [ 205.985790][T11979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.996606][T11971] veth1_vlan: entered allmulticast mode [ 206.004465][T11971] macvlan0: left allmulticast mode [ 206.021158][T11971] veth1_vlan: left allmulticast mode [ 206.234023][T11989] netlink: 'syz.0.2451': attribute type 2 has an invalid length. [ 206.265177][T11991] netlink: 'syz.2.2452': attribute type 2 has an invalid length. [ 206.276077][T11991] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.319396][ T4493] block nbd13: Receive control failed (result -107) [ 206.616654][T12010] ip6tnl0: Caught tx_queue_len zero misconfig [ 206.744989][T12016] FAULT_INJECTION: forcing a failure. [ 206.744989][T12016] name failslab, interval 1, probability 0, space 0, times 0 [ 206.757711][T12016] CPU: 1 PID: 12016 Comm: syz.1.2463 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 206.764308][T12018] __nla_validate_parse: 14 callbacks suppressed [ 206.764322][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2464'. [ 206.767508][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 206.767524][T12016] Call Trace: [ 206.767532][T12016] [ 206.767541][T12016] dump_stack_lvl+0x241/0x360 [ 206.767571][T12016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.767592][T12016] ? __pfx__printk+0x10/0x10 [ 206.767617][T12016] ? sk_filter_trim_cap+0x1b3/0xa80 [ 206.767640][T12016] ? sk_filter_trim_cap+0x5bf/0xa80 [ 206.767667][T12016] should_fail_ex+0x3b0/0x4e0 [ 206.767693][T12016] ? sctp_chunkify+0x59/0x230 [ 206.767715][T12016] should_failslab+0x9/0x20 [ 206.837604][T12016] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 206.842977][T12016] sctp_chunkify+0x59/0x230 [ 206.847479][T12016] sctp_rcv+0x191b/0x2580 [ 206.851824][T12016] ? __pfx_sctp_rcv+0x10/0x10 [ 206.856492][T12016] ? raw_local_deliver+0xe16/0xf20 [ 206.861608][T12016] ? raw_local_deliver+0x327/0xf20 [ 206.866718][T12016] ? __pfx_sctp4_rcv+0x10/0x10 [ 206.871471][T12016] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 206.876314][T12016] ip_protocol_deliver_rcu+0x2e6/0x440 [ 206.881769][T12016] ? ip_local_deliver_finish+0x230/0x5f0 [ 206.887397][T12016] ip_local_deliver_finish+0x341/0x5f0 [ 206.892856][T12016] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 206.898825][T12016] NF_HOOK+0x3a4/0x450 [ 206.902887][T12016] ? NF_HOOK+0x9a/0x450 [ 206.907033][T12016] ? __pfx_NF_HOOK+0x10/0x10 [ 206.911617][T12016] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 206.917596][T12016] ? ip_rcv_finish+0x406/0x560 [ 206.922354][T12016] ? __pfx_ip_rcv_finish+0x10/0x10 [ 206.927460][T12016] NF_HOOK+0x3a4/0x450 [ 206.931529][T12016] ? NF_HOOK+0x9a/0x450 [ 206.935676][T12016] ? __pfx_NF_HOOK+0x10/0x10 [ 206.940255][T12016] ? ip_rcv_core+0x801/0xd10 [ 206.944838][T12016] ? __pfx_ip_rcv_finish+0x10/0x10 [ 206.949948][T12016] ? __pfx_ip_rcv+0x10/0x10 [ 206.954443][T12016] __netif_receive_skb+0x2bf/0x650 [ 206.959558][T12016] ? __pfx_lock_acquire+0x10/0x10 [ 206.964570][T12016] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 206.970797][T12016] ? __pfx___netif_receive_skb+0x10/0x10 [ 206.976430][T12016] ? read_tsc+0x9/0x20 [ 206.980491][T12016] ? timekeeping_get_ns+0x2c0/0x420 [ 206.985689][T12016] ? netif_receive_skb+0x131/0x890 [ 206.990799][T12016] ? netif_receive_skb+0x131/0x890 [ 206.995905][T12016] netif_receive_skb+0x1e8/0x890 [ 207.000842][T12016] ? tun_rx_batched+0x160/0x8f0 [ 207.005685][T12016] ? __pfx_netif_receive_skb+0x10/0x10 [ 207.011148][T12016] ? tun_rx_batched+0x160/0x8f0 [ 207.015990][T12016] tun_rx_batched+0x1b7/0x8f0 [ 207.020660][T12016] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.026981][T12016] ? __pfx_lock_acquire+0x10/0x10 [ 207.031994][T12016] ? __pfx_tun_rx_batched+0x10/0x10 [ 207.037199][T12016] tun_get_user+0x2f84/0x4720 [ 207.041871][T12016] ? tun_get_user+0x2a78/0x4720 [ 207.046726][T12016] ? __lock_acquire+0x1346/0x1fd0 [ 207.051744][T12016] ? __pfx_tun_get_user+0x10/0x10 [ 207.056774][T12016] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 207.062223][T12016] ? tun_get+0x1e/0x2f0 [ 207.066368][T12016] ? __pfx_lock_release+0x10/0x10 [ 207.071392][T12016] ? tun_get+0x1e/0x2f0 [ 207.075534][T12016] ? tun_get+0x27d/0x2f0 [ 207.079771][T12016] tun_chr_write_iter+0x113/0x1f0 [ 207.084793][T12016] vfs_write+0xa72/0xc90 [ 207.089043][T12016] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 207.094582][T12016] ? __pfx_vfs_write+0x10/0x10 [ 207.099358][T12016] ksys_write+0x1a0/0x2c0 [ 207.103688][T12016] ? __pfx_ksys_write+0x10/0x10 [ 207.108533][T12016] ? do_syscall_64+0x100/0x230 [ 207.113289][T12016] ? do_syscall_64+0xb6/0x230 [ 207.117956][T12016] do_syscall_64+0xf3/0x230 [ 207.122456][T12016] ? clear_bhb_loop+0x35/0x90 [ 207.127129][T12016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.133018][T12016] RIP: 0033:0x7f22f4775a99 [ 207.137423][T12016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.157022][T12016] RSP: 002b:00007f22f41ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.165427][T12016] RAX: ffffffffffffffda RBX: 00007f22f4903f60 RCX: 00007f22f4775a99 [ 207.173396][T12016] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 207.181354][T12016] RBP: 00007f22f41ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.189315][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.197280][T12016] R13: 000000000000000b R14: 00007f22f4903f60 R15: 00007ffe145abb18 [ 207.205255][T12016] [ 207.209450][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.357853][T12024] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2467'. [ 207.367031][T12024] block nbd0: backend image doesn't match with [ 207.501819][T12028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2470'. [ 207.527118][T12028] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2470'. [ 207.578139][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2473'. [ 207.593738][T12036] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 207.679607][T12033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2471'. [ 207.711238][T12043] xt_HMARK: spi-set and port-set can't be combined [ 207.767905][T12046] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2476'. [ 207.913514][T12056] netlink: 468 bytes leftover after parsing attributes in process `syz.4.2479'. [ 208.402094][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2493'. [ 208.490758][T12094] validate_nla: 5 callbacks suppressed [ 208.490777][T12094] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 208.552254][T12094] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 208.561631][T12094] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 208.569609][T12094] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 208.586093][T12094] vlan3: entered allmulticast mode [ 208.591754][T12094] macvlan0: entered allmulticast mode [ 208.599533][T12094] veth1_vlan: entered allmulticast mode [ 208.610759][T12094] macvlan0: left allmulticast mode [ 208.617669][T12094] veth1_vlan: left allmulticast mode [ 208.672913][T12106] Bluetooth: hci3: unsupported parameter 64512 [ 208.696635][T12106] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 208.800441][T12111] netlink: 'syz.0.2504': attribute type 3 has an invalid length. [ 209.247571][T12137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2512'. [ 209.290668][T12139] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 209.834216][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.185469][T12143] delete_channel: no stack [ 210.251894][T12166] 8021q: VLANs not supported on lo [ 210.370964][T12170] : renamed from gretap0 [ 210.417735][T12167] nbd0: detected capacity change from 0 to 1 [ 210.485772][ T6379] buffer_io_error: 2 callbacks suppressed [ 210.485790][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 210.629057][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 210.699982][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 210.768628][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 210.857398][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 210.961554][ T6379] ldm_validate_partition_table(): Disk read failed. [ 210.998573][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.055742][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.098989][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.139030][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.201583][ T6379] Dev nbd0: unable to read RDB block 0 [ 211.220900][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.251277][ T6379] nbd0: unable to read partition table [ 211.271375][ T6379] nbd0: partition table beyond EOD, truncated [ 211.570953][T12208] netlink: 'syz.1.2537': attribute type 3 has an invalid length. [ 211.639748][T12214] netlink: 'syz.2.2539': attribute type 1 has an invalid length. [ 211.676384][ T6379] ldm_validate_partition_table(): Disk read failed. [ 211.696442][ T6379] Dev nbd0: unable to read RDB block 0 [ 211.702187][ T6379] nbd0: unable to read partition table [ 211.702728][T12214] bond2: entered promiscuous mode [ 211.708794][ T6379] nbd0: partition table beyond EOD, truncated [ 211.772409][T12214] bond0: (slave bond_slave_0): Releasing backup interface [ 211.853201][T12214] bond2: (slave bond_slave_0): making interface the new active one [ 211.889323][T12214] bond_slave_0: entered promiscuous mode [ 211.912944][T12214] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.925084][T12229] __nla_validate_parse: 7 callbacks suppressed [ 211.925101][T12229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2542'. [ 212.118029][T12231] xt_ipvs: protocol family 7 not supported [ 212.124686][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027be4800: rx timeout, send abort [ 212.133024][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027be7400: rx timeout, send abort [ 212.146748][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027be4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 212.161186][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027be7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 212.310611][T12246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2549'. [ 212.330979][T12246] block nbd0: backend image doesn't match with [ 212.643931][T12268] netlink: 'syz.0.2557': attribute type 2 has an invalid length. [ 212.685786][T12268] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2557'. [ 212.719516][T12268] nbd0: detected capacity change from 1 to 0 [ 212.907770][T12280] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2563'. [ 212.943712][T12280] block nbd0: backend image doesn't match with [ 213.352843][T12300] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 213.364930][T12300] macvlan1: entered allmulticast mode [ 213.406092][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'. [ 213.426093][T12305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2573'. [ 213.453738][T12305] vlan4: entered allmulticast mode [ 213.473272][T12305] macvlan0: entered allmulticast mode [ 213.486640][T12305] veth1_vlan: entered allmulticast mode [ 213.934592][T12327] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2580'. [ 214.210399][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 214.261008][T12343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.350101][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 214.393019][T12347] block nbd0: must specify backend [ 214.527819][T12354] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2592'. [ 215.370731][ T4493] block nbd14: Receive control failed (result -107) [ 215.940228][T12388] x_tables: duplicate underflow at hook 1 [ 216.931259][T12426] __nla_validate_parse: 7 callbacks suppressed [ 216.931277][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 217.118036][T12442] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 217.140572][T12442] netlink: 'syz.2.2624': attribute type 4 has an invalid length. [ 217.154880][T12442] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.2624'. [ 217.217276][T12451] netlink: 'syz.1.2627': attribute type 5 has an invalid length. [ 217.238598][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 217.260965][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065f14000: rx timeout, send abort [ 217.269574][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e404400: rx timeout, send abort [ 217.278071][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888065f14000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 217.292531][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e404400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 217.854340][T12482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'. [ 218.021234][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'. [ 218.163789][T12497] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 218.237896][T12497] team0: Port device  added [ 218.260432][T12507] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 218.343270][T12507] team0: Failed to send options change via netlink (err -105) [ 218.404833][T12507] team0: Failed to send port change of device  via netlink (err -105) [ 218.418079][T12519] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2651'. [ 218.425889][T12507] team0: Port device  removed [ 218.442001][T12507] bond0: (slave ): Enslaving as an active interface with an up link [ 218.444916][T12519] block nbd0: backend image doesn't match with [ 218.467991][T12517] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.475157][T12517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.653664][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 218.675940][T12523] xt_CT: No such helper "snmp" [ 218.707431][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'. [ 218.831943][T12537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2659'. [ 218.922115][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 218.951388][T12545] netlink: 'syz.0.2662': attribute type 3 has an invalid length. [ 219.090589][T12554] netlink: 'syz.1.2666': attribute type 2 has an invalid length. [ 219.179903][T12553] can: request_module (can-proto-0) failed. [ 219.476919][T12576] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 219.485730][T12576] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 219.672947][T12595] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 220.457787][T12627] block nbd0: must specify backend [ 220.544793][T12631] block nbd0: backend image doesn't match with [ 220.577906][T12633] gretap0: refused to change device tx_queue_len [ 220.594478][T12633] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 220.665047][T12639] netlink: 'syz.2.2693': attribute type 3 has an invalid length. [ 221.106809][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.162789][T12662] bridge_slave_1: left allmulticast mode [ 221.177005][T12662] bridge_slave_1: left promiscuous mode [ 221.194059][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.231901][T12662] bridge_slave_0: left allmulticast mode [ 221.243059][T12662] bridge_slave_0: left promiscuous mode [ 221.252235][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.171415][T12714] bridge0: entered promiscuous mode [ 222.231936][T12719] netlink: 'syz.0.2724': attribute type 3 has an invalid length. [ 222.359123][T12725] __nla_validate_parse: 15 callbacks suppressed [ 222.359141][T12725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2723'. [ 222.441583][T12725] bridge0: left promiscuous mode [ 222.975506][T12759] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2735'. [ 222.985133][T12759] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 222.993975][T12759] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.208127][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 223.260557][T12772] netlink: 'syz.4.2739': attribute type 3 has an invalid length. [ 223.425042][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2741'. [ 223.745935][T12797] syz.2.2747[12797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.746077][T12797] syz.2.2747[12797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.808817][T12801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2745'. [ 224.135641][T12812] netlink: 'syz.4.2752': attribute type 3 has an invalid length. [ 224.257107][T12819] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 224.297213][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 224.457986][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 224.585981][T12840] team1: Mode changed to "activebackup" [ 224.913284][T12852] unknown channel width for channel at 909000KHz? [ 224.957231][T12859] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2767'. [ 225.197853][T12870] netlink: 'syz.1.2771': attribute type 3 has an invalid length. [ 225.694569][T12894] bridge3: entered promiscuous mode [ 225.746973][T12894] bridge3: entered allmulticast mode [ 226.064806][T12918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.099645][T12919] netlink: 'syz.4.2789': attribute type 3 has an invalid length. [ 226.568324][T12949] netlink: 257 bytes leftover after parsing attributes in process `syz.4.2804'. [ 226.729930][T12954] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2805'. [ 227.316506][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 227.429860][T12989] __nla_validate_parse: 2 callbacks suppressed [ 227.429878][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 228.709395][T13029] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2832'. [ 228.845108][T13029] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 228.897793][T13041] netlink: 468 bytes leftover after parsing attributes in process `syz.3.2836'. [ 229.317505][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 229.355770][T13058] netlink: 'syz.3.2841': attribute type 20 has an invalid length. [ 229.755152][T13083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2846'. [ 229.806581][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'. [ 230.274109][T13107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2859'. [ 230.274157][T13109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2859'. [ 230.312746][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 230.322576][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 230.339520][T13113] gtp0: entered promiscuous mode [ 230.353847][T13113] gtp0: entered allmulticast mode [ 230.390645][T13112] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.560450][T13126] netlink: 'syz.1.2867': attribute type 33 has an invalid length. [ 230.778183][T13138] netlink: 'syz.2.2871': attribute type 3 has an invalid length. [ 231.352109][T13180] Bluetooth: hci3: unsupported parameter 64512 [ 231.363195][T13180] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 231.676172][T13200] nbd0: detected capacity change from 0 to 1 [ 231.700695][ T6379] buffer_io_error: 14 callbacks suppressed [ 231.700711][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.745041][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.767950][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.797001][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.804797][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.829298][ T6379] ldm_validate_partition_table(): Disk read failed. [ 231.862000][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.882608][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.922544][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 231.949389][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.005072][ T6379] Dev nbd0: unable to read RDB block 0 [ 232.005322][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.011032][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 232.011217][ T6379] nbd0: unable to read partition table [ 232.033693][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.033826][ T6379] nbd0: partition table beyond EOD, truncated [ 232.053198][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.089559][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.111251][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.119059][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.219570][ T8320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.395100][ T8320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.575689][ T8320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.657268][T13239] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 232.683621][T13235] netlink: 'syz.2.2905': attribute type 11 has an invalid length. [ 232.731552][T13246] netlink: 'syz.2.2905': attribute type 11 has an invalid length. [ 232.738953][ T8320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.815595][T13246] debugfs: Directory 'netdev:' with parent 'phy15' already present! [ 233.036553][T13257] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:0 [ 233.451302][ T8320] bridge_slave_1: left allmulticast mode [ 233.467255][ T8320] bridge_slave_1: left promiscuous mode [ 233.503708][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.550909][T13283] ebt_among: dst integrity fail: 101 [ 233.570012][ T8320] bridge_slave_0: left allmulticast mode [ 233.575680][ T8320] bridge_slave_0: left promiscuous mode [ 233.608865][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.864190][T13296] netlink: 'syz.0.2926': attribute type 2 has an invalid length. [ 233.872398][T13296] __nla_validate_parse: 6 callbacks suppressed [ 233.872419][T13296] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2926'. [ 233.917272][T13296] nbd0: detected capacity change from 1 to 0 [ 234.124372][ T8320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.136657][ T8320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.148235][ T8320] bond0 (unregistering): Released all slaves [ 234.198364][ T4493] Bluetooth: hci4: command tx timeout [ 234.208416][T13209] chnl_net:caif_netlink_parms(): no params data found [ 234.595699][T13324] netlink: 'syz.1.2934': attribute type 3 has an invalid length. [ 234.722637][T13327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2935'. [ 234.869285][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.882751][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.893691][T13340] netlink: 'syz.1.2940': attribute type 3 has an invalid length. [ 234.902288][T13209] bridge_slave_0: entered allmulticast mode [ 234.912314][T13209] bridge_slave_0: entered promiscuous mode [ 235.100714][T13337] netlink: 'syz.3.2939': attribute type 1 has an invalid length. [ 235.169284][T13337] bond7: entered promiscuous mode [ 235.206461][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.215734][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.227633][T13209] bridge_slave_1: entered allmulticast mode [ 235.250462][T13363] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2943'. [ 235.268466][T13209] bridge_slave_1: entered promiscuous mode [ 235.281738][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'. [ 235.332586][ T8320] hsr_slave_0: left promiscuous mode [ 235.338584][T13367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2945'. [ 235.366683][ T8320] hsr_slave_1: left promiscuous mode [ 235.381046][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.392497][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.405168][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.406584][T13367] nbd0: detected capacity change from 0 to 1 [ 235.419294][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.429397][ T6379] ldm_validate_partition_table(): Disk read failed. [ 235.446021][ T6379] Dev nbd0: unable to read RDB block 0 [ 235.462621][ T6379] nbd0: unable to read partition table [ 235.481769][ T6379] nbd0: partition table beyond EOD, truncated [ 235.492193][ T8320] veth1_macvtap: left promiscuous mode [ 235.503846][ T8320] veth0_macvtap: left promiscuous mode [ 235.515664][ T8320] veth1_vlan: left promiscuous mode [ 235.532099][ T8320] veth0_vlan: left promiscuous mode [ 235.790545][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2949'. [ 236.040880][ T8320] team0 (unregistering): Port device team_slave_1 removed [ 236.085792][ T8320] team0 (unregistering): Port device team_slave_0 removed [ 236.286543][ T4493] Bluetooth: hci4: command tx timeout [ 236.446938][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 236.640366][T13385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2950'. [ 236.664221][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.701637][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.971458][T13209] team0: Port device team_slave_0 added [ 237.001589][T13209] team0: Port device team_slave_1 added [ 237.111771][T13412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2961'. [ 237.261503][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.277579][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.362697][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.385433][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 237.431093][T13433] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 237.435981][T13416] vxcan3: entered promiscuous mode [ 237.454799][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.492383][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.565424][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.952521][T13209] hsr_slave_0: entered promiscuous mode [ 238.005620][T13209] hsr_slave_1: entered promiscuous mode [ 238.034792][T13209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.067043][T13209] Cannot create hsr debugfs directory [ 238.333220][T13475] FAULT_INJECTION: forcing a failure. [ 238.333220][T13475] name failslab, interval 1, probability 0, space 0, times 0 [ 238.356995][ T4493] Bluetooth: hci4: command tx timeout [ 238.393836][T13475] CPU: 0 PID: 13475 Comm: syz.0.2981 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 238.403679][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 238.413744][T13475] Call Trace: [ 238.417039][T13475] [ 238.419987][T13475] dump_stack_lvl+0x241/0x360 [ 238.424691][T13475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.429935][T13475] ? __pfx__printk+0x10/0x10 [ 238.434545][T13475] ? ref_tracker_alloc+0x332/0x490 [ 238.439676][T13475] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 238.445160][T13475] should_fail_ex+0x3b0/0x4e0 [ 238.449861][T13475] ? skb_clone+0x20c/0x390 [ 238.454300][T13475] should_failslab+0x9/0x20 [ 238.458818][T13475] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 238.464219][T13475] skb_clone+0x20c/0x390 [ 238.468489][T13475] __netlink_deliver_tap+0x3cc/0x7c0 [ 238.473801][T13475] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.479019][T13475] netlink_deliver_tap+0x19d/0x1b0 [ 238.484146][T13475] netlink_sendskb+0x68/0x140 [ 238.488828][T13475] netlink_unicast+0x39d/0x990 [ 238.493589][T13475] ? __asan_memcpy+0x40/0x70 [ 238.498180][T13475] ? __pfx_netlink_unicast+0x10/0x10 [ 238.503466][T13475] netlink_rcv_skb+0x262/0x430 [ 238.508237][T13475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.513697][T13475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.518991][T13475] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.524186][T13475] netlink_unicast+0x7f0/0x990 [ 238.528957][T13475] ? __pfx_netlink_unicast+0x10/0x10 [ 238.534230][T13475] ? __virt_addr_valid+0x183/0x530 [ 238.539340][T13475] ? __check_object_size+0x49c/0x900 [ 238.544616][T13475] ? bpf_lsm_netlink_send+0x9/0x10 [ 238.549721][T13475] netlink_sendmsg+0x8e4/0xcb0 [ 238.554491][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.559786][T13475] ? __import_iovec+0x536/0x820 [ 238.564632][T13475] ? aa_sock_msg_perm+0x91/0x160 [ 238.569563][T13475] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.574850][T13475] ? security_socket_sendmsg+0x87/0xb0 [ 238.580317][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.585591][T13475] __sock_sendmsg+0x221/0x270 [ 238.590262][T13475] ____sys_sendmsg+0x525/0x7d0 [ 238.595025][T13475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.600320][T13475] __sys_sendmsg+0x2b0/0x3a0 [ 238.604909][T13475] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.610018][T13475] ? vfs_write+0x7c4/0xc90 [ 238.614468][T13475] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.620786][T13475] ? do_syscall_64+0x100/0x230 [ 238.625546][T13475] ? do_syscall_64+0xb6/0x230 [ 238.630222][T13475] do_syscall_64+0xf3/0x230 [ 238.634718][T13475] ? clear_bhb_loop+0x35/0x90 [ 238.639390][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.645278][T13475] RIP: 0033:0x7fe769f75a99 [ 238.649688][T13475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.669289][T13475] RSP: 002b:00007fe76ad9c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.677697][T13475] RAX: ffffffffffffffda RBX: 00007fe76a103f60 RCX: 00007fe769f75a99 [ 238.685659][T13475] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 238.693616][T13475] RBP: 00007fe76ad9c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 238.701577][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.709538][T13475] R13: 000000000000000b R14: 00007fe76a103f60 R15: 00007ffd3bb0ef08 [ 238.717512][T13475] [ 238.876702][T13488] __nla_validate_parse: 6 callbacks suppressed [ 238.876721][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 238.981702][T13495] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 239.074314][T13497] can: request_module (can-proto-0) failed. [ 239.225346][T13510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.434852][T13521] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 239.463946][T13521] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.2994'. [ 239.495246][T13521] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 239.516391][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 239.535403][T13520] ip6gre2: entered allmulticast mode [ 239.544684][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2997'. [ 239.588521][ T4493] block nbd15: Receive control failed (result -107) [ 239.652473][T13521] ÿÿÿ: renamed from vlan1 (while UP) [ 239.858127][T13209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.894272][T13209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.925970][T13209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.961823][T13209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.000312][T13547] gretap0: refused to change device tx_queue_len [ 240.016737][T13547] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 240.250136][T13555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3004'. [ 240.329270][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.407194][T13565] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3009'. [ 240.440339][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.447067][ T4493] Bluetooth: hci4: command tx timeout [ 240.604998][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.612190][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.666870][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.674044][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.740454][T13588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'. [ 240.926481][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3013'. [ 240.931648][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 241.077016][T13602] netlink: 468 bytes leftover after parsing attributes in process `syz.3.3018'. [ 241.398001][T13620] FAULT_INJECTION: forcing a failure. [ 241.398001][T13620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 241.423582][T13623] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 241.440803][T13620] CPU: 1 PID: 13620 Comm: syz.1.3022 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 241.450640][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.460710][T13620] Call Trace: [ 241.463995][T13620] [ 241.466938][T13620] dump_stack_lvl+0x241/0x360 [ 241.471640][T13620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.476852][T13620] ? __pfx__printk+0x10/0x10 [ 241.481441][T13620] ? __pfx_lock_release+0x10/0x10 [ 241.486461][T13620] ? validate_chain+0x11e/0x5900 [ 241.491400][T13620] should_fail_ex+0x3b0/0x4e0 [ 241.496080][T13620] _copy_from_iter+0x1f6/0x1960 [ 241.501283][T13620] ? __pfx_validate_chain+0x10/0x10 [ 241.506487][T13620] ? __pfx__copy_from_iter+0x10/0x10 [ 241.511778][T13620] tun_get_user+0x445/0x4720 [ 241.516393][T13620] ? __lock_acquire+0x1346/0x1fd0 [ 241.521429][T13620] ? __pfx_tun_get_user+0x10/0x10 [ 241.526466][T13620] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 241.531922][T13620] ? tun_get+0x1e/0x2f0 [ 241.536071][T13620] ? __pfx_lock_release+0x10/0x10 [ 241.541102][T13620] ? tun_get+0x1e/0x2f0 [ 241.545250][T13620] ? tun_get+0x27d/0x2f0 [ 241.549487][T13620] tun_chr_write_iter+0x113/0x1f0 [ 241.554509][T13620] vfs_write+0xa72/0xc90 [ 241.558753][T13620] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 241.564292][T13620] ? __pfx_vfs_write+0x10/0x10 [ 241.569069][T13620] ksys_write+0x1a0/0x2c0 [ 241.573407][T13620] ? __pfx_ksys_write+0x10/0x10 [ 241.578256][T13620] ? do_syscall_64+0x100/0x230 [ 241.583016][T13620] ? do_syscall_64+0xb6/0x230 [ 241.587690][T13620] do_syscall_64+0xf3/0x230 [ 241.592187][T13620] ? clear_bhb_loop+0x35/0x90 [ 241.596867][T13620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.602759][T13620] RIP: 0033:0x7f22f4775a99 [ 241.607257][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.626857][T13620] RSP: 002b:00007f22f41ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.635263][T13620] RAX: ffffffffffffffda RBX: 00007f22f4903f60 RCX: 00007f22f4775a99 [ 241.643226][T13620] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 241.651187][T13620] RBP: 00007f22f41ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.659148][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.667108][T13620] R13: 000000000000000b R14: 00007f22f4903f60 R15: 00007ffe145abb18 [ 241.675083][T13620] [ 241.889666][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.204736][T13650] tunl0: entered promiscuous mode [ 242.254382][T13650] netlink: 'syz.3.3029': attribute type 4 has an invalid length. [ 242.505421][T13666] nbd: must specify a device to reconfigure [ 242.701253][T13209] veth0_vlan: entered promiscuous mode [ 242.747300][T13209] veth1_vlan: entered promiscuous mode [ 242.882158][T13209] veth0_macvtap: entered promiscuous mode [ 242.927359][T13686] hsr_slave_0: left promiscuous mode [ 242.951161][T13686] hsr_slave_1: left promiscuous mode [ 243.051557][T13209] veth1_macvtap: entered promiscuous mode [ 243.124975][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.156784][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.176548][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.189983][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.200009][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.210635][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.220496][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.231130][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.243128][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.255841][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.268875][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.313966][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.360056][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.413961][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.436165][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.456203][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.496326][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.523041][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.544876][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.583466][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.604925][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.638743][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.670666][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.700438][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.736228][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.765797][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.789757][T13209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.811069][T13209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.841784][T13209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.876566][T13209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.112477][ T8319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.133734][ T8319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.164575][T13748] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. [ 244.274179][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.289748][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.597789][T13772] __nla_validate_parse: 2 callbacks suppressed [ 244.597807][T13772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3056'. [ 245.329920][T13811] xt_TCPMSS: Only works on TCP SYN packets [ 245.752560][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'. [ 246.437490][T13874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3083'. [ 246.486349][T13874] block nbd0: backend image doesn't match with [ 246.619776][T13887] FAULT_INJECTION: forcing a failure. [ 246.619776][T13887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.642176][T13887] CPU: 1 PID: 13887 Comm: syz.2.3088 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 246.652010][T13887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 246.662080][T13887] Call Trace: [ 246.665363][T13887] [ 246.668303][T13887] dump_stack_lvl+0x241/0x360 [ 246.672998][T13887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.678212][T13887] ? __pfx__printk+0x10/0x10 [ 246.682821][T13887] ? __pfx_lock_release+0x10/0x10 [ 246.687869][T13887] should_fail_ex+0x3b0/0x4e0 [ 246.692567][T13887] _copy_from_iter+0x1f6/0x1960 [ 246.697433][T13887] ? __virt_addr_valid+0x183/0x530 [ 246.702562][T13887] ? __pfx_lock_release+0x10/0x10 [ 246.707609][T13887] ? __alloc_skb+0x28f/0x440 [ 246.712211][T13887] ? __pfx__copy_from_iter+0x10/0x10 [ 246.717521][T13887] ? __virt_addr_valid+0x183/0x530 [ 246.722653][T13887] ? __virt_addr_valid+0x183/0x530 [ 246.727781][T13887] ? __virt_addr_valid+0x45f/0x530 [ 246.732908][T13887] ? __check_object_size+0x49c/0x900 [ 246.738212][T13887] netlink_sendmsg+0x73d/0xcb0 [ 246.743003][T13887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.748298][T13887] ? __import_iovec+0x536/0x820 [ 246.753142][T13887] ? aa_sock_msg_perm+0x91/0x160 [ 246.758074][T13887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 246.763354][T13887] ? security_socket_sendmsg+0x87/0xb0 [ 246.768807][T13887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.774083][T13887] __sock_sendmsg+0x221/0x270 [ 246.778757][T13887] ____sys_sendmsg+0x525/0x7d0 [ 246.783520][T13887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.788809][T13887] __sys_sendmsg+0x2b0/0x3a0 [ 246.793394][T13887] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.798498][T13887] ? vfs_write+0x7c4/0xc90 [ 246.802944][T13887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.809264][T13887] ? do_syscall_64+0x100/0x230 [ 246.814020][T13887] ? do_syscall_64+0xb6/0x230 [ 246.818689][T13887] do_syscall_64+0xf3/0x230 [ 246.823182][T13887] ? clear_bhb_loop+0x35/0x90 [ 246.827857][T13887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.833741][T13887] RIP: 0033:0x7fe32ab75a99 [ 246.838147][T13887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.857747][T13887] RSP: 002b:00007fe32a5ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.866154][T13887] RAX: ffffffffffffffda RBX: 00007fe32ad03f60 RCX: 00007fe32ab75a99 [ 246.874115][T13887] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000004 [ 246.882076][T13887] RBP: 00007fe32a5ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.890039][T13887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.897998][T13887] R13: 000000000000000b R14: 00007fe32ad03f60 R15: 00007ffd06877688 [ 246.905971][T13887] [ 247.393792][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 247.448198][T13907] sch_tbf: burst 129 is lower than device lo mtu (65550) ! [ 247.503115][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266a3400: rx timeout, send abort [ 247.511821][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880266a3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 247.517976][T13914] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3099'. [ 247.545385][T13914] block nbd0: backend image doesn't match with [ 247.557666][T13916] netlink: 'syz.1.3100': attribute type 3 has an invalid length. [ 247.888359][T13926] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 248.214581][T13943] tipc: Started in network mode [ 248.240327][T13943] tipc: Node identity ac1414aa, cluster identity 4711 [ 248.273445][T13943] tipc: Enabled bearer , priority 10 [ 248.308682][T13951] tipc: Disabling bearer [ 248.370913][T13948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3114'. [ 248.559245][T13960] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 248.579393][T13960] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 248.599628][T13960] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 248.626248][T13960] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 248.657825][T13960] vlan3: entered allmulticast mode [ 248.685007][T13960] macvlan0: entered allmulticast mode [ 248.701334][T13960] veth1_vlan: entered allmulticast mode [ 248.715524][T13960] macvlan0: left allmulticast mode [ 248.723839][T13960] veth1_vlan: left allmulticast mode [ 248.784479][T13965] sch_fq: defrate 0 ignored. [ 249.123737][T13978] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3122'. [ 249.205647][T13984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3125'. [ 249.233281][ T6379] buffer_io_error: 14 callbacks suppressed [ 249.233298][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.280234][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.309044][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.325275][T13987] netlink: 'syz.2.3127': attribute type 4 has an invalid length. [ 249.330407][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.366948][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.375603][T13987] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3127'. [ 249.394370][ T6379] ldm_validate_partition_table(): Disk read failed. [ 249.416876][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.449636][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.476672][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.497790][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.527914][ T6379] Dev nbd0: unable to read RDB block 0 [ 249.548302][ T6379] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.583960][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.597258][ T6379] nbd0: unable to read partition table [ 249.605104][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.613186][ T6379] nbd0: partition table beyond EOD, truncated [ 249.635145][T14005] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3131'. [ 249.644344][T14005] block nbd0: backend image doesn't match with [ 250.349105][T14039] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3143'. [ 250.379599][T14039] block nbd0: backend image doesn't match with [ 250.769598][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 250.933654][T14067] tipc: Enabling of bearer rejected, failed to enable media [ 251.034064][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3155'. [ 251.213728][T14060] netlink: 'syz.1.3153': attribute type 5 has an invalid length. [ 251.736771][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3163'. [ 251.898553][T14108] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3166'. [ 251.947683][T14110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3167'. [ 251.972313][ T6379] ldm_validate_partition_table(): Disk read failed. [ 251.989743][T14112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3168'. [ 251.998839][ T6379] Dev nbd0: unable to read RDB block 0 [ 251.998969][ T6379] nbd0: unable to read partition table [ 251.999175][ T6379] nbd0: partition table beyond EOD, truncated [ 252.402332][T14129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3174'. [ 252.810918][T14158] netlink: 'syz.4.3183': attribute type 7 has an invalid length. [ 252.846077][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3186'. [ 252.935883][T14166] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 253.000133][T14170] team0: Caught tx_queue_len zero misconfig [ 253.927161][T14202] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 254.167112][T14220] block nbd0: backend image doesn't match with [ 254.887413][T14273] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 255.018404][T14277] __nla_validate_parse: 9 callbacks suppressed [ 255.018432][T14277] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3227'. [ 255.069698][T14277] nbd: must specify a device to reconfigure [ 255.961110][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.011211][T14285] netlink: 'syz.2.3230': attribute type 64 has an invalid length. [ 257.034525][T14285] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 257.076689][T14289] netlink: 'syz.4.3231': attribute type 2 has an invalid length. [ 257.166685][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 257.241120][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 257.346756][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3235'. [ 257.398878][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 257.471650][ T4493] block nbd16: Receive control failed (result -107) [ 257.708542][T14331] netlink: 'syz.3.3249': attribute type 2 has an invalid length. [ 257.725614][T14331] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3249'. [ 257.777552][T14331] nbd0: detected capacity change from 1 to 0 [ 257.941136][T14351] netlink: 'syz.1.3256': attribute type 2 has an invalid length. [ 257.970044][T14350] netlink: 'syz.1.3256': attribute type 2 has an invalid length. [ 258.024869][T14353] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 258.142052][T14353] bond1: entered promiscuous mode [ 258.158910][T14366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.209939][T14363] bond0: (slave bond_slave_0): Releasing backup interface [ 258.268994][T14363] bond1: (slave bond_slave_0): making interface the new active one [ 258.290875][T14363] bond_slave_0: entered promiscuous mode [ 258.298590][T14363] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.312491][T14377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3267'. [ 258.336650][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 258.345734][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 258.397002][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3268'. [ 258.556602][T14391] netlink: 'syz.4.3273': attribute type 3 has an invalid length. [ 258.578087][T14385] syzkaller0: entered allmulticast mode [ 260.822968][T14411] __nla_validate_parse: 1 callbacks suppressed [ 260.822986][T14411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3278'. [ 260.839418][T14415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3280'. [ 260.920019][T14417] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 260.962442][T14417] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.3281'. [ 260.993666][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 261.025315][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3281'. [ 261.093132][T14417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3281'. [ 261.106659][T14417] unsupported nlmsg_type 40 [ 261.320984][T14439] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.427439][T14447] x_tables: duplicate underflow at hook 2 [ 261.566545][T14462] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.570375][T14444] syzkaller0: entered allmulticast mode [ 261.588457][T14448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3295'. [ 263.442772][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 263.570174][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 263.634989][ T4493] block nbd17: Receive control failed (result -107) [ 263.865024][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 263.955360][T14534] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 263.995564][T14534] netlink: 'syz.1.3325': attribute type 4 has an invalid length. [ 264.112326][T14548] FAULT_INJECTION: forcing a failure. [ 264.112326][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.137017][T14550] netlink: 'syz.1.3332': attribute type 1 has an invalid length. [ 264.160243][T14548] CPU: 1 PID: 14548 Comm: syz.2.3329 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 264.170084][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.180154][T14548] Call Trace: [ 264.183451][T14548] [ 264.186402][T14548] dump_stack_lvl+0x241/0x360 [ 264.191095][T14548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.196309][T14548] ? __pfx__printk+0x10/0x10 [ 264.200921][T14548] ? snprintf+0xda/0x120 [ 264.202169][T14550] bond2: entered promiscuous mode [ 264.205165][T14548] should_fail_ex+0x3b0/0x4e0 [ 264.214891][T14548] _copy_to_user+0x2f/0xb0 [ 264.219325][T14548] simple_read_from_buffer+0xca/0x150 [ 264.224722][T14548] proc_fail_nth_read+0x1e9/0x250 [ 264.229768][T14548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.235335][T14548] ? rw_verify_area+0x520/0x6b0 [ 264.240203][T14548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.245769][T14548] vfs_read+0x204/0xbc0 [ 264.249943][T14548] ? __pfx_lock_release+0x10/0x10 [ 264.254988][T14548] ? __pfx_vfs_read+0x10/0x10 [ 264.259688][T14548] ? __fget_files+0x29/0x470 [ 264.264295][T14548] ? __fget_files+0x3f6/0x470 [ 264.268991][T14548] ksys_read+0x1a0/0x2c0 [ 264.273237][T14548] ? __pfx_ksys_read+0x10/0x10 [ 264.277997][T14548] ? do_syscall_64+0x100/0x230 [ 264.282754][T14548] ? do_syscall_64+0xb6/0x230 [ 264.287423][T14548] do_syscall_64+0xf3/0x230 [ 264.291916][T14548] ? clear_bhb_loop+0x35/0x90 [ 264.296594][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.302478][T14548] RIP: 0033:0x7fe32ab7457c [ 264.306884][T14548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 264.326492][T14548] RSP: 002b:00007fe32a5ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.334907][T14548] RAX: ffffffffffffffda RBX: 00007fe32ad03f60 RCX: 00007fe32ab7457c [ 264.342873][T14548] RDX: 000000000000000f RSI: 00007fe32a5ff0b0 RDI: 0000000000000006 [ 264.350834][T14548] RBP: 00007fe32a5ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 264.358795][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.366758][T14548] R13: 000000000000000b R14: 00007fe32ad03f60 R15: 00007ffd06877688 [ 264.374731][T14548] [ 264.847718][T14589] netlink: 'syz.3.3346': attribute type 3 has an invalid length. [ 265.298398][ T4493] block nbd18: Receive control failed (result -107) [ 265.419022][T14628] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 265.427074][T14628] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 265.434920][T14628] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 265.443021][T14628] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 265.459708][T14628] vlan0: entered allmulticast mode [ 265.465045][T14628] macvlan0: entered allmulticast mode [ 265.470691][T14628] syz_tun: entered allmulticast mode [ 265.488830][T14628] macvlan0: left allmulticast mode [ 265.494181][T14628] syz_tun: left allmulticast mode [ 265.548759][T14632] netlink: 'syz.0.3363': attribute type 1 has an invalid length. [ 265.828102][T14652] __nla_validate_parse: 11 callbacks suppressed [ 265.828120][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3372'. [ 265.915060][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3372'. [ 265.942211][T14658] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 265.971824][ T4493] block nbd19: Receive control failed (result -107) [ 266.174703][T14670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3380'. [ 266.215092][T14672] netlink: 'syz.3.3378': attribute type 3 has an invalid length. [ 266.249493][T14677] sctp: [Deprecated]: syz.0.3377 (pid 14677) Use of int in maxseg socket option. [ 266.249493][T14677] Use struct sctp_assoc_value instead [ 266.510198][T14696] vlan3: entered promiscuous mode [ 266.515275][T14696] ip6gretap0: entered promiscuous mode [ 266.545667][T14703] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3388'. [ 266.557657][T14696] ip6gretap0: left promiscuous mode [ 266.778024][T14722] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3396'. [ 266.789737][T14722] block nbd0: backend image doesn't match with [ 267.034489][T14724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.075962][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 267.100763][T14733] bond3: entered promiscuous mode [ 267.150467][T14749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3403'. [ 267.290575][T14752] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3405'. [ 267.721271][T14775] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3413'. [ 267.887880][T14788] netlink: 468 bytes leftover after parsing attributes in process `syz.0.3420'. [ 268.402338][T14819] tunl0: entered promiscuous mode [ 268.549437][ T4493] block nbd20: Receive control failed (result -107) [ 268.669055][T14831] xt_NFQUEUE: number of total queues is 0 [ 269.238799][T14869] block nbd0: backend image doesn't match with [ 269.702889][T14889] debugfs: Directory 'netdev:nicvf0' with parent 'phy8' already present! [ 270.027682][T14913] Bluetooth: hci3: unsupported parameter 64512 [ 270.045236][T14913] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 270.327073][T14934] validate_nla: 3 callbacks suppressed [ 270.327092][T14934] netlink: 'syz.4.3473': attribute type 2 has an invalid length. [ 270.560181][T14949] debugfs: Directory 'netdev:nicvf0' with parent 'phy15' already present! [ 271.013554][T14981] __nla_validate_parse: 14 callbacks suppressed [ 271.013572][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3492'. [ 271.103974][T14986] team0: entered promiscuous mode [ 271.132068][T14986] team_slave_0: entered promiscuous mode [ 271.145927][T14986] team_slave_1: entered promiscuous mode [ 271.170936][T14984] team0: left promiscuous mode [ 271.193647][T14984] team_slave_0: left promiscuous mode [ 271.199965][T14984] team_slave_1: left promiscuous mode [ 271.382974][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 271.713111][T15018] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3506'. [ 271.742972][T15020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3507'. [ 271.769670][T15022] netlink: 'syz.0.3508': attribute type 1 has an invalid length. [ 271.789585][T15022] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3508'. [ 271.810267][T15022] netlink: 'syz.0.3508': attribute type 1 has an invalid length. [ 271.867794][T15026] netlink: 'syz.1.3509': attribute type 21 has an invalid length. [ 271.906300][T15032] netlink: 'syz.3.3511': attribute type 3 has an invalid length. [ 271.917826][T15026] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3509'. [ 271.957927][T15026] netlink: 'syz.1.3509': attribute type 4 has an invalid length. [ 271.982234][T15026] netlink: 'syz.1.3509': attribute type 3 has an invalid length. [ 272.003252][T15026] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3509'. [ 272.080960][T15036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.091914][T15036] team0: Port device bond0 added [ 273.241904][T15125] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3544'. [ 273.288932][T15125] block nbd0: backend image doesn't match with [ 273.367144][T15138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.453300][T15144] netlink: 468 bytes leftover after parsing attributes in process `syz.4.3550'. [ 273.489349][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 273.859108][T15170] block nbd0: backend image doesn't match with [ 274.128478][T15186] nbd0: detected capacity change from 0 to 52 [ 274.145228][T15186] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.155534][ T6379] block nbd0: Dead connection, failed to find a fallback [ 274.200856][T15188] xt_NFQUEUE: number of total queues is 0 [ 274.472044][T15198] netlink: 'syz.4.3574': attribute type 2 has an invalid length. [ 274.553680][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.569994][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.584495][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.599718][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.609234][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.617511][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.824231][T15203] chnl_net:caif_netlink_parms(): no params data found [ 274.895699][T15203] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.903449][T15203] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.911298][T15203] bridge_slave_0: entered allmulticast mode [ 274.919275][T15203] bridge_slave_0: entered promiscuous mode [ 274.929207][T15203] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.936456][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.943568][T15203] bridge_slave_1: entered allmulticast mode [ 274.951006][T15203] bridge_slave_1: entered promiscuous mode [ 274.985586][T15203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.998518][T15203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.035656][T15203] team0: Port device team_slave_0 added [ 275.045348][T15203] team0: Port device team_slave_1 added [ 275.082005][T15203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.089561][T15203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.116041][T15203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.130118][T15203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.137265][T15203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.165713][T15203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.215014][T15203] hsr_slave_0: entered promiscuous mode [ 275.221509][T15203] hsr_slave_1: entered promiscuous mode [ 275.228422][T15203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.237594][T15203] Cannot create hsr debugfs directory [ 275.381136][T15203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.496741][T15203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.622077][T15203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.729161][T15203] team0: Port device ÿÿÿÿ removed [ 275.737791][T15203] netdevsim netdevsim1 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.686809][ T5111] Bluetooth: hci3: command tx timeout [ 278.756992][ T5111] Bluetooth: hci3: command tx timeout [ 280.846284][ T5111] Bluetooth: hci3: command tx timeout [ 282.926361][ T5111] Bluetooth: hci3: command tx timeout [ 284.792768][ T4493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.804429][ T5106] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.814571][ T5106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.820396][ T4493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.822654][ T5106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.837766][ T4493] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.837984][ T5106] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.852632][ T4493] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.853051][ T5106] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 284.867626][ T4493] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.874997][ T4493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.876686][ T5106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.173757][T15226] chnl_net:caif_netlink_parms(): no params data found [ 285.239309][T15228] chnl_net:caif_netlink_parms(): no params data found [ 285.307417][T15226] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.314538][T15226] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.322781][T15226] bridge_slave_0: entered allmulticast mode [ 285.332043][T15226] bridge_slave_0: entered promiscuous mode [ 285.344127][T15226] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.351564][T15226] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.358795][T15226] bridge_slave_1: entered allmulticast mode [ 285.365451][T15226] bridge_slave_1: entered promiscuous mode [ 285.423754][T15226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.438408][T15226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.494589][T15228] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.502026][T15228] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.510300][T15228] bridge_slave_0: entered allmulticast mode [ 285.517733][T15228] bridge_slave_0: entered promiscuous mode [ 285.529179][T15228] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.536600][T15228] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.543766][T15228] bridge_slave_1: entered allmulticast mode [ 285.552892][T15228] bridge_slave_1: entered promiscuous mode [ 285.576499][T15226] team0: Port device team_slave_0 added [ 285.689536][T15226] team0: Port device team_slave_1 added [ 285.790831][T15228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.809925][T15228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.848003][T15226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.854968][T15226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.909822][T15226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.937308][T15226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.944265][T15226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.985707][ T5106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.999393][ T5111] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 286.002930][ T5106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.014746][T15226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.015896][ T5111] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 286.025584][ T5106] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.049140][ T5111] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.056434][ T5106] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 286.064228][ T5111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.067611][ T5106] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 286.071819][ T5111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.079190][ T5106] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 286.092861][ T5106] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.169728][T15228] team0: Port device team_slave_0 added [ 286.179439][T15228] team0: Port device team_slave_1 added [ 286.257054][T15228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.264031][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.290036][T15228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.303446][T15228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.311237][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.339300][T15228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.355715][T15226] hsr_slave_0: entered promiscuous mode [ 286.362712][T15226] hsr_slave_1: entered promiscuous mode [ 286.369040][T15226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.376824][T15226] Cannot create hsr debugfs directory [ 286.492064][T15228] hsr_slave_0: entered promiscuous mode [ 286.499671][T15228] hsr_slave_1: entered promiscuous mode [ 286.505710][T15228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.514210][T15228] Cannot create hsr debugfs directory [ 286.795665][T15228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.876920][T15228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.917151][ T4493] Bluetooth: hci5: command tx timeout [ 286.917178][ T5111] Bluetooth: hci6: command tx timeout [ 286.975064][T15228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.066011][T15228] bond0: (slave ): Releasing backup interface [ 287.076792][T15228] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.095090][T15244] chnl_net:caif_netlink_parms(): no params data found [ 287.179773][T15245] chnl_net:caif_netlink_parms(): no params data found [ 287.243527][T15244] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.251970][T15244] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.259411][T15244] bridge_slave_0: entered allmulticast mode [ 287.271425][T15244] bridge_slave_0: entered promiscuous mode [ 287.295182][T15244] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.302919][T15244] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.310522][T15244] bridge_slave_1: entered allmulticast mode [ 287.318095][T15244] bridge_slave_1: entered promiscuous mode [ 287.387451][T15244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.400782][T15244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.487922][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.495096][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.505189][T15245] bridge_slave_0: entered allmulticast mode [ 287.512659][T15245] bridge_slave_0: entered promiscuous mode [ 287.527575][T15244] team0: Port device team_slave_0 added [ 287.562095][T15226] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.584714][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.592113][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.599321][T15245] bridge_slave_1: entered allmulticast mode [ 287.606030][T15245] bridge_slave_1: entered promiscuous mode [ 287.628580][T15244] team0: Port device team_slave_1 added [ 287.664990][T15245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.700840][T15226] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.731973][T15244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.739321][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.770811][T15244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.787254][T15245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.833068][T15226] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.848726][T15244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.855678][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.885440][T15244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.920591][T15245] team0: Port device team_slave_0 added [ 287.947844][T15226] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.980346][T15245] team0: Port device team_slave_1 added [ 288.022054][T15244] hsr_slave_0: entered promiscuous mode [ 288.029509][T15244] hsr_slave_1: entered promiscuous mode [ 288.035532][T15244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.043968][T15244] Cannot create hsr debugfs directory [ 288.064999][T15245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.072063][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.100742][T15245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.127097][ T5111] Bluetooth: hci7: command tx timeout [ 288.147279][T15245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.154233][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.181214][T15245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.196515][ T5111] Bluetooth: hci8: command tx timeout [ 288.283599][T15245] hsr_slave_0: entered promiscuous mode [ 288.293239][T15245] hsr_slave_1: entered promiscuous mode [ 288.299854][T15245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.307739][T15245] Cannot create hsr debugfs directory [ 288.515102][T15244] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.593229][T15244] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.668288][T15244] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.742073][T15244] bond0: (slave ÿÿÿÿ): Releasing backup interface [ 288.752243][T15244] netdevsim netdevsim3 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.857772][T15245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.939764][T15245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.996639][ T5111] Bluetooth: hci5: command tx timeout [ 288.996647][ T4493] Bluetooth: hci6: command tx timeout [ 289.017451][T15245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.088445][T15245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.206226][ T5111] Bluetooth: hci7: command tx timeout [ 290.286238][ T5111] Bluetooth: hci8: command tx timeout [ 291.076262][ T5111] Bluetooth: hci6: command tx timeout [ 291.078877][ T4493] Bluetooth: hci5: command tx timeout [ 292.276561][ T4493] Bluetooth: hci7: command tx timeout [ 292.366247][ T4493] Bluetooth: hci8: command tx timeout [ 293.156604][ T4493] Bluetooth: hci5: command tx timeout [ 293.157929][ T5111] Bluetooth: hci6: command tx timeout [ 294.356809][ T5111] Bluetooth: hci7: command tx timeout [ 294.436699][ T4493] Bluetooth: hci8: command tx timeout [ 304.116496][ T5111] Bluetooth: hci1: command 0x0405 tx timeout [ 317.399220][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.156664][ T4549] udevd[4549]: worker [6379] /devices/virtual/block/nbd0 is taking a long time [ 334.234138][ T5111] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 334.246009][ T5111] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 334.256309][ T5111] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 334.264377][ T5111] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 334.272903][ T5111] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 334.280655][ T5111] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 334.448097][T15261] chnl_net:caif_netlink_parms(): no params data found [ 334.526960][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.534109][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.541419][T15261] bridge_slave_0: entered allmulticast mode [ 334.549351][T15261] bridge_slave_0: entered promiscuous mode [ 334.557424][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.564554][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.572223][T15261] bridge_slave_1: entered allmulticast mode [ 334.581879][T15261] bridge_slave_1: entered promiscuous mode [ 334.622572][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.633906][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.673966][T15261] team0: Port device team_slave_0 added [ 334.683116][T15261] team0: Port device team_slave_1 added [ 334.714601][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.722136][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.748075][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.760892][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.767942][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.795034][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.843033][T15261] hsr_slave_0: entered promiscuous mode [ 334.850903][T15261] hsr_slave_1: entered promiscuous mode [ 334.857356][T15261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.864908][T15261] Cannot create hsr debugfs directory [ 336.356614][ T4493] Bluetooth: hci9: command tx timeout [ 338.436342][ T4493] Bluetooth: hci9: command tx timeout [ 340.516339][ T4493] Bluetooth: hci9: command tx timeout [ 342.596342][ T4493] Bluetooth: hci9: command tx timeout [ 345.366608][ T5111] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 345.376024][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 345.385735][ T5111] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 345.395616][ T5111] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 345.401540][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 345.404901][ T5111] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 345.411189][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 345.418145][ T5111] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 345.424904][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 345.433130][ T5111] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 345.439801][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.446548][ T5111] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 345.782263][T15271] chnl_net:caif_netlink_parms(): no params data found [ 345.807138][T15272] chnl_net:caif_netlink_parms(): no params data found [ 345.914664][T15271] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.922269][T15271] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.930459][T15271] bridge_slave_0: entered allmulticast mode [ 345.938235][T15271] bridge_slave_0: entered promiscuous mode [ 345.959727][T15271] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.967477][T15271] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.974688][T15271] bridge_slave_1: entered allmulticast mode [ 345.982162][T15271] bridge_slave_1: entered promiscuous mode [ 346.059103][T15271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.072052][T15271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.081973][T15272] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.089565][T15272] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.097567][T15272] bridge_slave_0: entered allmulticast mode [ 346.105230][T15272] bridge_slave_0: entered promiscuous mode [ 346.165038][T15272] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.186704][T15272] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.193949][T15272] bridge_slave_1: entered allmulticast mode [ 346.215111][T15272] bridge_slave_1: entered promiscuous mode [ 346.265582][T15271] team0: Port device team_slave_0 added [ 346.322643][T15272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.350685][T15271] team0: Port device team_slave_1 added [ 346.421390][T15272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.444806][ T4493] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 346.460551][ T4493] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 346.486471][ T4493] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 346.497489][ T4493] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 346.516861][ T4493] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 346.524304][ T4493] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 346.548573][T15271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.569944][T15271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.598180][ T4493] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 346.608249][ T4493] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 346.614401][T15271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.616501][ T4493] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 346.633274][T15272] team0: Port device team_slave_0 added [ 346.634790][ T4493] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 346.650000][T15272] team0: Port device team_slave_1 added [ 346.658618][ T4493] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 346.659770][T15271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.673254][T15271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.673300][ T4493] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 346.707108][T15271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.827958][T15272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.835677][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.865522][T15272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.879267][T15272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.886330][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.912815][T15272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.990275][T15271] hsr_slave_0: entered promiscuous mode [ 346.997189][T15271] hsr_slave_1: entered promiscuous mode [ 347.004073][T15271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.011787][T15271] Cannot create hsr debugfs directory [ 347.126733][T15272] hsr_slave_0: entered promiscuous mode [ 347.133464][T15272] hsr_slave_1: entered promiscuous mode [ 347.140278][T15272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.147975][T15272] Cannot create hsr debugfs directory [ 347.477107][ T5106] Bluetooth: hci10: command tx timeout [ 347.486627][ T5106] Bluetooth: hci11: command tx timeout [ 347.534341][T15289] chnl_net:caif_netlink_parms(): no params data found [ 347.610243][T15291] chnl_net:caif_netlink_parms(): no params data found [ 347.788434][T15289] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.795611][T15289] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.804360][T15289] bridge_slave_0: entered allmulticast mode [ 347.811897][T15289] bridge_slave_0: entered promiscuous mode [ 347.852018][T15289] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.859829][T15289] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.867138][T15289] bridge_slave_1: entered allmulticast mode [ 347.874513][T15289] bridge_slave_1: entered promiscuous mode [ 347.882602][T15291] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.891983][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.900632][T15291] bridge_slave_0: entered allmulticast mode [ 347.908198][T15291] bridge_slave_0: entered promiscuous mode [ 347.932280][T15291] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.939856][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.947312][T15291] bridge_slave_1: entered allmulticast mode [ 347.958269][T15291] bridge_slave_1: entered promiscuous mode [ 348.021251][T15289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.033699][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.051472][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.063653][T15289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.169601][T15291] team0: Port device team_slave_0 added [ 348.181691][T15289] team0: Port device team_slave_0 added [ 348.197163][T15289] team0: Port device team_slave_1 added [ 348.205025][T15291] team0: Port device team_slave_1 added [ 348.257110][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.264071][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.291237][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.320882][T15289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.328281][T15289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.354410][T15289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.388244][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.395206][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.423838][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.436022][T15289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.443422][T15289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.469799][T15289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.561046][T15289] hsr_slave_0: entered promiscuous mode [ 348.567836][T15289] hsr_slave_1: entered promiscuous mode [ 348.573899][T15289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.581643][T15289] Cannot create hsr debugfs directory [ 348.596835][ T5106] Bluetooth: hci12: command tx timeout [ 348.624386][T15291] hsr_slave_0: entered promiscuous mode [ 348.631452][T15291] hsr_slave_1: entered promiscuous mode [ 348.638128][T15291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.645684][T15291] Cannot create hsr debugfs directory [ 348.756692][ T5106] Bluetooth: hci13: command tx timeout [ 349.556745][ T4493] Bluetooth: hci10: command tx timeout [ 349.562336][ T5106] Bluetooth: hci11: command tx timeout [ 350.676858][ T5106] Bluetooth: hci12: command tx timeout [ 350.836326][ T5106] Bluetooth: hci13: command tx timeout [ 351.636495][ T5106] Bluetooth: hci11: command tx timeout [ 351.636506][ T4493] Bluetooth: hci10: command tx timeout [ 352.756488][ T4493] Bluetooth: hci12: command tx timeout [ 352.916649][ T4493] Bluetooth: hci13: command tx timeout [ 353.717301][ T5106] Bluetooth: hci11: command tx timeout [ 353.717312][ T5111] Bluetooth: hci10: command tx timeout [ 354.836865][ T5106] Bluetooth: hci12: command tx timeout [ 354.996520][ T5106] Bluetooth: hci13: command tx timeout [ 355.316440][ T5106] Bluetooth: hci4: command 0x0406 tx timeout [ 378.844232][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.838326][ T5106] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 394.848396][ T5106] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 394.857473][ T5106] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 394.866651][ T5106] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 394.874530][ T5106] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 394.882137][ T5106] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 395.080180][T15312] chnl_net:caif_netlink_parms(): no params data found [ 395.162058][T15312] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.169433][T15312] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.177243][T15312] bridge_slave_0: entered allmulticast mode [ 395.184621][T15312] bridge_slave_0: entered promiscuous mode [ 395.195475][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.203610][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.210927][T15312] bridge_slave_1: entered allmulticast mode [ 395.218456][T15312] bridge_slave_1: entered promiscuous mode [ 395.254770][T15312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.268041][T15312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.311410][T15312] team0: Port device team_slave_0 added [ 395.320592][T15312] team0: Port device team_slave_1 added [ 395.353564][T15312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.360674][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.386966][T15312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.401912][T15312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.409013][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.435178][T15312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.487466][T15312] hsr_slave_0: entered promiscuous mode [ 395.494156][T15312] hsr_slave_1: entered promiscuous mode [ 395.502571][T15312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.510234][T15312] Cannot create hsr debugfs directory [ 396.916698][ T5106] Bluetooth: hci14: command tx timeout [ 399.006339][ T5106] Bluetooth: hci14: command tx timeout [ 401.086628][ T4493] Bluetooth: hci14: command tx timeout [ 401.399537][ T4493] Bluetooth: hci3: command 0x0406 tx timeout [ 403.156892][ T5106] Bluetooth: hci14: command tx timeout [ 406.023319][ T5106] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 406.033147][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 406.043372][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 406.053480][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 406.061293][T15326] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 406.065281][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 406.077886][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 406.085777][T15326] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 406.089158][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 406.102060][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 406.109470][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 406.109631][T15326] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 406.449298][T15322] chnl_net:caif_netlink_parms(): no params data found [ 406.549544][T15323] chnl_net:caif_netlink_parms(): no params data found [ 406.616605][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.623848][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.631714][T15322] bridge_slave_0: entered allmulticast mode [ 406.639279][T15322] bridge_slave_0: entered promiscuous mode [ 406.671773][T15322] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.679705][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.687001][T15322] bridge_slave_1: entered allmulticast mode [ 406.693806][T15322] bridge_slave_1: entered promiscuous mode [ 406.848591][T15323] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.855812][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.876387][T15323] bridge_slave_0: entered allmulticast mode [ 406.883739][T15323] bridge_slave_0: entered promiscuous mode [ 406.922457][T15322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.949886][T15322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.003364][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.016304][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.023547][T15323] bridge_slave_1: entered allmulticast mode [ 407.047857][T15323] bridge_slave_1: entered promiscuous mode [ 407.093399][ T4493] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 407.103294][ T4493] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 407.127210][ T4493] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 407.137184][ T4493] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 407.144901][ T4493] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 407.152572][ T4493] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 407.181096][T15326] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 407.190567][T15326] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 407.198627][T15322] team0: Port device team_slave_0 added [ 407.198955][T15326] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 407.212928][T15326] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 407.221030][T15326] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 407.228828][T15326] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 407.241442][T15323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.272178][T15322] team0: Port device team_slave_1 added [ 407.320470][T15323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.355696][T15322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.363430][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.391629][T15322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.437448][T15323] team0: Port device team_slave_0 added [ 407.447609][T15322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.454569][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.483473][T15322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.513696][T15323] team0: Port device team_slave_1 added [ 407.573444][T15323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.580668][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.608936][T15323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.639580][T15323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.646737][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.672724][T15323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.748148][T15322] hsr_slave_0: entered promiscuous mode [ 407.754909][T15322] hsr_slave_1: entered promiscuous mode [ 407.762295][T15322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.770009][T15322] Cannot create hsr debugfs directory [ 407.819498][T15323] hsr_slave_0: entered promiscuous mode [ 407.826386][T15323] hsr_slave_1: entered promiscuous mode [ 407.832814][T15323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.840815][T15323] Cannot create hsr debugfs directory [ 408.197008][T15326] Bluetooth: hci16: command tx timeout [ 408.197749][T15341] chnl_net:caif_netlink_parms(): no params data found [ 408.204510][T15326] Bluetooth: hci15: command tx timeout [ 408.453782][T15343] chnl_net:caif_netlink_parms(): no params data found [ 408.465814][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.474481][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.484477][T15341] bridge_slave_0: entered allmulticast mode [ 408.493001][T15341] bridge_slave_0: entered promiscuous mode [ 408.509808][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.519518][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.526894][T15341] bridge_slave_1: entered allmulticast mode [ 408.534274][T15341] bridge_slave_1: entered promiscuous mode [ 408.663641][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.714606][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.769620][T15341] team0: Port device team_slave_0 added [ 408.798619][T15343] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.805818][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.815407][T15343] bridge_slave_0: entered allmulticast mode [ 408.823015][T15343] bridge_slave_0: entered promiscuous mode [ 408.838800][T15341] team0: Port device team_slave_1 added [ 408.852769][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.860164][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.868951][T15343] bridge_slave_1: entered allmulticast mode [ 408.875699][T15343] bridge_slave_1: entered promiscuous mode [ 408.954531][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.970803][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.997436][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.041913][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.052389][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.059647][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.085989][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.122193][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.187502][T15341] hsr_slave_0: entered promiscuous mode [ 409.195052][T15341] hsr_slave_1: entered promiscuous mode [ 409.201612][T15341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.209253][T15341] Cannot create hsr debugfs directory [ 409.233363][T15343] team0: Port device team_slave_0 added [ 409.243315][T15343] team0: Port device team_slave_1 added [ 409.249032][T15326] Bluetooth: hci17: command tx timeout [ 409.316685][T15326] Bluetooth: hci18: command tx timeout [ 409.334361][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.354647][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.381322][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.394349][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.401532][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.429795][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.528210][T15343] hsr_slave_0: entered promiscuous mode [ 409.537693][T15343] hsr_slave_1: entered promiscuous mode [ 409.544154][T15343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.552584][T15343] Cannot create hsr debugfs directory [ 410.276309][T15357] Bluetooth: hci15: command tx timeout [ 410.281837][T15357] Bluetooth: hci16: command tx timeout [ 411.316265][T15357] Bluetooth: hci17: command tx timeout [ 411.396724][T15357] Bluetooth: hci18: command tx timeout [ 411.644270][T15357] Bluetooth: hci8: command 0x0406 tx timeout [ 411.647003][ T5111] Bluetooth: hci6: command 0x0406 tx timeout [ 411.652202][ T5106] Bluetooth: hci5: command 0x0406 tx timeout [ 411.656477][ T5111] Bluetooth: hci7: command 0x0406 tx timeout [ 412.356568][T15359] Bluetooth: hci15: command tx timeout [ 412.366332][T15359] Bluetooth: hci16: command tx timeout [ 413.396414][T15359] Bluetooth: hci17: command tx timeout [ 413.477109][T15359] Bluetooth: hci18: command tx timeout [ 414.436510][T15359] Bluetooth: hci16: command tx timeout [ 414.436636][T15358] Bluetooth: hci15: command tx timeout [ 415.476268][T15358] Bluetooth: hci17: command tx timeout [ 415.556888][T15358] Bluetooth: hci18: command tx timeout [ 421.716941][ T30] INFO: task udevd:6379 blocked for more than 143 seconds. [ 421.724290][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 421.731733][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.740575][ T30] task:udevd state:D stack:20176 pid:6379 tgid:6379 ppid:4549 flags:0x00004002 [ 421.751153][ T30] Call Trace: [ 421.754437][ T30] [ 421.757460][ T30] __schedule+0x1800/0x4a60 [ 421.762006][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.767287][ T30] ? __blk_flush_plug+0x449/0x500 [ 421.776378][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.781436][ T30] ? __asan_memset+0x23/0x50 [ 421.796597][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 421.802435][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.826106][ T30] ? schedule+0x90/0x320 [ 421.830387][ T30] schedule+0x14b/0x320 [ 421.834560][ T30] schedule_timeout+0x1be/0x310 [ 421.863254][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 421.869078][ T30] ? __pfx_process_timeout+0x10/0x10 [ 421.874389][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 421.882596][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 421.887845][ T30] ? validate_chain+0x11e/0x5900 [ 421.892976][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 421.898272][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 421.903333][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 421.909530][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 421.915110][ T30] ? sbitmap_get+0x289/0x3f0 [ 421.921762][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 421.927859][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 421.933691][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 421.940228][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 421.947069][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 421.952367][ T30] ? __pfx___might_resched+0x10/0x10 [ 421.957946][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 421.963931][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 421.969304][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 421.974431][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 421.979871][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 421.985442][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 421.991683][ T30] ? blk_mq_submit_bio+0x127e/0x22d0 [ 421.997076][ T30] __blk_flush_plug+0x420/0x500 [ 422.001944][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 422.007494][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 422.012620][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 422.017960][ T30] __submit_bio+0x422/0x560 [ 422.024107][ T30] ? __pfx___submit_bio+0x10/0x10 [ 422.029248][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 422.035489][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 422.042579][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 422.048440][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 422.054449][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.059886][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 422.066195][ T30] block_read_full_folio+0x93b/0xcd0 [ 422.071505][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 422.076992][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 422.082811][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 422.087750][ T30] ? folio_add_lru+0x357/0xd70 [ 422.092518][ T30] ? folio_add_lru+0x58f/0xd70 [ 422.097671][ T30] filemap_read_folio+0x1a0/0x790 [ 422.102714][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 422.108289][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 422.113935][ T30] ? __filemap_get_folio+0x984/0xc10 [ 422.119748][ T30] do_read_cache_folio+0x134/0x820 [ 422.127471][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 422.132964][ T30] read_part_sector+0xb3/0x330 [ 422.137877][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 422.142834][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 422.147725][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 422.153296][ T30] ? snprintf+0xda/0x120 [ 422.157726][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 422.163373][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 422.168100][ T30] ? vsnprintf+0x184/0x1da0 [ 422.172612][ T30] ? __pfx_snprintf+0x10/0x10 [ 422.177440][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 422.182230][ T30] bdev_disk_changed+0x72c/0x13d0 [ 422.187381][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 422.192866][ T30] blkdev_get_whole+0x2d2/0x450 [ 422.198091][ T30] bdev_open+0x2d4/0xc60 [ 422.202363][ T30] blkdev_open+0x3e8/0x570 [ 422.206873][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 422.211831][ T30] do_dentry_open+0x970/0x1440 [ 422.216763][ T30] vfs_open+0x3e/0x330 [ 422.220855][ T30] path_openat+0x2b3e/0x3470 [ 422.225459][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 422.232421][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 422.237825][ T30] ? __pfx_path_openat+0x10/0x10 [ 422.242802][ T30] do_filp_open+0x235/0x490 [ 422.247405][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 422.252468][ T30] ? _raw_spin_unlock+0x28/0x50 [ 422.257485][ T30] ? alloc_fd+0x5a1/0x640 [ 422.261839][ T30] do_sys_openat2+0x13e/0x1d0 [ 422.266765][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.271992][ T30] __x64_sys_openat+0x247/0x2a0 [ 422.277458][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.282851][ T30] ? do_syscall_64+0x100/0x230 [ 422.287696][ T30] ? do_syscall_64+0xb6/0x230 [ 422.292385][ T30] do_syscall_64+0xf3/0x230 [ 422.297009][ T30] ? clear_bhb_loop+0x35/0x90 [ 422.301706][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.307699][ T30] RIP: 0033:0x7f35fe5169a4 [ 422.312120][ T30] RSP: 002b:00007fff700264b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.320667][ T30] RAX: ffffffffffffffda RBX: 000055a0b7d78550 RCX: 00007f35fe5169a4 [ 422.328775][ T30] RDX: 00000000000a0800 RSI: 000055a0b7d6d4a0 RDI: 00000000ffffff9c [ 422.338707][ T30] RBP: 000055a0b7d6d4a0 R08: 0000000000000001 R09: 7fffffffffffffff [ 422.346798][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 422.354769][ T30] R13: 000055a0b7d64a70 R14: 0000000000000001 R15: 000055a0b7d53910 [ 422.363399][ T30] [ 422.366518][ T30] INFO: task syz.4.3574:15198 blocked for more than 144 seconds. [ 422.374327][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 422.381784][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.390536][ T30] task:syz.4.3574 state:D stack:25536 pid:15198 tgid:15195 ppid:13209 flags:0x00004004 [ 422.400870][ T30] Call Trace: [ 422.404153][ T30] [ 422.407166][ T30] __schedule+0x1800/0x4a60 [ 422.411708][ T30] ? __pfx___schedule+0x10/0x10 [ 422.416700][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.421738][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 422.427742][ T30] ? schedule+0x90/0x320 [ 422.433335][ T30] schedule+0x14b/0x320 [ 422.437776][ T30] blk_mq_freeze_queue_wait+0xff/0x190 [ 422.443261][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 422.449536][ T30] ? percpu_ref_put+0x1f/0x250 [ 422.454315][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 422.460532][ T30] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 422.466525][ T30] nbd_set_size+0xe2/0x7b0 [ 422.470958][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 422.475979][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 422.481643][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.487083][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 422.492998][ T30] ? rcu_is_watching+0x15/0xb0 [ 422.497907][ T30] ? nla_memcpy+0x5d/0xc0 [ 422.502255][ T30] ? __asan_memcpy+0x40/0x70 [ 422.506962][ T30] ? nla_memcpy+0x8b/0xc0 [ 422.511308][ T30] nbd_genl_size_set+0x332/0x410 [ 422.516400][ T30] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 422.522048][ T30] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 422.528131][ T30] ? security_capable+0x90/0xb0 [ 422.533002][ T30] ? nla_strcmp+0xd5/0x110 [ 422.539167][ T30] nbd_genl_reconfigure+0x4b5/0x1c40 [ 422.544505][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 422.550296][ T30] ? __nla_parse+0x40/0x60 [ 422.554740][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 422.561313][ T30] genl_rcv_msg+0xb14/0xec0 [ 422.565824][ T30] ? mark_lock+0x9a/0x350 [ 422.570274][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.575350][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 422.580907][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 422.587227][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.592540][ T30] netlink_rcv_skb+0x1e3/0x430 [ 422.597453][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.602497][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.607971][ T30] genl_rcv+0x28/0x40 [ 422.611964][ T30] netlink_unicast+0x7f0/0x990 [ 422.617162][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 422.622453][ T30] ? __virt_addr_valid+0x183/0x530 [ 422.627625][ T30] ? __check_object_size+0x49c/0x900 [ 422.632921][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 422.639885][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 422.644691][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.650408][ T30] ? __import_iovec+0x536/0x820 [ 422.655270][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 422.660669][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.665965][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 422.671525][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.677331][ T30] __sock_sendmsg+0x221/0x270 [ 422.682027][ T30] ____sys_sendmsg+0x525/0x7d0 [ 422.686908][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.692226][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 422.697083][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.702208][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 422.708526][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.714857][ T30] ? do_syscall_64+0x100/0x230 [ 422.719776][ T30] ? do_syscall_64+0xb6/0x230 [ 422.724470][ T30] do_syscall_64+0xf3/0x230 [ 422.729105][ T30] ? clear_bhb_loop+0x35/0x90 [ 422.733800][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.741330][ T30] RIP: 0033:0x7fecc7775a99 [ 422.745768][ T30] RSP: 002b:00007fecc85be048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.754289][ T30] RAX: ffffffffffffffda RBX: 00007fecc7903f60 RCX: 00007fecc7775a99 [ 422.762914][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 422.771210][ T30] RBP: 00007fecc77e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 422.779570][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.787626][ T30] R13: 000000000000000b R14: 00007fecc7903f60 R15: 00007fff589f7c78 [ 422.795608][ T30] [ 422.798694][ T30] INFO: task syz.0.3575:15200 blocked for more than 144 seconds. [ 422.806473][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 422.813763][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.822662][ T30] task:syz.0.3575 state:D stack:26784 pid:15200 tgid:15199 ppid:9057 flags:0x00000004 [ 422.832909][ T30] Call Trace: [ 422.837021][ T30] [ 422.839987][ T30] __schedule+0x1800/0x4a60 [ 422.845955][ T30] ? __pfx___schedule+0x10/0x10 [ 422.850984][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.856154][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 422.861648][ T30] ? schedule+0x90/0x320 [ 422.865902][ T30] schedule+0x14b/0x320 [ 422.870141][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.875615][ T30] __mutex_lock+0x6a4/0xd70 [ 422.880245][ T30] ? __mutex_lock+0x527/0xd70 [ 422.884933][ T30] ? genl_rcv_msg+0x121/0xec0 [ 422.889819][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 422.894868][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 422.900209][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 422.905592][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 422.910980][ T30] ? radix_tree_lookup+0x238/0x290 [ 422.916210][ T30] genl_rcv_msg+0x121/0xec0 [ 422.920732][ T30] ? mark_lock+0x9a/0x350 [ 422.925081][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 422.930273][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.935342][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 422.940495][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.947090][ T30] netlink_rcv_skb+0x1e3/0x430 [ 422.951888][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.957330][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.962652][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 422.968177][ T30] genl_rcv+0x28/0x40 [ 422.972170][ T30] netlink_unicast+0x7f0/0x990 [ 422.977010][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 422.982299][ T30] ? __virt_addr_valid+0x183/0x530 [ 422.987534][ T30] ? __check_object_size+0x49c/0x900 [ 422.992832][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 422.998303][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 423.003106][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.008583][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 423.013537][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.018921][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 423.024404][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.029864][ T30] __sock_sendmsg+0x221/0x270 [ 423.034559][ T30] __sys_sendto+0x3a4/0x4f0 [ 423.039237][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 423.044309][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.051830][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.058303][ T30] ? exc_page_fault+0x590/0x8c0 [ 423.063173][ T30] __x64_sys_sendto+0xde/0x100 [ 423.068094][ T30] do_syscall_64+0xf3/0x230 [ 423.072610][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.078215][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.084133][ T30] RIP: 0033:0x7fe769f7782c [ 423.088755][ T30] RSP: 002b:00007fe76ad9aed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.097342][ T30] RAX: ffffffffffffffda RBX: 00007fe76ad9afd0 RCX: 00007fe769f7782c [ 423.105329][ T30] RDX: 000000000000001c RSI: 00007fe76ad9b020 RDI: 0000000000000003 [ 423.113501][ T30] RBP: 0000000000000000 R08: 00007fe76ad9af24 R09: 000000000000000c [ 423.121558][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 423.129749][ T30] R13: 00007fe76ad9af78 R14: 00007fe76ad9b020 R15: 0000000000000000 [ 423.137842][ T30] [ 423.140929][ T30] INFO: task syz-executor:15203 blocked for more than 144 seconds. [ 423.150397][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 423.157927][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.166734][ T30] task:syz-executor state:D stack:21728 pid:15203 tgid:15203 ppid:1 flags:0x00004004 [ 423.177081][ T30] Call Trace: [ 423.180370][ T30] [ 423.183324][ T30] __schedule+0x1800/0x4a60 [ 423.187965][ T30] ? __pfx___schedule+0x10/0x10 [ 423.192833][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.198052][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.203527][ T30] ? schedule+0x90/0x320 [ 423.208404][ T30] schedule+0x14b/0x320 [ 423.212594][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.218332][ T30] __mutex_lock+0x6a4/0xd70 [ 423.222856][ T30] ? __mutex_lock+0x527/0xd70 [ 423.227651][ T30] ? genl_rcv_msg+0x121/0xec0 [ 423.232350][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.237760][ T30] ? __pfx_validate_chain+0x10/0x10 [ 423.242983][ T30] ? __pfx_validate_chain+0x10/0x10 [ 423.248384][ T30] ? radix_tree_lookup+0x238/0x290 [ 423.255446][ T30] genl_rcv_msg+0x121/0xec0 [ 423.260893][ T30] ? mark_lock+0x9a/0x350 [ 423.265248][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 423.270353][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.275420][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 423.280512][ T30] ? __pfx___might_resched+0x10/0x10 [ 423.285821][ T30] netlink_rcv_skb+0x1e3/0x430 [ 423.290939][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.295983][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.301342][ T30] genl_rcv+0x28/0x40 [ 423.305335][ T30] netlink_unicast+0x7f0/0x990 [ 423.310439][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 423.315800][ T30] ? __virt_addr_valid+0x183/0x530 [ 423.321518][ T30] ? __check_object_size+0x49c/0x900 [ 423.327196][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 423.332325][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 423.337298][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.342601][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 423.347911][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.353208][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 423.359940][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.365252][ T30] __sock_sendmsg+0x221/0x270 [ 423.370029][ T30] __sys_sendto+0x3a4/0x4f0 [ 423.374551][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 423.380097][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.386147][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.392494][ T30] __x64_sys_sendto+0xde/0x100 [ 423.397786][ T30] do_syscall_64+0xf3/0x230 [ 423.402306][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.407396][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.413299][ T30] RIP: 0033:0x7fee4177782c [ 423.417936][ T30] RSP: 002b:00007ffda8ad79d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.426419][ T30] RAX: ffffffffffffffda RBX: 00007fee42434620 RCX: 00007fee4177782c [ 423.434400][ T30] RDX: 0000000000000020 RSI: 00007fee42434670 RDI: 0000000000000005 [ 423.442971][ T30] RBP: 0000000000000000 R08: 00007ffda8ad7a24 R09: 000000000000000c [ 423.451043][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 423.460520][ T30] R13: 00007ffda8ad7a78 R14: 00007fee42434670 R15: 0000000000000000 [ 423.468891][ T30] [ 423.471936][ T30] INFO: task syz.3.3577:15208 blocked for more than 145 seconds. [ 423.480554][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 423.488015][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.497088][ T30] task:syz.3.3577 state:D stack:26784 pid:15208 tgid:15207 ppid:5092 flags:0x00000004 [ 423.507320][ T30] Call Trace: [ 423.510606][ T30] [ 423.513554][ T30] __schedule+0x1800/0x4a60 [ 423.518172][ T30] ? __pfx___schedule+0x10/0x10 [ 423.523039][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.528513][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.534004][ T30] ? schedule+0x90/0x320 [ 423.538412][ T30] schedule+0x14b/0x320 [ 423.542583][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.548519][ T30] __mutex_lock+0x6a4/0xd70 [ 423.553047][ T30] ? __mutex_lock+0x527/0xd70 [ 423.559285][ T30] ? genl_rcv_msg+0x121/0xec0 [ 423.563993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.569208][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 423.574419][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 423.580013][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 423.585313][ T30] ? radix_tree_lookup+0x238/0x290 [ 423.590796][ T30] genl_rcv_msg+0x121/0xec0 [ 423.595315][ T30] ? mark_lock+0x9a/0x350 [ 423.599727][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 423.604761][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.609956][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 423.614992][ T30] ? __pfx___might_resched+0x10/0x10 [ 423.620787][ T30] netlink_rcv_skb+0x1e3/0x430 [ 423.625571][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.630689][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.635999][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 423.641686][ T30] genl_rcv+0x28/0x40 [ 423.645680][ T30] netlink_unicast+0x7f0/0x990 [ 423.650824][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 423.656540][ T30] ? __virt_addr_valid+0x183/0x530 [ 423.662813][ T30] ? __check_object_size+0x49c/0x900 [ 423.668222][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 423.673345][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 423.678462][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.683761][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 423.688795][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.694090][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 423.699729][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.705022][ T30] __sock_sendmsg+0x221/0x270 [ 423.710087][ T30] __sys_sendto+0x3a4/0x4f0 [ 423.714610][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 423.719915][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.725914][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.732377][ T30] ? exc_page_fault+0x590/0x8c0 [ 423.737679][ T30] __x64_sys_sendto+0xde/0x100 [ 423.742463][ T30] do_syscall_64+0xf3/0x230 [ 423.747045][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.751736][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.757746][ T30] RIP: 0033:0x7f610eb7782c [ 423.762169][ T30] RSP: 002b:00007f610f93ced0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.772499][ T30] RAX: ffffffffffffffda RBX: 00007f610f93cfd0 RCX: 00007f610eb7782c [ 423.780674][ T30] RDX: 0000000000000020 RSI: 00007f610f93d020 RDI: 0000000000000004 [ 423.788723][ T30] RBP: 0000000000000000 R08: 00007f610f93cf24 R09: 000000000000000c [ 423.797026][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 423.805008][ T30] R13: 00007f610f93cf78 R14: 00007f610f93d020 R15: 0000000000000000 [ 423.813113][ T30] [ 423.816329][ T30] INFO: task syz.3.3577:15211 blocked for more than 145 seconds. [ 423.824050][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 423.831679][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.840413][ T30] task:syz.3.3577 state:D stack:25944 pid:15211 tgid:15207 ppid:5092 flags:0x00000004 [ 423.850728][ T30] Call Trace: [ 423.854011][ T30] [ 423.857422][ T30] __schedule+0x1800/0x4a60 [ 423.861966][ T30] ? __pfx___schedule+0x10/0x10 [ 423.868290][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.873342][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.879675][ T30] ? schedule+0x90/0x320 [ 423.883939][ T30] schedule+0x14b/0x320 [ 423.888488][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.893965][ T30] __mutex_lock+0x6a4/0xd70 [ 423.898671][ T30] ? __mutex_lock+0x527/0xd70 [ 423.903369][ T30] ? genl_rcv_msg+0x121/0xec0 [ 423.908126][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.913164][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 423.918692][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 423.924073][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 423.929515][ T30] ? radix_tree_lookup+0x238/0x290 [ 423.934644][ T30] genl_rcv_msg+0x121/0xec0 [ 423.939309][ T30] ? mark_lock+0x9a/0x350 [ 423.943655][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 423.949009][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.954074][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 423.959282][ T30] ? __pfx___might_resched+0x10/0x10 [ 423.964595][ T30] netlink_rcv_skb+0x1e3/0x430 [ 423.970735][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.975788][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.981558][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 423.987363][ T30] genl_rcv+0x28/0x40 [ 423.991361][ T30] netlink_unicast+0x7f0/0x990 [ 423.996249][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 424.001544][ T30] ? __virt_addr_valid+0x183/0x530 [ 424.007293][ T30] ? __check_object_size+0x49c/0x900 [ 424.012593][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 424.017906][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 424.022694][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.028035][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 424.033204][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.047245][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 424.052738][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.058209][ T30] __sock_sendmsg+0x221/0x270 [ 424.062906][ T30] __sys_sendto+0x3a4/0x4f0 [ 424.067833][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 424.074404][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.080453][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.086915][ T30] __x64_sys_sendto+0xde/0x100 [ 424.091698][ T30] do_syscall_64+0xf3/0x230 [ 424.096867][ T30] ? clear_bhb_loop+0x35/0x90 [ 424.101565][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.107547][ T30] RIP: 0033:0x7f610eb7782c [ 424.111972][ T30] RSP: 002b:00007f610f91bed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.121333][ T30] RAX: ffffffffffffffda RBX: 00007f610f91bfd0 RCX: 00007f610eb7782c [ 424.129728][ T30] RDX: 0000000000000020 RSI: 00007f610f91c020 RDI: 000000000000000b [ 424.137883][ T30] RBP: 0000000000000000 R08: 00007f610f91bf24 R09: 000000000000000c [ 424.145867][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 424.153936][ T30] R13: 00007f610f91bf78 R14: 00007f610f91c020 R15: 0000000000000000 [ 424.162258][ T30] [ 424.165305][ T30] INFO: task syz.2.3578:15220 blocked for more than 145 seconds. [ 424.174633][ T30] Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 424.182065][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.191114][ T30] task:syz.2.3578 state:D stack:22496 pid:15220 tgid:15218 ppid:7055 flags:0x00000004 [ 424.201750][ T30] Call Trace: [ 424.205037][ T30] [ 424.208348][ T30] __schedule+0x1800/0x4a60 [ 424.212898][ T30] ? __pfx___schedule+0x10/0x10 [ 424.218213][ T30] ? __pfx_lock_release+0x10/0x10 [ 424.223252][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 424.228759][ T30] ? schedule+0x90/0x320 [ 424.233011][ T30] schedule+0x14b/0x320 [ 424.237271][ T30] schedule_preempt_disabled+0x13/0x30 [ 424.242739][ T30] __mutex_lock+0x6a4/0xd70 [ 424.247679][ T30] ? __mutex_lock+0x527/0xd70 [ 424.252373][ T30] ? genl_rcv_msg+0x121/0xec0 [ 424.257239][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 424.262283][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 424.267569][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 424.272951][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 424.280932][ T30] ? radix_tree_lookup+0x238/0x290 [ 424.286176][ T30] genl_rcv_msg+0x121/0xec0 [ 424.290695][ T30] ? mark_lock+0x9a/0x350 [ 424.295041][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 424.300288][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.305357][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 424.310745][ T30] ? __pfx___might_resched+0x10/0x10 [ 424.316363][ T30] netlink_rcv_skb+0x1e3/0x430 [ 424.321153][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.326309][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.331619][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 424.337518][ T30] genl_rcv+0x28/0x40 [ 424.341517][ T30] netlink_unicast+0x7f0/0x990 [ 424.346389][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 424.351683][ T30] ? __virt_addr_valid+0x183/0x530 [ 424.357012][ T30] ? __check_object_size+0x49c/0x900 [ 424.362311][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 424.367802][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 424.372593][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.379538][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 424.384509][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.389871][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 424.395345][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.400964][ T30] __sock_sendmsg+0x221/0x270 [ 424.405653][ T30] __sys_sendto+0x3a4/0x4f0 [ 424.410349][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 424.415428][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.421662][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.428623][ T30] ? exc_page_fault+0x590/0x8c0 [ 424.433494][ T30] __x64_sys_sendto+0xde/0x100 [ 424.438460][ T30] do_syscall_64+0xf3/0x230 [ 424.442983][ T30] ? clear_bhb_loop+0x35/0x90 [ 424.447784][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.453689][ T30] RIP: 0033:0x7fe32ab7782c [ 424.458530][ T30] RSP: 002b:00007fe32a5dced0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.467049][ T30] RAX: ffffffffffffffda RBX: 00007fe32a5dcfd0 RCX: 00007fe32ab7782c [ 424.475029][ T30] RDX: 000000000000001c RSI: 00007fe32a5dd020 RDI: 0000000000000011 [ 424.484182][ T30] RBP: 0000000000000000 R08: 00007fe32a5dcf24 R09: 000000000000000c [ 424.492571][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011 [ 424.500715][ T30] R13: 00007fe32a5dcf78 R14: 00007fe32a5dd020 R15: 0000000000000000 [ 424.508784][ T30] [ 424.511857][ T30] [ 424.511857][ T30] Showing all locks held in the system: [ 424.520275][ T30] 1 lock held by khungtaskd/30: [ 424.525138][ T30] #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 424.535159][ T30] 2 locks held by kworker/u8:5/1266: [ 424.540891][ T30] 2 locks held by getty/4847: [ 424.545569][ T30] #0: ffff88802be400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 424.555721][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 424.565988][ T30] 3 locks held by udevd/6379: [ 424.570692][ T30] #0: ffff8880202064c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 424.580528][ T30] #1: ffff88801fe02290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 424.591411][ T30] #2: ffff8880202b0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 424.600517][ T30] 3 locks held by syz.4.3574/15198: [ 424.605715][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.614321][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.623540][ T30] #2: ffff888020211198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_genl_reconfigure+0x42d/0x1c40 [ 424.634016][ T30] 2 locks held by syz.0.3575/15200: [ 424.639535][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.648143][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.657356][ T30] 2 locks held by syz-executor/15203: [ 424.662728][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.671303][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.680503][ T30] 2 locks held by syz.3.3577/15208: [ 424.687060][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.695295][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.704727][ T30] 2 locks held by syz.3.3577/15211: [ 424.709984][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.718267][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.727668][ T30] 2 locks held by syz.2.3578/15220: [ 424.732868][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.741307][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.750499][ T30] 2 locks held by syz-executor/15226: [ 424.755875][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.765101][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.774253][ T30] 2 locks held by syz-executor/15228: [ 424.779782][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.789599][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.798681][ T30] 2 locks held by syz-executor/15244: [ 424.804054][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.812386][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.821807][ T30] 2 locks held by syz-executor/15245: [ 424.827225][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.835443][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.844526][ T30] 2 locks held by syz-executor/15261: [ 424.850287][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.858674][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.868033][ T30] 2 locks held by syz-executor/15271: [ 424.873407][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.881939][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.892474][ T30] 2 locks held by syz-executor/15272: [ 424.898035][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.906572][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.915569][ T30] 2 locks held by syz-executor/15289: [ 424.922877][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.931253][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.940707][ T30] 2 locks held by syz-executor/15291: [ 424.946200][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.954413][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.963496][ T30] 2 locks held by syz-executor/15312: [ 424.969237][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.977877][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.986933][ T30] 2 locks held by syz-executor/15322: [ 424.993383][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.002053][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.011165][ T30] 2 locks held by syz-executor/15323: [ 425.016711][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.024927][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.034225][ T30] 2 locks held by syz-executor/15341: [ 425.039690][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.048056][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.057550][ T30] 2 locks held by syz-executor/15343: [ 425.062923][ T30] #0: ffffffff8f656e90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.071208][ T30] #1: ffffffff8f656d48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.089156][ T30] [ 425.091499][ T30] ============================================= [ 425.091499][ T30] [ 425.106352][ T30] NMI backtrace for cpu 0 [ 425.110698][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 425.120242][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.130298][ T30] Call Trace: [ 425.133570][ T30] [ 425.136491][ T30] dump_stack_lvl+0x241/0x360 [ 425.141163][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.146352][ T30] ? __pfx__printk+0x10/0x10 [ 425.150927][ T30] ? vprintk_emit+0x631/0x770 [ 425.155597][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 425.160620][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 425.165554][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 425.171001][ T30] ? _printk+0xd5/0x120 [ 425.175145][ T30] ? __pfx__printk+0x10/0x10 [ 425.179721][ T30] ? __wake_up_klogd+0xcc/0x110 [ 425.184560][ T30] ? __pfx__printk+0x10/0x10 [ 425.189141][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 425.194155][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.200131][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 425.206123][ T30] watchdog+0xfde/0x1020 [ 425.210367][ T30] ? watchdog+0x1ea/0x1020 [ 425.214778][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.219443][ T30] kthread+0x2f0/0x390 [ 425.223505][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.228173][ T30] ? __pfx_kthread+0x10/0x10 [ 425.232755][ T30] ret_from_fork+0x4b/0x80 [ 425.237161][ T30] ? __pfx_kthread+0x10/0x10 [ 425.241754][ T30] ret_from_fork_asm+0x1a/0x30 [ 425.246520][ T30] [ 425.251272][ T30] Sending NMI from CPU 0 to CPUs 1: [ 425.257042][ C1] NMI backtrace for cpu 1 [ 425.257053][ C1] CPU: 1 PID: 8321 Comm: kworker/u8:15 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 425.257071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.257082][ C1] Workqueue: bat_events batadv_nc_worker [ 425.257109][ C1] RIP: 0010:lock_release+0x30a/0x9f0 [ 425.257130][ C1] Code: 24 41 81 fd ff ff 1f 00 0f 87 ab 02 00 00 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 48 42 0f b6 04 20 84 c0 0f 85 e5 04 00 00 <89> 16 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 48 8b 5c 24 18 74 0e 4c [ 425.257144][ C1] RSP: 0018:ffffc900093efa20 EFLAGS: 00000046 [ 425.257158][ C1] RAX: 0000000000000000 RBX: 1ffff110058c616a RCX: ffffc900093efa03 [ 425.257170][ C1] RDX: 0000000000000002 RSI: ffff88802c630ad8 RDI: ffff88802c630b30 [ 425.257181][ C1] RBP: ffffc900093efb48 R08: ffffffff8fae37af R09: 1ffffffff1f5c6f5 [ 425.257194][ C1] R10: dffffc0000000000 R11: fffffbfff1f5c6f6 R12: dffffc0000000000 [ 425.257206][ C1] R13: 0000000000020021 R14: dffffc0000000000 R15: ffff88802c630b30 [ 425.257218][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 425.257232][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.257244][ C1] CR2: 000056199bb1a7f0 CR3: 000000000e134000 CR4: 00000000003506f0 [ 425.257258][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.257268][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.257278][ C1] Call Trace: [ 425.257285][ C1] [ 425.257291][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 425.257311][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 425.257331][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 425.257359][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 425.257378][ C1] ? nmi_handle+0x14f/0x5a0 [ 425.257394][ C1] ? nmi_handle+0x2a/0x5a0 [ 425.257409][ C1] ? lock_release+0x30a/0x9f0 [ 425.257427][ C1] ? default_do_nmi+0x63/0x160 [ 425.257447][ C1] ? exc_nmi+0x123/0x1f0 [ 425.257467][ C1] ? end_repeat_nmi+0xf/0x53 [ 425.257491][ C1] ? lock_release+0x30a/0x9f0 [ 425.257509][ C1] ? lock_release+0x30a/0x9f0 [ 425.257528][ C1] ? lock_release+0x30a/0x9f0 [ 425.257551][ C1] [ 425.257556][ C1] [ 425.257565][ C1] ? batadv_nc_worker+0xcb/0x610 [ 425.257587][ C1] ? __pfx_lock_release+0x10/0x10 [ 425.257607][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.257628][ C1] ? batadv_nc_worker+0xcb/0x610 [ 425.257650][ C1] batadv_nc_worker+0x28b/0x610 [ 425.257673][ C1] ? batadv_nc_worker+0xcb/0x610 [ 425.257696][ C1] ? process_scheduled_works+0x945/0x1830 [ 425.257713][ C1] process_scheduled_works+0xa2c/0x1830 [ 425.257745][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.257766][ C1] ? assign_work+0x364/0x3d0 [ 425.257786][ C1] worker_thread+0x86d/0xd40 [ 425.257807][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 425.257830][ C1] ? __kthread_parkme+0x169/0x1d0 [ 425.257850][ C1] ? __pfx_worker_thread+0x10/0x10 [ 425.257868][ C1] kthread+0x2f0/0x390 [ 425.257887][ C1] ? __pfx_worker_thread+0x10/0x10 [ 425.257905][ C1] ? __pfx_kthread+0x10/0x10 [ 425.257925][ C1] ret_from_fork+0x4b/0x80 [ 425.257946][ C1] ? __pfx_kthread+0x10/0x10 [ 425.257966][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.257995][ C1] [ 425.259260][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 425.583136][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 425.592687][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.602745][ T30] Call Trace: [ 425.606022][ T30] [ 425.608960][ T30] dump_stack_lvl+0x241/0x360 [ 425.613652][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.618855][ T30] ? __pfx__printk+0x10/0x10 [ 425.623447][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.629445][ T30] ? vscnprintf+0x5d/0x90 [ 425.633784][ T30] panic+0x349/0x860 [ 425.637685][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 425.643855][ T30] ? __pfx_panic+0x10/0x10 [ 425.648279][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 425.653662][ T30] ? __irq_work_queue_local+0x137/0x410 [ 425.659218][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 425.664595][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 425.670753][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 425.676923][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 425.683086][ T30] watchdog+0x101d/0x1020 [ 425.687428][ T30] ? watchdog+0x1ea/0x1020 [ 425.691855][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.696535][ T30] kthread+0x2f0/0x390 [ 425.700611][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.705293][ T30] ? __pfx_kthread+0x10/0x10 [ 425.709892][ T30] ret_from_fork+0x4b/0x80 [ 425.714317][ T30] ? __pfx_kthread+0x10/0x10 [ 425.718916][ T30] ret_from_fork_asm+0x1a/0x30 [ 425.723702][ T30] [ 425.726939][ T30] Kernel Offset: disabled [ 425.731256][ T30] Rebooting in 86400 seconds..