last executing test programs: 9.164449257s ago: executing program 4 (id=1638): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0xa, 0x0, 0x4, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x50}}, 0x0) 3.719898335s ago: executing program 0 (id=1731): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.577023926s ago: executing program 0 (id=1734): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) 3.358536494s ago: executing program 0 (id=1738): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0b7378a2395a420, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x1, 0xc4953665f0d67253, 0x8, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x67, [@dev]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x623f38b4, 0x20000, 0x60, 0x0, r0, 0x8, '\x00', r1, r2, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x2, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}}, 0x814) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r5], 0x154}}, 0x0) 3.234766113s ago: executing program 0 (id=1739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x600) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x401}}}]}, 0x78}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000400), 0x20000000}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x747}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe070}]}, 0x58}}, 0x4000084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) 3.022469764s ago: executing program 0 (id=1743): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2.838796885s ago: executing program 0 (id=1745): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x47c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x450, 0x2, [@TCA_U32_SEL={0x444, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, 0x5, 0x9b}, {0x4, 0x0, 0x69, 0x1000}, {0xffff, 0x190f, 0xe6be, 0x6}, {0x20000, 0x0, 0x8000, 0x6}, {0xa, 0x0, 0x7fff, 0x1000}, {0x40, 0x4, 0x9, 0x99}, {0x2, 0x8, 0x10000, 0x3}, {0xbbed, 0x9, 0x3, 0x400}, {0x3ff, 0x3, 0x7, 0x4}, {0x9, 0x2, 0xffffffff, 0x3}, {0xace, 0x8, 0x1d, 0x9}, {0xff, 0x4, 0x4, 0xf6}, {0x2, 0x6, 0x4, 0xae5}, {0x7, 0x1, 0x8, 0x7}, {0x7, 0x80, 0x2, 0x9}, {0x2, 0x6, 0xf, 0x7}, {0x9, 0xffff, 0x7, 0xb}, {0xffff, 0x6, 0xfffffffb, 0x3}, {0x4, 0x6, 0x1, 0x8000}, {0x2, 0x60a, 0xdc, 0x10001}, {0x5, 0x6, 0xffffffff, 0x7526}, {0x8000, 0x6, 0x7, 0x8}, {0x7fffffff, 0xfffffffd, 0x4, 0x81}, {0x6, 0xffffa745, 0x1, 0x4}, {0x3, 0x8, 0x1163}, {0x4, 0x0, 0x7, 0x5}, {0x0, 0xb, 0x7, 0x2}, {0xffff, 0x800, 0xfffffff9, 0xfffffbff}, {0x6, 0x0, 0x4, 0x7}, {0x36, 0x1, 0x2, 0x9}, {0x4, 0x1, 0xbac, 0x6}, {0x8, 0x0, 0x1000, 0x3}, {0x8, 0x1b84, 0x8, 0x4}, {0x3, 0x2, 0xb3f, 0x81}, {0x5, 0x5, 0x0, 0x81}, {0xe, 0x0, 0x7fff, 0x1}, {0x0, 0xfbe, 0x7, 0x2}, {0xe, 0x2, 0x8, 0x1}, {0x0, 0x4, 0x7fffffff, 0x400}, {0x7ff, 0x8, 0x1ff, 0x17f1}, {0xcd, 0x3, 0x8, 0x6}, {0xfffffe00, 0x9f4, 0xc3d}, {0xb, 0xfdb, 0xffffff80, 0x1}, {0xede, 0x8, 0x2, 0x401}, {0x0, 0x3, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x3}, {0xfff, 0x401, 0x9, 0xffffff7b}, {0x800, 0x722, 0x6, 0x7a8a}, {0x5, 0x7, 0x3, 0x3}, {0x8000, 0x9, 0xff, 0x3}, {0x8, 0x80000001, 0x0, 0x4}, {0xcc0c, 0x80000001, 0x9, 0x5}, {0x6e8, 0x0, 0x4, 0x8}, {0x3, 0xff, 0x4, 0xffff1b63}, {0x9, 0x2, 0x81, 0x5}, {0x5, 0x4000, 0x5, 0x7ff}, {0xa057, 0x5, 0xa2c, 0x9}, {0x7ff, 0xbe, 0x5, 0x101}, {0xb, 0x2, 0x5, 0x80000000}, {0x401, 0x4, 0x3ff, 0x7}, {0x1, 0x1efa, 0x7, 0x9}, {0x3, 0x1}, {0x0, 0x0, 0x0, 0x3}, {0x1, 0x3ca2e9ba, 0x47cb, 0x2}, {0x1ba, 0x5, 0x1, 0x1}, {0x101, 0x1, 0x1c00, 0x8}, {0x0, 0x8, 0x800, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x47c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.671913099s ago: executing program 1 (id=1756): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x46c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x440, 0x2, [@TCA_U32_SEL={0x434, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, 0x5, 0x9b}, {0x4, 0x0, 0x69, 0x1000}, {0xffff, 0x190f, 0xe6be, 0x6}, {0x20000, 0x0, 0x8000, 0x6}, {0xa, 0x0, 0x7fff, 0x1000}, {0x40, 0x4, 0x9, 0x99}, {0x2, 0x8, 0x10000, 0x3}, {0xbbed, 0x9, 0x3, 0x400}, {0x3ff, 0x3, 0x7, 0x4}, {0x9, 0x2, 0xffffffff, 0x3}, {0xace, 0x8, 0x1d, 0x9}, {0xff, 0x4, 0x4, 0xf6}, {0x2, 0x6, 0x4, 0xae5}, {0x7, 0x1, 0x8, 0x7}, {0x7, 0x80, 0x2, 0x9}, {0x2, 0x6, 0xf, 0x7}, {0x9, 0xffff, 0x7, 0xb}, {0xffff, 0x6, 0xfffffffb, 0x3}, {0x4, 0x6, 0x1, 0x8000}, {0x2, 0x60a, 0xdc, 0x10001}, {0x5, 0x6, 0xffffffff, 0x7526}, {0x8000, 0x6, 0x7, 0x8}, {0x7fffffff, 0xfffffffd, 0x4, 0x81}, {0x6, 0xffffa745, 0x1, 0x4}, {0x3, 0x8, 0x1163}, {0x4, 0x0, 0x7, 0x5}, {0x0, 0xb, 0x7, 0x2}, {0xffff, 0x800, 0xfffffff9, 0xfffffbff}, {0x6, 0x0, 0x4, 0x7}, {0x36, 0x1, 0x2, 0x9}, {0x4, 0x1, 0xbac, 0x6}, {0x8, 0x0, 0x1000, 0x3}, {0x8, 0x1b84, 0x8, 0x4}, {0x3, 0x2, 0xb3f, 0x81}, {0x5, 0x5, 0x0, 0x81}, {0xe, 0x0, 0x7fff, 0x1}, {0x0, 0xfbe, 0x7, 0x2}, {0xe, 0x2, 0x8, 0x1}, {0x0, 0x4, 0x7fffffff, 0x400}, {0x7ff, 0x8, 0x1ff, 0x17f1}, {0xcd, 0x3, 0x8, 0x6}, {0xfffffe00, 0x9f4, 0xc3d}, {0xb, 0xfdb, 0xffffff80, 0x1}, {0xede, 0x8, 0x2, 0x401}, {0x0, 0x3, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x3}, {0xfff, 0x401, 0x9, 0xffffff7b}, {0x800, 0x722, 0x6, 0x7a8a}, {0x5, 0x7, 0x3, 0x3}, {0x8000, 0x9, 0xff, 0x3}, {0x8, 0x80000001, 0x0, 0x4}, {0xcc0c, 0x80000001, 0x9, 0x5}, {0x6e8, 0x0, 0x4, 0x8}, {0x3, 0xff, 0x4, 0xffff1b63}, {0x9, 0x2, 0x81, 0x5}, {0x5, 0x4000, 0x5, 0x7ff}, {0xa057, 0x5, 0xa2c, 0x9}, {0x7ff, 0xbe, 0x5, 0x101}, {0xb, 0x2, 0x5, 0x80000000}, {0x401, 0x4, 0x3ff, 0x7}, {0x3, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x1, 0x3ca2e9ba, 0x47cb, 0x2}, {0x1ba, 0x5, 0x1, 0x1}, {0x101, 0x1, 0x1c00, 0x8}, {0x0, 0x8, 0x800, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x46c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.530207538s ago: executing program 2 (id=1757): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0b7378a2395a420, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x1, 0xc4953665f0d67253, 0x8, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x67, [@dev]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x623f38b4, 0x20000, 0x60, 0x0, r0, 0x8, '\x00', r1, r2, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x2, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}}, 0x814) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r5, @ANYBLOB], 0x154}}, 0x0) 1.459705253s ago: executing program 1 (id=1759): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="cd", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000000018000000000000008400000000000000ff0700220000000020000000000000008400000002"], 0x50}], 0x1, 0x0) 1.290589162s ago: executing program 3 (id=1760): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=[{0x2}, {0x0, '\x00', 0x2}, {}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000890000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 1.232129502s ago: executing program 2 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="54000000100001040000000000000000000000004662226f2fe707ea20b3c174f2c422d0c364c216143c566115fe63336f7c053678140219397c214c23c7dba49329aea7ca2dc673a8a2f3e90224dfe7ce6e5ed7037e362934d483abdc5de54afcdd94e4c77ce0e749b663a401003cac8b7d357ba5b92425b98ceaea2620db2ac1eb1a0885d9d18ea53c23d12dd16b5774f4571f"], 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0xc, 0x4, 0x3, 0x8, 0x30, 0x64, 0x0, 0x4e, 0x0, 0x0, @broadcast, @local, {[@cipso={0x86, 0x1a, 0x7ffffffffffffffc, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x10, "e1c064acb807f419be229aefc9fa"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f400", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="d800330040000000ff90801f42ffffffffffffffffffffffffff000000000301007206032503030303dd1fb32cae2bf99dc87a60d47aec103bbffea56b0df2c0c137be24242afc2fa14426f7c63874fb2e5806a90ccc719b9f850e62038c66a1a8c3d81caeb65ef8b3dd5164163408efc3435e758edfddedd9694377bf56b47882d43e39a6d8cd7d26f7f61482d14855e31c66d11419b2c30201072acdea7978a6a2c611b5877e373d90e906f86359e464912bd24aad69"], 0xf4}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xffff, 0x401, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1801f8ff00000000bfa100000000000007010000f8ff00800000000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=@raw=[@jmp, @exit, @snprintf, @ringbuf_query, @jmp, @kfunc, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400080000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.149103311s ago: executing program 4 (id=1643): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000a40)="63d719522ba00183ec370649c931f93760f1e666a84b2480471c4ba34f41bb74a766ec3cd3ff36fdeb54ebd1ad58d03607fa1aa399a143be1ccd298cdd6ff1accaf2577b724f9110c7ebcbb1232152d5eebfafca9b1d1b301abd8032d12e826ba59b453ee90488f7cf0914394387a8e1dc47d9d92bcda1d25aac2aff2c8d7e8ee1c41f4788293ae69b7a29505071f9226730fa541946c850ee79fc57444dab17ec3cb12ff3de4920843a514f8a6b98282837966232f38ef7a3af7a26ba", &(0x7f0000000b00)=""/242, &(0x7f0000000c00)="73f9ddf78f5d3ad4933d69cdc49b3917c9ec6dd025b664732b31045f1bb8f70b463c087512724b578daf0596915baa3f327ed693368ba6b6928d86ff7ad599091d01fd74a050288826ed6bcd4f16fbff89b72e3e9336362aa426d5ae8bae8a461055f84105f6151a3803cb292569cc3d3623a2a3fdfc1d3aff1a19edb1edf3d155e0a6cafe9c5fc1f3", &(0x7f0000000cc0)="d00a202d82e01adf07f38cff3c7e95179ed439b5f243e6b27980f855868d248f39899b8abbf5d9d7483cb816e6c649565c19d0e637ebdd991c1ac71f8f6956da84ca1b4a947ced0ee2e3dd68bd5f549cc743bf26f547d1bacb6eae142f6724cdde786e48e6b661ee1a57f0e8f86afcab0cfdd9e44c185f07efcf1698bbfd73809d1dd91819d3d59cddbe0475a5b52148cbe70c0d934ac0f4cd3a464153f059373a4025a797e6ce44b3dcd5a7ea129ec369643414ee12a9ae92625b85dbeb3f251a0e1e5f41", 0x3}, 0x38) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="300029bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r6, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0) getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f00000002c0)) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 1.098647672s ago: executing program 3 (id=1762): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xd8, r2, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xd8}}, 0x0) 990.661678ms ago: executing program 3 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x600) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x401}}}]}, 0x78}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000400), 0x20000000}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x747}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe070}]}, 0x60}}, 0x4000084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) 983.941768ms ago: executing program 2 (id=1764): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 841.384917ms ago: executing program 4 (id=1765): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d00050000", 0x28}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0) 807.768895ms ago: executing program 2 (id=1766): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffffffffffe}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x4000004) 805.386199ms ago: executing program 3 (id=1767): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xa, 0x0, 0x4, 0x8}}}}]}, 0x48}}, 0x0) 610.465281ms ago: executing program 2 (id=1768): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x46c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x440, 0x2, [@TCA_U32_SEL={0x434, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, 0x5, 0x9b}, {0x4, 0x0, 0x69, 0x1000}, {0xffff, 0x190f, 0xe6be, 0x6}, {0x20000, 0x0, 0x8000, 0x6}, {0xa, 0x0, 0x7fff, 0x1000}, {0x40, 0x4, 0x9, 0x99}, {0x2, 0x8, 0x10000, 0x3}, {0xbbed, 0x9, 0x3, 0x400}, {0x3ff, 0x3, 0x7, 0x4}, {0x9, 0x2, 0xffffffff, 0x3}, {0xace, 0x8, 0x1d, 0x9}, {0xff, 0x4, 0x4, 0xf6}, {0x2, 0x6, 0x4, 0xae5}, {0x7, 0x1, 0x8, 0x7}, {0x7, 0x80, 0x2, 0x9}, {0x2, 0x6, 0xf, 0x7}, {0x9, 0xffff, 0x7, 0xb}, {0xffff, 0x6, 0xfffffffb, 0x3}, {0x4, 0x6, 0x1, 0x8000}, {0x2, 0x60a, 0xdc, 0x10001}, {0x5, 0x6, 0xffffffff, 0x7526}, {0x8000, 0x6, 0x7, 0x8}, {0x7fffffff, 0xfffffffd, 0x4, 0x81}, {0x6, 0xffffa745, 0x1, 0x4}, {0x3, 0x8, 0x1163}, {0x4, 0x0, 0x7, 0x5}, {0x0, 0xb, 0x7, 0x2}, {0xffff, 0x800, 0xfffffff9, 0xfffffbff}, {0x6, 0x0, 0x4, 0x7}, {0x36, 0x1, 0x2, 0x9}, {0x4, 0x1, 0xbac, 0x6}, {0x8, 0x0, 0x1000, 0x3}, {0x8, 0x1b84, 0x8, 0x4}, {0x3, 0x2, 0xb3f, 0x81}, {0x5, 0x5, 0x0, 0x81}, {0xe, 0x0, 0x7fff, 0x1}, {0x0, 0xfbe, 0x7, 0x2}, {0xe, 0x2, 0x8, 0x1}, {0x0, 0x4, 0x7fffffff, 0x400}, {0x7ff, 0x8, 0x1ff, 0x17f1}, {0xcd, 0x3, 0x8, 0x6}, {0xfffffe00, 0x9f4, 0xc3d}, {0xb, 0xfdb, 0xffffff80, 0x1}, {0xede, 0x8, 0x2, 0x401}, {0x0, 0x3, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x3}, {0xfff, 0x401, 0x9, 0xffffff7b}, {0x800, 0x722, 0x6, 0x7a8a}, {0x5, 0x7, 0x3, 0x3}, {0x8000, 0x9, 0xff, 0x3}, {0x8, 0x80000001, 0x0, 0x4}, {0xcc0c, 0x80000001, 0x9, 0x5}, {0x6e8, 0x0, 0x4, 0x8}, {0x3, 0xff, 0x4, 0xffff1b63}, {0x9, 0x2, 0x81, 0x5}, {0x5, 0x4000, 0x5, 0x7ff}, {0xa057, 0x5, 0xa2c, 0x9}, {0x7ff, 0xbe, 0x5, 0x101}, {0xb, 0x2, 0x5, 0x80000000}, {0x401, 0x4, 0x3ff, 0x7}, {0x3, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x3}, {0x1, 0x3ca2e9ba, 0x47cb, 0x2}, {0x1ba, 0x5, 0x1, 0x1}, {0x101, 0x1, 0x1c00, 0x8}, {0x0, 0x8, 0x800, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x46c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 573.265635ms ago: executing program 4 (id=1769): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0b7378a2395a420, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x1, 0xc4953665f0d67253, 0x8, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x67, [@dev]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x623f38b4, 0x20000, 0x60, 0x0, r0, 0x8, '\x00', r1, r2, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x2, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}}, 0x814) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r5, @ANYBLOB], 0x154}}, 0x0) 566.208979ms ago: executing program 3 (id=1770): unshare(0x400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @prog_id}, 0x20) 520.188711ms ago: executing program 2 (id=1771): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=[{0x2}, {0x0, '\x00', 0x2}, {}]}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000890000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 480.241622ms ago: executing program 1 (id=1772): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xd8, r2, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xd8}}, 0x0) 393.999396ms ago: executing program 4 (id=1773): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="54000000100001040000000000000000000000004662226f2fe707ea20b3c174f2c422d0c364c216143c566115fe63336f7c053678140219397c214c23c7dba49329aea7ca2dc673a8a2f3e90224dfe7ce6e5ed7037e362934d483abdc5de54afcdd94e4c77ce0e749b663a401003cac8b7d357ba5b92425b98ceaea2620db2ac1eb1a0885d9d18ea53c23d12dd16b5774f4571f"], 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0xc, 0x4, 0x3, 0x8, 0x30, 0x64, 0x0, 0x4e, 0x0, 0x0, @broadcast, @local, {[@cipso={0x86, 0x1a, 0x7ffffffffffffffc, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x10, "e1c064acb807f419be229aefc9fa"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f400", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="d800330040000000ff90801f42ffffffffffffffffffffffffff000000000301007206032503030303dd1fb32cae2bf99dc87a60d47aec103bbffea56b0df2c0c137be24242afc2fa14426f7c63874fb2e5806a90ccc719b9f850e62038c66a1a8c3d81caeb65ef8b3dd5164163408efc3435e758edfddedd9694377bf56b47882d43e39a6d8cd7d26f7f61482d14855e31c66d11419b2c30201072acdea7978a6a2c611b5877e373d90e906f86359e464912bd24aad69"], 0xf4}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xffff, 0x401, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1801f8ff00000000bfa100000000000007010000f8ff00800000000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=@raw=[@jmp, @exit, @snprintf, @ringbuf_query, @jmp, @kfunc, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400080000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 310.441505ms ago: executing program 3 (id=1774): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000a40)="63d719522ba00183ec370649c931f93760f1e666a84b2480471c4ba34f41bb74a766ec3cd3ff36fdeb54ebd1ad58d03607fa1aa399a143be1ccd298cdd6ff1accaf2577b724f9110c7ebcbb1232152d5eebfafca9b1d1b301abd8032d12e826ba59b453ee90488f7cf0914394387a8e1dc47d9d92bcda1d25aac2aff2c8d7e8ee1c41f4788293ae69b7a29505071f9226730fa541946c850ee79fc57444dab17ec3cb12ff3de4920843a514f8a6b98282837966232f38ef7a3af7a26ba", &(0x7f0000000b00)=""/242, &(0x7f0000000c00)="73f9ddf78f5d3ad4933d69cdc49b3917c9ec6dd025b664732b31045f1bb8f70b463c087512724b578daf0596915baa3f327ed693368ba6b6928d86ff7ad599091d01fd74a050288826ed6bcd4f16fbff89b72e3e9336362aa426d5ae8bae8a461055f84105f6151a3803cb292569cc3d3623a2a3fdfc1d3aff1a19edb1edf3d155e0a6cafe9c5fc1f3", &(0x7f0000000cc0)="d00a202d82e01adf07f38cff3c7e95179ed439b5f243e6b27980f855868d248f39899b8abbf5d9d7483cb816e6c649565c19d0e637ebdd991c1ac71f8f6956da84ca1b4a947ced0ee2e3dd68bd5f549cc743bf26f547d1bacb6eae142f6724cdde786e48e6b661ee1a57f0e8f86afcab0cfdd9e44c185f07efcf1698bbfd73809d1dd91819d3d59cddbe0475a5b52148cbe70c0d934ac0f4cd3a464153f059373a4025a797e6ce44b3dcd5a7ea129ec369643414ee12a9ae92625b85dbeb3f251a0e1e5f41", 0x3}, 0x38) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="300029bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r6, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0) getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f00000002c0)) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 293.304353ms ago: executing program 1 (id=1775): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 242.914736ms ago: executing program 4 (id=1776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x600) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x401}}}]}, 0x78}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000400), 0x20000000}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x747}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe070}]}, 0x60}}, 0x4000084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xfeff, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) 138.579054ms ago: executing program 1 (id=1777): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0xfffffffffffffffe}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x4000004) 0s ago: executing program 1 (id=1778): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): or 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.468135][ T5248] Buffer I/O error on dev nbd3, logical block 0, async page read [ 123.494175][ T5248] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.534464][ T5248] Buffer I/O error on dev nbd3, logical block 0, async page read [ 123.555377][ T5248] Dev nbd3: unable to read RDB block 0 [ 123.569675][ T5248] nbd3: unable to read partition table [ 123.599977][ T5248] ldm_validate_partition_table(): Disk read failed. [ 123.616294][ T5248] Dev nbd3: unable to read RDB block 0 [ 123.624068][ T5248] nbd3: unable to read partition table [ 123.668013][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 124.008638][ T54] block nbd4: Receive control failed (result -107) [ 124.039009][ T7371] nbd4: detected capacity change from 0 to 256 [ 124.046981][ T7379] geneve2: entered promiscuous mode [ 124.052210][ T7379] geneve2: entered allmulticast mode [ 124.062119][ T7381] FAULT_INJECTION: forcing a failure. [ 124.062119][ T7381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.083129][ T5248] block nbd4: Dead connection, failed to find a fallback [ 124.095651][ T5248] block nbd4: shutting down sockets [ 124.127884][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.2.639 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 124.138264][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 124.148337][ T7381] Call Trace: [ 124.151636][ T7381] [ 124.154615][ T7381] dump_stack_lvl+0x241/0x360 [ 124.159320][ T7381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.164536][ T7381] ? __pfx__printk+0x10/0x10 [ 124.169143][ T7381] ? __pfx_lock_release+0x10/0x10 [ 124.174199][ T7381] should_fail_ex+0x3b0/0x4e0 [ 124.178903][ T7381] _copy_from_iter+0x1f6/0x1960 [ 124.183775][ T7381] ? __virt_addr_valid+0x183/0x530 [ 124.188904][ T7381] ? __pfx_lock_release+0x10/0x10 [ 124.193951][ T7381] ? __alloc_skb+0x28f/0x440 [ 124.198555][ T7381] ? __pfx__copy_from_iter+0x10/0x10 [ 124.203842][ T7381] ? __virt_addr_valid+0x183/0x530 [ 124.208961][ T7381] ? __virt_addr_valid+0x183/0x530 [ 124.214072][ T7381] ? __virt_addr_valid+0x45f/0x530 [ 124.219176][ T7381] ? __check_object_size+0x49c/0x900 [ 124.224458][ T7381] netlink_sendmsg+0x73d/0xcb0 [ 124.229240][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.234621][ T7381] ? __import_iovec+0x536/0x820 [ 124.239462][ T7381] ? aa_sock_msg_perm+0x91/0x160 [ 124.244392][ T7381] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 124.249670][ T7381] ? security_socket_sendmsg+0x87/0xb0 [ 124.255129][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.260404][ T7381] __sock_sendmsg+0x221/0x270 [ 124.265076][ T7381] ____sys_sendmsg+0x525/0x7d0 [ 124.269855][ T7381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.275145][ T7381] __sys_sendmsg+0x2b0/0x3a0 [ 124.279743][ T7381] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.284857][ T7381] ? vfs_write+0x7c4/0xc90 [ 124.289302][ T7381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.295627][ T7381] ? do_syscall_64+0x100/0x230 [ 124.300384][ T7381] ? do_syscall_64+0xb6/0x230 [ 124.305055][ T7381] do_syscall_64+0xf3/0x230 [ 124.309550][ T7381] ? clear_bhb_loop+0x35/0x90 [ 124.314221][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.320104][ T7381] RIP: 0033:0x7fa3789773b9 [ 124.324508][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.344117][ T7381] RSP: 002b:00007fa379737048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.352614][ T7381] RAX: ffffffffffffffda RBX: 00007fa378b05f80 RCX: 00007fa3789773b9 [ 124.360575][ T7381] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000007 [ 124.368538][ T7381] RBP: 00007fa3797370a0 R08: 0000000000000000 R09: 0000000000000000 [ 124.376501][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.384465][ T7381] R13: 000000000000000b R14: 00007fa378b05f80 R15: 00007fff1a3c0858 [ 124.392441][ T7381] [ 124.406462][ T5248] ldm_validate_partition_table(): Disk read failed. [ 124.413380][ T5248] Dev nbd4: unable to read RDB block 0 [ 124.453489][ T5248] nbd4: unable to read partition table [ 124.482280][ T5248] ldm_validate_partition_table(): Disk read failed. [ 124.526615][ T5248] Dev nbd4: unable to read RDB block 0 [ 124.545757][ T5248] nbd4: unable to read partition table [ 124.577547][ T7394] netlink: 'syz.1.644': attribute type 21 has an invalid length. [ 124.581834][ T7399] netlink: del zone limit has 8 unknown bytes [ 124.792753][ T7408] tipc: Started in network mode [ 124.812225][ T7408] tipc: Node identity cgroup.pn, cluster identity 8 [ 125.124876][ T7420] SET target dimension over the limit! [ 125.626949][ T7457] bond_slave_0: entered promiscuous mode [ 125.632761][ T7457] bond_slave_1: entered promiscuous mode [ 125.638794][ T7457] vlan2: entered promiscuous mode [ 125.644048][ T7457] : entered promiscuous mode [ 125.654101][ T7460] IPVS: length: 215 != 24 [ 125.671715][ T7457] : left promiscuous mode [ 125.678021][ T7457] bond_slave_0: left promiscuous mode [ 125.684358][ T7457] bond_slave_1: left promiscuous mode [ 125.687644][ T7465] netlink: 'syz.1.665': attribute type 6 has an invalid length. [ 125.699096][ T7465] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 125.769441][ T7467] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 126.098162][ T7481] SET target dimension over the limit! [ 126.404221][ C1] eth0: bad gso: type: 1, size: 1408 [ 126.502493][ T7502] FAULT_INJECTION: forcing a failure. [ 126.502493][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 126.506442][ T7501] vlan3: entered promiscuous mode [ 126.515515][ T7502] CPU: 0 UID: 0 PID: 7502 Comm: syz.4.678 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 126.515552][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.515563][ T7502] Call Trace: [ 126.515572][ T7502] [ 126.537436][ T7501] bond0: entered promiscuous mode [ 126.540845][ T7502] dump_stack_lvl+0x241/0x360 [ 126.556778][ T7502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.561988][ T7502] ? __pfx__printk+0x10/0x10 [ 126.566585][ T7502] should_fail_ex+0x3b0/0x4e0 [ 126.571269][ T7502] ? skb_clone+0x20c/0x390 [ 126.575682][ T7502] should_failslab+0xac/0x100 [ 126.580358][ T7502] ? skb_clone+0x20c/0x390 [ 126.584774][ T7502] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 126.590152][ T7502] skb_clone+0x20c/0x390 [ 126.594392][ T7502] ? dev_queue_xmit_nit+0x220/0xc10 [ 126.599594][ T7502] dev_queue_xmit_nit+0x419/0xc10 [ 126.604610][ T7502] ? dev_queue_xmit_nit+0x2b/0xc10 [ 126.609718][ T7502] ? validate_xmit_skb+0x9f9/0x1120 [ 126.614915][ T7502] dev_hard_start_xmit+0x15f/0x7e0 [ 126.620026][ T7502] ? __pfx_validate_xmit_skb+0x10/0x10 [ 126.625491][ T7502] __dev_queue_xmit+0x1b63/0x3e90 [ 126.630512][ T7502] ? kasan_save_track+0x51/0x80 [ 126.635364][ T7502] ? do_syscall_64+0xf3/0x230 [ 126.640037][ T7502] ? __dev_queue_xmit+0x2da/0x3e90 [ 126.645146][ T7502] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.650611][ T7502] ? __copy_skb_header+0x437/0x5b0 [ 126.655719][ T7502] ? __asan_memcpy+0x40/0x70 [ 126.660302][ T7502] ? __copy_skb_header+0x437/0x5b0 [ 126.665410][ T7502] ? __skb_clone+0x454/0x6c0 [ 126.670005][ T7502] ? skb_clone+0x240/0x390 [ 126.674420][ T7502] __netlink_deliver_tap+0x54d/0x7c0 [ 126.679707][ T7502] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.684898][ T7502] netlink_deliver_tap+0x19d/0x1b0 [ 126.690011][ T7502] netlink_unicast+0x7be/0x990 [ 126.694776][ T7502] ? __pfx_netlink_unicast+0x10/0x10 [ 126.700059][ T7502] ? __virt_addr_valid+0x183/0x530 [ 126.705175][ T7502] ? __check_object_size+0x49c/0x900 [ 126.710465][ T7502] ? bpf_lsm_netlink_send+0x9/0x10 [ 126.715569][ T7502] netlink_sendmsg+0x8e4/0xcb0 [ 126.720339][ T7502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.725627][ T7502] ? __import_iovec+0x536/0x820 [ 126.730465][ T7502] ? aa_sock_msg_perm+0x91/0x160 [ 126.735393][ T7502] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 126.740670][ T7502] ? security_socket_sendmsg+0x87/0xb0 [ 126.746123][ T7502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.751397][ T7502] __sock_sendmsg+0x221/0x270 [ 126.756070][ T7502] ____sys_sendmsg+0x525/0x7d0 [ 126.760838][ T7502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.766142][ T7502] __sys_sendmsg+0x2b0/0x3a0 [ 126.770753][ T7502] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.775951][ T7502] ? vfs_write+0x7c4/0xc90 [ 126.780393][ T7502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.786719][ T7502] ? do_syscall_64+0x100/0x230 [ 126.791489][ T7502] ? do_syscall_64+0xb6/0x230 [ 126.796162][ T7502] do_syscall_64+0xf3/0x230 [ 126.800655][ T7502] ? clear_bhb_loop+0x35/0x90 [ 126.805326][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.811214][ T7502] RIP: 0033:0x7f5388b773b9 [ 126.815621][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.835225][ T7502] RSP: 002b:00007f53885ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.843632][ T7502] RAX: ffffffffffffffda RBX: 00007f5388d05f80 RCX: 00007f5388b773b9 [ 126.851603][ T7502] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000007 [ 126.859565][ T7502] RBP: 00007f53885ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.867530][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.875491][ T7502] R13: 000000000000000b R14: 00007f5388d05f80 R15: 00007ffc1ea58738 [ 126.883471][ T7502] [ 126.889269][ T7501] bond_slave_0: entered promiscuous mode [ 126.895206][ T7501] bond_slave_1: entered promiscuous mode [ 126.918683][ T7501] bond0: left promiscuous mode [ 126.923737][ T7501] bond_slave_0: left promiscuous mode [ 126.931972][ T7501] bond_slave_1: left promiscuous mode [ 127.003891][ T7507] netlink: 'syz.0.679': attribute type 14 has an invalid length. [ 127.249124][ T7521] __nla_validate_parse: 15 callbacks suppressed [ 127.249143][ T7521] netlink: 236 bytes leftover after parsing attributes in process `syz.3.684'. [ 127.786381][ C1] eth0: bad gso: type: 1, size: 1408 [ 128.253011][ T7547] bridge: RTM_NEWNEIGH with invalid ether address [ 128.530500][ T7552] vlan3: entered promiscuous mode [ 128.577824][ T7552] bond0: entered promiscuous mode [ 128.602411][ T7552] bond_slave_0: entered promiscuous mode [ 128.654045][ T7552] bond_slave_1: entered promiscuous mode [ 128.715229][ T7552] bond0: left promiscuous mode [ 128.733702][ T7552] bond_slave_0: left promiscuous mode [ 128.756712][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 128.770456][ T7552] bond_slave_1: left promiscuous mode [ 129.018443][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 129.197176][ T54] block nbd5: Receive control failed (result -107) [ 129.329300][ T7560] nbd5: detected capacity change from 0 to 256 [ 129.353238][ T5248] block nbd5: Dead connection, failed to find a fallback [ 129.393048][ T5248] block nbd5: shutting down sockets [ 129.417568][ T5248] blk_print_req_error: 64 callbacks suppressed [ 129.417589][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.484305][ T5248] buffer_io_error: 64 callbacks suppressed [ 129.484321][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 129.530861][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.557457][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 129.578059][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.628677][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 129.659977][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.669292][ T7572] FAULT_INJECTION: forcing a failure. [ 129.669292][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 129.690942][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 129.729055][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.755997][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.1.698 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 129.762270][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 129.766271][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 129.766286][ T7572] Call Trace: [ 129.766294][ T7572] [ 129.766302][ T7572] dump_stack_lvl+0x241/0x360 [ 129.766330][ T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.766350][ T7572] ? __pfx__printk+0x10/0x10 [ 129.766372][ T7572] ? _copy_from_iter+0x26b/0x1960 [ 129.766396][ T7572] should_fail_ex+0x3b0/0x4e0 [ 129.766424][ T7572] ? build_skb+0x52/0x2a0 [ 129.766446][ T7572] should_failslab+0xac/0x100 [ 129.766473][ T7572] ? build_skb+0x52/0x2a0 [ 129.766493][ T7572] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 129.766511][ T7572] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 129.795117][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.800311][ T7572] build_skb+0x52/0x2a0 [ 129.800340][ T7572] ? __tun_build_skb+0x25/0x2f0 [ 129.800366][ T7572] __tun_build_skb+0x33/0x2f0 [ 129.800394][ T7572] tun_get_user+0x20bb/0x4720 [ 129.800421][ T7572] ? tun_get_user+0x871/0x4720 [ 129.800450][ T7572] ? __lock_acquire+0x137a/0x2040 [ 129.800482][ T7572] ? __pfx_tun_get_user+0x10/0x10 [ 129.800524][ T7572] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.800551][ T7572] ? tun_get+0x1e/0x2f0 [ 129.800573][ T7572] ? __pfx_lock_release+0x10/0x10 [ 129.800609][ T7572] ? tun_get+0x1e/0x2f0 [ 129.818491][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 129.819165][ T7572] ? tun_get+0x27d/0x2f0 [ 129.834226][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.839456][ T7572] tun_chr_write_iter+0x113/0x1f0 [ 129.839492][ T7572] vfs_write+0xa72/0xc90 [ 129.839517][ T7572] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 129.839541][ T7572] ? __pfx_vfs_write+0x10/0x10 [ 129.839582][ T7572] ksys_write+0x1a0/0x2c0 [ 129.839608][ T7572] ? __pfx_ksys_write+0x10/0x10 [ 129.839632][ T7572] ? rcu_is_watching+0x15/0xb0 [ 129.954808][ T7572] ? trace_sys_enter+0x1f/0xd0 [ 129.959664][ T7572] do_syscall_64+0xf3/0x230 [ 129.964166][ T7572] ? clear_bhb_loop+0x35/0x90 [ 129.968842][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.974822][ T7572] RIP: 0033:0x7f2c44f75e9f [ 129.979232][ T7572] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 129.998835][ T7572] RSP: 002b:00007f2c45d7e010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 130.007251][ T7572] RAX: ffffffffffffffda RBX: 00007f2c45106058 RCX: 00007f2c44f75e9f [ 130.015212][ T7572] RDX: 000000000000006e RSI: 0000000020000c40 RDI: 00000000000000c8 [ 130.023193][ T7572] RBP: 00007f2c45d7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.031339][ T7572] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 130.039310][ T7572] R13: 000000000000006e R14: 00007f2c45106058 R15: 00007fffc7b2a498 [ 130.047305][ T7572] [ 130.058330][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 130.077064][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.089640][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 130.098148][ T5248] ldm_validate_partition_table(): Disk read failed. [ 130.104971][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.115150][ C1] eth0: bad gso: type: 1, size: 1408 [ 130.163985][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 130.179178][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023e01800: rx timeout, send abort [ 130.187527][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c9e8800: rx timeout, send abort [ 130.196432][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023e01800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.210944][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c9e8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.246154][ T5248] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.255338][ T5248] Buffer I/O error on dev nbd5, logical block 0, async page read [ 130.281265][ T7580] xt_policy: output policy not valid in PREROUTING and INPUT [ 130.313507][ T5248] Dev nbd5: unable to read RDB block 0 [ 130.323648][ T5248] nbd5: unable to read partition table [ 130.357559][ T5248] ldm_validate_partition_table(): Disk read failed. [ 130.364483][ T5248] Dev nbd5: unable to read RDB block 0 [ 130.397832][ T5248] nbd5: unable to read partition table [ 130.412649][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'. [ 130.853519][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 130.887958][ T7604] tipc: Cannot configure node identity twice [ 130.927919][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.941696][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.953454][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.972769][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.991437][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.016531][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.087014][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 131.173702][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 131.200317][ T7622] tap0: tun_chr_ioctl cmd 1074025677 [ 131.206961][ T7622] tap0: linktype set to 781 [ 131.404867][ C1] eth0: bad gso: type: 1, size: 1408 [ 131.504281][ T7610] chnl_net:caif_netlink_parms(): no params data found [ 131.508040][ T7633] FAULT_INJECTION: forcing a failure. [ 131.508040][ T7633] name failslab, interval 1, probability 0, space 0, times 0 [ 131.524170][ T7633] CPU: 1 UID: 0 PID: 7633 Comm: syz.4.713 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 131.534442][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 131.544517][ T7633] Call Trace: [ 131.547821][ T7633] [ 131.550776][ T7633] dump_stack_lvl+0x241/0x360 [ 131.555472][ T7633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.560669][ T7633] ? __pfx__printk+0x10/0x10 [ 131.565269][ T7633] should_fail_ex+0x3b0/0x4e0 [ 131.569951][ T7633] ? skb_clone+0x20c/0x390 [ 131.574388][ T7633] should_failslab+0xac/0x100 [ 131.579066][ T7633] ? skb_clone+0x20c/0x390 [ 131.583565][ T7633] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 131.588936][ T7633] skb_clone+0x20c/0x390 [ 131.593175][ T7633] ? raw6_local_deliver+0x674/0xa50 [ 131.598376][ T7633] raw6_local_deliver+0x683/0xa50 [ 131.603405][ T7633] ? raw6_local_deliver+0x163/0xa50 [ 131.608603][ T7633] ? __pfx_raw6_local_deliver+0x10/0x10 [ 131.614151][ T7633] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 131.618997][ T7633] ip6_protocol_deliver_rcu+0x3cd/0x1570 [ 131.624657][ T7633] ? ip6_input_finish+0xdc/0x2d0 [ 131.629592][ T7633] ip6_input_finish+0x187/0x2d0 [ 131.634437][ T7633] ? __pfx_ip6_input_finish+0x10/0x10 [ 131.639801][ T7633] NF_HOOK+0x3a4/0x450 [ 131.643868][ T7633] ? NF_HOOK+0x9a/0x450 [ 131.648017][ T7633] ? __pfx_NF_HOOK+0x10/0x10 [ 131.652600][ T7633] ? __pfx_ip6_input_finish+0x10/0x10 [ 131.657962][ T7633] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 131.663273][ T7633] ? ipv6_chk_mcast_addr+0x78f/0x840 [ 131.668550][ T7633] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 131.673748][ T7633] ip6_mc_input+0x9c5/0xc30 [ 131.678251][ T7633] ? __pfx_ip6_mc_input+0x10/0x10 [ 131.683268][ T7633] ? skb_dst+0x72/0xd0 [ 131.687334][ T7633] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 131.692609][ T7633] NF_HOOK+0x3a4/0x450 [ 131.696673][ T7633] ? skb_orphan+0x4b/0xd0 [ 131.700999][ T7633] ? NF_HOOK+0x9a/0x450 [ 131.705153][ T7633] ? __pfx_NF_HOOK+0x10/0x10 [ 131.709739][ T7633] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 131.714945][ T7633] ? __pfx_ipv6_rcv+0x10/0x10 [ 131.719615][ T7633] __netif_receive_skb+0x1ea/0x650 [ 131.724723][ T7633] ? __pfx_lock_acquire+0x10/0x10 [ 131.729741][ T7633] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 131.735975][ T7633] ? __pfx___netif_receive_skb+0x10/0x10 [ 131.741596][ T7633] ? __kasan_slab_alloc+0x66/0x80 [ 131.746621][ T7633] ? read_tsc+0x9/0x20 [ 131.750683][ T7633] ? timekeeping_get_ns+0x2c0/0x420 [ 131.755971][ T7633] ? netif_receive_skb+0x131/0x890 [ 131.761074][ T7633] ? netif_receive_skb+0x131/0x890 [ 131.766179][ T7633] netif_receive_skb+0x1e8/0x890 [ 131.771110][ T7633] ? tun_rx_batched+0x160/0x8f0 [ 131.775959][ T7633] ? __pfx_netif_receive_skb+0x10/0x10 [ 131.781420][ T7633] ? tun_rx_batched+0x160/0x8f0 [ 131.786267][ T7633] tun_rx_batched+0x1b7/0x8f0 [ 131.790948][ T7633] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.797279][ T7633] ? __pfx_lock_acquire+0x10/0x10 [ 131.802301][ T7633] ? __pfx_tun_rx_batched+0x10/0x10 [ 131.807518][ T7633] tun_get_user+0x2f84/0x4720 [ 131.812194][ T7633] ? tun_get_user+0x2a78/0x4720 [ 131.817052][ T7633] ? __lock_acquire+0x137a/0x2040 [ 131.822079][ T7633] ? __pfx_tun_get_user+0x10/0x10 [ 131.827117][ T7633] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.832575][ T7633] ? tun_get+0x1e/0x2f0 [ 131.836724][ T7633] ? __pfx_lock_release+0x10/0x10 [ 131.841777][ T7633] ? tun_get+0x1e/0x2f0 [ 131.845930][ T7633] ? tun_get+0x27d/0x2f0 [ 131.850172][ T7633] tun_chr_write_iter+0x113/0x1f0 [ 131.855192][ T7633] vfs_write+0xa72/0xc90 [ 131.859431][ T7633] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 131.865406][ T7633] ? __pfx_vfs_write+0x10/0x10 [ 131.870190][ T7633] ksys_write+0x1a0/0x2c0 [ 131.874517][ T7633] ? __pfx_ksys_write+0x10/0x10 [ 131.879360][ T7633] ? do_syscall_64+0x100/0x230 [ 131.884117][ T7633] ? do_syscall_64+0xb6/0x230 [ 131.888786][ T7633] do_syscall_64+0xf3/0x230 [ 131.893291][ T7633] ? clear_bhb_loop+0x35/0x90 [ 131.897972][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.903865][ T7633] RIP: 0033:0x7f5388b75e9f [ 131.908282][ T7633] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 131.927881][ T7633] RSP: 002b:00007f53885de010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.936291][ T7633] RAX: ffffffffffffffda RBX: 00007f5388d06058 RCX: 00007f5388b75e9f [ 131.944254][ T7633] RDX: 000000000000006e RSI: 0000000020000c40 RDI: 00000000000000c8 [ 131.952214][ T7633] RBP: 00007f53885de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.960174][ T7633] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 131.968238][ T7633] R13: 000000000000006e R14: 00007f5388d06058 R15: 00007ffc1ea58738 [ 131.976224][ T7633] [ 132.075431][ C1] eth0: bad gso: type: 1, size: 1408 [ 132.271338][ T7641] netlink: 'syz.4.716': attribute type 21 has an invalid length. [ 132.286486][ T7641] netlink: 164 bytes leftover after parsing attributes in process `syz.4.716'. [ 132.324480][ T7610] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.356457][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.363760][ T7610] bridge_slave_0: entered allmulticast mode [ 132.395140][ T7610] bridge_slave_0: entered promiscuous mode [ 132.420574][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 132.444166][ T7647] tipc: Cannot configure node identity twice [ 132.494209][ T7610] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.515070][ T7649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.528731][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.549986][ T7610] bridge_slave_1: entered allmulticast mode [ 132.562607][ T7610] bridge_slave_1: entered promiscuous mode [ 132.689866][ T7658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.755522][ T7610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.782273][ T7610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.801145][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.807388][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 132.854389][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.952234][ T7610] team0: Port device team_slave_0 added [ 132.965149][ T7610] team0: Port device team_slave_1 added [ 132.992239][ T7679] bond0: left promiscuous mode [ 133.046311][ T5245] Bluetooth: hci5: command tx timeout [ 133.067575][ T7679] bond0: entered allmulticast mode [ 133.073504][ T7679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.082437][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.097209][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.126220][ T7610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.138480][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.728'. [ 133.165394][ T7610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.172454][ T7610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.199104][ T7610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.220934][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 133.291760][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.298571][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.317928][ T7610] hsr_slave_0: entered promiscuous mode [ 133.324876][ T7610] hsr_slave_1: entered promiscuous mode [ 133.328679][ T7685] atomic_op ffff888073d40998 conn xmit_atomic 0000000000000000 [ 133.340740][ T7610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.354894][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 133.357318][ T7610] Cannot create hsr debugfs directory [ 133.617560][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 133.724721][ T7610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.934432][ T7701] netlink: 68 bytes leftover after parsing attributes in process `syz.0.737'. [ 133.935790][ T7610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.021374][ T7699] netlink: 'syz.1.735': attribute type 3 has an invalid length. [ 134.058297][ T7699] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.735'. [ 134.142942][ T7610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.282040][ T7610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.461401][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.742'. [ 134.481869][ T7720] netlink: 'syz.2.740': attribute type 3 has an invalid length. [ 134.545062][ T7720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.932276][ T7610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.002872][ T7742] vlan2: entered promiscuous mode [ 135.053605][ T7610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.101059][ T7610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.126151][ T5245] Bluetooth: hci5: command tx timeout [ 135.315721][ T7610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.657456][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.693981][ C1] eth0: bad gso: type: 1, size: 1408 [ 135.775106][ T7610] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.828185][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.835335][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.888585][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.895791][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.940936][ T7766] netlink: 'syz.2.755': attribute type 30 has an invalid length. [ 136.025765][ T7610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.048993][ T7610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.131773][ T7769] bridge1: entered promiscuous mode [ 136.147908][ T7769] bridge1: entered allmulticast mode [ 136.495643][ T7781] tipc: Cannot configure node identity twice [ 136.520482][ T7782] bond0: entered promiscuous mode [ 136.532123][ T7782] bond_slave_0: entered promiscuous mode [ 136.541700][ T7782] bond_slave_1: entered promiscuous mode [ 136.601877][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.667430][ T1114] tipc: Subscription rejected, illegal request [ 136.782493][ T7782] bond0: left promiscuous mode [ 136.812535][ T7782] bond_slave_0: left promiscuous mode [ 136.835085][ T7782] bond_slave_1: left promiscuous mode [ 136.852843][ T7610] veth0_vlan: entered promiscuous mode [ 136.892276][ T7610] veth1_vlan: entered promiscuous mode [ 137.003288][ T7789] bond0: entered allmulticast mode [ 137.016791][ T7789] bond_slave_0: entered allmulticast mode [ 137.028481][ T7789] bond_slave_1: entered allmulticast mode [ 137.034291][ T7789] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 137.069347][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.131167][ T7797] ipvlan0: entered promiscuous mode [ 137.146059][ T7797] ipvlan0: entered allmulticast mode [ 137.155652][ T7797] veth0_vlan: entered allmulticast mode [ 137.182585][ T7610] veth0_macvtap: entered promiscuous mode [ 137.209949][ T5245] Bluetooth: hci5: command tx timeout [ 137.213482][ T7610] veth1_macvtap: entered promiscuous mode [ 137.261559][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.272416][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.279214][ T7803] cannot load conntrack support for proto=3 [ 137.283104][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.299198][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.327065][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.343496][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.354301][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.369152][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.381091][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.410670][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.441837][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.453001][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.469565][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.480404][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.494794][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.505530][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.521700][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.539535][ T7610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.558741][ T7610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.568102][ T7610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.577700][ T7610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.586780][ T7610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.748081][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.774350][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.908035][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.916796][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.168313][ T7822] __nla_validate_parse: 11 callbacks suppressed [ 138.168336][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 138.208212][ T7822] tipc: Started in network mode [ 138.213135][ T7822] tipc: Node identity cgroup.pn, cluster identity 8 [ 138.347380][ T7825] xt_l2tp: v2 sid > 0xffff: 262144 [ 138.495607][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.506640][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.514795][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.533287][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.546322][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.549929][ T7837] sctp: [Deprecated]: syz.1.775 (pid 7837) Use of int in max_burst socket option deprecated. [ 138.549929][ T7837] Use struct sctp_assoc_value instead [ 138.562290][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.274730][ T7839] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 139.286825][ T54] Bluetooth: hci5: command tx timeout [ 139.909741][ T7831] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 139.958073][ T7831] batman_adv: batadv0: Adding interface: team0 [ 139.964287][ T7831] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.011316][ T7831] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 140.022798][ T7836] netlink: 'syz.3.776': attribute type 10 has an invalid length. [ 140.043949][ T7836] netlink: 2 bytes leftover after parsing attributes in process `syz.3.776'. [ 140.055503][ T7836] team0: entered promiscuous mode [ 140.061044][ T7836] team_slave_0: entered promiscuous mode [ 140.068297][ T7836] team_slave_1: entered promiscuous mode [ 140.075311][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.082449][ T7836] batman_adv: batadv0: Interface activated: team0 [ 140.089086][ T7836] batman_adv: batadv0: Interface deactivated: team0 [ 140.097004][ T7836] batman_adv: batadv0: Removing interface: team0 [ 140.104835][ T7836] bridge0: port 3(team0) entered blocking state [ 140.111857][ T7836] bridge0: port 3(team0) entered disabled state [ 140.119739][ T7836] team0: entered allmulticast mode [ 140.124988][ T7836] team_slave_0: entered allmulticast mode [ 140.131070][ T7836] team_slave_1: entered allmulticast mode [ 140.140511][ T7836] bridge0: port 3(team0) entered blocking state [ 140.146924][ T7836] bridge0: port 3(team0) entered forwarding state [ 140.154570][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 140.548030][ C1] eth0: bad gso: type: 1, size: 1408 [ 140.646467][ T54] Bluetooth: hci3: command tx timeout [ 140.653204][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 140.825832][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.852225][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.860915][ T7834] bridge_slave_0: entered allmulticast mode [ 140.874163][ T7834] bridge_slave_0: entered promiscuous mode [ 140.892598][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.900293][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.908407][ T7834] bridge_slave_1: entered allmulticast mode [ 140.926877][ T7834] bridge_slave_1: entered promiscuous mode [ 140.929556][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.784'. [ 141.075191][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.110293][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.251667][ T7834] team0: Port device team_slave_0 added [ 141.323203][ T7834] team0: Port device team_slave_1 added [ 141.367684][ T54] Bluetooth: hci5: command tx timeout [ 141.552983][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.564753][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 141.588526][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.607419][ T7900] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.792'. [ 141.629770][ T7900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.792'. [ 141.640446][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.687765][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.704772][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.806593][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.795'. [ 141.807562][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.854542][ T7908] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 141.875337][ T7908] netlink: 88 bytes leftover after parsing attributes in process `syz.0.794'. [ 141.875476][ C1] eth0: bad gso: type: 1, size: 1408 [ 141.994419][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 142.147854][ T7834] hsr_slave_0: entered promiscuous mode [ 142.155867][ T7921] Bluetooth: MGMT ver 1.23 [ 142.167839][ T7834] hsr_slave_1: entered promiscuous mode [ 142.174326][ T7834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.182789][ T7834] Cannot create hsr debugfs directory [ 142.303854][ T7924] bond_slave_0: entered promiscuous mode [ 142.309670][ T7924] bond_slave_1: entered promiscuous mode [ 142.315396][ T7924] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 142.335742][ T7924] vlan3: entered promiscuous mode [ 142.341547][ T7924] bond0: entered promiscuous mode [ 142.355447][ T7924] bond0: left promiscuous mode [ 142.362502][ T7924] bond_slave_0: left promiscuous mode [ 142.368016][ T7924] bond_slave_1: left promiscuous mode [ 142.373518][ T7924] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 142.706503][ C1] eth0: bad gso: type: 1, size: 1408 [ 142.726311][ T54] Bluetooth: hci3: command tx timeout [ 142.788727][ T7947] netlink: 'syz.4.807': attribute type 4 has an invalid length. [ 143.042398][ T7949] Cannot find add_set index 0 as target [ 143.231328][ T7958] macvlan2: entered allmulticast mode [ 143.247853][ T7958] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 143.265634][ T7958] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 143.293953][ T7958] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 143.319100][ T7960] bond0: entered promiscuous mode [ 143.324203][ T7960] bond_slave_0: entered promiscuous mode [ 143.331049][ T7960] bond_slave_1: entered promiscuous mode [ 143.337621][ T7960] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 143.346777][ T7960] macvlan2: entered promiscuous mode [ 143.353374][ T7960] bond0: left allmulticast mode [ 143.359171][ T7960] bond_slave_0: left allmulticast mode [ 143.364672][ T7960] bond_slave_1: left allmulticast mode [ 143.371529][ T7960] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 143.391456][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'. [ 143.545036][ T7974] netlink: 236 bytes leftover after parsing attributes in process `syz.1.817'. [ 143.627651][ T7979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.818'. [ 143.705808][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 143.724872][ T7981] can: request_module (can-proto-5) failed. [ 143.820677][ T7834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.860526][ T7834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.909232][ T7834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.946865][ T7834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.153440][ T7988] syzkaller0: entered promiscuous mode [ 144.180498][ T7988] syzkaller0: entered allmulticast mode [ 144.445415][ T8002] Cannot find add_set index 0 as target [ 144.461019][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.477834][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.487150][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.503713][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.517446][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.526807][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.816480][ T5245] Bluetooth: hci3: command tx timeout [ 145.734306][ T8000] lo speed is unknown, defaulting to 1000 [ 145.852932][ T8000] lo speed is unknown, defaulting to 1000 [ 145.871878][ T8011] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 145.882042][ T8000] lo speed is unknown, defaulting to 1000 [ 145.900820][ T8011] netlink: 244 bytes leftover after parsing attributes in process `syz.3.826'. [ 146.145363][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.392248][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.401513][ T8022] netlink: 'syz.1.830': attribute type 3 has an invalid length. [ 146.422498][ T8022] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.830'. [ 146.467910][ T8000] infiniband syz0: set active [ 146.472971][ T8000] infiniband syz0: added lo [ 146.491417][ T8029] team0: left allmulticast mode [ 146.494754][ T8000] syz0: rxe_create_cq: returned err = -12 [ 146.497187][ T8029] team_slave_0: left allmulticast mode [ 146.509134][ T8029] team_slave_1: left allmulticast mode [ 146.511853][ T8000] infiniband syz0: Couldn't create ib_mad CQ [ 146.515944][ T8029] bridge0: port 3(team0) entered disabled state [ 146.524051][ T8000] infiniband syz0: Couldn't open port 1 [ 146.549463][ T8029] bridge_slave_0: left allmulticast mode [ 146.557201][ T8029] bridge_slave_0: left promiscuous mode [ 146.564839][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.566283][ T5245] Bluetooth: hci1: command tx timeout [ 146.593361][ T8029] bridge_slave_1: left allmulticast mode [ 146.601474][ T8000] RDS/IB: syz0: added [ 146.603498][ T8029] bridge_slave_1: left promiscuous mode [ 146.613243][ T8000] smc: adding ib device syz0 with port count 1 [ 146.617678][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.620858][ T8000] smc: ib device syz0 port 1 has pnetid [ 146.643134][ T8029] bond0: (slave bond_slave_0): Releasing backup interface [ 146.672456][ T8029] bond0: (slave bond_slave_1): Releasing backup interface [ 146.683985][ T8029] team_slave_0: left promiscuous mode [ 146.712591][ T8029] team0: Port device team_slave_0 removed [ 146.722504][ T8029] team_slave_1: left promiscuous mode [ 146.749723][ T8029] team0: Port device team_slave_1 removed [ 146.758265][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.766403][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.775379][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.783333][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.800080][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.807297][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.825877][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.833113][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.879834][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.887211][ T5245] Bluetooth: hci3: command tx timeout [ 146.895521][ T8032] bond0: entered promiscuous mode [ 146.902116][ T8032] team0: Port device bond0 added [ 146.909114][ T51] lo speed is unknown, defaulting to 1000 [ 146.947237][ T8001] chnl_net:caif_netlink_parms(): no params data found [ 147.000660][ T5573] lo speed is unknown, defaulting to 1000 [ 147.039880][ T8000] lo speed is unknown, defaulting to 1000 [ 147.085366][ T8035] SET target dimension over the limit! [ 147.309272][ T8042] netlink: 52 bytes leftover after parsing attributes in process `syz.1.834'. [ 147.323335][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 147.379343][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 147.409679][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.418735][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.427100][ T8001] bridge_slave_0: entered allmulticast mode [ 147.435130][ T8001] bridge_slave_0: entered promiscuous mode [ 147.463054][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.472282][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.479992][ T8001] bridge_slave_1: entered allmulticast mode [ 147.487769][ T8001] bridge_slave_1: entered promiscuous mode [ 147.587234][ T8000] lo speed is unknown, defaulting to 1000 [ 147.589529][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.636569][ T8052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.642655][ T8054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.661932][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.721259][ T8053] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 147.772369][ T8001] team0: Port device team_slave_0 added [ 147.788331][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.801473][ T8001] team0: Port device team_slave_1 added [ 147.897419][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.916039][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.958557][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.971753][ T8000] lo speed is unknown, defaulting to 1000 [ 147.978743][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.997480][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.032079][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.261703][ T8001] hsr_slave_0: entered promiscuous mode [ 148.270837][ T8001] hsr_slave_1: entered promiscuous mode [ 148.278361][ T8001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.286035][ T8001] Cannot create hsr debugfs directory [ 148.327726][ T8000] lo speed is unknown, defaulting to 1000 [ 148.480359][ T7834] veth0_vlan: entered promiscuous mode [ 148.493954][ T8063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.515036][ T7834] veth1_vlan: entered promiscuous mode [ 148.647591][ T5245] Bluetooth: hci1: command tx timeout [ 148.677060][ C1] eth0: bad gso: type: 1, size: 1408 [ 148.756668][ T8073] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 148.806795][ T8000] lo speed is unknown, defaulting to 1000 [ 148.892845][ T7834] veth0_macvtap: entered promiscuous mode [ 148.918767][ T7834] veth1_macvtap: entered promiscuous mode [ 149.009894][ T8001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.031713][ T8001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.072108][ T8079] netlink: 52 bytes leftover after parsing attributes in process `syz.1.844'. [ 149.103266][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 149.188737][ T8001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.200367][ T8001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.248911][ T8000] lo speed is unknown, defaulting to 1000 [ 149.262344][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.287902][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.319497][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.347051][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.370575][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.399854][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.428452][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.444283][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 149.467640][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.489157][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.518465][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 149.560452][ T5245] block nbd6: Receive control failed (result -107) [ 149.599478][ T8001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.610425][ T8087] nbd6: detected capacity change from 0 to 256 [ 149.620747][ T8001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.632653][ T5248] block nbd6: Dead connection, failed to find a fallback [ 149.646260][ T5248] block nbd6: shutting down sockets [ 149.657466][ T5248] blk_print_req_error: 27 callbacks suppressed [ 149.657486][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.665138][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.702312][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.716152][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.716244][ T5248] buffer_io_error: 27 callbacks suppressed [ 149.716256][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.735438][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.764064][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.795386][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.795579][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.826034][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.828749][ T7834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.833880][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.850668][ T7834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.879775][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.918028][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.938521][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.959156][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 149.989208][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.989551][ T8001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.006542][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.024047][ T8001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.026260][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.047859][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.057221][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.074594][ T8000] lo speed is unknown, defaulting to 1000 [ 150.082646][ T7834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.103020][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.106119][ T7834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.116036][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.141175][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.146775][ T7834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.196226][ T5248] ldm_validate_partition_table(): Disk read failed. [ 150.196486][ T7834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.202954][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.271314][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.299015][ T5248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.326472][ T5248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.334439][ T5248] Dev nbd6: unable to read RDB block 0 [ 150.368376][ T5248] nbd6: unable to read partition table [ 150.395432][ T5248] ldm_validate_partition_table(): Disk read failed. [ 150.437030][ T5248] Dev nbd6: unable to read RDB block 0 [ 150.454684][ T5248] nbd6: unable to read partition table [ 150.601385][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.648506][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.676897][ T8000] lo speed is unknown, defaulting to 1000 [ 150.727440][ T5245] Bluetooth: hci1: command tx timeout [ 150.731448][ T8001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.732945][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.762391][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.767599][ T8001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.815578][ T8001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.915093][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 150.941131][ T8001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.039611][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.772'. [ 151.091186][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 151.116612][ T8085] netlink: 'syz.3.846': attribute type 30 has an invalid length. [ 151.423295][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 151.522816][ T8119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.855'. [ 151.547637][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.555717][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 151.600019][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.688980][ T5245] block nbd7: Receive control failed (result -107) [ 151.705238][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.712583][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.724800][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.726743][ T8118] nbd7: detected capacity change from 0 to 256 [ 151.732030][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.792738][ T5248] block nbd7: Dead connection, failed to find a fallback [ 151.796776][ T8001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.811662][ T8001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.826492][ T5248] block nbd7: shutting down sockets [ 151.834239][ T5248] ldm_validate_partition_table(): Disk read failed. [ 151.864102][ T5248] Dev nbd7: unable to read RDB block 0 [ 151.889970][ T5248] nbd7: unable to read partition table [ 151.898564][ T5248] ldm_validate_partition_table(): Disk read failed. [ 151.905463][ T5248] Dev nbd7: unable to read RDB block 0 [ 151.922282][ T5248] nbd7: unable to read partition table [ 152.267453][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.310712][ T8140] team0: Port device bond0 added [ 152.438810][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.599418][ T8001] veth0_vlan: entered promiscuous mode [ 152.643389][ T8001] veth1_vlan: entered promiscuous mode [ 152.763776][ T8001] veth0_macvtap: entered promiscuous mode [ 152.810024][ T5245] Bluetooth: hci1: command tx timeout [ 152.812693][ T8001] veth1_macvtap: entered promiscuous mode [ 152.915069][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.962780][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.000571][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.037168][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.074585][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.096878][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.108320][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.122703][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.147223][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.172807][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.193531][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.275117][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.306490][ T8169] team0: Device bond0 failed to register rx_handler [ 153.414377][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.448670][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.468844][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.506085][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.532167][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.555014][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.577258][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.598614][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.621961][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.639065][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.664051][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.790317][ T8001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.799781][ T8001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.811318][ T8001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.836065][ T8001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.069833][ C1] eth0: bad gso: type: 1, size: 1408 [ 154.091216][ T8151] __nla_validate_parse: 6 callbacks suppressed [ 154.091235][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 154.154385][ T8151] netlink: 'syz.1.865': attribute type 30 has an invalid length. [ 154.298588][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.342573][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.458082][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.477004][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.812390][ T8226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.888'. [ 154.885507][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.890'. [ 155.197623][ T8239] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 155.205323][ T8239] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.894'. [ 155.281867][ T8239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.284705][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 155.302082][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 155.406292][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 155.471810][ T5245] block nbd8: Receive control failed (result -107) [ 155.507371][ T8244] nbd8: detected capacity change from 0 to 256 [ 155.528980][ T5248] block nbd8: Dead connection, failed to find a fallback [ 155.539843][ T5248] block nbd8: shutting down sockets [ 155.545180][ T5248] blk_print_req_error: 64 callbacks suppressed [ 155.545196][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.562080][ T5248] buffer_io_error: 64 callbacks suppressed [ 155.562096][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.582877][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.600387][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.624938][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.676518][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.704251][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.733933][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.775158][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.809124][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.831971][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.865008][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.898957][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.938709][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 155.969795][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.007428][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 156.015329][ T5248] ldm_validate_partition_table(): Disk read failed. [ 156.022372][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.053184][ T8278] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 156.081934][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.908'. [ 156.087417][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 156.131262][ T5248] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.160108][ T5248] Buffer I/O error on dev nbd8, logical block 0, async page read [ 156.167939][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 156.203068][ T5248] Dev nbd8: unable to read RDB block 0 [ 156.218983][ T5248] nbd8: unable to read partition table [ 156.233371][ T8287] vlan2: entered promiscuous mode [ 156.242324][ T5248] ldm_validate_partition_table(): Disk read failed. [ 156.259971][ T5248] Dev nbd8: unable to read RDB block 0 [ 156.285827][ T5248] nbd8: unable to read partition table [ 156.420718][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 156.513548][ T5245] block nbd9: Receive control failed (result -107) [ 156.558166][ T8291] nbd9: detected capacity change from 0 to 256 [ 156.622097][ T5248] block nbd9: Dead connection, failed to find a fallback [ 156.658865][ T5248] block nbd9: shutting down sockets [ 156.689324][ T5248] ldm_validate_partition_table(): Disk read failed. [ 156.722319][ T5248] Dev nbd9: unable to read RDB block 0 [ 156.729905][ T8296] netlink: 'syz.3.915': attribute type 11 has an invalid length. [ 156.742493][ T5248] nbd9: unable to read partition table [ 156.773472][ T5248] ldm_validate_partition_table(): Disk read failed. [ 156.811959][ T5248] Dev nbd9: unable to read RDB block 0 [ 156.836787][ T5248] nbd9: unable to read partition table [ 156.902726][ T8305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.986442][ T8305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.080050][ T8313] bridge0: entered allmulticast mode [ 157.220943][ C1] eth0: bad gso: type: 1, size: 1408 [ 157.392138][ T8325] vlan2: entered promiscuous mode [ 158.602745][ T8376] bond_slave_0: entered promiscuous mode [ 158.608562][ T8376] bond_slave_1: entered promiscuous mode [ 158.625269][ T8376] vlan2: entered promiscuous mode [ 158.640051][ T8376] bond0: entered promiscuous mode [ 158.675206][ T8376] bond0: left promiscuous mode [ 158.689769][ T8376] bond_slave_0: left promiscuous mode [ 158.695313][ T8376] bond_slave_1: left promiscuous mode [ 159.193090][ T8331] __nla_validate_parse: 4 callbacks suppressed [ 159.193110][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 159.246129][ T8331] netlink: 'syz.0.927': attribute type 30 has an invalid length. [ 159.257797][ T8331] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 159.700955][ T8400] netlink: 5 bytes leftover after parsing attributes in process `syz.3.947'. [ 159.810904][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 159.965561][ T8407] lo speed is unknown, defaulting to 1000 [ 160.239812][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 160.839518][ T8443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.864167][ T8443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.021388][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 161.076064][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 161.166130][ T5245] block nbd10: Receive control failed (result -107) [ 161.197154][ T8449] nbd10: detected capacity change from 0 to 256 [ 161.226867][ T5248] block nbd10: Dead connection, failed to find a fallback [ 161.234039][ T5248] block nbd10: shutting down sockets [ 161.275277][ T5248] blk_print_req_error: 64 callbacks suppressed [ 161.275296][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.294896][ T5248] buffer_io_error: 64 callbacks suppressed [ 161.294912][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.329935][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.344724][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.349892][ T8452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.356680][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.397895][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.408748][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 161.450756][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.503446][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.534416][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.555445][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.590172][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.632223][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.645508][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.669876][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.709757][ T8466] netlink: 5 bytes leftover after parsing attributes in process `syz.3.972'. [ 161.725581][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.742474][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.754541][ T5248] ldm_validate_partition_table(): Disk read failed. [ 161.770416][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.793010][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.821437][ T5248] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 161.841467][ T5248] Buffer I/O error on dev nbd10, logical block 0, async page read [ 161.861904][ T5248] Dev nbd10: unable to read RDB block 0 [ 161.880274][ T5248] nbd10: unable to read partition table [ 161.913113][ T5248] ldm_validate_partition_table(): Disk read failed. [ 161.927669][ T5248] Dev nbd10: unable to read RDB block 0 [ 161.951538][ T5248] nbd10: unable to read partition table [ 161.975490][ T8468] Bluetooth: MGMT ver 1.23 [ 161.990765][ T8468] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 162.935626][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 163.074360][ T8530] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.084177][ T8530] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.093168][ T8530] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.102031][ T8530] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.177576][ T8530] vxlan0: entered promiscuous mode [ 163.216487][ T8530] vxlan0: entered allmulticast mode [ 163.277380][ T8530] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.287751][ T8530] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.297010][ T8530] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.306022][ T8530] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.358954][ T8585] RDS: rds_bind could not find a transport for ::4006:20:0:0, load rds_tcp or rds_rdma? [ 164.578627][ T8595] sit0: entered promiscuous mode [ 164.606614][ T8595] vlan2: entered promiscuous mode [ 164.632028][ T8595] sit0: left promiscuous mode [ 164.736324][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 164.747817][ T8601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1016'. [ 165.227820][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1024'. [ 166.632639][ T8651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1031'. [ 166.674649][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 166.707448][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 166.798698][ T8654] xt_NFQUEUE: number of total queues is 0 [ 166.948713][ T8668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1035'. [ 167.030246][ T8670] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.039246][ T8670] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.048082][ T8670] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.057212][ T8670] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.075747][ T8670] vxlan0: entered promiscuous mode [ 167.083346][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 167.111697][ T8670] vxlan0: entered allmulticast mode [ 167.128511][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1036'. [ 167.144745][ T8670] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.153761][ T8670] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.162838][ T8670] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.171779][ T8670] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.470545][ C1] eth0: bad gso: type: 1, size: 1408 [ 167.476602][ C1] eth0: bad gso: type: 1, size: 1408 [ 167.494795][ C1] eth0: bad gso: type: 1, size: 1408 [ 167.559547][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 167.591069][ T8695] team1: Mode changed to "activebackup" [ 167.615628][ T8695] team1: Mode changed to "roundrobin" [ 167.661982][ T8703] caif0: entered promiscuous mode [ 167.674171][ T8703] caif0: entered allmulticast mode [ 167.750884][ C1] eth0: bad gso: type: 1, size: 1408 [ 168.129021][ T8731] netlink: 'syz.1.1051': attribute type 11 has an invalid length. [ 168.354190][ T8731] netlink: 'syz.1.1051': attribute type 4 has an invalid length. [ 168.431596][ C1] eth0: bad gso: type: 1, size: 1408 [ 168.780522][ T8748] Cannot find set identified by id 0 to match [ 169.256765][ T8758] lo speed is unknown, defaulting to 1000 [ 169.348782][ T8765] batadv_slave_1: entered promiscuous mode [ 169.388510][ T8763] batadv_slave_1: left promiscuous mode [ 169.616459][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.647064][ C1] eth0: bad gso: type: 1, size: 1408 [ 169.762709][ T8778] __nla_validate_parse: 7 callbacks suppressed [ 169.762729][ T8778] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1066'. [ 169.975515][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1071'. [ 170.018426][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 170.358801][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 170.426565][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 170.519723][ T5245] block nbd11: Receive control failed (result -107) [ 170.536181][ T8805] nbd11: detected capacity change from 0 to 256 [ 170.561618][ T5232] block nbd11: Dead connection, failed to find a fallback [ 170.569620][ T5232] block nbd11: shutting down sockets [ 170.575163][ T5232] blk_print_req_error: 27 callbacks suppressed [ 170.575179][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.590980][ T5232] buffer_io_error: 27 callbacks suppressed [ 170.590995][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.612444][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.634794][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.643321][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.661740][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.671058][ T8817] netlink: 'syz.0.1079': attribute type 10 has an invalid length. [ 170.696281][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.705468][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.738064][ C1] eth0: bad gso: type: 1, size: 1408 [ 170.768775][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.778457][ C1] eth0: bad gso: type: 1, size: 1408 [ 170.810440][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.859623][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.873125][ T8817] team0: Device veth1_vlan failed to register rx_handler [ 170.881026][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.889710][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.899989][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.908268][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.920782][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.929125][ T5232] ldm_validate_partition_table(): Disk read failed. [ 170.940189][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.953006][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.968313][ T5232] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.977949][ T5232] Buffer I/O error on dev nbd11, logical block 0, async page read [ 170.986287][ T5232] Dev nbd11: unable to read RDB block 0 [ 170.993956][ T5232] nbd11: unable to read partition table [ 171.034878][ T5232] ldm_validate_partition_table(): Disk read failed. [ 171.074039][ T5232] Dev nbd11: unable to read RDB block 0 [ 171.092061][ T5232] nbd11: unable to read partition table [ 171.284795][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 171.365249][ T8817] syz.0.1079 (8817) used greatest stack depth: 17136 bytes left [ 171.380451][ T8831] SET target dimension over the limit! [ 171.613103][ T8844] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1089'. [ 171.694343][ C1] eth0: bad gso: type: 1, size: 1408 [ 172.197711][ T8864] netlink: 'syz.2.1099': attribute type 32 has an invalid length. [ 172.245583][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 172.275676][ T8864] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 172.422716][ T8881] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1103'. [ 172.821766][ C1] eth0: bad gso: type: 1, size: 1408 [ 172.827618][ C1] eth0: bad gso: type: 1, size: 1408 [ 172.917941][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1108'. [ 173.252235][ T8911] netlink: zone id is out of range [ 173.261693][ T8910] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 173.267203][ T8911] netlink: zone id is out of range [ 173.281747][ T8911] netlink: zone id is out of range [ 173.287793][ T8911] netlink: zone id is out of range [ 173.297339][ T8911] netlink: zone id is out of range [ 173.309286][ T8911] netlink: zone id is out of range [ 173.325572][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.326761][ T8911] netlink: zone id is out of range [ 173.354706][ T8911] netlink: zone id is out of range [ 173.365623][ T8910] batadv0: entered promiscuous mode [ 173.391771][ T8910] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 173.791149][ T5245] block nbd12: Receive control failed (result -107) [ 173.837475][ T8922] nbd12: detected capacity change from 0 to 256 [ 174.859243][ T8990] __nla_validate_parse: 13 callbacks suppressed [ 174.859263][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 174.923421][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 175.221308][ T9008] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1144'. [ 175.246507][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 175.300639][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 175.573512][ T9016] veth0_vlan: entered allmulticast mode [ 175.708345][ T9029] netlink: 'syz.1.1152': attribute type 12 has an invalid length. [ 175.742054][ T9029] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1152'. [ 175.862530][ T9037] lo speed is unknown, defaulting to 1000 [ 175.954045][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 175.984921][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1158'. [ 176.171399][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 176.668133][ T9077] netlink: 4432 bytes leftover after parsing attributes in process `syz.4.1167'. [ 176.765419][ T9083] bridge_slave_0: left allmulticast mode [ 176.781652][ T9083] bridge_slave_0: left promiscuous mode [ 176.818294][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.378314][ T9083] bridge_slave_1: left allmulticast mode [ 177.384016][ T9083] bridge_slave_1: left promiscuous mode [ 177.389922][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.403201][ T9083] bond0: (slave bond_slave_0): Releasing backup interface [ 177.411037][ T9083] bond_slave_0: left promiscuous mode [ 177.427314][ T9083] bond0: (slave bond_slave_1): Releasing backup interface [ 177.435782][ T9083] bond_slave_1: left promiscuous mode [ 177.488435][ T9083] team0: Port device team_slave_0 removed [ 177.513486][ T9083] team0: Port device team_slave_1 removed [ 177.525340][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.533211][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.547755][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.555204][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.570404][ T9083] bond0: (slave netdevsim0): Releasing backup interface [ 177.582918][ T9083] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 177.600517][ T9083] batman_adv: batadv0: Removing interface: wlan1 [ 177.621468][ T9083] bond0: (slave macvlan2): Releasing backup interface [ 177.630360][ T9083] macvlan2: left promiscuous mode [ 177.637405][ T9083] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 177.644268][ T9083] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 177.664569][ T9087] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 177.673509][ T9087] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 177.683841][ T9090] bond0: left promiscuous mode [ 177.715750][ T9094] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 177.940260][ T9089] lo speed is unknown, defaulting to 1000 [ 177.947821][ T9110] netlink: 'syz.0.1179': attribute type 5 has an invalid length. [ 178.516754][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.523929][ T9137] team0: Device bond0 failed to register rx_handler [ 178.752650][ C1] net_ratelimit: 115 callbacks suppressed [ 178.752670][ C1] eth0: bad gso: type: 1, size: 1408 [ 179.224013][ T9160] tipc: Started in network mode [ 179.256058][ T9160] tipc: Node identity ., cluster identity 4711 [ 179.300820][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 179.463219][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.495412][ T9167] team0: Port device bond0 added [ 179.665567][ C1] eth0: bad gso: type: 1, size: 1408 [ 180.003458][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 180.055037][ T9203] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1210'. [ 180.055079][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 180.055522][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 180.194794][ T9209] xt_hashlimit: overflow, rate too high: 0 [ 180.872466][ T9235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1221'. [ 180.966908][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.991848][ T9243] team0: Device bond0 failed to register rx_handler [ 181.031476][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 181.062545][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 181.146185][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 181.176242][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 181.327769][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 181.446381][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 181.604413][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.613199][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.624320][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.632621][ T9275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.230156][ T9312] netlink: 'syz.4.1245': attribute type 21 has an invalid length. [ 182.266338][ T9312] netlink: 'syz.4.1245': attribute type 4 has an invalid length. [ 182.361608][ T9320] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 182.433638][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.485720][ T9325] syz.3.1250[9325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.485867][ T9325] syz.3.1250[9325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.499135][ T9320] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.250797][ T9355] netlink: 'syz.1.1257': attribute type 21 has an invalid length. [ 183.343206][ C1] eth0: bad gso: type: 1, size: 1408 [ 183.475334][ T9382] trusted_key: syz.4.1264 sent an empty control message without MSG_MORE. [ 183.740686][ T9396] lo speed is unknown, defaulting to 1000 [ 184.153656][ T9422] sctp: [Deprecated]: syz.0.1281 (pid 9422) Use of int in maxseg socket option. [ 184.153656][ T9422] Use struct sctp_assoc_value instead [ 185.207812][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.225520][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.234847][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.248140][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.257223][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.265795][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.323074][ T9447] team0: Port device bond0 removed [ 185.344546][ T9447] bridge_slave_0: left allmulticast mode [ 185.353112][ T9454] __nla_validate_parse: 8 callbacks suppressed [ 185.353132][ T9454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1290'. [ 185.354439][ T9447] bridge_slave_0: left promiscuous mode [ 185.377365][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.389165][ T9447] bridge_slave_1: left allmulticast mode [ 185.394823][ T9447] bridge_slave_1: left promiscuous mode [ 185.401015][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.415000][ T9447] bond0: (slave bond_slave_0): Releasing backup interface [ 185.433722][ T9447] bond0: (slave bond_slave_1): Releasing backup interface [ 185.472223][ T9447] team0: Port device team_slave_0 removed [ 185.495777][ T9447] team0: Port device team_slave_1 removed [ 185.802617][ T9451] lo speed is unknown, defaulting to 1000 [ 185.943736][ T9468] vlan3: entered promiscuous mode [ 185.959086][ T9468] bond0: entered promiscuous mode [ 185.964173][ T9468] team0: entered promiscuous mode [ 185.988755][ T9468] bond0: left promiscuous mode [ 185.998397][ T9468] team0: left promiscuous mode [ 186.065262][ T9467] SET target dimension over the limit! [ 186.421121][ T9486] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 186.437544][ T9486] macsec1: entered promiscuous mode [ 186.443823][ T9486] macsec1: entered allmulticast mode [ 186.449416][ T9486] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 186.576830][ C1] eth0: bad gso: type: 1, size: 1408 [ 186.600416][ C1] eth0: bad gso: type: 1, size: 1408 [ 186.887550][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 186.916163][ T9508] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1311'. [ 186.981084][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 187.127760][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.136832][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.144105][ T9451] bridge_slave_0: entered allmulticast mode [ 187.177553][ T9451] bridge_slave_0: entered promiscuous mode [ 187.210045][ T9520] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1315'. [ 187.253705][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.276145][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.283629][ T9451] bridge_slave_1: entered allmulticast mode [ 187.306949][ T9451] bridge_slave_1: entered promiscuous mode [ 187.309921][ T9530] FAULT_INJECTION: forcing a failure. [ 187.309921][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.342088][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.3.1319 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 187.352467][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 187.362539][ T9530] Call Trace: [ 187.365806][ T9530] [ 187.366303][ T54] Bluetooth: hci1: command tx timeout [ 187.368718][ T9530] dump_stack_lvl+0x241/0x360 [ 187.379082][ T9530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.384279][ T9530] ? __pfx__printk+0x10/0x10 [ 187.388950][ T9530] ? snprintf+0xda/0x120 [ 187.393180][ T9530] should_fail_ex+0x3b0/0x4e0 [ 187.397855][ T9530] _copy_to_user+0x2f/0xb0 [ 187.402267][ T9530] simple_read_from_buffer+0xca/0x150 [ 187.407643][ T9530] proc_fail_nth_read+0x1e9/0x250 [ 187.412685][ T9530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.418365][ T9530] ? rw_verify_area+0x520/0x6b0 [ 187.423240][ T9530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.428812][ T9530] vfs_read+0x204/0xbc0 [ 187.433054][ T9530] ? __pfx_lock_release+0x10/0x10 [ 187.438115][ T9530] ? __pfx_vfs_read+0x10/0x10 [ 187.442785][ T9530] ? __fget_files+0x29/0x470 [ 187.447373][ T9530] ? __fget_files+0x3f6/0x470 [ 187.452234][ T9530] ksys_read+0x1a0/0x2c0 [ 187.456476][ T9530] ? __pfx_ksys_read+0x10/0x10 [ 187.461236][ T9530] ? do_syscall_64+0x100/0x230 [ 187.466000][ T9530] ? do_syscall_64+0xb6/0x230 [ 187.470677][ T9530] do_syscall_64+0xf3/0x230 [ 187.475176][ T9530] ? clear_bhb_loop+0x35/0x90 [ 187.479938][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.485827][ T9530] RIP: 0033:0x7ff3f3775dfc [ 187.490232][ T9530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 187.509835][ T9530] RSP: 002b:00007ff3f31ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.518252][ T9530] RAX: ffffffffffffffda RBX: 00007ff3f3905f80 RCX: 00007ff3f3775dfc [ 187.526224][ T9530] RDX: 000000000000000f RSI: 00007ff3f31ff0b0 RDI: 0000000000000006 [ 187.534196][ T9530] RBP: 00007ff3f31ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.542160][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.550121][ T9530] R13: 000000000000004d R14: 00007ff3f3905f80 R15: 00007ffc98620e98 [ 187.558103][ T9530] [ 187.777805][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.803740][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.908582][ T9548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1324'. [ 187.947955][ T9451] team0: Port device team_slave_0 added [ 187.969313][ T9451] team0: Port device team_slave_1 added [ 187.996927][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 188.052026][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.082193][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.132588][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.186595][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.204013][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.246175][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.267003][ T9567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.288675][ T9569] Cannot find add_set index 0 as target [ 188.380445][ C1] eth0: bad gso: type: 1, size: 1408 [ 188.464671][ T9451] hsr_slave_0: entered promiscuous mode [ 188.484321][ T9451] hsr_slave_1: entered promiscuous mode [ 188.492000][ T9451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.507521][ T9451] Cannot create hsr debugfs directory [ 188.567656][ T9564] lo speed is unknown, defaulting to 1000 [ 189.110624][ T9451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.167337][ T9595] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1342'. [ 189.232121][ C1] eth0: bad gso: type: 1, size: 1408 [ 189.261375][ T9451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.418225][ T9451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.446863][ T54] Bluetooth: hci1: command tx timeout [ 189.593961][ T9451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.775530][ T9614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1349'. [ 189.886946][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 189.992546][ C1] eth0: bad gso: type: 1, size: 1408 [ 190.013257][ T9451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.044265][ T9451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.077647][ T9451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.116481][ T9451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.174218][ T9626] Cannot find add_set index 0 as target [ 190.190542][ T9627] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1354'. [ 190.443881][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.454578][ C1] eth0: bad gso: type: 1, size: 1408 [ 190.597765][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.623694][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.631050][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.714711][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.721928][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.844114][ T9451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.882324][ T9451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.019613][ T9650] Cannot find add_set index 0 as target [ 191.040661][ T9653] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1366'. [ 191.419633][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.429743][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.435242][ T9668] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1370'. [ 191.447255][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.455704][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.468081][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.475483][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.506080][ T9665] lo speed is unknown, defaulting to 1000 [ 191.526684][ T5245] Bluetooth: hci1: command tx timeout [ 191.550820][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.588842][ C1] eth0: bad gso: type: 1, size: 1408 [ 191.769663][ T9451] veth0_vlan: entered promiscuous mode [ 191.796899][ T9451] veth1_vlan: entered promiscuous mode [ 191.891686][ T9451] veth0_macvtap: entered promiscuous mode [ 191.948183][ T9451] veth1_macvtap: entered promiscuous mode [ 191.985797][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.018029][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.030392][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.045452][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.071904][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.097960][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.114411][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.134851][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.158688][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.206541][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.219441][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.230717][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.241332][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.252302][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.265095][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.275022][ T9451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.285615][ T9451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.299041][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.309790][ T9688] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1377'. [ 192.331666][ T9667] lo speed is unknown, defaulting to 1000 [ 192.344810][ T9451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.387966][ T9451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.404668][ T9451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.414678][ T9451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.473868][ T9694] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1380'. [ 192.788630][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1383'. [ 192.897602][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1383'. [ 192.922462][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.930940][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.243717][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.256239][ T9717] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1388'. [ 193.275817][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.489987][ T9667] chnl_net:caif_netlink_parms(): no params data found [ 193.513897][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 193.536732][ T5245] Bluetooth: hci0: command tx timeout [ 193.596568][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 193.616801][ T5245] Bluetooth: hci1: command tx timeout [ 193.668058][ T5245] block nbd13: Receive control failed (result -107) [ 193.796651][ T9726] nbd13: detected capacity change from 0 to 256 [ 193.868093][ T9667] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.884876][ T9667] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.903074][ T9667] bridge_slave_0: entered allmulticast mode [ 193.911828][ T9667] bridge_slave_0: entered promiscuous mode [ 193.921202][ T9667] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.930247][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.937642][ T9667] bridge_slave_1: entered allmulticast mode [ 193.945103][ T9667] bridge_slave_1: entered promiscuous mode [ 194.110821][ T9667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.127017][ T9667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.179867][ C1] eth0: bad gso: type: 1, size: 1408 [ 194.285260][ T9667] team0: Port device team_slave_0 added [ 194.322663][ T9667] team0: Port device team_slave_1 added [ 194.335461][ T9747] SET target dimension over the limit! [ 194.465762][ T9751] vlan2: entered promiscuous mode [ 194.484051][ T9751] bond0: entered promiscuous mode [ 194.497131][ T9751] bond0: left promiscuous mode [ 194.543012][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.550345][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.587230][ T9667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.678287][ T9667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.695365][ T9667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.772438][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.774353][ T9667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.787429][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.825671][ T9765] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1404'. [ 194.960086][ T9667] hsr_slave_0: entered promiscuous mode [ 194.997326][ T9667] hsr_slave_1: entered promiscuous mode [ 195.019419][ T9667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.048248][ T9667] Cannot create hsr debugfs directory [ 195.179523][ T9776] SET target dimension over the limit! [ 195.521818][ T9667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.606125][ T5245] Bluetooth: hci0: command tx timeout [ 195.712501][ T9667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.828729][ T5245] block nbd14: Receive control failed (result -107) [ 195.851606][ T9667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.877047][ T9801] nbd14: detected capacity change from 0 to 256 [ 195.969826][ T9808] Cannot find add_set index 0 as target [ 196.025252][ T9667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.230993][ T9827] __nla_validate_parse: 4 callbacks suppressed [ 196.231012][ T9827] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1431'. [ 196.403354][ C1] eth0: bad gso: type: 1, size: 1408 [ 196.425759][ T9667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.438556][ C1] eth0: bad gso: type: 1, size: 1408 [ 196.474400][ T9667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.515718][ T9667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.551718][ T9667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.591790][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 196.649736][ T9848] SET target dimension over the limit! [ 196.677257][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 196.740957][ T5245] block nbd15: Receive control failed (result -107) [ 196.778074][ T9667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.796357][ T9842] nbd15: detected capacity change from 0 to 256 [ 196.808403][ T9667] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.829028][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.836272][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.871089][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.878315][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.107766][ T9861] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1445'. [ 197.220780][ C1] eth0: bad gso: type: 1, size: 1408 [ 197.465310][ T9667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.604781][ T9667] veth0_vlan: entered promiscuous mode [ 197.632130][ T9878] SET target dimension over the limit! [ 197.658881][ T9667] veth1_vlan: entered promiscuous mode [ 197.687084][ T5245] Bluetooth: hci0: command tx timeout [ 197.829127][ T9667] veth0_macvtap: entered promiscuous mode [ 197.866561][ T9667] veth1_macvtap: entered promiscuous mode [ 197.897277][ T9894] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1457'. [ 197.974365][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.005957][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.028088][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.041192][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.058563][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.070980][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.082016][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.113660][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.136278][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.155974][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.178977][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.213111][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.237549][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.261030][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.276459][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.288968][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.305284][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.323616][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.338784][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.356303][ T9667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.370118][ T9667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.382365][ T9667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.401172][ T9667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.436898][ T9667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.451278][ T9667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.462833][ T9667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.649437][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.667907][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.720551][ T9922] SET target dimension over the limit! [ 198.786677][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.794713][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.853167][ C1] eth0: bad gso: type: 1, size: 1408 [ 198.964620][ T9931] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1362'. [ 199.015621][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 199.076353][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 199.146049][ T9933] tipc: Started in network mode [ 199.150961][ T9933] tipc: Node identity cgroup.pn, cluster identity 8 [ 199.442657][ T9947] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1478'. [ 199.766317][ T5245] Bluetooth: hci0: command tx timeout [ 199.899778][ T9959] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1480'. [ 200.068361][ C1] eth0: bad gso: type: 1, size: 1408 [ 200.121106][ T9961] SET target dimension over the limit! [ 200.667217][ T9977] tipc: Cannot configure node identity twice [ 201.166674][ C1] eth0: bad gso: type: 1, size: 1408 [ 201.266887][ T9992] SET target dimension over the limit! [ 201.339401][T10000] __nla_validate_parse: 4 callbacks suppressed [ 201.339421][T10000] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1499'. [ 201.476211][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 201.594132][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 201.625193][T10011] tipc: Started in network mode [ 201.645363][T10011] tipc: Node identity cgroup.pn, cluster identity 8 [ 201.819008][T10021] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1508'. [ 201.886344][T10025] Cannot find add_set index 0 as target [ 201.915515][ C1] eth0: bad gso: type: 1, size: 1408 [ 202.195637][T10038] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1516'. [ 202.254835][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 202.387600][ C1] eth0: bad gso: type: 1, size: 1408 [ 202.471992][T10050] team0: Device bond0 is up. Set it down before adding it as a team port [ 202.577492][T10054] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1523'. [ 202.667131][T10056] SET target dimension over the limit! [ 202.688140][ C1] eth0: bad gso: type: 1, size: 1408 [ 202.915706][T10073] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1532'. [ 202.993201][T10080] team0: Device bond0 is up. Set it down before adding it as a team port [ 203.021401][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 203.212785][T10088] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1538'. [ 203.317712][ C1] eth0: bad gso: type: 1, size: 1408 [ 203.389721][T10097] SET target dimension over the limit! [ 203.693283][T10117] team0: Device bond0 is up. Set it down before adding it as a team port [ 203.818441][ C1] eth0: bad gso: type: 1, size: 1408 [ 204.014827][T10132] SET target dimension over the limit! [ 204.282243][ C1] eth0: bad gso: type: 1, size: 1408 [ 204.507552][ C1] eth0: bad gso: type: 1, size: 1408 [ 204.690214][T10163] SET target dimension over the limit! [ 204.870668][ C1] eth0: bad gso: type: 1, size: 1408 [ 205.139354][ C1] eth0: bad gso: type: 1, size: 1408 [ 205.410460][ C1] eth0: bad gso: type: 1, size: 1408 [ 205.492167][T10207] SET target dimension over the limit! [ 206.060463][ C1] eth0: bad gso: type: 1, size: 1408 [ 206.185043][T10248] SET target dimension over the limit! [ 206.202766][T10253] bond0: left promiscuous mode [ 206.214449][T10253] batadv0: left promiscuous mode [ 206.238396][T10253] team0: Port device bond0 removed [ 206.575631][T10272] __nla_validate_parse: 15 callbacks suppressed [ 206.575654][T10272] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1620'. [ 206.760830][T10281] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1626'. [ 206.812590][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 206.820840][T10282] SET target dimension over the limit! [ 207.297552][T10307] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1636'. [ 207.407923][ C1] net_ratelimit: 4 callbacks suppressed [ 207.407944][ C1] eth0: bad gso: type: 1, size: 1408 [ 207.432558][T10313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1640'. [ 207.493632][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 208.109692][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.128139][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.141721][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.164428][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.193186][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.206276][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.344528][T10336] lo speed is unknown, defaulting to 1000 [ 208.358589][T10343] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1652'. [ 208.430860][T10347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1654'. [ 208.496680][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 209.048839][T10336] chnl_net:caif_netlink_parms(): no params data found [ 209.205547][T10388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1668'. [ 209.290269][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.316470][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.347216][T10336] bridge_slave_0: entered allmulticast mode [ 209.355269][T10336] bridge_slave_0: entered promiscuous mode [ 209.390109][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.406169][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.427687][T10336] bridge_slave_1: entered allmulticast mode [ 209.438423][T10336] bridge_slave_1: entered promiscuous mode [ 209.562718][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.608221][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.790974][T10336] team0: Port device team_slave_0 added [ 209.819488][T10336] team0: Port device team_slave_1 added [ 209.961670][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.984306][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.024168][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.055421][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.073969][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.152520][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.246218][ T5245] Bluetooth: hci2: command tx timeout [ 210.328461][T10336] hsr_slave_0: entered promiscuous mode [ 210.387914][T10336] hsr_slave_1: entered promiscuous mode [ 210.436069][T10336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.446392][T10336] Cannot create hsr debugfs directory [ 210.945715][ C1] eth0: bad gso: type: 1, size: 1408 [ 211.159210][T10336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.380638][T10336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.551170][T10336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.613890][T10488] __nla_validate_parse: 10 callbacks suppressed [ 211.613909][T10488] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1712'. [ 211.727254][ C1] eth0: bad gso: type: 1, size: 1408 [ 211.745047][T10336] netdevsim netdevsim4 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.043613][T10336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.072513][T10336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.092682][T10336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.118362][T10336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.311460][T10336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.326343][ T5245] Bluetooth: hci2: command tx timeout [ 212.348930][T10516] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1724'. [ 212.370387][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 212.429147][T10336] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.463719][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.471171][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.537883][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.545075][ T5573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.579876][T10518] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1725'. [ 212.682571][ C1] eth0: bad gso: type: 1, size: 1408 [ 213.084193][T10336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.167560][T10548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1736'. [ 213.191074][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 213.352814][T10556] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1739'. [ 213.445332][ C1] eth0: bad gso: type: 1, size: 1408 [ 213.673441][T10336] veth0_vlan: entered promiscuous mode [ 213.709582][T10336] veth1_vlan: entered promiscuous mode [ 213.805312][T10336] veth0_macvtap: entered promiscuous mode [ 213.843456][T10336] veth1_macvtap: entered promiscuous mode [ 213.925782][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.970300][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.987646][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.010331][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.036161][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.047329][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.057604][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.068604][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.079525][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.093000][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.103181][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.128534][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.169360][T10336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.213144][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.266322][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.293429][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.316814][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.338474][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.364223][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.388396][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.393052][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.406421][ T54] Bluetooth: hci2: command tx timeout [ 214.417524][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.428457][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.437668][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.444198][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 214.456445][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.468360][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.479155][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.490229][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.497490][T10336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.504620][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.512210][T10336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.552139][T10336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.578310][T10584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1749'. [ 214.690704][T10593] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1752'. [ 214.733072][T10336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.744992][T10336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.777359][T10336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.789178][ C1] eth0: bad gso: type: 1, size: 1408 [ 214.793072][T10336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.831951][T10585] lo speed is unknown, defaulting to 1000 [ 215.038146][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.058079][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.162268][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.189316][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.483935][ C1] eth0: bad gso: type: 1, size: 1408 [ 215.523122][T10617] Cannot find add_set index 0 as target [ 215.562193][T10585] chnl_net:caif_netlink_parms(): no params data found [ 215.662183][ C1] eth0: bad gso: type: 1, size: 1408 [ 215.751698][T10585] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.762497][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.786312][T10585] bridge_slave_0: entered allmulticast mode [ 215.797978][T10585] bridge_slave_0: entered promiscuous mode [ 215.855758][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.866263][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.875700][T10585] bridge_slave_1: entered allmulticast mode [ 215.884501][T10585] bridge_slave_1: entered promiscuous mode [ 216.062854][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.093943][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.239671][T10585] team0: Port device team_slave_0 added [ 216.278291][T10585] team0: Port device team_slave_1 added [ 216.331141][T10585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.343560][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.370485][T10585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.395628][T10653] SET target dimension over the limit! [ 216.403297][T10585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.425191][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.455720][T10585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.488217][ T30] INFO: task udevd:5244 blocked for more than 143 seconds. [ 216.497864][ T54] Bluetooth: hci2: command tx timeout [ 216.503413][ T30] Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 216.524537][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.547904][ T30] task:udevd state:D stack:21400 pid:5244 tgid:5244 ppid:1 flags:0x00004002 [ 216.558391][ T30] Call Trace: [ 216.566137][ T54] Bluetooth: hci4: command tx timeout [ 216.573305][ T30] [ 216.576347][ T30] __schedule+0x1800/0x4a60 [ 216.580899][ T30] ? __pfx___schedule+0x10/0x10 [ 216.631376][ T30] ? __blk_flush_plug+0x449/0x500 [ 216.654424][ T30] ? __pfx_lock_release+0x10/0x10 [ 216.685937][ T30] ? __asan_memset+0x23/0x50 [ 216.735965][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 216.756659][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.763075][ T30] ? schedule+0x90/0x320 [ 216.796193][ T30] schedule+0x14b/0x320 [ 216.800439][ T30] schedule_timeout+0x1be/0x310 [ 216.805313][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 216.814801][ T30] ? __pfx_process_timeout+0x10/0x10 [ 216.820413][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 216.826116][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 216.830747][ T30] ? validate_chain+0x11e/0x5900 [ 216.835691][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 216.840747][ T30] ? __lock_acquire+0x137a/0x2040 [ 216.845767][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 216.851895][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 216.857513][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 216.862572][ T30] ? sbitmap_get+0x289/0x3f0 [ 216.867232][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 216.873246][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 216.880875][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 216.888093][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 216.894884][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 216.901296][ T30] ? __pfx___might_resched+0x10/0x10 [ 216.907863][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 216.914486][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 216.919955][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 216.925063][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 216.930475][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 216.936392][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 216.942451][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 216.948241][ T30] __blk_flush_plug+0x420/0x500 [ 216.953131][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 216.958560][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 216.963698][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 216.971401][ T30] __submit_bio+0x422/0x560 [ 216.977166][ T30] ? __pfx___submit_bio+0x10/0x10 [ 216.982301][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 216.988755][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 216.995376][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 217.004100][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 217.010553][ T30] ? __pfx___might_resched+0x10/0x10 [ 217.015924][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 217.022136][ T30] block_read_full_folio+0x93b/0xcd0 [ 217.027765][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 217.033264][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 217.039637][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 217.044510][ T30] ? folio_add_lru+0x357/0xd70 [ 217.054431][ T30] ? folio_add_lru+0x58f/0xd70 [ 217.059535][ T30] filemap_read_folio+0x1a0/0x790 [ 217.064586][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 217.070295][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 217.075868][ T30] ? __filemap_get_folio+0x984/0xc10 [ 217.081386][ T30] do_read_cache_folio+0x134/0x820 [ 217.086649][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 217.092107][ T30] read_part_sector+0xb3/0x330 [ 217.098757][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 217.105302][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 217.110443][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 217.116115][ T30] ? snprintf+0xda/0x120 [ 217.120634][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 217.126562][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 217.131171][ T30] ? vsnprintf+0x184/0x1da0 [ 217.135673][ T30] ? __pfx_snprintf+0x10/0x10 [ 217.140499][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 217.145312][ T30] bdev_disk_changed+0x72c/0x13d0 [ 217.150475][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 217.156051][ T30] blkdev_get_whole+0x2d2/0x450 [ 217.160944][ T30] bdev_open+0x2d4/0xc60 [ 217.165208][ T30] blkdev_open+0x3e8/0x570 [ 217.169650][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 217.174662][ T30] do_dentry_open+0x970/0x1440 [ 217.179636][ T30] vfs_open+0x3e/0x330 [ 217.183730][ T30] path_openat+0x2b3e/0x3470 [ 217.188428][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 217.193819][ T30] ? __lock_acquire+0x137a/0x2040 [ 217.199103][ T30] ? __pfx_path_openat+0x10/0x10 [ 217.208159][ T30] do_filp_open+0x235/0x490 [ 217.212741][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 217.219126][ T30] ? _raw_spin_unlock+0x28/0x50 [ 217.223996][ T30] ? alloc_fd+0x5a1/0x640 [ 217.229652][ T30] do_sys_openat2+0x13e/0x1d0 [ 217.234374][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.239729][ T30] __x64_sys_openat+0x247/0x2a0 [ 217.244595][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 217.250605][ T30] ? do_syscall_64+0x100/0x230 [ 217.255389][ T30] ? do_syscall_64+0xb6/0x230 [ 217.260137][ T30] do_syscall_64+0xf3/0x230 [ 217.264649][ T30] ? clear_bhb_loop+0x35/0x90 [ 217.269623][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.275555][ T30] RIP: 0033:0x7fb3333169a4 [ 217.280499][ T30] RSP: 002b:00007fff2376e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.289320][ T30] RAX: ffffffffffffffda RBX: 0000564f88af7550 RCX: 00007fb3333169a4 [ 217.298268][ T30] RDX: 00000000000a0800 RSI: 0000564f88ae5290 RDI: 00000000ffffff9c [ 217.308885][ T30] RBP: 0000564f88ae5290 R08: 00000000ffffffff R09: 7fffffffffffffff [ 217.317867][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 217.325869][ T30] R13: 0000564f88ae3a70 R14: 0000000000000001 R15: 0000564f88ad2910 [ 217.333922][ T30] [ 217.342352][ T30] [ 217.342352][ T30] Showing all locks held in the system: [ 217.351344][ T30] 3 locks held by kworker/u8:0/11: [ 217.356612][ T30] #0: ffff88802a955148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 217.369565][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 217.383093][ T30] #2: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 217.392680][ T30] 3 locks held by kworker/1:0/25: [ 217.398233][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 217.414003][ T30] #1: ffffc900001f7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 217.436085][ T30] #2: ffff88807d613240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 217.456292][ T30] 1 lock held by khungtaskd/30: [ 217.461203][ T30] #0: ffffffff8e937660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 217.486392][ T30] 3 locks held by kworker/u8:7/1117: [ 217.491758][ T30] 3 locks held by kworker/0:2/1171: [ 217.512698][ T30] 2 locks held by getty/4986: [ 217.518774][ T30] #0: ffff88802b5370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 217.546302][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 217.567375][ T30] 3 locks held by udevd/5244: [ 217.572145][ T30] #0: ffff888020a934c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 217.603564][ T30] #1: ffff888020a08310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 217.616855][ T30] #2: ffff888020b70180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 217.626004][ T30] 3 locks held by kworker/0:7/5312: [ 217.631200][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 217.642251][ T30] #1: ffffc90003f5fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 217.653420][ T30] #2: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 217.662479][ T30] 2 locks held by kworker/1:12/5573: [ 217.669539][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 217.680901][ T30] #1: ffffc90009667d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 217.691464][ T30] 4 locks held by syz-executor/10336: [ 217.697070][ T30] #0: ffff8880738a0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 217.707141][ T30] #1: ffff8880738a0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 217.718618][ T30] #2: ffffffff8fdeb2a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 217.729110][ T30] #3: ffffffff8e93ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 217.741423][ T30] 2 locks held by syz-executor/10585: [ 217.747075][ T30] #0: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.756725][ T30] #1: ffffffff8e93ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 217.768827][ T30] 1 lock held by syz.1.1778/10665: [ 217.773940][ T30] #0: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.785740][ T30] 1 lock held by syz.3.1780/10667: [ 217.790971][ T30] #0: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.800577][ T30] [ 217.803006][ T30] ============================================= [ 217.803006][ T30] [ 217.811712][ T30] NMI backtrace for cpu 0 [ 217.816064][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 217.826237][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 217.836367][ T30] Call Trace: [ 217.839656][ T30] [ 217.842597][ T30] dump_stack_lvl+0x241/0x360 [ 217.847297][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.852516][ T30] ? __pfx__printk+0x10/0x10 [ 217.857119][ T30] ? vprintk_emit+0x631/0x770 [ 217.861912][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 217.866969][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 217.871944][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 217.877432][ T30] ? _printk+0xd5/0x120 [ 217.881676][ T30] ? __pfx__printk+0x10/0x10 [ 217.886263][ T30] ? __wake_up_klogd+0xcc/0x110 [ 217.891126][ T30] ? __pfx__printk+0x10/0x10 [ 217.895707][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 217.900723][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 217.906697][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 217.912675][ T30] watchdog+0xfee/0x1030 [ 217.916930][ T30] ? watchdog+0x1ea/0x1030 [ 217.921361][ T30] ? __pfx_watchdog+0x10/0x10 [ 217.926046][ T30] kthread+0x2f0/0x390 [ 217.930116][ T30] ? __pfx_watchdog+0x10/0x10 [ 217.934786][ T30] ? __pfx_kthread+0x10/0x10 [ 217.939367][ T30] ret_from_fork+0x4b/0x80 [ 217.943774][ T30] ? __pfx_kthread+0x10/0x10 [ 217.948369][ T30] ret_from_fork_asm+0x1a/0x30 [ 217.953159][ T30] [ 217.958569][ T30] Sending NMI from CPU 0 to CPUs 1: [ 217.963828][ C1] NMI backtrace for cpu 1 [ 217.963843][ C1] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 217.963863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 217.963873][ C1] Workqueue: bat_events batadv_nc_worker [ 217.963908][ C1] RIP: 0010:__rcu_read_lock+0x30/0xb0 [ 217.963929][ C1] Code: 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 4c 8b 3c 25 40 d7 03 00 49 81 c7 44 04 00 00 4c 89 fb 48 c1 eb 03 42 0f b6 04 33 <84> c0 75 35 41 8b 2f ff c5 42 0f b6 04 33 84 c0 75 3e 41 89 2f 42 [ 217.963944][ C1] RSP: 0018:ffffc900015d7b30 EFLAGS: 00000a03 [ 217.963958][ C1] RAX: 0000000000000000 RBX: 1ffff11002fe5808 RCX: ffff888017f2bc00 [ 217.963970][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ae720 RDI: ffffffff8c606920 [ 217.963982][ C1] RBP: ffff88802a73d478 R08: ffffffff90179d2f R09: 1ffffffff202f3a5 [ 217.963994][ C1] R10: dffffc0000000000 R11: fffffbfff202f3a6 R12: ffff888029f24cc0 [ 217.964006][ C1] R13: 000000000000028f R14: dffffc0000000000 R15: ffff888017f2c044 [ 217.964018][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 217.964033][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.964044][ C1] CR2: 00007fae11ac5408 CR3: 000000000e734000 CR4: 00000000003506f0 [ 217.964058][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.964068][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.964079][ C1] Call Trace: [ 217.964086][ C1] [ 217.964092][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 217.964115][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 217.964139][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 217.964160][ C1] ? nmi_handle+0x2a/0x5a0 [ 217.964184][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 217.964204][ C1] ? nmi_handle+0x14f/0x5a0 [ 217.964220][ C1] ? nmi_handle+0x2a/0x5a0 [ 217.964236][ C1] ? __rcu_read_lock+0x30/0xb0 [ 217.964254][ C1] ? default_do_nmi+0x63/0x160 [ 217.964276][ C1] ? exc_nmi+0x123/0x1f0 [ 217.964297][ C1] ? end_repeat_nmi+0xf/0x53 [ 217.964325][ C1] ? __rcu_read_lock+0x30/0xb0 [ 217.964343][ C1] ? __rcu_read_lock+0x30/0xb0 [ 217.964361][ C1] ? __rcu_read_lock+0x30/0xb0 [ 217.964379][ C1] [ 217.964384][ C1] [ 217.964391][ C1] batadv_nc_worker+0xc4/0x610 [ 217.964414][ C1] ? batadv_nc_worker+0xcb/0x610 [ 217.964439][ C1] ? process_scheduled_works+0x945/0x1830 [ 217.964460][ C1] process_scheduled_works+0xa2c/0x1830 [ 217.964496][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.964522][ C1] ? assign_work+0x364/0x3d0 [ 217.964545][ C1] worker_thread+0x86d/0xd40 [ 217.964570][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 217.964589][ C1] ? __kthread_parkme+0x169/0x1d0 [ 217.964612][ C1] ? __pfx_worker_thread+0x10/0x10 [ 217.964633][ C1] kthread+0x2f0/0x390 [ 217.964647][ C1] ? __pfx_worker_thread+0x10/0x10 [ 217.964668][ C1] ? __pfx_kthread+0x10/0x10 [ 217.964682][ C1] ret_from_fork+0x4b/0x80 [ 217.964703][ C1] ? __pfx_kthread+0x10/0x10 [ 217.964717][ C1] ret_from_fork_asm+0x1a/0x30 [ 217.964747][ C1] [ 218.356105][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 218.363055][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 218.373247][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 218.383416][ T30] Call Trace: [ 218.386696][ T30] [ 218.389621][ T30] dump_stack_lvl+0x241/0x360 [ 218.394298][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.399490][ T30] ? __pfx__printk+0x10/0x10 [ 218.404091][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.410078][ T30] ? vscnprintf+0x5d/0x90 [ 218.414407][ T30] panic+0x349/0x860 [ 218.418316][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 218.424471][ T30] ? __pfx_panic+0x10/0x10 [ 218.428877][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 218.434250][ T30] ? __irq_work_queue_local+0x137/0x410 [ 218.439800][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 218.445166][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 218.451318][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 218.457552][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 218.463700][ T30] watchdog+0x102d/0x1030 [ 218.468031][ T30] ? watchdog+0x1ea/0x1030 [ 218.472478][ T30] ? __pfx_watchdog+0x10/0x10 [ 218.477171][ T30] kthread+0x2f0/0x390 [ 218.481244][ T30] ? __pfx_watchdog+0x10/0x10 [ 218.485924][ T30] ? __pfx_kthread+0x10/0x10 [ 218.490503][ T30] ret_from_fork+0x4b/0x80 [ 218.494912][ T30] ? __pfx_kthread+0x10/0x10 [ 218.499491][ T30] ret_from_fork_asm+0x1a/0x30 [ 218.504262][ T30] [ 218.507376][ T30] Kernel Offset: disabled [ 218.511781][ T30] Rebooting in 86400 seconds..