last executing test programs: 7.607275602s ago: executing program 3 (id=326): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 4.509958218s ago: executing program 0 (id=329): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x30}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000100)='}', 0x1, 0x0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="d5", 0x1}], 0x1) 4.477491369s ago: executing program 3 (id=332): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x8, 0x3}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$igmp6(0xa, 0x3, 0x2) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.350091182s ago: executing program 3 (id=333): r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000000040)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x1000001}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={0xa, 0x4, 0x4, @local, 0x5}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$netlink(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000008c0)}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000980)}}], 0x2, 0x4000801) syz_ublk_add_dev(r0, 0x0, r1, r2, 0x0, &(0x7f0000000240)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 4.246640045s ago: executing program 2 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r2, &(0x7f0000000080)={0x23, 0x2, 0x8}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f00000000c0)={0x23, 0x1, 0x8}, 0x10) connect$phonet_pipe(r3, &(0x7f0000000100)={0x23, 0x2, 0x8}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3d009dab6fea00", @ANYRES16=0x0, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a0000060001000800000008000b000200000005001400fe"], 0x3c}}, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x2, 0xd, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @sadb_lifetime={0x4, 0x0, 0x78f28241, 0x2, 0x4, 0x10}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4e, @mcast1, 0x5}}]}, 0x98}}, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sendto$phonet(r2, &(0x7f0000000300)="0041010000000000", 0x8, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x223, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) connect$netlink(r5, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendto$phonet(r2, &(0x7f0000000400)="0020010000004500002800004000400600007f0000017f000001", 0x1b, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) recvfrom$phonet(r3, &(0x7f0000000500)=""/100, 0x64, 0x40, 0x0, 0x0) 3.504469543s ago: executing program 0 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 3.478385444s ago: executing program 0 (id=338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 3.421941265s ago: executing program 3 (id=339): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001200)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x1c, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 3.324368958s ago: executing program 0 (id=340): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001440)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000001480)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x1e, 0x4, 0x0) socket(0x10, 0x80002, 0x0) 3.24699628s ago: executing program 3 (id=342): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) 3.211786781s ago: executing program 2 (id=343): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000740)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f00000008c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x2000}], 0x68000, 0x0) 3.032567055s ago: executing program 2 (id=345): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000140)={'syzkaller0\x00'}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/197, 0xc5}], 0x1) 2.967622597s ago: executing program 1 (id=346): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 2.867939139s ago: executing program 1 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 2.696620194s ago: executing program 1 (id=348): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000480)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0xffff, 0x0, 0xffff, {[@md5sig={0x13, 0x12, "7ce4ef91f2326ecb65efe871e4664230"}]}}}}}}}}, 0x0) 2.658580095s ago: executing program 1 (id=349): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.155888577s ago: executing program 2 (id=350): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 187.923875ms ago: executing program 2 (id=351): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001200)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x1c, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffe, 0x0, 0x1001, {[@nop, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 182.423556ms ago: executing program 3 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) write(r0, &(0x7f0000000040)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r2, &(0x7f0000000080)={0x23, 0x2, 0x8}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f00000000c0)={0x23, 0x1, 0x8}, 0x10) connect$phonet_pipe(r3, &(0x7f0000000100)={0x23, 0x2, 0x8}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3d009dab6fea00", @ANYRES16=0x0, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a0000060001000800000008000b000200000005001400fe"], 0x3c}}, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x2, 0xd, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @sadb_lifetime={0x4, 0x0, 0x78f28241, 0x2, 0x4, 0x10}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4e, @mcast1, 0x5}}]}, 0x98}}, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sendto$phonet(r2, &(0x7f0000000300)="0041010000000000", 0x8, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x223, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) connect$netlink(r5, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendto$phonet(r2, &(0x7f0000000400)="0020010000004500002800004000400600007f0000017f000001", 0x1b, 0x0, &(0x7f0000000340)={0x23, 0x1, 0x8}, 0x10) recvfrom$phonet(r3, &(0x7f0000000500)=""/100, 0x64, 0x40, 0x0, 0x0) 157.144396ms ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 148.663886ms ago: executing program 0 (id=354): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x140e, 0x529, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) 44.595229ms ago: executing program 1 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 530.97µs ago: executing program 2 (id=356): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 0s ago: executing program 0 (id=357): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000003c0)="560003002a00000000000000000101000100"/48, 0x30) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0xfe}, 0x800, 0x0, 0x103, 0xd}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f00000002c0), 0x4) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000340)}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0x0, @empty, 0x5}}, 0x7, 0xffff, 0xfffffffe, 0x693fffd, 0x49, 0x9, 0xfe}, &(0x7f00000004c0)=0x9c) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r7, 0x1, 0x70bd28, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x34}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x34, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. [ 61.510379][ T5756] cgroup: Unknown subsys name 'net' [ 61.620538][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.031840][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.222874][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.230892][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.242420][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.250369][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.252445][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.258370][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.265428][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.280643][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.282136][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.295137][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.297134][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.309704][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.316883][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.326116][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.328969][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.334231][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.341007][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.348177][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.354039][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.361476][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.369664][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.383458][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.385201][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.400281][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.457899][ T5770] (null): rxe_set_mtu: Set mtu to 1024 [ 65.476304][ T5768] (null): rxe_set_mtu: Set mtu to 1024 [ 65.483218][ T5768] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.494434][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.501223][ T5771] (null): rxe_set_mtu: Set mtu to 1024 [ 65.517758][ T5771] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.524463][ T5769] (null): rxe_set_mtu: Set mtu to 1024 [ 65.530047][ T5769] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.537371][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.552167][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.736280][ T5770] infiniband rxe0: set active [ 65.751142][ T969] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.754746][ T5770] infiniband rxe0: added rxe_eth0 [ 65.776547][ T5434] infiniband rxe0: set active [ 65.804180][ T969] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.836824][ T5770] RDS/IB: rxe0: added [ 65.841382][ T5770] smc: adding ib device rxe0 with port count 1 [ 65.866185][ T5770] smc: ib device rxe0 port 1 has pnetid [ 65.885968][ T969] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.922549][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.958124][ T969] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.074248][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 66.148783][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 66.175189][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.258049][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 66.409689][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.419990][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.428894][ T5768] bridge_slave_0: entered allmulticast mode [ 66.438964][ T5768] bridge_slave_0: entered promiscuous mode [ 66.449343][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.506914][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.514058][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.544504][ T5768] bridge_slave_1: entered allmulticast mode [ 66.564250][ T5768] bridge_slave_1: entered promiscuous mode [ 66.665996][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.673139][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.704367][ T5769] bridge_slave_0: entered allmulticast mode [ 66.717952][ T5769] bridge_slave_0: entered promiscuous mode [ 66.736209][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.743352][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.755964][ T5769] bridge_slave_1: entered allmulticast mode [ 66.763266][ T5769] bridge_slave_1: entered promiscuous mode [ 66.771850][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.779827][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.787045][ T5771] bridge_slave_0: entered allmulticast mode [ 66.793952][ T5771] bridge_slave_0: entered promiscuous mode [ 66.803625][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.834325][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.843557][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.852764][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.859950][ T5771] bridge_slave_1: entered allmulticast mode [ 66.867729][ T5771] bridge_slave_1: entered promiscuous mode [ 66.875852][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.907084][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.915883][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.948260][ T5768] team0: Port device team_slave_0 added [ 66.959476][ T5768] team0: Port device team_slave_1 added [ 66.982239][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.053233][ T5769] team0: Port device team_slave_0 added [ 67.065705][ T5769] team0: Port device team_slave_1 added [ 67.073541][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.091844][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.099395][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.125839][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.170719][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.177915][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.207692][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.225113][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.232067][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.260230][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.291612][ T5771] team0: Port device team_slave_0 added [ 67.298383][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.305505][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.331670][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.361286][ T5771] team0: Port device team_slave_1 added [ 67.392389][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.399478][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.425715][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.438477][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.445691][ T5085] Bluetooth: hci1: command tx timeout [ 67.445793][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.451309][ T5085] Bluetooth: hci3: command tx timeout [ 67.483210][ T5781] Bluetooth: hci0: command tx timeout [ 67.485487][ T5782] Bluetooth: hci2: command tx timeout [ 67.495621][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.525821][ T5768] hsr_slave_0: entered promiscuous mode [ 67.532073][ T5768] hsr_slave_1: entered promiscuous mode [ 67.616009][ T5769] hsr_slave_0: entered promiscuous mode [ 67.622308][ T5769] hsr_slave_1: entered promiscuous mode [ 67.628397][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.636445][ T5769] Cannot create hsr debugfs directory [ 67.647252][ T5771] hsr_slave_0: entered promiscuous mode [ 67.654028][ T5771] hsr_slave_1: entered promiscuous mode [ 67.661100][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.668710][ T5771] Cannot create hsr debugfs directory [ 67.985874][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 68.101524][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.119609][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.131052][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.140425][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.150055][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.157800][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.165261][ T5770] bridge_slave_0: entered allmulticast mode [ 68.171905][ T5770] bridge_slave_0: entered promiscuous mode [ 68.179935][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.187128][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.194507][ T5770] bridge_slave_1: entered allmulticast mode [ 68.201133][ T5770] bridge_slave_1: entered promiscuous mode [ 68.231375][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.257464][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.304819][ T5770] team0: Port device team_slave_0 added [ 68.320522][ T5770] team0: Port device team_slave_1 added [ 68.349560][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.356643][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.382621][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.395638][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.402583][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.429113][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.440744][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.454808][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.464507][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.497275][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.541278][ T5770] hsr_slave_0: entered promiscuous mode [ 68.548654][ T5770] hsr_slave_1: entered promiscuous mode [ 68.555241][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.562800][ T5770] Cannot create hsr debugfs directory [ 68.686394][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.697414][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.713110][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.727544][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.826416][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.901956][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.923734][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.970987][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.978357][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.992219][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.003414][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.018173][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.025312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.042883][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.052646][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.066656][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.096715][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.103825][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.130422][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.137528][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.173954][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.246309][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.268806][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.275981][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.322587][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.329780][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.437960][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.514823][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.524864][ T5782] Bluetooth: hci3: command tx timeout [ 69.525473][ T51] Bluetooth: hci2: command tx timeout [ 69.530265][ T5782] Bluetooth: hci1: command tx timeout [ 69.542080][ T5085] Bluetooth: hci0: command tx timeout [ 69.559653][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.566850][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.582345][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.589510][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.739810][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.817858][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.841643][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.901104][ T5769] veth0_vlan: entered promiscuous mode [ 69.945559][ T5769] veth1_vlan: entered promiscuous mode [ 70.007954][ T5768] veth0_vlan: entered promiscuous mode [ 70.034892][ T5771] veth0_vlan: entered promiscuous mode [ 70.069959][ T5768] veth1_vlan: entered promiscuous mode [ 70.081166][ T5771] veth1_vlan: entered promiscuous mode [ 70.096134][ T5769] veth0_macvtap: entered promiscuous mode [ 70.131266][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.143514][ T5769] veth1_macvtap: entered promiscuous mode [ 70.172780][ T5771] veth0_macvtap: entered promiscuous mode [ 70.183529][ T5771] veth1_macvtap: entered promiscuous mode [ 70.198796][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.222121][ T5768] veth0_macvtap: entered promiscuous mode [ 70.233266][ T5768] veth1_macvtap: entered promiscuous mode [ 70.253363][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.278136][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.287661][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.297785][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.306583][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.320094][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.331522][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.343867][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.367934][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.378506][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.389875][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.400383][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.411807][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.429038][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.439712][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.451517][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.469641][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.480444][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.490626][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.502003][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.513035][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.522146][ T5770] veth0_vlan: entered promiscuous mode [ 70.541154][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.550505][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.559596][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.570203][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.588394][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.599112][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.608814][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.617622][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.630204][ T5770] veth1_vlan: entered promiscuous mode [ 70.758330][ T5770] veth0_macvtap: entered promiscuous mode [ 70.799631][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.819044][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.835275][ T5770] veth1_macvtap: entered promiscuous mode [ 70.859581][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.868436][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.899751][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.913521][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.924429][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.935322][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.945302][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.955832][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.968066][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.993390][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.993762][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.011990][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.023805][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.034756][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.036518][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.042561][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.050394][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.071267][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.082251][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.092314][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.102961][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.113802][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.153971][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.163477][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.172544][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.181742][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.225253][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.233087][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.431577][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.459579][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.461722][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.466474][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.528804][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.580879][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.604859][ T5085] Bluetooth: hci2: command tx timeout [ 71.610369][ T5782] Bluetooth: hci3: command tx timeout [ 71.615874][ T5781] Bluetooth: hci0: command tx timeout [ 71.616715][ T51] Bluetooth: hci1: command tx timeout [ 71.874896][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 71.894604][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 71.939344][ T5879] smc: removing ib device rxe0 [ 72.689636][ T5901] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 72.812363][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.902673][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.938934][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.114433][ T5912] syzkaller0: entered promiscuous mode [ 73.119952][ T5912] syzkaller0: entered allmulticast mode [ 73.670998][ T5929] syzkaller0: entered promiscuous mode [ 73.685768][ T51] Bluetooth: hci2: command tx timeout [ 73.685790][ T5085] Bluetooth: hci3: command tx timeout [ 73.691170][ T51] Bluetooth: hci0: command tx timeout [ 73.691210][ T51] Bluetooth: hci1: command tx timeout [ 73.704211][ T5929] syzkaller0: entered allmulticast mode [ 73.766152][ T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.780297][ T5933] tipc: Started in network mode [ 73.799472][ T5933] tipc: Node identity 3ae41ce06b4e, cluster identity 4711 [ 73.822603][ T5933] tipc: Enabled bearer , priority 0 [ 73.855473][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.880872][ T5928] tipc: Resetting bearer [ 73.924688][ T5937] Zero length message leads to an empty skb [ 73.987644][ T5928] tipc: Disabling bearer [ 74.313798][ T5960] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 74.407877][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.884500][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.206335][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.365609][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.769299][ T175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.018797][ T5944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.275595][ T6000] syzkaller0: entered promiscuous mode [ 77.281388][ T6000] syzkaller0: entered allmulticast mode [ 77.488900][ T6009] block nbd2: NBD_DISCONNECT [ 77.545460][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34'. [ 77.814248][ C1] net_ratelimit: 12 callbacks suppressed [ 77.814265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.860753][ T6035] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.706250][ T6063] syzkaller0: entered promiscuous mode [ 78.711790][ T6063] syzkaller0: entered allmulticast mode [ 79.119503][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 79.363852][ T6088] null_blk: disk nullb1 created [ 79.568087][ T6102] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.420508][ T6141] syzkaller0: entered promiscuous mode [ 80.426803][ T6141] syzkaller0: entered allmulticast mode [ 80.670018][ T6019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.862870][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 81.033513][ T6167] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 81.096953][ T6169] syzkaller0: entered promiscuous mode [ 81.103781][ T6169] syzkaller0: entered allmulticast mode [ 81.594840][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 81.697982][ T28] cfg80211: failed to load regulatory.db [ 81.857159][ T6216] syzkaller0: entered promiscuous mode [ 81.862833][ T6216] syzkaller0: entered allmulticast mode [ 84.362608][ T6183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.636420][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 84.732481][ T6253] syzkaller0: entered promiscuous mode [ 84.739368][ T6253] syzkaller0: entered allmulticast mode [ 84.791030][ T6256] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 85.511371][ T6277] Bluetooth: MGMT ver 1.22 [ 85.616132][ T6284] syzkaller0: entered promiscuous mode [ 85.622408][ T6284] syzkaller0: entered allmulticast mode [ 87.524182][ T5085] Bluetooth: hci0: command 0x0c24 tx timeout [ 87.524301][ T51] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 87.956981][ T6264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.206605][ T6332] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 88.239943][ T6335] syzkaller0: entered promiscuous mode [ 88.247659][ T6335] syzkaller0: entered allmulticast mode [ 88.586379][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 88.940985][ T6370] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.077734][ T6379] syzkaller0: entered promiscuous mode [ 89.083257][ T6379] syzkaller0: entered allmulticast mode [ 89.527263][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 89.709163][ T6415] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.876182][ T6421] syzkaller0: entered promiscuous mode [ 89.881707][ T6421] syzkaller0: entered allmulticast mode [ 90.450177][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 90.726373][ T6462] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.259376][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 91.494599][ T6501] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.510580][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 94.553600][ T6507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.564618][ T6533] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 94.771280][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 96.728124][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 98.268593][ T6574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.607615][ T6663] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 98.630999][ T6663] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 98.669924][ T6663] team0: Port device netdevsim3 added [ 99.577092][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 99.761619][ T6704] nbd1: detected capacity change from 0 to 63 [ 99.769188][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'. [ 99.786006][ T51] block nbd1: Receive control failed (result -104) [ 99.794899][ T55] block nbd1: Dead connection, failed to find a fallback [ 99.802353][ T55] block nbd1: shutting down sockets [ 99.808749][ T55] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 99.819032][ T55] Buffer I/O error on dev nbd1, logical block 1, async page read [ 99.828042][ T55] Buffer I/O error on dev nbd1, logical block 2, async page read [ 99.836026][ T55] Buffer I/O error on dev nbd1, logical block 3, async page read [ 100.342077][ T6736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.232313][ T6773] xt_hashlimit: size too large, truncated to 1048576 [ 101.359000][ T6777] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 103.103517][ T6821] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 103.399422][ T6832] nbd: nbd1 already in use [ 103.409974][ T6832] block nbd1: NBD_DISCONNECT [ 103.416240][ T6832] block nbd1: Send disconnect failed -32 [ 103.455917][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.465108][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.486630][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 103.501547][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.509712][ T96] Buffer I/O error on dev nbd1, logical block 1, async page read [ 103.517642][ T96] Buffer I/O error on dev nbd1, logical block 2, async page read [ 103.526202][ T96] Buffer I/O error on dev nbd1, logical block 3, async page read [ 103.535377][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.545526][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 103.553506][ T96] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 103.562753][ T96] Buffer I/O error on dev nbd1, logical block 1, async page read [ 103.570763][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.580118][ T96] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 103.596220][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.606380][ T96] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 103.615850][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 103.627038][ T5780] ldm_validate_partition_table(): Disk read failed. [ 103.635962][ T5780] Dev nbd1: unable to read RDB block 0 [ 103.644463][ T5780] nbd1: unable to read partition table [ 103.657445][ T5780] ldm_validate_partition_table(): Disk read failed. [ 103.666511][ T5780] Dev nbd1: unable to read RDB block 0 [ 103.673810][ T5780] nbd1: unable to read partition table [ 103.936351][ T6852] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 104.315437][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 105.309971][ T6911] netlink: 7 bytes leftover after parsing attributes in process `syz.0.277'. [ 106.052771][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 106.888919][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.296'. [ 107.856597][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 110.989966][ T7035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.169273][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 112.498817][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 114.659414][ T7115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.821263][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'. [ 115.012849][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 115.220845][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 118.974413][ T7189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.985479][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 119.278026][ T7263] Bluetooth: MGMT ver 1.22 [ 119.285159][ T7263] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 119.285470][ T51] list_del corruption, ffff88805a767580->next is LIST_POISON1 (dead000000000100) [ 119.304410][ T51] ------------[ cut here ]------------ [ 119.309901][ T51] kernel BUG at lib/list_debug.c:58! [ 119.316241][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 119.322349][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 119.329737][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 119.340227][ T51] Workqueue: hci3 hci_cmd_sync_work [ 119.345445][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 119.352373][ T51] Code: 48 89 de e8 89 c1 4b 06 0f 0b 48 c7 c7 e0 54 1d 8b 48 89 de e8 78 c1 4b 06 0f 0b 48 c7 c7 40 55 1d 8b 48 89 de e8 67 c1 4b 06 <0f> 0b 48 c7 c7 a0 55 1d 8b 48 89 de e8 56 c1 4b 06 0f 0b 48 c7 c7 [ 119.371976][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 119.378031][ T51] RAX: 000000000000004e RBX: ffff88805a767580 RCX: 5618e37af75aa900 [ 119.385989][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 119.393952][ T51] RBP: 1ffff1100b4eceb3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 119.401910][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 119.409870][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 119.417836][ T51] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 119.426781][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.433354][ T51] CR2: 00007f3785d5da08 CR3: 0000000060ea2000 CR4: 00000000003506e0 [ 119.441328][ T51] Call Trace: [ 119.444606][ T51] [ 119.447525][ T51] mgmt_pending_remove+0x53/0x1f0 [ 119.452550][ T51] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 119.459312][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 119.465727][ T51] ? msft_monitor_supported+0x69/0x80 [ 119.471086][ T51] ? hci_add_adv_monitor+0x17d/0x2a0 [ 119.476525][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 119.482967][ T51] hci_cmd_sync_work+0x24b/0x380 [ 119.487920][ T51] ? process_scheduled_works+0x975/0x1600 [ 119.493736][ T51] process_scheduled_works+0xa60/0x1600 [ 119.499410][ T51] ? worker_attach_to_pool+0x370/0x370 [ 119.504898][ T51] ? assign_work+0x3cc/0x5d0 [ 119.509489][ T51] worker_thread+0xa5e/0xfe0 [ 119.514087][ T51] kthread+0x2fa/0x390 [ 119.518146][ T51] ? pr_cont_work+0x550/0x550 [ 119.522819][ T51] ? kthread_blkcg+0xd0/0xd0 [ 119.527411][ T51] ret_from_fork+0x48/0x80 [ 119.531841][ T51] ? kthread_blkcg+0xd0/0xd0 [ 119.536440][ T51] ret_from_fork_asm+0x11/0x20 [ 119.541212][ T51] [ 119.544313][ T51] Modules linked in: [ 119.550860][ T51] ---[ end trace 0000000000000000 ]--- [ 119.556459][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 119.563549][ T51] Code: 48 89 de e8 89 c1 4b 06 0f 0b 48 c7 c7 e0 54 1d 8b 48 89 de e8 78 c1 4b 06 0f 0b 48 c7 c7 40 55 1d 8b 48 89 de e8 67 c1 4b 06 <0f> 0b 48 c7 c7 a0 55 1d 8b 48 89 de e8 56 c1 4b 06 0f 0b 48 c7 c7 [ 119.583337][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 119.589554][ T51] RAX: 000000000000004e RBX: ffff88805a767580 RCX: 5618e37af75aa900 [ 119.597985][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 119.606463][ T51] RBP: 1ffff1100b4eceb3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 119.614576][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 119.623908][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 119.632075][ T51] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 119.641155][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.647956][ T51] CR2: 00007f3785d5da08 CR3: 0000000060ea2000 CR4: 00000000003506e0 [ 119.656165][ T51] Kernel panic - not syncing: Fatal exception [ 119.662347][ T51] Kernel Offset: disabled [ 119.666678][ T51] Rebooting in 86400 seconds..