last executing test programs: 3.151408308s ago: executing program 2 (id=1637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 2.738388279s ago: executing program 2 (id=1642): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) 2.509857768s ago: executing program 2 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) 2.368442552s ago: executing program 1 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x23000000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) 2.186390924s ago: executing program 2 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.106947128s ago: executing program 1 (id=1651): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 1.885843073s ago: executing program 3 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090300000000000000000a002000000000000000000008000400", @ANYRES32=r1], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x27, 0x22, 0x0, &(0x7f0000000100)="f80204000000000000007f5b0800c22da2e6d3defa2690e5ce3a4fd7d256ef256140", 0x0, 0x20000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x28, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010104}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="08000300190000000800080064"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x4000040) 1.797579319s ago: executing program 1 (id=1654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.778414374s ago: executing program 2 (id=1655): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000001900)="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", 0xfa8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) socket(0x23, 0x80000, 0x2dc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004805}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 1.515931776s ago: executing program 1 (id=1657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000004000)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}], 0x18}}], 0x1, 0x20040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000220001069552616970fdbf000000000000000014"], 0x24}], 0x1}, 0x0) 1.384257401s ago: executing program 1 (id=1658): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 1.31225876s ago: executing program 1 (id=1659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x4, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) 1.251123442s ago: executing program 2 (id=1661): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) (fail_nth: 2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) 1.02759654s ago: executing program 0 (id=1663): socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 990.72364ms ago: executing program 3 (id=1664): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0xfff) syz_emit_ethernet(0x9a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500640600fe8004008000000000000000000000bbfe800000000000000000000000000696a615d697", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000fe06e2d4c3d9080a00000080000000001312d082e275205e556149a021cc13c33d8903030003030004020402220fcf6af75d5cdcf048b19c939556131227406263e43d5959a166a23bd1116edc000000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8004000090780000080a0000000000000000000002d7843a2ec5bdbf11e87b0d2cd717c8f3b658122d0f3256441f6544539ddd0ce63b23795d2b2d1e377302888b9ba91c1a09d57bed9c53429c36"], 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r5, 0x29, 0x77, 0x9, 0x2, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x10, 0x68000, 0x620bca37}}) (async, rerun: 64) r6 = accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async, rerun: 64) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) r9 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d6", 0x7ffff000}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b", 0x2f}], 0x2}}], 0x1, 0x0) 822.035433ms ago: executing program 4 (id=1666): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0xe3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r4}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x400, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0x0, 0xb}}}, 0x24}}, 0x0) 711.041863ms ago: executing program 0 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000f500000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214"], 0xc0}}, 0x0) 700.382256ms ago: executing program 3 (id=1668): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000, 0x41}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 696.556714ms ago: executing program 4 (id=1669): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) 596.658489ms ago: executing program 0 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 503.164776ms ago: executing program 4 (id=1671): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000001020000000073019d000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 485.837484ms ago: executing program 3 (id=1672): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0x138}}, 0x4004014) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4004009) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000000000000000001d2adee4fa09e1bd8a4fcaf3355b09a69713eb64c0a82e06df6d805a0be1fb9cb54a7a31ef0e21266dcb42b48ee7e5cccfdd8c7649e0c6951053ff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) pipe(&(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept4$rose(r0, 0x0, &(0x7f00000005c0), 0x80800) ioctl$SIOCRSACCEPT(r7, 0x89e3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 420.507999ms ago: executing program 0 (id=1673): syz_emit_ethernet(0x2e1, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff000086dd6001000002ab110000000000000000000000ffffac1414aafe80000000000000000000000000ffaa3c000400006dff"], 0x0) 367.118282ms ago: executing program 4 (id=1674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 287.861078ms ago: executing program 3 (id=1675): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3, 0x5, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @rr={0x7, 0x17, 0xe6, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @multicast2, @multicast2, @private=0xa010101]}, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, '\x00F'}]}, @timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x5, [{@remote, 0x6}, {@broadcast, 0x800}]}, @generic={0x82, 0xffffffffffffff80, "c8"}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x10, "a858c7f852619c3979dc1be1901a"}, {0x7, 0xb, "a87c3263cf32ad87f7"}, {0x2, 0x9, "5f3b3183cd5a9b"}]}, @rr={0x7, 0xb, 0x43, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) (async) socket$inet6(0xa, 0x3, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000300)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb869, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x4, 0x4, 0x20001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 272.676228ms ago: executing program 0 (id=1676): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) 167.060375ms ago: executing program 4 (id=1677): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 131.715856ms ago: executing program 0 (id=1678): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x5, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@generic={0x1c, "c0fa8fba344561b40704046a807c23105e5e8d70915a5e74d43c2fe0"}}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x5, 0x66, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x7, 0xe, "335917d24133b4f5697f38bf"}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x6, [{@private=0xa010101, 0x3ff}]}, @end, @ssrr={0x89, 0x17, 0x3e, [@multicast1, @empty, @multicast1, @multicast2, @private=0xa010100]}, @end]}}, {{0x4e20, 0x4e21, r4, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x100, 0x0, 0x4ae, {[@fastopen={0x22, 0x2}]}}, {"ad125702c896"}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, r5, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @link_local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x3a8, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "fccf51", 0x372, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, {[@srh={0x11, 0x6, 0x4, 0x3, 0x4, 0x40, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback]}, @routing={0x87, 0x4, 0x1, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x5a, 0xc, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x6, 0x5b, "f8f5778ba4b69efda42b05fd18fbf106f0ed61857c0dc53de9fac3d237390e9562d880d4ee5de1bf84a4a9e69bfb2fa20bf3326b5a4e5835688baf7c66617ee628f6ce1fa61257d60a98253a0e19282563c3707b2642ae714a8c81"}]}, @routing={0x88, 0xe, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @loopback]}, @hopopts={0x2f, 0x39, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x29, 0x5, [0x80000001, 0x3, 0x4, 0x1ff, 0x3, 0x60a, 0x7fffffff]}}, @pad1, @generic={0xb3, 0x9e, "c8de057b7e0b30296337040bbd697dcef8c56eeb03a62aee0d9115917747a5321fdd8131a4d075f8a1f23eac1555b1d1b70a576758c9f15d098de2ba60cd2dac8402ce82d77555db94e03c503d757db3353f19f103bc363bb4d223d9a4257b8c69d4be816658fe6d0672c1087dd5a4d1dfcbba6d3617dc4e89f0bd425eb24cd678be80cc3620cefe6c6170f912dc76d23ebc65d6a6f0237d26ea5d909fcc"}, @generic={0x9, 0xce, "cf9b30dbd60add123f61c22dfaf7938f9d5bee079b6f5890eb387b072b164e2a8a554d33407b626627a897d157ae1307a41c69f52f62d22f7632949b8b88e9dbe02ede83be16419a5c45f2fcecdcfeafcbd6e24e05ff23aa7f33bda8f61e4b52777d4c06f8f0ed11997ef5aebdb983687ada81ce8b8d334cf77e9aceab2e5046d456c047e9ce9c8cdef326d287ee42b882421a831066ba79d0d54b7b2bbc91ab180b893e1156fab8c419660d05f20ded2d9af8abc2a87bf11a70992956928af561008ea4899ef2fe006f2863aecf"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x957}]}], {{0x4e20, 0x4e20, r1, r5, 0x0, 0x0, 0x14, 0xc2, 0xf, 0x0, 0x7, {[@fastopen={0x22, 0xd, "21c2d6aa73889de15befc2"}, @timestamp={0x8, 0xa, 0x1c8c, 0x1}, @eol, @fastopen={0x22, 0xe, "cfb37a819ed3fd61f5fe2bee"}, @mptcp=@ack={0x1e, 0x13, 0x9, 0x4, "15ac6d0e697c9800820d7420106483"}, @sack_perm={0x4, 0x2}, @nop]}}, {"6918"}}}}}}}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x80000) bind$l2tp6(r6, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}, 0x1, 0x0, 0xf5}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x814, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0f}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x4c}}, 0x2000c011) 98.989988ms ago: executing program 3 (id=1679): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4c400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="201200200a5500", @ANYRES16=0x0, @ANYBLOB="8f9f0000000000000000040000000c0001800800030003000000"], 0x20}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) getpid() sendto(0xffffffffffffffff, &(0x7f00000001c0)="6ef8ec2b5db0b6d39b66b3bf506e5b811f8793", 0x13, 0x4000, &(0x7f0000000300)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x880) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 0s ago: executing program 4 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) kernel console output (not intermixed with test programs): T8045] ____sys_sendmsg+0x525/0x7d0 [ 251.926810][ T8045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.929287][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'. [ 251.932142][ T8045] __sys_sendmsg+0x2b0/0x3a0 [ 251.945653][ T8045] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.950812][ T8045] ? vfs_write+0x7c4/0xc90 [ 251.955337][ T8045] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.961775][ T8045] ? do_syscall_64+0x100/0x230 [ 251.966692][ T8045] ? do_syscall_64+0xb6/0x230 [ 251.971484][ T8045] do_syscall_64+0xf3/0x230 [ 251.976070][ T8045] ? clear_bhb_loop+0x35/0x90 [ 251.980807][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.986757][ T8045] RIP: 0033:0x7fe59857def9 [ 251.991225][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.010890][ T8045] RSP: 002b:00007fe599389038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.019365][ T8045] RAX: ffffffffffffffda RBX: 00007fe598736058 RCX: 00007fe59857def9 [ 252.027385][ T8045] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 252.035415][ T8045] RBP: 00007fe599389090 R08: 0000000000000000 R09: 0000000000000000 [ 252.043434][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.051456][ T8045] R13: 0000000000000001 R14: 00007fe598736058 R15: 00007ffed5523428 [ 252.059501][ T8045] [ 252.079478][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.086403][ T8038] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 252.330593][ T8062] bond0: Device is already in use. [ 252.671507][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 252.926190][ T8086] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 253.177173][ T8100] FAULT_INJECTION: forcing a failure. [ 253.177173][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.232179][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 253.264166][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: syz.2.905 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 253.274491][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.284678][ T8100] Call Trace: [ 253.288171][ T8100] [ 253.291130][ T8100] dump_stack_lvl+0x241/0x360 [ 253.295897][ T8100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.301152][ T8100] ? __pfx__printk+0x10/0x10 [ 253.305794][ T8100] ? __pfx_lock_release+0x10/0x10 [ 253.310874][ T8100] should_fail_ex+0x3b0/0x4e0 [ 253.315611][ T8100] _copy_from_user+0x2f/0xe0 [ 253.320260][ T8100] do_sock_getsockopt+0x1d1/0x7e0 [ 253.325343][ T8100] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 253.330936][ T8100] ? __fget_files+0x3f6/0x470 [ 253.335677][ T8100] __sys_getsockopt+0x271/0x330 [ 253.340577][ T8100] ? __pfx___sys_getsockopt+0x10/0x10 [ 253.345993][ T8100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.352368][ T8100] ? do_syscall_64+0x100/0x230 [ 253.357186][ T8100] __x64_sys_getsockopt+0xb5/0xd0 [ 253.362254][ T8100] do_syscall_64+0xf3/0x230 [ 253.366805][ T8100] ? clear_bhb_loop+0x35/0x90 [ 253.371530][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.377467][ T8100] RIP: 0033:0x7fe59857def9 [ 253.381909][ T8100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.401522][ T8100] RSP: 002b:00007fe599389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 253.409950][ T8100] RAX: ffffffffffffffda RBX: 00007fe598736058 RCX: 00007fe59857def9 [ 253.417931][ T8100] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000005 [ 253.425912][ T8100] RBP: 00007fe599389090 R08: 0000000020000140 R09: 0000000000000000 [ 253.433895][ T8100] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 253.441885][ T8100] R13: 0000000000000001 R14: 00007fe598736058 R15: 00007ffed5523428 [ 253.449894][ T8100] [ 253.611058][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 253.707166][ T8118] Cannot find add_set index 0 as target [ 253.802733][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 253.811932][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 253.835402][ T8122] bridge3: entered promiscuous mode [ 253.842169][ T8122] bridge3: entered allmulticast mode [ 254.021915][ T8125] sit0: entered promiscuous mode [ 254.078432][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 254.086396][ T8125] vlan2: entered promiscuous mode [ 254.155201][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.173900][ T8125] sit0: left promiscuous mode [ 254.303825][ T8135] bond0: Device is already in use. [ 255.059735][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 255.122757][ T8163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.247730][ T8165] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 255.324665][ T8167] hsr0: entered promiscuous mode [ 255.833124][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 255.863468][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 255.998270][ T8200] tipc: Enabled bearer , priority 0 [ 256.152128][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.226424][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.252550][ T8198] tipc: Disabling bearer [ 256.633369][ T8224] x_tables: ip_tables: osf match: only valid for protocol 6 [ 256.645083][ T8220] bond0: Device is already in use. [ 256.923783][ T8234] xt_l2tp: v2 sid > 0xffff: 262144 [ 256.984374][ T8229] netlink: 45 bytes leftover after parsing attributes in process `syz.1.949'. [ 257.014604][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 257.090982][ T8241] bond1 (unregistering): Released all slaves [ 257.652090][ T8250] tipc: Enabled bearer , priority 0 [ 257.673239][ T8249] tipc: Disabling bearer [ 258.008416][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 258.230046][ T8259] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 258.307030][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.439360][ T8268] vlan2: entered promiscuous mode [ 258.643497][ T8278] tipc: Enabled bearer , priority 0 [ 258.671520][ T8277] tipc: Disabling bearer [ 258.777087][ T8285] netlink: 'syz.1.970': attribute type 6 has an invalid length. [ 258.857702][ T8288] __nla_validate_parse: 1 callbacks suppressed [ 258.857724][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 258.940444][ T8288] bond3 (unregistering): Released all slaves [ 259.410838][ T8302] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 259.494119][ T8306] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 259.599126][ T8309] vlan3: entered promiscuous mode [ 259.620822][ T8309] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 259.657314][ T8309] mac80211_hwsim hwsim17 wlan0: left promiscuous mode [ 259.814594][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.4.983'. [ 259.853896][ T8313] tipc: Enabled bearer , priority 0 [ 260.078010][ T8315] tipc: Resetting bearer [ 260.222047][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 260.284590][ T5468] tipc: Resetting bearer [ 260.319797][ T8312] tipc: Resetting bearer [ 260.386476][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.395944][ T8348] netlink: 'syz.4.994': attribute type 75 has an invalid length. [ 262.636627][ T8312] tipc: Disabling bearer [ 262.652013][ T8333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.667938][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 262.677766][ T8337] netlink: 72 bytes leftover after parsing attributes in process `syz.2.991'. [ 262.687230][ T8337] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 262.767493][ T8348] vlan2: entered promiscuous mode [ 263.067368][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 263.109533][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 263.412690][ T8381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1005'. [ 263.993302][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 264.052660][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1014'. [ 264.275974][ T8419] Cannot find del_set index 0 as target [ 264.506863][ T8429] tipc: Enabling of bearer rejected, already enabled [ 264.541381][ T8429] FAULT_INJECTION: forcing a failure. [ 264.541381][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.581040][ T8429] CPU: 0 UID: 0 PID: 8429 Comm: syz.2.1021 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 264.591452][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 264.600095][ T8436] Cannot find add_set index 0 as target [ 264.601521][ T8429] Call Trace: [ 264.601535][ T8429] [ 264.601546][ T8429] dump_stack_lvl+0x241/0x360 [ 264.618065][ T8429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.623766][ T8429] ? __pfx__printk+0x10/0x10 [ 264.628412][ T8429] ? __pfx_lock_release+0x10/0x10 [ 264.633530][ T8429] should_fail_ex+0x3b0/0x4e0 [ 264.638266][ T8429] _copy_from_iter+0x1f6/0x1960 [ 264.643160][ T8429] ? __virt_addr_valid+0x183/0x530 [ 264.648315][ T8429] ? __pfx_lock_release+0x10/0x10 [ 264.653399][ T8429] ? __alloc_skb+0x28f/0x440 [ 264.658043][ T8429] ? __pfx__copy_from_iter+0x10/0x10 [ 264.663371][ T8429] ? __virt_addr_valid+0x183/0x530 [ 264.668519][ T8429] ? __virt_addr_valid+0x183/0x530 [ 264.673663][ T8429] ? __virt_addr_valid+0x45f/0x530 [ 264.678822][ T8429] ? __check_object_size+0x49c/0x900 [ 264.684166][ T8429] netlink_sendmsg+0x73d/0xcb0 [ 264.689006][ T8429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.694351][ T8429] ? __import_iovec+0x536/0x820 [ 264.699253][ T8429] ? aa_sock_msg_perm+0x91/0x160 [ 264.704237][ T8429] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 264.709667][ T8429] ? security_socket_sendmsg+0x87/0xb0 [ 264.715202][ T8429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.720540][ T8429] __sock_sendmsg+0x221/0x270 [ 264.725269][ T8429] ____sys_sendmsg+0x525/0x7d0 [ 264.730082][ T8429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.735434][ T8429] __sys_sendmsg+0x2b0/0x3a0 [ 264.740064][ T8429] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.745209][ T8429] ? __schedule+0x1808/0x4a60 [ 264.749961][ T8429] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.756350][ T8429] ? schedule+0x144/0x320 [ 264.760746][ T8429] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.767134][ T8429] ? do_syscall_64+0x100/0x230 [ 264.771929][ T8429] ? do_syscall_64+0xb6/0x230 [ 264.776773][ T8429] do_syscall_64+0xf3/0x230 [ 264.781330][ T8429] ? clear_bhb_loop+0x35/0x90 [ 264.786058][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.792005][ T8429] RIP: 0033:0x7fe59857def9 [ 264.796458][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.816198][ T8429] RSP: 002b:00007fe5993aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.824663][ T8429] RAX: ffffffffffffffda RBX: 00007fe598735f80 RCX: 00007fe59857def9 [ 264.832690][ T8429] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 264.840726][ T8429] RBP: 00007fe5993aa090 R08: 0000000000000000 R09: 0000000000000000 [ 264.848752][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.856770][ T8429] R13: 0000000000000000 R14: 00007fe598735f80 R15: 00007ffed5523428 [ 264.864811][ T8429] [ 265.596977][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 265.656603][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 265.729427][ T5233] block nbd12: Receive control failed (result -107) [ 265.777350][ T8477] nbd12: detected capacity change from 0 to 256 [ 265.851723][ T6006] block nbd12: Dead connection, failed to find a fallback [ 265.883820][ T6006] block nbd12: shutting down sockets [ 265.899970][ T6006] blk_print_req_error: 64 callbacks suppressed [ 265.899992][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.922159][ T6006] buffer_io_error: 64 callbacks suppressed [ 265.922181][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 265.965924][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.004116][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.029197][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.085006][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.114776][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.157258][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.183367][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.221468][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.236153][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.251649][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.268684][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.282651][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.341073][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.382942][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.406583][ T6006] ldm_validate_partition_table(): Disk read failed. [ 266.433952][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.476612][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.526496][ T6006] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.566107][ T6006] Buffer I/O error on dev nbd12, logical block 0, async page read [ 266.604114][ T6006] Dev nbd12: unable to read RDB block 0 [ 266.616708][ T6006] nbd12: unable to read partition table [ 266.642200][ T6006] ldm_validate_partition_table(): Disk read failed. [ 266.678296][ T6006] Dev nbd12: unable to read RDB block 0 [ 266.706782][ T6006] nbd12: unable to read partition table [ 267.459461][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 267.528340][ T8559] xt_hashlimit: size too large, truncated to 1048576 [ 267.568795][ T8559] xt_hashlimit: max too large, truncated to 1048576 [ 267.578828][ T8559] xt_hashlimit: overflow, try lower: 0/0 [ 267.682355][ T8555] bond1 (unregistering): Released all slaves [ 268.447794][ T8598] netlink: 'syz.3.1079': attribute type 21 has an invalid length. [ 268.484758][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 268.566793][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 268.604834][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 268.628490][ T5233] block nbd13: Receive control failed (result -107) [ 268.656399][ T8600] nbd13: detected capacity change from 0 to 256 [ 268.682458][ T6006] block nbd13: Dead connection, failed to find a fallback [ 268.696470][ T6006] block nbd13: shutting down sockets [ 268.702488][ T6006] ldm_validate_partition_table(): Disk read failed. [ 268.710900][ T6006] Dev nbd13: unable to read RDB block 0 [ 268.718381][ T6006] nbd13: unable to read partition table [ 268.730426][ T6006] ldm_validate_partition_table(): Disk read failed. [ 268.747063][ T6006] Dev nbd13: unable to read RDB block 0 [ 268.767462][ T6006] nbd13: unable to read partition table [ 268.853234][ T8612] tipc: Enabled bearer , priority 10 [ 268.988606][ T8617] IPv6: addrconf: prefix option has invalid lifetime [ 269.045572][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 269.285539][ T8634] xt_l2tp: v2 sid > 0xffff: 262144 [ 269.388530][ T8637] vlan3: entered promiscuous mode [ 269.511292][ T8644] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1096'. [ 269.666219][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1099'. [ 269.712929][ T8655] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 270.124053][ T8666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1107'. [ 270.445947][ T8680] tipc: Enabled bearer , priority 0 [ 270.466335][ T8678] tipc: Disabling bearer [ 270.514227][ T8690] x_tables: duplicate underflow at hook 2 [ 270.637278][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 270.649858][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 270.732468][ T8696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1117'. [ 270.754968][ T8694] bond1 (unregistering): Released all slaves [ 270.948320][ T8704] netlink: 'syz.0.1119': attribute type 3 has an invalid length. [ 270.973413][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 270.985067][ T8704] netlink: 'syz.0.1119': attribute type 3 has an invalid length. [ 271.195131][ T8717] FAULT_INJECTION: forcing a failure. [ 271.195131][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.197023][ T5233] Bluetooth: hci5: command 0x0405 tx timeout [ 271.237126][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.1.1123 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 271.247626][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 271.257729][ T8717] Call Trace: [ 271.261064][ T8717] [ 271.264038][ T8717] dump_stack_lvl+0x241/0x360 [ 271.268795][ T8717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.274077][ T8717] ? __pfx__printk+0x10/0x10 [ 271.278698][ T8717] ? __pfx_lock_release+0x10/0x10 [ 271.283751][ T8717] should_fail_ex+0x3b0/0x4e0 [ 271.288478][ T8717] _copy_from_user+0x2f/0xe0 [ 271.293335][ T8717] copy_msghdr_from_user+0xae/0x680 [ 271.298567][ T8717] ? _parse_integer_limit+0x1b5/0x200 [ 271.303970][ T8717] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 271.309814][ T8717] __sys_sendmmsg+0x374/0x740 [ 271.314518][ T8717] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.319771][ T8717] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 271.325688][ T8717] ? ksys_write+0x23e/0x2c0 [ 271.330207][ T8717] ? __pfx_lock_release+0x10/0x10 [ 271.335260][ T8717] ? vfs_write+0x7c4/0xc90 [ 271.339697][ T8717] ? __mutex_unlock_slowpath+0x21d/0x750 [ 271.345343][ T8717] ? __pfx_vfs_write+0x10/0x10 [ 271.350148][ T8717] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.356150][ T8717] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.362500][ T8717] ? do_syscall_64+0x100/0x230 [ 271.367318][ T8717] __x64_sys_sendmmsg+0xa0/0xb0 [ 271.373615][ T8717] do_syscall_64+0xf3/0x230 [ 271.378160][ T8717] ? clear_bhb_loop+0x35/0x90 [ 271.382858][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.388768][ T8717] RIP: 0033:0x7f5ec4d7def9 [ 271.393196][ T8717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.412898][ T8717] RSP: 002b:00007f5ec5be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.421503][ T8717] RAX: ffffffffffffffda RBX: 00007f5ec4f35f80 RCX: 00007f5ec4d7def9 [ 271.429512][ T8717] RDX: 0000000000000001 RSI: 0000000020008340 RDI: 0000000000000006 [ 271.437587][ T8717] RBP: 00007f5ec5be5090 R08: 0000000000000000 R09: 0000000000000000 [ 271.445670][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.453671][ T8717] R13: 0000000000000000 R14: 00007f5ec4f35f80 R15: 00007ffc273bed78 [ 271.461681][ T8717] [ 271.723010][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1129'. [ 271.812853][ T8730] netlink: 'syz.1.1128': attribute type 2 has an invalid length. [ 271.935217][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 272.465378][ T5233] block nbd14: Receive control failed (result -107) [ 272.495698][ T8748] nbd14: detected capacity change from 0 to 256 [ 272.528110][ T8516] block nbd14: Dead connection, failed to find a fallback [ 272.557499][ T8516] block nbd14: shutting down sockets [ 272.562862][ T8516] blk_print_req_error: 64 callbacks suppressed [ 272.562878][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.634761][ T8516] buffer_io_error: 64 callbacks suppressed [ 272.634784][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 272.676404][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.709472][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 272.765656][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.802658][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 272.859758][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.890645][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 272.919193][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.960503][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 272.978975][ T8770] tipc: Enabled bearer , priority 26 [ 273.006574][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.048983][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 273.081926][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.116717][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 273.152903][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.206620][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 273.242067][ T8516] ldm_validate_partition_table(): Disk read failed. [ 273.276454][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.285659][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 273.368280][ T8516] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.392509][ T8516] Buffer I/O error on dev nbd14, logical block 0, async page read [ 273.433197][ T8516] Dev nbd14: unable to read RDB block 0 [ 273.452688][ T8516] nbd14: unable to read partition table [ 273.489593][ T8516] ldm_validate_partition_table(): Disk read failed. [ 273.517310][ T8516] Dev nbd14: unable to read RDB block 0 [ 273.533628][ T8516] nbd14: unable to read partition table [ 274.005458][ T8813] tipc: Enabling of bearer rejected, failed to enable media [ 274.409813][ T8835] __nla_validate_parse: 4 callbacks suppressed [ 274.409838][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 274.480386][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 275.077294][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 275.146776][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 275.209320][ T5233] block nbd15: Receive control failed (result -107) [ 275.246822][ T8861] nbd15: detected capacity change from 0 to 256 [ 275.281719][ T8516] block nbd15: Dead connection, failed to find a fallback [ 275.431993][ T8871] x_tables: ip_tables: osf match: only valid for protocol 6 [ 275.597024][ T8874] Unsupported ieee802154 address type: 0 [ 275.650156][ T8874] x_tables: duplicate underflow at hook 2 [ 275.835623][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 275.966538][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'. [ 276.039865][ T5233] block nbd16: Receive control failed (result -107) [ 276.106508][ T8884] nbd16: detected capacity change from 0 to 256 [ 276.126678][ T6006] block nbd16: Dead connection, failed to find a fallback [ 276.141774][ T6006] block nbd16: shutting down sockets [ 276.185504][ T6006] ldm_validate_partition_table(): Disk read failed. [ 276.223624][ T6006] Dev nbd16: unable to read RDB block 0 [ 276.251112][ T6006] nbd16: unable to read partition table [ 276.290988][ T6006] ldm_validate_partition_table(): Disk read failed. [ 276.316802][ T6006] Dev nbd16: unable to read RDB block 0 [ 276.322859][ T6006] nbd16: unable to read partition table [ 276.632437][ T29] audit: type=1107 audit(1726548789.983:4): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 276.817380][ T8902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1186'. [ 276.873089][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 277.014980][ T8906] IPVS: Scheduler module ip_vs_sip not found [ 277.110490][ T8910] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1189'. [ 277.454091][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 277.475898][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.483788][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.510428][ T8930] Cannot find add_set index 0 as target [ 277.515268][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.540485][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.096595][ T8952] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 278.194298][ T8955] tipc: Enabling of bearer rejected, already enabled [ 278.204479][ T8955] FAULT_INJECTION: forcing a failure. [ 278.204479][ T8955] name failslab, interval 1, probability 0, space 0, times 0 [ 278.219285][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.2.1207 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 278.229775][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.240051][ T8955] Call Trace: [ 278.243373][ T8955] [ 278.246332][ T8955] dump_stack_lvl+0x241/0x360 [ 278.251076][ T8955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.256328][ T8955] ? __pfx__printk+0x10/0x10 [ 278.260981][ T8955] ? __kmalloc_node_noprof+0xb7/0x440 [ 278.266487][ T8955] ? __pfx___might_resched+0x10/0x10 [ 278.271829][ T8955] should_fail_ex+0x3b0/0x4e0 [ 278.276557][ T8955] should_failslab+0xac/0x100 [ 278.281279][ T8955] __kmalloc_node_noprof+0xdf/0x440 [ 278.286501][ T8955] ? crypto_create_tfm_node+0x88/0x3d0 [ 278.291985][ T8955] crypto_create_tfm_node+0x88/0x3d0 [ 278.297325][ T8955] crypto_alloc_tfm_node+0x161/0x360 [ 278.302646][ T8955] tipc_crypto_key_init+0x139/0x900 [ 278.308060][ T8955] tipc_nl_node_set_key+0x6e1/0xa80 [ 278.313300][ T8955] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 278.319046][ T8955] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 278.325399][ T8955] genl_rcv_msg+0xb14/0xec0 [ 278.329925][ T8955] ? mark_lock+0x9a/0x350 [ 278.334284][ T8955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.339375][ T8955] ? __pfx_lock_acquire+0x10/0x10 [ 278.344434][ T8955] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 278.350186][ T8955] ? __pfx___might_resched+0x10/0x10 [ 278.355504][ T8955] netlink_rcv_skb+0x1e3/0x430 [ 278.360294][ T8955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.365357][ T8955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.370679][ T8955] ? __netlink_deliver_tap+0x77e/0x7c0 [ 278.376177][ T8955] genl_rcv+0x28/0x40 [ 278.380184][ T8955] netlink_unicast+0x7f6/0x990 [ 278.384974][ T8955] ? __pfx_netlink_unicast+0x10/0x10 [ 278.390275][ T8955] ? __virt_addr_valid+0x183/0x530 [ 278.395405][ T8955] ? __check_object_size+0x49c/0x900 [ 278.401315][ T8955] ? bpf_lsm_netlink_send+0x9/0x10 [ 278.406448][ T8955] netlink_sendmsg+0x8e4/0xcb0 [ 278.411243][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.416636][ T8955] ? __import_iovec+0x536/0x820 [ 278.421499][ T8955] ? aa_sock_msg_perm+0x91/0x160 [ 278.426473][ T8955] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 278.431784][ T8955] ? security_socket_sendmsg+0x87/0xb0 [ 278.437262][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.442570][ T8955] __sock_sendmsg+0x221/0x270 [ 278.447273][ T8955] ____sys_sendmsg+0x525/0x7d0 [ 278.452079][ T8955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.457414][ T8955] __sys_sendmsg+0x2b0/0x3a0 [ 278.462039][ T8955] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.467166][ T8955] ? vfs_write+0x7c4/0xc90 [ 278.471635][ T8955] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.477984][ T8955] ? do_syscall_64+0x100/0x230 [ 278.482770][ T8955] ? do_syscall_64+0xb6/0x230 [ 278.487493][ T8955] do_syscall_64+0xf3/0x230 [ 278.492197][ T8955] ? clear_bhb_loop+0x35/0x90 [ 278.496895][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.502800][ T8955] RIP: 0033:0x7fe59857def9 [ 278.507231][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.526859][ T8955] RSP: 002b:00007fe5993aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.535302][ T8955] RAX: ffffffffffffffda RBX: 00007fe598735f80 RCX: 00007fe59857def9 [ 278.543368][ T8955] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 278.551364][ T8955] RBP: 00007fe5993aa090 R08: 0000000000000000 R09: 0000000000000000 [ 278.559348][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.567327][ T8955] R13: 0000000000000000 R14: 00007fe598735f80 R15: 00007ffed5523428 [ 278.575356][ T8955] [ 278.706460][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 279.035942][ T8979] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 279.256015][ T8972] netlink: 'syz.0.1215': attribute type 2 has an invalid length. [ 279.294554][ T8990] tipc: Enabling of bearer rejected, failed to enable media [ 279.379526][ T8994] syz_tun: entered promiscuous mode [ 279.502817][ T8987] syz_tun: left promiscuous mode [ 279.702317][ T9003] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 280.030113][ T9008] tipc: Enabled bearer , priority 0 [ 280.158977][ T9005] tipc: Disabling bearer [ 280.193344][ T9017] __nla_validate_parse: 5 callbacks suppressed [ 280.193369][ T9017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1225'. [ 280.222323][ T9017] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1225'. [ 280.242917][ T9017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1225'. [ 280.302381][ T9017] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1225'. [ 280.547928][ T9029] tipc: Enabling of bearer rejected, failed to enable media [ 280.936955][ T9043] xt_l2tp: v2 sid > 0xffff: 262144 [ 280.964670][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 281.156560][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 281.231769][ T4623] block nbd17: Receive control failed (result -107) [ 281.281528][ T9041] nbd17: detected capacity change from 0 to 256 [ 281.311360][ T6006] block nbd17: Dead connection, failed to find a fallback [ 281.352112][ T9065] FAULT_INJECTION: forcing a failure. [ 281.352112][ T9065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.424117][ T9065] CPU: 1 UID: 0 PID: 9065 Comm: syz.1.1246 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 281.434537][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 281.444643][ T9065] Call Trace: [ 281.447963][ T9065] [ 281.450928][ T9065] dump_stack_lvl+0x241/0x360 [ 281.455684][ T9065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.460952][ T9065] ? __pfx__printk+0x10/0x10 [ 281.465617][ T9065] ? __pfx_lock_release+0x10/0x10 [ 281.470705][ T9065] ? __fget_files+0x29/0x470 [ 281.475365][ T9065] should_fail_ex+0x3b0/0x4e0 [ 281.480103][ T9065] _copy_from_user+0x2f/0xe0 [ 281.484776][ T9065] bpf_obj_get_info_by_fd+0x420/0x40f0 [ 281.490319][ T9065] ? __lock_acquire+0x137a/0x2040 [ 281.495395][ T9065] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 281.501361][ T9065] ? __might_fault+0xc6/0x120 [ 281.506061][ T9065] ? bpf_lsm_bpf+0x9/0x10 [ 281.510401][ T9065] ? security_bpf+0x87/0xb0 [ 281.514919][ T9065] __sys_bpf+0x685/0x810 [ 281.519198][ T9065] ? __pfx___sys_bpf+0x10/0x10 [ 281.524015][ T9065] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.530033][ T9065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.536383][ T9065] ? do_syscall_64+0x100/0x230 [ 281.541288][ T9065] __x64_sys_bpf+0x7c/0x90 [ 281.545719][ T9065] do_syscall_64+0xf3/0x230 [ 281.550261][ T9065] ? clear_bhb_loop+0x35/0x90 [ 281.554977][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.560921][ T9065] RIP: 0033:0x7f5ec4d7def9 [ 281.565368][ T9065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.585000][ T9065] RSP: 002b:00007f5ec5be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.593444][ T9065] RAX: ffffffffffffffda RBX: 00007f5ec4f35f80 RCX: 00007f5ec4d7def9 [ 281.601447][ T9065] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 000000000000000f [ 281.609442][ T9065] RBP: 00007f5ec5be5090 R08: 0000000000000000 R09: 0000000000000000 [ 281.617462][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.625556][ T9065] R13: 0000000000000000 R14: 00007f5ec4f35f80 R15: 00007ffc273bed78 [ 281.633561][ T9065] [ 281.655366][ T9070] tipc: Enabling of bearer rejected, failed to enable media [ 282.127407][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 282.167253][ T9089] Cannot find del_set index 0 as target [ 282.222411][ T9092] tipc: Enabling of bearer rejected, already enabled [ 282.259874][ T9086] bond1 (unregistering): Released all slaves [ 282.345169][ T9098] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 282.605607][ T9105] tipc: Enabled bearer , priority 0 [ 282.670286][ T9104] tipc: Disabling bearer [ 282.723958][ T9107] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 282.821001][ T9112] tipc: Enabled bearer , priority 0 [ 282.922560][ T9110] tipc: Disabling bearer [ 283.563908][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 283.603655][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1281'. [ 283.664646][ T9146] Êü: entered promiscuous mode [ 283.819295][ T9155] tipc: Enabled bearer , priority 0 [ 283.858124][ T9150] tipc: Disabling bearer [ 283.951793][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1286'. [ 285.023021][ T9165] delete_channel: no stack [ 285.346875][ T9179] __nla_validate_parse: 1 callbacks suppressed [ 285.346898][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1295'. [ 285.490297][ T9186] tipc: Enabled bearer , priority 0 [ 285.582209][ T9183] tipc: Disabling bearer [ 285.940394][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 286.202996][ T9217] bond1 (unregistering): Released all slaves [ 286.386100][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 286.928941][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1321'. [ 286.961853][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1318'. [ 289.029930][ T9255] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1320'. [ 289.049856][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1320'. [ 289.357766][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 289.370186][ T29] audit: type=1107 audit(1726548802.723:5): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 289.525682][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 289.599005][ T4623] block nbd18: Receive control failed (result -107) [ 289.627193][ T9272] nbd18: detected capacity change from 0 to 256 [ 289.635136][ T9074] block nbd18: Dead connection, failed to find a fallback [ 289.982649][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 290.072440][ T9313] Cannot find del_set index 0 as target [ 290.166690][ T4623] block nbd19: Receive control failed (result -107) [ 290.187765][ T9302] nbd19: detected capacity change from 0 to 256 [ 290.233047][ T9305] block nbd19: Dead connection, failed to find a fallback [ 290.276378][ T9305] block nbd19: shutting down sockets [ 290.281762][ T9305] blk_print_req_error: 64 callbacks suppressed [ 290.281779][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.366390][ T9305] buffer_io_error: 64 callbacks suppressed [ 290.366413][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.416415][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.459774][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.489251][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.507439][ T9334] FAULT_INJECTION: forcing a failure. [ 290.507439][ T9334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.527250][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.535832][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.3.1344 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 290.546237][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 290.555812][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.556315][ T9334] Call Trace: [ 290.556327][ T9334] [ 290.556337][ T9334] dump_stack_lvl+0x241/0x360 [ 290.556384][ T9334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.565565][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.568848][ T9334] ? __pfx__printk+0x10/0x10 [ 290.568897][ T9334] ? __pfx_lock_release+0x10/0x10 [ 290.568928][ T9334] ? vfs_write+0x7c4/0xc90 [ 290.568962][ T9334] should_fail_ex+0x3b0/0x4e0 [ 290.583348][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.589668][ T9334] _copy_from_user+0x2f/0xe0 [ 290.589707][ T9334] get_timespec64+0x97/0x280 [ 290.589746][ T9334] ? __pfx_get_timespec64+0x10/0x10 [ 290.589791][ T9334] __x64_sys_recvmmsg+0x140/0x250 [ 290.589823][ T9334] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 290.589851][ T9334] ? do_syscall_64+0x100/0x230 [ 290.589890][ T9334] ? do_syscall_64+0xb6/0x230 [ 290.589928][ T9334] do_syscall_64+0xf3/0x230 [ 290.589963][ T9334] ? clear_bhb_loop+0x35/0x90 [ 290.589994][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.590019][ T9334] RIP: 0033:0x7fd1a277def9 [ 290.590041][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.590061][ T9334] RSP: 002b:00007fd1a34d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.590087][ T9334] RAX: ffffffffffffffda RBX: 00007fd1a2936058 RCX: 00007fd1a277def9 [ 290.590105][ T9334] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 290.590122][ T9334] RBP: 00007fd1a34d8090 R08: 0000000020003700 R09: 0000000000000000 [ 290.590137][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.590152][ T9334] R13: 0000000000000000 R14: 00007fd1a2936058 R15: 00007ffcecb67618 [ 290.590188][ T9334] [ 290.752238][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.760980][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.770467][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.779072][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.789048][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.816385][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.837118][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.845027][ T9305] ldm_validate_partition_table(): Disk read failed. [ 290.877071][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.898213][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.921232][ T9305] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.930606][ T9305] Buffer I/O error on dev nbd19, logical block 0, async page read [ 290.958270][ T9305] Dev nbd19: unable to read RDB block 0 [ 290.964200][ T9305] nbd19: unable to read partition table [ 290.991739][ T9305] ldm_validate_partition_table(): Disk read failed. [ 291.006159][ T9305] Dev nbd19: unable to read RDB block 0 [ 291.019902][ T9305] nbd19: unable to read partition table [ 293.095261][ T9354] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 293.315331][ T9366] xt_hashlimit: max too large, truncated to 1048576 [ 293.317065][ T9358] __nla_validate_parse: 2 callbacks suppressed [ 293.317086][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1352'. [ 293.356599][ T9366] Cannot find add_set index 0 as target [ 293.439832][ T9305] block nbd64: NBD_DISCONNECT [ 293.706055][ T9378] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1359'. [ 293.781352][ T9370] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1356'. [ 293.842148][ T9382] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1356'. [ 293.902958][ T9378] netlink: 'syz.3.1359': attribute type 30 has an invalid length. [ 294.365094][ T9401] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1366'. [ 294.377994][ T9401] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 297.121428][ T9414] bond0: (slave vlan0): Opening slave failed [ 297.134738][ T9416] tipc: Enabling of bearer rejected, failed to enable media [ 297.413708][ T9437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1378'. [ 297.704078][ T9450] trusted_key: syz.1.1385 sent an empty control message without MSG_MORE. [ 297.768152][ T9447] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 297.820605][ T9456] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1387'. [ 298.026459][ T9466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 299.973238][ T9459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1386'. [ 299.982465][ T9459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1386'. [ 300.138618][ T9476] FAULT_INJECTION: forcing a failure. [ 300.138618][ T9476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.153216][ T9476] CPU: 1 UID: 0 PID: 9476 Comm: syz.2.1392 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 300.163601][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 300.173787][ T9476] Call Trace: [ 300.177079][ T9476] [ 300.180023][ T9476] dump_stack_lvl+0x241/0x360 [ 300.184732][ T9476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.189954][ T9476] ? __pfx__printk+0x10/0x10 [ 300.194563][ T9476] ? __pfx_lock_release+0x10/0x10 [ 300.199617][ T9476] should_fail_ex+0x3b0/0x4e0 [ 300.204310][ T9476] _copy_from_user+0x2f/0xe0 [ 300.208918][ T9476] copy_msghdr_from_user+0xae/0x680 [ 300.214137][ T9476] ? timespec64_add_safe+0x1be/0x220 [ 300.219481][ T9476] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 300.226298][ T9476] do_recvmmsg+0x40f/0xae0 [ 300.230737][ T9476] ? mark_lock+0x9a/0x350 [ 300.235095][ T9476] ? __pfx_do_recvmmsg+0x10/0x10 [ 300.240068][ T9476] ? __pfx___might_resched+0x10/0x10 [ 300.245371][ T9476] ? __might_fault+0xaa/0x120 [ 300.250093][ T9476] ? __pfx_lock_release+0x10/0x10 [ 300.255134][ T9476] ? vfs_write+0x7c4/0xc90 [ 300.259582][ T9476] ? get_timespec64+0x19c/0x280 [ 300.264493][ T9476] __x64_sys_recvmmsg+0x1b8/0x250 [ 300.269552][ T9476] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 300.275125][ T9476] ? do_syscall_64+0x100/0x230 [ 300.279919][ T9476] ? do_syscall_64+0xb6/0x230 [ 300.284617][ T9476] do_syscall_64+0xf3/0x230 [ 300.289142][ T9476] ? clear_bhb_loop+0x35/0x90 [ 300.293833][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.299739][ T9476] RIP: 0033:0x7fe59857def9 [ 300.304165][ T9476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.323909][ T9476] RSP: 002b:00007fe5993aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 300.332350][ T9476] RAX: ffffffffffffffda RBX: 00007fe598735f80 RCX: 00007fe59857def9 [ 300.340358][ T9476] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 300.348341][ T9476] RBP: 00007fe5993aa090 R08: 0000000020003700 R09: 0000000000000000 [ 300.356331][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.364316][ T9476] R13: 0000000000000000 R14: 00007fe598735f80 R15: 00007ffed5523428 [ 300.372321][ T9476] [ 300.687708][ T9487] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1397'. [ 300.714404][ T9490] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1399'. [ 300.807620][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 301.313002][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 301.334013][ T9519] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1409'. [ 301.359738][ T9519] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 301.580119][ T9527] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1412'. [ 304.342279][ T9546] netlink: 'syz.2.1416': attribute type 3 has an invalid length. [ 304.352782][ T9546] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1416'. [ 304.556887][ T29] audit: type=1107 audit(1726548817.903:6): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 304.989061][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 305.023940][ T9576] vlan3: entered promiscuous mode [ 305.032619][ T9576] team0: entered promiscuous mode [ 305.042028][ T9576] team_slave_0: entered promiscuous mode [ 305.051081][ T9576] team_slave_1: entered promiscuous mode [ 305.077055][ T9583] FAULT_INJECTION: forcing a failure. [ 305.077055][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 305.092123][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.2.1430 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 305.102523][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.112624][ T9583] Call Trace: [ 305.116032][ T9583] [ 305.119014][ T9583] dump_stack_lvl+0x241/0x360 [ 305.123756][ T9583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.129026][ T9583] ? __pfx__printk+0x10/0x10 [ 305.133671][ T9583] ? __kmalloc_noprof+0xb0/0x400 [ 305.138663][ T9583] ? __pfx___might_resched+0x10/0x10 [ 305.144017][ T9583] should_fail_ex+0x3b0/0x4e0 [ 305.148809][ T9583] ? iovec_from_user+0x87/0x240 [ 305.153721][ T9583] should_failslab+0xac/0x100 [ 305.158472][ T9583] ? iovec_from_user+0x87/0x240 [ 305.163373][ T9583] __kmalloc_noprof+0xd8/0x400 [ 305.168193][ T9583] iovec_from_user+0x87/0x240 [ 305.172934][ T9583] __import_iovec+0x132/0x820 [ 305.177674][ T9583] import_iovec+0xeb/0x120 [ 305.182143][ T9583] copy_msghdr_from_user+0x52f/0x680 [ 305.187486][ T9583] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 305.193356][ T9583] do_recvmmsg+0x40f/0xae0 [ 305.197819][ T9583] ? mark_lock+0x9a/0x350 [ 305.202213][ T9583] ? __pfx_do_recvmmsg+0x10/0x10 [ 305.207226][ T9583] ? __pfx___might_resched+0x10/0x10 [ 305.212566][ T9583] ? __might_fault+0xaa/0x120 [ 305.217299][ T9583] ? __pfx_lock_release+0x10/0x10 [ 305.222378][ T9583] ? vfs_write+0x7c4/0xc90 [ 305.226863][ T9583] ? get_timespec64+0x19c/0x280 [ 305.227071][ T9576] team0: left promiscuous mode [ 305.231760][ T9583] __x64_sys_recvmmsg+0x1b8/0x250 [ 305.239354][ T9576] team_slave_0: left promiscuous mode [ 305.241525][ T9583] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 305.241562][ T9583] ? do_syscall_64+0x100/0x230 [ 305.257327][ T9583] ? do_syscall_64+0xb6/0x230 [ 305.262070][ T9583] do_syscall_64+0xf3/0x230 [ 305.263652][ T9576] team_slave_1: left promiscuous mode [ 305.266607][ T9583] ? clear_bhb_loop+0x35/0x90 [ 305.266645][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.266670][ T9583] RIP: 0033:0x7fe59857def9 [ 305.266692][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.266712][ T9583] RSP: 002b:00007fe599389038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 305.266744][ T9583] RAX: ffffffffffffffda RBX: 00007fe598736058 RCX: 00007fe59857def9 [ 305.266762][ T9583] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 305.266777][ T9583] RBP: 00007fe599389090 R08: 0000000020003700 R09: 0000000000000000 [ 305.266793][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.266808][ T9583] R13: 0000000000000000 R14: 00007fe598736058 R15: 00007ffed5523428 [ 305.356200][ T9583] [ 306.016078][ T9607] netlink: 'syz.1.1435': attribute type 2 has an invalid length. [ 306.573024][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 306.745879][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1448'. [ 308.891000][ T9633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1447'. [ 309.751311][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 309.871543][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'. [ 309.876980][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 309.914554][ T9677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1460'. [ 309.928839][ T4623] block nbd20: Receive control failed (result -107) [ 309.950914][ T9686] bond3 (unregistering): Released all slaves [ 309.976742][ T9684] nbd20: detected capacity change from 0 to 256 [ 310.001184][ T9305] block nbd20: Dead connection, failed to find a fallback [ 310.016447][ T9305] block nbd20: shutting down sockets [ 310.026926][ T9305] blk_print_req_error: 27 callbacks suppressed [ 310.026982][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.084480][ T9305] buffer_io_error: 27 callbacks suppressed [ 310.084500][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.112878][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.142027][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.169494][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.204749][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.237554][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.256988][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.265110][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.297487][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.326532][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.350655][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.361370][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.402408][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.424408][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.444073][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.466571][ T9305] ldm_validate_partition_table(): Disk read failed. [ 310.473309][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.491262][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.522975][ T9305] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.556410][ T9305] Buffer I/O error on dev nbd20, logical block 0, async page read [ 310.564509][ T9305] Dev nbd20: unable to read RDB block 0 [ 310.608020][ T9305] nbd20: unable to read partition table [ 310.638365][ T9305] ldm_validate_partition_table(): Disk read failed. [ 310.645454][ T9305] Dev nbd20: unable to read RDB block 0 [ 310.681955][ T9305] nbd20: unable to read partition table [ 313.052885][ T9716] bond0: (slave vlan0): Opening slave failed [ 313.193189][ T9735] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 313.300023][ T9744] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 313.419768][ T9749] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 313.601550][ T9757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1488'. [ 313.725635][ T9764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1490'. [ 314.111217][ T29] audit: type=1107 audit(1726548827.463:7): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 314.185124][ T9771] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 314.411418][ T9756] dccp_close: ABORT with 52 bytes unread [ 315.276401][ T4623] Bluetooth: hci0: command tx timeout [ 316.766589][ T9802] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 316.948848][ T9813] FAULT_INJECTION: forcing a failure. [ 316.948848][ T9813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.972964][ T9813] CPU: 0 UID: 0 PID: 9813 Comm: syz.1.1508 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 316.983380][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 316.993482][ T9813] Call Trace: [ 316.996804][ T9813] [ 316.999780][ T9813] dump_stack_lvl+0x241/0x360 [ 317.004528][ T9813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.009791][ T9813] ? __pfx__printk+0x10/0x10 [ 317.014442][ T9813] ? __pfx_lock_release+0x10/0x10 [ 317.019543][ T9813] should_fail_ex+0x3b0/0x4e0 [ 317.024286][ T9813] _copy_to_iter+0x43a/0x1960 [ 317.029004][ T9813] ? __virt_addr_valid+0x183/0x530 [ 317.034143][ T9813] ? __pfx__copy_to_iter+0x10/0x10 [ 317.039275][ T9813] ? __virt_addr_valid+0x183/0x530 [ 317.044398][ T9813] ? __virt_addr_valid+0x183/0x530 [ 317.049952][ T9813] ? __virt_addr_valid+0x45f/0x530 [ 317.055106][ T9813] ? __phys_addr_symbol+0x2f/0x70 [ 317.060153][ T9813] ? __check_object_size+0x49c/0x900 [ 317.065494][ T9813] __skb_datagram_iter+0x107/0x900 [ 317.070652][ T9813] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 317.076321][ T9813] skb_copy_datagram_iter+0xd1/0x250 [ 317.081638][ T9813] netlink_recvmsg+0x2d0/0x11d0 [ 317.086528][ T9813] ? __pfx_netlink_recvmsg+0x10/0x10 [ 317.091833][ T9813] ? iovec_from_user+0x87/0x240 [ 317.096699][ T9813] ? iovec_from_user+0x87/0x240 [ 317.101560][ T9813] ? iovec_from_user+0x87/0x240 [ 317.106421][ T9813] ? __pfx_aa_sk_perm+0x10/0x10 [ 317.111283][ T9813] ? aa_sock_msg_perm+0x91/0x160 [ 317.116238][ T9813] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 317.121537][ T9813] ? security_socket_recvmsg+0x90/0xb0 [ 317.127011][ T9813] ? __pfx_netlink_recvmsg+0x10/0x10 [ 317.132323][ T9813] sock_recvmsg+0x22f/0x280 [ 317.136845][ T9813] ____sys_recvmsg+0x1db/0x470 [ 317.141624][ T9813] ? __pfx_____sys_recvmsg+0x10/0x10 [ 317.146938][ T9813] do_recvmmsg+0x474/0xae0 [ 317.151371][ T9813] ? mark_lock+0x9a/0x350 [ 317.155733][ T9813] ? __pfx_do_recvmmsg+0x10/0x10 [ 317.160707][ T9813] ? __pfx___might_resched+0x10/0x10 [ 317.166008][ T9813] ? __might_fault+0xaa/0x120 [ 317.170700][ T9813] ? __pfx_lock_release+0x10/0x10 [ 317.175739][ T9813] ? vfs_write+0x7c4/0xc90 [ 317.180185][ T9813] ? get_timespec64+0x19c/0x280 [ 317.185070][ T9813] __x64_sys_recvmmsg+0x1b8/0x250 [ 317.190115][ T9813] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 317.195673][ T9813] ? do_syscall_64+0x100/0x230 [ 317.200456][ T9813] ? do_syscall_64+0xb6/0x230 [ 317.205181][ T9813] do_syscall_64+0xf3/0x230 [ 317.209703][ T9813] ? clear_bhb_loop+0x35/0x90 [ 317.214392][ T9813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.220296][ T9813] RIP: 0033:0x7f5ec4d7def9 [ 317.224742][ T9813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.244361][ T9813] RSP: 002b:00007f5ec5be5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 317.252798][ T9813] RAX: ffffffffffffffda RBX: 00007f5ec4f35f80 RCX: 00007f5ec4d7def9 [ 317.260788][ T9813] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 317.268770][ T9813] RBP: 00007f5ec5be5090 R08: 0000000020003700 R09: 0000000000000000 [ 317.276778][ T9813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.284766][ T9813] R13: 0000000000000000 R14: 00007f5ec4f35f80 R15: 00007ffc273bed78 [ 317.292771][ T9813] [ 317.530632][ T9828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 317.602074][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.675240][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 317.716574][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 317.725563][ T9832] nbd: socks must be embedded in a SOCK_ITEM attr [ 317.907815][ T9836] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 317.985081][ T9840] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1519'. [ 318.063185][ T9843] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 318.123272][ T9846] x_tables: ip_tables: ah match: only valid for protocol 51 [ 318.790739][ T4623] Bluetooth: hci0: command tx timeout [ 320.340159][ T9838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1518'. [ 320.349839][ T9840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1519'. [ 320.368123][ T9844] netlink: 'syz.1.1519': attribute type 4 has an invalid length. [ 320.449470][ T9851] veth0_to_bond: entered allmulticast mode [ 320.587963][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 320.858075][ T9881] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 320.924239][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 320.986748][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 321.031902][ T4623] block nbd21: Receive control failed (result -107) [ 321.066668][ T9884] nbd21: detected capacity change from 0 to 256 [ 321.074480][ T9305] block nbd21: Dead connection, failed to find a fallback [ 321.096814][ T9305] block nbd21: shutting down sockets [ 321.102183][ T9305] blk_print_req_error: 27 callbacks suppressed [ 321.102200][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.136448][ T9305] buffer_io_error: 27 callbacks suppressed [ 321.136471][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.152227][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.162967][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.171511][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.173103][ T9887] block nbd1: NBD_DISCONNECT [ 321.182485][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.194115][ T9887] block nbd1: Send disconnect failed -32 [ 321.203947][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.213604][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.222079][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.235001][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.243606][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.275329][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.289260][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.300340][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.317962][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.330582][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.339429][ T9305] ldm_validate_partition_table(): Disk read failed. [ 321.347173][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.358068][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.370619][ T9305] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 321.385172][ T9305] Buffer I/O error on dev nbd21, logical block 0, async page read [ 321.401550][ T9305] Dev nbd21: unable to read RDB block 0 [ 321.447800][ T9305] nbd21: unable to read partition table [ 321.507772][ T9305] ldm_validate_partition_table(): Disk read failed. [ 321.514747][ T9305] Dev nbd21: unable to read RDB block 0 [ 321.576729][ T9305] nbd21: unable to read partition table [ 322.906505][ T4623] Bluetooth: hci0: command tx timeout [ 356.540505][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.551250][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.560439][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.589236][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.638427][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.647596][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.707565][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.717520][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.726411][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.734790][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.744197][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.754833][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.911910][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.922111][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.941817][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.957060][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.982336][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.997254][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.008513][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 357.047731][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 357.058391][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 357.078450][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 357.085076][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.088192][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 357.098341][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.100573][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.119600][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.130011][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.146986][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 357.163035][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.597590][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 358.835185][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 358.874676][ T9904] chnl_net:caif_netlink_parms(): no params data found [ 358.876391][ T5233] Bluetooth: hci0: command tx timeout [ 358.890239][ T4623] Bluetooth: hci3: command tx timeout [ 359.032927][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 359.106776][ T5233] Bluetooth: hci1: command tx timeout [ 359.115389][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.124410][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.132169][ T9902] bridge_slave_0: entered allmulticast mode [ 359.140921][ T9902] bridge_slave_0: entered promiscuous mode [ 359.207788][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.215048][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.222716][ T9902] bridge_slave_1: entered allmulticast mode [ 359.230585][ T9902] bridge_slave_1: entered promiscuous mode [ 359.252803][ T9906] chnl_net:caif_netlink_parms(): no params data found [ 359.268098][ T5233] Bluetooth: hci4: command tx timeout [ 359.274399][ T5233] Bluetooth: hci5: command tx timeout [ 359.291336][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.298750][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.306015][ T9900] bridge_slave_0: entered allmulticast mode [ 359.313536][ T9900] bridge_slave_0: entered promiscuous mode [ 359.382045][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.389734][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.399291][ T9900] bridge_slave_1: entered allmulticast mode [ 359.406523][ T9900] bridge_slave_1: entered promiscuous mode [ 359.418762][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.433317][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.545547][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.552994][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.560929][ T9904] bridge_slave_0: entered allmulticast mode [ 359.569008][ T9904] bridge_slave_0: entered promiscuous mode [ 359.578522][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.585698][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.593458][ T9904] bridge_slave_1: entered allmulticast mode [ 359.600926][ T9904] bridge_slave_1: entered promiscuous mode [ 359.683847][ T9902] team0: Port device team_slave_0 added [ 359.745464][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.753352][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.763022][ T9908] bridge_slave_0: entered allmulticast mode [ 359.770369][ T9908] bridge_slave_0: entered promiscuous mode [ 359.780589][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.788209][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.795547][ T9908] bridge_slave_1: entered allmulticast mode [ 359.803356][ T9908] bridge_slave_1: entered promiscuous mode [ 359.813827][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.829973][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.842331][ T9902] team0: Port device team_slave_1 added [ 359.873125][ T9904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.963972][ T9904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.994979][ T9906] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.002700][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.010736][ T9906] bridge_slave_0: entered allmulticast mode [ 360.018486][ T9906] bridge_slave_0: entered promiscuous mode [ 360.050660][ T9900] team0: Port device team_slave_0 added [ 360.078370][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.085368][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.111532][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.139779][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.153220][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.161865][ T9906] bridge_slave_1: entered allmulticast mode [ 360.175040][ T9906] bridge_slave_1: entered promiscuous mode [ 360.185701][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.198769][ T9900] team0: Port device team_slave_1 added [ 360.205444][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.212804][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.239124][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.274499][ T9904] team0: Port device team_slave_0 added [ 360.310671][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.349478][ T9904] team0: Port device team_slave_1 added [ 360.411236][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.418914][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.446315][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.494971][ T9906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.536061][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.543718][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.580543][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.592799][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.600564][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.628707][ T9904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.642183][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.650248][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.677705][ T9904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.693755][ T9906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.722901][ T9908] team0: Port device team_slave_0 added [ 360.737255][ T9908] team0: Port device team_slave_1 added [ 360.803229][ T9906] team0: Port device team_slave_0 added [ 360.831763][ T9902] hsr_slave_0: entered promiscuous mode [ 360.841201][ T9902] hsr_slave_1: entered promiscuous mode [ 360.848402][ T9902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.855995][ T9902] Cannot create hsr debugfs directory [ 360.873677][ T9906] team0: Port device team_slave_1 added [ 360.941276][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.949444][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.976760][ T5233] Bluetooth: hci0: command tx timeout [ 360.982956][ T5233] Bluetooth: hci3: command tx timeout [ 360.989903][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.053807][ T9904] hsr_slave_0: entered promiscuous mode [ 361.060997][ T9904] hsr_slave_1: entered promiscuous mode [ 361.069286][ T9904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.077849][ T9904] Cannot create hsr debugfs directory [ 361.104257][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.111813][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.138776][ T9906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.154038][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.161933][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.189637][ T5233] Bluetooth: hci1: command tx timeout [ 361.195158][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.195960][ T4685] udevd[4685]: worker [7493] /devices/virtual/block/nbd10 is taking a long time [ 361.216031][ T4685] udevd[4685]: worker [7300] /devices/virtual/block/nbd9 is taking a long time [ 361.225472][ T4685] udevd[4685]: worker [5784] /devices/virtual/block/nbd6 is taking a long time [ 361.234611][ T4685] udevd[4685]: worker [7834] /devices/virtual/block/nbd11 is taking a long time [ 361.243852][ T4685] udevd[4685]: worker [8516] /devices/virtual/block/nbd15 is taking a long time [ 361.254487][ T4685] udevd[4685]: worker [9074] /devices/virtual/block/nbd18 is taking a long time [ 361.255103][ T9900] hsr_slave_0: entered promiscuous mode [ 361.263923][ T4685] udevd[4685]: worker [5884] /devices/virtual/block/nbd8 is taking a long time [ 361.264010][ T4685] udevd[4685]: worker [6006] /devices/virtual/block/nbd17 is taking a long time [ 361.294964][ T9900] hsr_slave_1: entered promiscuous mode [ 361.303514][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.311336][ T9900] Cannot create hsr debugfs directory [ 361.356273][ T5233] Bluetooth: hci5: command tx timeout [ 361.356429][ T4623] Bluetooth: hci4: command tx timeout [ 361.374519][ T9906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.382469][ T9906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.409931][ T9906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.673024][ T9908] hsr_slave_0: entered promiscuous mode [ 361.681731][ T9908] hsr_slave_1: entered promiscuous mode [ 361.689700][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.699471][ T9908] Cannot create hsr debugfs directory [ 361.711482][ T9906] hsr_slave_0: entered promiscuous mode [ 361.718678][ T9906] hsr_slave_1: entered promiscuous mode [ 361.725089][ T9906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.733226][ T9906] Cannot create hsr debugfs directory [ 362.025698][ T9902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.165296][ T9902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.285044][ T9902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.379524][ T9902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.530005][ T9900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.627393][ T9900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.698763][ T9900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.780510][ T9900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.926617][ T9904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.012736][ T9904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.027879][ T4623] Bluetooth: hci3: command tx timeout [ 363.033550][ T4623] Bluetooth: hci0: command tx timeout [ 363.123286][ T9904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.211427][ T9904] tipc: Disabling bearer [ 363.218414][ T9904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.267184][ T4623] Bluetooth: hci1: command tx timeout [ 363.350720][ T9908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.430039][ T4623] Bluetooth: hci4: command tx timeout [ 363.436502][ T4623] Bluetooth: hci5: command tx timeout [ 363.459113][ T9908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.543797][ T9908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.626499][ T9908] team0: Port device netdevsim0 removed [ 363.635145][ T9908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.787447][ T9908] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.830614][ T9906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.841660][ T9906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.861370][ T9908] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.872224][ T9908] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.883063][ T9908] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.960481][ T9906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.971974][ T9906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.068170][ T9906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.079414][ T9906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.122736][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.145247][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.194415][ T9906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.206889][ T9906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.231389][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.238595][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.265624][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.272875][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.473845][ T9906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.510224][ T9906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.532292][ T9906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.569612][ T9906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.640121][ T9902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.653478][ T9902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.693961][ T9902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.705591][ T9902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.817626][ T9900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.836003][ T9900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.855827][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.911526][ T9900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.957706][ T9900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.107585][ T4623] Bluetooth: hci3: command tx timeout [ 365.113190][ T4623] Bluetooth: hci0: command tx timeout [ 365.196963][ T9904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.245866][ T9904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.306347][ T9904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.318498][ T9904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.348928][ T4623] Bluetooth: hci1: command tx timeout [ 365.380323][ T9906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.452890][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.513232][ T9906] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.513368][ T4623] Bluetooth: hci5: command tx timeout [ 365.526035][ T5233] Bluetooth: hci4: command tx timeout [ 365.569461][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.576876][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.590656][ T9908] veth0_vlan: entered promiscuous mode [ 365.625176][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.632383][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.681616][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.697758][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.748063][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.755295][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.794910][ T9908] veth1_vlan: entered promiscuous mode [ 365.846528][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.853735][ T5477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.917527][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.003532][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.010804][ T5477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.033214][ T9908] veth0_macvtap: entered promiscuous mode [ 366.063846][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.089579][ T9908] veth1_macvtap: entered promiscuous mode [ 366.106118][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.113413][ T5477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.239046][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.277069][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.306920][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.330838][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.342636][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.354008][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.364096][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.374685][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.389031][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.402381][ T9904] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.438283][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.460212][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.476808][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.499483][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.510649][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.521273][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.531519][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.543514][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.559531][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.577672][ T9908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.587682][ T9908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.597328][ T9908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.606076][ T9908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.648764][ T9906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.668696][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.675907][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.685913][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.693098][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.782464][ T9900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.910522][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.985345][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.026094][ T9906] veth0_vlan: entered promiscuous mode [ 367.029243][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.184440][ T9906] veth1_vlan: entered promiscuous mode [ 367.223177][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.256396][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.361386][ T9902] veth0_vlan: entered promiscuous mode [ 367.384180][ T9906] veth0_macvtap: entered promiscuous mode [ 367.405778][ T9904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.449293][ T9902] veth1_vlan: entered promiscuous mode [ 367.479892][ T9906] veth1_macvtap: entered promiscuous mode [ 367.545005][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.643171][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.665203][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.682046][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.706673][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.726298][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.746100][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.761306][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.773585][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.784317][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.795698][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.811854][ T9906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.898849][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.931393][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.953910][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.964943][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.977622][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.989921][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.000676][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.011543][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.022672][ T9906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.035302][ T9906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.049640][ T9906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.090872][ T9902] veth0_macvtap: entered promiscuous mode [ 368.111265][ T9906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.120967][ T9906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.130452][ T9906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.140142][ T9906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.170735][ T9902] veth1_macvtap: entered promiscuous mode [ 368.202895][ T9904] veth0_vlan: entered promiscuous mode [ 368.263405][ T9904] veth1_vlan: entered promiscuous mode [ 368.291779][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.304106][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.317393][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.330951][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.341022][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.353478][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.363917][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.375905][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.385920][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.398225][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.408191][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.418833][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.431270][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.526719][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.538600][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.559906][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.571110][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.581987][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.593211][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.603515][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.614938][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.625189][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.637939][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.647939][ T9902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.662129][ T9902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.674288][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.686796][ T9902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.695635][ T9902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.708637][ T9902] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.717525][ T9902] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.751777][ T9904] veth0_macvtap: entered promiscuous mode [ 368.765627][ T9900] veth0_vlan: entered promiscuous mode [ 368.791865][ T9904] veth1_macvtap: entered promiscuous mode [ 368.799406][ T9975] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 368.840592][ T5477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.871417][ T9900] veth1_vlan: entered promiscuous mode [ 368.880882][ T5477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.884067][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.903005][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.925435][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.937794][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.949909][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.968034][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.981906][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.992983][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.003289][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.016054][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.026048][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.037620][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.048744][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.059330][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.078494][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.174733][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.181356][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.207300][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.216235][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.246083][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.259728][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.275595][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.286445][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.297591][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.316302][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.339173][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.387838][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.406436][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.425002][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.448837][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.464926][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.479696][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.528565][ T9904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.539135][ T9904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.548168][ T9904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.557436][ T9904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.683583][ T9900] veth0_macvtap: entered promiscuous mode [ 369.763287][ T9900] veth1_macvtap: entered promiscuous mode [ 369.769584][ T5468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.815085][ T5468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.872570][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 369.894644][ T9996] vlan2: entered promiscuous mode [ 369.903152][ T9996] team0: entered promiscuous mode [ 369.912398][ T9996] team_slave_0: entered promiscuous mode [ 369.923307][ T9996] team_slave_1: entered promiscuous mode [ 369.933604][ T9996] team0: left promiscuous mode [ 369.938789][ T9996] team_slave_0: left promiscuous mode [ 369.944602][ T9996] team_slave_1: left promiscuous mode [ 369.992570][ T5233] Bluetooth: hci0: command 0x0401 tx timeout [ 370.179915][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.197742][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.198408][ T5477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.218086][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.223407][ T5477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.232049][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.243935][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.257752][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.268325][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.280926][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.291443][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.311483][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.322916][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.333812][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.344304][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.355241][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.365182][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.378884][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.391574][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.404760][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.422698][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.449616][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.461156][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.473157][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.489277][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.507751][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.524420][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.534753][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.554954][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.565803][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.576781][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.593989][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.605719][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.616358][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.627760][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.638564][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.650201][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.687674][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.701110][ T9999] syz.4.1549 (9999) used greatest stack depth: 18992 bytes left [ 370.828735][ T9900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.859551][ T9900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.884279][ T9900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.906294][ T9900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.906843][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1551'. [ 371.007412][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.042438][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.285468][T10015] x_tables: ip_tables: osf match: only valid for protocol 6 [ 371.350857][T10018] block nbd3: NBD_DISCONNECT [ 371.365867][T10018] block nbd3: Send disconnect failed -32 [ 371.380946][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.403315][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.561943][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.599174][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.635919][T10023] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1557'. [ 371.713783][T10023] FAULT_INJECTION: forcing a failure. [ 371.713783][T10023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.735985][T10023] CPU: 0 UID: 0 PID: 10023 Comm: syz.3.1557 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 371.746481][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 371.756581][T10023] Call Trace: [ 371.759888][T10023] [ 371.762850][T10023] dump_stack_lvl+0x241/0x360 [ 371.767592][T10023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.772847][T10023] ? __pfx__printk+0x10/0x10 [ 371.777538][T10023] ? __pfx_lock_release+0x10/0x10 [ 371.779743][T10028] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1558'. [ 371.782598][T10023] should_fail_ex+0x3b0/0x4e0 [ 371.796237][T10023] _copy_from_iter+0x1f6/0x1960 [ 371.801109][T10023] ? __virt_addr_valid+0x183/0x530 [ 371.806232][T10023] ? __pfx_lock_release+0x10/0x10 [ 371.811281][T10023] ? __alloc_skb+0x28f/0x440 [ 371.815890][T10023] ? __pfx__copy_from_iter+0x10/0x10 [ 371.821189][T10023] ? __virt_addr_valid+0x183/0x530 [ 371.826306][T10023] ? __virt_addr_valid+0x183/0x530 [ 371.831425][T10023] ? __virt_addr_valid+0x45f/0x530 [ 371.836562][T10023] ? __check_object_size+0x49c/0x900 [ 371.841920][T10023] netlink_sendmsg+0x73d/0xcb0 [ 371.846742][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.852057][T10023] ? __import_iovec+0x536/0x820 [ 371.856920][T10023] ? aa_sock_msg_perm+0x91/0x160 [ 371.861875][T10023] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 371.867176][T10023] ? security_socket_sendmsg+0x87/0xb0 [ 371.872653][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.878606][T10023] __sock_sendmsg+0x221/0x270 [ 371.883416][T10023] ____sys_sendmsg+0x525/0x7d0 [ 371.888389][T10023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.893712][T10023] __sys_sendmsg+0x2b0/0x3a0 [ 371.898347][T10023] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.903482][T10023] ? vfs_write+0x7c4/0xc90 [ 371.908034][T10023] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 371.914463][T10023] ? do_syscall_64+0x100/0x230 [ 371.919387][T10023] ? do_syscall_64+0xb6/0x230 [ 371.924101][T10023] do_syscall_64+0xf3/0x230 [ 371.928636][T10023] ? clear_bhb_loop+0x35/0x90 [ 371.933337][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.939266][T10023] RIP: 0033:0x7f11b237def9 [ 371.943722][T10023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.963347][T10023] RSP: 002b:00007f11b3104038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.971782][T10023] RAX: ffffffffffffffda RBX: 00007f11b2535f80 RCX: 00007f11b237def9 [ 371.979778][T10023] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 371.988025][T10023] RBP: 00007f11b3104090 R08: 0000000000000000 R09: 0000000000000000 [ 371.996179][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.004161][T10023] R13: 0000000000000000 R14: 00007f11b2535f80 R15: 00007ffcec021488 [ 372.012156][T10023] [ 372.397380][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 372.459031][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 372.487615][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 372.497730][T10045] veth1_macvtap: entered allmulticast mode [ 372.511370][T10045] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1561'. [ 372.525154][T10045] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 372.536423][ T5233] block nbd1: Receive control failed (result -107) [ 372.566509][T10036] nbd1: detected capacity change from 0 to 256 [ 372.598127][ T9305] block nbd1: Dead connection, failed to find a fallback [ 372.887314][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 372.967509][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1569'. [ 373.010980][ T29] audit: type=1107 audit(1726548886.353:8): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 373.342071][T10074] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 373.663618][T10086] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 373.835125][T10082] FAULT_INJECTION: forcing a failure. [ 373.835125][T10082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.939496][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.3.1578 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 373.949991][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 373.960091][T10082] Call Trace: [ 373.963423][T10082] [ 373.966400][T10082] dump_stack_lvl+0x241/0x360 [ 373.971147][T10082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.976408][T10082] ? __pfx__printk+0x10/0x10 [ 373.981077][T10082] should_fail_ex+0x3b0/0x4e0 [ 373.986107][T10082] prepare_alloc_pages+0x1da/0x5d0 [ 373.991297][T10082] __alloc_pages_noprof+0x166/0x6c0 [ 373.996559][T10082] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 374.002365][T10082] alloc_pages_mpol_noprof+0x3e8/0x680 [ 374.007896][T10082] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 374.013941][T10082] ? page_ext_put+0x97/0xc0 [ 374.018510][T10082] ? alloc_pages_noprof+0xef/0x170 [ 374.023695][T10082] pte_alloc_one+0x88/0x5d0 [ 374.028280][T10082] ? __pfx_pte_alloc_one+0x10/0x10 [ 374.033540][T10082] ? mark_lock+0x9a/0x350 [ 374.037938][T10082] ? __lock_acquire+0x137a/0x2040 [ 374.043025][T10082] __pte_alloc+0x79/0x3a0 [ 374.047397][T10082] ? mark_lock+0x9a/0x350 [ 374.051784][T10082] ? __pfx___pte_alloc+0x10/0x10 [ 374.056772][T10082] ? __lock_acquire+0x137a/0x2040 [ 374.061870][T10082] handle_pte_fault+0x55cd/0x6fc0 [ 374.066963][T10082] ? validate_chain+0x11e/0x5900 [ 374.071943][T10082] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 374.077705][T10082] ? __pfx_lock_acquire+0x10/0x10 [ 374.082779][T10082] ? __pfx_handle_pte_fault+0x10/0x10 [ 374.088203][T10082] ? mark_lock+0x9a/0x350 [ 374.092602][T10082] ? __lock_acquire+0x137a/0x2040 [ 374.097736][T10082] handle_mm_fault+0x1109/0x1bc0 [ 374.102774][T10082] ? __pfx_handle_mm_fault+0x10/0x10 [ 374.108135][T10082] ? __pfx_find_vma+0x10/0x10 [ 374.112872][T10082] ? vma_is_secretmem+0xd/0x50 [ 374.117690][T10082] ? check_vma_flags+0x500/0x5a0 [ 374.122701][T10082] __get_user_pages+0x6ec/0x16a0 [ 374.127723][T10082] ? __gup_longterm_locked+0xd11/0x17d0 [ 374.133336][T10082] ? __pfx___get_user_pages+0x10/0x10 [ 374.138809][T10082] __gup_longterm_locked+0xed7/0x17d0 [ 374.144345][T10082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 374.150735][T10082] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 374.156781][T10082] ? gup_fast_fallback+0x221d/0x2b50 [ 374.162124][T10082] gup_fast_fallback+0x2742/0x2b50 [ 374.167513][T10082] ? __pfx_gup_fast_fallback+0x10/0x10 [ 374.173051][T10082] ? sha512_generic_block_fn+0x1a71/0x1b30 [ 374.178915][T10082] ? kasan_check_range+0x86/0x290 [ 374.184006][T10082] ? __asan_memset+0x23/0x50 [ 374.188654][T10082] ? sha512_generic_block_fn+0x1ac5/0x1b30 [ 374.194532][T10082] ? is_valid_gup_args+0x124/0x200 [ 374.199716][T10082] pin_user_pages_fast+0xcc/0x160 [ 374.204812][T10082] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 374.210525][T10082] iov_iter_extract_pages+0x3db/0x720 [ 374.215978][T10082] extract_iter_to_sg+0x890/0x22b0 [ 374.221146][T10082] ? sg_next+0x7d/0xb0 [ 374.225310][T10082] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 374.230905][T10082] ? unpin_user_page+0xe0/0x1e0 [ 374.235810][T10082] ? __pfx_unpin_user_page+0x10/0x10 [ 374.241151][T10082] ? __local_bh_enable_ip+0x168/0x200 [ 374.246578][T10082] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 374.252364][T10082] ? do_raw_spin_unlock+0x13c/0x8b0 [ 374.257725][T10082] ? __asan_memset+0x23/0x50 [ 374.262371][T10082] hash_sendmsg+0x513/0x1110 [ 374.267044][T10082] ? __pfx_hash_sendmsg+0x10/0x10 [ 374.272129][T10082] __sock_sendmsg+0x221/0x270 [ 374.276860][T10082] ____sys_sendmsg+0x525/0x7d0 [ 374.281826][T10082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.287184][T10082] __sys_sendmmsg+0x3b2/0x740 [ 374.291939][T10082] ? __pfx___sys_sendmmsg+0x10/0x10 [ 374.297252][T10082] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 374.303205][T10082] ? ksys_write+0x23e/0x2c0 [ 374.307759][T10082] ? __pfx_lock_release+0x10/0x10 [ 374.312853][T10082] ? vfs_write+0x7c4/0xc90 [ 374.317324][T10082] ? __mutex_unlock_slowpath+0x21d/0x750 [ 374.322998][T10082] ? __pfx_vfs_write+0x10/0x10 [ 374.327837][T10082] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 374.333874][T10082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 374.340258][T10082] ? do_syscall_64+0x100/0x230 [ 374.345089][T10082] __x64_sys_sendmmsg+0xa0/0xb0 [ 374.349993][T10082] do_syscall_64+0xf3/0x230 [ 374.354558][T10082] ? clear_bhb_loop+0x35/0x90 [ 374.359295][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.365236][T10082] RIP: 0033:0x7f11b237def9 [ 374.369699][T10082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.389355][T10082] RSP: 002b:00007f11b3104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 374.397823][T10082] RAX: ffffffffffffffda RBX: 00007f11b2535f80 RCX: 00007f11b237def9 [ 374.405847][T10082] RDX: 04924924924924b9 RSI: 0000000020000400 RDI: 0000000000000008 [ 374.413869][T10082] RBP: 00007f11b3104090 R08: 0000000000000000 R09: 0000000000000000 [ 374.421894][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.430088][T10082] R13: 0000000000000000 R14: 00007f11b2535f80 R15: 00007ffcec021488 [ 374.438130][T10082] [ 374.587801][ T5233] block nbd3: Receive control failed (result -107) [ 374.646287][T10104] nbd3: detected capacity change from 0 to 256 [ 374.720959][ T9710] block nbd3: Dead connection, failed to find a fallback [ 374.820936][T10114] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 374.829720][T10115] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 374.850719][T10114] sch_tbf: peakrate 6 is lower than or equals to rate 7694164503644904053 ! [ 374.932605][T10123] __nla_validate_parse: 8 callbacks suppressed [ 374.932630][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 374.978234][T10123] veth1_macvtap: left allmulticast mode [ 375.014937][T10123] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1594'. [ 375.030886][ T29] audit: type=1107 audit(1726548888.383:9): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 375.057484][T10123] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 375.182003][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 375.203418][T10119] netlink: 'syz.3.1591': attribute type 29 has an invalid length. [ 375.215165][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 375.402977][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 375.539265][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 375.550563][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 375.619055][ T4623] block nbd22: Receive control failed (result -107) [ 375.676434][T10136] nbd22: detected capacity change from 0 to 9007199254741248 [ 375.707046][ T9325] block nbd22: Dead connection, failed to find a fallback [ 375.756684][ T9325] block nbd22: shutting down sockets [ 375.762067][ T9325] blk_print_req_error: 27 callbacks suppressed [ 375.762086][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.792119][T10150] Cannot find del_set index 0 as target [ 375.876748][ T9325] buffer_io_error: 27 callbacks suppressed [ 375.876768][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 375.933717][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.980288][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'. [ 375.983124][T10156] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1604'. [ 375.995689][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.046730][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.078892][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.116630][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.125920][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.181815][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.241097][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.263814][T10167] xt_l2tp: v2 sid > 0xffff: 262144 [ 376.271563][T10166] vlan2: entered promiscuous mode [ 376.278727][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.299030][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.317770][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.362600][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.375447][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.377946][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 376.398968][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.422769][ T9325] ldm_validate_partition_table(): Disk read failed. [ 376.461402][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.500874][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.526484][ T9325] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 376.554558][ T9325] Buffer I/O error on dev nbd22, logical block 0, async page read [ 376.585340][ T9325] Dev nbd22: unable to read RDB block 0 [ 376.600605][ T9325] nbd22: unable to read partition table [ 376.655679][ T9325] ldm_validate_partition_table(): Disk read failed. [ 376.692097][ T9325] Dev nbd22: unable to read RDB block 0 [ 376.714418][ T9325] nbd22: unable to read partition table [ 376.927147][ T29] audit: type=1107 audit(1726548890.283:10): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 377.185533][T10192] delete_channel: no stack [ 377.233473][T10194] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 377.353165][T10197] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 377.368466][T10197] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 377.405701][T10197] bond1: (slave ip6gre1): making interface the new active one [ 377.418478][T10197] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 378.256783][T10227] tipc: Started in network mode [ 378.272675][T10227] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 378.310488][T10227] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 378.323144][T10227] tipc: Enabled bearer , priority 10 [ 378.640300][ T4623] block nbd23: Receive control failed (result -107) [ 378.696269][T10239] nbd23: detected capacity change from 0 to 256 [ 378.719442][ T9325] block nbd23: Dead connection, failed to find a fallback [ 379.036973][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.203554][T10255] netem: change failed [ 379.446725][ T5279] tipc: Node number set to 1 [ 379.494493][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 379.868241][T10274] IPv6: Can't replace route, no match found [ 379.946019][T10275] __nla_validate_parse: 13 callbacks suppressed [ 379.946055][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'. [ 380.121657][T10286] Bluetooth: MGMT ver 1.23 [ 380.141367][T10282] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 380.454289][T10298] FAULT_INJECTION: forcing a failure. [ 380.454289][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 380.499943][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.2.1661 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 380.510447][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 380.520546][T10298] Call Trace: [ 380.523891][T10298] [ 380.526863][T10298] dump_stack_lvl+0x241/0x360 [ 380.531603][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.536857][T10298] ? __pfx__printk+0x10/0x10 [ 380.541506][T10298] ? fs_reclaim_acquire+0x93/0x140 [ 380.546675][T10298] ? __pfx___might_resched+0x10/0x10 [ 380.552023][T10298] ? dynamic_dname+0x141/0x1b0 [ 380.556862][T10298] should_fail_ex+0x3b0/0x4e0 [ 380.561616][T10298] ? tomoyo_encode+0x26f/0x540 [ 380.566432][T10298] should_failslab+0xac/0x100 [ 380.571171][T10298] ? tomoyo_encode+0x26f/0x540 [ 380.575979][T10298] __kmalloc_noprof+0xd8/0x400 [ 380.580797][T10298] tomoyo_encode+0x26f/0x540 [ 380.585529][T10298] ? __pfx_sockfs_dname+0x10/0x10 [ 380.590620][T10298] tomoyo_realpath_from_path+0x59e/0x5e0 [ 380.596337][T10298] tomoyo_path_number_perm+0x23a/0x880 [ 380.601879][T10298] ? tomoyo_path_number_perm+0x208/0x880 [ 380.607587][T10298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.613700][T10298] ? __fget_files+0x29/0x470 [ 380.618372][T10298] ? __fget_files+0x3f6/0x470 [ 380.623104][T10298] ? __fget_files+0x29/0x470 [ 380.627762][T10298] security_file_ioctl+0x75/0xb0 [ 380.632776][T10298] __se_sys_ioctl+0x47/0x170 [ 380.637425][T10298] do_syscall_64+0xf3/0x230 [ 380.641993][T10298] ? clear_bhb_loop+0x35/0x90 [ 380.646741][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652690][T10298] RIP: 0033:0x7f581377def9 [ 380.657163][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.677059][T10298] RSP: 002b:00007f5814519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.685567][T10298] RAX: ffffffffffffffda RBX: 00007f5813935f80 RCX: 00007f581377def9 [ 380.693598][T10298] RDX: 00000000200000c0 RSI: 00000000800448f0 RDI: 0000000000000004 [ 380.701614][T10298] RBP: 00007f5814519090 R08: 0000000000000000 R09: 0000000000000000 [ 380.709630][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.717648][T10298] R13: 0000000000000000 R14: 00007f5813935f80 R15: 00007ffec2cca1c8 [ 380.725709][T10298] [ 380.792707][T10298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.008367][T10319] Cannot find add_set index 0 as target [ 381.184031][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 381.565245][T10339] tipc: Started in network mode [ 381.578214][T10339] tipc: Node identity 7f000001, cluster identity 4711 [ 381.587720][ T30] INFO: task udevd:5784 blocked for more than 143 seconds. [ 381.597515][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 381.603739][T10339] tipc: Enabled bearer , priority 10 [ 381.615681][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.635374][ T30] task:udevd state:D stack:21104 pid:5784 tgid:5784 ppid:4685 flags:0x00004002 [ 381.659995][ T30] Call Trace: [ 381.676271][ T30] [ 381.683261][ T30] __schedule+0x1800/0x4a60 [ 381.699863][ T30] ? __pfx___schedule+0x10/0x10 [ 381.718973][ T30] ? __blk_flush_plug+0x449/0x500 [ 381.730722][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.735822][ T30] ? __asan_memset+0x23/0x50 [ 381.766754][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 381.772710][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.793049][ T30] ? schedule+0x90/0x320 [ 381.798180][ T30] schedule+0x14b/0x320 [ 381.802429][ T30] schedule_timeout+0x1be/0x310 [ 381.816766][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 381.822260][ T30] ? __pfx_process_timeout+0x10/0x10 [ 381.837429][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 381.843103][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 381.853241][ T30] ? __pfx_validate_chain+0x10/0x10 [ 381.863358][ T30] ? validate_chain+0x11e/0x5900 [ 381.873487][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 381.883607][ T30] ? __lock_acquire+0x137a/0x2040 [ 381.893747][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 381.903866][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 381.914271][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 381.926298][ T30] ? sbitmap_get+0x289/0x3f0 [ 381.930969][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 381.946651][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 381.952548][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 381.961033][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 381.968218][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 381.976636][ T30] ? __pfx___might_resched+0x10/0x10 [ 381.982006][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 381.990381][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 381.995736][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 382.016493][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 382.021883][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 382.036252][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 382.042230][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 382.056583][ T30] __blk_flush_plug+0x420/0x500 [ 382.061531][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 382.066965][ T4623] Bluetooth: hci0: command 0x0401 tx timeout [ 382.068355][ T5233] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 382.084063][T10295] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 382.096317][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 382.101631][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 382.109264][T10298] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 382.136656][ T30] __submit_bio+0x422/0x560 [ 382.146065][ T30] ? __pfx___submit_bio+0x10/0x10 [ 382.156447][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 382.163110][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 382.170262][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 382.178503][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 382.184883][ T30] ? __pfx___might_resched+0x10/0x10 [ 382.190432][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 382.199092][ T30] block_read_full_folio+0x93b/0xcd0 [ 382.204600][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 382.210349][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 382.216517][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 382.221694][ T30] ? folio_add_lru+0x357/0xd70 [ 382.228526][ T30] ? folio_add_lru+0x58f/0xd70 [ 382.233736][ T30] filemap_read_folio+0x1a0/0x790 [ 382.239276][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 382.245045][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 382.250878][ T30] ? __filemap_get_folio+0x984/0xc10 [ 382.256615][ T30] do_read_cache_folio+0x134/0x820 [ 382.261934][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 382.268061][ T30] read_part_sector+0xb3/0x330 [ 382.273024][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 382.280480][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 382.285519][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 382.292051][ T30] ? snprintf+0xda/0x120 [ 382.297051][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 382.303024][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 382.310657][ T30] ? vsnprintf+0x184/0x1da0 [ 382.315579][ T30] ? __pfx_snprintf+0x10/0x10 [ 382.321212][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 382.326848][ T30] bdev_disk_changed+0x72c/0x13d0 [ 382.332122][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 382.338559][ T30] blkdev_get_whole+0x2d2/0x450 [ 382.343645][ T30] bdev_open+0x2d4/0xc60 [ 382.348472][ T30] blkdev_open+0x3e8/0x570 [ 382.352957][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 382.366315][ T30] do_dentry_open+0x970/0x1440 [ 382.371196][ T30] vfs_open+0x3e/0x330 [ 382.375322][ T30] path_openat+0x2b3e/0x3470 [ 382.392698][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 382.402953][ T30] ? __lock_acquire+0x137a/0x2040 [ 382.408365][ T30] ? __pfx_path_openat+0x10/0x10 [ 382.413387][ T30] do_filp_open+0x235/0x490 [ 382.430128][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 382.435280][ T30] ? _raw_spin_unlock+0x28/0x50 [ 382.440453][ T30] ? alloc_fd+0x5a1/0x640 [ 382.444852][ T30] do_sys_openat2+0x13e/0x1d0 [ 382.457467][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 382.462731][ T30] __x64_sys_openat+0x247/0x2a0 [ 382.475177][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 382.484521][ T30] ? do_syscall_64+0x100/0x230 [ 382.489707][ T30] ? do_syscall_64+0xb6/0x230 [ 382.494445][ T30] do_syscall_64+0xf3/0x230 [ 382.499074][ T30] ? clear_bhb_loop+0x35/0x90 [ 382.503791][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.510140][ T30] RIP: 0033:0x7faa103169a4 [ 382.514612][ T30] RSP: 002b:00007ffd8daa5630 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 382.523096][ T30] RAX: ffffffffffffffda RBX: 000056255ee34e10 RCX: 00007faa103169a4 [ 382.532416][ T30] RDX: 00000000000a0800 RSI: 000056255ee146b0 RDI: 00000000ffffff9c [ 382.540824][ T30] RBP: 000056255ee146b0 R08: 0000000000000001 R09: 7fffffffffffffff [ 382.548984][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 382.558248][ T30] R13: 000056255ee26250 R14: 0000000000000001 R15: 000056255ee13910 [ 382.566741][ T30] [ 382.569896][ T30] INFO: task udevd:5884 blocked for more than 144 seconds. [ 382.578599][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 382.588212][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.597306][ T30] task:udevd state:D stack:21720 pid:5884 tgid:5884 ppid:4685 flags:0x00004002 [ 382.607686][ T30] Call Trace: [ 382.611001][ T30] [ 382.613966][ T30] __schedule+0x1800/0x4a60 [ 382.618625][ T30] ? __pfx___schedule+0x10/0x10 [ 382.623521][ T30] ? __blk_flush_plug+0x449/0x500 [ 382.629066][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.634146][ T30] ? __asan_memset+0x23/0x50 [ 382.639954][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 382.645823][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.652325][ T30] ? schedule+0x90/0x320 [ 382.657023][ T30] schedule+0x14b/0x320 [ 382.661232][ T30] schedule_timeout+0x1be/0x310 [ 382.666107][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 382.672679][ T30] ? __pfx_process_timeout+0x10/0x10 [ 382.678096][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 382.683609][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 382.691861][ T30] ? __pfx_validate_chain+0x10/0x10 [ 382.697518][ T30] ? validate_chain+0x11e/0x5900 [ 382.702538][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 382.708621][ T30] ? __lock_acquire+0x137a/0x2040 [ 382.713711][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 382.716634][ T5314] tipc: Node number set to 2130706433 [ 382.720907][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 382.731159][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 382.736468][ T30] ? sbitmap_get+0x289/0x3f0 [ 382.741101][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 382.749086][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 382.754972][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 382.761444][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 382.768510][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 382.773840][ T30] ? __pfx___might_resched+0x10/0x10 [ 382.780668][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 382.790706][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 382.797840][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 382.803035][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 382.809245][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 382.814870][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 382.821281][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 382.827910][ T30] __blk_flush_plug+0x420/0x500 [ 382.832820][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 382.839084][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 382.844251][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 382.850087][ T30] __submit_bio+0x422/0x560 [ 382.854621][ T30] ? __pfx___submit_bio+0x10/0x10 [ 382.861076][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 382.871984][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 382.879230][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 382.884936][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 382.893979][ T30] ? __pfx___might_resched+0x10/0x10 [ 382.899965][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 382.906269][ T30] block_read_full_folio+0x93b/0xcd0 [ 382.911852][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 382.918577][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 382.924732][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 382.930255][ T30] ? folio_add_lru+0x357/0xd70 [ 382.935077][ T30] ? folio_add_lru+0x58f/0xd70 [ 382.940044][ T30] filemap_read_folio+0x1a0/0x790 [ 382.945379][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 382.951403][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 382.957583][ T30] ? __filemap_get_folio+0x984/0xc10 [ 382.962947][ T30] do_read_cache_folio+0x134/0x820 [ 382.969311][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 382.975010][ T30] read_part_sector+0xb3/0x330 [ 382.980085][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 382.985080][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 382.990384][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 382.998903][ T30] ? snprintf+0xda/0x120 [ 383.003209][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 383.008949][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 383.013759][ T30] ? vsnprintf+0x184/0x1da0 [ 383.018884][ T30] ? __pfx_snprintf+0x10/0x10 [ 383.023626][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 383.030324][ T30] bdev_disk_changed+0x72c/0x13d0 [ 383.035439][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 383.041096][ T30] blkdev_get_whole+0x2d2/0x450 [ 383.046627][ T30] bdev_open+0x2d4/0xc60 [ 383.050923][ T30] blkdev_open+0x3e8/0x570 [ 383.055356][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 383.060499][ T30] do_dentry_open+0x970/0x1440 [ 383.065665][ T30] vfs_open+0x3e/0x330 [ 383.069846][ T30] path_openat+0x2b3e/0x3470 [ 383.074759][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 383.082018][ T30] ? __lock_acquire+0x137a/0x2040 [ 383.087200][ T30] ? __pfx_path_openat+0x10/0x10 [ 383.092473][ T30] do_filp_open+0x235/0x490 [ 383.099157][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 383.104404][ T30] ? _raw_spin_unlock+0x28/0x50 [ 383.110762][ T30] ? alloc_fd+0x5a1/0x640 [ 383.115169][ T30] do_sys_openat2+0x13e/0x1d0 [ 383.120349][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.125635][ T30] __x64_sys_openat+0x247/0x2a0 [ 383.130910][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.137736][ T30] ? do_syscall_64+0x100/0x230 [ 383.142753][ T30] ? do_syscall_64+0xb6/0x230 [ 383.147558][ T30] do_syscall_64+0xf3/0x230 [ 383.152284][ T30] ? clear_bhb_loop+0x35/0x90 [ 383.157092][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.163223][ T30] RIP: 0033:0x7faa103169a4 [ 383.168034][ T30] RSP: 002b:00007ffd8daa5630 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.176764][ T30] RAX: ffffffffffffffda RBX: 000056255ee34e10 RCX: 00007faa103169a4 [ 383.184951][ T30] RDX: 00000000000a0800 RSI: 000056255ee334d0 RDI: 00000000ffffff9c [ 383.194357][ T30] RBP: 000056255ee334d0 R08: 0000000000000001 R09: 7fffffffffffffff [ 383.205089][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 383.213244][ T30] R13: 000056255ee35a00 R14: 0000000000000001 R15: 000056255ee13910 [ 383.222195][ T30] [ 383.225279][ T30] INFO: task udevd:7300 blocked for more than 144 seconds. [ 383.234778][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 383.242171][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 383.252133][ T30] task:udevd state:D stack:22032 pid:7300 tgid:7300 ppid:4685 flags:0x00004002 [ 383.262841][ T30] Call Trace: [ 383.266760][ T30] [ 383.269936][ T30] __schedule+0x1800/0x4a60 [ 383.274559][ T30] ? __pfx___schedule+0x10/0x10 [ 383.279640][ T30] ? __blk_flush_plug+0x449/0x500 [ 383.285021][ T30] ? __pfx_lock_release+0x10/0x10 [ 383.290633][ T30] ? __asan_memset+0x23/0x50 [ 383.295302][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 383.310284][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.317124][ T30] ? schedule+0x90/0x320 [ 383.321650][ T30] schedule+0x14b/0x320 [ 383.325835][ T30] schedule_timeout+0x1be/0x310 [ 383.332134][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 383.337643][ T30] ? __pfx_process_timeout+0x10/0x10 [ 383.343121][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 383.349188][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 383.353844][ T30] ? __pfx_validate_chain+0x10/0x10 [ 383.360401][ T30] ? validate_chain+0x11e/0x5900 [ 383.365398][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 383.370542][ T30] ? __lock_acquire+0x137a/0x2040 [ 383.375810][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 383.382442][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 383.388184][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 383.393550][ T30] ? sbitmap_get+0x289/0x3f0 [ 383.398268][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 383.407757][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 383.413650][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 383.420118][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 383.427283][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 383.432636][ T30] ? __pfx___might_resched+0x10/0x10 [ 383.439622][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 383.445667][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 383.451046][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 383.456570][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 383.461919][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 383.469194][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 383.475143][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 383.480541][ T30] __blk_flush_plug+0x420/0x500 [ 383.485651][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 383.491107][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 383.496825][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 383.502094][ T30] __submit_bio+0x422/0x560 [ 383.513635][ T30] ? __pfx___submit_bio+0x10/0x10 [ 383.520396][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 383.528703][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 383.535365][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 383.541805][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 383.550079][ T30] ? __pfx___might_resched+0x10/0x10 [ 383.555435][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 383.562380][ T30] block_read_full_folio+0x93b/0xcd0 [ 383.568014][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 383.573520][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 383.580643][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 383.585607][ T30] ? folio_add_lru+0x357/0xd70 [ 383.591016][ T30] ? folio_add_lru+0x58f/0xd70 [ 383.595854][ T30] filemap_read_folio+0x1a0/0x790 [ 383.601024][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 383.606988][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 383.614324][ T30] ? __filemap_get_folio+0x984/0xc10 [ 383.620234][ T30] do_read_cache_folio+0x134/0x820 [ 383.625407][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 383.632131][ T30] read_part_sector+0xb3/0x330 [ 383.637035][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 383.642235][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 383.648059][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 383.653660][ T30] ? snprintf+0xda/0x120 [ 383.659391][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 383.665087][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 383.669857][ T30] ? vsnprintf+0x184/0x1da0 [ 383.674609][ T30] ? __pfx_snprintf+0x10/0x10 [ 383.679844][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 383.684662][ T30] bdev_disk_changed+0x72c/0x13d0 [ 383.691181][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 383.696813][ T30] blkdev_get_whole+0x2d2/0x450 [ 383.701917][ T30] bdev_open+0x2d4/0xc60 [ 383.706725][ T30] blkdev_open+0x3e8/0x570 [ 383.712974][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 383.718093][ T30] do_dentry_open+0x970/0x1440 [ 383.723129][ T30] vfs_open+0x3e/0x330 [ 383.727518][ T30] path_openat+0x2b3e/0x3470 [ 383.732193][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 383.739355][ T30] ? __lock_acquire+0x137a/0x2040 [ 383.744460][ T30] ? __pfx_path_openat+0x10/0x10 [ 383.749586][ T30] do_filp_open+0x235/0x490 [ 383.754416][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 383.759622][ T30] ? _raw_spin_unlock+0x28/0x50 [ 383.764711][ T30] ? alloc_fd+0x5a1/0x640 [ 383.770793][ T30] do_sys_openat2+0x13e/0x1d0 [ 383.775535][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.780877][ T30] __x64_sys_openat+0x247/0x2a0 [ 383.785967][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.791503][ T30] ? do_syscall_64+0x100/0x230 [ 383.798134][ T30] ? do_syscall_64+0xb6/0x230 [ 383.802907][ T30] do_syscall_64+0xf3/0x230 [ 383.807753][ T30] ? clear_bhb_loop+0x35/0x90 [ 383.812498][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.820746][ T30] RIP: 0033:0x7faa103169a4 [ 383.825217][ T30] RSP: 002b:00007ffd8daa5630 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.836539][ T30] RAX: ffffffffffffffda RBX: 000056255ee34e10 RCX: 00007faa103169a4 [ 383.845046][ T30] RDX: 00000000000a0800 RSI: 000056255ee267b0 RDI: 00000000ffffff9c [ 383.854174][ T30] RBP: 000056255ee267b0 R08: 0000000000000001 R09: 7fffffffffffffff [ 383.862965][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 383.871444][ T30] R13: 000056255ee28540 R14: 0000000000000001 R15: 000056255ee13910 [ 383.880811][ T30] [ 383.883981][ T30] [ 383.883981][ T30] Showing all locks held in the system: [ 383.917873][ T30] 1 lock held by khungtaskd/30: [ 383.922798][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 383.946690][ T30] 2 locks held by getty/4990: [ 383.951428][ T30] #0: ffff888034ad20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 383.962702][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 383.973176][ T30] 2 locks held by kworker/u8:14/5474: [ 383.979218][ T30] 3 locks held by udevd/5784: [ 383.983949][ T30] #0: ffff88802651f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 383.995821][ T30] #1: ffff888025ba8d10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.005725][ T30] #2: ffff8880266e0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.031076][ T30] 3 locks held by udevd/5884: [ 384.035811][ T30] #0: ffff8880265f14c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.046759][ T30] #1: ffff88802485be10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.056638][ T30] #2: ffff888026780180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.065756][ T30] 3 locks held by udevd/6006: [ 384.080486][ T30] #0: ffff8880691834c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.090009][ T30] #1: ffff888032009810 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.101222][ T30] #2: ffff88807cb70180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.110375][ T30] 3 locks held by udevd/7300: [ 384.115077][ T30] #0: ffff8880266bb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.129818][ T30] #1: ffff8880265a7710 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.140645][ T30] #2: ffff8880267c0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.150331][ T5233] Bluetooth: hci0: command 0x0401 tx timeout [ 384.166060][ T30] 3 locks held by udevd/7493: [ 384.171171][ T30] #0: ffff8880266bf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.181040][ T30] #1: ffff8880265a7d90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.193438][ T30] #2: ffff888026860180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.202650][ T30] 3 locks held by udevd/7834: [ 384.207550][ T30] #0: ffff8880265f54c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.217518][ T30] #1: ffff8880247e3790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.230842][ T30] #2: ffff888026880180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.240360][ T30] 3 locks held by udevd/8516: [ 384.245081][ T30] #0: ffff8880269234c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.255725][ T30] #1: ffff88802683e110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.265427][ T30] #2: ffff888026a00180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.274676][ T30] 3 locks held by udevd/9074: [ 384.279979][ T30] #0: ffff888024b9b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.290675][ T30] #1: ffff8880329f0190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.300379][ T30] #2: ffff88805f978180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.310679][ T30] 3 locks held by udevd/9305: [ 384.315399][ T30] #0: ffff8880264334c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.326705][ T30] #1: ffff888025b76910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.338057][ T30] #2: ffff8880264d4580 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.347197][ T30] 3 locks held by udevd/9325: [ 384.352110][ T30] #0: ffff888023e374c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.362645][ T30] #1: ffff88803173e110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.372693][ T30] #2: ffff888055e88180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.382010][ T30] 3 locks held by udevd/9710: [ 384.386814][ T30] #0: ffff8880264374c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 384.397887][ T30] #1: ffff888025b76f90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 384.407526][ T30] #2: ffff8880265c4b80 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 384.416912][ T30] 2 locks held by syz.4.1680/10342: [ 384.422148][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 384.433683][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 384.445118][ T30] [ 384.447547][ T30] ============================================= [ 384.447547][ T30] [ 384.457973][ T30] NMI backtrace for cpu 1 [ 384.462361][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 384.472643][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 384.482738][ T30] Call Trace: [ 384.486034][ T30] [ 384.488981][ T30] dump_stack_lvl+0x241/0x360 [ 384.493761][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.498987][ T30] ? __pfx__printk+0x10/0x10 [ 384.503618][ T30] ? vprintk_emit+0x667/0x7c0 [ 384.508374][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 384.513517][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 384.518495][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.524015][ T30] ? _printk+0xd5/0x120 [ 384.528216][ T30] ? __pfx__printk+0x10/0x10 [ 384.532851][ T30] ? __wake_up_klogd+0xcc/0x110 [ 384.537742][ T30] ? __pfx__printk+0x10/0x10 [ 384.542361][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 384.547407][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.553414][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 384.559412][ T30] watchdog+0xff4/0x1040 [ 384.564197][ T30] ? watchdog+0x1ea/0x1040 [ 384.568647][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.573337][ T30] kthread+0x2f0/0x390 [ 384.577430][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.582151][ T30] ? __pfx_kthread+0x10/0x10 [ 384.586760][ T30] ret_from_fork+0x4b/0x80 [ 384.591190][ T30] ? __pfx_kthread+0x10/0x10 [ 384.595798][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.600591][ T30] [ 384.606153][ T30] Sending NMI from CPU 1 to CPUs 0: [ 384.612750][ C0] NMI backtrace for cpu 0 [ 384.612764][ C0] CPU: 0 UID: 0 PID: 5474 Comm: kworker/u8:14 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 384.612787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 384.612799][ C0] Workqueue: bat_events batadv_nc_worker [ 384.612827][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 384.612857][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 384.612873][ C0] RSP: 0018:ffffc9000258f8c0 EFLAGS: 00000046 [ 384.612888][ C0] RAX: 0000000000000001 RBX: 1ffffffff283bd23 RCX: ffffffff816fe21c [ 384.612902][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff941de918 [ 384.612914][ C0] RBP: ffffffffffffffff R08: ffffffff941de91f R09: 1ffffffff283bd23 [ 384.612928][ C0] R10: dffffc0000000000 R11: fffffbfff283bd23 R12: 0000000000000000 [ 384.612941][ C0] R13: ffff88802885e4d8 R14: dffffc0000000001 R15: fffffbfff283bd24 [ 384.612955][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 384.612971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.612984][ C0] CR2: 00007f11b2508178 CR3: 0000000056014000 CR4: 00000000003506f0 [ 384.613000][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 384.613011][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 384.613023][ C0] Call Trace: [ 384.613030][ C0] [ 384.613037][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 384.613059][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 384.613086][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.613117][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 384.613139][ C0] ? nmi_handle+0x14f/0x5a0 [ 384.613157][ C0] ? nmi_handle+0x2a/0x5a0 [ 384.613175][ C0] ? kasan_check_range+0x8c/0x290 [ 384.613201][ C0] ? default_do_nmi+0x63/0x160 [ 384.613222][ C0] ? exc_nmi+0x123/0x1f0 [ 384.613243][ C0] ? end_repeat_nmi+0xf/0x53 [ 384.613268][ C0] ? __lock_acquire+0xf3c/0x2040 [ 384.613299][ C0] ? kasan_check_range+0x8c/0x290 [ 384.613326][ C0] ? kasan_check_range+0x8c/0x290 [ 384.613354][ C0] ? kasan_check_range+0x8c/0x290 [ 384.613381][ C0] [ 384.613387][ C0] [ 384.613395][ C0] __lock_acquire+0xf3c/0x2040 [ 384.613428][ C0] lock_acquire+0x1ed/0x550 [ 384.613452][ C0] ? batadv_nc_worker+0xcb/0x610 [ 384.613478][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 384.613504][ C0] ? batadv_nc_worker+0xcb/0x610 [ 384.613526][ C0] ? __pfx_lock_release+0x10/0x10 [ 384.613554][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.613583][ C0] batadv_nc_worker+0xec/0x610 [ 384.613605][ C0] ? batadv_nc_worker+0xcb/0x610 [ 384.613626][ C0] ? batadv_nc_worker+0xcb/0x610 [ 384.613651][ C0] ? process_scheduled_works+0x945/0x1830 [ 384.613674][ C0] process_scheduled_works+0xa2c/0x1830 [ 384.613714][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 384.613742][ C0] ? assign_work+0x364/0x3d0 [ 384.613768][ C0] worker_thread+0x870/0xd30 [ 384.613800][ C0] ? __kthread_parkme+0x169/0x1d0 [ 384.613827][ C0] ? __pfx_worker_thread+0x10/0x10 [ 384.613851][ C0] kthread+0x2f0/0x390 [ 384.613877][ C0] ? __pfx_worker_thread+0x10/0x10 [ 384.613901][ C0] ? __pfx_kthread+0x10/0x10 [ 384.613928][ C0] ret_from_fork+0x4b/0x80 [ 384.613952][ C0] ? __pfx_kthread+0x10/0x10 [ 384.613979][ C0] ret_from_fork_asm+0x1a/0x30 [ 384.614013][ C0] [ 384.706527][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 384.706553][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 384.706589][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 384.706605][ T30] Call Trace: [ 384.706615][ T30] [ 384.706625][ T30] dump_stack_lvl+0x241/0x360 [ 384.706672][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.706710][ T30] ? __pfx__printk+0x10/0x10 [ 384.706742][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.706784][ T30] ? vscnprintf+0x5d/0x90 [ 384.706814][ T30] panic+0x349/0x860 [ 384.706850][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 384.706885][ T30] ? __pfx_panic+0x10/0x10 [ 384.706915][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 384.706943][ T30] ? __irq_work_queue_local+0x137/0x410 [ 384.706979][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 384.707005][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 384.707032][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 384.707064][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 384.707097][ T30] watchdog+0x1033/0x1040 [ 384.707133][ T30] ? watchdog+0x1ea/0x1040 [ 384.707174][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.707207][ T30] kthread+0x2f0/0x390 [ 384.707243][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.707277][ T30] ? __pfx_kthread+0x10/0x10 [ 384.707313][ T30] ret_from_fork+0x4b/0x80 [ 384.707345][ T30] ? __pfx_kthread+0x10/0x10 [ 384.707382][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.707434][ T30] [ 384.708951][ T30] Kernel Offset: disabled [ 385.119245][ T30] Rebooting in 86400 seconds..