last executing test programs: 1.555095348s ago: executing program 4 (id=4096): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"39da3cf7d447b2919a1d7af4e7b8c6d9", 0x0, 0x0, {}, {0xfff}, 0x0, [0xad3e, 0x0, 0x0, 0x7, 0x80, 0x0, 0x2, 0x6c5bfa90, 0x6, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x36]}) sendmmsg(r2, &(0x7f0000000180), 0x400000000000354, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"39da3cf7d447b2919a1d7af4e7b8c6d9", 0x0, 0x0, {}, {0xfff}, 0x0, [0xad3e, 0x0, 0x0, 0x7, 0x80, 0x0, 0x2, 0x6c5bfa90, 0x6, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x36]}) (async) sendmmsg(r2, &(0x7f0000000180), 0x400000000000354, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) 1.414247231s ago: executing program 2 (id=4099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast, @device_a, @random="ceac58a4edf5"}, 0x0, @val={0x8c, 0x18, {0x0, "6affad068c8e", @long="c6185f352c1f16b87d6ea3c5a1206375"}}}}]}, 0x4c}}, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) (async) write$bt_hci(r4, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x6) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 1.264537849s ago: executing program 1 (id=4100): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0xa, 0x0, 0x4, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x50}}, 0x0) 1.179247514s ago: executing program 4 (id=4101): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063012700000000009500000000000800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x4000004) 1.17862931s ago: executing program 3 (id=4102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f41c86dd0700f00000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000ff930000000001"], 0xffe) 1.120720701s ago: executing program 0 (id=4034): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4040}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000ff003b0c0000fbd0", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028006000f00000000000400120006001000000000000600110000000000"], 0x50}}, 0x0) 1.093163169s ago: executing program 1 (id=4103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [{0x8, 0xb, 0x37}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x10000000}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x8}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000028000000000002907800000000ffffffff11009078e0000002000100010000000000000000a1f8280d32763491c072aa0615f470803c14e82b62d8651b56f5262d4784eaee1b3bf883ac95bfc4f277f4d2fccd87ce4e1e6664b7347d0f7b8dd298ba39dc5859edfaed39c1dd55d3ab9d7788a23f4d56a8b24a69185a57"], 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f00000002c0)="9ac57c85775cb6326601cb42df723acf31e4de4155602f7e30e2ce80d6705515e70da4e7505c23def856b869c595a490a8ad187e51565466ecb327ca5db6cfcc1e3058d013cbdf4d7d694b0cc85900ad23c8294a5245c8000b5795a9beac5d35daf49203f2ac7ad719dfc4f1dbb6abcdfdee6fde8c98104b0327e209b47d0e75313ced2411b6c1732dff87b7f8a07543e43016ba3439c18d43e8b0897628972c6befd7e8ed1bce919842dc24d7b7ca7d24ff3f0a0b20d907098ae9769d5dd2b52b071ef9d3983f02db6f87192562e8f2ee8d", 0xd2}, {&(0x7f00000003c0)="3fdeab0eb6fcea925daac64eae2cfe6c612132754f27344c90fa26d8d4d031a6162dff09c9af400e116e0cb1f01da8b70cf12fb72e97f4ec219fb7b26df8bb28a062b334635da65aed16b847ecfcbc01fa3d0501ada506308e8cc9a005a931bd338a90ba7076e03c0c5eaf9fc01ad6bd2b56dbb8eb01f87f725f501da16ae8b93ffaf862d98a0d8a1c86e19243a11218bd2016ed3b0ab738c114d3e0c075ab903f00be5f3df80d6ac433a56b6b47fbf7149615beb1f7fb449d2f5b961ff8d983e05c9fe6fbb64b77029039ae9c5df270d4ad8886e06dc49319eb86ba32", 0xdd}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket(0x2c, 0x4, 0xfffffe65) 1.043246216s ago: executing program 2 (id=4104): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x80ff}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_type={0x1}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x1, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x0, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xd0}}, 0x0) 1.007535687s ago: executing program 2 (id=4105): socket(0x8, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x44}}, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/42, 0x2a}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001aa3058cba5bfd22683ab9532042ee17359a376f2d2277e44d1b68c49eb1acf6b4a8e34bdcbd99633c", @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100002000118014000400040005000400010014000300040003000400060004000200"], 0x48}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=r4, @ANYBLOB="010000000000ffdbdf25230000000c00018008000100", @ANYBLOB="14e003244371f693cbf0c3a6ee6c3022d7a3ae45cf56fb9df382c3961bcca0fc0b6b466698695e3e6d51afa521060572535c6e1cb08bd6360772fc0eab4a108731f27aa351e4fe3a43fe1d83976a737260db440e3857aaa219527888c08403a0deb9ccd026bd0a00286713850b81f6132538698e9d88fe2c21b28e559bd3b648464ff88413c47633d01454198c76831a47408b6944a923013e3e182eec4958576dff3aba6b2720a159c1fe63fe1a616307acc63c8669bfdf55bd26af032213ece03cf87d2abcb3168d93a2d8e036ebecee6f632c4c240e516858e0964864f9c36e68"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r11 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000200000000000014001263766c616e000400028008000500673c4198bbdecf8a15b612a11201c4a57f7a9ce5b73ea1d8abd954401484c0e2f8eceef65d38bb78d03dbc994bf7f9c7d5313c3db89318f850b7eebc8f98476bf7f57dfac8c2844059a0bf057c4475ebb3c9501f1a918ec7b9be3b2f269978ff1008072ec739334a000000000000000000", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) 1.003293441s ago: executing program 4 (id=4106): pipe(0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x12) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001010000004000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018300000d700000000000000000000001841000007000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000182a0000", @ANYRES32, @ANYBLOB="00000000010000001800000000e0000000000000070008001838000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000042bac0ff04000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@bridge_getneigh={0x20, 0x1e, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvfrom$llc(r2, &(0x7f0000000340)=""/136, 0x88, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000100)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000700000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) 935.152072ms ago: executing program 0 (id=4107): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0) 858.128228ms ago: executing program 1 (id=4108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x4000000000000) 857.510644ms ago: executing program 3 (id=4109): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000090000000000000000060a0b04000000000000000002000000100004800c000180080001006c6f67000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aff37988d98"], 0x64}}, 0x0) 750.79024ms ago: executing program 4 (id=4110): sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000000000080000000000200000000000008000900ac141400"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x4, 0x3, 0x1, 0x2, 0x6]}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmmsg$inet(r7, &(0x7f0000007840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="738700000000000000000100000008000100000000000c0006000000000001"], 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r11], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 694.589718ms ago: executing program 2 (id=4111): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x3c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r2, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x54}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10801013}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0xc0, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x58, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xf9, 0x4, @device_b, 0x9f, @value=@device_b, 0xd, 0xbf, @device_b, 0x6}}, @chsw_timing={0x68, 0x4, {0x81, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}, @channel_switch={0x25, 0x3, {0x1, 0xc, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0x7, 0x6, @device_a, 0x1ff, 0xdc, 0x80}}, @challenge={0x10, 0x1, 0x4b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x31, 0xfc, "10f94ee1068148a407a11fcb96111525add849f152dcbabbc6f76c3e9ee50d70c3c6b7886b88260ace1d0ca700"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4b}]]}, 0xc0}}, 0x40) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0x34, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x7, 0x2, 0x8, 0x9, 0x1000}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000780)={r6, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffff8, 0x7, 0x3ff, 0x900, 0xffffffffffffffff, 0x8, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0xe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000020000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000001850000000e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRESHEX=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) 669.26647ms ago: executing program 3 (id=4112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 654.564535ms ago: executing program 0 (id=4113): socket$inet(0x2, 0x3, 0x4) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0xa, 0x0, 0x4, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x50}}, 0x0) 607.046178ms ago: executing program 1 (id=4114): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x15, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="24002d8005000100000000000500040000000000080002"], 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r5, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) sendmmsg(r5, &(0x7f000001f500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="70bc38dda3f211707db8775623be0f497764cde1d08b17e11025d30e39fee504ff5a17091f9f79d1c294af0535ec2929e7c0450dd680d48b3198ae0882d0329e90f5ed2401b6309debf35f05c1cdf740aac038506f6d966f2acb61f8558cd8c4", 0x60}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000001e080)}}], 0x4, 0x0) recvfrom$inet6(r5, &(0x7f0000000040)=""/11, 0xb, 0x100, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 482.142287ms ago: executing program 2 (id=4115): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xff80}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_type={0x1}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x1, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x0, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xd0}}, 0x0) 473.235217ms ago: executing program 0 (id=4116): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063012700000000009500000000000800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x4000004) 418.994364ms ago: executing program 4 (id=4117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1800000076000907000000000000000007020200f80b708d22834f7eb535f9e7e948396df783e8f33d5032321abd84386a5ed2f15058c4f6b9b769b50ad8faa70fb30bd4e232f5a120c86b32ba3d5d4e3aa40500000068ec7c3cf73e3dd0637fc849fe5f73cc9f6e390f9e8734001b51c91b21b0b0cba43193f74f9a76898024f1af413e3e402654bcadcf9af83f52793b06a90253da45d6b5b896faf0eced83ba0eccddeea38958df88eb", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000a40)="63d719522ba00183ec370649c931f93760f1e666a84b2480471c4ba34f41bb74a766ec3cd3ff36fdeb54ebd1ad58d03607fa1aa399a143be1ccd298cdd6ff1accaf2577b724f9110c7ebcbb1232152d5eebfafca9b1d1b301abd8032d12e826ba59b453ee90488f7cf0914394387a8e1dc47d9d92bcda1d25aac2aff2c8d7e8ee1c41f4788293ae69b7a29505071f9226730fa541946c850ee79fc57444dab17ec3cb12ff3de4920843a514f8a6b98282837966232f38ef7a3af7a26ba", &(0x7f0000000b00)=""/242, &(0x7f0000000c00)="73f9ddf78f5d3ad4933d69cdc49b3917c9ec6dd025b664732b31045f1bb8f70b463c087512724b578daf0596915baa3f327ed693368ba6b6928d86ff7ad599091d01fd74a050288826ed6bcd4f16fbff89b72e3e9336362aa426d5ae8bae8a461055f84105f6151a3803cb292569cc3d3623a2a3fdfc1d3aff1a19edb1edf3d155e0a6cafe9c5fc1f3", &(0x7f0000000cc0)="d00a202d82e01adf07f38cff3c7e95179ed439b5f243e6b27980f855868d248f39899b8abbf5d9d7483cb816e6c649565c19d0e637ebdd991c1ac71f8f6956da84ca1b4a947ced0ee2e3dd68bd5f549cc743bf26f547d1bacb6eae142f6724cdde786e48e6b661ee1a57f0e8f86afcab0cfdd9e44c185f07efcf1698bbfd73809d1dd91819d3d59cddbe0475a5b52148cbe70c0d934ac0f4cd3a464153f059373a4025a797e6ce44b3dcd5a7ea129ec369643414ee12a9ae92625b85dbeb3f251a0e1e5f41", 0x3}, 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="300029bd7000fedbdf255300000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r5, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0) getsockopt$rose(r2, 0x104, 0x6, 0x0, &(0x7f00000002c0)) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 417.158759ms ago: executing program 3 (id=4118): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000001000000030006000000000002"], 0x50}}, 0x0) 339.062936ms ago: executing program 2 (id=4119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f41c86dd0700f00000004000000060ec97000fc83a00fe8000000000000000000000000000aaff0200000000000000ffa00000000001"], 0xffe) 283.553037ms ago: executing program 0 (id=4120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4400c001}, 0x91) socket$netlink(0x10, 0x3, 0x12) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e1e, @broadcast}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb7, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r5, 0x1) socket(0x0, 0x80000, 0x35) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x20000800, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000000)=0x3, 0x4) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x40008002, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) socket$inet6(0xa, 0x2, 0x0) 226.725752ms ago: executing program 3 (id=4121): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1410, 0x508, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040050) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x7, 0x1, 0x80000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='host1x_syncpt_wait_check\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "75292a3be77c3cc2", "b8a07b5b95d0f133853c6cb72ac93ba4", "55e25980", "2d63ffdbce12b9c9"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000400)) sendmmsg$alg(r1, &(0x7f0000004d40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="8ccd0daf605b59e3dfe04bfcf3c43ff91b081646a7b1e299fe53e04033768e7a2ddfb576b2146646e827d4d8aa90190f1eb3e99185f702ae3b08d3929c99798d59ddcc9535b0ebaa18c95073943d2b00afadc4dd9352cfabd71726e8a3561d7e548f65eb492095f0667e2085f13cc21e5619e446223dcd46718c9b40afb95834605240c4eb2cfdfbc32eaa5a28776c28b21f8b9157644611a6f68a528f8bbb9baf731ca491b5cd13ff54a55751fbe901b9400646bc6884019e7c79c7a4d96adee21ade9d01997eb7174f5132169f388527a1ab9a7d40869f1befff5dc225a7a6fd63add82e582bf369e8f3ca7236da6fcabc666c", 0xf4}, {&(0x7f0000000540)}, {&(0x7f0000000580)="afe44c615954a35ecd6c21dea2b36e073c647ef83b5bb94d866fb4a213", 0x1d}], 0x3, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x3ff}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x1018, 0x117, 0x2, 0x1000, "e1583ca15d3ab547ee2d7b138f134b59333de2bac1db5b0695d049892bd2b5c0483975b5b103ddfb1c4ba86519c917900fc77483f9f22a65e30a8b74b78eafc3ce5ef0a3a6de1f445f7da9bac150bba84883ea68f81470ae61b47a28a450b0e86c08fefa555843eb52f5ae1bcba9f88478af900610717823b2424b67a9c98ff1508b50cea0f317bbd0e916de66d3cb178d541844b357998cd40e247768ebf9150d9f44f5f049b780e9e128bec6dc6e84a6108988fdc581c793c580bffcbbe2688ddf036bc6ee453b77cb8d98528607e49d0acc872b7751898eb10e5309fd626c01a4d06dfad7837edf454aa9e4ee92c026a8b8c013c92c8f3f8af326df6c4f06e52f3c3de11f66753e78aa0ff138c32495aa9dae155e7c4ac47cc02326c06dbc112f2f11f5ef26dddb1083af3600dbacee97f11e4fa68faa08ccac04bffca8f7dc0bbb39c2f20e337b29b23c56508c02a30e926632200cfefad62fbe210739e27c212e7a8208322398f23a712a528cb8bcfea59773e2b220b8e82b5f0676c2c2d4eb44ce32112026e78fd69e3654a1a717382fa6ec1e47a720bb3336745639493712465406d1adb2701b316245af5d85b04e4efd4e25aa0ac0aecc54bbc19f9c2f013900f52578a053251de5050d62d9f3df6e8e27619eb9571c5d426666865c89f55bc8712d31918fd56e76d70a9cdee5c949aad8d9b99d5c7d47e3279b05e21259bf57f998f0cd3bda0833ac7e873e0543f262e4871dc92317a7023ae5a2ab18601dd488842939b1316bddb629918b6bf57b916a499385ab47316252ea6fe3e95215ea59aa60dd3178804e1720be9651c40a811fe84802b0261b0f30682d6d5be0afefa1e767fb2b76e9bfd16c606d1f5fdcef56de0fc7f3e17b6543df13d4f232b4579b51decf6c614e44281d06d189496e3dc15c76033072038d2ce5186f0508dcd5850b63a724ca76f48630ff82cd227b3e68767f0e67ea43d5b2f598c98eae48a4569110fcff6fc998fdb446174cc0074a716d482ae39e8cc6ae94feb26543ae0e823f1d6fa26dfbc316317d13b1a2390e1f0ab905a0b34cd761d01fa97e29be39f39059a27f853b0ec0951facf39be1bc1d7a608493bb9904ee8fe7151d09aeb8502ac39595b0affa8942c940b6e4e8494cd90eb8ebbf8474db199592303c637668eec772caf5f01551e5ab968ba11329b3863a9f67249f5fbb6626a4c68e01eba1855d867b5b360d48f48dc318f88ec54e1e322c77ec990f7f3f28729c4f70d1df7cbcebd87791b2661f8c016ce35003fd2afce69b18650d40d115e2dd45823130cf90f22de3af5adeb8e8bc7d976e0ef5910a5e7d548897fcbf127ba3fb9cfd479b9a1800a15c6d283fae55c83446bc8708b2c9e52bcecf0ec0761b03908e395c92942fbab93dc21b4f3b16eb94ea9b2dcae73d2ad6a4701a4f7bb425f7f640e0ccbd2a21d1159186be56cff7cd270c5e9d9a1a504cd9f6cf5f324ead2d9cd7e1951bb3a9b0a09f125069daf48b97d619efe31ab1f2f316600f9e533612ac5a767d6a9d8d59355c7f77f87a5c79e63b4f228b24ef12d918b156c7bdef4bf90cc2a354757a6f574bde42a52ce7b8f0e673be4f819e235d71f3eb9fa52335cd164a7757e35de3ca503910cb946818e1db1a7201673209d9e49dd502755482ceaaad5d072d5f1c677d2eff6766a6e8c6a21978d2411949f2e0c20c26439c2d8710f65d8d35d567135a035d2c32db7febf3dc56638ef97c07a04d3b14a0877c8be10d65d71e2b336ff7ec1592006472cd4f96d396c5a2be4769a733be411ec86970a690710c08a0ca2ba019d248d6a0355fb75fdb251564a6c8871f88e57e40727d9e6f9a9a891ae5d7ab15777e0eb5780e4429c0ff5235774f341103ce1ea39a1a15365e8688adb60948dd234ff57020cb6530830a51da31972d9e2076a41ab2d9cba9c40ba92b2099aed003bb59d10717872227e731147346dbc557c235967041113653e5324e1de6b3bd2b55890c7f19ef583043a3e258a569cea3fbd0cb8f4ac9e2e5cc5c231f2ac9486b8e1767ab8130e8fd6f52fe7c22e455a32df4a8d4682777ff4d9c4f573bd44fcf3e3c2af2d52f288904226e77939a2ccfc9824c51ca7098413b058b2e6dbfd93c8084d77f880c094c73379041b0c802f76f45e7a3fd1f27c5c4a8511826218ff03cd88dd65f01b0efef609137c6ebb2957644739e7cfb5178dbc771d2cf0736745119c4fcf98550397fc558e9f39721307a0f9defd4a1d8597ab88ff8929f7027ef62083ec7e4fc74895c2c1dd059c3924846ecb00098225ba4db676cb856846e1844cb27117766c315588321f0f8e11fb0e8f6a8e8aca3d6d198d2b38697449f4c4ecd6c8a30f55105d726647ef5511061673666f59659f5bd9cd83fd71d6249ff74b606df6c5506d5df353bd08191065bd910746d25845d77deaa4a5a6589818ae6e58e472676f99d70f9c04a2673f5f37409413c4d870ce7e8ecbfb0a465c137e263276c3d72007444df6fcc43c14e900352822de61437ab8f9e0e6faf30689e580c89bd75f268de0d9b32db3248d28d695f9ecdbd8fe6c45774ec3b2318e570f530677bd35edf7258ce11200a1cd6fccda4a50a5e5d6e64b3344fd608292195ecdced86a7379efc3800f8a0c65eb146b7cc78e55856097d292758bdea2b0c69e97c4b676073487009822ff4d7de69ec58b648c58012004d2f3d5acc056f602d666104ed126da229070f21e7979a13beefe8e782c18f7bd9b28e2fac5c18a106d18802cb261a644698ce706c763ed9ed1a2790d2883061b000ffcfe9a1844c5f2ce127fc904d6c8e8b52f0251fbd4bb7205626a07e7a5c2beb8edf730851c97ffff32330947dcaafc94192297f4761910271adf14e223e5c97640a3914ae5066f8aed4b215e3838aaa0bc1f2c4525e5d462c74b135743f042d65d6062b02860eb85c35cdf646940833ce088668f3e167bd47fad7141499e5fd863cd1f9479c5ad34d2db213abd1a5f5f4e418d90099677d90da0dad6dfc464e51271a30b79a8ad48d2c7a964745690e61ee43707fa150dd88f946b9d94f0fe2db52372a4c3082b055afcd15b991c5a51930f1ee36ea6fcb5535a6c66ce85bb8ffa2c057bf8975c72eb0cc7f3618d806cf5e8870ef61e7f282899aee81be40ad0486c6f1e4561db8413808384c46b93322efc7cac0353556d5c9d49f671e05603fd8886abf0999858de15695cf7f3351500cd5c419b331b566e9ba8a8a3b67880818b08bc847d64809511a4655f81e92d3358cca1a0a29766d1cf937725b6234f465267b46dd4442d5749b282e12affdeeb0fc7a20f5fb18f9988354022e7cf5f27facec292ac4cbe4b338491488dec46d527f9348d8a0ad567a13c64b57604403639449419ef174074e4fff154b0ae1802c5a62034404ea725ae9097c0c9ddefa9d115b55f097804403cca5994ba7def4fc5d530148fd27565f0e2b841e45faf5f0391a10ccd74bb8dbdddd6468205bb1a0681f090540423f13082288b342ff5e8c48b47c584b643eeaea0e37f1c8c3ddf95ea55ad1afd30007b91a399a76f68deff5372aee9b965ac2dc424190261482266f227d7df9826d0fa2e610a831c181fd69ee661f85bab8320fd4efd1d435f8758fee64b561fdd8dcd94ba805f81d61bdd611177a360a9e69ad46a401e7b4251985e3c7fdfe9b6875f2158459fe3edd61b84e439ff5ef3b2a2d011eb2f7bd881bfef44dbb2d3679d6015b88702042cfa6672ee3aed14e810890f64ad5016c05f628e6a89fe51ee9b883c43e19796fb886575ce912fc601f40502f9d853f6be68105053dbdadde7b1b17e13e7f482e1bc5f5a4f05b1c4b540873bafc2a1339df0dc939b477496725c5884adaaab77183ccd01fb993dace6ebaa95068f2c1a3eda2fcc856cd35d35e85a3c35d46d4a3151523aad5dd810483ce1d73acfe3f8f277fdd2c219ab9f1cc0089492a9d4925b6437e2eacf3442832398ed8fee9af00200a6d58504e120743522091922f7ed9bcbf667345826da336e015269161391b0d298897464dd00cd473091465a961268cad8444ed61838b7cbf0ac194b8ab4e4bb326d10274555bd8f5b4b83d853b00d638a7c63b23033787931d5753a603f3785b7082380d253e6b7a400352ac0af5d22c716ec4ede2ba9284e0b1d6ee17671fb5007752e52af6f9a394535d1a7b31ea936d2e3001889291b3642c691c43b5819a593e7d900972c667cfbe115d6f169d73570bd8a5eb51b675c49e95e48c379edd2fd364bd7d4c2957c4265c05d0bc40fffd52b9ed4d7ad72a2a3d0e0425c8a0726824f2d304d86492f9a291f1f93580619aedf8f9e572cca9deedb24af9fac61f628834ed35843b3b5b168c40e90e8c69bee9b19bb250f12e6157835af35cd21a64c144f4556eabeffa4ec00758c70a0261b385e2e32bcfb1b54ba58bbde34dfcd002c2e7e3f09b1fa51b6ac6792d4bb4a28cf1872f0d8ee8c9a48911bb337665260b7b9d21db1361dec55d4bc365b04f6c88fd6f18c4a818c1e40439602f0f570f396cc2884b30849a650bd42cf5c9d803441747d4662027a4b30655d7034de887bbe95d380168930fed9c8a5f135ce8c93ced4edf8a7b565e199313c9740cc55affabbdc3d409393903b70e5344bef53919e5601e9d8c7a8762ab9b70b73d45053a0f66cbc995ef0b68bc5732408e951759800f1e59e0d74cf6cca52bd842499b4e6542600b3755f3b89869bc7cc7963f1b1b0fbba33fe58bc4084ee3d7b0893215b6e66f10d695f2be9e57fe0871f5c53a9fc6f9d93cc863a74c00978046e82f834d3fd3af2c58fadfe8eeb17426cb2b7cf5070f162929f8a4051ac69a37b80df2da038f7260af795cd307ea77f2ddd96b8ee94157bc28876f269667d18f39e6b3d5cd7cec38b12d278e665feddd949cfd9aef4e050b3b452f1db72377a9efaa06b96da3ad5bd5dfe1394156ae3bf4afc3dfed94bf9585ea6293a07dd76ecd6b024a138c4b05bb59b0c59e099ba07e341eec8d785559eaea10f2cf7673fabf6d8bfe1056174021cee57c27cd5b4bab74353c98f95d7dfa1b7585000db3dbe7d494ea8981e4c0af965e533bbbc84b9a5573f350941680fcf3899d25a15a59f669a3d9995be5fb030be7c9d90a24d7aedbeb020460463b01d301c2c4209e7bda1ab70da49e5d6b366af498463517e2e0d5287c32b19f590b46ac2ae1e97794885460692b8b4b51854084e4ee285304f6a2be8e8d5481a1c107fdb7c763bc92579e1e60e357ec47b77648777f5d71d4f0ec6c95b9f94b9eedfcd2b24c4aace9ad965ee47ee0e924b057b0f597e46e2c4b7c9b8de87a3196257968f2f575cc1362002b6100c9a821734b47ae57052e27da55687262d83463c7a05ee926cd18f2b0b8a0e174d9a9d9f34ff6e51ec53f4bfd0384d3d376763ee5d5d43a542a1a44d3665e92759a62f18ce7b8ffe413699ca424c2e2ca14fc3b1fc92a711cb0c88ea6990031b7259d50ba00ab98f06a5f5092104f03f737e85f8265b7833a91486adce8eb52cecdf63547698f58f404ae3492349ac62cfd7f35b82c3799c31e78617d2e3b6bdd3ee9f44dc4df16e75db10ed3a4706f25cfcb30dc4948d2c8c6d9dd360b58a4fd9d2b179380a554b6cfd5b257913ee459bd93b4aa5ec3480e00a459037339ac686925a399cde5c164c0707814298c66f3940a121c555ccabc311b27393e569f1d5bdbe010824d70dd6c68a9edce8e14a25885d0a9e372de152894670d8d2a36ee4f"}, @assoc={0x18, 0x117, 0x4, 0x8001}], 0x1060, 0x1}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001680)="1f236cad08966e2ef503bdf17680d24b1dc60e159002660ff396464c27342fe8dcee7b587dbc813707a76ed56f151ab795cf8ec87ab85147c2c5858eaa0c7e883bcbf27a0e63641ebd1e0e5f5a0f780a2d67e1de5095dcf3df1125834b2c4bf151bcef9066a8e09609271e244810be2ecb167f73558c6a12b7f1228cfff3bfe6e8d66104b742b7a777767d09cb0acace3cc41322dded9d87b8220d5d0544d92cea94426a74554bafcd0f9fe283b729c91f9ff7097d26e2842f2bef6b5e08c231e946f8c6abdc54f9cc7493b7f23ee68f52a0394bf20f3612c9f7cce4f39efc9de70d3914", 0xe4}, {&(0x7f0000001780)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f00000027c0)="efda4ced6b4c1d2565a42e083607e235be07ca41813e0773aba130ef05b0fd225ff80c9c28c33810dd23d3dd0e61dbf801eadb4635cc6430ba2f32703128d7b81ed362c493a962b791c5da2c92f952a491cee6bf3d7cfc0487e5e77efb48bc934f416abb699d6f7124d800fadc10e9274ec2241199abef34780fa4f1047339d6e721c635de9ec15cb7a956c1c0fe59cd32c5ea33180379c4a16baad3276dbcc1619447919916589b5ee4095794c70b460fecf683c7644522aa2d7d92cd708f995b2bb996489ab6cfb22aa0bda0766e67fb0842919492a776445572d5e8160d4ff752fc9cd1b5eb2b6139e35b3216537b288e88a9c3dadddbb4bb647bc35f9ae97f2c1e016a5fe9cef4f56456dc9c2a23848208270b635210767d10d552fb43a6bc764094904ea816d7602a37f82a94d5c60d2109d809325ec1fec9094c873bbd47359bbf2203cdabd2e9ca36b0d128f7977c05bdc3e7f7da9f008b0d8aa0c7f14fa13b28da0c125d04f2d9d985fd71883d19862befbaac589a187f9d672d2012ab04fc1181260356f6718ea1880683e6b9814c72fa0c5ce908d7735807a7d2ebae9ad8381ed3e06f007daee67c10e1a43f2ef70222a73027ac4600ce63ee07c6a69e26691192ee4b029a34e9152678da84a7332a7e9ff2f919840fdc78ca37a8301cc1429101727bbde93bb49f29db6ff827eacecf6f40b4e15992a784ac0b0f8100e7e46f12ebca7a4d8d7afe5381ccec8ac754a023899cd693dfbb25f79601595b1f7738b4728c5b301704c515458656442530250c090c7ab1f8a49962e348fff2effc8b048f43aa8778256876514bc37f6c560f814924a4b44a6e236ef317d2e36a7009e10c5d7fcd09c2146cd686f819e3bd67e180beff34e2df8a8320d1804ab6afee27ca897b6df68eff422522fd874b31dee556bd8629e2bfca60bea2ba1c45e01b5cc4edafe3040552594c63ba955916b41bd76855e8fba92f38a431e6aae9619f921854ffac40dddf4c155589caafbf1501c7675ba78b385c4efc5ffb4bdd11c940fcaaa26f45d0dbd2986a6d1a4fda450ac614e667bd63215cea3d043fb883e4270a9f98eab0266f90f31afc7883ae49b53495f7f7df5aeb8eecddf8a52010ee56f23cc676518032945e91099cecb409df2ab7e1cd05001ad2653cd853e0f7e511376b465e0c2abbeddd0bd7879cb3d668df43ff0e023c840360d178e180d7b6f94f3e19080b260a4d91779ada0b75d45cf283db8fa35cbd581393fc38ae740b0ff7571e296cda091e59e7dea2538fb821868b88457742153a006d5898466d35ab9029a650609291f257561ebfd909c7133763ed3bf08fa61a4a9b05f6bd3322c678db5a2fc281a7a1c1e24b6cd5d81b4ceab36d7e4aa80aff5fc15a85dc30e61858bed8e949133fe035b6e048bdd71e252a048215c84c77adbe470446536ead257ac791944e397303012a6bfc41db2b144fb6e599b81315765799b822e295413701372f2be0f481636871842bd09fafe14f0cc0d653c94a693c8fadcbde7db57c5be7a01d82a529f6415d63c321b06626c519c4d80691d7c6fc5f0cbe6b0bc5c13259908d89018f05d04c5b3f3520fb409526d1f9c4301da14eebd3b952442946e84db4f294687102df6ad72268d480151c720816ce063ced6758d9ce9ede9347653113006ae0b86786c4ecc5ef56ef7ed035ddf0bf8300840a2a3a8830e3ead470b631f7fe05fc7da043b5e9b42414a28477103c0e4c05c872412c021cc400e6d66621630c49eb2f225c48a5b7ba163cd5dee8baa91373fd82efd22628d934e212dae7861b1aa6c31078dc5d5c0789858dcfaf8d3e7d721834e7d4545de16d44694e63267698602bcce06368e2f796089f5cdfbb643d437dc364bd613d99dfab8bf27c06a62e9ce2d3a9aafda524887b91414f5d80a3021433469c1c4706d871c55e0375ff7521cae1f9d7906cb5c0f9572a5070e7748f7ce2c8f27c4f2476ee7c5b9d2379f6c47c325887bf6d5c2454fdca1bbaf2ae3ad63fb8bdb81a4ee5b88062d1154189f31af93edf76827446738a6540163cefe41938fea56c9ca64f3ebcea3de917cad192fca40446fe0440dd584b46d453bb5e0f119d7c635dc0330cfaa2a07c17186a5eaf51e47f91d4e686725eab99a62284eb9d7af58f13ec66a7657c2f484d3a06cb54a1afab2ff0ed6c460015d816c234f15f156f99907ece0160e8ff720fe61e33fa7f54aa2d782e57f7d6cdadce8097bfed26664099c80feec6774628cfa31d7833a3ac7a395cbe0ab00d0845521edc5a2ad7effd6b524a024322d69d97f4a6033f9e42def7721a2727abf7bc8814eb79639a1bb926aeedc2318656316569d7f8ee67f4c21bff06c6fa3d31f1ecc45f000ce023663d23d97f3c9ee89d5f1ba47c33a37bdf698174abd1453ad7a71950ef7905fd4b81473679cc1bf2c918ccf4b466943ddb8c98e6e4658ee30119356b207ecf5e568a284b292b0c3eda3dc4be3d79e8c0e438ded5507f03b96f825405d2b7891f825e251c4bb7855f167a5f890aaf893fe5e5026b36dc436defcc4dbe10f58f2ae08f1ac45d2377f713dd1240d53414ff24bda521537871240dbe15ae90752681706e2d5e04bd183adaf7bab0ba1c35cc1dfab005e5cdae32ef3c42a1a06706cad5546d3ed1e497942360f9e1ecd306354b05f4d7d7d2f3b0151a090cdaeb13f39fbf64b684768ad26e54e83fb859c702feb1bcb68c1f1041ba6ea8e69a5dabc9315cfbaa92b97743d82089a733aab6dec88ac59f6ac08bfb68416130d8c3d0bfc3e541f23a0ad5ba394dc9e331e851966a0042418da41d8bda3da749d77d58108d000386634003b15df7deb19e78058fcbb2ae7c49f447c63089779bfef537a1da331d9756b25119fbf8756efe1096ffa2f6a498a6b1f79c9c055e78c10855f5dc8b34412820192c84b99ee0bab4fad628e5cff81da9694c4bcf3b215173b0785ce4f1b21bf619ed3c2529745de159a6124555b4d06368b1e0fc7ba54d3412c5e00a61576a62fdf77f2a430ef64117b1fac541d984d1f96faae694ea4102429fc6cad3f638c0d165bffb393d06593fbe2018eebcae5a4338a1eeeca82ddebf079cc6c1ab7d036539105e8c201a3e0926028e1a055a9fc1bc96f6fce3d10b99b4491bd4c8e28d9729935de7646f7605aeb735ff691ae60291434e394247cb040bbc18ed057313fa4ff04314a0373f711b2c8c06ca81a071f49e2157dfbe7f9c6cccee8b2db8e7dce4264c2ef4cea171160a5ca8c9689bed29c1144965e8040ee181ea2c1e65c2a3c1b468fa12de56463082747219a7b6041b46b924be5e8a1251605130f9232ae744890f8d799b393395b03bba41311faf8870902afb2be701db043761a06b56c27f2b3f868654d674f7aae2759733aecfecc4cde95304856bf741158a9ffcfcc90d4dbd266a1e5501675d6beb276ea9e4de24d5aac9b32ddab02d4d76f279c6941d305b9fa6c563abdd024ccca6792b36557553ff2c882008de7a70ccebeaf234e51c90d8e9b6d740e5ba3ef3ac9ad53dac439c6ac24f8369a56e1cec83dfa5b870e62b8ef19c0fce02bc79ce7a248355b5bd9929affde208a37728369884f8e4491427c88b89755d65f6928ef6ee44e34426877c06b79e6134fb4c4ee2d33d5526768af87b4e399a78e2c42bb9c2834e7dfe5cb2d18f3767d33186fbd559aa686112246bc3376419de040fcd79ed6af018cd01aa8c6ed2db0dc8cdd210f48238aa81e5ff290cc1e6a3d2a8cf085263f25f848ab7488eaacc5083df249eb84dda54a562ada408fe5c94dd110da749664814dc89de77ddcfcd5e4b4f1d071d889721044d4908aa0cd3edf682014756e278751aac00eddbd7288be763a436097623b580b862f56e9fd203a4bc4a51bde362dfcbb17a19ebf97706af8e342c6c6c3bfda87cda701b8f418abd5cd89ade22de595fd3d4bbd05c176bc97d244c7d89bc661349b944ed07080b31922e913845b57b40100a99962329a781cb5b7083856d76a20decec7cbd4d186afbb669c9d6cf9875afcd3f4653445790d0c99fcdbdd23fc013fce9110152935f37517c76cb9e07826a032942d3d0e6cd903d8661c94f1664fbf5792de0e8e66971973babe1abf9bfcb4be82e1aa3678dffc735cbf524a7c87e9c969ed5db4fc5f5f8cb55bc68200eca210c2e1b4fbde50d0a31d130aad1246a0279b010647e9a05914f26cd1107b12e4974eface8d72557236d9d1861a4b4a13255c34fcfd26e5dfbd8e5d962e783690c667bd99713182e5b474e86f0b09cf11c996fed60d5729ab5a3d6514b5fd252468d9ef6406ed7344f516173400eb4fe79991e7b391ab795249d77b4df32ba13764164f6e6837bfe7e18846d2ad10b18f9c171d708e3e57478f646c031b1130cd03c6fe662bb34567e950e8146b6c403a06a4f155501d05f4aed2223728fd8eac2f9cc19a4cabc96d0d5755b15b32e4bf58d9e9f38c7795b862ccb440e759ee101ad188e14e333b8536b7800082184b7469a22c893862bb9b989b8197323037a502ccd05a80cd5c0cb5175be1d7b457a8d587148fa53ccb387f79cc24978d2cff6704c8c1e2d4c6c1585d15f7892edb1585636d54fbb80f46075d19078e52e6be9c0ff90a052b192fcb425bf2d084a310d1565d76d742526d5a4ad969acd397b68f9683c4cac2490a2d22b6d724fad1b5bf19a71e436f0d97ba533d9e85bbab4eb55714607217e5bcc2d149b6a5feb1d08e4e137f98a3fc54f3bfbe64cf5838631e5bae9ddb77219a1e46281beda2eed7decccb17020180cf05db8ecdaa58999be70c667801f7ef5abc876df8a86d9912eb000d525d65dea27091a2ad655c439e58bb0c847b993d4cc09b138bbb0838bcd7e6b65a77edee9211d4148997dd151f78ded66202356f45887468a5933360064612e20990744263d411c14c5a0e648a3cf2c412ec7e30a39e8c0ebd8ad74c84824513472889ee3a7c1677d58375e39998671da3ddcbb472a2b6af6384063cb028896dadf6648aa5e51708ee03cd26b3d3c31b59452822f57a7d55867be373bf5190acdbbe6b2b5dfc8a03d75247df6904b9d8348098e144619be957e9cfcec0aafa44019757f7933b1067783edc9f88484be794a12b89b0c9ec2ec96e9e69f20a0d31bbe505227bd7736ade0912c747b1be20c204854675e51d0f9fa8ea40332ddec008138b4a393237c5612449950d393a6e658a1d4dc02ab7645fce26dbefb5662b8ac2c2e0bca12cae3eacebd53c83d65ce21dbd55d7e309e88fe5d8071bc46a34368f083a1e17baab91a311ef9f9307bd2eb559e15fbb29c31c7f4ebdbd6426f6509a7236a36052dce61778f757661b36518a541f24e20c16f9fdceea4d3bb4f0460689574d1e245dd193cbab3f8cf8e3ee7b42613fbd30f8e0a25b65fc4ae842b0861050926f3691ed13a8e2eac41a528fa0752c83ab12718cf62d5d64dc621ec3ec9feef8918aa367aad08e6ad0a404593cb087b2d5971347fcd1ed70de95c2bed70388e40ba345cbad0644e9989dd1fc7e2e1f5fae9e5a8fc8ead8866168dc7431121d00c922bb955b5439058a323f321ff9481d0a7bee6b5fd61a134b5caa07098662418fe92c33b7f699ea4b54040701e46d0f02d9489bd18bc3a3f94eed6ee39e8c6ba371c782e88f63fe282ad2362e7e52e69585a343ff4c34ca9fa05a0a8493fc51e16dc73878c2dd167860bb61e9d7bef73e83de87fe4035df4e1c65ae4f68f630f90695bed702ee532c0226f28", 0x1000}, {&(0x7f00000037c0)="fb186d9e11503c1e1526f027462bdb645518e8d52ff06e5a2ff0f0b2f3ec6c3ff2e7df42cc4502d752fd7618b199eafa89a12f804f2e9b6e5cbea15ec8f910281af30ee276de780a6e43e41fabdb7566cd9ee8527151395c133e9ef17e709f903515139c1bf10b5968a35698067a97c0bd9a265acd7a853dd30399d5d0d12568e9ca27aa5552a14e40fde43c68a179c733d71e42d47ef5e626f22e15b2293373c2daeb29ac221f893f77d1fe91c345034726da741aea8d375522a10f1e43a046188b301707d38b291cce822f5b178a7852e6af6d79d84497e04fe15e417d254271945cd856f44a2828ca3fb7e34d", 0xee}, {&(0x7f00000038c0)="3ecc", 0x2}, {&(0x7f0000003900)="38cb9a59afe736b9540d93ad1967b96ee2ea2cd5048a5fab583f69a6d187d02f49364f90f9db7de440d716f24ab0c91bcc449d9f55fa5a1656a24420", 0x3c}, {&(0x7f0000003940)="5cbb783805638ebef28b391a4b11ce5d3ed26f2aabc301c75e6ee10b60d1281e309271dafc82ccd4d2ef713add2df37728b1fe0b986aa752847ac6839e34e4d6aa1fb79b0dcc519f5842d272e5b3f6bda250d204f4f0d89fcec0ae819400a2575e384f5880427708711ca621a40c9d0ff25503cf821e1c85eab7732ef637a5f91171b8131c9699e072b840ed2dcfd702c773f44de2e9e4204014add8434485cc4b63e3cd40c2a42eef985b2011cd646adb7a794caaef52f6a8a1", 0xba}, {&(0x7f0000003a00)="589758c0", 0x4}, {&(0x7f0000003a40)="680ab0d52a1d997396c7894173767860892f9e201e800f45af2647efb0adc56ddaf8667245dac297c4da117c947cf3305431a224bdaa5fedf366d13cf7ec33cba8557497d606ca8a82093425bdb9af5afe5f48854d559bca84a6fe3f8c2404304c1bebb9244c69f978ffe3795b4fa798ca24c8f7af36458a22b25ce3e683e1effb4b5d93bec36dad63e00129d98172b511267deb8a53cb74a16502245911ac91a552b9d2aff7dba28f767780d069a7933d9fee537dd7ea450af77def494f69426d739c8c247aec8941935396056bd95c69b59c13783376db13879c518705", 0xde}, {&(0x7f0000003b40)="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", 0x1000}, {&(0x7f0000004b40)="4ff3c9f2171711c8dd0c571fb6a168e57fcb6db822dfb5c0dc8c366d57f5f2dff38fdefe819c9824e89cc51b345f5690049dfed0e0d1ec193bd256481df4a6facaaa892b501c409adca4c6c6476f231e2d4cd4020c6cc522a111969e6d2961a70adc0a1a3bddcfe40c350431a9c0a65b5d76b5dc66", 0x75}, {&(0x7f0000004bc0)="b85021b0f9179a0d37a0fa7e22c2c5065a75455c8a81d53c945ab0ca71d68f6b85737a2bed641d422aadbaecb8febbcad2338fa34c5cc6ca45eeecef8565467d36bcdfc0bb3dd74264bad5fd78e647b3143f211ef4780096090d90d48a61087412619edb0c3f3832c808f6049d9cddf2fbda7776f5f8b999ae49c0c7340a3589d23429b6a83f125b858db4a56f24bb5f8ce263fe7fe128eef05d60", 0x9b}], 0xa}], 0x3, 0x80) r3 = accept4(r0, &(0x7f0000004e00)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000004e80)=0x80, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f00), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000051c0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005180)={&(0x7f0000004f40)={0x20c, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9a1, 0x50}}}}, [@NL80211_PMSR_ATTR_PEERS={0x1ec, 0x5, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x180, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5d147e15b5610b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40084}, 0x90d0) r5 = accept$packet(r3, &(0x7f0000005200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005240)=0x14) sendto$packet(r5, &(0x7f0000005280)="5b6af4692568ee342e4e2a5a3b174f1cf305e83184880c450e7292e9517e8bd12e3a593a434a70a07283aaaf6c62e843c36ec771e08ee66806b1d810c604161603b6e710c165671604b6b75c6e2c7b9073889ed9ca24d6e8d0be7dbeca085acf029f42289f1df3576c8a1223400dcbd0b1e2bb", 0x73, 0x8884, &(0x7f0000005300)={0x11, 0xf8, r2, 0x1, 0x9, 0x6, @broadcast}, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005380), r3) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000054c0)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005480)={&(0x7f00000053c0)={0x98, r6, 0x505, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe4e}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x44040040) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000005540)={@private0, 0x0}, &(0x7f0000005580)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000055c0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000056c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000005a80)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005a40)={&(0x7f0000005700)=@allocspi={0x314, 0x16, 0x20, 0x70bd29, 0x6615, {{{@in=@remote, @in6=@local, 0x4e23, 0x0, 0x4e20, 0x65fa, 0xa, 0x20, 0xa0, 0x33, r7, r9}, {@in6=@local, 0x4d3, 0x6c}, @in=@multicast1, {0x5, 0x120000000000, 0x8, 0x8, 0x7ff, 0x100, 0x1, 0x5}, {0x236, 0xfffffffffffffff9, 0xa70, 0x401}, {0xc, 0x4, 0x6}, 0x70bd2d, 0x3507, 0x2, 0x4, 0x7, 0xb4}, 0x8, 0x2a0}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e24, @in=@broadcast}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @tmpl={0xc4, 0x5, [{{@in6=@loopback, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010102, 0x3503, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x3502, 0x2, 0x0, 0xbd, 0x800, 0x4, 0x5}, {{@in6=@private1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3505, 0x1, 0x2, 0xcb, 0xdfcb, 0x5, 0x7ff}]}, @algo_comp={0x82, 0x3, {{'deflate\x00'}, 0x1d0, "816fd4e2bccde9e88bac553df71167f23f831d199c4d36dcff0c1b86762eacc55e2b8c61a35d11e83ed0716910afb73339b3ce07d2692cdf6008"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfa}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd28, 0x70bd29, 0x70bd28, 0xe, [0x0, 0x3, 0xf, 0x8]}}, @algo_auth_trunc={0x62, 0x14, {{'sha384-generic\x00'}, 0xb0, 0x200, "adfe4e9a82fb03c165c4844774b46d229ec6b56162cc"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2a, 0x5}}]}, 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000005b00), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000005bc0)={&(0x7f0000005ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b40)={0x1c, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x18, 0x140c, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x810) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000005e00)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000005e40)={0x0, 0x24, "ed792f6763f15ef86f25be19d4a50d6b77ef684537c49c9928f4dd0b62b13b63d9675a10"}, &(0x7f0000005e80)=0x2c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000005ec0)={r12, @in6={{0xa, 0x4e23, 0x9, @loopback, 0x3ffc}}, 0x6, 0x809, 0x92, 0x3, 0x8}, &(0x7f0000005f80)=0x98) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000006080)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006040)={&(0x7f0000006000)={0x24, 0x1402, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50000}, 0x4040000) getsockopt$MRT6(r3, 0x29, 0xcf, &(0x7f00000060c0), &(0x7f0000006100)=0x4) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000006240)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006200)={&(0x7f00000061c0)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d4}, 0x4012) 221.449418ms ago: executing program 1 (id=4122): r0 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) close(r0) 136.690405ms ago: executing program 4 (id=4123): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0) 59.326965ms ago: executing program 3 (id=4124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x7fffffffffffc) 42.762801ms ago: executing program 0 (id=4125): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x8000000) 0s ago: executing program 1 (id=4126): socket$inet(0x2, 0x3, 0x4) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0xa, 0x0, 0x4, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 274.635476][T12877] ? up_write+0x1a9/0x590 [ 274.639931][T12877] ? __pfx___kernfs_new_node+0x10/0x10 [ 274.645434][T12877] ? __pfx_up_write+0x10/0x10 [ 274.650153][T12877] kernfs_new_node+0x137/0x240 [ 274.654962][T12877] __kernfs_create_file+0x49/0x2e0 [ 274.660115][T12877] sysfs_add_file_mode_ns+0x24a/0x310 [ 274.665536][T12877] internal_create_group+0x7a7/0x11d0 [ 274.670954][T12877] ? __pfx_internal_create_group+0x10/0x10 [ 274.676803][T12877] sysfs_create_groups+0x56/0x120 [ 274.681860][T12877] device_add_attrs+0xe5/0x600 [ 274.686660][T12877] ? __pfx_device_add_attrs+0x10/0x10 [ 274.692159][T12877] device_add+0x576/0xbf0 [ 274.696527][T12877] ? device_initialize+0x266/0x460 [ 274.701671][T12877] netdev_register_kobject+0x17e/0x320 [ 274.707169][T12877] register_netdevice+0x12c5/0x1b00 [ 274.712510][T12877] ? __pfx_register_netdevice+0x10/0x10 [ 274.718098][T12877] ? dev_addr_mod+0xbd/0x330 [ 274.722723][T12877] macvlan_common_newlink+0x1189/0x1930 [ 274.728382][T12877] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 274.734310][T12877] ? __pfx_tap_handle_frame+0x10/0x10 [ 274.739679][T12877] ? lockdep_rtnl_is_held+0x26/0x40 [ 274.744888][T12877] ? netdev_rx_handler_register+0x78/0xe0 [ 274.750615][T12877] macvtap_newlink+0x154/0x1d0 [ 274.755382][T12877] ? __pfx_macvtap_newlink+0x10/0x10 [ 274.760757][T12877] rtnl_newlink+0x1591/0x20a0 [ 274.765459][T12877] ? __pfx_rtnl_newlink+0x10/0x10 [ 274.770566][T12877] ? do_raw_spin_unlock+0x13c/0x8b0 [ 274.775771][T12877] ? __mutex_lock+0x9a5/0xd70 [ 274.780451][T12877] ? __mutex_lock+0x527/0xd70 [ 274.785139][T12877] ? __pfx_rtnl_newlink+0x10/0x10 [ 274.790188][T12877] rtnetlink_rcv_msg+0x73f/0xcf0 [ 274.795130][T12877] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 274.800250][T12877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.805706][T12877] ? ref_tracker_free+0x643/0x7e0 [ 274.810742][T12877] netlink_rcv_skb+0x1e3/0x430 [ 274.815504][T12877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.820955][T12877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.826263][T12877] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.831458][T12877] netlink_unicast+0x7f0/0x990 [ 274.836225][T12877] ? __pfx_netlink_unicast+0x10/0x10 [ 274.841504][T12877] ? __virt_addr_valid+0x183/0x530 [ 274.846707][T12877] ? __check_object_size+0x49c/0x900 [ 274.851987][T12877] ? bpf_lsm_netlink_send+0x9/0x10 [ 274.857096][T12877] netlink_sendmsg+0x8e4/0xcb0 [ 274.861865][T12877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.867156][T12877] ? __import_iovec+0x536/0x820 [ 274.872002][T12877] ? aa_sock_msg_perm+0x91/0x160 [ 274.876944][T12877] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.882228][T12877] ? security_socket_sendmsg+0x87/0xb0 [ 274.887689][T12877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.892967][T12877] __sock_sendmsg+0x221/0x270 [ 274.897642][T12877] ____sys_sendmsg+0x525/0x7d0 [ 274.902410][T12877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.907703][T12877] __sys_sendmsg+0x2b0/0x3a0 [ 274.912385][T12877] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.917494][T12877] ? vfs_write+0x7c4/0xc90 [ 274.921940][T12877] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.928786][T12877] ? do_syscall_64+0x100/0x230 [ 274.933547][T12877] ? do_syscall_64+0xb6/0x230 [ 274.938216][T12877] do_syscall_64+0xf3/0x230 [ 274.942977][T12877] ? clear_bhb_loop+0x35/0x90 [ 274.947659][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.953556][T12877] RIP: 0033:0x7f92df9773b9 [ 274.957975][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.977664][T12877] RSP: 002b:00007f92e0696048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.986072][T12877] RAX: ffffffffffffffda RBX: 00007f92dfb05f80 RCX: 00007f92df9773b9 [ 274.994036][T12877] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000011 [ 275.002082][T12877] RBP: 00007f92e06960a0 R08: 0000000000000000 R09: 0000000000000000 [ 275.010043][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.018092][T12877] R13: 000000000000000b R14: 00007f92dfb05f80 R15: 00007ffd16438858 [ 275.026075][T12877] [ 275.119224][T12879] netlink: 'syz.0.2909': attribute type 3 has an invalid length. [ 275.129562][T12879] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2909'. [ 275.272512][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 275.337764][T12881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.351079][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2906'. [ 275.395253][ C1] eth0: bad gso: type: 1, size: 1408 [ 275.647343][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 275.678811][T12899] tipc: Cannot configure node identity twice [ 275.714490][T12903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2918'. [ 275.796669][ C1] eth0: bad gso: type: 1, size: 1408 [ 275.903460][T12907] SET target dimension over the limit! [ 276.058409][T12916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2922'. [ 276.350996][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.356574][T12932] netlink: 'syz.4.2926': attribute type 1 has an invalid length. [ 276.394689][ T943] IPVS: starting estimator thread 0... [ 276.483654][T12932] netlink: 'syz.4.2926': attribute type 11 has an invalid length. [ 276.508425][T12936] IPVS: using max 22 ests per chain, 52800 per kthread [ 276.527727][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2930'. [ 276.552335][T12941] tipc: Cannot configure node identity twice [ 276.680882][ C1] eth0: bad gso: type: 1, size: 1408 [ 276.786779][T12954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.814211][T12949] SET target dimension over the limit! [ 276.911532][T12956] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 277.003770][T12955] delete_channel: no stack [ 277.147873][T12924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2924'. [ 277.223779][T12973] dccp_invalid_packet: P.Data Offset(0) too small [ 278.705836][T13056] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.995262][ T4621] block nbd31: Receive control failed (result -107) [ 279.043147][T13077] netlink: 'syz.4.2971': attribute type 5 has an invalid length. [ 279.053145][T13066] nbd31: detected capacity change from 0 to 256 [ 279.078298][T13078] Cannot find add_set index 0 as target [ 279.090584][T12113] block nbd31: Dead connection, failed to find a fallback [ 279.766045][T13108] __nla_validate_parse: 7 callbacks suppressed [ 279.766065][T13108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2984'. [ 279.817558][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 279.924105][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'. [ 279.984749][ T4621] block nbd32: Receive control failed (result -107) [ 280.023756][T13112] nbd32: detected capacity change from 0 to 256 [ 280.034001][T13120] block nbd32: Dead connection, failed to find a fallback [ 280.050834][T13126] netlink: 9364 bytes leftover after parsing attributes in process `syz.0.2990'. [ 280.145160][T13117] SET target dimension over the limit! [ 280.288224][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2995'. [ 280.557842][T13155] geneve2: entered promiscuous mode [ 280.576654][T13155] geneve2: entered allmulticast mode [ 280.638202][T13158] ip6tnl1: entered promiscuous mode [ 280.653832][T13158] ip6tnl1: entered allmulticast mode [ 280.693504][T13161] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 280.716604][T13161] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 280.921259][T13170] team0: Port device team_slave_1 removed [ 280.955661][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 281.034484][T13174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'. [ 281.351855][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 281.416177][T13163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3002'. [ 281.425438][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 281.455022][ T4621] block nbd33: Receive control failed (result -107) [ 281.494028][T13192] nbd33: detected capacity change from 0 to 256 [ 281.532418][T12845] block nbd33: Dead connection, failed to find a fallback [ 281.554745][T12845] schedule_timeout: wrong timeout value bc00000000000000 [ 281.565915][T12845] CPU: 0 UID: 0 PID: 12845 Comm: udevd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 281.575958][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 281.586037][T12845] Call Trace: [ 281.589341][T12845] [ 281.592296][T12845] dump_stack_lvl+0x241/0x360 [ 281.597007][T12845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.602232][T12845] ? __pfx__printk+0x10/0x10 [ 281.606955][T12845] schedule_timeout+0x281/0x310 [ 281.611849][T12845] ? __pfx_schedule_timeout+0x10/0x10 [ 281.617273][T12845] ? prepare_to_wait_event+0x3ba/0x400 [ 281.622781][T12845] nbd_queue_rq+0x7cd/0x2f70 [ 281.627412][T12845] ? __pfx_validate_chain+0x10/0x10 [ 281.632642][T12845] ? validate_chain+0x11e/0x5900 [ 281.637625][T12845] ? __pfx_nbd_queue_rq+0x10/0x10 [ 281.642680][T12845] ? __lock_acquire+0x137a/0x2040 [ 281.647759][T12845] ? __pfx_autoremove_wake_function+0x10/0x10 [ 281.653879][T12845] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 281.659431][T12845] ? sbitmap_find_bit+0x435/0x4c0 [ 281.664466][T12845] ? sbitmap_get+0x289/0x3f0 [ 281.669165][T12845] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 281.675187][T12845] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 281.681004][T12845] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 281.687356][T12845] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 281.694240][T12845] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 281.699542][T12845] ? __pfx___might_resched+0x10/0x10 [ 281.704855][T12845] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 281.710864][T12845] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 281.716174][T12845] blk_mq_run_hw_queue+0x576/0xae0 [ 281.721329][T12845] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 281.726716][T12845] blk_mq_flush_plug_list+0x1115/0x1880 [ 281.733687][T12845] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 281.739617][T12845] ? blk_mq_submit_bio+0x1288/0x22d0 [ 281.744934][T12845] __blk_flush_plug+0x420/0x500 [ 281.749904][T12845] ? __pfx___blk_flush_plug+0x10/0x10 [ 281.755299][T12845] ? timekeeping_get_ns+0x5c/0x420 [ 281.760450][T12845] ? lockdep_hardirqs_on+0x99/0x150 [ 281.765666][T12845] __submit_bio+0x422/0x560 [ 281.770173][T12845] ? __pfx___submit_bio+0x10/0x10 [ 281.775213][T12845] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 281.781467][T12845] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 281.788066][T12845] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 281.793713][T12845] ? bio_associate_blkg_from_css+0x182/0xc70 [ 281.799950][T12845] ? __pfx___might_resched+0x10/0x10 [ 281.805243][T12845] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 281.811419][T12845] block_read_full_folio+0x93b/0xcd0 [ 281.816756][T12845] ? __pfx_blkdev_get_block+0x10/0x10 [ 281.822126][T12845] ? __pfx_block_read_full_folio+0x10/0x10 [ 281.827935][T12845] ? __pfx_lru_add_fn+0x10/0x10 [ 281.832962][T12845] ? folio_add_lru+0x357/0xd70 [ 281.837810][T12845] ? folio_add_lru+0x58f/0xd70 [ 281.842582][T12845] filemap_read_folio+0x1a0/0x790 [ 281.847897][T12845] ? __pfx_blkdev_read_folio+0x10/0x10 [ 281.853599][T12845] ? __pfx_filemap_read_folio+0x10/0x10 [ 281.859663][T12845] ? __filemap_get_folio+0x984/0xc10 [ 281.865128][T12845] do_read_cache_folio+0x134/0x820 [ 281.870601][T12845] ? __pfx_blkdev_read_folio+0x10/0x10 [ 281.876481][T12845] read_part_sector+0xb3/0x330 [ 281.881333][T12845] adfspart_check_ICS+0xd9/0x9a0 [ 281.886451][T12845] ? __pfx_vsnprintf+0x10/0x10 [ 281.891485][T12845] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 281.897554][T12845] ? snprintf+0xda/0x120 [ 281.902604][T12845] ? alloc_pages_mpol_noprof+0x417/0x680 [ 281.908683][T12845] ? vsnprintf+0x1cc3/0x1da0 [ 281.913774][T12845] ? vsnprintf+0x184/0x1da0 [ 281.919233][T12845] ? __pfx_snprintf+0x10/0x10 [ 281.923910][T12845] ? __kasan_kmalloc+0x98/0xb0 [ 281.929032][T12845] bdev_disk_changed+0x72c/0x13d0 [ 281.934157][T12845] ? __pfx_bdev_disk_changed+0x10/0x10 [ 281.939968][T12845] blkdev_get_whole+0x2d2/0x450 [ 281.944829][T12845] bdev_open+0x2d4/0xc60 [ 281.949081][T12845] blkdev_open+0x3e8/0x570 [ 281.953498][T12845] ? __pfx_blkdev_open+0x10/0x10 [ 281.958428][T12845] do_dentry_open+0x970/0x1440 [ 281.963202][T12845] vfs_open+0x3e/0x330 [ 281.967264][T12845] path_openat+0x2b3e/0x3470 [ 281.971855][T12845] ? __pfx_stack_trace_save+0x10/0x10 [ 281.977227][T12845] ? __lock_acquire+0x137a/0x2040 [ 281.982257][T12845] ? __pfx_path_openat+0x10/0x10 [ 281.987204][T12845] do_filp_open+0x235/0x490 [ 281.991705][T12845] ? __pfx_do_filp_open+0x10/0x10 [ 281.996831][T12845] ? _raw_spin_unlock+0x28/0x50 [ 282.001682][T12845] ? alloc_fd+0x5a1/0x640 [ 282.006018][T12845] do_sys_openat2+0x13e/0x1d0 [ 282.010692][T12845] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.015898][T12845] __x64_sys_openat+0x247/0x2a0 [ 282.020747][T12845] ? __pfx___x64_sys_openat+0x10/0x10 [ 282.026115][T12845] ? do_syscall_64+0x100/0x230 [ 282.030876][T12845] ? do_syscall_64+0xb6/0x230 [ 282.035547][T12845] do_syscall_64+0xf3/0x230 [ 282.040044][T12845] ? clear_bhb_loop+0x35/0x90 [ 282.044731][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.050621][T12845] RIP: 0033:0x7f056fd169a4 [ 282.055030][T12845] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 282.074632][T12845] RSP: 002b:00007ffd8e6141d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.083046][T12845] RAX: ffffffffffffffda RBX: 0000556d69833550 RCX: 00007f056fd169a4 [ 282.091009][T12845] RDX: 00000000000a0800 RSI: 0000556d69877a90 RDI: 00000000ffffff9c [ 282.098971][T12845] RBP: 0000556d69877a90 R08: 0000000000000001 R09: 7fffffffffffffff [ 282.106934][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 282.114902][T12845] R13: 0000556d69821250 R14: 0000000000000001 R15: 0000556d6980e910 [ 282.122883][T12845] [ 282.230793][T12845] block nbd33: shutting down sockets [ 282.267669][T12845] blk_print_req_error: 27 callbacks suppressed [ 282.267696][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.320745][T12845] buffer_io_error: 27 callbacks suppressed [ 282.320765][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.384050][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.413137][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.432554][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.471753][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.493616][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.513488][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.547853][ C1] eth0: bad gso: type: 1, size: 1408 [ 282.551479][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.562544][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.616116][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.670096][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.705075][ T4621] block nbd34: Receive control failed (result -107) [ 282.733417][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.742888][T13212] nbd34: detected capacity change from 0 to 256 [ 282.768588][T13205] block nbd34: Dead connection, failed to find a fallback [ 282.813886][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.847905][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.874769][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.887705][T12845] ldm_validate_partition_table(): Disk read failed. [ 282.898449][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.916933][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.941322][ T4621] block nbd35: Receive control failed (result -107) [ 282.962991][T13229] nbd35: detected capacity change from 0 to 256 [ 282.973566][T12845] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.973746][T13230] block nbd35: Dead connection, failed to find a fallback [ 282.983136][T12845] Buffer I/O error on dev nbd33, logical block 0, async page read [ 282.998558][T12845] Dev nbd33: unable to read RDB block 0 [ 283.005838][T12845] nbd33: unable to read partition table [ 283.016383][T12845] ldm_validate_partition_table(): Disk read failed. [ 283.025869][T13230] block nbd35: shutting down sockets [ 283.037721][T12845] Dev nbd33: unable to read RDB block 0 [ 283.043797][T12845] nbd33: unable to read partition table [ 283.073336][T13230] ldm_validate_partition_table(): Disk read failed. [ 283.080375][T13230] Dev nbd35: unable to read RDB block 0 [ 283.087029][T13230] nbd35: unable to read partition table [ 283.132440][T13230] ldm_validate_partition_table(): Disk read failed. [ 283.164337][T13230] Dev nbd35: unable to read RDB block 0 [ 283.168635][ C1] eth0: bad gso: type: 1, size: 1408 [ 283.170256][T13230] nbd35: unable to read partition table [ 283.377614][T13254] netlink: 'syz.1.3031': attribute type 10 has an invalid length. [ 283.450107][T13259] bond_slave_0: entered promiscuous mode [ 283.456094][T13259] bond_slave_1: entered promiscuous mode [ 283.511224][T13259] vlan2: entered promiscuous mode [ 283.539248][T13259] bond0: entered promiscuous mode [ 283.571451][T13259] bond0: left promiscuous mode [ 283.586500][T13259] bond_slave_0: left promiscuous mode [ 283.592064][T13259] bond_slave_1: left promiscuous mode [ 283.771172][ C1] eth0: bad gso: type: 1, size: 1408 [ 284.037918][T13282] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 284.378945][T13304] tipc: Cannot configure node identity twice [ 284.405976][ C1] eth0: bad gso: type: 1, size: 1408 [ 284.518871][T13312] bond_slave_0: entered promiscuous mode [ 284.524650][T13312] bond_slave_1: entered promiscuous mode [ 284.532205][T13312] vlan2: entered promiscuous mode [ 284.540658][T13312] bond0: entered promiscuous mode [ 284.551353][T13312] bond0: left promiscuous mode [ 284.557254][T13312] bond_slave_0: left promiscuous mode [ 284.562765][T13312] bond_slave_1: left promiscuous mode [ 284.912660][T13330] __nla_validate_parse: 8 callbacks suppressed [ 284.912682][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3058'. [ 284.934016][T13330] tipc: Cannot configure node identity twice [ 284.947483][T13326] batman_adv: batadv0: Adding interface: gretap1 [ 284.956063][T13326] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.016170][ C1] eth0: bad gso: type: 1, size: 1408 [ 285.044150][T13326] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 285.236512][T13339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3061'. [ 285.504547][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 285.562318][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 285.655412][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 285.715677][ T4621] block nbd36: Receive control failed (result -107) [ 285.753194][T13359] nbd36: detected capacity change from 0 to 256 [ 285.770008][T13230] block nbd36: Dead connection, failed to find a fallback [ 285.803077][T13230] block nbd36: shutting down sockets [ 285.825115][T13230] ldm_validate_partition_table(): Disk read failed. [ 285.832182][T13230] Dev nbd36: unable to read RDB block 0 [ 285.842406][T13230] nbd36: unable to read partition table [ 285.857913][T13230] ldm_validate_partition_table(): Disk read failed. [ 285.874927][T13230] Dev nbd36: unable to read RDB block 0 [ 285.880909][T13230] nbd36: unable to read partition table [ 286.244852][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'. [ 286.264697][T13398] tipc: Cannot configure node identity twice [ 286.312437][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 286.435079][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 286.529732][ T4621] block nbd37: Receive control failed (result -107) [ 286.563481][T13403] nbd37: detected capacity change from 0 to 256 [ 286.574115][T13230] block nbd37: Dead connection, failed to find a fallback [ 286.626343][T13230] block nbd37: shutting down sockets [ 286.651176][T13230] ldm_validate_partition_table(): Disk read failed. [ 286.693564][T13230] Dev nbd37: unable to read RDB block 0 [ 286.720770][T13230] nbd37: unable to read partition table [ 286.757050][T13230] ldm_validate_partition_table(): Disk read failed. [ 286.787678][T13230] Dev nbd37: unable to read RDB block 0 [ 286.806520][T13230] nbd37: unable to read partition table [ 286.904112][T13432] netlink: 'syz.0.3092': attribute type 11 has an invalid length. [ 286.916397][T13430] netlink: 'syz.0.3092': attribute type 11 has an invalid length. [ 287.032585][T13437] nbd: nbd3 already in use [ 287.052969][T13437] block nbd3: NBD_DISCONNECT [ 287.065481][T13437] block nbd3: Send disconnect failed -32 [ 287.653672][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.667967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.684686][ T12] bond0 (unregistering): Released all slaves [ 287.706569][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3097'. [ 287.728555][T13449] tipc: Cannot configure node identity twice [ 287.916262][ T12] tipc: Left network mode [ 287.929955][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 287.946410][T13459] bond_slave_0: entered promiscuous mode [ 287.952112][T13459] bond_slave_1: entered promiscuous mode [ 287.965204][T13459] vlan2: entered promiscuous mode [ 287.970284][T13459] bond0: entered promiscuous mode [ 287.985030][T13459] bond0: left promiscuous mode [ 287.990609][T13459] bond_slave_0: left promiscuous mode [ 287.996183][T13459] bond_slave_1: left promiscuous mode [ 288.047421][ T4621] block nbd3: Receive control failed (result -107) [ 288.096801][T13457] nbd3: detected capacity change from 0 to 256 [ 288.128525][T13230] block nbd3: Dead connection, failed to find a fallback [ 288.155566][T13230] block nbd3: shutting down sockets [ 288.166727][T13230] blk_print_req_error: 138 callbacks suppressed [ 288.166748][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.186049][T13230] buffer_io_error: 138 callbacks suppressed [ 288.186069][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.257128][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.270144][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.303001][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.356659][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.375278][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.411179][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.436978][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.469336][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.491073][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.532971][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.566597][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.603062][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.611137][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.632256][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.653452][T13482] FAULT_INJECTION: forcing a failure. [ 288.653452][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 288.661296][T13230] ldm_validate_partition_table(): Disk read failed. [ 288.675143][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.686677][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.697651][T13230] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.701573][T13482] CPU: 1 UID: 0 PID: 13482 Comm: syz.0.3109 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 288.707713][T13230] Buffer I/O error on dev nbd3, logical block 0, async page read [ 288.717199][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 288.717217][T13482] Call Trace: [ 288.717226][T13482] [ 288.717235][T13482] dump_stack_lvl+0x241/0x360 [ 288.717267][T13482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.717289][T13482] ? __pfx__printk+0x10/0x10 [ 288.717312][T13482] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 288.717333][T13482] ? __pfx___might_resched+0x10/0x10 [ 288.726607][T13230] Dev nbd3: unable to read RDB block 0 [ 288.735076][T13482] should_fail_ex+0x3b0/0x4e0 [ 288.735114][T13482] ? __kernfs_new_node+0xd8/0x870 [ 288.735137][T13482] should_failslab+0xac/0x100 [ 288.735165][T13482] ? __kernfs_new_node+0xd8/0x870 [ 288.735184][T13482] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 288.740131][T13230] nbd3: unable to read partition table [ 288.741471][T13482] __kernfs_new_node+0xd8/0x870 [ 288.741507][T13482] ? up_write+0x1a9/0x590 [ 288.811994][T13482] ? __pfx___kernfs_new_node+0x10/0x10 [ 288.817467][T13482] ? __pfx_up_write+0x10/0x10 [ 288.822150][T13482] kernfs_new_node+0x137/0x240 [ 288.826917][T13482] __kernfs_create_file+0x49/0x2e0 [ 288.832034][T13482] sysfs_add_file_mode_ns+0x24a/0x310 [ 288.837416][T13482] internal_create_group+0x7a7/0x11d0 [ 288.842801][T13482] ? __pfx_internal_create_group+0x10/0x10 [ 288.848617][T13482] sysfs_create_groups+0x56/0x120 [ 288.853640][T13482] device_add_attrs+0xe5/0x600 [ 288.858489][T13482] ? __pfx_device_add_attrs+0x10/0x10 [ 288.863882][T13482] device_add+0x576/0xbf0 [ 288.868213][T13482] ? device_initialize+0x266/0x460 [ 288.873372][T13482] netdev_register_kobject+0x17e/0x320 [ 288.878950][T13482] register_netdevice+0x12c5/0x1b00 [ 288.884181][T13482] ? __pfx_register_netdevice+0x10/0x10 [ 288.889787][T13482] macvlan_common_newlink+0x1189/0x1930 [ 288.895346][T13482] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 288.901235][T13482] ? __pfx_tap_handle_frame+0x10/0x10 [ 288.906603][T13482] ? lockdep_rtnl_is_held+0x26/0x40 [ 288.911799][T13482] ? netdev_rx_handler_register+0x78/0xe0 [ 288.917521][T13482] macvtap_newlink+0x154/0x1d0 [ 288.922378][T13482] ? __pfx_macvtap_newlink+0x10/0x10 [ 288.927747][T13482] rtnl_newlink+0x1591/0x20a0 [ 288.932444][T13482] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.937476][T13482] ? do_raw_spin_unlock+0x13c/0x8b0 [ 288.942680][T13482] ? __mutex_lock+0x9a5/0xd70 [ 288.947380][T13482] ? __mutex_lock+0x527/0xd70 [ 288.952184][T13482] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.957220][T13482] rtnetlink_rcv_msg+0x73f/0xcf0 [ 288.962437][T13482] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 288.967547][T13482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.973027][T13482] ? ref_tracker_free+0x643/0x7e0 [ 288.978069][T13482] netlink_rcv_skb+0x1e3/0x430 [ 288.982913][T13482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.988405][T13482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.993713][T13482] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.998916][T13482] netlink_unicast+0x7f0/0x990 [ 289.003683][T13482] ? __pfx_netlink_unicast+0x10/0x10 [ 289.008959][T13482] ? __virt_addr_valid+0x183/0x530 [ 289.014070][T13482] ? __check_object_size+0x49c/0x900 [ 289.019352][T13482] ? bpf_lsm_netlink_send+0x9/0x10 [ 289.024496][T13482] netlink_sendmsg+0x8e4/0xcb0 [ 289.029267][T13482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.034544][T13482] ? __import_iovec+0x536/0x820 [ 289.039397][T13482] ? aa_sock_msg_perm+0x91/0x160 [ 289.044340][T13482] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 289.049626][T13482] ? security_socket_sendmsg+0x87/0xb0 [ 289.055083][T13482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.060447][T13482] __sock_sendmsg+0x221/0x270 [ 289.065147][T13482] ____sys_sendmsg+0x525/0x7d0 [ 289.069916][T13482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.075215][T13482] __sys_sendmsg+0x2b0/0x3a0 [ 289.079896][T13482] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.085153][T13482] ? vfs_write+0x7c4/0xc90 [ 289.089683][T13482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.096012][T13482] ? do_syscall_64+0x100/0x230 [ 289.100779][T13482] ? do_syscall_64+0xb6/0x230 [ 289.105453][T13482] do_syscall_64+0xf3/0x230 [ 289.109954][T13482] ? clear_bhb_loop+0x35/0x90 [ 289.114634][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.120524][T13482] RIP: 0033:0x7f1c07d773b9 [ 289.124936][T13482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.144680][T13482] RSP: 002b:00007f1c08a9b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.153196][T13482] RAX: ffffffffffffffda RBX: 00007f1c07f05f80 RCX: 00007f1c07d773b9 [ 289.161161][T13482] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000011 [ 289.169164][T13482] RBP: 00007f1c08a9b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 289.177230][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.185289][T13482] R13: 000000000000000b R14: 00007f1c07f05f80 R15: 00007fff43fcaa88 [ 289.193294][T13482] [ 289.227378][T13230] ldm_validate_partition_table(): Disk read failed. [ 289.236932][T13230] Dev nbd3: unable to read RDB block 0 [ 289.263847][T13230] nbd3: unable to read partition table [ 289.400557][ T12] hsr_slave_0: left promiscuous mode [ 289.410974][ T12] hsr_slave_1: left promiscuous mode [ 289.430431][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.451386][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.490101][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.504718][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.555058][ T12] veth1_macvtap: left allmulticast mode [ 289.564535][ T12] veth0_macvtap: left promiscuous mode [ 289.578503][ T12] veth1_vlan: left promiscuous mode [ 289.590069][ T12] veth0_vlan: left promiscuous mode [ 290.211904][ T12] team0 (unregistering): Port device team_slave_1 removed [ 290.268807][ T12] team0 (unregistering): Port device team_slave_0 removed [ 290.681492][T13496] netlink: 'syz.2.3114': attribute type 10 has an invalid length. [ 290.690042][T13496] __nla_validate_parse: 5 callbacks suppressed [ 290.690058][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3114'. [ 290.742590][T13496] syz_tun: entered promiscuous mode [ 290.749446][T13496] syz_tun: entered allmulticast mode [ 290.760412][T13496] team0: Port device syz_tun added [ 290.776373][T13505] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3117'. [ 290.959100][T13529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3126'. [ 291.028031][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'. [ 291.048338][T13532] bond_slave_0: entered promiscuous mode [ 291.054160][T13532] bond_slave_1: entered promiscuous mode [ 291.070525][T13532] vlan2: entered promiscuous mode [ 291.077616][T13532] bond0: entered promiscuous mode [ 291.089235][T13532] bond0: left promiscuous mode [ 291.095066][T13532] bond_slave_0: left promiscuous mode [ 291.100591][T13532] bond_slave_1: left promiscuous mode [ 291.127325][T13537] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3128'. [ 291.184416][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 291.303189][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3129'. [ 291.315493][T13543] ebt_among: dst integrity fail: 101 [ 291.495948][T13559] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3135'. [ 291.513926][T13548] IPVS: Scheduler module ip_vs_sip not found [ 291.542539][T13556] IPVS: length: 8 != 3945546880 [ 291.700783][T13564] SET target dimension over the limit! [ 291.718377][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 291.812203][T13574] bond_slave_0: entered promiscuous mode [ 291.818040][T13574] bond_slave_1: entered promiscuous mode [ 291.826537][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 291.835959][T13574] vlan2: entered promiscuous mode [ 291.841276][T13574] bond0: entered promiscuous mode [ 291.854288][T13574] bond0: left promiscuous mode [ 291.873751][T13574] bond_slave_0: left promiscuous mode [ 291.879851][T13574] bond_slave_1: left promiscuous mode [ 291.886915][ T53] block nbd38: Receive control failed (result -107) [ 291.923949][T13566] nbd38: detected capacity change from 0 to 256 [ 291.940360][T13230] block nbd38: Dead connection, failed to find a fallback [ 291.967473][T13230] block nbd38: shutting down sockets [ 292.014711][T13230] ldm_validate_partition_table(): Disk read failed. [ 292.021666][T13230] Dev nbd38: unable to read RDB block 0 [ 292.079120][T13230] nbd38: unable to read partition table [ 292.108830][T13230] ldm_validate_partition_table(): Disk read failed. [ 292.133140][T13230] Dev nbd38: unable to read RDB block 0 [ 292.147172][T13230] nbd38: unable to read partition table [ 292.156756][T13588] IPVS: dh: SCTP 172.20.20.170:0 - no destination available [ 292.302934][T13599] Cannot find add_set index 0 as target [ 292.537032][T13613] Cannot find add_set index 0 as target [ 292.848298][T13621] can: request_module (can-proto-0) failed. [ 292.935488][T13634] bond_slave_0: entered promiscuous mode [ 292.941213][T13634] bond_slave_1: entered promiscuous mode [ 292.957117][T13634] vlan2: entered promiscuous mode [ 292.962192][T13634] bond0: entered promiscuous mode [ 292.988253][T13634] bond0: left promiscuous mode [ 292.995635][T13634] bond_slave_0: left promiscuous mode [ 293.001177][T13634] bond_slave_1: left promiscuous mode [ 293.053310][T13638] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 293.061084][T13638] 0ªX¹¦Dö»: entered allmulticast mode [ 293.229109][T13647] can: request_module (can-proto-0) failed. [ 293.253103][T13648] can: request_module (can-proto-0) failed. [ 293.833978][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 294.156943][T13700] netlink: del zone limit has 8 unknown bytes [ 294.326326][T13708] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 294.412260][T13708] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 294.599898][T13715] syz_tun (unregistering): left allmulticast mode [ 294.633475][T13715] team0: Port device syz_tun removed [ 295.081160][T13749] netlink: 'syz.1.3197': attribute type 10 has an invalid length. [ 295.194348][T13749] team0: Port device netdevsim0 added [ 295.255001][T13771] ieee802154 phy0 wpan0: encryption failed: -90 [ 295.314809][T13761] veth1_virt_wifi: entered promiscuous mode [ 295.366840][T13761] veth1_virt_wifi: left promiscuous mode [ 295.634715][T13785] netlink: 'syz.3.3207': attribute type 30 has an invalid length. [ 295.789004][T13793] __nla_validate_parse: 11 callbacks suppressed [ 295.789026][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3211'. [ 296.197931][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 297.081612][T13847] tap0: tun_chr_ioctl cmd 2147767521 [ 297.127501][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 297.138299][T13854] FAULT_INJECTION: forcing a failure. [ 297.138299][T13854] name failslab, interval 1, probability 0, space 0, times 0 [ 297.162581][T13854] CPU: 1 UID: 0 PID: 13854 Comm: syz.4.3232 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 297.173045][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 297.183120][T13854] Call Trace: [ 297.186420][T13854] [ 297.189371][T13854] dump_stack_lvl+0x241/0x360 [ 297.194082][T13854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.199307][T13854] ? __pfx__printk+0x10/0x10 [ 297.203920][T13854] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 297.209488][T13854] ? __pfx___might_resched+0x10/0x10 [ 297.214804][T13854] should_fail_ex+0x3b0/0x4e0 [ 297.219514][T13854] ? __kernfs_new_node+0xd8/0x870 [ 297.224558][T13854] should_failslab+0xac/0x100 [ 297.229267][T13854] ? __kernfs_new_node+0xd8/0x870 [ 297.234315][T13854] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 297.239718][T13854] __kernfs_new_node+0xd8/0x870 [ 297.244603][T13854] ? up_write+0x1a9/0x590 [ 297.248958][T13854] ? __pfx___kernfs_new_node+0x10/0x10 [ 297.254448][T13854] ? __pfx_up_write+0x10/0x10 [ 297.259160][T13854] kernfs_new_node+0x137/0x240 [ 297.263954][T13854] __kernfs_create_file+0x49/0x2e0 [ 297.269091][T13854] sysfs_add_file_mode_ns+0x24a/0x310 [ 297.274674][T13854] internal_create_group+0x7a7/0x11d0 [ 297.280086][T13854] ? __pfx_internal_create_group+0x10/0x10 [ 297.285928][T13854] sysfs_create_groups+0x56/0x120 [ 297.290981][T13854] device_add_attrs+0xe5/0x600 [ 297.295778][T13854] ? __pfx_device_add_attrs+0x10/0x10 [ 297.301186][T13854] device_add+0x576/0xbf0 [ 297.305548][T13854] ? device_initialize+0x266/0x460 [ 297.310687][T13854] netdev_register_kobject+0x17e/0x320 [ 297.316169][T13854] register_netdevice+0x12c5/0x1b00 [ 297.321416][T13854] ? __pfx_register_netdevice+0x10/0x10 [ 297.326981][T13854] ? dev_addr_mod+0xbd/0x330 [ 297.331589][T13854] macvlan_common_newlink+0x1189/0x1930 [ 297.337169][T13854] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 297.343066][T13854] ? __pfx_tap_handle_frame+0x10/0x10 [ 297.348434][T13854] ? lockdep_rtnl_is_held+0x26/0x40 [ 297.353628][T13854] ? netdev_rx_handler_register+0x78/0xe0 [ 297.359386][T13854] macvtap_newlink+0x154/0x1d0 [ 297.364164][T13854] ? __pfx_macvtap_newlink+0x10/0x10 [ 297.369487][T13854] rtnl_newlink+0x1591/0x20a0 [ 297.374205][T13854] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.379237][T13854] ? __pfx___mutex_trylock_common+0x10/0x10 [ 297.385157][T13854] ? rcu_is_watching+0x15/0xb0 [ 297.389933][T13854] ? trace_contention_end+0x3c/0x120 [ 297.395217][T13854] ? __mutex_lock+0x2ef/0xd70 [ 297.399891][T13854] ? __pfx_lock_release+0x10/0x10 [ 297.404935][T13854] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.409977][T13854] rtnetlink_rcv_msg+0x73f/0xcf0 [ 297.414916][T13854] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 297.420046][T13854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.425502][T13854] ? ref_tracker_free+0x643/0x7e0 [ 297.430878][T13854] netlink_rcv_skb+0x1e3/0x430 [ 297.435638][T13854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.441090][T13854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.446382][T13854] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.451596][T13854] netlink_unicast+0x7f0/0x990 [ 297.456387][T13854] ? __pfx_netlink_unicast+0x10/0x10 [ 297.462193][T13854] ? __virt_addr_valid+0x183/0x530 [ 297.467338][T13854] ? __check_object_size+0x49c/0x900 [ 297.472668][T13854] ? bpf_lsm_netlink_send+0x9/0x10 [ 297.477808][T13854] netlink_sendmsg+0x8e4/0xcb0 [ 297.482626][T13854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.487925][T13854] ? __import_iovec+0x536/0x820 [ 297.492778][T13854] ? aa_sock_msg_perm+0x91/0x160 [ 297.497726][T13854] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 297.503056][T13854] ? security_socket_sendmsg+0x87/0xb0 [ 297.508528][T13854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.513825][T13854] __sock_sendmsg+0x221/0x270 [ 297.518533][T13854] ____sys_sendmsg+0x525/0x7d0 [ 297.523361][T13854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.528831][T13854] __sys_sendmsg+0x2b0/0x3a0 [ 297.533441][T13854] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.538576][T13854] ? vfs_write+0x7c4/0xc90 [ 297.543021][T13854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.549350][T13854] ? do_syscall_64+0x100/0x230 [ 297.554123][T13854] ? do_syscall_64+0xb6/0x230 [ 297.558812][T13854] do_syscall_64+0xf3/0x230 [ 297.563351][T13854] ? clear_bhb_loop+0x35/0x90 [ 297.568145][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.574065][T13854] RIP: 0033:0x7fbc4cb773b9 [ 297.578473][T13854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.598088][T13854] RSP: 002b:00007fbc4d8fd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.606498][T13854] RAX: ffffffffffffffda RBX: 00007fbc4cd05f80 RCX: 00007fbc4cb773b9 [ 297.614546][T13854] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000011 [ 297.622713][T13854] RBP: 00007fbc4d8fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 297.630697][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.638756][T13854] R13: 000000000000000b R14: 00007fbc4cd05f80 R15: 00007ffc74393308 [ 297.646736][T13854] [ 297.824876][T13863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3235'. [ 297.843011][T13872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.324629][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'. [ 298.353351][T13901] FAULT_INJECTION: forcing a failure. [ 298.353351][T13901] name failslab, interval 1, probability 0, space 0, times 0 [ 298.354226][T13906] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3250'. [ 298.384430][T13901] CPU: 0 UID: 0 PID: 13901 Comm: syz.0.3248 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 298.394990][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 298.405071][T13901] Call Trace: [ 298.408369][T13901] [ 298.411495][T13901] dump_stack_lvl+0x241/0x360 [ 298.416645][T13901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.423280][T13901] ? __pfx__printk+0x10/0x10 [ 298.427999][T13901] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 298.433580][T13901] ? __pfx___might_resched+0x10/0x10 [ 298.438904][T13901] should_fail_ex+0x3b0/0x4e0 [ 298.443630][T13901] ? __kernfs_new_node+0xd8/0x870 [ 298.448681][T13901] should_failslab+0xac/0x100 [ 298.453388][T13901] ? __kernfs_new_node+0xd8/0x870 [ 298.458425][T13901] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 298.463813][T13901] __kernfs_new_node+0xd8/0x870 [ 298.468689][T13901] ? up_write+0x1a9/0x590 [ 298.473127][T13901] ? __pfx___kernfs_new_node+0x10/0x10 [ 298.478605][T13901] ? __pfx_up_write+0x10/0x10 [ 298.483307][T13901] kernfs_new_node+0x137/0x240 [ 298.488105][T13901] __kernfs_create_file+0x49/0x2e0 [ 298.493262][T13901] sysfs_add_file_mode_ns+0x24a/0x310 [ 298.498666][T13901] internal_create_group+0x7a7/0x11d0 [ 298.504150][T13901] ? __pfx_internal_create_group+0x10/0x10 [ 298.509987][T13901] sysfs_create_groups+0x56/0x120 [ 298.515030][T13901] device_add_attrs+0xe5/0x600 [ 298.519818][T13901] ? __pfx_device_add_attrs+0x10/0x10 [ 298.525221][T13901] device_add+0x576/0xbf0 [ 298.529571][T13901] ? device_initialize+0x266/0x460 [ 298.534785][T13901] netdev_register_kobject+0x17e/0x320 [ 298.540275][T13901] register_netdevice+0x12c5/0x1b00 [ 298.545521][T13901] ? __pfx_register_netdevice+0x10/0x10 [ 298.551100][T13901] macvlan_common_newlink+0x1189/0x1930 [ 298.556750][T13901] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 298.562640][T13901] ? __pfx_tap_handle_frame+0x10/0x10 [ 298.568021][T13901] ? lockdep_rtnl_is_held+0x26/0x40 [ 298.573250][T13901] ? netdev_rx_handler_register+0x78/0xe0 [ 298.578987][T13901] macvtap_newlink+0x154/0x1d0 [ 298.583777][T13901] ? __pfx_macvtap_newlink+0x10/0x10 [ 298.589091][T13901] rtnl_newlink+0x1591/0x20a0 [ 298.593816][T13901] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.598884][T13901] ? __pfx___mutex_trylock_common+0x10/0x10 [ 298.604809][T13901] ? rcu_is_watching+0x15/0xb0 [ 298.609611][T13901] ? trace_contention_end+0x3c/0x120 [ 298.614929][T13901] ? __mutex_lock+0x2ef/0xd70 [ 298.619643][T13901] ? __pfx_lock_release+0x10/0x10 [ 298.624702][T13901] ? __pfx_rtnl_newlink+0x10/0x10 [ 298.629754][T13901] rtnetlink_rcv_msg+0x73f/0xcf0 [ 298.634713][T13901] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.639855][T13901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.645348][T13901] ? ref_tracker_free+0x643/0x7e0 [ 298.650424][T13901] netlink_rcv_skb+0x1e3/0x430 [ 298.655220][T13901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.660799][T13901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.666151][T13901] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.671384][T13901] netlink_unicast+0x7f0/0x990 [ 298.676184][T13901] ? __pfx_netlink_unicast+0x10/0x10 [ 298.681495][T13901] ? __virt_addr_valid+0x183/0x530 [ 298.686653][T13901] ? __check_object_size+0x49c/0x900 [ 298.691956][T13901] ? bpf_lsm_netlink_send+0x9/0x10 [ 298.697073][T13901] netlink_sendmsg+0x8e4/0xcb0 [ 298.701854][T13901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.707152][T13901] ? __import_iovec+0x536/0x820 [ 298.711997][T13901] ? aa_sock_msg_perm+0x91/0x160 [ 298.716948][T13901] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.722259][T13901] ? security_socket_sendmsg+0x87/0xb0 [ 298.727754][T13901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.733066][T13901] __sock_sendmsg+0x221/0x270 [ 298.737769][T13901] ____sys_sendmsg+0x525/0x7d0 [ 298.742557][T13901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.747881][T13901] __sys_sendmsg+0x2b0/0x3a0 [ 298.752482][T13901] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.757625][T13901] ? vfs_write+0x7c4/0xc90 [ 298.762121][T13901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.768470][T13901] ? do_syscall_64+0x100/0x230 [ 298.773247][T13901] ? do_syscall_64+0xb6/0x230 [ 298.777962][T13901] do_syscall_64+0xf3/0x230 [ 298.782497][T13901] ? clear_bhb_loop+0x35/0x90 [ 298.787219][T13901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.793147][T13901] RIP: 0033:0x7f1c07d773b9 [ 298.797583][T13901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.817205][T13901] RSP: 002b:00007f1c08a9b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.825628][T13901] RAX: ffffffffffffffda RBX: 00007f1c07f05f80 RCX: 00007f1c07d773b9 [ 298.833623][T13901] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000011 [ 298.841621][T13901] RBP: 00007f1c08a9b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.849618][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.857613][T13901] R13: 000000000000000b R14: 00007f1c07f05f80 R15: 00007fff43fcaa88 [ 298.865628][T13901] [ 299.222874][T13931] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3258'. [ 299.434083][T13946] netlink: 'syz.4.3264': attribute type 2 has an invalid length. [ 299.463042][T13946] netlink: 'syz.4.3264': attribute type 8 has an invalid length. [ 299.492055][T13946] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 299.517294][T13946] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3264'. [ 299.552125][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3266'. [ 299.576916][T13946] veth0_to_bridge: mtu less than device minimum [ 299.992557][T13976] batman_adv: batadv0: Adding interface: wlan1 [ 300.027455][T13976] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.089898][T13976] batman_adv: batadv0: Interface activated: wlan1 [ 300.123767][T13976] batman_adv: batadv0: Interface deactivated: wlan1 [ 300.196352][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'. [ 300.236659][T13983] batman_adv: batadv0: Removing interface: wlan1 [ 300.318192][ T4621] block nbd39: Receive control failed (result -107) [ 300.343062][T13982] nbd39: detected capacity change from 0 to 256 [ 300.520929][T13991] batadv0: entered promiscuous mode [ 300.529576][T13991] batadv_slave_0: entered promiscuous mode [ 300.538964][T13991] batadv_slave_0: left promiscuous mode [ 300.553224][T13991] batadv0: left promiscuous mode [ 300.684897][ T4621] block nbd40: Receive control failed (result -107) [ 300.713013][T13996] nbd40: detected capacity change from 0 to 256 [ 301.164324][T14036] __nla_validate_parse: 3 callbacks suppressed [ 301.164344][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'. [ 301.181112][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3287'. [ 301.265200][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3286'. [ 301.275958][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 301.334943][ T4621] block nbd41: Receive control failed (result -107) [ 301.374735][T14036] nbd41: detected capacity change from 0 to 256 [ 301.403269][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 301.522976][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'. [ 301.585603][ T4621] block nbd42: Receive control failed (result -107) [ 301.653651][T14050] nbd42: detected capacity change from 0 to 256 [ 301.778315][T14064] netlink: 'syz.2.3296': attribute type 1 has an invalid length. [ 301.841617][T14064] bond1: entered promiscuous mode [ 301.887023][T14064] lo: entered promiscuous mode [ 301.899846][T14064] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 301.940518][T14064] bond1: (slave lo): making interface the new active one [ 301.969275][T14064] bond1: (slave lo): Enslaving as an active interface with an up link [ 301.980424][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'. [ 301.997423][T14071] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3298'. [ 302.020843][T14077] netlink: 'syz.4.3299': attribute type 4 has an invalid length. [ 302.128671][T14073] netlink: 'syz.4.3299': attribute type 4 has an invalid length. [ 302.184871][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'. [ 302.196904][T14084] tipc: Cannot configure node identity twice [ 302.253308][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'. [ 302.466733][ T4621] block nbd43: Receive control failed (result -107) [ 302.506735][T14090] nbd43: detected capacity change from 0 to 256 [ 302.596327][T14096] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 302.676906][T14096] bond2: entered promiscuous mode [ 302.682415][T14096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.749999][T14120] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 302.811864][T14120] bond3: entered promiscuous mode [ 303.024691][T14120] lo: entered promiscuous mode [ 303.036922][T14120] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.096949][T14120] bond3: (slave lo): making interface the new active one [ 303.121473][T14120] bond3: (slave lo): Enslaving as an active interface with an up link [ 303.157896][T14132] netlink: 'syz.2.3315': attribute type 4 has an invalid length. [ 303.684693][T14150] tipc: Cannot configure node identity twice [ 304.282924][ T4621] block nbd44: Receive control failed (result -107) [ 304.364532][T14170] nbd44: detected capacity change from 0 to 256 [ 304.497805][T14201] tipc: Cannot configure node identity twice [ 305.780936][T14266] netlink: 'syz.0.3349': attribute type 1 has an invalid length. [ 305.820021][T14266] bond1: entered promiscuous mode [ 305.934688][T14266] lo: entered promiscuous mode [ 305.953925][T14266] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 305.980557][T14266] bond1: (slave lo): making interface the new active one [ 305.999764][T14266] bond1: (slave lo): Enslaving as an active interface with an up link [ 306.186274][T14288] __nla_validate_parse: 12 callbacks suppressed [ 306.186294][T14288] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3357'. [ 306.443107][T14307] pim6reg1: entered promiscuous mode [ 306.448592][T14307] pim6reg1: entered allmulticast mode [ 306.565546][T14300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.797837][T14317] nbd: socks must be embedded in a SOCK_ITEM attr [ 306.917826][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3369'. [ 306.997847][T14335] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3371'. [ 307.009280][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.083551][T14336] can: request_module (can-proto-0) failed. [ 307.272328][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.386749][T14360] netlink: 'syz.2.3378': attribute type 1 has an invalid length. [ 307.444368][T14360] bond3: entered promiscuous mode [ 307.465813][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.495473][T14360] bond1: (slave lo): Releasing active interface [ 307.516197][T14360] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 307.529325][T14360] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.548754][T14360] bond3: (slave lo): making interface the new active one [ 307.557019][T14360] bond3: (slave lo): Enslaving as an active interface with an up link [ 307.580827][T14368] tap0: tun_chr_ioctl cmd 1074025681 [ 307.628029][T14370] netlink: 'syz.2.3382': attribute type 3 has an invalid length. [ 307.635953][T14370] netlink: 'syz.2.3382': attribute type 7 has an invalid length. [ 307.644805][T14370] netlink: 187184 bytes leftover after parsing attributes in process `syz.2.3382'. [ 307.762256][T14374] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3383'. [ 307.857862][T14378] veth0_vlan: entered allmulticast mode [ 307.915936][T14380] SET target dimension over the limit! [ 308.087331][T14391] tunl0: entered promiscuous mode [ 308.119911][T14391] netlink: 'syz.2.3390': attribute type 4 has an invalid length. [ 308.153782][T14391] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3390'. [ 308.197886][T14393] veth0_vlan: left promiscuous mode [ 308.233753][T14393] veth0_vlan: entered promiscuous mode [ 308.353347][T14404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3393'. [ 308.487977][T14414] can: request_module (can-proto-0) failed. [ 308.568841][T14429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3396'. [ 308.665146][T14433] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 308.712613][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'. [ 308.726628][T14435] tipc: Cannot configure node identity twice [ 308.793391][T14429] lo: entered promiscuous mode [ 308.971100][T14453] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3405'. [ 309.196316][T14464] netlink: 'syz.0.3409': attribute type 25 has an invalid length. [ 309.218630][T14464] netlink: 'syz.0.3409': attribute type 7 has an invalid length. [ 309.347358][T14474] tipc: Cannot configure node identity twice [ 310.101060][ C1] eth0: bad gso: type: 1, size: 1408 [ 310.114922][ C1] eth0: bad gso: type: 1, size: 1408 [ 310.237072][T14519] ip6t_srh: unknown srh invflags A757 [ 310.667890][T14545] tipc: Can't bind to reserved service type 0 [ 310.848996][T14559] netlink: 'syz.2.3438': attribute type 4 has an invalid length. [ 311.232394][T14584] netlink: 'syz.0.3445': attribute type 3 has an invalid length. [ 311.283804][T14584] netlink: 'syz.0.3445': attribute type 1 has an invalid length. [ 311.302142][T14584] __nla_validate_parse: 7 callbacks suppressed [ 311.302161][T14584] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3445'. [ 311.458387][T14597] netlink: 'syz.2.3448': attribute type 27 has an invalid length. [ 311.522398][T14597] tunl0: left promiscuous mode [ 311.852768][T14597] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.205142][T14597] bridge_slave_1: left promiscuous mode [ 312.409635][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.438752][T14597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.741185][T14597] macsec0: left promiscuous mode [ 312.759873][T14597] macsec0: left allmulticast mode [ 312.773912][T14597] geneve0: left promiscuous mode [ 312.793157][T14597] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.809350][T14597] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.828589][T14597] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.841358][T14597] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.934821][T14597] team0: left allmulticast mode [ 312.939725][T14597] team_slave_0: left allmulticast mode [ 312.951548][T14597] team_slave_1: left allmulticast mode [ 312.963061][T14597] team0: left promiscuous mode [ 312.967929][T14597] team_slave_0: left promiscuous mode [ 312.973726][T14597] team_slave_1: left promiscuous mode [ 312.979541][T14597] macvtap1: left promiscuous mode [ 312.984875][T14597] macvtap1: left allmulticast mode [ 312.999852][T14597] dummy0: left allmulticast mode [ 313.007221][T14597] macvtap3: left promiscuous mode [ 313.012373][T14597] macvtap3: left allmulticast mode [ 313.027044][T14597] batadv0: left allmulticast mode [ 313.035077][T14597] macvtap4: left promiscuous mode [ 313.040347][T14597] macvtap4: left allmulticast mode [ 313.060359][T14597] bond1: left promiscuous mode [ 313.067368][T14597] bond2: left promiscuous mode [ 313.075122][T14597] bond3: left promiscuous mode [ 313.083709][T14597] lo: left promiscuous mode [ 313.100629][T14608] geneve2: entered promiscuous mode [ 313.126439][T14608] geneve2: entered allmulticast mode [ 313.478078][T14647] netlink: 'syz.4.3460': attribute type 4 has an invalid length. [ 313.928341][T14669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3469'. [ 314.011814][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3472'. [ 314.353848][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'. [ 314.458552][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3481'. [ 314.500885][ T4621] Bluetooth: hci2: link tx timeout [ 314.506947][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.521252][ T4621] Bluetooth: hci2: link tx timeout [ 314.526874][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.534979][ T4621] Bluetooth: hci2: link tx timeout [ 314.541035][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.551179][ T4621] Bluetooth: hci2: link tx timeout [ 314.556601][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.570938][ T4621] Bluetooth: hci2: link tx timeout [ 314.576640][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.584410][ T4621] Bluetooth: hci2: link tx timeout [ 314.589596][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.622903][ T4621] Bluetooth: hci2: link tx timeout [ 314.629450][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.642771][ T4621] Bluetooth: hci2: link tx timeout [ 314.647930][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.658347][ T4621] Bluetooth: hci2: link tx timeout [ 314.663605][ T4621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.766297][T14716] netlink: 'syz.0.3487': attribute type 3 has an invalid length. [ 314.834850][T14726] netlink: 'syz.4.3485': attribute type 12 has an invalid length. [ 315.287609][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 315.521433][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3501'. [ 315.531210][T14767] netlink: 'syz.1.3501': attribute type 18 has an invalid length. [ 315.548228][T14767] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.557429][T14767] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.566667][T14767] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.575472][T14767] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.586150][T14767] vxlan0: entered promiscuous mode [ 315.664079][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 315.713834][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 315.764716][ T4621] block nbd45: Receive control failed (result -107) [ 315.813074][T14771] nbd45: detected capacity change from 0 to 256 [ 315.873037][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3505'. [ 315.975596][ T4621] block nbd46: Receive control failed (result -107) [ 315.993066][T14773] nbd46: detected capacity change from 0 to 256 [ 316.184613][T14790] atomic_op ffff88802d4a5998 conn xmit_atomic 0000000000000000 [ 316.276237][T14785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.355910][T14800] __nla_validate_parse: 5 callbacks suppressed [ 316.355931][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 316.465370][T14802] pim6reg1: entered allmulticast mode [ 316.563258][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 316.611648][T14810] bond_slave_0: entered promiscuous mode [ 316.617715][T14810] bond_slave_1: entered promiscuous mode [ 316.626473][T14810] vlan2: entered promiscuous mode [ 316.631613][T14810] bond0: entered promiscuous mode [ 316.638539][T14810] macvlan0: entered promiscuous mode [ 316.648551][T14810] bond0: left promiscuous mode [ 316.653857][T14810] macvlan0: left promiscuous mode [ 316.659581][T14810] bond_slave_0: left promiscuous mode [ 316.665063][T14810] bond_slave_1: left promiscuous mode [ 317.363442][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.693311][T14849] nft_compat: unsupported protocol 1 [ 317.837256][T14854] atomic_op ffff88805daad198 conn xmit_atomic 0000000000000000 [ 317.875612][T14857] sit0: entered promiscuous mode [ 317.882858][T14857] sit0: entered allmulticast mode [ 317.942425][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 318.125830][T14869] FAULT_INJECTION: forcing a failure. [ 318.125830][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 318.185204][T14869] CPU: 1 UID: 0 PID: 14869 Comm: syz.1.3537 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 318.195684][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 318.205782][T14869] Call Trace: [ 318.209083][T14869] [ 318.212038][T14869] dump_stack_lvl+0x241/0x360 [ 318.216746][T14869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.221975][T14869] ? __pfx__printk+0x10/0x10 [ 318.226596][T14869] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 318.232170][T14869] ? __pfx___might_resched+0x10/0x10 [ 318.237490][T14869] should_fail_ex+0x3b0/0x4e0 [ 318.242198][T14869] ? sk_prot_alloc+0x58/0x210 [ 318.246899][T14869] should_failslab+0xac/0x100 [ 318.251583][T14869] ? sk_prot_alloc+0x58/0x210 [ 318.256266][T14869] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 318.261636][T14869] ? __pfx_lock_release+0x10/0x10 [ 318.266662][T14869] sk_prot_alloc+0x58/0x210 [ 318.271164][T14869] ? sk_alloc+0x26/0x370 [ 318.275405][T14869] sk_alloc+0x38/0x370 [ 318.279475][T14869] inet_create+0x652/0xe70 [ 318.283884][T14869] ? inet_create+0x9c/0xe70 [ 318.288380][T14869] ? __sock_create+0x337/0x920 [ 318.293139][T14869] __sock_create+0x490/0x920 [ 318.297733][T14869] udp_sock_create4+0xda/0x670 [ 318.302493][T14869] ? wg_socket_init+0x292/0xea0 [ 318.307338][T14869] ? __pfx_lock_release+0x10/0x10 [ 318.312357][T14869] ? __pfx_udp_sock_create4+0x10/0x10 [ 318.317737][T14869] wg_socket_init+0x6c0/0xea0 [ 318.322414][T14869] ? __pfx_wg_socket_init+0x10/0x10 [ 318.327727][T14869] ? __pfx_wg_receive+0x10/0x10 [ 318.332619][T14869] ? __local_bh_enable_ip+0x168/0x200 [ 318.338007][T14869] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.343733][T14869] ? dst_cache_reset_now+0x1f0/0x220 [ 318.349022][T14869] wg_set_device+0x733/0x2160 [ 318.353721][T14869] ? __pfx_wg_set_device+0x10/0x10 [ 318.358846][T14869] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 318.365088][T14869] ? __nla_parse+0x40/0x60 [ 318.369504][T14869] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 318.375835][T14869] genl_rcv_msg+0xb14/0xec0 [ 318.380332][T14869] ? mark_lock+0x9a/0x350 [ 318.384665][T14869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.389708][T14869] ? __pfx_lock_acquire+0x10/0x10 [ 318.394731][T14869] ? __pfx_wg_set_device+0x10/0x10 [ 318.399839][T14869] ? __pfx___might_resched+0x10/0x10 [ 318.405128][T14869] netlink_rcv_skb+0x1e3/0x430 [ 318.409893][T14869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.414916][T14869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.420242][T14869] ? __netlink_deliver_tap+0x77e/0x7c0 [ 318.425707][T14869] genl_rcv+0x28/0x40 [ 318.429684][T14869] netlink_unicast+0x7f0/0x990 [ 318.434452][T14869] ? __pfx_netlink_unicast+0x10/0x10 [ 318.439726][T14869] ? __virt_addr_valid+0x183/0x530 [ 318.444835][T14869] ? __check_object_size+0x49c/0x900 [ 318.450115][T14869] ? bpf_lsm_netlink_send+0x9/0x10 [ 318.455226][T14869] netlink_sendmsg+0x8e4/0xcb0 [ 318.460000][T14869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.465282][T14869] ? __import_iovec+0x536/0x820 [ 318.470128][T14869] ? aa_sock_msg_perm+0x91/0x160 [ 318.475147][T14869] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.480426][T14869] ? security_socket_sendmsg+0x87/0xb0 [ 318.485881][T14869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.491157][T14869] __sock_sendmsg+0x221/0x270 [ 318.495834][T14869] ____sys_sendmsg+0x525/0x7d0 [ 318.500614][T14869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.505911][T14869] __sys_sendmsg+0x2b0/0x3a0 [ 318.510502][T14869] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.515612][T14869] ? vfs_write+0x7c4/0xc90 [ 318.520067][T14869] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.526393][T14869] ? do_syscall_64+0x100/0x230 [ 318.531154][T14869] ? do_syscall_64+0xb6/0x230 [ 318.535826][T14869] do_syscall_64+0xf3/0x230 [ 318.540325][T14869] ? clear_bhb_loop+0x35/0x90 [ 318.545001][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.550889][T14869] RIP: 0033:0x7f6ff23773b9 [ 318.555300][T14869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.574899][T14869] RSP: 002b:00007f6ff3078048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.583311][T14869] RAX: ffffffffffffffda RBX: 00007f6ff2505f80 RCX: 00007f6ff23773b9 [ 318.591276][T14869] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000007 [ 318.599240][T14869] RBP: 00007f6ff30780a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.607211][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.615175][T14869] R13: 000000000000000b R14: 00007f6ff2505f80 R15: 00007ffd97f11658 [ 318.623153][T14869] [ 318.633693][ C1] eth0: bad gso: type: 1, size: 1408 [ 318.693114][T14869] wireguard: wg1: Could not create IPv4 socket [ 318.911111][T14886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.970516][T14891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3544'. [ 319.080444][T14891] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 319.457375][T14922] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 319.468794][T14922] netlink: 4076 bytes leftover after parsing attributes in process `syz.0.3552'. [ 319.478117][T14922] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3552'. [ 319.500747][T14919] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 320.073140][T14951] netlink: 'syz.1.3561': attribute type 11 has an invalid length. [ 320.089414][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3561'. [ 320.283454][T14961] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 320.319991][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'. [ 320.350873][T14966] vlan2: entered promiscuous mode [ 320.361935][T14966] bond0: entered promiscuous mode [ 320.377390][T14966] bond_slave_0: entered promiscuous mode [ 320.392073][T14966] bond_slave_1: entered promiscuous mode [ 320.406856][T14966] macvlan0: entered promiscuous mode [ 320.425364][T14966] bond0: left promiscuous mode [ 320.435815][T14966] bond_slave_0: left promiscuous mode [ 320.449450][T14966] bond_slave_1: left promiscuous mode [ 320.458420][T14966] macvlan0: left promiscuous mode [ 320.540939][T14976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3570'. [ 320.995818][T14992] ip6t_REJECT: ECHOREPLY is not supported [ 321.014860][T14992] netlink: 'syz.4.3575': attribute type 1 has an invalid length. [ 321.042973][T14992] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3575'. [ 321.052319][T14992] netlink: 'syz.4.3575': attribute type 1 has an invalid length. [ 321.105775][T14992] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 321.115738][T14992] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 321.315053][T15008] netlink: 'syz.3.3581': attribute type 7 has an invalid length. [ 321.553090][T15019] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3586'. [ 321.972558][ C1] eth0: bad gso: type: 1, size: 1408 [ 321.994700][ C1] eth0: bad gso: type: 1, size: 1408 [ 322.153313][T15040] netlink: 'syz.2.3595': attribute type 39 has an invalid length. [ 322.192584][T15038] SET target dimension over the limit! [ 322.209830][ C1] eth0: bad gso: type: 1, size: 1408 [ 322.863220][T15077] batman_adv: batadv0: Adding interface: ipvlan2 [ 322.879721][T15077] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.912653][T15077] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 322.985468][T15083] SET target dimension over the limit! [ 323.035230][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.041041][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.072503][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3610'. [ 323.641111][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.739260][ C1] eth0: bad gso: type: 1, size: 1408 [ 323.795844][T15128] SET target dimension over the limit! [ 323.844159][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 323.933098][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3623'. [ 323.975326][ T53] block nbd47: Receive control failed (result -107) [ 324.023540][T15131] nbd47: detected capacity change from 0 to 256 [ 324.652141][ C1] eth0: bad gso: type: 1, size: 1408 [ 324.800439][T15174] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3638'. [ 324.941618][T15180] bond_slave_0: entered promiscuous mode [ 324.947398][T15180] bond_slave_1: entered promiscuous mode [ 324.962844][T15180] vlan3: entered promiscuous mode [ 324.968094][T15180] bond0: entered promiscuous mode [ 324.978864][T15180] bond0: left promiscuous mode [ 324.985422][T15180] bond_slave_0: left promiscuous mode [ 324.990935][T15180] bond_slave_1: left promiscuous mode [ 325.216609][T15202] netlink: 'syz.0.3646': attribute type 29 has an invalid length. [ 325.239037][T15199] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3644'. [ 325.241489][T15202] netlink: 'syz.0.3646': attribute type 29 has an invalid length. [ 325.257466][T15199] block nbd0: NBD_DISCONNECT [ 325.264792][T15202] netlink: 'syz.0.3646': attribute type 29 has an invalid length. [ 325.276212][T15199] block nbd0: Send disconnect failed -32 [ 325.499437][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3650'. [ 325.523559][T15221] tipc: Cannot configure node identity twice [ 325.547563][T15219] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 325.573454][ C1] eth0: bad gso: type: 1, size: 1408 [ 325.695652][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 325.713981][T15233] netlink: 'syz.0.3655': attribute type 3 has an invalid length. [ 325.725467][T15227] SET target dimension over the limit! [ 325.730685][T15233] netlink: 'syz.0.3655': attribute type 3 has an invalid length. [ 325.863875][T15241] bond_slave_0: entered promiscuous mode [ 325.869648][T15241] bond_slave_1: entered promiscuous mode [ 325.878944][T15241] vlan2: entered promiscuous mode [ 325.897554][T15241] bond0: entered promiscuous mode [ 325.903352][T15241] macvlan0: entered promiscuous mode [ 325.912009][T15241] bond0: left promiscuous mode [ 325.921294][T15241] macvlan0: left promiscuous mode [ 325.929674][T15241] bond_slave_0: left promiscuous mode [ 325.935198][T15241] bond_slave_1: left promiscuous mode [ 326.018273][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3659'. [ 326.038221][T15252] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3659'. [ 326.066254][T15255] netlink: 'syz.3.3661': attribute type 39 has an invalid length. [ 326.307720][ C1] eth0: bad gso: type: 1, size: 1408 [ 326.393180][T15269] SET target dimension over the limit! [ 326.673822][T15288] bond_slave_0: entered promiscuous mode [ 326.679612][T15288] bond_slave_1: entered promiscuous mode [ 326.685761][T15288] vlan2: entered promiscuous mode [ 326.690931][T15288] bond0: entered promiscuous mode [ 326.699158][T15288] macvlan0: entered promiscuous mode [ 326.709841][T15288] bond0: left promiscuous mode [ 326.715373][T15288] macvlan0: left promiscuous mode [ 326.723383][T15288] bond_slave_0: left promiscuous mode [ 326.728872][T15288] bond_slave_1: left promiscuous mode [ 326.991234][T15305] SET target dimension over the limit! [ 327.185474][T15314] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 327.197276][T15314] batman_adv: batadv0: Adding interface: team0 [ 327.219544][T15314] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.245213][T15314] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 327.256899][T15315] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 327.264877][T15315] __nla_validate_parse: 5 callbacks suppressed [ 327.264887][T15315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3683'. [ 327.280491][T15315] team0: entered promiscuous mode [ 327.285749][T15315] team_slave_0: entered promiscuous mode [ 327.291733][T15315] team_slave_1: entered promiscuous mode [ 327.307077][T15315] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 327.324593][T15315] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.331507][T15315] batman_adv: batadv0: Interface activated: team0 [ 327.341479][T15315] batman_adv: batadv0: Interface deactivated: team0 [ 327.355298][T15315] batman_adv: batadv0: Removing interface: team0 [ 327.375195][T15315] bridge0: port 3(team0) entered blocking state [ 327.392205][T15315] bridge0: port 3(team0) entered disabled state [ 327.421717][T15315] team0: entered allmulticast mode [ 327.442850][T15315] team_slave_0: entered allmulticast mode [ 327.448865][T15315] team_slave_1: entered allmulticast mode [ 327.455338][T15315] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 327.470225][T15315] bridge0: port 3(team0) entered blocking state [ 327.477839][T15315] bridge0: port 3(team0) entered forwarding state [ 327.748320][T15333] bond_slave_0: entered promiscuous mode [ 327.754132][T15333] bond_slave_1: entered promiscuous mode [ 327.776631][T15333] vlan2: entered promiscuous mode [ 327.787736][T15333] bond0: entered promiscuous mode [ 327.800128][T15333] bond0: left promiscuous mode [ 327.806040][T15333] bond_slave_0: left promiscuous mode [ 327.811620][T15333] bond_slave_1: left promiscuous mode [ 327.852209][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3691'. [ 327.948081][T15340] xt_bpf: check failed: parse error [ 328.015856][T15314] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 328.169929][T15359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3696'. [ 328.310277][ C1] eth0: bad gso: type: 1, size: 1408 [ 328.360799][T15368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3701'. [ 328.368014][T15367] netlink: 'syz.0.3700': attribute type 10 has an invalid length. [ 328.382507][T15368] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 328.405261][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 328.432209][T15367] team0: Failed to send options change via netlink (err -105) [ 328.449826][T15367] team0: Port device ÿÿÿÿ added [ 328.494074][T15374] bond3: (slave lo): Releasing active interface [ 328.506035][T15374] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 328.521694][T15374] bridge_slave_0: left allmulticast mode [ 328.536244][T15374] bridge_slave_0: left promiscuous mode [ 328.548968][T15374] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.561970][T15374] bond0: (slave bond_slave_0): Releasing backup interface [ 328.571226][T15374] bond0: (slave bond_slave_1): Releasing backup interface [ 328.588892][T15374] team0: Port device team_slave_0 removed [ 328.599582][T15374] team0: Port device team_slave_1 removed [ 328.607787][T15374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.616966][T15374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.627185][T15374] bond0: (slave geneve0): Releasing backup interface [ 328.640885][T15375] team0: Failed to send port change of device ÿÿÿÿ via netlink (err -105) [ 328.660829][T15375] team0: Failed to send options change via netlink (err -105) [ 328.670341][T15375] team0: Failed to send port change of device ÿÿÿÿ via netlink (err -105) [ 328.679850][T15375] team0: Port device ÿÿÿÿ removed [ 328.691277][T15375] bond0: (slave ÿÿÿÿ): Enslaving as an active interface with an up link [ 328.700237][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3703'. [ 328.715414][T15378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.735468][T15378] team0: Device bond0 failed to register rx_handler [ 329.133542][T15405] bond3: (slave lo): Releasing active interface [ 329.151217][T15405] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 329.189488][T15405] tipc: Resetting bearer [ 329.269212][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 329.355482][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.365343][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 329.401069][T15409] bond0: entered promiscuous mode [ 329.413683][T15409] bond0: entered allmulticast mode [ 329.420653][ T53] block nbd0: Receive control failed (result -107) [ 329.435801][T15409] team0: Port device bond0 added [ 329.443107][T15416] nbd0: detected capacity change from 0 to 256 [ 329.453958][T15410] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3714'. [ 329.518978][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3717'. [ 329.586640][ C1] eth0: bad gso: type: 1, size: 1408 [ 329.733916][T15431] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 329.784628][T15431] bond3: (slave gre1): Error -95 calling set_mac_address [ 329.847928][T15443] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 329.866711][T15443] bond3: (slave gre1): Error -95 calling set_mac_address [ 329.943494][T15447] SET target dimension over the limit! [ 330.091687][T15457] team0: left allmulticast mode [ 330.096984][T15457] team_slave_0: left allmulticast mode [ 330.102573][T15457] team_slave_1: left allmulticast mode [ 330.110346][T15457] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 330.119614][T15457] bridge0: port 3(team0) entered disabled state [ 330.130659][T15457] bridge_slave_0: left allmulticast mode [ 330.138163][T15457] bridge_slave_0: left promiscuous mode [ 330.146155][T15457] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.162605][T15457] bridge_slave_1: left allmulticast mode [ 330.169679][T15457] bridge_slave_1: left promiscuous mode [ 330.175685][T15457] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.189139][T15457] bond0: (slave bond_slave_0): Releasing backup interface [ 330.209110][T15457] bond0: (slave bond_slave_1): Releasing backup interface [ 330.230718][T15457] team_slave_0: left promiscuous mode [ 330.280487][T15457] team0: Port device team_slave_0 removed [ 330.289043][T15457] team_slave_1: left promiscuous mode [ 330.301650][T15457] team0: Port device team_slave_1 removed [ 330.318022][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.326527][T15457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.341841][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.359406][T15457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.374388][T15457] bond0: (slave macvlan0): Releasing backup interface [ 330.393520][T15457] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 330.404114][T15457] team0: Port device netdevsim0 removed [ 330.487514][T15465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.514270][T15465] bond0: entered promiscuous mode [ 330.527534][T15465] team0: Port device bond0 added [ 330.541980][T15473] tap0: tun_chr_ioctl cmd 2147767521 [ 330.813630][ C1] eth0: bad gso: type: 1, size: 1408 [ 331.568846][T15535] SET target dimension over the limit! [ 331.741091][T15546] tipc: Cannot configure node identity twice [ 332.299295][T15577] __nla_validate_parse: 15 callbacks suppressed [ 332.299319][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3770'. [ 332.327727][T15577] tipc: Cannot configure node identity twice [ 332.350898][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'. [ 332.492147][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3769'. [ 332.536824][ T53] block nbd48: Receive control failed (result -107) [ 332.575286][T15575] nbd48: detected capacity change from 0 to 256 [ 332.648104][T15593] FAULT_INJECTION: forcing a failure. [ 332.648104][T15593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.662221][T15593] CPU: 0 UID: 0 PID: 15593 Comm: syz.3.3776 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 332.672672][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 332.682742][T15593] Call Trace: [ 332.686039][T15593] [ 332.688994][T15593] dump_stack_lvl+0x241/0x360 [ 332.693701][T15593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.698925][T15593] ? __pfx__printk+0x10/0x10 [ 332.703535][T15593] ? __pfx_lock_release+0x10/0x10 [ 332.708588][T15593] should_fail_ex+0x3b0/0x4e0 [ 332.713296][T15593] _copy_from_iter+0x1f6/0x1960 [ 332.718171][T15593] ? __virt_addr_valid+0x183/0x530 [ 332.723304][T15593] ? __pfx_lock_release+0x10/0x10 [ 332.728355][T15593] ? __alloc_skb+0x28f/0x440 [ 332.732973][T15593] ? __pfx__copy_from_iter+0x10/0x10 [ 332.738285][T15593] ? __virt_addr_valid+0x183/0x530 [ 332.743413][T15593] ? __virt_addr_valid+0x183/0x530 [ 332.748540][T15593] ? __virt_addr_valid+0x45f/0x530 [ 332.753672][T15593] ? __check_object_size+0x49c/0x900 [ 332.758979][T15593] pfkey_sendmsg+0x235/0x1050 [ 332.763673][T15593] ? __pfx___might_resched+0x10/0x10 [ 332.768965][T15593] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 332.774076][T15593] ? aa_sk_perm+0x967/0xab0 [ 332.778583][T15593] ? __pfx_aa_sk_perm+0x10/0x10 [ 332.783432][T15593] ? __might_fault+0xaa/0x120 [ 332.788197][T15593] ? __pfx_lock_release+0x10/0x10 [ 332.793214][T15593] ? __import_iovec+0x536/0x820 [ 332.798062][T15593] ? aa_sock_msg_perm+0x91/0x160 [ 332.803008][T15593] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 332.808303][T15593] ? security_socket_sendmsg+0x87/0xb0 [ 332.813759][T15593] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 332.818869][T15593] __sock_sendmsg+0x221/0x270 [ 332.823543][T15593] ____sys_sendmsg+0x525/0x7d0 [ 332.828316][T15593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.833606][T15593] __sys_sendmsg+0x2b0/0x3a0 [ 332.838195][T15593] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.843302][T15593] ? vfs_write+0x7c4/0xc90 [ 332.847742][T15593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.854064][T15593] ? do_syscall_64+0x100/0x230 [ 332.858823][T15593] ? do_syscall_64+0xb6/0x230 [ 332.863501][T15593] do_syscall_64+0xf3/0x230 [ 332.867999][T15593] ? clear_bhb_loop+0x35/0x90 [ 332.872678][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.878577][T15593] RIP: 0033:0x7f92df9773b9 [ 332.882990][T15593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.902590][T15593] RSP: 002b:00007f92e0696048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.911003][T15593] RAX: ffffffffffffffda RBX: 00007f92dfb05f80 RCX: 00007f92df9773b9 [ 332.918971][T15593] RDX: 0000000000000000 RSI: 00000000205f5000 RDI: 0000000000000003 [ 332.927022][T15593] RBP: 00007f92e06960a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.934991][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.942953][T15593] R13: 000000000000000b R14: 00007f92dfb05f80 R15: 00007ffd16438858 [ 332.950928][T15593] [ 333.329709][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'. [ 333.339202][T15609] tipc: Cannot configure node identity twice [ 333.397631][T15614] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 333.417754][T15614] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 333.616775][T15624] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3788'. [ 333.675200][T15626] FAULT_INJECTION: forcing a failure. [ 333.675200][T15626] name failslab, interval 1, probability 0, space 0, times 0 [ 333.722030][T15626] CPU: 0 UID: 0 PID: 15626 Comm: syz.1.3790 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 333.732493][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 333.742572][T15626] Call Trace: [ 333.745872][T15626] [ 333.748819][T15626] dump_stack_lvl+0x241/0x360 [ 333.753524][T15626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.758747][T15626] ? __pfx__printk+0x10/0x10 [ 333.763365][T15626] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 333.768930][T15626] ? __pfx___might_resched+0x10/0x10 [ 333.774246][T15626] should_fail_ex+0x3b0/0x4e0 [ 333.778953][T15626] ? skb_clone+0x20c/0x390 [ 333.783389][T15626] should_failslab+0xac/0x100 [ 333.788092][T15626] ? skb_clone+0x20c/0x390 [ 333.792531][T15626] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 333.797930][T15626] ? __virt_addr_valid+0x183/0x530 [ 333.803064][T15626] skb_clone+0x20c/0x390 [ 333.807329][T15626] pfkey_sendmsg+0x43d/0x1050 [ 333.812028][T15626] ? __pfx___might_resched+0x10/0x10 [ 333.817346][T15626] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 333.822486][T15626] ? aa_sk_perm+0x967/0xab0 [ 333.827021][T15626] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.831897][T15626] ? __might_fault+0xaa/0x120 [ 333.836594][T15626] ? __pfx_lock_release+0x10/0x10 [ 333.841634][T15626] ? __import_iovec+0x536/0x820 [ 333.846501][T15626] ? aa_sock_msg_perm+0x91/0x160 [ 333.851460][T15626] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 333.856768][T15626] ? security_socket_sendmsg+0x87/0xb0 [ 333.862247][T15626] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 333.867376][T15626] __sock_sendmsg+0x221/0x270 [ 333.872077][T15626] ____sys_sendmsg+0x525/0x7d0 [ 333.876875][T15626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.882191][T15626] __sys_sendmsg+0x2b0/0x3a0 [ 333.886789][T15626] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.891895][T15626] ? vfs_write+0x7c4/0xc90 [ 333.896340][T15626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.902668][T15626] ? do_syscall_64+0x100/0x230 [ 333.907429][T15626] ? do_syscall_64+0xb6/0x230 [ 333.912108][T15626] do_syscall_64+0xf3/0x230 [ 333.916604][T15626] ? clear_bhb_loop+0x35/0x90 [ 333.921280][T15626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.927171][T15626] RIP: 0033:0x7f6ff23773b9 [ 333.931576][T15626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.951176][T15626] RSP: 002b:00007f6ff3078048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.959587][T15626] RAX: ffffffffffffffda RBX: 00007f6ff2505f80 RCX: 00007f6ff23773b9 [ 333.967550][T15626] RDX: 0000000000000000 RSI: 00000000205f5000 RDI: 0000000000000003 [ 333.975511][T15626] RBP: 00007f6ff30780a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.983476][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.991435][T15626] R13: 000000000000000b R14: 00007f6ff2505f80 R15: 00007ffd97f11658 [ 333.999413][T15626] [ 334.166864][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 334.242861][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 334.284620][ T53] block nbd49: Receive control failed (result -107) [ 334.335416][T15639] nbd49: detected capacity change from 0 to 256 [ 334.471198][T15647] bond0: left promiscuous mode [ 334.516588][T15647] team0: Port device bond0 removed [ 334.580819][T15652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.589487][T15652] bond0: entered promiscuous mode [ 334.597239][T15652] team0: Port device bond0 added [ 334.611772][T15649] SET target dimension over the limit! [ 334.837125][T15665] sit0: Master is either lo or non-ether device [ 334.844207][T15667] FAULT_INJECTION: forcing a failure. [ 334.844207][T15667] name failslab, interval 1, probability 0, space 0, times 0 [ 334.867484][T15667] CPU: 0 UID: 0 PID: 15667 Comm: syz.0.3807 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 334.877939][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 334.888009][T15667] Call Trace: [ 334.891303][T15667] [ 334.894249][T15667] dump_stack_lvl+0x241/0x360 [ 334.898949][T15667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.904169][T15667] ? __pfx__printk+0x10/0x10 [ 334.908776][T15667] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 334.914773][T15667] ? __pfx___might_resched+0x10/0x10 [ 334.920087][T15667] should_fail_ex+0x3b0/0x4e0 [ 334.924795][T15667] should_failslab+0xac/0x100 [ 334.929498][T15667] ? __alloc_skb+0x1c3/0x440 [ 334.934105][T15667] kmem_cache_alloc_node_noprof+0x71/0x320 [ 334.939911][T15667] ? __mutex_unlock_slowpath+0x21d/0x750 [ 334.945542][T15667] __alloc_skb+0x1c3/0x440 [ 334.949954][T15667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.955933][T15667] ? __pfx___alloc_skb+0x10/0x10 [ 334.960867][T15667] ? net_generic+0x200/0x240 [ 334.965450][T15667] ? pfkey_broadcast+0x3e3/0x400 [ 334.970384][T15667] pfkey_sendmsg+0xce4/0x1050 [ 334.975070][T15667] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 334.980188][T15667] ? __might_fault+0xaa/0x120 [ 334.984862][T15667] ? __pfx_lock_release+0x10/0x10 [ 334.990052][T15667] ? __import_iovec+0x536/0x820 [ 334.994894][T15667] ? aa_sock_msg_perm+0x91/0x160 [ 334.999904][T15667] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.005202][T15667] ? security_socket_sendmsg+0x87/0xb0 [ 335.010654][T15667] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 335.015759][T15667] __sock_sendmsg+0x221/0x270 [ 335.020433][T15667] ____sys_sendmsg+0x525/0x7d0 [ 335.025198][T15667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.030489][T15667] __sys_sendmsg+0x2b0/0x3a0 [ 335.035175][T15667] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.040282][T15667] ? vfs_write+0x7c4/0xc90 [ 335.044722][T15667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.051045][T15667] ? do_syscall_64+0x100/0x230 [ 335.055807][T15667] ? do_syscall_64+0xb6/0x230 [ 335.060479][T15667] do_syscall_64+0xf3/0x230 [ 335.064975][T15667] ? clear_bhb_loop+0x35/0x90 [ 335.069651][T15667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.075536][T15667] RIP: 0033:0x7f1c07d773b9 [ 335.079942][T15667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.099554][T15667] RSP: 002b:00007f1c08a9b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.107979][T15667] RAX: ffffffffffffffda RBX: 00007f1c07f05f80 RCX: 00007f1c07d773b9 [ 335.115963][T15667] RDX: 0000000000000000 RSI: 00000000205f5000 RDI: 0000000000000003 [ 335.123934][T15667] RBP: 00007f1c08a9b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.131896][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.139859][T15667] R13: 000000000000000b R14: 00007f1c07f05f80 R15: 00007fff43fcaa88 [ 335.147837][T15667] [ 335.187460][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3808'. [ 335.232244][T15671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.295996][T15678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.328759][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 335.405410][T15683] bond0: left promiscuous mode [ 335.410462][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 335.419861][T15683] bond0: left allmulticast mode [ 335.446684][T15683] team0: Port device bond0 removed [ 335.456557][T15683] tipc: Resetting bearer [ 335.464946][ T53] block nbd50: Receive control failed (result -107) [ 335.508111][T15686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.523933][T15673] nbd50: detected capacity change from 0 to 256 [ 335.560808][T15686] bond0: entered promiscuous mode [ 335.581620][T15686] bond0: entered allmulticast mode [ 335.614296][T15686] team0: Port device bond0 added [ 335.677729][T15698] vlan2: entered promiscuous mode [ 335.841471][T15704] nbd: must specify at least one socket [ 336.465598][T15745] vlan2: entered promiscuous mode [ 336.512368][T15747] bond_slave_0: entered promiscuous mode [ 336.518128][T15747] bond_slave_1: entered promiscuous mode [ 336.524079][T15747] vlan2: entered promiscuous mode [ 336.529124][T15747] bond0: entered promiscuous mode [ 336.537129][T15747] bond0: left promiscuous mode [ 336.543627][T15747] bond_slave_0: left promiscuous mode [ 336.549095][T15747] bond_slave_1: left promiscuous mode [ 336.856539][T15768] validate_nla: 1 callbacks suppressed [ 336.856560][T15768] netlink: 'syz.1.3840': attribute type 3 has an invalid length. [ 337.202655][T15795] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 337.223006][T15791] IPVS: stopping backup sync thread 15795 ... [ 337.545739][T15821] FAULT_INJECTION: forcing a failure. [ 337.545739][T15821] name failslab, interval 1, probability 0, space 0, times 0 [ 337.567994][T15821] CPU: 1 UID: 0 PID: 15821 Comm: syz.4.3857 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 337.578458][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 337.588538][T15821] Call Trace: [ 337.591845][T15821] [ 337.594789][T15821] dump_stack_lvl+0x241/0x360 [ 337.599490][T15821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.604710][T15821] ? __pfx__printk+0x10/0x10 [ 337.609322][T15821] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 337.614891][T15821] ? __pfx___might_resched+0x10/0x10 [ 337.620211][T15821] should_fail_ex+0x3b0/0x4e0 [ 337.624918][T15821] ? skb_clone+0x20c/0x390 [ 337.629358][T15821] should_failslab+0xac/0x100 [ 337.634073][T15821] ? skb_clone+0x20c/0x390 [ 337.638519][T15821] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 337.643907][T15821] ? __pfx_lock_release+0x10/0x10 [ 337.649052][T15821] skb_clone+0x20c/0x390 [ 337.653495][T15821] pfkey_broadcast_one+0x99/0x330 [ 337.658556][T15821] ? pfkey_broadcast+0x45/0x400 [ 337.663428][T15821] pfkey_broadcast+0x3ca/0x400 [ 337.668217][T15821] ? pfkey_broadcast+0x45/0x400 [ 337.673095][T15821] pfkey_sendmsg+0xe10/0x1050 [ 337.677815][T15821] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.683227][T15821] ? __might_fault+0xaa/0x120 [ 337.687935][T15821] ? __pfx_lock_release+0x10/0x10 [ 337.692979][T15821] ? __import_iovec+0x536/0x820 [ 337.697841][T15821] ? aa_sock_msg_perm+0x91/0x160 [ 337.702799][T15821] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 337.708101][T15821] ? security_socket_sendmsg+0x87/0xb0 [ 337.713562][T15821] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.718683][T15821] __sock_sendmsg+0x221/0x270 [ 337.723358][T15821] ____sys_sendmsg+0x525/0x7d0 [ 337.728130][T15821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.733421][T15821] __sys_sendmsg+0x2b0/0x3a0 [ 337.738008][T15821] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.743115][T15821] ? vfs_write+0x7c4/0xc90 [ 337.747555][T15821] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.753876][T15821] ? do_syscall_64+0x100/0x230 [ 337.758634][T15821] ? do_syscall_64+0xb6/0x230 [ 337.763304][T15821] do_syscall_64+0xf3/0x230 [ 337.767802][T15821] ? clear_bhb_loop+0x35/0x90 [ 337.772564][T15821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.778452][T15821] RIP: 0033:0x7fbc4cb773b9 [ 337.782861][T15821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.802457][T15821] RSP: 002b:00007fbc4d8fd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.810864][T15821] RAX: ffffffffffffffda RBX: 00007fbc4cd05f80 RCX: 00007fbc4cb773b9 [ 337.818830][T15821] RDX: 0000000000000000 RSI: 00000000205f5000 RDI: 0000000000000003 [ 337.826793][T15821] RBP: 00007fbc4d8fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 337.834755][T15821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.842719][T15821] R13: 000000000000000b R14: 00007fbc4cd05f80 R15: 00007ffc74393308 [ 337.850693][T15821] [ 337.938340][ C1] eth0: bad gso: type: 1, size: 1408 [ 338.121859][T15847] __nla_validate_parse: 4 callbacks suppressed [ 338.121878][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'. [ 338.171874][T15847] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.306418][T15863] netlink: 'syz.3.3869': attribute type 3 has an invalid length. [ 338.329061][T15864] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3871'. [ 338.356737][T15864] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3871'. [ 338.387194][T15868] FAULT_INJECTION: forcing a failure. [ 338.387194][T15868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.414833][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3869'. [ 338.422646][T15868] CPU: 1 UID: 0 PID: 15868 Comm: syz.1.3873 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 338.434386][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 338.444463][T15868] Call Trace: [ 338.447766][T15868] [ 338.450723][T15868] dump_stack_lvl+0x241/0x360 [ 338.455523][T15868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.460746][T15868] ? __pfx__printk+0x10/0x10 [ 338.465367][T15868] ? snprintf+0xda/0x120 [ 338.469640][T15868] should_fail_ex+0x3b0/0x4e0 [ 338.474345][T15868] _copy_to_user+0x2f/0xb0 [ 338.478784][T15868] simple_read_from_buffer+0xca/0x150 [ 338.484182][T15868] proc_fail_nth_read+0x1e9/0x250 [ 338.489324][T15868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.494901][T15868] ? rw_verify_area+0x520/0x6b0 [ 338.499773][T15868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.505346][T15868] vfs_read+0x204/0xbc0 [ 338.509525][T15868] ? __pfx_lock_release+0x10/0x10 [ 338.514587][T15868] ? __pfx_vfs_read+0x10/0x10 [ 338.519294][T15868] ? __fget_files+0x29/0x470 [ 338.523916][T15868] ? __fget_files+0x3f6/0x470 [ 338.528635][T15868] ksys_read+0x1a0/0x2c0 [ 338.532910][T15868] ? __pfx_ksys_read+0x10/0x10 [ 338.537699][T15868] ? do_syscall_64+0x100/0x230 [ 338.542486][T15868] ? do_syscall_64+0xb6/0x230 [ 338.547186][T15868] do_syscall_64+0xf3/0x230 [ 338.551802][T15868] ? clear_bhb_loop+0x35/0x90 [ 338.556512][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.562436][T15868] RIP: 0033:0x7f6ff2375dfc [ 338.566876][T15868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 338.586508][T15868] RSP: 002b:00007f6ff3078040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.594954][T15868] RAX: ffffffffffffffda RBX: 00007f6ff2505f80 RCX: 00007f6ff2375dfc [ 338.602952][T15868] RDX: 000000000000000f RSI: 00007f6ff30780b0 RDI: 0000000000000004 [ 338.610950][T15868] RBP: 00007f6ff30780a0 R08: 0000000000000000 R09: 0000000000000000 [ 338.618952][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.627036][T15868] R13: 000000000000000b R14: 00007f6ff2505f80 R15: 00007ffd97f11658 [ 338.635068][T15868] [ 338.640628][ C1] eth0: bad gso: type: 1, size: 1408 [ 338.741137][T15888] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3874'. [ 339.033901][T15908] sctp: [Deprecated]: syz.0.3880 (pid 15908) Use of int in maxseg socket option. [ 339.033901][T15908] Use struct sctp_assoc_value instead [ 339.071720][T15910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3883'. [ 339.351073][ C1] eth0: bad gso: type: 1, size: 1408 [ 340.619400][T16009] ebt_among: src integrity fail: 30a [ 340.927888][T16029] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3918'. [ 341.090573][T16037] bridge_slave_0: left allmulticast mode [ 341.097070][T16037] bridge_slave_0: left promiscuous mode [ 341.112324][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.151574][T16037] bond0: (slave bond_slave_0): Releasing backup interface [ 341.180538][T16037] bond0: (slave bond_slave_1): Releasing backup interface [ 341.250935][T16037] team0: Port device team_slave_0 removed [ 341.280270][T16037] team0: Port device team_slave_1 removed [ 341.302304][T16037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.311715][T16037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.321248][T16037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.329308][T16037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.344615][T16037] bond0: (slave geneve0): Releasing backup interface [ 341.554914][T16054] vlan2: entered allmulticast mode [ 341.579346][T16054] bridge_slave_0: entered allmulticast mode [ 341.616118][T16054] bridge_slave_0: left allmulticast mode [ 341.775958][T16070] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3932'. [ 342.022064][ C1] eth0: bad gso: type: 1, size: 1408 [ 342.030107][ C1] eth0: bad gso: type: 1, size: 1408 [ 342.051789][T16091] bond0: left promiscuous mode [ 342.062584][T16091] team0: Port device bond0 removed [ 343.648581][T16157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3958'. [ 343.719947][T16160] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3960'. [ 343.756813][T16157] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3958'. [ 343.879664][ T4621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.891452][ T4621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.903606][ T4621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.912305][ T4621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.928069][ T4621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.935611][ T4621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.304748][T16163] chnl_net:caif_netlink_parms(): no params data found [ 344.591215][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.601180][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.619142][T16163] bridge_slave_0: entered allmulticast mode [ 344.637303][T16163] bridge_slave_0: entered promiscuous mode [ 344.646031][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.655760][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.663123][T16163] bridge_slave_1: entered allmulticast mode [ 344.670648][T16163] bridge_slave_1: entered promiscuous mode [ 344.701526][T16206] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 344.759683][T16163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.786413][T16163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.845269][T16163] team0: Port device team_slave_0 added [ 344.864979][T16163] team0: Port device team_slave_1 added [ 344.932191][T16163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.950121][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.016064][T16163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.045086][T16163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.052072][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.092113][T16163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.190051][T16163] hsr_slave_0: entered promiscuous mode [ 345.197240][T16163] hsr_slave_1: entered promiscuous mode [ 345.208223][T16163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.217171][T16163] Cannot create hsr debugfs directory [ 345.651096][T16240] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3983'. [ 345.694299][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 345.994385][ T4621] Bluetooth: hci5: command tx timeout [ 346.054556][T16163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.104416][T16163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.147701][T16163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.186292][T16163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.319181][T16272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3990'. [ 346.339774][T16272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3990'. [ 346.410433][T16270] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 346.494431][T16163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.529647][T16163] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.547087][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.554313][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.601212][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.608433][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.728603][T16287] vlan2: entered promiscuous mode [ 346.734497][T16287] bond0: entered promiscuous mode [ 346.742656][T16287] bond0: left promiscuous mode [ 346.998649][T16163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.109590][T16163] veth0_vlan: entered promiscuous mode [ 347.158860][T16163] veth1_vlan: entered promiscuous mode [ 347.252963][T16163] veth0_macvtap: entered promiscuous mode [ 347.276941][T16163] veth1_macvtap: entered promiscuous mode [ 347.298967][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.322781][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.332635][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.373615][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.391888][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.402545][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.412542][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.423188][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.435553][T16163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.467024][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.492815][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.512854][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.525815][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.542872][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.569428][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.588028][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.600078][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.611699][T16163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.641342][T16163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.651502][T16163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.663699][T16163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.672438][T16163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.810829][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.827047][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.875097][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.886298][T16321] SET target dimension over the limit! [ 347.891825][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.052175][T16331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4007'. [ 348.078912][ T53] Bluetooth: hci5: command tx timeout [ 348.471029][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4012'. [ 348.545611][T16352] syzkaller1: entered promiscuous mode [ 348.551130][T16352] syzkaller1: entered allmulticast mode [ 348.690871][T16356] Cannot find add_set index 0 as target [ 348.775996][T16360] lo speed is unknown, defaulting to 1000 [ 348.811903][T16360] lo speed is unknown, defaulting to 1000 [ 348.882937][T16360] lo speed is unknown, defaulting to 1000 [ 348.942487][T16372] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4022'. [ 349.246420][T14615] lo speed is unknown, defaulting to 1000 [ 349.252661][T16360] infiniband syz0: set down [ 349.257895][T16360] infiniband syz0: added lo [ 349.338091][T16360] RDS/IB: syz0: added [ 349.350865][T16360] smc: adding ib device syz0 with port count 1 [ 349.368928][T16360] smc: ib device syz0 port 1 has pnetid [ 349.384972][ T943] lo speed is unknown, defaulting to 1000 [ 349.394789][T16360] lo speed is unknown, defaulting to 1000 [ 349.507608][T16393] netlink: 'syz.2.4028': attribute type 27 has an invalid length. [ 349.512429][T16388] Bluetooth: hci3: invalid len left 7, exp >= 117 [ 349.700239][T16360] lo speed is unknown, defaulting to 1000 [ 349.715686][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4029'. [ 349.884897][T16402] Cannot find add_set index 0 as target [ 350.027432][T16360] lo speed is unknown, defaulting to 1000 [ 350.152987][ T53] Bluetooth: hci5: command 0x040f tx timeout [ 350.329728][T16418] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 350.360644][T16418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.367923][T16418] IPv6: NLM_F_CREATE should be set when creating new route [ 350.375257][T16418] IPv6: NLM_F_CREATE should be set when creating new route [ 350.501071][T16360] lo speed is unknown, defaulting to 1000 [ 350.610447][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 350.623740][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 350.634814][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 350.655496][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 350.663727][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 350.671202][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.829618][T16426] lo speed is unknown, defaulting to 1000 [ 351.053701][T16360] lo speed is unknown, defaulting to 1000 [ 351.209757][T16434] bridge_slave_0: left allmulticast mode [ 351.263897][T16434] bridge_slave_0: left promiscuous mode [ 351.269753][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.405183][T16434] bridge_slave_1: left allmulticast mode [ 351.430278][T16434] bridge_slave_1: left promiscuous mode [ 351.443167][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.478851][T16434] bond0: (slave bond_slave_0): Releasing backup interface [ 351.534541][T16434] bond0: (slave bond_slave_1): Releasing backup interface [ 351.643251][T16434] team0: Port device team_slave_0 removed [ 351.656337][T16443] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4041'. [ 351.674959][T16434] team0: Port device team_slave_1 removed [ 351.691055][T16434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.699206][T16434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.707311][ C1] eth0: bad gso: type: 1, size: 1408 [ 351.708760][T16434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.720616][T16434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.808833][T16436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.825121][T16436] team0: Port device bond0 added [ 351.864552][T16360] lo speed is unknown, defaulting to 1000 [ 352.079977][T16426] chnl_net:caif_netlink_parms(): no params data found [ 352.194995][T16449] Cannot find add_set index 0 as target [ 352.203150][T16360] lo speed is unknown, defaulting to 1000 [ 352.234195][ T53] Bluetooth: hci5: command 0x040f tx timeout [ 352.344637][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.373463][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.395149][T16426] bridge_slave_0: entered allmulticast mode [ 352.411235][T16426] bridge_slave_0: entered promiscuous mode [ 352.430263][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.447908][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.465763][T16426] bridge_slave_1: entered allmulticast mode [ 352.523442][T16426] bridge_slave_1: entered promiscuous mode [ 352.611858][T16468] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4048'. [ 352.671992][T16360] lo speed is unknown, defaulting to 1000 [ 352.713185][ T53] Bluetooth: hci6: command tx timeout [ 352.736013][T16426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.806564][T16481] netlink: 'syz.1.4047': attribute type 16 has an invalid length. [ 352.843707][T16481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4047'. [ 352.871601][T16481] bridge_slave_0: entered allmulticast mode [ 352.902112][T16426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.052171][T16485] netlink: 'syz.3.4050': attribute type 9 has an invalid length. [ 353.065269][T16485] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4050'. [ 353.087054][T16426] team0: Port device team_slave_0 added [ 353.094838][T16473] lo speed is unknown, defaulting to 1000 [ 353.120063][T16426] team0: Port device team_slave_1 added [ 353.207575][T16487] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4051'. [ 353.207968][T16426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.228488][T16426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.302993][T16426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.342979][T16426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.350052][T16426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.397408][T16426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.493488][ C1] eth0: bad gso: type: 1, size: 1408 [ 353.497063][T16426] hsr_slave_0: entered promiscuous mode [ 353.526096][T16426] hsr_slave_1: entered promiscuous mode [ 353.534700][T16426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.542371][T16426] Cannot create hsr debugfs directory [ 353.669032][T16495] netlink: 'syz.1.4052': attribute type 1 has an invalid length. [ 353.683242][T16495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.801597][T16360] lo speed is unknown, defaulting to 1000 [ 353.968282][T16426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.135606][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4057'. [ 354.219565][T16426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.253402][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'. [ 354.313059][ T53] Bluetooth: hci5: command 0x040f tx timeout [ 354.337658][ T53] block nbd51: Receive control failed (result -107) [ 354.383115][T16507] nbd51: detected capacity change from 0 to 256 [ 354.441553][T16426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.629586][T16426] bond0: (slave ÿÿÿÿ): Releasing backup interface [ 354.654318][T16521] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4061'. [ 354.677897][T16426] netdevsim netdevsim0 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.793009][ T53] Bluetooth: hci6: command tx timeout [ 355.244551][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 355.351934][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4069'. [ 355.446003][ T53] block nbd52: Receive control failed (result -107) [ 355.523728][T16555] nbd52: detected capacity change from 0 to 256 [ 355.652320][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4070'. [ 355.772606][T16426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.843205][T16426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.889052][T16426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.934363][T16426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.045048][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4074'. [ 356.054487][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 356.061537][T16583] IPVS: length: 8 != 3945546880 [ 356.340432][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4078'. [ 356.342146][T16426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.436405][T16426] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.466759][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.473973][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.548578][T16606] Cannot find add_set index 0 as target [ 356.568664][T14611] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.575897][T14611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.705985][T16616] netlink: 'syz.4.4081': attribute type 1 has an invalid length. [ 356.724771][T16616] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.4081'. [ 356.739787][T16616] netlink: 'syz.4.4081': attribute type 1 has an invalid length. [ 356.873633][ T53] Bluetooth: hci6: command tx timeout [ 356.934971][ T53] block nbd53: Receive control failed (result -107) [ 356.973716][T16619] nbd53: detected capacity change from 0 to 256 [ 357.127848][T16426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.146963][T16639] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 357.154647][T16638] netlink: 'syz.4.4084': attribute type 64 has an invalid length. [ 357.265446][T16426] veth0_vlan: entered promiscuous mode [ 357.317451][T16426] veth1_vlan: entered promiscuous mode [ 357.411388][T16426] veth0_macvtap: entered promiscuous mode [ 357.424458][T16426] veth1_macvtap: entered promiscuous mode [ 357.478070][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.493414][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.504875][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.517233][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.527516][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.538087][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.549720][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.593066][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.624712][T16426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.661760][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.722895][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.742825][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.764126][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.801302][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.822253][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.852690][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.863463][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.884757][T16426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.916775][T16426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.936950][T16426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.948885][T16426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.958664][T16426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.672563][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.699825][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.795095][ T53] block nbd54: Receive control failed (result -107) [ 358.824585][T16695] nbd54: detected capacity change from 0 to 256 [ 358.956003][ T53] Bluetooth: hci6: command tx timeout [ 358.991895][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.001690][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.374134][T16784] netlink: 'syz.4.4106': attribute type 13 has an invalid length. [ 359.394961][T16784] veth0_macvtap: left promiscuous mode [ 359.424635][T16784] macvtap0: entered allmulticast mode [ 359.470586][T16784] macvtap0: refused to change device tx_queue_len [ 359.682928][T16800] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 359.723692][T16800] __nla_validate_parse: 7 callbacks suppressed [ 359.723714][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4110'. [ 360.017532][T16815] SET target dimension over the limit! [ 360.118450][ C1] eth0: bad gso: type: 1, size: 1408 [ 360.245636][ T30] INFO: task udevd:7378 blocked for more than 143 seconds. [ 360.275089][ T30] Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 360.322087][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.351439][ T30] task:udevd state:D stack:20472 pid:7378 tgid:7378 ppid:1 flags:0x00004002 [ 360.373390][ T30] Call Trace: [ 360.390215][ T30] [ 360.398003][ T30] __schedule+0x1800/0x4a60 [ 360.408295][ T30] ? __pfx___schedule+0x10/0x10 [ 360.417882][ T30] ? __blk_flush_plug+0x449/0x500 [ 360.423067][ T30] ? __pfx_lock_release+0x10/0x10 [ 360.428110][ T30] ? __asan_memset+0x23/0x50 [ 360.432773][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 360.438603][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.445338][ T30] ? schedule+0x90/0x320 [ 360.450657][ T30] schedule+0x14b/0x320 [ 360.455930][ T30] schedule_timeout+0x1be/0x310 [ 360.460814][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 360.467029][ T30] ? __pfx_process_timeout+0x10/0x10 [ 360.472328][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 360.478110][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 360.482809][ T30] ? __pfx_validate_chain+0x10/0x10 [ 360.489812][ T30] ? validate_chain+0x11e/0x5900 [ 360.495001][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 360.500052][ T30] ? __lock_acquire+0x137a/0x2040 [ 360.505259][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 360.511348][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 360.517059][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 360.522107][ T30] ? sbitmap_get+0x289/0x3f0 [ 360.526881][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 360.532985][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 360.538826][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 360.545374][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 360.554112][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 360.559440][ T30] ? __pfx___might_resched+0x10/0x10 [ 360.565610][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 360.571613][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 360.577043][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 360.582167][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 360.587657][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 360.593386][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 360.599293][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 360.604621][ T30] __blk_flush_plug+0x420/0x500 [ 360.609488][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 360.615136][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 360.620269][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 360.625557][ T30] __submit_bio+0x422/0x560 [ 360.630093][ T30] ? __pfx___submit_bio+0x10/0x10 [ 360.635648][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 360.641934][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 360.648787][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 360.655866][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 360.661911][ T30] ? __pfx___might_resched+0x10/0x10 [ 360.667301][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 360.675356][ T30] block_read_full_folio+0x93b/0xcd0 [ 360.680676][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 360.686114][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 360.691944][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 360.696897][ T30] ? folio_add_lru+0x357/0xd70 [ 360.701678][ T30] ? folio_add_lru+0x58f/0xd70 [ 360.706704][ T30] filemap_read_folio+0x1a0/0x790 [ 360.711744][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 360.717461][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 360.723124][ T30] ? __filemap_get_folio+0x984/0xc10 [ 360.728439][ T30] do_read_cache_folio+0x134/0x820 [ 360.733796][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 360.739278][ T30] read_part_sector+0xb3/0x330 [ 360.744087][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 360.749044][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 360.755255][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 360.760830][ T30] ? snprintf+0xda/0x120 [ 360.765269][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 360.770935][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 360.775637][ T30] ? vsnprintf+0x184/0x1da0 [ 360.780158][ T30] ? __pfx_snprintf+0x10/0x10 [ 360.785644][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 360.790431][ T30] bdev_disk_changed+0x72c/0x13d0 [ 360.803451][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 360.808947][ T30] blkdev_get_whole+0x2d2/0x450 [ 360.813854][ T30] bdev_open+0x2d4/0xc60 [ 360.818132][ T30] blkdev_open+0x3e8/0x570 [ 360.822553][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 360.827608][ T30] do_dentry_open+0x970/0x1440 [ 360.832388][ T30] vfs_open+0x3e/0x330 [ 360.836671][ T30] path_openat+0x2b3e/0x3470 [ 360.841277][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 360.846776][ T30] ? __lock_acquire+0x137a/0x2040 [ 360.851823][ T30] ? __pfx_path_openat+0x10/0x10 [ 360.858213][ T30] do_filp_open+0x235/0x490 [ 360.862974][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 360.868054][ T30] ? _raw_spin_unlock+0x28/0x50 [ 360.876675][ T30] ? alloc_fd+0x5a1/0x640 [ 360.881055][ T30] do_sys_openat2+0x13e/0x1d0 [ 360.885940][ T30] ? kvm_sched_clock_read+0x11/0x20 [ 360.893831][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.899426][ T30] ? sched_clock_cpu+0x76/0x490 [ 360.904363][ T30] ? ktime_get+0x9b/0xb0 [ 360.908617][ T30] ? lapic_next_event+0x11/0x20 [ 360.914655][ T30] ? clockevents_program_event+0x240/0x350 [ 360.921747][ T30] ? __pfx_sched_clock_cpu+0x10/0x10 [ 360.927652][ T30] __x64_sys_openat+0x247/0x2a0 [ 360.933060][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 360.938464][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.939979][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'. [ 360.944830][ T30] ? __irq_exit_rcu+0x100/0x1c0 [ 360.944867][ T30] ? do_syscall_64+0xb6/0x230 [ 360.944892][ T30] do_syscall_64+0xf3/0x230 [ 360.944946][ T30] ? clear_bhb_loop+0x35/0x90 [ 360.944975][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.944998][ T30] RIP: 0033:0x7f056fd169a4 [ 360.945016][ T30] RSP: 002b:00007ffd8e6141d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.945040][ T30] RAX: ffffffffffffffda RBX: 0000556d6982fe10 RCX: 00007f056fd169a4 [ 360.945056][ T30] RDX: 00000000000a0800 RSI: 0000556d698284a0 RDI: 00000000ffffff9c [ 360.945071][ T30] RBP: 0000556d698284a0 R08: 0000000000000001 R09: 0000000000000000 [ 360.945084][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 361.029491][ T30] R13: 0000556d69823540 R14: 0000000000000001 R15: 0000556d6980e910 [ 361.038064][ T30] [ 361.041305][ T30] [ 361.041305][ T30] Showing all locks held in the system: [ 361.049240][ T30] 3 locks held by kworker/0:0/8: [ 361.054496][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 361.075811][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4125'. [ 361.084947][ T30] #1: ffffc900000d7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 361.098029][ T30] #2: ffff88807a3b8240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 361.110945][ T30] 1 lock held by khungtaskd/30: [ 361.116905][ T30] #0: ffffffff8e937660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 361.127104][ T30] 2 locks held by getty/4985: [ 361.132047][ T30] #0: ffff88802b5940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 361.142241][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 361.153099][ T30] 3 locks held by udevd/7366: [ 361.157791][ T30] #0: ffff88801dacc4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.168266][ T30] #1: ffff888079b51990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.177996][ T30] #2: ffff8880673d8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.188102][ T30] 3 locks held by udevd/7378: [ 361.193185][ T30] #0: ffff88805df034c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.202573][ T30] #1: ffff888029b80610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.212220][ T30] #2: ffff88805a670180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.221350][ T30] 3 locks held by udevd/7801: [ 361.228622][ T30] #0: ffff8880581a74c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.237973][ T30] #1: ffff88802dfbee10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.247515][ T30] #2: ffff88802ee38180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.256521][ T30] 3 locks held by udevd/10849: [ 361.261292][ T30] #0: ffff888018bdd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.271070][ T30] #1: ffff88802dcb6990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.280721][ T30] #2: ffff888076908180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.290705][ T30] 3 locks held by udevd/11343: [ 361.296477][ T30] #0: ffff88807c88b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.305800][ T30] #1: ffff888028f2f190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.315363][ T30] #2: ffff88806a368180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.324444][ T30] 2 locks held by kworker/u8:12/11430: [ 361.329908][ T30] #0: ffff8880b923ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 361.341314][ T30] #1: ffff8880b9228948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 361.353129][ T30] 3 locks held by udevd/11887: [ 361.357912][ T30] #0: ffff88807e2774c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.367248][ T30] #1: ffff88802d6a5a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.377229][ T30] #2: ffff88805a418180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.386297][ T30] 3 locks held by udevd/12113: [ 361.391072][ T30] #0: ffff88801fd154c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.400404][ T30] #1: ffff88806c030510 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.410998][ T30] #2: ffff88807cbc0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.420164][ T30] 3 locks held by udevd/12492: [ 361.425020][ T30] #0: ffff88806195f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.434668][ T30] #1: ffff88801f077d10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.446620][ T30] #2: ffff888079690180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.455693][ T30] 3 locks held by udevd/13120: [ 361.460462][ T30] #0: ffff888028b9b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.469839][ T30] #1: ffff88807aaad210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.479773][ T30] #2: ffff888056038180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.488826][ T30] 3 locks held by udevd/13205: [ 361.493656][ T30] #0: ffff8880205bf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 361.503064][ T30] #1: ffff88801f3cff10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 361.512583][ T30] #2: ffff88806ca58180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 361.524594][ T30] 2 locks held by syz.2.3787/15618: [ 361.529815][ T30] #0: ffffffff8fce51b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 361.538076][ T30] #1: ffffffff8ec07928 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 361.548441][ T30] 2 locks held by syz.0.3900/15965: [ 361.556200][ T30] #0: ffffffff8fce51b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 361.564550][ T30] #1: ffffffff8ec07928 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_get_doit+0x115/0x5e0 [ 361.578567][ T30] 3 locks held by syz.0.4125/16848: [ 361.586693][ T30] #0: ffffffff8fce51b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 361.598741][ T30] #1: ffffffff8fce5068 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 361.607919][ T30] #2: ffff888060126998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_genl_connect+0xc26/0x1c80 [ 361.618174][ T30] [ 361.620509][ T30] ============================================= [ 361.620509][ T30] [ 361.629008][ T30] NMI backtrace for cpu 1 [ 361.633333][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 361.643488][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 361.653530][ T30] Call Trace: [ 361.656794][ T30] [ 361.659711][ T30] dump_stack_lvl+0x241/0x360 [ 361.664382][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.669573][ T30] ? __pfx__printk+0x10/0x10 [ 361.674152][ T30] ? vprintk_emit+0x631/0x770 [ 361.678820][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 361.683857][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 361.688814][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 361.694271][ T30] ? _printk+0xd5/0x120 [ 361.698413][ T30] ? __pfx__printk+0x10/0x10 [ 361.702991][ T30] ? __wake_up_klogd+0xcc/0x110 [ 361.707834][ T30] ? __pfx__printk+0x10/0x10 [ 361.712412][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 361.717428][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 361.723401][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 361.729375][ T30] watchdog+0xfee/0x1030 [ 361.733615][ T30] ? watchdog+0x1ea/0x1030 [ 361.738032][ T30] ? __pfx_watchdog+0x10/0x10 [ 361.742702][ T30] kthread+0x2f0/0x390 [ 361.746764][ T30] ? __pfx_watchdog+0x10/0x10 [ 361.751433][ T30] ? __pfx_kthread+0x10/0x10 [ 361.756013][ T30] ret_from_fork+0x4b/0x80 [ 361.760424][ T30] ? __pfx_kthread+0x10/0x10 [ 361.765000][ T30] ret_from_fork_asm+0x1a/0x30 [ 361.769766][ T30] [ 361.774236][ T30] Sending NMI from CPU 1 to CPUs 0: [ 361.780642][ C0] NMI backtrace for cpu 0 [ 361.780656][ C0] CPU: 0 UID: 0 PID: 11430 Comm: kworker/u8:12 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 361.780676][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 361.780688][ C0] Workqueue: bat_events batadv_nc_worker [ 361.780717][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 361.780743][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ac 19 81 00 48 c7 c3 78 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 22 8b 03 65 ff 0d 01 35 8a 7e 74 10 83 e0 04 c1 e8 02 5b [ 361.780758][ C0] RSP: 0018:ffffc90002e2f9c0 EFLAGS: 00000a02 [ 361.780772][ C0] RAX: 0000000000000000 RBX: ffff8880b9237c78 RCX: ffffffff816fac54 [ 361.780786][ C0] RDX: 0000000000000000 RSI: ffffffff8c606900 RDI: ffffffff8c6068c0 [ 361.780798][ C0] RBP: ffffc90002e2fb40 R08: ffffffff90179d2f R09: 1ffffffff202f3a5 [ 361.780811][ C0] R10: dffffc0000000000 R11: fffffbfff202f3a6 R12: 1ffff920005c5f44 [ 361.780824][ C0] R13: dffffc0000000000 R14: ffffffff8e290a40 R15: dffffc0000000000 [ 361.780838][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 361.780853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.780865][ C0] CR2: 0000001b2de0bff8 CR3: 000000007cfec000 CR4: 00000000003506f0 [ 361.780880][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.780891][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.780902][ C0] Call Trace: [ 361.780909][ C0] [ 361.780916][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 361.780942][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 361.780966][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 361.780988][ C0] ? nmi_handle+0x2a/0x5a0 [ 361.781013][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 361.781033][ C0] ? nmi_handle+0x14f/0x5a0 [ 361.781049][ C0] ? nmi_handle+0x2a/0x5a0 [ 361.781066][ C0] ? rcu_is_watching+0x5a/0xb0 [ 361.781088][ C0] ? default_do_nmi+0x63/0x160 [ 361.781110][ C0] ? exc_nmi+0x123/0x1f0 [ 361.781132][ C0] ? end_repeat_nmi+0xf/0x53 [ 361.781158][ C0] ? lock_acquire+0xd4/0x550 [ 361.781180][ C0] ? rcu_is_watching+0x5a/0xb0 [ 361.781208][ C0] ? rcu_is_watching+0x5a/0xb0 [ 361.781231][ C0] ? rcu_is_watching+0x5a/0xb0 [ 361.781253][ C0] [ 361.781259][ C0] [ 361.781266][ C0] lock_acquire+0xe3/0x550 [ 361.781290][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 361.781313][ C0] ? batadv_nc_worker+0xcb/0x610 [ 361.781337][ C0] ? __pfx_lock_release+0x10/0x10 [ 361.781361][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.781387][ C0] batadv_nc_worker+0xec/0x610 [ 361.781410][ C0] ? batadv_nc_worker+0xcb/0x610 [ 361.781433][ C0] ? batadv_nc_worker+0xcb/0x610 [ 361.781458][ C0] ? process_scheduled_works+0x945/0x1830 [ 361.781480][ C0] process_scheduled_works+0xa2c/0x1830 [ 361.781515][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 361.781542][ C0] ? assign_work+0x364/0x3d0 [ 361.781564][ C0] worker_thread+0x86d/0xd40 [ 361.781594][ C0] ? __kthread_parkme+0x169/0x1d0 [ 361.781618][ C0] ? __pfx_worker_thread+0x10/0x10 [ 361.781639][ C0] kthread+0x2f0/0x390 [ 361.781653][ C0] ? __pfx_worker_thread+0x10/0x10 [ 361.781674][ C0] ? __pfx_kthread+0x10/0x10 [ 361.781689][ C0] ret_from_fork+0x4b/0x80 [ 361.781711][ C0] ? __pfx_kthread+0x10/0x10 [ 361.781726][ C0] ret_from_fork_asm+0x1a/0x30 [ 361.781757][ C0] [ 361.786129][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 361.786143][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0 [ 361.786165][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 361.786176][ T30] Call Trace: [ 361.786184][ T30] [ 361.786192][ T30] dump_stack_lvl+0x241/0x360 [ 361.786218][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.786239][ T30] ? __pfx__printk+0x10/0x10 [ 361.786255][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.786283][ T30] ? vscnprintf+0x5d/0x90 [ 361.786307][ T30] panic+0x349/0x860 [ 361.786327][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 361.786351][ T30] ? __pfx_panic+0x10/0x10 [ 361.786367][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 361.786388][ T30] ? __irq_work_queue_local+0x137/0x410 [ 361.786411][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 361.786430][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 361.786451][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 361.786475][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 361.786500][ T30] watchdog+0x102d/0x1030 [ 361.786524][ T30] ? watchdog+0x1ea/0x1030 [ 361.786551][ T30] ? __pfx_watchdog+0x10/0x10 [ 361.786573][ T30] kthread+0x2f0/0x390 [ 361.786589][ T30] ? __pfx_watchdog+0x10/0x10 [ 361.786610][ T30] ? __pfx_kthread+0x10/0x10 [ 361.786628][ T30] ret_from_fork+0x4b/0x80 [ 361.786649][ T30] ? __pfx_kthread+0x10/0x10 [ 361.786666][ T30] ret_from_fork_asm+0x1a/0x30 [ 361.786700][ T30] [ 361.787279][ T30] Kernel Offset: disabled [ 362.267251][ T30] Rebooting in 86400 seconds..