last executing test programs: 48m11.732086398s ago: executing program 3 (id=1501): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000011c0)=@urb_type_iso={0x0, {0xb}, 0x6, 0x24, 0x0, 0x0, 0x0, 0xf, 0x1, 0x8, 0x4, &(0x7f00000001c0)="bdd2ca95b1f5e3ba224bff8614e488c0b6f30305f09ef79a5b62a97904c5705d3e00f7b9b422bb422ddc", [{0x1, 0x5000000, 0x3}]}) r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @string={0x4, 0x3, 'Jo'}}, 0x0, 0x0, 0x0}, 0x0) 48m6.881603303s ago: executing program 3 (id=1515): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) 48m5.917243838s ago: executing program 3 (id=1518): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fanotify_init(0x200, 0x0) dup(r0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 48m5.813273609s ago: executing program 3 (id=1519): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000440)='./file0\x00', 0x80, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0x2}}, {@nodecompose}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@umask={'umask', 0x3d, 0x2003}}, {@nls={'nls', 0x3d, 'cp855'}}]}, 0x1, 0x708, &(0x7f0000001f80)="$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") mount(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='pstore\x00', 0x14400, 0x0) 48m5.601659013s ago: executing program 3 (id=1521): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000400)=0xd, 0x4) 48m5.028067302s ago: executing program 3 (id=1522): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 48m4.253486394s ago: executing program 32 (id=1522): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 41m42.495450568s ago: executing program 2 (id=2602): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 41m40.716883356s ago: executing program 2 (id=2605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 41m39.603454543s ago: executing program 2 (id=2609): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xa5dd, 0x1, 0x2, 0xfffffffe}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00042f00fc000000000000000000000000000000fe8000000000000000000000000000aa042065580000000000000800d1e286dd080088"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed500041000e1"], 0x11) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = eventfd(0x800a6) write$eventfd(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$caif_stream(0x25, 0x1, 0x1) 41m39.349009157s ago: executing program 2 (id=2611): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1785f0a75fea35b1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 41m36.945917605s ago: executing program 2 (id=2617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 41m35.997203729s ago: executing program 2 (id=2620): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xa5dd, 0x1, 0x2, 0xfffffffe}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00042f00fc000000000000000000000000000000fe8000000000000000000000000000aa042065580000000000000800d1e286dd080088"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed500041000e1"], 0x11) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = eventfd(0x800a6) write$eventfd(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$caif_stream(0x25, 0x1, 0x1) 41m35.252787991s ago: executing program 33 (id=2620): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xa5dd, 0x1, 0x2, 0xfffffffe}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00042f00fc000000000000000000000000000000fe8000000000000000000000000000aa042065580000000000000800d1e286dd080088"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed500041000e1"], 0x11) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = eventfd(0x800a6) write$eventfd(r1, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$caif_stream(0x25, 0x1, 0x1) 41m0.164350655s ago: executing program 4 (id=2699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 40m59.097860251s ago: executing program 4 (id=2703): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001ac0)='./file2\x00', &(0x7f00000001c0), &(0x7f0000001b00)=ANY=[@ANYRES32], 0x835, 0x1) 40m58.970054133s ago: executing program 4 (id=2704): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462', @ANYRESHEX=0x0], 0xa) 40m58.849326115s ago: executing program 4 (id=2705): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}]}]}]}, 0x40}}, 0x0) 40m57.673442353s ago: executing program 4 (id=2708): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 40m57.316388819s ago: executing program 4 (id=2710): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 40m41.980377546s ago: executing program 34 (id=2710): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240440c4}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 4m13.875458975s ago: executing program 5 (id=12264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r0, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) 4m13.722277499s ago: executing program 5 (id=12266): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newae={0x40, 0x1e, 0x100, 0x70bd25, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0xa, 0x33}, @in=@multicast2, 0xd26b, 0x3502}}, 0x40}}, 0x4000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4m13.520081173s ago: executing program 5 (id=12270): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 4m13.312784527s ago: executing program 5 (id=12273): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m13.21297685s ago: executing program 5 (id=12275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 4m13.065605743s ago: executing program 5 (id=12276): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getnexthop={0x18, 0x6a, 0xe0d, 0x70bd26, 0x25dfdbfc}, 0x18}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x4000000) 3m57.87352729s ago: executing program 35 (id=12276): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getnexthop={0x18, 0x6a, 0xe0d, 0x70bd26, 0x25dfdbfc}, 0x18}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x4000000) 9.384628151s ago: executing program 6 (id=13361): socket$key(0xf, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfce) 9.009866567s ago: executing program 6 (id=13368): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01040000000000000000"], 0x94}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.761184181s ago: executing program 6 (id=13370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_subtree(r0, 0x0, 0x280) 3.199031519s ago: executing program 6 (id=13376): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000007c0), 0x0, 0x4000040) 3.019492802s ago: executing program 6 (id=13378): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01040000000000000000"], 0x94}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.928555873s ago: executing program 7 (id=13380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 2.768389576s ago: executing program 7 (id=13384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0xc8c0) 2.748837126s ago: executing program 6 (id=13385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x280) 2.561794359s ago: executing program 7 (id=13388): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000007c0), 0x0, 0x4000040) 2.385149012s ago: executing program 7 (id=13389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7080000000000007b9a00fe000000006609ffff00000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.245432164s ago: executing program 7 (id=13390): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) 2.176991295s ago: executing program 7 (id=13391): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xf, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a01010000000000000000000000090900010073797a31000000000c00034000000000000000050c010000180a01020000000000000000000000000900020073797a300000000014000380080002"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01040000000000000000020000003800040c57eb8b800c0001007061796c6f6164002400028008000440000000000800014000000000080003400000000008000240000000000900010073797a30000000000900020073797a320000000005000740df000000140000001100010000000000000000000000000a9681077e431c83781865b243aecd31415ff934b2ff9a74ee74b1d9ce41"], 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5], 0x6f4}}, 0x0) 1.565156975s ago: executing program 0 (id=13392): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000001, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0xc0) 1.393356878s ago: executing program 0 (id=13394): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 1.189061701s ago: executing program 1 (id=13395): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195958c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f01a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b588776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000840)="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", 0x1a4}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000680)="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", 0x13a}, {&(0x7f0000000580)="ac6aed94fbb8c7fecccf1fad0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc2a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb9c44e588728dbe44a49301998f8bb11356809ab4bfbc85cd9eed4820e2a821913e94e49c898fca38824fef2d62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d5", 0xdb}, {&(0x7f0000002300)="0b41dae71fdbfb", 0x7}], 0x7}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002400)="036157dd45d9a56c0f33f53edcee705d061adaaf88a1fb96", 0x18}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f549308c1612433ea604d426ce3fe6b120bb7", 0x87}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x16000000, 0x0, 0x0) 1.188638561s ago: executing program 0 (id=13396): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004041}, 0x4000080) 1.097311302s ago: executing program 1 (id=13397): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002880)="029e", 0x2}], 0x2}}], 0x1, 0x4000040) 1.077341163s ago: executing program 0 (id=13398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7080000000000007b9a00fe000000006609ffff00000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 947.208735ms ago: executing program 1 (id=13399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) 946.201675ms ago: executing program 0 (id=13400): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x4040005) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20000005) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 873.962636ms ago: executing program 1 (id=13401): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) 733.181568ms ago: executing program 1 (id=13402): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000001, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4", 0xb5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d3843663", 0x6a}], 0x2}}], 0x1, 0xc0) 666.740419ms ago: executing program 1 (id=13403): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01040000000000000000"], 0x94}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=13404): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x8c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x60, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4026}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0xa, 0x81, 0xfffffff7, {0xf, 0x2, 0x3, 0x6, 0xf800, 0x1}, {0x2, 0x0, 0xf, 0xd, 0x80, 0xc}, 0x4, 0x8df3, 0x200000}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) kernel console output (not intermixed with test programs): ][ T8861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3132.430105][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11004'. [ 3132.445032][ T8864] netlink: 'syz.0.11004': attribute type 9 has an invalid length. [ 3132.754937][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11010'. [ 3132.933396][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025f61000: rx timeout, send abort [ 3132.942599][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025f61000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3132.957108][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025f62400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3133.120858][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11015'. [ 3133.135822][ T8892] netlink: 'syz.6.11015': attribute type 9 has an invalid length. [ 3133.865196][ T8922] netlink: 'syz.5.11031': attribute type 9 has an invalid length. [ 3133.985111][ T8928] __nla_validate_parse: 2 callbacks suppressed [ 3133.985130][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11034'. [ 3134.458139][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11043'. [ 3134.467271][ T8948] netlink: 'syz.1.11043': attribute type 9 has an invalid length. [ 3134.769007][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a41f400: rx timeout, send abort [ 3134.777433][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a41f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3134.791959][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a41c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3134.977859][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11052'. [ 3135.002777][ T8969] netlink: 'syz.0.11052': attribute type 9 has an invalid length. [ 3135.463431][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11064'. [ 3135.472793][ T8992] netlink: 'syz.1.11064': attribute type 9 has an invalid length. [ 3136.335275][ T9025] syzkaller0: entered promiscuous mode [ 3136.350252][ T9025] syzkaller0: entered allmulticast mode [ 3136.679254][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d92c000: rx timeout, send abort [ 3136.688877][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d92c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3136.703363][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031366400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3140.831797][ T9064] netlink: 'syz.0.11096': attribute type 1 has an invalid length. [ 3140.878751][ T9064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3140.938127][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11099'. [ 3140.949498][ T9071] netlink: 'syz.6.11099': attribute type 9 has an invalid length. [ 3141.621598][ T9092] netlink: 'syz.5.11108': attribute type 1 has an invalid length. [ 3141.664728][ T9092] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3142.090711][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059fbd400: rx timeout, send abort [ 3142.099446][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059fbd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3142.205432][ T9113] netlink: 'syz.6.11117': attribute type 1 has an invalid length. [ 3142.319169][ T9113] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3143.389560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059fbdc00: rx timeout, send abort [ 3143.398736][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059fbdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3143.504284][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.512365][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.552934][ T9146] netlink: 'syz.0.11129': attribute type 1 has an invalid length. [ 3143.662462][ T9146] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3144.793027][ T9190] netlink: 'syz.6.11145': attribute type 1 has an invalid length. [ 3144.830487][ T9190] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3145.323584][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f7d000: rx timeout, send abort [ 3145.332850][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059f7d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3145.571259][ T9218] netlink: 'syz.0.11156': attribute type 1 has an invalid length. [ 3145.630677][ T9218] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3146.487112][ T9241] syzkaller0: entered promiscuous mode [ 3146.495596][ T9241] syzkaller0: entered allmulticast mode [ 3147.536305][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801b782800: rx timeout, send abort [ 3147.545272][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801b782800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3150.716789][ T9252] netlink: 'syz.6.11168': attribute type 1 has an invalid length. [ 3150.726486][ T9252] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 3151.223170][ T9293] netlink: 'syz.6.11183': attribute type 1 has an invalid length. [ 3151.280976][ T9293] 8021q: adding VLAN 0 to HW filter on device bond13 [ 3152.049187][ T9323] netlink: 'syz.6.11195': attribute type 1 has an invalid length. [ 3152.096548][ T9323] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3152.488584][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025094000: rx timeout, send abort [ 3152.497589][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025094000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3153.134937][ T9366] syzkaller0: entered promiscuous mode [ 3153.142238][ T9366] syzkaller0: entered allmulticast mode [ 3154.219552][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020980800: rx timeout, send abort [ 3154.228462][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020980800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3157.729031][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11234'. [ 3157.746577][ T9407] netlink: 'syz.0.11234': attribute type 9 has an invalid length. [ 3158.005477][ T9414] syzkaller0: entered promiscuous mode [ 3158.028398][ T9414] syzkaller0: entered allmulticast mode [ 3158.712890][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802264ac00: rx timeout, send abort [ 3158.721858][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802264ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3161.964765][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11244'. [ 3161.974907][ T9434] netlink: 'syz.6.11244': attribute type 9 has an invalid length. [ 3162.593116][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11256'. [ 3162.626328][ T9464] netlink: 'syz.1.11256': attribute type 9 has an invalid length. [ 3162.750079][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11258'. [ 3163.421494][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11271'. [ 3163.731491][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a10d000: rx timeout, send abort [ 3163.740172][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a10d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3164.033203][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11283'. [ 3164.553249][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11295'. [ 3165.167099][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11307'. [ 3165.558569][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025095000: rx timeout, send abort [ 3165.567297][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025095000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3165.855583][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11320'. [ 3166.063460][ T4849] Bluetooth: hci0: command 0x0406 tx timeout [ 3166.341170][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11332'. [ 3166.852519][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11343'. [ 3167.412892][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e927400: rx timeout, send abort [ 3167.421479][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e927400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3167.561259][ T9667] syzkaller0: entered promiscuous mode [ 3167.574952][ T9667] syzkaller0: entered allmulticast mode [ 3171.449680][ T9676] bond0: option min_links: invalid value (18446744073709551604) [ 3171.457412][ T9676] bond0: option min_links: allowed values 0 - 2147483647 [ 3172.194484][ T9721] syzkaller0: entered promiscuous mode [ 3172.205598][ T9721] syzkaller0: entered allmulticast mode [ 3172.441046][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11382'. [ 3172.837888][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ca09800: rx timeout, send abort [ 3172.846370][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ca09800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3176.545838][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11393'. [ 3176.570604][ T9760] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11393'. [ 3176.643167][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11395'. [ 3177.241876][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11406'. [ 3177.282496][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11405'. [ 3177.291822][ T9789] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11405'. [ 3177.770292][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e55ec00: rx timeout, send abort [ 3177.779416][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e55ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3177.954824][ T9811] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11416'. [ 3178.053755][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11419'. [ 3178.365456][ T9826] syzkaller0: entered promiscuous mode [ 3178.398268][ T9826] syzkaller0: entered allmulticast mode [ 3179.602625][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e7d3800: rx timeout, send abort [ 3179.611240][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e7d3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3182.133413][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11428'. [ 3182.261735][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11431'. [ 3182.659289][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11440'. [ 3182.756972][ T9875] syzkaller0: entered promiscuous mode [ 3182.762979][ T9875] syzkaller0: entered allmulticast mode [ 3183.886239][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fe5c800: rx timeout, send abort [ 3183.895531][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fe5c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3186.798530][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11451'. [ 3187.151823][ T9910] syzkaller0: entered promiscuous mode [ 3187.158801][ T9910] syzkaller0: entered allmulticast mode [ 3188.180394][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea8a400: rx timeout, send abort [ 3188.189005][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ea8a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3191.033438][ T9929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11464'. [ 3191.589637][ T9953] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11474'. [ 3191.756110][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11479'. [ 3191.959849][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11482'. [ 3192.397959][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11489'. [ 3192.549867][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c551c00: rx timeout, send abort [ 3192.558664][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c551c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3192.744923][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11495'. [ 3193.098724][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11501'. [ 3193.531782][T10029] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3194.095583][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11522'. [ 3194.215541][T10058] 8021q: adding VLAN 0 to HW filter on device bond15 [ 3194.405590][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880240e7800: rx timeout, send abort [ 3194.414210][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880240e7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3194.993906][T10087] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3195.007156][T10096] sctp: [Deprecated]: syz.6.11536 (pid 10096) Use of int in max_burst socket option. [ 3195.007156][T10096] Use struct sctp_assoc_value instead [ 3195.768240][T10124] 8021q: adding VLAN 0 to HW filter on device bond16 [ 3196.241410][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a2b3c00: rx timeout, send abort [ 3196.249917][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a2b3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3196.522301][T10152] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3197.065465][T10181] syzkaller0: entered promiscuous mode [ 3197.072230][T10181] syzkaller0: entered allmulticast mode [ 3198.139442][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880791e9400: rx timeout, send abort [ 3198.151316][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880791e9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3201.344322][T10192] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 3201.898044][T31952] Bluetooth: hci2: command 0x0406 tx timeout [ 3201.959628][T10228] netlink: 'syz.6.11591': attribute type 1 has an invalid length. [ 3201.992237][T10228] 8021q: adding VLAN 0 to HW filter on device bond17 [ 3202.108141][T10233] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11592'. [ 3202.117359][T10233] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11592'. [ 3202.504532][T10248] netlink: 'syz.5.11601': attribute type 1 has an invalid length. [ 3202.583437][T10248] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3202.658288][T10256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11603'. [ 3202.668679][T10256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11603'. [ 3203.025063][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a696c00: rx timeout, send abort [ 3203.034359][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a696c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3203.204239][T10275] netlink: 'syz.6.11614': attribute type 1 has an invalid length. [ 3203.255967][T10275] 8021q: adding VLAN 0 to HW filter on device bond18 [ 3203.479543][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11616'. [ 3203.508704][T10284] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11616'. [ 3203.916933][T10305] netlink: 'syz.1.11627': attribute type 1 has an invalid length. [ 3203.963785][T10305] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3204.260588][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11631'. [ 3204.274069][T10319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11631'. [ 3204.383100][T10321] syzkaller0: entered promiscuous mode [ 3204.388828][T10321] syzkaller0: entered allmulticast mode [ 3204.828472][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ee7ac00: rx timeout, send abort [ 3204.836820][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ee7ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3204.944725][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.957747][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3208.738409][T10334] netlink: 'syz.0.11640': attribute type 1 has an invalid length. [ 3208.746837][T10334] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 3208.764453][T10343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11643'. [ 3208.786786][T10343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11643'. [ 3209.345430][T10375] netlink: 'syz.5.11653': attribute type 1 has an invalid length. [ 3209.380321][T10375] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3209.388374][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11654'. [ 3209.397818][T10373] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11654'. [ 3209.481559][T10374] syzkaller0: entered promiscuous mode [ 3209.487307][T10374] syzkaller0: entered allmulticast mode [ 3210.343987][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a626000: rx timeout, send abort [ 3210.353021][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a626000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3213.452721][T10398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11665'. [ 3213.462712][T10398] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11665'. [ 3213.614417][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11666'. [ 3214.450084][T10435] syzkaller0: entered promiscuous mode [ 3214.465869][T10435] syzkaller0: entered allmulticast mode [ 3214.481907][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11678'. [ 3215.173984][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a0ea800: rx timeout, send abort [ 3215.185512][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a0ea800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3218.524892][T10453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11681'. [ 3218.534128][T10453] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11681'. [ 3218.778192][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11689'. [ 3219.146358][T10491] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11694'. [ 3219.156301][T10491] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11694'. [ 3219.457347][T10496] syzkaller0: entered promiscuous mode [ 3219.464970][T10496] syzkaller0: entered allmulticast mode [ 3220.058933][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025a52800: rx timeout, send abort [ 3220.265080][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e949400: rx timeout, send abort [ 3220.273543][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e949400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3220.558628][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025a50400: rx timeout, send abort [ 3220.567200][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025a52800: abort rx timeout. Force session deactivation [ 3221.074164][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025a50400: abort rx timeout. Force session deactivation [ 3223.327147][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11703'. [ 3223.365375][T10515] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11705'. [ 3223.377393][T10515] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11705'. [ 3224.079777][T10549] syzkaller0: entered promiscuous mode [ 3224.091193][T10549] syzkaller0: entered allmulticast mode [ 3228.087908][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11718'. [ 3228.097006][T10553] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11718'. [ 3228.737765][T10591] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11733'. [ 3228.746866][T10591] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11733'. [ 3228.977394][T10593] syzkaller0: entered promiscuous mode [ 3228.986163][T10593] syzkaller0: entered allmulticast mode [ 3229.099793][T10600] nbd2: detected capacity change from 0 to 63 [ 3229.604729][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cbfb000: rx timeout, send abort [ 3229.614045][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801cbfb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3229.824394][ T4849] block nbd2: Receive control failed (result -104) [ 3233.606061][T10620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11744'. [ 3233.615367][T10620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11744'. [ 3234.240873][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11754'. [ 3234.274547][T10646] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11754'. [ 3234.423580][T10648] syzkaller0: entered promiscuous mode [ 3234.437628][T10648] syzkaller0: entered allmulticast mode [ 3238.797506][T10663] netlink: 272 bytes leftover after parsing attributes in process `syz.5.11761'. [ 3238.875902][T10670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11764'. [ 3238.886297][T10670] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11764'. [ 3239.621392][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11773'. [ 3240.020948][T31952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3240.036324][T31952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3240.053170][T31952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3240.064022][T31952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3240.078146][T31952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3240.087192][T31952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3240.196729][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3240.234526][T10702] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11776'. [ 3240.245304][T10702] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11776'. [ 3240.344005][T10699] syzkaller0: entered promiscuous mode [ 3240.354557][T10699] syzkaller0: entered allmulticast mode [ 3240.423622][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3242.157258][ T4849] Bluetooth: hci3: command tx timeout [ 3244.233933][ T4849] Bluetooth: hci3: command tx timeout [ 3244.284165][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3244.300130][T10716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11781'. [ 3244.465306][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3244.511695][T10724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11784'. [ 3244.527231][T10724] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11784'. [ 3244.944532][T10696] chnl_net:caif_netlink_parms(): no params data found [ 3245.422794][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 3245.432867][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 3245.441523][T10696] bridge_slave_0: entered allmulticast mode [ 3245.463073][T10696] bridge_slave_0: entered promiscuous mode [ 3245.680802][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 3245.691636][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 3245.711129][T10696] bridge_slave_1: entered allmulticast mode [ 3245.729767][T10696] bridge_slave_1: entered promiscuous mode [ 3245.801392][T10757] syzkaller0: entered promiscuous mode [ 3245.817675][T10757] syzkaller0: entered allmulticast mode [ 3245.966526][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11793'. [ 3246.318057][ T4849] Bluetooth: hci3: command tx timeout [ 3248.387558][ T4849] Bluetooth: hci3: command tx timeout [ 3249.423251][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3249.444459][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3249.692754][T10780] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11795'. [ 3249.707845][T10780] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11795'. [ 3249.858685][T10696] team0: Port device team_slave_0 added [ 3249.981045][T10696] team0: Port device team_slave_1 added [ 3250.175909][ T48] bond2: (slave gretap1): Releasing active interface [ 3250.231262][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11802'. [ 3250.420934][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3250.435739][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3250.474105][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3250.550866][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3250.607690][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3250.675869][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3250.829898][T10817] IPVS: Scheduler module ip_vs_sip not found [ 3250.926526][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11806'. [ 3250.967916][T10826] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11806'. [ 3251.382719][T10696] hsr_slave_0: entered promiscuous mode [ 3251.405076][T10696] hsr_slave_1: entered promiscuous mode [ 3251.417355][T10696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3251.442771][T10696] Cannot create hsr debugfs directory [ 3251.500425][ T48] hsr_slave_0: left promiscuous mode [ 3251.506944][ T48] hsr_slave_1: left promiscuous mode [ 3251.521781][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3251.534846][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3251.552444][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3251.575121][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3251.606955][ T48] bridge_slave_1: left allmulticast mode [ 3251.613189][ T48] bridge_slave_1: left promiscuous mode [ 3251.627029][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 3251.645205][ T48] bridge_slave_0: left allmulticast mode [ 3251.657885][ T48] bridge_slave_0: left promiscuous mode [ 3251.663709][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 3251.749433][ T48] veth1_macvtap: left promiscuous mode [ 3251.755235][ T48] veth0_macvtap: left promiscuous mode [ 3251.761414][ T48] veth1_vlan: left promiscuous mode [ 3251.766713][ T48] veth0_vlan: left promiscuous mode [ 3252.124675][ T48] bond9 (unregistering): Released all slaves [ 3252.376043][ T48] bond8 (unregistering): Released all slaves [ 3252.614716][ T48] bond7 (unregistering): Released all slaves [ 3252.834831][ T48] bond6 (unregistering): Released all slaves [ 3253.041218][ T48] bond5 (unregistering): Released all slaves [ 3253.276495][ T48] bond4 (unregistering): Released all slaves [ 3253.494589][ T48] bond3 (unregistering): Released all slaves [ 3253.717701][ T48] bond2 (unregistering): Released all slaves [ 3253.925436][ T48] bond1 (unregistering): Released all slaves [ 3254.642143][ T48] team0 (unregistering): Port device team_slave_1 removed [ 3254.731945][ T48] team0 (unregistering): Port device team_slave_0 removed [ 3254.819426][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3254.904090][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3255.784106][ T48] bond0 (unregistering): Released all slaves [ 3256.004687][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11812'. [ 3256.051961][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11813'. [ 3256.452970][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11817'. [ 3256.469196][T10860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11817'. [ 3256.902809][ T48] IPVS: stop unused estimator thread 0... [ 3257.330823][T10882] nbd3: detected capacity change from 0 to 63 [ 3257.378061][ T4849] block nbd3: Receive control failed (result -32) [ 3257.392494][ T1683] block nbd3: Dead connection, failed to find a fallback [ 3257.401944][ T1683] block nbd3: shutting down sockets [ 3257.407995][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.418890][ T1683] buffer_io_error: 24 callbacks suppressed [ 3257.418905][ T1683] Buffer I/O error on dev nbd3, logical block 0, async page read [ 3257.433375][ T1683] Buffer I/O error on dev nbd3, logical block 1, async page read [ 3257.441961][ T1683] Buffer I/O error on dev nbd3, logical block 2, async page read [ 3257.450440][ T1683] Buffer I/O error on dev nbd3, logical block 3, async page read [ 3257.464309][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.485603][ T1683] Buffer I/O error on dev nbd3, logical block 0, async page read [ 3257.498521][ T1683] Buffer I/O error on dev nbd3, logical block 1, async page read [ 3257.506405][ T1683] Buffer I/O error on dev nbd3, logical block 2, async page read [ 3257.514531][ T1683] Buffer I/O error on dev nbd3, logical block 3, async page read [ 3257.522724][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.532440][ T1683] Buffer I/O error on dev nbd3, logical block 0, async page read [ 3257.540850][ T1683] Buffer I/O error on dev nbd3, logical block 1, async page read [ 3257.549199][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.559204][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.568774][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.579686][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.591636][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3257.602361][T10628] ldm_validate_partition_table(): Disk read failed. [ 3257.609322][ T1683] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3257.618711][ T1683] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3257.629630][T10628] Dev nbd3: unable to read RDB block 0 [ 3257.639756][T10628] nbd3: unable to read partition table [ 3257.663839][T10628] ldm_validate_partition_table(): Disk read failed. [ 3257.679416][T10628] Dev nbd3: unable to read RDB block 0 [ 3257.690084][T10628] nbd3: unable to read partition table [ 3257.774203][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11824'. [ 3258.025418][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11827'. [ 3258.048377][T10902] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11827'. [ 3258.226406][T10696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3258.259112][T10696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3258.284009][T10696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3258.308327][T10696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3258.560932][T10921] nbd4: detected capacity change from 0 to 63 [ 3258.575879][ T4849] block nbd4: Receive control failed (result -32) [ 3258.580133][ T1683] block nbd4: Send control failed (result -32) [ 3258.590454][ T1683] block nbd4: Request send failed, requeueing [ 3258.604345][T10888] block nbd4: Dead connection, failed to find a fallback [ 3258.614061][T10888] block nbd4: shutting down sockets [ 3258.632376][T10628] ldm_validate_partition_table(): Disk read failed. [ 3258.650753][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3258.687296][T10628] Dev nbd4: unable to read RDB block 0 [ 3258.693099][T10696] 8021q: adding VLAN 0 to HW filter on device team0 [ 3258.741047][T10628] nbd4: unable to read partition table [ 3258.775903][T30323] bridge0: port 1(bridge_slave_0) entered blocking state [ 3258.783355][T30323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3258.810162][T10628] ldm_validate_partition_table(): Disk read failed. [ 3258.828776][T10628] Dev nbd4: unable to read RDB block 0 [ 3258.843215][T10628] nbd4: unable to read partition table [ 3258.882645][T30323] bridge0: port 2(bridge_slave_1) entered blocking state [ 3258.889932][T30323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3259.121799][T10696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3259.152308][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11836'. [ 3259.272044][T10940] netlink: 'syz.1.11837': attribute type 10 has an invalid length. [ 3259.350647][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 30 seconds [ 3259.363125][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 30 seconds [ 3259.728861][T10953] IPVS: Scheduler module ip_vs_sip not found [ 3259.954948][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3260.095774][T10696] veth0_vlan: entered promiscuous mode [ 3260.193279][T10696] veth1_vlan: entered promiscuous mode [ 3260.263566][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11846'. [ 3260.341798][T10696] veth0_macvtap: entered promiscuous mode [ 3260.399697][T10696] veth1_macvtap: entered promiscuous mode [ 3260.469923][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3260.500574][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.525541][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3260.557062][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.585414][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3260.608216][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.631087][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3260.652556][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.672931][T10696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3260.700432][T10984] netlink: 'syz.5.11848': attribute type 10 has an invalid length. [ 3260.738168][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3260.773366][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.803715][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3260.814870][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.877197][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3260.903800][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3260.924674][T10993] block nbd1: NBD_DISCONNECT [ 3260.934867][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3260.938412][T10993] block nbd1: Send disconnect failed -32 [ 3260.968091][T10993] block nbd1: shutting down sockets [ 3260.991226][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3261.021492][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3261.042597][T10696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.081744][T10696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.101578][T10696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.128289][T10696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3261.439894][T30323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3261.467796][T30323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3261.476443][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11855'. [ 3261.561750][T17216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3261.591212][T17216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3261.793487][T11020] netlink: 'syz.6.11857': attribute type 10 has an invalid length. [ 3262.441112][T11044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11864'. [ 3262.748262][T11007] IPVS: starting estimator thread 0... [ 3262.827200][T11058] netlink: 292 bytes leftover after parsing attributes in process `syz.1.11868'. [ 3262.839798][T11054] IPVS: using max 19 ests per chain, 45600 per kthread [ 3265.647948][T11093] IPVS: Scheduler module ip_vs_sip not found [ 3265.854411][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11874'. [ 3266.082136][T11114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11880'. [ 3266.272827][T11117] nbd1: detected capacity change from 0 to 63 [ 3266.389375][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.406525][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.477961][ T4849] block nbd1: Receive control failed (result -104) [ 3266.758581][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11887'. [ 3266.815773][T11132] lo: entered allmulticast mode [ 3266.850032][T11131] lo: left allmulticast mode [ 3267.272532][T11146] nbd5: detected capacity change from 0 to 63 [ 3267.283489][T11147] block nbd1: NBD_DISCONNECT [ 3267.297584][T11147] block nbd1: Send disconnect failed -32 [ 3267.306226][T11147] block nbd1: shutting down sockets [ 3267.357274][ C1] blk_print_req_error: 223 callbacks suppressed [ 3267.357297][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3267.372882][ C1] buffer_io_error: 286 callbacks suppressed [ 3267.372899][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3267.392748][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3267.402056][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3267.433917][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3267.443098][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 3267.451231][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3267.460391][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 3267.479562][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3267.494463][T23159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3267.503070][T23159] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3267.513241][T23159] Buffer I/O error on dev nbd1, logical block 2, async page read [ 3267.521915][T23159] Buffer I/O error on dev nbd1, logical block 3, async page read [ 3267.531273][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3267.545127][T23159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3267.545189][ T4849] block nbd5: Receive control failed (result -104) [ 3267.553202][T23159] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3267.568490][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3267.580408][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3267.589990][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3267.599318][T23159] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3267.609769][T10628] ldm_validate_partition_table(): Disk read failed. [ 3267.618775][T10628] Dev nbd1: unable to read RDB block 0 [ 3267.626854][T10628] nbd1: unable to read partition table [ 3267.641767][T10628] ldm_validate_partition_table(): Disk read failed. [ 3267.650737][T10628] Dev nbd1: unable to read RDB block 0 [ 3267.658780][T10628] nbd1: unable to read partition table [ 3267.839287][T11157] netlink: 'syz.1.11899': attribute type 1 has an invalid length. [ 3267.909863][T11157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3268.672347][T11181] syzkaller0: entered promiscuous mode [ 3268.682021][T11181] syzkaller0: entered allmulticast mode [ 3268.705617][T11182] netlink: 'syz.1.11909': attribute type 1 has an invalid length. [ 3268.771997][T11182] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3273.167485][T11198] netlink: 292 bytes leftover after parsing attributes in process `syz.5.11913'. [ 3273.359391][T11202] nbd1: detected capacity change from 0 to 63 [ 3273.385455][ T4849] block nbd1: Receive control failed (result -32) [ 3273.394390][ T1683] block nbd1: Dead connection, failed to find a fallback [ 3273.406343][ T1683] block nbd1: shutting down sockets [ 3273.414915][ T1683] blk_print_req_error: 125 callbacks suppressed [ 3273.414934][ T1683] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3273.438113][ T1683] buffer_io_error: 138 callbacks suppressed [ 3273.438131][ T1683] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3273.452293][ T1683] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 3273.463099][ T1683] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3273.471156][ T1683] Buffer I/O error on dev nbd1, logical block 2, async page read [ 3273.479447][ T1683] Buffer I/O error on dev nbd1, logical block 3, async page read [ 3273.487889][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.496982][T23159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3273.505387][T23159] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3273.513522][T23159] Buffer I/O error on dev nbd1, logical block 2, async page read [ 3273.521375][T23159] Buffer I/O error on dev nbd1, logical block 3, async page read [ 3273.529650][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.538797][T23159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3273.546571][T23159] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3273.555950][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.565851][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.576436][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.587007][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.597879][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3273.607088][T10628] ldm_validate_partition_table(): Disk read failed. [ 3273.613320][T11206] nbd6: detected capacity change from 0 to 63 [ 3273.614569][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3273.702402][T10628] Dev nbd1: unable to read RDB block 0 [ 3273.715634][T11212] block nbd1: NBD_DISCONNECT [ 3273.757553][T10628] nbd1: unable to read partition table [ 3273.768462][T11212] block nbd1: Send disconnect failed -32 [ 3273.858106][T10628] ldm_validate_partition_table(): Disk read failed. [ 3273.922783][T10628] Dev nbd1: unable to read RDB block 0 [ 3273.930655][T10628] nbd1: unable to read partition table [ 3273.955692][ T4849] block nbd6: Receive control failed (result -104) [ 3274.137319][T11224] netlink: 292 bytes leftover after parsing attributes in process `syz.1.11923'. [ 3274.147367][T11225] netlink: 'syz.5.11922': attribute type 1 has an invalid length. [ 3274.207794][T11225] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3274.311147][T11228] syzkaller0: entered promiscuous mode [ 3274.316662][T11228] syzkaller0: entered allmulticast mode [ 3278.493204][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11930'. [ 3278.631676][T11248] netlink: 292 bytes leftover after parsing attributes in process `syz.0.11933'. [ 3279.075585][T11265] netlink: 'syz.1.11940': attribute type 1 has an invalid length. [ 3279.150805][T11265] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3279.262678][T11274] netlink: 292 bytes leftover after parsing attributes in process `syz.5.11943'. [ 3279.905082][T11299] netlink: 'syz.5.11954': attribute type 1 has an invalid length. [ 3279.960128][T11299] 8021q: adding VLAN 0 to HW filter on device bond13 [ 3280.556535][T11327] netlink: 'syz.5.11967': attribute type 1 has an invalid length. [ 3280.689763][T11327] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3281.311206][T11345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3281.323900][T11345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3281.337882][T11345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3281.354453][T11345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3281.364630][T11345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3281.374146][T11345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3281.618959][T11356] netlink: 'syz.0.11977': attribute type 1 has an invalid length. [ 3281.641860][T11343] chnl_net:caif_netlink_parms(): no params data found [ 3281.980872][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 3281.994612][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 3282.017745][T11343] bridge_slave_0: entered allmulticast mode [ 3282.025756][T11343] bridge_slave_0: entered promiscuous mode [ 3282.061029][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 3282.088758][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 3282.096067][T11343] bridge_slave_1: entered allmulticast mode [ 3282.117339][T11343] bridge_slave_1: entered promiscuous mode [ 3282.261557][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3282.298849][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3282.449054][T11343] team0: Port device team_slave_0 added [ 3282.473657][T11343] team0: Port device team_slave_1 added [ 3282.483357][T11386] netlink: 'syz.5.11989': attribute type 1 has an invalid length. [ 3282.535490][T11386] 8021q: adding VLAN 0 to HW filter on device bond15 [ 3282.680981][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3282.702570][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3282.736173][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3282.789963][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3282.797053][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3282.835632][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3283.082683][T11343] hsr_slave_0: entered promiscuous mode [ 3283.103812][T11343] hsr_slave_1: entered promiscuous mode [ 3283.310107][T11415] netlink: 'syz.5.12002': attribute type 1 has an invalid length. [ 3283.349984][T11415] 8021q: adding VLAN 0 to HW filter on device bond16 [ 3283.417947][ T4849] Bluetooth: hci1: command tx timeout [ 3283.621458][T11343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3283.945238][T11343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3284.192106][T11343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3284.215400][T11447] netlink: 'syz.5.12015': attribute type 1 has an invalid length. [ 3284.253462][T11447] 8021q: adding VLAN 0 to HW filter on device bond17 [ 3284.343808][T11343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3284.854759][T11343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3284.892573][T11343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3284.944286][T11343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3284.976196][T11343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3285.007702][T11467] netlink: 'syz.6.12025': attribute type 1 has an invalid length. [ 3285.127694][T11467] 8021q: adding VLAN 0 to HW filter on device bond19 [ 3285.391533][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3285.428224][T11490] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12030'. [ 3285.444951][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 3285.504418][ T4849] Bluetooth: hci1: command tx timeout [ 3285.514506][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 3285.521865][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3285.533412][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 3285.540832][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3285.552116][T11492] nbd1: detected capacity change from 0 to 63 [ 3285.559366][T11493] block nbd6: NBD_DISCONNECT [ 3285.564082][T11493] block nbd6: Send disconnect failed -32 [ 3285.598238][T11493] block nbd6: shutting down sockets [ 3285.685047][ C1] blk_print_req_error: 67 callbacks suppressed [ 3285.685070][ C1] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.700558][ C1] buffer_io_error: 138 callbacks suppressed [ 3285.700577][ C1] Buffer I/O error on dev nbd6, logical block 0, async page read [ 3285.738061][ C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.747215][ C1] Buffer I/O error on dev nbd6, logical block 1, async page read [ 3285.778492][ C1] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.787679][ C1] Buffer I/O error on dev nbd6, logical block 2, async page read [ 3285.796546][ C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.805761][ C1] Buffer I/O error on dev nbd6, logical block 3, async page read [ 3285.820878][ T4849] block nbd1: Receive control failed (result -104) [ 3285.829816][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3285.842692][T23159] Buffer I/O error on dev nbd6, logical block 0, async page read [ 3285.851769][T23159] Buffer I/O error on dev nbd6, logical block 1, async page read [ 3285.860603][T23159] Buffer I/O error on dev nbd6, logical block 2, async page read [ 3285.870737][T23159] Buffer I/O error on dev nbd6, logical block 3, async page read [ 3285.880360][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3285.890665][T23159] Buffer I/O error on dev nbd6, logical block 0, async page read [ 3285.898995][T23159] Buffer I/O error on dev nbd6, logical block 1, async page read [ 3285.908108][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.917882][T23159] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.927212][T23159] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 3285.939599][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3285.950906][T10700] ldm_validate_partition_table(): Disk read failed. [ 3285.960447][T10700] Dev nbd6: unable to read RDB block 0 [ 3285.983499][T10700] nbd6: unable to read partition table [ 3286.027204][T11502] netlink: 'syz.5.12036': attribute type 1 has an invalid length. [ 3286.059696][T11502] 8021q: adding VLAN 0 to HW filter on device bond18 [ 3286.065006][T10700] ldm_validate_partition_table(): Disk read failed. [ 3286.118515][T10700] Dev nbd6: unable to read RDB block 0 [ 3286.146588][T10700] nbd6: unable to read partition table [ 3286.612430][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3286.753396][T11526] netlink: 'syz.5.12045': attribute type 1 has an invalid length. [ 3286.824616][T11526] 8021q: adding VLAN 0 to HW filter on device bond19 [ 3286.846649][T11343] veth0_vlan: entered promiscuous mode [ 3286.909063][T11535] nbd6: detected capacity change from 0 to 63 [ 3286.918636][T11535] block nbd6: NBD_DISCONNECT [ 3286.918896][T11343] veth1_vlan: entered promiscuous mode [ 3286.926235][T11535] block nbd6: Disconnected due to user request. [ 3286.935196][T11535] block nbd6: shutting down sockets [ 3286.951000][T10700] ldm_validate_partition_table(): Disk read failed. [ 3286.991424][T10700] Dev nbd6: unable to read RDB block 0 [ 3287.020897][T10700] nbd6: unable to read partition table [ 3287.062843][T10700] ldm_validate_partition_table(): Disk read failed. [ 3287.081759][T10700] Dev nbd6: unable to read RDB block 0 [ 3287.102578][T10700] nbd6: unable to read partition table [ 3287.116507][T11343] veth0_macvtap: entered promiscuous mode [ 3287.147360][T11343] veth1_macvtap: entered promiscuous mode [ 3287.243947][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3287.287843][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.305441][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3287.354974][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.382302][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3287.402069][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.412464][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3287.426901][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.441179][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3287.454294][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.486697][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3287.540922][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3287.578389][ T4849] Bluetooth: hci1: command tx timeout [ 3287.583936][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.617484][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3287.628682][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.639157][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3287.656198][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.668805][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3287.689915][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.703906][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3287.715201][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3287.735179][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3287.762934][T11343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3287.783395][T11343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3287.794867][T11343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3287.810638][T11343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3287.848886][T11558] netlink: 'syz.5.12057': attribute type 1 has an invalid length. [ 3287.930285][T11558] 8021q: adding VLAN 0 to HW filter on device bond20 [ 3288.138611][T17216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3288.163612][T17216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3288.277757][T17216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3288.290278][T11565] nbd6: detected capacity change from 0 to 63 [ 3288.297980][T11568] block nbd6: NBD_DISCONNECT [ 3288.318326][T11568] block nbd6: Disconnected due to user request. [ 3288.362111][T17216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3288.370193][T11568] block nbd6: shutting down sockets [ 3288.378793][T10700] ldm_validate_partition_table(): Disk read failed. [ 3288.441442][T10700] Dev nbd6: unable to read RDB block 0 [ 3288.473725][T10700] nbd6: unable to read partition table [ 3288.509986][T10700] ldm_validate_partition_table(): Disk read failed. [ 3288.521971][T10700] Dev nbd6: unable to read RDB block 0 [ 3288.530439][T10700] nbd6: unable to read partition table [ 3288.835847][T11588] netlink: 'syz.6.12068': attribute type 1 has an invalid length. [ 3288.933961][T11588] 8021q: adding VLAN 0 to HW filter on device bond20 [ 3289.089741][T11597] nbd6: detected capacity change from 0 to 63 [ 3289.108227][T11598] block nbd5: NBD_DISCONNECT [ 3289.112922][T11598] block nbd5: Send disconnect failed -32 [ 3289.129958][T11598] block nbd5: shutting down sockets [ 3289.153103][ T4849] block nbd6: Receive control failed (result -104) [ 3289.171947][T10840] ldm_validate_partition_table(): Disk read failed. [ 3289.209444][T10840] Dev nbd5: unable to read RDB block 0 [ 3289.252032][T10840] nbd5: unable to read partition table [ 3289.316258][T10840] ldm_validate_partition_table(): Disk read failed. [ 3289.339380][T10840] Dev nbd5: unable to read RDB block 0 [ 3289.349889][T10840] nbd5: unable to read partition table [ 3289.367305][T11606] netlink: 316 bytes leftover after parsing attributes in process `syz.5.12074'. [ 3289.425823][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 60 seconds [ 3289.437086][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 60 seconds [ 3289.675694][ T4849] Bluetooth: hci1: command tx timeout [ 3289.743032][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12075'. [ 3289.793565][T11615] netlink: 'syz.0.12075': attribute type 7 has an invalid length. [ 3289.807695][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12075'. [ 3289.825503][T11615] team0: entered promiscuous mode [ 3289.831234][T11615] team_slave_0: entered promiscuous mode [ 3289.837945][T11615] team_slave_1: entered promiscuous mode [ 3289.865738][T11615] bond0: entered promiscuous mode [ 3289.877561][T11615] bond_slave_0: entered promiscuous mode [ 3289.892629][T11615] bond_slave_1: entered promiscuous mode [ 3290.293901][T11624] netlink: 'syz.0.12082': attribute type 1 has an invalid length. [ 3290.444290][T11624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3290.638246][T11632] bond1: (slave gretap1): making interface the new active one [ 3290.679564][T11632] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 3291.023241][T11644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3291.092249][T17216] bond1: (slave gretap1): Releasing active interface [ 3292.037596][T17216] hsr_slave_0: left promiscuous mode [ 3292.043912][T17216] hsr_slave_1: left promiscuous mode [ 3292.075568][T17216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3292.085729][T17216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3292.104263][T17216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3292.120957][T17216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3292.138401][T17216] bridge_slave_1: left allmulticast mode [ 3292.146425][T17216] bridge_slave_1: left promiscuous mode [ 3292.159108][T17216] bridge0: port 2(bridge_slave_1) entered disabled state [ 3292.181678][T17216] bridge_slave_0: left allmulticast mode [ 3292.197625][T17216] bridge_slave_0: left promiscuous mode [ 3292.204394][T17216] bridge0: port 1(bridge_slave_0) entered disabled state [ 3292.288127][T17216] veth1_vlan: left allmulticast mode [ 3292.294584][T17216] veth1_macvtap: left promiscuous mode [ 3292.303383][T17216] veth0_macvtap: left promiscuous mode [ 3292.309358][T17216] veth1_vlan: left promiscuous mode [ 3292.314653][T17216] veth0_vlan: left promiscuous mode [ 3293.049860][T17216] bond12 (unregistering): Released all slaves [ 3293.462041][T17216] bond11 (unregistering): Released all slaves [ 3293.852608][T17216] bond10 (unregistering): Released all slaves [ 3294.282064][T17216] bond9 (unregistering): Released all slaves [ 3294.622702][T17216] bond8 (unregistering): Released all slaves [ 3294.924996][T17216] bond7 (unregistering): Released all slaves [ 3294.973978][ T5140] udevd[5140]: worker [10568] /devices/virtual/block/nbd2 is taking a long time [ 3295.215331][T17216] bond6 (unregistering): Released all slaves [ 3295.496376][T17216] bond5 (unregistering): Released all slaves [ 3295.765062][T17216] bond4 (unregistering): Released all slaves [ 3296.044827][T17216] bond3 (unregistering): Released all slaves [ 3296.315423][T17216] bond2 (unregistering): Released all slaves [ 3296.602633][T17216] bond1 (unregistering): Released all slaves [ 3297.446817][T17216] team0 (unregistering): Port device team_slave_1 removed [ 3297.535967][T17216] team0 (unregistering): Port device team_slave_0 removed [ 3297.620106][T17216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3297.700423][T17216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3298.761073][T17216] bond0 (unregistering): Released all slaves [ 3299.434508][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12111'. [ 3300.368789][T11717] netlink: 'syz.5.12123': attribute type 1 has an invalid length. [ 3300.404994][T11717] 8021q: adding VLAN 0 to HW filter on device bond21 [ 3301.155000][T11746] netlink: 'syz.5.12135': attribute type 1 has an invalid length. [ 3301.280589][T11746] 8021q: adding VLAN 0 to HW filter on device bond22 [ 3301.837312][T11781] netlink: 'syz.5.12153': attribute type 1 has an invalid length. [ 3301.896916][T11781] 8021q: adding VLAN 0 to HW filter on device bond23 [ 3302.589939][T11814] netlink: 'syz.0.12166': attribute type 1 has an invalid length. [ 3302.637586][T11814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3303.337255][T11850] netlink: 'syz.6.12180': attribute type 1 has an invalid length. [ 3303.432989][T11850] 8021q: adding VLAN 0 to HW filter on device bond21 [ 3304.066664][T11884] netlink: 'syz.5.12193': attribute type 1 has an invalid length. [ 3304.128935][T11884] 8021q: adding VLAN 0 to HW filter on device bond24 [ 3304.764362][T11914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12204'. [ 3305.158632][T11931] netlink: 'syz.5.12209': attribute type 1 has an invalid length. [ 3305.322890][T11931] 8021q: adding VLAN 0 to HW filter on device bond25 [ 3305.754046][T11948] netlink: 272 bytes leftover after parsing attributes in process `syz.0.12213'. [ 3306.085902][T11963] netlink: 'syz.0.12220': attribute type 1 has an invalid length. [ 3306.129619][T11963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3306.635613][T11982] netlink: 264 bytes leftover after parsing attributes in process `syz.6.12226'. [ 3306.714381][T11986] netlink: 'syz.0.12229': attribute type 1 has an invalid length. [ 3306.797701][T11986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3307.346707][T12012] netlink: 264 bytes leftover after parsing attributes in process `syz.6.12239'. [ 3307.381396][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12240'. [ 3307.579586][T12025] netlink: 'syz.1.12245': attribute type 1 has an invalid length. [ 3307.655079][T12025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3308.089943][T12043] netlink: 264 bytes leftover after parsing attributes in process `syz.1.12252'. [ 3308.159763][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12254'. [ 3308.388283][T12057] netlink: 'syz.1.12259': attribute type 1 has an invalid length. [ 3308.506723][T12057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3308.704924][T12070] netlink: 292 bytes leftover after parsing attributes in process `syz.5.12264'. [ 3308.721782][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12265'. [ 3309.356134][T12095] netlink: 292 bytes leftover after parsing attributes in process `syz.6.12274'. [ 3309.560086][T12101] netlink: 'syz.6.12277': attribute type 1 has an invalid length. [ 3309.702055][T12101] 8021q: adding VLAN 0 to HW filter on device bond22 [ 3310.165248][T12125] netlink: 292 bytes leftover after parsing attributes in process `syz.0.12285'. [ 3310.478840][T12136] netlink: 'syz.0.12290': attribute type 1 has an invalid length. [ 3310.522960][T12136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3311.145990][T12164] netlink: 'syz.6.12301': attribute type 1 has an invalid length. [ 3311.211262][T12164] 8021q: adding VLAN 0 to HW filter on device bond23 [ 3311.851927][T12193] netlink: 'syz.0.12313': attribute type 1 has an invalid length. [ 3311.942587][T12193] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3312.499507][T12213] syzkaller0: entered promiscuous mode [ 3312.505573][T12213] syzkaller0: entered allmulticast mode [ 3315.670795][T23159] block nbd1: Possible stuck request ffff8880219ede00: control (read@0,1024B). Runtime 30 seconds [ 3315.681601][T23159] block nbd1: Possible stuck request ffff8880219ee000: control (read@1024,1024B). Runtime 30 seconds [ 3315.693439][T23159] block nbd1: Possible stuck request ffff8880219ee200: control (read@2048,1024B). Runtime 30 seconds [ 3315.704740][T23159] block nbd1: Possible stuck request ffff8880219ee400: control (read@3072,1024B). Runtime 30 seconds [ 3317.050327][T12224] netlink: 'syz.6.12325': attribute type 1 has an invalid length. [ 3317.066679][T12224] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 3317.605671][T12264] netlink: 'syz.0.12338': attribute type 1 has an invalid length. [ 3317.720550][T12264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3317.962174][T12269] syzkaller0: entered promiscuous mode [ 3317.972660][T12269] syzkaller0: entered allmulticast mode [ 3318.081060][T12279] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12344'. [ 3319.503010][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 90 seconds [ 3319.514033][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 90 seconds [ 3319.527807][ T1683] block nbd6: Possible stuck request ffff888021bbb800: control (read@0,1024B). Runtime 30 seconds [ 3319.538698][ T1683] block nbd6: Possible stuck request ffff888021bbba00: control (read@1024,1024B). Runtime 30 seconds [ 3319.551296][ T1683] block nbd6: Possible stuck request ffff888021bbbc00: control (read@2048,1024B). Runtime 30 seconds [ 3319.575850][ T1683] block nbd6: Possible stuck request ffff888021bbbe00: control (read@3072,1024B). Runtime 30 seconds [ 3322.833424][T12294] netlink: 'syz.1.12350': attribute type 1 has an invalid length. [ 3322.893703][T12294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3323.524379][T12319] syzkaller0: entered promiscuous mode [ 3323.539866][T12319] syzkaller0: entered allmulticast mode [ 3323.626582][T12325] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12362'. [ 3325.570051][T11345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3325.610391][T11345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3325.619861][T11345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3325.632316][T11345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3325.640465][T11345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3325.648243][T11345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3327.828350][ T4849] Bluetooth: hci4: command tx timeout [ 3327.835829][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.844622][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3329.905825][ T4849] Bluetooth: hci4: command tx timeout [ 3330.696979][T12349] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12372'. [ 3330.842693][T12351] syzkaller0: entered promiscuous mode [ 3330.855220][T12351] syzkaller0: entered allmulticast mode [ 3330.877233][T12327] chnl_net:caif_netlink_parms(): no params data found [ 3331.977709][ T4849] Bluetooth: hci4: command tx timeout [ 3334.074815][ T4849] Bluetooth: hci4: command tx timeout [ 3335.952559][T12364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12378'. [ 3336.113621][T12372] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12381'. [ 3336.181650][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 3336.237792][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 3336.268930][T12327] bridge_slave_0: entered allmulticast mode [ 3336.290522][T12327] bridge_slave_0: entered promiscuous mode [ 3336.323468][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 3336.340919][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 3336.356286][T12327] bridge_slave_1: entered allmulticast mode [ 3336.373326][T12327] bridge_slave_1: entered promiscuous mode [ 3336.479543][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3336.512259][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3336.637062][T12327] team0: Port device team_slave_0 added [ 3336.656134][T12327] team0: Port device team_slave_1 added [ 3336.754874][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3336.765600][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3336.814660][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3336.906397][T12384] syzkaller0: entered promiscuous mode [ 3336.917443][T12384] syzkaller0: entered allmulticast mode [ 3336.940436][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3336.965022][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3337.007802][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3337.102021][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12389'. [ 3337.305658][T12395] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12391'. [ 3342.932667][T12327] hsr_slave_0: entered promiscuous mode [ 3342.960241][T12327] hsr_slave_1: entered promiscuous mode [ 3342.966860][T12327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3342.995995][T12327] Cannot create hsr debugfs directory [ 3343.086366][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12397'. [ 3343.549428][T12327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3343.584910][T12327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3343.626578][T12327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3343.647220][T12327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3343.869754][T12433] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12404'. [ 3343.880883][T12327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3343.941549][T12327] 8021q: adding VLAN 0 to HW filter on device team0 [ 3343.971262][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 3343.978531][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3344.021611][T30934] bridge0: port 2(bridge_slave_1) entered blocking state [ 3344.028868][T30934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3344.171816][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12407'. [ 3344.644145][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3344.938353][T12462] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12414'. [ 3345.448548][T12327] veth0_vlan: entered promiscuous mode [ 3345.499269][T12327] veth1_vlan: entered promiscuous mode [ 3345.634578][T12327] veth0_macvtap: entered promiscuous mode [ 3345.675254][T12327] veth1_macvtap: entered promiscuous mode [ 3345.733255][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3345.748541][T23159] block nbd1: Possible stuck request ffff8880219ede00: control (read@0,1024B). Runtime 60 seconds [ 3345.758553][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.760006][T23159] block nbd1: Possible stuck request ffff8880219ee000: control (read@1024,1024B). Runtime 60 seconds [ 3345.781760][T23159] block nbd1: Possible stuck request ffff8880219ee200: control (read@2048,1024B). Runtime 60 seconds [ 3345.792931][T23159] block nbd1: Possible stuck request ffff8880219ee400: control (read@3072,1024B). Runtime 60 seconds [ 3345.804026][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3345.815488][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.825656][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3345.836415][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.848085][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3345.858971][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.868877][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3345.879943][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.896246][T12327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3345.912233][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3345.923069][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.933371][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3345.947412][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.957310][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3345.977896][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3345.997655][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3346.019761][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.037544][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3346.058521][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3346.079710][T12327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3346.122691][T12327] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3346.146478][T12327] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3346.177573][T12327] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3346.196559][T12327] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3346.386530][ T6316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3346.427430][ T6316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3346.496582][T12485] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12423'. [ 3346.508893][ T6316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3346.530030][ T6316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3346.751136][T12489] netlink: 'syz.7.12363': attribute type 1 has an invalid length. [ 3346.773529][T12489] gre0: Master is either lo or non-ether device [ 3347.581825][T12504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12431'. [ 3347.836338][T12508] netlink: 308 bytes leftover after parsing attributes in process `syz.1.12433'. [ 3347.930786][T12510] netlink: 'syz.7.12434': attribute type 1 has an invalid length. [ 3348.403126][T12514] syzkaller0: entered promiscuous mode [ 3348.427529][T12514] syzkaller0: entered allmulticast mode [ 3349.239231][T12526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12441'. [ 3349.578047][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 120 seconds [ 3349.589147][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 120 seconds [ 3349.592560][ T1683] block nbd6: Possible stuck request ffff888021bbb800: control (read@0,1024B). Runtime 60 seconds [ 3349.614535][ T1683] block nbd6: Possible stuck request ffff888021bbba00: control (read@1024,1024B). Runtime 60 seconds [ 3349.625737][ T1683] block nbd6: Possible stuck request ffff888021bbbc00: control (read@2048,1024B). Runtime 60 seconds [ 3349.647639][ T1683] block nbd6: Possible stuck request ffff888021bbbe00: control (read@3072,1024B). Runtime 60 seconds [ 3351.123635][ T5140] udevd[5140]: worker [10628] /devices/virtual/block/nbd1 is taking a long time [ 3351.133652][ T5140] udevd[5140]: worker [10700] /devices/virtual/block/nbd6 is taking a long time [ 3353.667246][T12530] netlink: 308 bytes leftover after parsing attributes in process `syz.0.12443'. [ 3353.676924][T12532] netlink: 'syz.6.12444': attribute type 1 has an invalid length. [ 3353.706029][T12532] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 3354.191126][T12557] netlink: 316 bytes leftover after parsing attributes in process `syz.7.12453'. [ 3354.531834][T12563] netlink: 'syz.7.12456': attribute type 1 has an invalid length. [ 3354.558257][T12563] wg0: Master is either lo or non-ether device [ 3354.573546][T12564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12455'. [ 3355.362644][T12573] syzkaller0: entered promiscuous mode [ 3355.377610][T12573] syzkaller0: entered allmulticast mode [ 3355.394070][T12577] netlink: 316 bytes leftover after parsing attributes in process `syz.7.12462'. [ 3357.962348][T12588] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12466'. [ 3361.676956][T12584] netlink: 'syz.7.12465': attribute type 1 has an invalid length. [ 3361.864769][T12598] netlink: 316 bytes leftover after parsing attributes in process `syz.6.12471'. [ 3362.322744][T12614] netlink: 'syz.0.12479': attribute type 1 has an invalid length. [ 3362.423064][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12480'. [ 3362.427966][T12614] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3362.501104][T12623] netlink: 316 bytes leftover after parsing attributes in process `syz.1.12482'. [ 3363.186490][T12642] netlink: 316 bytes leftover after parsing attributes in process `syz.7.12491'. [ 3363.268830][T12644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12492'. [ 3363.339405][T12646] netlink: 'syz.1.12493': attribute type 1 has an invalid length. [ 3363.444360][T12646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3363.483759][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12495'. [ 3364.466566][T12670] netlink: 316 bytes leftover after parsing attributes in process `syz.7.12502'. [ 3364.497173][T12672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12503'. [ 3364.684935][T12677] netlink: 'syz.0.12506': attribute type 1 has an invalid length. [ 3364.751187][T12677] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3365.130720][T12687] syzkaller0: entered promiscuous mode [ 3365.139824][T12687] syzkaller0: entered allmulticast mode [ 3365.753654][T11345] Bluetooth: hci3: command 0x0406 tx timeout [ 3369.961724][T12693] netlink: 316 bytes leftover after parsing attributes in process `syz.7.12512'. [ 3370.100113][T12702] netlink: 'syz.6.12516': attribute type 1 has an invalid length. [ 3370.144043][T12702] 8021q: adding VLAN 0 to HW filter on device bond24 [ 3370.559188][T12723] netlink: 316 bytes leftover after parsing attributes in process `syz.6.12525'. [ 3370.793956][T12731] netlink: 'syz.1.12529': attribute type 1 has an invalid length. [ 3370.902952][T12731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3370.978108][T12738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12529'. [ 3371.272981][T12747] netlink: 316 bytes leftover after parsing attributes in process `syz.6.12535'. [ 3371.793154][T12762] netlink: 'syz.7.12543': attribute type 1 has an invalid length. [ 3371.957882][T12762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3372.047527][T12771] netlink: 308 bytes leftover after parsing attributes in process `syz.1.12546'. [ 3372.097523][T12762] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12543'. [ 3372.757629][T12794] netlink: 308 bytes leftover after parsing attributes in process `syz.6.12556'. [ 3372.982906][T12800] netlink: 'syz.6.12559': attribute type 1 has an invalid length. [ 3373.131726][T12800] 8021q: adding VLAN 0 to HW filter on device bond25 [ 3373.187950][T12800] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12559'. [ 3373.597551][T12819] netlink: 308 bytes leftover after parsing attributes in process `syz.7.12567'. [ 3373.948911][T12831] netlink: 'syz.1.12573': attribute type 1 has an invalid length. [ 3374.077099][T12831] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3374.154683][T12839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12573'. [ 3375.067629][T12865] __nla_validate_parse: 3 callbacks suppressed [ 3375.067650][T12865] netlink: 308 bytes leftover after parsing attributes in process `syz.7.12589'. [ 3375.829203][T23159] block nbd1: Possible stuck request ffff8880219ede00: control (read@0,1024B). Runtime 90 seconds [ 3375.840836][T23159] block nbd1: Possible stuck request ffff8880219ee000: control (read@1024,1024B). Runtime 90 seconds [ 3375.852402][T23159] block nbd1: Possible stuck request ffff8880219ee200: control (read@2048,1024B). Runtime 90 seconds [ 3375.864842][T23159] block nbd1: Possible stuck request ffff8880219ee400: control (read@3072,1024B). Runtime 90 seconds [ 3375.995414][T11345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3376.008764][T11345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3376.018738][T11345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3376.029432][T11345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3376.037234][T11345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3376.045993][T11345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3376.164874][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12596'. [ 3376.571786][T12890] netlink: 308 bytes leftover after parsing attributes in process `syz.1.12598'. [ 3376.775782][T12876] chnl_net:caif_netlink_parms(): no params data found [ 3377.043586][T12876] bridge0: port 1(bridge_slave_0) entered blocking state [ 3377.050997][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 3377.058500][T12876] bridge_slave_0: entered allmulticast mode [ 3377.066138][T12876] bridge_slave_0: entered promiscuous mode [ 3377.097289][T12876] bridge0: port 2(bridge_slave_1) entered blocking state [ 3377.105272][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 3377.114791][T12876] bridge_slave_1: entered allmulticast mode [ 3377.122619][T12876] bridge_slave_1: entered promiscuous mode [ 3377.146051][T12910] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12605'. [ 3377.189936][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3377.221505][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3377.311513][T12876] team0: Port device team_slave_0 added [ 3377.331190][T12876] team0: Port device team_slave_1 added [ 3377.440846][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3377.466358][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3377.547458][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3377.602425][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3377.627394][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3377.687429][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3377.800555][T12920] netlink: 316 bytes leftover after parsing attributes in process `syz.1.12610'. [ 3377.824502][T12876] hsr_slave_0: entered promiscuous mode [ 3377.849195][T12876] hsr_slave_1: entered promiscuous mode [ 3377.867439][T12876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3377.877642][T12876] Cannot create hsr debugfs directory [ 3377.994355][T12925] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12613'. [ 3378.138277][ T4849] Bluetooth: hci0: command tx timeout [ 3378.372209][T12876] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3378.566505][T12943] syzkaller0: entered promiscuous mode [ 3378.578273][T12943] syzkaller0: entered allmulticast mode [ 3378.680348][T12876] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3378.696506][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12621'. [ 3379.036774][T12876] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.682778][ T1683] block nbd6: Possible stuck request ffff888021bbb800: control (read@0,1024B). Runtime 90 seconds [ 3379.683533][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 150 seconds [ 3379.694292][ T1683] block nbd6: Possible stuck request ffff888021bbba00: control (read@1024,1024B). Runtime 90 seconds [ 3379.713467][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 150 seconds [ 3379.716793][ T1683] block nbd6: Possible stuck request ffff888021bbbc00: control (read@2048,1024B). Runtime 90 seconds [ 3379.740915][ T1683] block nbd6: Possible stuck request ffff888021bbbe00: control (read@3072,1024B). Runtime 90 seconds [ 3380.223455][ T4849] Bluetooth: hci0: command tx timeout [ 3382.314201][ T4849] Bluetooth: hci0: command tx timeout [ 3384.384368][ T4849] Bluetooth: hci0: command tx timeout [ 3384.622073][T12876] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3384.772728][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12629'. [ 3385.063378][T12876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3385.100783][T12876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3385.144912][T12876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3385.180975][T12876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3385.461935][T12876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3385.511448][T12876] 8021q: adding VLAN 0 to HW filter on device team0 [ 3385.548464][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 3385.555946][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3385.653730][T12988] syzkaller0: entered promiscuous mode [ 3385.662214][T12988] syzkaller0: entered allmulticast mode [ 3385.672694][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 3385.680043][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3389.271768][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.286929][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12639'. [ 3389.301500][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3392.382183][T13015] block nbd1: NBD_DISCONNECT [ 3392.397457][T13015] block nbd1: Send disconnect failed -32 [ 3392.403213][T13015] block nbd1: shutting down sockets [ 3392.443794][ C0] blk_print_req_error: 421 callbacks suppressed [ 3392.443815][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.448247][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.450196][ C0] buffer_io_error: 582 callbacks suppressed [ 3392.450212][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3392.459303][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3392.501178][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.510348][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 3392.519287][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.528465][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 3392.536971][ T1683] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.547640][ T1683] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3392.556584][ T1683] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.566405][ T1683] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3392.575085][ T1683] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.585128][ T1683] Buffer I/O error on dev nbd1, logical block 2, async page read [ 3392.593909][ T1683] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.604060][ T1683] Buffer I/O error on dev nbd1, logical block 3, async page read [ 3392.626784][T23159] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3392.636122][T23159] Buffer I/O error on dev nbd1, logical block 0, async page read [ 3392.647157][T23159] Buffer I/O error on dev nbd1, logical block 1, async page read [ 3392.656365][ T1683] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3392.679485][T10628] ldm_validate_partition_table(): Disk read failed. [ 3392.688622][T10628] Dev nbd1: unable to read RDB block 0 [ 3392.696162][T10628] nbd1: unable to read partition table [ 3392.711149][T10628] ldm_validate_partition_table(): Disk read failed. [ 3392.721042][T10628] Dev nbd1: unable to read RDB block 0 [ 3392.730106][T10628] nbd1: unable to read partition table [ 3393.004524][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3393.768823][T12876] veth0_vlan: entered promiscuous mode [ 3393.807994][T12876] veth1_vlan: entered promiscuous mode [ 3393.971172][T13044] syzkaller0: entered promiscuous mode [ 3393.976724][T13044] syzkaller0: entered allmulticast mode [ 3394.047083][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12657'. [ 3394.288420][T12876] veth0_macvtap: entered promiscuous mode [ 3399.240049][T12876] veth1_macvtap: entered promiscuous mode [ 3399.313846][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.325833][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.351240][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.364794][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.375185][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.386516][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.396488][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.411111][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.427448][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.447567][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.465461][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3399.522186][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.549591][T12876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3399.601358][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.642679][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.673157][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.696834][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.734002][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.765484][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.787514][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.816333][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.845225][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.887437][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.909743][T12876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.943297][T12876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.976894][T12876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3400.001733][T12876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.029914][T12876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.044477][T12876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.065362][T12876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3400.518361][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3400.526344][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3400.642222][ T6316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3400.662940][ T6316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3400.991524][T13083] syzkaller0: entered promiscuous mode [ 3400.997075][T13083] syzkaller0: entered allmulticast mode [ 3401.325168][T13085] netlink: 'syz.6.12587': attribute type 1 has an invalid length. [ 3401.352653][T13087] gre0: Master is either lo or non-ether device [ 3401.372439][T13090] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12587'. [ 3406.701549][T11345] Bluetooth: hci1: command 0x0406 tx timeout [ 3407.152229][T13094] syzkaller0: entered promiscuous mode [ 3407.168218][T13094] syzkaller0: entered allmulticast mode [ 3407.425533][T13115] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12681'. [ 3409.754541][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 180 seconds [ 3409.758571][ T1683] block nbd6: Possible stuck request ffff888021bbb800: control (read@0,1024B). Runtime 120 seconds [ 3409.776202][ T1683] block nbd6: Possible stuck request ffff888021bbba00: control (read@1024,1024B). Runtime 120 seconds [ 3409.777428][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 180 seconds [ 3409.789076][ T1683] block nbd6: Possible stuck request ffff888021bbbc00: control (read@2048,1024B). Runtime 120 seconds [ 3409.830395][ T1683] block nbd6: Possible stuck request ffff888021bbbe00: control (read@3072,1024B). Runtime 120 seconds [ 3410.713603][ T5140] udevd[5140]: worker [10568] /devices/virtual/block/nbd2 timeout; kill it [ 3410.739771][ T5140] udevd[5140]: seq 42276 '/devices/virtual/block/nbd2' killed [ 3412.173447][T13131] netlink: 'syz.0.12684': attribute type 1 has an invalid length. [ 3412.312504][T13131] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3412.434612][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12688'. [ 3412.444470][T13136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12684'. [ 3412.668595][T13141] team0: Device gtp0 is of different type [ 3412.902966][T13143] syzkaller0: entered promiscuous mode [ 3412.927511][T13143] syzkaller0: entered allmulticast mode [ 3412.987478][T13147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12690'. [ 3413.238565][T13152] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.12691'. [ 3413.697867][T13159] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12694'. [ 3419.179284][T13167] netlink: 'syz.6.12697': attribute type 1 has an invalid length. [ 3419.192785][T13168] wg2: Master is either lo or non-ether device [ 3419.199385][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12697'. [ 3419.214193][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12697'. [ 3419.507058][T13187] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.12701'. [ 3419.832235][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12706'. [ 3419.932581][T13202] syzkaller0: entered promiscuous mode [ 3419.939159][T13202] syzkaller0: entered allmulticast mode [ 3424.236057][T13204] netlink: 'syz.0.12708': attribute type 1 has an invalid length. [ 3424.245331][T13204] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 3424.255675][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12708'. [ 3424.278731][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12708'. [ 3424.518078][T13218] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.12711'. [ 3424.955193][T13235] syzkaller0: entered promiscuous mode [ 3424.960993][T13235] syzkaller0: entered allmulticast mode [ 3424.975169][T13238] netlink: 'syz.1.12719': attribute type 1 has an invalid length. [ 3425.059502][T13238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3425.829548][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12722'. [ 3429.639963][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12719'. [ 3429.649096][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12719'. [ 3429.781653][T13253] netlink: 304 bytes leftover after parsing attributes in process `syz.6.12724'. [ 3429.925504][T13257] team0: Device gtp0 is of different type [ 3430.251411][T13270] team0: Device gtp0 is of different type [ 3430.333107][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12729'. [ 3430.472188][T13279] netlink: 'syz.0.12731': attribute type 1 has an invalid length. [ 3430.568301][T13279] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3430.607420][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12731'. [ 3430.616847][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12731'. [ 3430.655287][T13286] netlink: 316 bytes leftover after parsing attributes in process `syz.1.12734'. [ 3430.839359][T13283] syzkaller0: entered promiscuous mode [ 3430.848651][T13283] syzkaller0: entered allmulticast mode [ 3430.991771][T13294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12739'. [ 3436.320612][T13315] netlink: 316 bytes leftover after parsing attributes in process `syz.6.12744'. [ 3436.519501][T13321] netlink: 'syz.7.12746': attribute type 1 has an invalid length. [ 3436.610734][T13321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3436.728304][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12746'. [ 3436.787613][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12746'. [ 3437.127639][T13341] netlink: 316 bytes leftover after parsing attributes in process `syz.0.12753'. [ 3437.290216][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12755'. [ 3437.319312][T13343] syzkaller0: entered promiscuous mode [ 3437.325000][T13343] syzkaller0: entered allmulticast mode [ 3437.859419][T13359] netlink: 204 bytes leftover after parsing attributes in process `syz.1.12758'. [ 3437.889555][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12758'. [ 3439.825776][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 210 seconds [ 3439.837146][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 210 seconds [ 3439.841857][ T1683] block nbd6: Possible stuck request ffff888021bbb800: control (read@0,1024B). Runtime 150 seconds [ 3439.859601][ T1683] block nbd6: Possible stuck request ffff888021bbba00: control (read@1024,1024B). Runtime 150 seconds [ 3439.872094][ T1683] block nbd6: Possible stuck request ffff888021bbbc00: control (read@2048,1024B). Runtime 150 seconds [ 3439.887709][ T1683] block nbd6: Possible stuck request ffff888021bbbe00: control (read@3072,1024B). Runtime 150 seconds [ 3442.308267][T13369] netlink: 'syz.7.12761': attribute type 1 has an invalid length. [ 3442.448108][T13369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3442.536086][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12761'. [ 3442.545707][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12761'. [ 3442.731834][T32245] IPVS: starting estimator thread 0... [ 3442.837577][T13388] IPVS: using max 19 ests per chain, 45600 per kthread [ 3443.166901][T13406] netlink: 'syz.7.12774': attribute type 1 has an invalid length. [ 3443.210311][T13406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3443.291083][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12774'. [ 3443.922975][T13436] netlink: 'syz.1.12785': attribute type 1 has an invalid length. [ 3444.029223][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12786'. [ 3444.051852][T13436] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3444.127664][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12785'. [ 3444.598175][T13452] bridge0: port 1(bridge_slave_0) entered disabled state [ 3444.612333][T13452] bridge0: port 2(bridge_slave_1) entered disabled state [ 3444.920921][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 3444.928232][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3444.991349][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 3444.998630][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3445.160142][T13471] netlink: 'syz.0.12797': attribute type 1 has an invalid length. [ 3445.198805][T13471] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3445.238927][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12797'. [ 3445.592549][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12801'. [ 3446.093673][T13500] netlink: 'syz.7.12808': attribute type 1 has an invalid length. [ 3446.146544][T13500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3446.272915][T13507] bridge0: port 1(bridge_slave_0) entered disabled state [ 3446.283808][T13507] bridge0: port 2(bridge_slave_1) entered disabled state [ 3446.399634][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12808'. [ 3446.564078][T13508] bridge0: port 1(bridge_slave_0) entered blocking state [ 3446.571375][T13508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3446.585225][T13508] bridge0: port 2(bridge_slave_1) entered blocking state [ 3446.592674][T13508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3447.296036][T32245] IPVS: starting estimator thread 0... [ 3447.323011][T13532] netlink: 'syz.7.12820': attribute type 1 has an invalid length. [ 3447.370715][T13532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3447.407574][T13530] IPVS: using max 20 ests per chain, 48000 per kthread [ 3447.425250][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12820'. [ 3447.583345][T13537] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.12821'. [ 3448.219985][T13554] netlink: 'syz.7.12830': attribute type 1 has an invalid length. [ 3448.260730][T29933] IPVS: starting estimator thread 0... [ 3448.348561][T13559] IPVS: using max 16 ests per chain, 38400 per kthread [ 3448.362190][T13554] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3448.505226][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12830'. [ 3448.586126][T13563] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.12832'. [ 3448.882109][T13571] block nbd0: NBD_DISCONNECT [ 3448.893205][T13571] block nbd0: Send disconnect failed -32 [ 3448.907530][T13571] block nbd0: shutting down sockets [ 3448.930928][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 3448.966139][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 3449.144359][T13577] bridge0: port 1(bridge_slave_0) entered blocking state [ 3449.151654][T13577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3449.217029][T13577] bridge0: port 2(bridge_slave_1) entered blocking state [ 3449.224326][T13577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3449.653435][T13586] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12840'. [ 3449.694094][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12840'. [ 3449.765842][T13592] netlink: 'syz.6.12843': attribute type 1 has an invalid length. [ 3449.818444][T13592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3450.104964][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12850'. [ 3450.584845][T13618] bridge0: port 1(bridge_slave_0) entered disabled state [ 3450.603302][T13622] netlink: 204 bytes leftover after parsing attributes in process `syz.7.12856'. [ 3450.628120][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12856'. [ 3450.639484][T13618] bridge0: port 2(bridge_slave_1) entered disabled state [ 3450.704981][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.720096][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.911655][T13623] bridge0: port 1(bridge_slave_0) entered blocking state [ 3450.918989][T13623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3450.981650][T13623] bridge0: port 2(bridge_slave_1) entered blocking state [ 3450.988990][T13623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3451.252317][T13626] netlink: 'syz.0.12857': attribute type 1 has an invalid length. [ 3451.363719][T13626] 8021q: adding VLAN 0 to HW filter on device bond13 [ 3451.982827][ T6316] hsr_slave_0: left promiscuous mode [ 3451.997240][ T6316] hsr_slave_1: left promiscuous mode [ 3452.028278][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3452.036045][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3452.055791][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3452.070570][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3452.096582][ T6316] bridge_slave_1: left allmulticast mode [ 3452.105069][ T6316] bridge_slave_1: left promiscuous mode [ 3452.114775][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 3452.128837][T13656] netlink: 204 bytes leftover after parsing attributes in process `syz.6.12869'. [ 3452.141461][ T6316] bridge_slave_0: left allmulticast mode [ 3452.147172][ T6316] bridge_slave_0: left promiscuous mode [ 3452.155121][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12869'. [ 3452.167241][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 3452.279843][ T6316] veth1_macvtap: left promiscuous mode [ 3452.285470][ T6316] veth0_macvtap: left promiscuous mode [ 3452.302633][ T6316] veth1_vlan: left promiscuous mode [ 3452.315427][ T6316] veth0_vlan: left promiscuous mode [ 3452.792259][ T4849] Bluetooth: hci4: command 0x0406 tx timeout [ 3453.829904][ T6316] team0 (unregistering): Port device team_slave_1 removed [ 3453.921329][ T6316] team0 (unregistering): Port device team_slave_0 removed [ 3454.006725][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3454.100595][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3455.025629][ T6316] bond0 (unregistering): Released all slaves [ 3455.238765][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 3455.259378][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 3455.386126][T13665] bridge0: port 1(bridge_slave_0) entered blocking state [ 3455.393432][T13665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3455.432802][T13665] bridge0: port 2(bridge_slave_1) entered blocking state [ 3455.440077][T13665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3456.703368][T13700] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12890'. [ 3456.719724][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12890'. [ 3457.031332][T13710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12894'. [ 3457.894476][T13726] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.12901'. [ 3458.545670][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 3458.584854][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 3458.749210][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 3458.756499][T13739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3458.782004][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 3458.789365][T13739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3459.237075][T13749] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.12911'. [ 3459.971393][T13757] syzkaller0: entered promiscuous mode [ 3459.987743][T13757] syzkaller0: entered allmulticast mode [ 3461.604061][T13781] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.12926'. [ 3465.941640][T13807] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.12939'. [ 3466.300799][T13813] syzkaller0: entered promiscuous mode [ 3466.328371][T13813] syzkaller0: entered allmulticast mode [ 3467.869495][T13833] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.12950'. [ 3469.910530][ T1683] block nbd6: Possible stuck request ffff888021bbb800: control (read@0,1024B). Runtime 180 seconds [ 3469.910569][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 240 seconds [ 3469.922351][ T1683] block nbd6: Possible stuck request ffff888021bbba00: control (read@1024,1024B). Runtime 180 seconds [ 3469.922388][ T1683] block nbd6: Possible stuck request ffff888021bbbc00: control (read@2048,1024B). Runtime 180 seconds [ 3469.922419][ T1683] block nbd6: Possible stuck request ffff888021bbbe00: control (read@3072,1024B). Runtime 180 seconds [ 3469.975282][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 240 seconds [ 3470.535101][T32245] IPVS: starting estimator thread 0... [ 3470.632725][T13838] IPVS: using max 26 ests per chain, 62400 per kthread [ 3471.087785][ T5140] udevd[5140]: worker [10700] /devices/virtual/block/nbd6 timeout; kill it [ 3471.105652][ T5140] udevd[5140]: seq 43907 '/devices/virtual/block/nbd6' killed [ 3472.625594][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12962'. [ 3472.881617][T13868] syzkaller0: entered promiscuous mode [ 3472.892703][T13868] syzkaller0: entered allmulticast mode [ 3473.628587][T13884] netlink: 204 bytes leftover after parsing attributes in process `syz.7.12971'. [ 3473.638461][T13884] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12971'. [ 3478.414789][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12975'. [ 3478.775722][T13906] syzkaller0: entered promiscuous mode [ 3478.793935][T13906] syzkaller0: entered allmulticast mode [ 3478.899696][T13913] block nbd6: NBD_DISCONNECT [ 3478.904378][T13913] block nbd6: Send disconnect failed -32 [ 3478.917415][T13913] block nbd6: shutting down sockets [ 3478.947921][ C0] blk_print_req_error: 135 callbacks suppressed [ 3478.947941][ C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3478.963565][ C0] buffer_io_error: 138 callbacks suppressed [ 3478.963581][ C0] Buffer I/O error on dev nbd6, logical block 0, async page read [ 3478.977379][ C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3478.986477][ C0] Buffer I/O error on dev nbd6, logical block 1, async page read [ 3478.994316][ C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3479.003440][ C0] Buffer I/O error on dev nbd6, logical block 2, async page read [ 3479.011486][ C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3479.020611][ C0] Buffer I/O error on dev nbd6, logical block 3, async page read [ 3479.053205][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3479.062461][T23159] Buffer I/O error on dev nbd6, logical block 0, async page read [ 3479.070665][T23159] Buffer I/O error on dev nbd6, logical block 1, async page read [ 3479.078752][T23159] Buffer I/O error on dev nbd6, logical block 2, async page read [ 3479.087197][T23159] Buffer I/O error on dev nbd6, logical block 3, async page read [ 3479.096015][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3479.113672][T23159] Buffer I/O error on dev nbd6, logical block 0, async page read [ 3479.121947][T23159] Buffer I/O error on dev nbd6, logical block 1, async page read [ 3479.130379][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3479.140353][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3479.150197][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3479.163386][T23159] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 3479.173086][T10700] ldm_validate_partition_table(): Disk read failed. [ 3479.181331][T10700] Dev nbd6: unable to read RDB block 0 [ 3479.191314][T10700] nbd6: unable to read partition table [ 3479.219996][ T5140] udevd[5140]: worker [10700] terminated by signal 9 (Killed) [ 3479.239647][ T5140] udevd[5140]: worker [10700] failed while handling '/devices/virtual/block/nbd6' [ 3479.445530][T13917] netlink: 204 bytes leftover after parsing attributes in process `syz.6.12984'. [ 3479.465154][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12984'. [ 3484.130204][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12985'. [ 3484.453594][T13931] syzkaller0: entered promiscuous mode [ 3484.468268][T13931] syzkaller0: entered allmulticast mode [ 3489.259541][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12996'. [ 3489.689607][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13007'. [ 3489.930333][T13973] syzkaller0: entered promiscuous mode [ 3489.943352][T13973] syzkaller0: entered allmulticast mode [ 3496.240599][T14031] syzkaller0: entered promiscuous mode [ 3496.246268][T14031] syzkaller0: entered allmulticast mode [ 3498.876989][T11345] Bluetooth: hci0: command 0x0406 tx timeout [ 3499.983043][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 270 seconds [ 3499.994068][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 270 seconds [ 3502.516110][T14084] syzkaller0: entered promiscuous mode [ 3502.544121][T14084] syzkaller0: entered allmulticast mode [ 3504.070273][ T4849] Bluetooth: hci0: command 0x0406 tx timeout [ 3509.054715][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13097'. [ 3509.735178][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13109'. [ 3510.739625][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13120'. [ 3511.406816][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13133'. [ 3512.153119][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.160964][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.338531][T14284] netlink: 'syz.0.13139': attribute type 1 has an invalid length. [ 3512.411002][T14284] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3512.602479][T14284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13139'. [ 3513.047596][T14310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13151'. [ 3513.376089][T14319] netlink: 'syz.6.13154': attribute type 1 has an invalid length. [ 3513.494912][T14319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3513.626139][T14323] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13154'. [ 3513.963971][T14338] netlink: 204 bytes leftover after parsing attributes in process `syz.7.13162'. [ 3513.974073][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13162'. [ 3514.331888][T14351] netlink: 'syz.1.13168': attribute type 1 has an invalid length. [ 3514.395480][T14351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3514.471366][T14357] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13171'. [ 3514.497834][T14351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13168'. [ 3514.552293][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13173'. [ 3514.706778][T14362] netlink: 204 bytes leftover after parsing attributes in process `syz.6.13172'. [ 3514.735846][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13172'. [ 3515.660822][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13185'. [ 3515.751324][T14401] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13186'. [ 3515.766342][T14401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13186'. [ 3516.443099][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13194'. [ 3516.750557][T14423] netlink: 204 bytes leftover after parsing attributes in process `syz.0.13197'. [ 3517.233749][T14432] syzkaller0: entered promiscuous mode [ 3517.239676][T14432] syzkaller0: entered allmulticast mode [ 3521.544617][T14447] __nla_validate_parse: 2 callbacks suppressed [ 3521.544636][T14447] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13207'. [ 3521.563665][T14447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13207'. [ 3522.611421][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13211'. [ 3523.189716][T14469] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.13217'. [ 3524.017509][T14478] syzkaller0: entered promiscuous mode [ 3524.032281][T14478] syzkaller0: entered allmulticast mode [ 3524.788720][T14500] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.13228'. [ 3525.104658][T14502] netlink: 216 bytes leftover after parsing attributes in process `syz.0.13229'. [ 3525.533624][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13231'. [ 3528.371485][T14512] netlink: 204 bytes leftover after parsing attributes in process `syz.7.13232'. [ 3528.401797][T14512] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13232'. [ 3529.641529][T14524] netlink: 216 bytes leftover after parsing attributes in process `syz.1.13238'. [ 3530.035673][T14535] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13242'. [ 3530.046782][T14535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13242'. [ 3530.057697][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 300 seconds [ 3530.068695][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 300 seconds [ 3530.641278][T14548] netlink: 216 bytes leftover after parsing attributes in process `syz.1.13247'. [ 3530.887902][T14556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13252'. [ 3531.085943][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13254'. [ 3531.761963][T14573] nbd: must specify an index to disconnect [ 3531.899465][T14575] netlink: 216 bytes leftover after parsing attributes in process `syz.7.13259'. [ 3532.398530][T14588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13266'. [ 3532.781344][T14598] nbd: must specify an index to disconnect [ 3534.257834][T14622] nbd: must specify an index to disconnect [ 3534.437876][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13280'. [ 3534.663235][T14632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13283'. [ 3536.129740][T14665] netlink: 204 bytes leftover after parsing attributes in process `syz.0.13291'. [ 3536.146034][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13291'. [ 3536.397840][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 3536.405627][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 3537.183847][T14648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3537.246089][T14648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3537.783595][T14648] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.793151][T14648] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.803099][T14648] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3537.812468][T14648] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3538.112341][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13295'. [ 3538.137015][T14679] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13297'. [ 3538.980241][T14700] netlink: 208 bytes leftover after parsing attributes in process `syz.7.13303'. [ 3539.048049][T14702] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13304'. [ 3539.072158][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13304'. [ 3539.277508][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13307'. [ 3539.619081][T14716] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13311'. [ 3539.935911][T14724] netlink: 208 bytes leftover after parsing attributes in process `syz.1.13314'. [ 3540.098115][T14726] netlink: 204 bytes leftover after parsing attributes in process `syz.7.13315'. [ 3540.145271][T14726] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13315'. [ 3540.791508][T14739] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13320'. [ 3540.944289][T14743] xt_connbytes: Forcing CT accounting to be enabled [ 3541.230517][T14750] netlink: 204 bytes leftover after parsing attributes in process `syz.6.13325'. [ 3541.250821][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13325'. [ 3541.342791][T14752] netlink: 'syz.7.13326': attribute type 4 has an invalid length. [ 3541.357757][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13327'. [ 3541.393772][T14752] IPVS: Error connecting to the multicast addr [ 3541.731879][T14762] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13330'. [ 3541.789571][T14765] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.13331'. [ 3542.658461][T14782] syzkaller0: entered promiscuous mode [ 3542.664576][T14782] syzkaller0: entered allmulticast mode [ 3547.481478][T14819] __nla_validate_parse: 3 callbacks suppressed [ 3547.481497][T14819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13351'. [ 3547.727865][T14824] syzkaller0: entered promiscuous mode [ 3547.741878][T14824] syzkaller0: entered allmulticast mode [ 3547.773093][T14827] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.13354'. [ 3549.437648][T14833] netlink: 204 bytes leftover after parsing attributes in process `syz.6.13356'. [ 3549.446879][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13356'. [ 3553.231874][T14849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13362'. [ 3553.251530][T14847] syzkaller1: entered promiscuous mode [ 3553.257077][T14847] syzkaller1: entered allmulticast mode [ 3553.588986][T14863] netlink: 'syz.6.13368': attribute type 72 has an invalid length. [ 3553.833467][T14867] syzkaller0: entered promiscuous mode [ 3553.845994][T14867] syzkaller0: entered allmulticast mode [ 3559.168101][T14873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13372'. [ 3559.186192][T14875] netlink: 'syz.7.13373': attribute type 5 has an invalid length. [ 3559.300126][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13382'. [ 3559.605829][T14890] netlink: 'syz.6.13378': attribute type 72 has an invalid length. [ 3559.828062][T14903] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13384'. [ 3559.994999][T14902] syzkaller0: entered promiscuous mode [ 3560.006404][T14902] syzkaller0: entered allmulticast mode [ 3560.137743][T23159] block nbd2: Possible stuck request ffff888021a98000: control (read@0,1024B). Runtime 330 seconds [ 3560.156827][T23159] block nbd2: Possible stuck request ffff888021a98200: control (read@1024,3072B). Runtime 330 seconds [ 3560.354798][T14919] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.13391'. [ 3561.171125][T14923] netlink: 'syz.1.13393': attribute type 72 has an invalid length. [ 3561.904395][T14945] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.13403'. [ 3563.348996][ T28] INFO: task udevd:10568 blocked for more than 143 seconds. [ 3563.361744][ T28] Not tainted 6.6.94-syzkaller #0 [ 3563.367429][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3563.376143][ T28] task:udevd state:D stack:25712 pid:10568 ppid:5140 flags:0x00004006 [ 3563.385630][ T28] Call Trace: [ 3563.389071][ T28] [ 3563.392057][ T28] __schedule+0x14e2/0x4580 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3563.396694][ T28] ? asan.module_dtor+0x20/0x20 [ 3563.448726][ T28] ? mark_lock+0x94/0x320 [ 3563.496611][ T28] ? lock_chain_count+0x20/0x20 [ 3563.510831][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 3563.516036][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 3563.545275][ T28] schedule+0xbd/0x170 [ 3563.550068][ T28] io_schedule+0x80/0xd0 [ 3563.554377][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 3563.561559][ T28] ? folio_wait_bit+0x30/0x30 [ 3563.566304][ T28] ? _compound_head+0x120/0x120 [ 3563.571281][ T28] ? filemap_add_folio+0x192/0x3c0 [ 3563.576557][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 3563.582247][ T28] ? blkdev_writepage+0x30/0x30 [ 3563.587136][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 3563.594932][ T28] ? blkdev_writepage+0x30/0x30 [ 3563.601300][ T28] read_part_sector+0xd2/0x350 [ 3563.606120][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 3563.612008][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 3563.617858][ T28] ? put_partition+0x350/0x350 [ 3563.622768][ T28] ? alloc_pages+0x4dc/0x740 [ 3563.627770][ T28] bdev_disk_changed+0x73a/0x1410 [ 3563.632848][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 3563.638248][ T28] ? iput+0x347/0x920 [ 3563.642303][ T28] blkdev_get_whole+0x30d/0x390 [ 3563.647717][ T28] blkdev_get_by_dev+0x279/0x600 [ 3563.652733][ T28] blkdev_open+0x152/0x360 [ 3563.657374][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 3563.663444][ T28] do_dentry_open+0x8c6/0x1500 [ 3563.668479][ T28] path_openat+0x274b/0x3190 [ 3563.673125][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 3563.678266][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3563.684393][ T28] ? verify_lock_unused+0x140/0x140 [ 3563.690753][ T28] ? do_filp_open+0x3d0/0x3d0 [ 3563.695476][ T28] ? __virt_addr_valid+0x18c/0x540 [ 3563.701921][ T28] do_filp_open+0x1c5/0x3d0 [ 3563.706496][ T28] ? vfs_tmpfile+0x490/0x490 [ 3563.711254][ T28] ? _raw_spin_unlock+0x28/0x40 [ 3563.716160][ T28] ? alloc_fd+0x58f/0x630 [ 3563.720844][ T28] do_sys_openat2+0x12c/0x1c0 [ 3563.725606][ T28] ? do_sys_open+0xe0/0xe0 [ 3563.730126][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 3563.736194][ T28] ? lock_chain_count+0x20/0x20 [ 3563.741583][ T28] __x64_sys_openat+0x139/0x160 [ 3563.746490][ T28] do_syscall_64+0x55/0xb0 [ 3563.751055][ T28] ? clear_bhb_loop+0x40/0x90 [ 3563.755762][ T28] ? clear_bhb_loop+0x40/0x90 [ 3563.760540][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3563.767585][ T28] RIP: 0033:0x7f0c028a7407 [ 3563.772122][ T28] RSP: 002b:00007ffce1d721f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 3563.780726][ T28] RAX: ffffffffffffffda RBX: 00007f0c02f73880 RCX: 00007f0c028a7407 [ 3563.788864][ T28] RDX: 00000000000a0800 RSI: 0000557494554440 RDI: ffffffffffffff9c [ 3563.796876][ T28] RBP: 0000557494553910 R08: 0000000000000000 R09: 0000000000000000 [ 3563.805145][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557494567b50 [ 3563.813253][ T28] R13: 000055749456daf0 R14: 0000000000000000 R15: 0000557494567b50 [ 3563.821607][ T28] [ 3563.824777][ T28] [ 3563.824777][ T28] Showing all locks held in the system: [ 3563.832843][ T28] 1 lock held by khungtaskd/28: [ 3563.837804][ T28] #0: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 3563.847894][ T28] 1 lock held by klogd/5129: [ 3563.852531][ T28] #0: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 3563.862672][ T28] 2 locks held by getty/5527: [ 3563.868764][ T28] #0: ffff888031c680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3563.878674][ T28] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 3563.889003][ T28] 3 locks held by kworker/u4:12/6317: [ 3563.894398][ T28] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 3563.906250][ T28] #1: ffffc9000c06fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 3563.917622][ T28] #2: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 3563.926766][ T28] 2 locks held by kworker/u4:0/30323: [ 3563.932285][ T28] 1 lock held by udevd/10568: [ 3563.936985][ T28] #0: ffff8880218e34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 3563.947232][ T28] 2 locks held by syz.6.13385/14900: [ 3563.952562][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 3563.961828][ T28] #1: ffffffff8cd35738 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 3563.973750][ T28] 2 locks held by syz.7.13391/14919: [ 3563.980193][ T28] #0: ffffffff8e013a50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 3563.988654][ T28] #1: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x930 [ 3563.998153][ T28] 2 locks held by syz.1.13403/14945: [ 3564.003474][ T28] #0: ffffffff8e013a50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 3564.011739][ T28] #1: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x930 [ 3564.021679][ T28] 1 lock held by syz.0.13404/14947: [ 3564.026908][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 3564.041892][ T28] 1 lock held by syz.0.13404/14948: [ 3564.047383][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 3564.056850][ T28] 1 lock held by syz.0.13404/14949: [ 3564.062546][ T28] #0: ffffffff8dfaecc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 3564.073443][ T28] [ 3564.075813][ T28] ============================================= [ 3564.075813][ T28] [ 3564.084364][ T28] NMI backtrace for cpu 1 [ 3564.088746][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.6.94-syzkaller #0 [ 3564.096593][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3564.106701][ T28] Call Trace: [ 3564.110004][ T28] [ 3564.112950][ T28] dump_stack_lvl+0x16c/0x230 [ 3564.117651][ T28] ? preempt_count_add+0x91/0x1a0 [ 3564.122701][ T28] ? show_regs_print_info+0x20/0x20 [ 3564.128015][ T28] ? load_image+0x3b0/0x3b0 [ 3564.132562][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 3564.137553][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 3564.143735][ T28] ? _printk+0xd0/0x110 [ 3564.147913][ T28] ? load_image+0x3b0/0x3b0 [ 3564.152449][ T28] ? load_image+0x3b0/0x3b0 [ 3564.156974][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 3564.163068][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 3564.169079][ T28] watchdog+0xf41/0xf80 [ 3564.173255][ T28] ? watchdog+0x1e1/0xf80 [ 3564.177617][ T28] kthread+0x2fa/0x390 [ 3564.181709][ T28] ? hungtask_pm_notify+0x90/0x90 [ 3564.186752][ T28] ? kthread_blkcg+0xd0/0xd0 [ 3564.191357][ T28] ret_from_fork+0x48/0x80 [ 3564.195787][ T28] ? kthread_blkcg+0xd0/0xd0 [ 3564.200391][ T28] ret_from_fork_asm+0x11/0x20 [ 3564.205186][ T28] [ 3564.210500][ T28] Sending NMI from CPU 1 to CPUs 0: [ 3564.215768][ C0] NMI backtrace for cpu 0 [ 3564.215791][ C0] CPU: 0 PID: 30323 Comm: kworker/u4:0 Not tainted 6.6.94-syzkaller #0 [ 3564.215808][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3564.215820][ C0] Workqueue: 0x0 (bond5) [ 3564.215842][ C0] RIP: 0010:check_preemption_disabled+0x47/0x110 [ 3564.215930][ C0] Code: 9d 75 65 8b 0d 62 6d 9d 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b <41> 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 [ 3564.215945][ C0] RSP: 0018:ffffc900036a7960 EFLAGS: 00000082 [ 3564.215958][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7ad8bc2ca1015400 [ 3564.215976][ C0] RDX: 0000000000000000 RSI: ffffffff8afc68e0 RDI: ffffffff8afc68a0 [ 3564.215988][ C0] RBP: ffffc900036a7aa8 R08: ffffffff8e49ab2f R09: 1ffffffff1c93565 [ 3564.216001][ C0] R10: dffffc0000000000 R11: fffffbfff1c93566 R12: 1ffff920006d4f40 [ 3564.216013][ C0] R13: ffffffff97079a98 R14: 0000000000000000 R15: dffffc0000000000 [ 3564.216025][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3564.216039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3564.216050][ C0] CR2: 0000563072e0b000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 3564.216065][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3564.216074][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3564.216084][ C0] Call Trace: [ 3564.216091][ C0] [ 3564.216098][ C0] rcu_is_watching+0x15/0xb0 [ 3564.216122][ C0] lock_acquire+0xcb/0x410 [ 3564.216146][ C0] ? read_lock_is_recursive+0x20/0x20 [ 3564.216167][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 3564.216192][ C0] _raw_spin_lock_irqsave+0xa8/0xf0 [ 3564.216218][ C0] ? debug_object_deactivate+0x67/0x350 [ 3564.216246][ C0] ? _raw_spin_lock+0x40/0x40 [ 3564.216277][ C0] debug_object_deactivate+0x67/0x350 [ 3564.216306][ C0] process_scheduled_works+0x324/0x15b0 [ 3564.216343][ C0] ? assign_work+0x400/0x400 [ 3564.216367][ C0] ? assign_work+0x39e/0x400 [ 3564.216389][ C0] worker_thread+0xa55/0xfc0 [ 3564.216410][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 3564.216436][ C0] ? _raw_spin_unlock+0x40/0x40 [ 3564.216473][ C0] kthread+0x2fa/0x390 [ 3564.216487][ C0] ? pr_cont_work+0x560/0x560 [ 3564.216507][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3564.216522][ C0] ret_from_fork+0x48/0x80 [ 3564.216541][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3564.216557][ C0] ret_from_fork_asm+0x11/0x20 [ 3564.216588][ C0] [ 3564.220608][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 3564.220626][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.6.94-syzkaller #0 [ 3564.220648][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3564.220664][ T28] Call Trace: [ 3564.220673][ T28] [ 3564.220683][ T28] dump_stack_lvl+0x16c/0x230 [ 3564.220726][ T28] ? show_regs_print_info+0x20/0x20 [ 3564.220759][ T28] ? load_image+0x3b0/0x3b0 [ 3564.220803][ T28] panic+0x2c0/0x710 [ 3564.220847][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 3564.220882][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 3564.220908][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 3564.220940][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 3564.220994][ T28] watchdog+0xf80/0xf80 [ 3564.221027][ T28] ? watchdog+0x1e1/0xf80 [ 3564.221064][ T28] kthread+0x2fa/0x390 [ 3564.221084][ T28] ? hungtask_pm_notify+0x90/0x90 [ 3564.221114][ T28] ? kthread_blkcg+0xd0/0xd0 [ 3564.221136][ T28] ret_from_fork+0x48/0x80 [ 3564.221164][ T28] ? kthread_blkcg+0xd0/0xd0 [ 3564.221186][ T28] ret_from_fork_asm+0x11/0x20 [ 3564.221233][ T28] [ 3564.221804][ T28] Kernel Offset: disabled [ 3564.576294][ T28] Rebooting in 86400 seconds..