last executing test programs: 1m11.296964251s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000400900010073797a300000000078030000080a010100000000000000000a0000030900010073797a30"], 0x3ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 1m0.044306576s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000400900010073797a300000000078030000080a010100000000000000000a0000030900010073797a30"], 0x3ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 38.567475602s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000400900010073797a300000000078030000080a010100000000000000000a0000030900010073797a30"], 0x3ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 25.084909975s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000400900010073797a300000000078030000080a010100000000000000000a0000030900010073797a30"], 0x3ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 18.50629479s ago: executing program 1 (id=1268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x20020800) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}], 0x4, 0x0, 0x0, 0xa6}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x34, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x48040) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 18.041931158s ago: executing program 1 (id=1274): socketpair(0x28, 0xa, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x7, &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 17.856728155s ago: executing program 1 (id=1276): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 17.768362946s ago: executing program 1 (id=1278): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@generic={0x6, 0x0, 0x1000100}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, 0x0}}], 0x1, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r2, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb6ae, @void, @value}, 0x94) 17.644793495s ago: executing program 1 (id=1281): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x7}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 17.312545465s ago: executing program 1 (id=1287): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x0, 0x2, 0x2}, {0x80000006}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x401, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="10750000", 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000940)=[{{&(0x7f0000000480)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="300600f6969cc800009a340cfc657086cc1bda439e861a00006c5e06104d7b4903e20000001c000000577a831b1a55004d08bb593300000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000200000000110000000000000000000000010000000d000000000000001100000000000000000000000100000001000000000000001400000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0xb8}}], 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffbfffff}, 0x1c) shutdown(r10, 0x1) getsockopt$bt_hci(r10, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) 13.616364276s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000400900010073797a300000000078030000080a010100000000000000000a0000030900010073797a30"], 0x3ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 4.534203924s ago: executing program 0 (id=1355): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x80000) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) epoll_create1(0x80000) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) 4.294547589s ago: executing program 0 (id=1356): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x50, 0xffffffffffffffff, 0xc5557000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES32, @ANYRES64=r4], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000480)={r7, 0xfe, "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"}, &(0x7f00000001c0)=0x106) 3.89299244s ago: executing program 0 (id=1357): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 3.834467221s ago: executing program 0 (id=1358): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x2bad, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000280)=0x3, 0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) write(r1, &(0x7f0000000180)="c82f2122ba42c089073dfcc932ab", 0xe) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x88}]}}}]}, 0x44}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x26, 0x800000003, 0x0) 3.222596707s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000030000400900010073797a300000000078030000080a010100000000000000000a0000030900010073797a30"], 0x3ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 2.1541576s ago: executing program 32 (id=1287): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x0, 0x2, 0x2}, {0x80000006}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x401, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="10750000", 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000940)=[{{&(0x7f0000000480)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="300600f6969cc800009a340cfc657086cc1bda439e861a00006c5e06104d7b4903e20000001c000000577a831b1a55004d08bb593300000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="7f000001e000000200000000110000000000000000000000010000000d000000000000001100000000000000000000000100000001000000000000001400000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0xb8}}], 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffbfffff}, 0x1c) shutdown(r10, 0x1) getsockopt$bt_hci(r10, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) 2.126131028s ago: executing program 4 (id=1365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x25, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1412, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc042) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe66f}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRES64=r2], 0x20) 1.870336969s ago: executing program 4 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000130428bd70000000000000006300", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x4c}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x87}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1.756174136s ago: executing program 4 (id=1367): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xf}}], 0x1, 0x24008000) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000440)="482c3a4146296a6295a77f40377d8e14cbfe882e7fedb96aa7bb39b50f3e1e54153ca5f9a26daadc10a47b66a0e0f634a321671a812ae2ed0265d03c72095701b3b54aa7ea2aaa0b683b00000000f9fe3fdbacbbb7a9296e819442856646a8ec11397d9f100df3240bfcb2cc17ccf795448b9ab65c5c2de8f4634fb3563ca24f91666b1c01faf1", 0x87}], 0x1, 0x1) openat$cgroup_ro(r3, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x4f8, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x2c8, 0x308, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) 1.469999703s ago: executing program 4 (id=1370): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 909.146566ms ago: executing program 4 (id=1371): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="2f56496be7a5323826ba9322cab75dbdda426048e74341", 0x17}, {&(0x7f0000000180)="b45dc29e1db94d5097be8df9d1d6d6cc20abd6ecdc1b6db35b16376c9ed9b9655f306a999cc9e7ddb2f6efcbb504342c498865145816f96ff74a8eedd4f5fdc3ba5bb0f39f34a26238d99cda6a9bd57d879fbd5a8392a6e396dc0840f1a2a5471611f09b7312a9113224764d7d246946b48db1d97165c2", 0x77}, {&(0x7f0000000440)="e43e7a2f350c669423f092136ece21a13119887df8e7e3ebbdb60b34e5ab2a0cb0c510a1deb67c067becfaa8e180d91e34c4d44400428f612072a14c903896bf0872394459cd167782d4d38dde2a3ce3b652f7ea8441d416206f2ec17b6629fab903f9558be8d990cd144c1dfb18bf18f1433f5a54dfb743164dca843073c1fa9d0a3a5b8aeecbe2bc6de7d7343c4fe1d05b1886c0c5a4a4d19d3031ac66398d66a63ebf2b845fe7a24314fce31be1ff34ff9bc97b8b3afdfa61ad13e77e99eaf2a7199aa2e8a06c91d1c0a4632c0d6d72c11a27a2f66de21fcf1425c15a", 0xde}, {&(0x7f0000000240)="2a5a78924c81727af04dfce3223ba998c5823b5cc036a83aca1e7b949e9eecc2f00eaf6974516a77612e95c0159cd5d9afed95a025379b459eafe6104d254b4e77c6d0f0f542b75219351dd157a7ea64a475df4ad4a73028a7c02bdf45e76b6e16f4793063d56af5dd9166e40b09797d4c563186df6c8c7589ed310f38dd24fb588ee9564f80be221236d425e2c05fb491cd33", 0x93}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x170, 0x14}], 0x1, 0x20040000) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r5, 0x1, 0x72bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014000}, 0x24000090) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r7) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000d7324ab2a16f"], 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x68}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 552.382434ms ago: executing program 2 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x41d6, 0x1, 0xffffffff, 0x9, 0x48, 0x2, 0x5}, 0x9c) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004e000100000000000000000037f5"], 0x1c}}, 0x0) 472.853042ms ago: executing program 2 (id=1374): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x8, 0x16, 0xff}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4808}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x40, r8, 0x4c1dad3e3d6a7499, 0x70bd2f, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000406a00672726bd7000fcdbdf250000000000000000"], 0x18}}, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r10, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x1415, 0x103, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010000000000000000008200000008000300f81ec593e658ce7a51cc78429a93957d27599b8967e1874745478c1aeb23bf77a0fdeeb21b30e26481226bcd3e00fb37615318756d07d92e349740ee4dc00d57234206eebb752722dcb483dad8fb11125205ea7df25916b5d3b57b536092f77438c8dd9e0b18192c7055d9d43cc650fef10486b18d11a5dd6f2f09bdb643a04788dd1ea605ae776c549d053491c489b98001e6d08d68a982a6f5bdaa7bcd49e6abe847f676d8025fef53810380bcde3b8eb8d778692b5949384d6a7e8e4e8b6d7eaa98baad6d2768e8c19fba474973da49bf", @ANYRES32=r14, @ANYBLOB], 0x1c}}, 0x0) 439.867549ms ago: executing program 0 (id=1375): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe000000006910bd000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 292.663001ms ago: executing program 2 (id=1376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @bcast, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000d14010026bd7200ffdbdf25080003000100000008003e0001000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) sendfile(r5, 0xffffffffffffffff, 0x0, 0x10000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX=r3, @ANYRES8=r4, @ANYBLOB="b9cb616068be1d0f89bfcfb1295cb29290bfc1ad1db1e15b69ff579f0271233a29555fe2a1c93a3542d84d5c593106dcefffa950b17cf4031ee3c231015e1f27e9f652d7238320c027d39950b51cb524600e5255cef773ca75e4a091aab74db6bbe1b7a9f957b5782f3501af5fdc5e4a62efd991e03d4ba0fbcba1a45a77e2592320896be64baa5553ddbd8d93d2873bb2d5dbe642", @ANYRES8=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000100000000002300000000000b9ac362b9e9a128", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001580)=0x4, 0x12) sendfile(r9, r10, 0x0, 0xffffffff000) r11 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_hsr\x00', {0x80}, 0xfff8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f0000000040)={0x0, 'wg2\x00', {0x1}, 0x8001}) 273.741106ms ago: executing program 2 (id=1377): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000004000180"], 0x18}}, 0x20000050) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) listen(r0, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r3, 0x2743}], 0x1, 0x0, 0x0, 0x0) 209.857691ms ago: executing program 0 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r1, 0x89dd, &(0x7f0000001080)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "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", "b35cd41ff316d5edb49ce457a3982f92be0ffd75b59d035816f7af6fd297c2dbcdd31e64a83f3362d244db9bcea27a5206cf3fcc2be2c56c7546ad260b9605974578d6a8c52abc199c5e4a33ac341b07cc2f6fef0f02eea14269ff4d8ffa189fd8a51f7ce08a0ead582f933a454ddffd1830b5e6154cc174e5ac41c7ec7270c33d8c08c55480ed50a7b8087de2098a76c99a3569cb5cd4992ac995d93036fd0b0cb566ccb52a3af7350a629f4dbdf75490ea2b60b334eb90a558f271d3204e568c1c3460271c80977f7981ca507252f23f0f9d65c7d193fc698679ec2338de877613638fff4c870108c083da41f3b1c61767b7b72627fd5026e1cbcc084b559d5a503061348ca6521adbd7d99f6e4878c32cda257425b9d668891ceacf850e9bd4c6ace62cb27a6f9b5c037e045fdf8aacac04bff118ffe4ece3317d2e952d5eb87d43519ca037c89e4f4fc5026287420cffbe7816bddd7d5d26f9b268be313c650ba437202e4b559e6f9ef5756d114c886177ba722103e26adaeae1055005ff01c53a156c6e14be93f3fc076a629a9acd7650f4b331c0368d766d70d0dc11af71a796c9d100d3e359233e7960ce5f2110ac49eaf748d2e658413032c4d3f77eda6c15d770dd5147c5153f66f1fbb66ba03a75b47cc94af9bc6634e4dc22807bed1e82d862919e126ab8bf4cd2b63d141372fae136f4ed875592c83cc6065745d11d1dbe693b6d5c1025263b158325d9f31e49576ad005d6d2d07f4156b86f49ed6adbf9235b21f26393526e4309deff911f6e6c473071a7ef7834d11e1bc3feaf1ecf7da65d594217b59ae6186c58bbe6142926e7af70ebea2b3fba88ffbc3a9fe01fb28eecaa921a427d9d4b9851f04b628159d42386624c4ede708c3749df1fa6c51ff9a584d6274575b88480a20bcf419266f831db8a04401a079e70f9df12a41e161f6f4b5c94d7a91aa4ebe3dddfe197a6cbbfa1164d5971ce74796e37c72f282a7505f52b16eb7b767fa3d010af90522b24325137f407dd2bd862bef3f8a9ffca346a1af2b2c4e416ed67984a1523874d34372ac8dbff91ef83d0c24ac9793eaf0c71eb2291b73215f9bd5ae830fd7dd0f255cc13b40296f95b63dab1f6277f7073eb68844f549acfb3a9abae588bcfa2cbb7578b78dc7f75a621915512f4af6eb9cf327967735376c5cfe1db6667d6f6a5a4ae7f24e382a3326d0ab30c17755db28e028bc7c204de28d0778066790693d748c3121b362c4d22593325b7f848ad0c4f9322be4fcce3cf6cc2f68b2366b638f98a71ba58c3a34db1de5a8913932f0730fa7ad953061c6925b306dfd11c35d3fdeda8828e8a12d9d62848e88318b7d416144085eb4ee63c85c5f7983fea9b4b78e7600500cd81c685a3d2d6eaa5be9a39f0e52af00e488e72fc8c69499eb2fbf4a0a7691f34b4f3fe170af1acec594d081b84ec1a79f2bee3f1d2f6136335f7df574464c2eaf6e9f13c355445d4eead449c9229f36888f512ce7aeb6bdcfc3abee424eb843877f2342498cdda6332336ac9c2433729512ce435a4c70cd6e662a656880c30af197c1d14b2f883253f311300bea54a1e98265747fdd1556fdf2eb864d55b46035b97981965ea42732aeef93a26a56da46f570158c544256490de7ef6839bf221eafe936b71145ba10c14913ba126543fdb10a66dc56fb2397ade781be4a5180e8e1c265f52e7fe83aa217e8f07ea002bd5aa2ac774ab6addeddb5b78618e635cdb1e8665e59e5e5fe340cf4e0fa67bb851026991721468519ef076c4f52544f8acb888510f30885fbd224750357f123ad9a0d6dcf7eb8852b718ef1e68de5ee9ed6b2d1ab9011f3dd83aed0a6d30e0386999b902ebc5a771f921ff7b9099061f40eab406c724ea36106654b196e9d09a26df8a7e39bc552798695e32a5c2d527ac21ee2eff1d05bce3574ec9e73f3e45a9d7d70544af76541894fe27b5c13b437afb00083d2551c5e3ca963db429f616b704424671f1bae43fe14684b30225e34b91e8566bb9f4931e5f11f75ef7ee68e6badf6ed1d9ea5147b0c2115f84a9f771491a5979dde410ec08e103e3a7aaf7365e93a6c6cbed915bf3e491ab3e174d4e2fde4f7e6cf317ea3c6f7d37b15b462b47e17cf109041597dcca400868691f0603e0c41a85a79759ceeaf09e482c6162d16b8e30e14cbd33ba0fefd3c30a2513b0c91fc47b044026ce2d2fa3542c4426733125b3f9ebba8851224d106efd62ffef3c8cd8d56b660c3312e4a581a74eaeb3e7406f10c29d320507fc1ab61e858e24f79570e6a8ae75a184e21fc03bc7e58f13c02512803bb4c2ae932eaa2a342f9b130d5a8a8465015c319050a929c4388cca7bf4a9014dffa1afbb2838626d08eb28db144b55ec18a9aa09c8ea2c770f2fc68c1d7890daf6c4b699048ea708e504ce926755fe2a835ab081b6aaa3411ec991182bcf4cc43ea46cb65f29ab068ece77f990083e1780542e0b3719e287a44f88a394a4d084f56832f21929d24644bfb253904caa102929186c675da84530ad71a633cdbe2176d1eacf96b757ba7e8831be752e65f7deb14a17dad3efe0d03e773dcb2f58f11b82468ebe07b00863acd817c31158cffb589f31f38c274f646980afa040260a5682f70709ea7954073604f670f76f7fbf79553c7c2df0f7256400ee81f9385fc764c0edc17da9293313aacdc245505976a1cd1cc30ee294cee99dfed201fc7d8600d7c12957c86aaeec92919fdedf12b4545345a5f8d3884d926a62976a73ee5576dc50cb9d11d998fe5ec6a923357331458e9ed942d450dfbc091341dda916bf81816642f2ee1e3d1ed2ce3d7c942f8fd5e120e0553f620ad115e8ea4bed7df8c7d9e10e5cfd2e188da5f45d8938efe4066090ea0892b900232e842c7b9ef2c1ec3a78f111541a8f4a07eb8318ddaa2957d4cd7741ae8d18112ef88a62c0c0eac342f555f2213d10ae8ef5a9bf46432d8a007e401a4ddc4f4528c920c827f0acc698a89a5dab2d53452d9b3447d87fd841729550364cdb2573c435d7bdb5a23acf692900875204a7ef84c56985395f2ef5946442eec2d09d64385dc6ae00d8aa98efdd8bc071e2830a7575d33e6808b198e47d42d1a6761e952d02a1617b1117bb516dfcc37e61ad4428da483f19e88fda59fb100765f769acbf84d92a5ee936e0d8bc48037703ebf2ca649ec642aa73f012d20f6cb626ab079ac6783fca94d13f910a5942c2474e33ac2a3440370526a3d0a1cc3ad30d5ddf19c36dee632eb49aa0641f911077bdcfb695d92ba6224c726df022945372e3206332bacfdd1c4f960e33f722473d5c900bbf01c87a411519cf790f387ac68d995222997a433cab607d19a71260919c0298b916cbd85019c432000542a3dbdbc4eb6168f3694e50c311094da7f0ca6457313a643cb4935484e643fdf06723421f2c50f4c27654e17584536bf2f6267d767bfb6f1f7efb3149cae36ab210d54b04b916b6fa48bf8aa8a0ee67bc25aead238c9dfa11e13b8a6df8cd9aedbaa3c6ae32a9d3819fe04c4fc81a78ba30980a137a82ca2983d58b03fd9bcb2b9745ec89f09c669a44c9ab4ab23b2ad8d665133e9939a557517ee8248536032cca10dab8954494a72e8c7c03f39c3edd136c0bbca6c3e6a3619574423979a7f3e2ef34c7e2f773824265a4ced8b0e211b39091b5efa1af4fff6df230b7ef883685510f7278f60aee467308eefaddd60c669353338db0acd16927430cf167213acc61b5ca86c535b5bd9a3d533d24125a5c3226e2af6f7a469e93a62591894afb3509dc934fbb9d25fd9f57967a3b361e2e77d2d115d50f3b05a4dfe1f3c46db8cf466ba63f9cc3960f2ac2caf2644116df631b799fee5e8f7a2100fd3ef125b4984b217158645bafb31c0af396f954edf162934b749c2e0de0cdd6e1b40a083b8acdfd42714130ca022d6e7ae1885c3c0d1b5062ffc4dbcea3f56290c7f50dd04ff4fa40403a9b2069683a399181f9818e78540293de84ad8fbe67d5fe04a3a4d47d19ca4180ed458c98764cfe827d1ef7cde1fe2c80beb62db556b6a0e71c99375e982b7b67e07ae3d0ac833a10314b7ed385bc9cac3642f46d16d98fc618a919c4736df7fb9e0f001dc2e37010f831b189306c605ff0dbd70a0cab4460b865cd3f538a14693f5763ed2ab55988ab91399299e7535084176613b926108973b0e4bb1024f3ae4f5277b1045cfb9ad7cd4a6b48046056679ce729eff5caf8a7e4f2ba2707da08e1c7ddcbe412078b99157efca253abbda10f4307a1f03793e9bc113482bf9b695ea561c2435a341ffdfe610743793ee160aec63377395d4b3a6d12591f0978b5be238d2d9d037f2fb1327efc1786de3b4c7d5cf4d532072c6eb425542687ac665f248edc0e2ff077bed33cdf91934d0baa701a179b73e8c9ad1564e457d29b921b0280d9ff08f1cac0f3fe4b9c316420bf32f8ccf431ba3e3dfc5b598c1a00315464ce71700a75cea42c1624801930dd9e00a5745ffc5d1804da20e6511363d3e232417bd8e45b27716cf55ef5422bc4b83ec4551ee1a4e1bf31e3490412dd5e3fcb8a6f01b304e695d94438ef9ed59f80b97abbbdf5c31cd5a32e0035cfc9950b2536257d2c19dc520317189cd777554f7f5b84f0759b5187ce1e5a90f10e49e29eaf9b9e1b2c6eb21733e3059794aaa4634940a3361ea1d8cc44cdae8315027870d988fd699e9e611ad02dd2bff8d64438458e2bdcf4a4e3497da06e70ea3aebff9966e86c2b5c1a6017b89f9a23da733ff264bdc23af8b249a13a2202d47dd6ac9e89927cfc4406bb30b44656967660bef7e269c7fdfe9b0fe8f88cdd6c0041299b330686b2b3bfcb74b05c1ff884dfe32236466f0e187279a92fefc29a1d232b981bc15e7eda36fba802e57d94228a0fe7973178cc78c0a9ca8d8970aa0c3e9c0f71d959f2d62d3e046805a1bf14a03338a148917a1d90af9db7a5e69973af81d63d9e2e05bb4e862d5f6c952fba71e22f42d0c18dd2421f436aa2b140b6acb26d853949fe47e3c161b842e342936049b168c2afa5a01e97d34408f946e4fd1c144d9d9fd1f56f23388dd10eda7d9e6099c87dc861458353d5f834adc7da9e220329a132688dba614620f31a2d8c4a2f073a571f0015182b9599773a03817fd50235bef1e137f61451e5b360e4352c9ce015c2f0c836b2181450bebf0b559aeeec95e5e9f6ae31190b007f6b19b87d9d1d71650db32168e41f9b37088658a96dbf316636e6ccecaf583ac33ccd448e3e43348fa9282bef9ae0ffd4800faf240ae8e7a023438c6bbef567bfee91693e376904a293972fd28997918306d213796fa4a9acbe5f1f49a6d41ed1d5c4387455f63639fb460a966f6d7e72d06911ec"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002480)={{r2, 0x1, 0x109, 0x3, 0x1, 0x1, 0x5, 0x8, 0x61, 0x9, 0x51, 0x3, 0x9, 0x0, 0x3f9}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58f", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4}]}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009000}, 0x4090) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000fedbdf000800000008000300", @ANYRES32=r10], 0x68}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40880) 60.92217ms ago: executing program 2 (id=1379): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 23.131328ms ago: executing program 2 (id=1380): r0 = socket$netlink(0x10, 0x3, 0x9) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344, 0x41424344}, 0x2, 0x55) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344}, 0x0, 0x0) syz_emit_ethernet(0x197, &(0x7f00000008c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd668fa51a0161060100000054910000000000000000000000fc0200000000000000000000000000002b002340660000008704040200000800ff01000000000000000000000000000100000000000000000000ffff0a0101002b0a010500000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000000ffff0a01010100000000000000000000000000000000000000000000000000000000000000003b00000000000000050201ff000000002e000400060002004e224e21", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="d020100090780002fe09f9894761674cc813128ba3ae283ec8deb539e178b5c10855ef22020000008f820fd261321544ea874adb9f7d6f676e933fedc7b280658d7cb58c703b672db11a97b0f7f92b924bea9c372f3129fedae5dcb6c03c655852dd892cb2ae695db19d699c1338537468078d25fa0d197608a6aee625cb54811f4da5eed9449172a1f027ee843f2cf6f1bd3e66a2389bc86f484281a115b5f3ca23aeeddd25c27fb33e3b94db561dffddc994422c"], 0x0) syz_emit_ethernet(0x2d6, &(0x7f0000000240)={@local, @random="e19d74de7dc1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x2a0, 0x6, 0x0, @remote, @local, {[@srh={0xc, 0xc, 0x4, 0x6, 0x74, 0x8, 0xfff8, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x87, 0x1c, '\x00', [@padn, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0xa1b8}, @hao={0xc9, 0x10, @empty}, @pad1, @generic={0xe7, 0xb3, "d2f5c9148c4db03ee8eb0efd60d1b67edb3e4fadce522850484111fb4be6e01f71b424cb3c7009db085f01818ff2a21257ca4897dc764468e477efac7f16c48350ee71dc09cd66f4855370baa50ccc0fce7c537e684155d6ddc0271b4e24ce0b7dc366df186bc2d87226d41880d8385573450d997e0148d43d34366dce3d8b999ffcaea4ad3b7c2e454ad97cefb78c123df5d6778f524133b07cbb4079dbf424e556cdbb8bc54c25f27e8aa432ea97827eb3e9"}, @pad1, @pad1, @ra={0x5, 0x2, 0x3}]}, @routing={0x2f, 0xc, 0x0, 0xd1, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @srh={0x2f, 0x12, 0x4, 0x9, 0x7, 0x20, 0xfff9, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00']}, @fragment={0x7a, 0x0, 0x9, 0x1, 0x0, 0x1c, 0x66}, @fragment={0x3a, 0x0, 0xb3, 0x1, 0x0, 0xe, 0x64}, @fragment={0x3a, 0x0, 0x8b, 0x1, 0x0, 0x1e, 0x67}], {{0xfffc, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0xffff, 0x0, 0x6, {[@md5sig={0x1d, 0x12, "fb6ba0cd8f4e22c7624e2ada29619d18"}, @md5sig={0x13, 0x12, "3fb3be65a54fd336b0e78572bf7b439c"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000000000000000a14000000030a050300000000000000000500000a14000000f503010000000000000000000000000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) syz_emit_ethernet(0x10ca, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0) 0s ago: executing program 4 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000006840), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f00000002c0)="047ac15bb527d49ef10ac94a", &(0x7f0000000340)=""/130}, 0x20) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000180)) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000140)='-\x00', 0x2) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r12, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r13, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r13, 0x8, 0x9, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x1c}}, 0x8904) 0s ago: executing program 5 (id=1363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e6ffffffff000000030b0000d4f3875d6bb2000000ffffffff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000c829f168b70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@local}, &(0x7f0000000240)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {}, {0xe, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) kernel console output (not intermixed with test programs): ][ T8448] netlink_rcv_skb+0x208/0x480 [ 141.150792][ T8448] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 141.150814][ T8448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.150856][ T8448] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.150881][ T8448] xfrm_netlink_rcv+0x79/0x90 [ 141.150897][ T8448] netlink_unicast+0x7f8/0x9a0 [ 141.150921][ T8448] ? __pfx_netlink_unicast+0x10/0x10 [ 141.150939][ T8448] ? skb_put+0x114/0x1f0 [ 141.150956][ T8448] netlink_sendmsg+0x8c3/0xcd0 [ 141.150986][ T8448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.151008][ T8448] ? aa_sock_msg_perm+0x91/0x160 [ 141.151035][ T8448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.151054][ T8448] __sock_sendmsg+0x221/0x270 [ 141.151077][ T8448] ____sys_sendmsg+0x523/0x860 [ 141.151104][ T8448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.151118][ T8448] ? __fget_files+0x2a/0x420 [ 141.151135][ T8448] ? __fget_files+0x2a/0x420 [ 141.151159][ T8448] __sys_sendmsg+0x271/0x360 [ 141.151182][ T8448] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.151251][ T8448] ? do_syscall_64+0xb6/0x230 [ 141.151273][ T8448] do_syscall_64+0xf3/0x230 [ 141.151289][ T8448] ? clear_bhb_loop+0x45/0xa0 [ 141.151305][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.151319][ T8448] RIP: 0033:0x7f505cf8d169 [ 141.151333][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.151345][ T8448] RSP: 002b:00007f505dd58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.151361][ T8448] RAX: ffffffffffffffda RBX: 00007f505d1a5fa0 RCX: 00007f505cf8d169 [ 141.151370][ T8448] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 141.151378][ T8448] RBP: 00007f505dd58090 R08: 0000000000000000 R09: 0000000000000000 [ 141.151397][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.151405][ T8448] R13: 0000000000000000 R14: 00007f505d1a5fa0 R15: 00007ffe89b485d8 [ 141.151428][ T8448] [ 141.822475][ T8474] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.835709][ T8474] nftables ruleset with unbound chain [ 141.840382][ T8471] pimreg: entered allmulticast mode [ 142.053947][ T8483] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 142.155733][ T8491] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 142.163732][ T8491] netlink: 'syz.2.701': attribute type 2 has an invalid length. [ 142.481504][ T8507] FAULT_INJECTION: forcing a failure. [ 142.481504][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.494900][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.2.706 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 142.494923][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.494932][ T8507] Call Trace: [ 142.494939][ T8507] [ 142.494946][ T8507] dump_stack_lvl+0x241/0x360 [ 142.494977][ T8507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.495000][ T8507] ? __pfx__printk+0x10/0x10 [ 142.495033][ T8507] should_fail_ex+0x424/0x570 [ 142.495056][ T8507] _copy_to_user+0x31/0xb0 [ 142.495081][ T8507] simple_read_from_buffer+0xc4/0x170 [ 142.495109][ T8507] proc_fail_nth_read+0x1ef/0x260 [ 142.495130][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.495150][ T8507] ? rw_verify_area+0x246/0x630 [ 142.495167][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.495185][ T8507] vfs_read+0x21f/0xb90 [ 142.495209][ T8507] ? __pfx___mutex_lock+0x10/0x10 [ 142.495230][ T8507] ? __pfx_vfs_read+0x10/0x10 [ 142.495266][ T8507] ? __fget_files+0x2a/0x420 [ 142.495284][ T8507] ? __fget_files+0x39d/0x420 [ 142.495296][ T8507] ? __fget_files+0x2a/0x420 [ 142.495316][ T8507] ksys_read+0x19d/0x2d0 [ 142.495336][ T8507] ? __pfx_ksys_read+0x10/0x10 [ 142.495361][ T8507] ? do_syscall_64+0xb6/0x230 [ 142.495383][ T8507] do_syscall_64+0xf3/0x230 [ 142.495403][ T8507] ? clear_bhb_loop+0x45/0xa0 [ 142.495423][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.495439][ T8507] RIP: 0033:0x7f7bad98bb7c [ 142.495455][ T8507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.495476][ T8507] RSP: 002b:00007f7bab7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.495500][ T8507] RAX: ffffffffffffffda RBX: 00007f7badba5fa0 RCX: 00007f7bad98bb7c [ 142.495512][ T8507] RDX: 000000000000000f RSI: 00007f7bab7f60a0 RDI: 0000000000000006 [ 142.495523][ T8507] RBP: 00007f7bab7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.495533][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.495550][ T8507] R13: 0000000000000000 R14: 00007f7badba5fa0 R15: 00007fff225bfbe8 [ 142.495579][ T8507] [ 142.786876][ T8501] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 142.827664][ T8518] __nla_validate_parse: 20 callbacks suppressed [ 142.827683][ T8518] netlink: 104 bytes leftover after parsing attributes in process `syz.2.709'. [ 143.229446][ T8525] pimreg: entered allmulticast mode [ 143.462868][ T8541] af_packet: tpacket_rcv: packet too big, clamped from 700 to 4294967272. macoff=96 [ 143.480025][ T8541] netlink: 104 bytes leftover after parsing attributes in process `syz.2.717'. [ 143.576433][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 143.622192][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 143.745563][ T8547] netlink: 31 bytes leftover after parsing attributes in process `syz.4.716'. [ 143.830075][ T8547] netlink: 31 bytes leftover after parsing attributes in process `syz.4.716'. [ 143.944464][ T8564] No such timeout policy "syz0" [ 144.013424][ T8565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.724'. [ 144.194319][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 144.244847][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 144.254849][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 144.285337][ T8574] validate_nla: 4 callbacks suppressed [ 144.285355][ T8574] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 144.299942][ T8575] netlink: 'syz.1.728': attribute type 3 has an invalid length. [ 144.321041][ T54] block nbd21: Receive control failed (result -107) [ 144.332328][ T8575] netlink: 'syz.1.728': attribute type 2 has an invalid length. [ 144.356189][ T8572] nbd21: detected capacity change from 0 to 256 [ 144.375998][ T6939] block nbd21: Dead connection, failed to find a fallback [ 144.401376][ T6939] block nbd21: shutting down sockets [ 144.444372][ T6939] blk_print_req_error: 159 callbacks suppressed [ 144.444391][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.565791][ T6939] buffer_io_error: 159 callbacks suppressed [ 144.565808][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.587099][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.603747][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.612403][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.630191][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.638330][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.647682][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.663752][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.707757][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.746981][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.789506][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.821252][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.855451][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.894200][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.955996][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 144.974639][ T6939] ldm_validate_partition_table(): Disk read failed. [ 144.993626][ T8592] No such timeout policy "syz0" [ 145.039598][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.082461][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 145.105251][ T6939] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.116201][ T6939] Buffer I/O error on dev nbd21, logical block 0, async page read [ 145.159621][ T8609] Cannot find add_set index 0 as target [ 145.181936][ T6939] Dev nbd21: unable to read RDB block 0 [ 145.210944][ T6939] nbd21: unable to read partition table [ 145.232993][ T6939] ldm_validate_partition_table(): Disk read failed. [ 145.240134][ T6939] Dev nbd21: unable to read RDB block 0 [ 145.250694][ T6939] nbd21: unable to read partition table [ 145.341592][ T54] block nbd22: Receive control failed (result -107) [ 145.402612][ T8605] nbd22: detected capacity change from 0 to 256 [ 145.413164][ T6711] block nbd22: Dead connection, failed to find a fallback [ 145.439029][ T6711] block nbd22: shutting down sockets [ 145.453783][ T6711] ldm_validate_partition_table(): Disk read failed. [ 145.475242][ T6711] Dev nbd22: unable to read RDB block 0 [ 145.485315][ T6711] nbd22: unable to read partition table [ 145.486724][ T8623] No such timeout policy "syz0" [ 145.516874][ T6711] ldm_validate_partition_table(): Disk read failed. [ 145.532031][ T6711] Dev nbd22: unable to read RDB block 0 [ 145.547087][ T6711] nbd22: unable to read partition table [ 145.736114][ T8634] syzkaller1: entered promiscuous mode [ 145.741713][ T8634] syzkaller1: entered allmulticast mode [ 145.842015][ T54] block nbd23: Receive control failed (result -107) [ 145.863166][ T8626] nbd23: detected capacity change from 0 to 256 [ 145.903444][ T6939] block nbd23: Dead connection, failed to find a fallback [ 145.910697][ T6939] block nbd23: shutting down sockets [ 145.917219][ T6939] ldm_validate_partition_table(): Disk read failed. [ 145.946348][ T6939] Dev nbd23: unable to read RDB block 0 [ 145.967260][ T8636] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 145.979304][ T6939] nbd23: unable to read partition table [ 146.040809][ T6939] ldm_validate_partition_table(): Disk read failed. [ 146.087396][ T6939] Dev nbd23: unable to read RDB block 0 [ 146.128833][ T6939] nbd23: unable to read partition table [ 146.710667][ T8663] No such timeout policy "syz0" [ 146.984264][ T54] block nbd24: Receive control failed (result -107) [ 147.114870][ T8673] nbd24: detected capacity change from 0 to 256 [ 147.145516][ T6939] block nbd24: Dead connection, failed to find a fallback [ 147.168346][ T6939] block nbd24: shutting down sockets [ 147.187027][ T6939] ldm_validate_partition_table(): Disk read failed. [ 147.224405][ T6939] Dev nbd24: unable to read RDB block 0 [ 147.231742][ T6939] nbd24: unable to read partition table [ 147.383949][ T6939] ldm_validate_partition_table(): Disk read failed. [ 147.391100][ T6939] Dev nbd24: unable to read RDB block 0 [ 147.445314][ T6939] nbd24: unable to read partition table [ 147.518713][ T8691] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 147.994871][ T8715] __nla_validate_parse: 17 callbacks suppressed [ 147.994903][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 148.015033][ T8716] FAULT_INJECTION: forcing a failure. [ 148.015033][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.062325][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.3.773 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 148.062351][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.062361][ T8716] Call Trace: [ 148.062367][ T8716] [ 148.062375][ T8716] dump_stack_lvl+0x241/0x360 [ 148.062403][ T8716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.062425][ T8716] ? __pfx__printk+0x10/0x10 [ 148.062460][ T8716] should_fail_ex+0x424/0x570 [ 148.062482][ T8716] _copy_from_user+0x2d/0xb0 [ 148.062506][ T8716] __sys_bpf+0x1c5/0x8b0 [ 148.062525][ T8716] ? __pfx___sys_bpf+0x10/0x10 [ 148.062552][ T8716] ? ksys_write+0x275/0x2d0 [ 148.062588][ T8716] __x64_sys_bpf+0x7c/0x90 [ 148.062612][ T8716] do_syscall_64+0xf3/0x230 [ 148.062631][ T8716] ? clear_bhb_loop+0x45/0xa0 [ 148.062648][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.062663][ T8716] RIP: 0033:0x7f0c1c58d169 [ 148.062678][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.062691][ T8716] RSP: 002b:00007f0c1d3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.062709][ T8716] RAX: ffffffffffffffda RBX: 00007f0c1c7a5fa0 RCX: 00007f0c1c58d169 [ 148.062722][ T8716] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 148.062732][ T8716] RBP: 00007f0c1d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 148.062743][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.062753][ T8716] R13: 0000000000000000 R14: 00007f0c1c7a5fa0 R15: 00007fff48edc218 [ 148.062782][ T8716] [ 148.096752][ T8721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.774'. [ 148.104903][ T8715] netlink: 31 bytes leftover after parsing attributes in process `syz.4.771'. [ 148.250928][ T8715] netlink: 'syz.4.771': attribute type 3 has an invalid length. [ 148.260649][ T8715] netlink: 'syz.4.771': attribute type 2 has an invalid length. [ 148.271844][ T8715] netlink: 31 bytes leftover after parsing attributes in process `syz.4.771'. [ 148.303713][ T8722] netlink: 104 bytes leftover after parsing attributes in process `syz.2.775'. [ 148.512966][ T8737] No such timeout policy "syz0" [ 148.588757][ T8745] netlink: 'syz.2.777': attribute type 3 has an invalid length. [ 148.761593][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 148.841484][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 148.850656][ T8749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.778'. [ 148.928338][ T54] block nbd25: Receive control failed (result -107) [ 149.022469][ T8749] nbd25: detected capacity change from 0 to 256 [ 149.059604][ T8776] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 149.103691][ T6939] block nbd25: Dead connection, failed to find a fallback [ 149.110865][ T6939] block nbd25: shutting down sockets [ 149.157933][ T6939] ldm_validate_partition_table(): Disk read failed. [ 149.178304][ T6939] Dev nbd25: unable to read RDB block 0 [ 149.184755][ T6939] nbd25: unable to read partition table [ 149.195522][ T6939] ldm_validate_partition_table(): Disk read failed. [ 149.203479][ T6939] Dev nbd25: unable to read RDB block 0 [ 149.209677][ T6939] nbd25: unable to read partition table [ 149.377738][ T8790] netlink: 104 bytes leftover after parsing attributes in process `syz.0.787'. [ 149.423887][ T8794] veth0_to_team: entered promiscuous mode [ 149.443956][ T8794] veth0_to_team: entered allmulticast mode [ 149.458926][ T8792] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 149.485610][ T8792] netlink: 44 bytes leftover after parsing attributes in process `syz.3.789'. [ 149.490663][ T8799] netlink: 'syz.4.790': attribute type 3 has an invalid length. [ 149.502494][ T8799] netlink: 'syz.4.790': attribute type 2 has an invalid length. [ 149.560084][ T8793] cgroup: fork rejected by pids controller in /syz1 [ 149.852530][ T8802] netlink: 'syz.0.793': attribute type 3 has an invalid length. [ 150.081183][ T8928] No such timeout policy "syz0" [ 150.235538][ T54] block nbd26: Receive control failed (result -107) [ 150.286335][ T8935] nbd26: detected capacity change from 0 to 256 [ 150.308312][ T6939] block nbd26: Dead connection, failed to find a fallback [ 150.349314][ T6939] block nbd26: shutting down sockets [ 150.363379][ T6939] blk_print_req_error: 175 callbacks suppressed [ 150.363396][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.394843][ T6939] buffer_io_error: 175 callbacks suppressed [ 150.394861][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.444980][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.459411][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.471444][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.506151][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.537564][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.551887][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.563173][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.573778][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.581906][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.592092][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.791117][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.825925][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 150.878260][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.992461][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 151.006375][ T6939] ldm_validate_partition_table(): Disk read failed. [ 151.013415][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.027438][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 151.035750][ T6939] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.051492][ T6939] Buffer I/O error on dev nbd26, logical block 0, async page read [ 151.060663][ T6939] Dev nbd26: unable to read RDB block 0 [ 151.067220][ T6939] nbd26: unable to read partition table [ 151.117554][ T6939] ldm_validate_partition_table(): Disk read failed. [ 151.128440][ T6939] Dev nbd26: unable to read RDB block 0 [ 151.135149][ T6939] nbd26: unable to read partition table [ 151.972603][ T8970] netlink: 'syz.3.814': attribute type 3 has an invalid length. [ 152.064538][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.073759][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.098472][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.120429][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.137831][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.646701][ T9012] dccp_invalid_packet: P.Data Offset(5) too small [ 152.849824][ T8997] chnl_net:caif_netlink_parms(): no params data found [ 153.079885][ T9040] __nla_validate_parse: 13 callbacks suppressed [ 153.079902][ T9040] netlink: 104 bytes leftover after parsing attributes in process `syz.0.828'. [ 153.241982][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.278587][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.288705][ T8997] bridge_slave_0: entered allmulticast mode [ 153.301047][ T8997] bridge_slave_0: entered promiscuous mode [ 153.316006][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.323546][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.330779][ T8997] bridge_slave_1: entered allmulticast mode [ 153.344410][ T8997] bridge_slave_1: entered promiscuous mode [ 153.382778][ T9053] sctp: [Deprecated]: syz.4.832 (pid 9053) Use of int in max_burst socket option deprecated. [ 153.382778][ T9053] Use struct sctp_assoc_value instead [ 153.451309][ T8997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.479576][ T8997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.585371][ T8997] team0: Port device team_slave_0 added [ 153.599775][ T8997] team0: Port device team_slave_1 added [ 153.879876][ T8997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.932395][ T8997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.045932][ T8997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.062870][ T8997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.070669][ T8997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.097535][ T8997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.168757][ T54] Bluetooth: hci1: command tx timeout [ 154.246956][ T8997] hsr_slave_0: entered promiscuous mode [ 154.254054][ T8997] hsr_slave_1: entered promiscuous mode [ 154.260580][ T8997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.275343][ T8997] Cannot create hsr debugfs directory [ 154.282523][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.839'. [ 154.856480][ T8997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.024273][ T8997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.073364][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 155.271451][ T9094] netlink: 104 bytes leftover after parsing attributes in process `syz.2.848'. [ 155.291211][ T9096] netlink: 176 bytes leftover after parsing attributes in process `syz.0.847'. [ 155.338060][ T8997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.519715][ T9106] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 155.533189][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.851'. [ 155.544089][ T9106] netlink: 'syz.2.851': attribute type 11 has an invalid length. [ 155.618227][ T8997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.698974][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.722366][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.735588][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.743884][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.753261][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.972846][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 155.981751][ T9122] netlink: 31 bytes leftover after parsing attributes in process `syz.2.855'. [ 156.003557][ T9122] netlink: 'syz.2.855': attribute type 3 has an invalid length. [ 156.011256][ T9122] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 156.022690][ T9122] netlink: 31 bytes leftover after parsing attributes in process `syz.2.855'. [ 156.242559][ T54] Bluetooth: hci1: command tx timeout [ 156.736799][ T8997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.792095][ T8997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.825448][ T8997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.945914][ T8997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.427274][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.516366][ T8997] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.580132][ T9109] chnl_net:caif_netlink_parms(): no params data found [ 157.614712][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.621867][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.797402][ T9160] netlink: 'syz.2.865': attribute type 1 has an invalid length. [ 157.828016][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.835218][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.843053][ T54] Bluetooth: hci0: command tx timeout [ 157.910724][ T9165] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 158.111018][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.128089][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.139318][ T9109] bridge_slave_0: entered allmulticast mode [ 158.163792][ T9109] bridge_slave_0: entered promiscuous mode [ 158.172356][ T9180] netlink: 'syz.2.871': attribute type 3 has an invalid length. [ 158.272771][ T9109] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.279935][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.307377][ T9188] __nla_validate_parse: 4 callbacks suppressed [ 158.307395][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 158.308539][ T9109] bridge_slave_1: entered allmulticast mode [ 158.322977][ T54] Bluetooth: hci1: command tx timeout [ 158.352673][ T9109] bridge_slave_1: entered promiscuous mode [ 158.443020][ T9109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.462294][ T9109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.730115][ T9194] No such timeout policy "syz0" [ 158.907324][ T8997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.987676][ T9109] team0: Port device team_slave_0 added [ 159.012796][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 159.028604][ T9109] team0: Port device team_slave_1 added [ 159.119152][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 159.135896][ T9197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.874'. [ 159.153149][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.170305][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.214569][ T54] block nbd27: Receive control failed (result -107) [ 159.228879][ T9109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.255155][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.272537][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.272638][ T9197] nbd27: detected capacity change from 0 to 256 [ 159.324529][ T9109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.328839][ T6939] block nbd27: Dead connection, failed to find a fallback [ 159.354942][ T6939] block nbd27: shutting down sockets [ 159.360262][ T6939] blk_print_req_error: 27 callbacks suppressed [ 159.360276][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.429188][ T6939] buffer_io_error: 27 callbacks suppressed [ 159.429205][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 159.522939][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.877'. [ 159.547492][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.615068][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 159.628846][ T8997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.666105][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.680482][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 159.758183][ T9109] hsr_slave_0: entered promiscuous mode [ 159.783632][ T9109] hsr_slave_1: entered promiscuous mode [ 159.789964][ T9109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.807094][ T9109] Cannot create hsr debugfs directory [ 159.936967][ T54] Bluetooth: hci0: command tx timeout [ 159.986637][ T9233] netlink: 'syz.4.877': attribute type 2 has an invalid length. [ 160.011972][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.088914][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.111549][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.123158][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.139423][ T9238] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 160.157144][ T9238] bridge0: port 3(vlan2) entered disabled state [ 160.163714][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.172114][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.226079][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.243169][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.251235][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.260909][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.287882][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.299045][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.311531][ T6939] ldm_validate_partition_table(): Disk read failed. [ 160.318467][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.330845][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.339787][ T6939] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.349137][ T6939] Buffer I/O error on dev nbd27, logical block 0, async page read [ 160.357490][ T6939] Dev nbd27: unable to read RDB block 0 [ 160.364186][ T6939] nbd27: unable to read partition table [ 160.409010][ T54] Bluetooth: hci1: command tx timeout [ 160.420603][ T6939] ldm_validate_partition_table(): Disk read failed. [ 160.437623][ T9251] No such timeout policy "syz0" [ 160.441733][ T6939] Dev nbd27: unable to read RDB block 0 [ 160.480013][ T6939] nbd27: unable to read partition table [ 160.545436][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 160.610700][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 160.619783][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.887'. [ 160.626757][ T8997] veth0_vlan: entered promiscuous mode [ 160.697349][ T54] block nbd28: Receive control failed (result -107) [ 160.710093][ T9109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.728400][ T9264] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 160.737013][ T9253] nbd28: detected capacity change from 0 to 256 [ 160.746384][ T6939] block nbd28: Dead connection, failed to find a fallback [ 160.756755][ T6939] block nbd28: shutting down sockets [ 160.779718][ T8997] veth1_vlan: entered promiscuous mode [ 160.790906][ T6939] ldm_validate_partition_table(): Disk read failed. [ 160.798659][ T6939] Dev nbd28: unable to read RDB block 0 [ 160.816146][ T6939] nbd28: unable to read partition table [ 160.830531][ T6939] ldm_validate_partition_table(): Disk read failed. [ 160.848341][ T6939] Dev nbd28: unable to read RDB block 0 [ 160.855167][ T6939] nbd28: unable to read partition table [ 160.915110][ T9109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.030007][ T9109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.146500][ T9260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.220436][ T9109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.231798][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 161.243101][ T9279] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 161.258737][ T9279] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.313130][ T9260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.608909][ T9260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.789953][ T9260] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.868710][ T8997] veth0_macvtap: entered promiscuous mode [ 161.923838][ T8997] veth1_macvtap: entered promiscuous mode [ 162.016027][ T54] Bluetooth: hci0: command tx timeout [ 162.020647][ T9109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.036974][ T9109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.047843][ T9109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.060708][ T9109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.106566][ T9260] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.123416][ T8997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.134151][ T8997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.148431][ T8997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.159499][ T8997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.175229][ T8997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.194391][ T9260] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.248193][ T9260] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.277317][ T9260] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.288974][ T8997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.305483][ T8997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.316542][ T8997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.331178][ T8997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.347165][ T8997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.409134][ T8997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.436783][ T8997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.458737][ T8997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.468137][ T8997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.500052][ T9301] No such timeout policy "syz0" [ 162.671890][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 162.675800][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.701971][ T6598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.712099][ T6598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.737816][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.776300][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.783538][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.786337][ T54] block nbd29: Receive control failed (result -107) [ 162.812016][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.819246][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.843538][ T9304] nbd29: detected capacity change from 0 to 256 [ 162.872901][ T6939] block nbd29: Dead connection, failed to find a fallback [ 162.899086][ T6939] block nbd29: shutting down sockets [ 162.928628][ T6939] ldm_validate_partition_table(): Disk read failed. [ 162.966614][ T6939] Dev nbd29: unable to read RDB block 0 [ 162.973585][ T6939] nbd29: unable to read partition table [ 162.996381][ T6939] ldm_validate_partition_table(): Disk read failed. [ 163.015391][ T6939] Dev nbd29: unable to read RDB block 0 [ 163.023284][ T6939] nbd29: unable to read partition table [ 163.098441][ T6594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.111217][ T6594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.181276][ T9324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.200787][ T9314] netlink: 'syz.2.903': attribute type 3 has an invalid length. [ 163.506643][ T9109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.851820][ T9109] veth0_vlan: entered promiscuous mode [ 163.949868][ T9109] veth1_vlan: entered promiscuous mode [ 164.092271][ T54] Bluetooth: hci0: command tx timeout [ 164.190666][ T9354] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 164.216439][ T9354] __nla_validate_parse: 3 callbacks suppressed [ 164.216459][ T9354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.911'. [ 164.233570][ T9109] veth0_macvtap: entered promiscuous mode [ 164.244129][ T9109] veth1_macvtap: entered promiscuous mode [ 164.300980][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.321899][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.347285][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.365165][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.377645][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.390290][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.401416][ T9363] netlink: 'syz.2.915': attribute type 3 has an invalid length. [ 164.413035][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.426237][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.449856][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.473310][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.494301][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.508693][ T9109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.541273][ T9109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.557720][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 164.559242][ T9372] netlink: 440 bytes leftover after parsing attributes in process `syz.4.918'. [ 164.579544][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.589017][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 164.608382][ T9376] netlink: 'syz.2.917': attribute type 16 has an invalid length. [ 164.624256][ T9376] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.917'. [ 164.666032][ T9109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.692590][ T9378] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 164.709396][ T9109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.718989][ T9109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.730493][ T9109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.960743][ T6594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.000339][ T6594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.047431][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.924'. [ 165.056457][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.924'. [ 165.065541][ T9390] netlink: 'syz.2.924': attribute type 6 has an invalid length. [ 165.110077][ T6594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.130717][ T6594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.435602][ T9408] xt_bpf: check failed: parse error [ 165.790980][ T9421] bridge_slave_0: left allmulticast mode [ 165.806492][ T9421] bridge_slave_0: left promiscuous mode [ 165.845994][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.033874][ T9421] bridge_slave_1: left allmulticast mode [ 166.040127][ T9421] bridge_slave_1: left promiscuous mode [ 166.046240][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.113716][ T9421] bond0: (slave bond_slave_0): Releasing backup interface [ 166.142841][ T9421] bond0: (slave bond_slave_1): Releasing backup interface [ 166.159640][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.174893][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.187953][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.199909][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.387900][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.420097][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.931'. [ 166.530302][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.542943][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'. [ 166.738767][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.769139][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.781465][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.808600][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.826602][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.886113][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.090658][ T9456] No such timeout policy "syz0" [ 167.103131][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.195165][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 167.309261][ T9468] netlink: 'syz.2.940': attribute type 21 has an invalid length. [ 167.334563][ T5841] block nbd30: Receive control failed (result -107) [ 167.382516][ T9461] nbd30: detected capacity change from 0 to 256 [ 167.404426][ T6939] block nbd30: Dead connection, failed to find a fallback [ 167.425594][ T6939] block nbd30: shutting down sockets [ 167.430922][ T6939] blk_print_req_error: 101 callbacks suppressed [ 167.430934][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.479246][ T6939] buffer_io_error: 101 callbacks suppressed [ 167.479262][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.505113][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.522354][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.530491][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.550078][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.558325][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.567721][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.612355][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.680180][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.697874][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.720332][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.729232][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.787257][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.871526][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.932392][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 167.977511][ T6939] ldm_validate_partition_table(): Disk read failed. [ 168.032354][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.080275][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 168.194915][ T6939] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.274201][ T6939] Buffer I/O error on dev nbd30, logical block 0, async page read [ 168.309533][ T6939] Dev nbd30: unable to read RDB block 0 [ 168.327623][ T6939] nbd30: unable to read partition table [ 168.349423][ T6939] ldm_validate_partition_table(): Disk read failed. [ 168.366951][ T6939] Dev nbd30: unable to read RDB block 0 [ 168.378900][ T6939] nbd30: unable to read partition table [ 168.462445][ T63] bridge_slave_1: left allmulticast mode [ 168.482425][ T63] bridge_slave_1: left promiscuous mode [ 168.533214][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.580791][ T63] bridge_slave_0: left allmulticast mode [ 168.597907][ T63] bridge_slave_0: left promiscuous mode [ 168.610872][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.892658][ T5841] Bluetooth: hci0: command tx timeout [ 169.145162][ T9521] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 169.466704][ T9530] __nla_validate_parse: 6 callbacks suppressed [ 169.466723][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 169.564035][ T9532] No such timeout policy "syz0" [ 169.607865][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.626185][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.652735][ T63] bond0 (unregistering): Released all slaves [ 169.672502][ T9505] pim6reg: entered allmulticast mode [ 169.694634][ T9521] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 169.833309][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 169.863619][ T9440] chnl_net:caif_netlink_parms(): no params data found [ 169.970193][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 169.981163][ T9532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.952'. [ 170.023811][ T5841] block nbd31: Receive control failed (result -107) [ 170.052412][ T9532] nbd31: detected capacity change from 0 to 256 [ 170.085993][ T6939] block nbd31: Dead connection, failed to find a fallback [ 170.108190][ T6939] block nbd31: shutting down sockets [ 170.166480][ T6939] ldm_validate_partition_table(): Disk read failed. [ 170.202976][ T6939] Dev nbd31: unable to read RDB block 0 [ 170.231789][ T6939] nbd31: unable to read partition table [ 170.273107][ T6939] ldm_validate_partition_table(): Disk read failed. [ 170.280262][ T6939] Dev nbd31: unable to read RDB block 0 [ 170.343711][ T6939] nbd31: unable to read partition table [ 170.540119][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'. [ 170.556327][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'. [ 170.569222][ T9573] netlink: 'syz.4.959': attribute type 6 has an invalid length. [ 170.604655][ T63] hsr_slave_0: left promiscuous mode [ 170.635963][ T63] hsr_slave_1: left promiscuous mode [ 170.668518][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.700344][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.729186][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.741037][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.793399][ T63] veth1_macvtap: left promiscuous mode [ 170.799386][ T63] veth0_macvtap: left promiscuous mode [ 170.806887][ T63] veth1_vlan: left promiscuous mode [ 170.813001][ T63] veth0_vlan: left promiscuous mode [ 170.962268][ T5841] Bluetooth: hci0: command tx timeout [ 171.248638][ T9612] netlink: 'syz.0.963': attribute type 3 has an invalid length. [ 171.444871][ T9616] netlink: 200 bytes leftover after parsing attributes in process `syz.1.965'. [ 171.936611][ T63] team0 (unregistering): Port device team_slave_1 removed [ 171.978862][ T63] team0 (unregistering): Port device team_slave_0 removed [ 172.429292][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.461243][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.485104][ T9440] bridge_slave_0: entered allmulticast mode [ 172.503319][ T9440] bridge_slave_0: entered promiscuous mode [ 172.523169][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.530310][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.541087][ T9440] bridge_slave_1: entered allmulticast mode [ 172.551044][ T9440] bridge_slave_1: entered promiscuous mode [ 172.611943][ T9629] No such timeout policy "syz0" [ 172.638200][ T9632] netlink: 104 bytes leftover after parsing attributes in process `syz.2.971'. [ 172.821521][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 172.878084][ T9645] syzkaller1: entered promiscuous mode [ 172.898355][ T9645] syzkaller1: entered allmulticast mode [ 172.904046][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 172.945938][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.956952][ T5841] block nbd32: Receive control failed (result -107) [ 172.960373][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.023873][ T9648] nbd32: detected capacity change from 0 to 256 [ 173.044768][ T5841] Bluetooth: hci0: command tx timeout [ 173.064406][ T6939] block nbd32: Dead connection, failed to find a fallback [ 173.071570][ T6939] block nbd32: shutting down sockets [ 173.081873][ T6939] blk_print_req_error: 64 callbacks suppressed [ 173.081888][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.107338][ T6939] buffer_io_error: 64 callbacks suppressed [ 173.107352][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.221553][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.234911][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.246439][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.255875][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.263987][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.273244][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.281327][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.290960][ T9660] Bluetooth: MGMT ver 1.23 [ 173.291030][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.329827][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.335491][ T9440] team0: Port device team_slave_0 added [ 173.345730][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.359288][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.375221][ T9662] x_tables: duplicate underflow at hook 2 [ 173.392196][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.414629][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.443377][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.472102][ T6939] ldm_validate_partition_table(): Disk read failed. [ 173.501599][ T9669] sctp: [Deprecated]: syz.4.976 (pid 9669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.501599][ T9669] Use struct sctp_sack_info instead [ 173.502262][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.552275][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.560297][ T6939] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.576504][ T9440] team0: Port device team_slave_1 added [ 173.579845][ T6939] Buffer I/O error on dev nbd32, logical block 0, async page read [ 173.592978][ T6939] Dev nbd32: unable to read RDB block 0 [ 173.599188][ T6939] nbd32: unable to read partition table [ 173.618841][ T6939] ldm_validate_partition_table(): Disk read failed. [ 173.636552][ T6939] Dev nbd32: unable to read RDB block 0 [ 173.663426][ T6939] nbd32: unable to read partition table [ 173.778155][ T9678] sctp: [Deprecated]: syz.4.976 (pid 9678) Use of int in max_burst socket option deprecated. [ 173.778155][ T9678] Use struct sctp_assoc_value instead [ 174.883467][ T9689] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.894370][ T9689] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.907414][ T9689] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.916363][ T9689] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.961601][ T9689] ip6tnl1: left promiscuous mode [ 174.966945][ T9689] ip6tnl1: left allmulticast mode [ 174.999905][ T9689] vlan2: left allmulticast mode [ 175.007348][ T9689] bond0: left allmulticast mode [ 175.018729][ T9689] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 175.028672][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.045338][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.083912][ T9440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.124989][ T5841] Bluetooth: hci0: command tx timeout [ 175.148861][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.170836][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.220230][ T9440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.341465][ T9714] netlink: 'syz.0.983': attribute type 21 has an invalid length. [ 175.377634][ T9716] No such timeout policy "syz0" [ 175.380389][ T9714] __nla_validate_parse: 1 callbacks suppressed [ 175.380403][ T9714] netlink: 128 bytes leftover after parsing attributes in process `syz.0.983'. [ 175.489151][ T9714] netlink: 'syz.0.983': attribute type 5 has an invalid length. [ 175.521440][ T9714] netlink: 'syz.0.983': attribute type 6 has an invalid length. [ 175.562396][ T9714] netlink: 3 bytes leftover after parsing attributes in process `syz.0.983'. [ 175.609319][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 175.640878][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 175.652321][ T9726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.984'. [ 175.695800][ T5841] block nbd33: Receive control failed (result -107) [ 175.699934][ T9440] hsr_slave_0: entered promiscuous mode [ 175.713396][ T9440] hsr_slave_1: entered promiscuous mode [ 175.719874][ T9440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.722199][ T9726] nbd33: detected capacity change from 0 to 256 [ 175.729487][ T9440] Cannot create hsr debugfs directory [ 175.736139][ T6939] block nbd33: Dead connection, failed to find a fallback [ 175.755893][ T6939] block nbd33: shutting down sockets [ 175.765432][ T6939] ldm_validate_partition_table(): Disk read failed. [ 175.779713][ T6939] Dev nbd33: unable to read RDB block 0 [ 175.793987][ T6939] nbd33: unable to read partition table [ 175.814012][ T6939] ldm_validate_partition_table(): Disk read failed. [ 175.821171][ T6939] Dev nbd33: unable to read RDB block 0 [ 175.833263][ T6939] nbd33: unable to read partition table [ 176.241024][ T9759] xt_cgroup: invalid path, errno=-2 [ 178.077201][ T9778] netlink: 'syz.0.993': attribute type 3 has an invalid length. [ 179.179391][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 179.321821][ T9790] IPVS: Scheduler module ip_vs_sip not found [ 179.347460][ T9795] IPVS: length: 24 != 16106127384 [ 179.418923][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'. [ 179.529993][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 179.548821][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 180.157981][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 180.678807][ T9846] No such timeout policy "syz0" [ 181.370023][ T9440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.528679][ T9440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.571058][ T9895] netlink: 'syz.2.1016': attribute type 3 has an invalid length. [ 181.586765][ T9440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.616615][ T9888] gtp0: entered promiscuous mode [ 181.621608][ T9888] gtp0: entered allmulticast mode [ 181.691424][ T9440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.821295][ T9906] xt_hashlimit: size too large, truncated to 1048576 [ 182.365426][ T9440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.727849][ T9440] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.820292][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 182.856374][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.863615][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.911875][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.919110][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.128328][ T9948] tap0: tun_chr_ioctl cmd 2147767507 [ 183.188231][ T9952] netlink: 'syz.0.1026': attribute type 3 has an invalid length. [ 183.238273][ T9957] openvswitch: netlink: Message has 3 unknown bytes. [ 183.268691][ T9944] Bluetooth: MGMT ver 1.23 [ 183.326152][ T9957] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.829417][ T9974] tun0: tun_chr_ioctl cmd 1074025675 [ 183.835001][ T9974] tun0: persist disabled [ 184.129032][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.233864][ T9997] syz.2.1037: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 184.252311][ T9997] CPU: 0 UID: 0 PID: 9997 Comm: syz.2.1037 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 184.252333][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.252343][ T9997] Call Trace: [ 184.252350][ T9997] [ 184.252358][ T9997] dump_stack_lvl+0x241/0x360 [ 184.252388][ T9997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.252411][ T9997] ? __pfx__printk+0x10/0x10 [ 184.252432][ T9997] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 184.252458][ T9997] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 184.252479][ T9997] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 184.252505][ T9997] warn_alloc+0x27c/0x410 [ 184.252527][ T9997] ? __pfx_warn_alloc+0x10/0x10 [ 184.252550][ T9997] ? xskq_create+0xb6/0x170 [ 184.252566][ T9997] ? __get_vm_area_node+0x1c8/0x2d0 [ 184.252587][ T9997] ? __get_vm_area_node+0x25c/0x2d0 [ 184.252616][ T9997] __vmalloc_node_range_noprof+0x634/0x1390 [ 184.252663][ T9997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 184.252684][ T9997] ? __kasan_kmalloc+0x9d/0xb0 [ 184.252709][ T9997] vmalloc_user_noprof+0x74/0x80 [ 184.252725][ T9997] ? xskq_create+0xb6/0x170 [ 184.252741][ T9997] xskq_create+0xb6/0x170 [ 184.252760][ T9997] xsk_init_queue+0xa1/0x100 [ 184.252780][ T9997] xsk_setsockopt+0x4f9/0x840 [ 184.252799][ T9997] ? __pfx_xsk_setsockopt+0x10/0x10 [ 184.252812][ T9997] ? __lock_acquire+0xad5/0xd80 [ 184.252829][ T9997] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.252853][ T9997] ? aa_sock_opt_perm+0x79/0x120 [ 184.252880][ T9997] ? __pfx_xsk_setsockopt+0x10/0x10 [ 184.252894][ T9997] do_sock_setsockopt+0x3b1/0x710 [ 184.252918][ T9997] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 184.252932][ T9997] ? __fget_files+0x2a/0x420 [ 184.252952][ T9997] ? __fget_files+0x39d/0x420 [ 184.252966][ T9997] ? __fget_files+0x2a/0x420 [ 184.252990][ T9997] __x64_sys_setsockopt+0x1ee/0x280 [ 184.253014][ T9997] do_syscall_64+0xf3/0x230 [ 184.253034][ T9997] ? clear_bhb_loop+0x45/0xa0 [ 184.253053][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.253069][ T9997] RIP: 0033:0x7f7bad98d169 [ 184.253084][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.253097][ T9997] RSP: 002b:00007f7bab7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.253116][ T9997] RAX: ffffffffffffffda RBX: 00007f7badba6080 RCX: 00007f7bad98d169 [ 184.253128][ T9997] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 184.253138][ T9997] RBP: 00007f7bada0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 184.253148][ T9997] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 184.253159][ T9997] R13: 0000000000000000 R14: 00007f7badba6080 R15: 00007fff225bfbe8 [ 184.253186][ T9997] [ 184.253193][ T9997] Mem-Info: [ 184.302881][ T9997] active_anon:7891 inactive_anon:0 isolated_anon:0 [ 184.302881][ T9997] active_file:1813 inactive_file:38356 isolated_file:0 [ 184.302881][ T9997] unevictable:768 dirty:197 writeback:0 [ 184.302881][ T9997] slab_reclaimable:10641 slab_unreclaimable:108387 [ 184.302881][ T9997] mapped:29131 shmem:1405 pagetables:1018 [ 184.302881][ T9997] sec_pagetables:0 bounce:0 [ 184.302881][ T9997] kernel_misc_reclaimable:0 [ 184.302881][ T9997] free:1323354 free_pcp:2062 free_cma:0 [ 184.582495][ T9997] Node 0 active_anon:21964kB inactive_anon:0kB active_file:7252kB inactive_file:153348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116524kB dirty:788kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13044kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.627287][ T9997] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 184.659078][ T9997] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.691381][ T9997] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 184.699105][ T9997] Node 0 DMA32 free:1380972kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21856kB inactive_anon:0kB active_file:7252kB inactive_file:153248kB unevictable:1536kB writepending:788kB present:3129332kB managed:2547256kB mlocked:0kB bounce:0kB free_pcp:14300kB local_pcp:13860kB free_cma:0kB [ 184.718308][ T9440] veth0_vlan: entered promiscuous mode [ 184.735552][ T9997] lowmem_reserve[]: 0 0 0 0 0 [ 184.740910][ T9997] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.770876][ T9997] lowmem_reserve[]: 0 0 0 0 0 [ 184.775711][ T9997] Node 1 Normal free:3902624kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.805891][ T9997] lowmem_reserve[]: 0 0 0 0 0 [ 184.811395][ T9997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.824662][ T9997] Node 0 DMA32: 2*4kB (ME) 13*8kB (ME) 18*16kB (UME) 58*32kB (UE) 11*64kB (UE) 3*128kB (M) 47*256kB (UME) 174*512kB (UME) 86*1024kB (UM) 16*2048kB (UM) 282*4096kB (M) = 1380368kB [ 184.839357][ T9440] veth1_vlan: entered promiscuous mode [ 184.843138][ T9997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 184.859919][ T9997] Node 1 Normal: 228*4kB (UME) 48*8kB (UME) 43*16kB (UME) 219*32kB (UME) 100*64kB (UME) 29*128kB (UME) 14*256kB (UM) 10*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3902624kB [ 184.878775][ T9997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.888597][ T9997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.902206][ T9997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.913746][ T9997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.923119][ T9997] 41580 total pagecache pages [ 184.927822][ T9997] 0 pages in swap cache [ 184.931987][ T9997] Free swap = 124996kB [ 184.936316][ T9997] Total swap = 124996kB [ 184.941836][ T9997] 2097051 pages RAM [ 184.945782][ T9997] 0 pages HighMem/MovableOnly [ 184.950461][ T9997] 428579 pages reserved [ 184.954721][ T9997] 0 pages cma reserved [ 185.129520][ T9440] veth0_macvtap: entered promiscuous mode [ 185.173390][ T9440] veth1_macvtap: entered promiscuous mode [ 185.245537][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.256434][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.267059][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.277964][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.290849][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.306068][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.319671][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.330648][ T9440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.341662][ T9440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.361118][ T9440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.407992][ T9440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.429286][T10019] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1041'. [ 185.472313][ T9440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.479392][T10021] No such timeout policy "syz0" [ 185.521660][ T9440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.561611][ T9440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.809679][ T6584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.840546][ T6584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.986203][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.995159][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.336819][T10059] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1050'. [ 186.347664][T10063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1050'. [ 186.692972][T10088] No such timeout policy "syz0" [ 187.125468][T10086] netlink: 'syz.1.1052': attribute type 3 has an invalid length. [ 187.156446][T10098] team_slave_0: entered promiscuous mode [ 187.162209][T10098] team_slave_1: entered promiscuous mode [ 187.203743][T10098] macsec1: entered allmulticast mode [ 187.236524][T10098] team0: entered allmulticast mode [ 187.242886][T10098] team_slave_0: entered allmulticast mode [ 187.259803][T10098] team_slave_1: entered allmulticast mode [ 188.213072][T10167] No such timeout policy "syz0" [ 188.287909][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 188.340434][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 188.354034][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1069'. [ 188.418599][ T5841] block nbd34: Receive control failed (result -107) [ 188.472759][T10174] nbd34: detected capacity change from 0 to 256 [ 188.501689][ T6939] block nbd34: Dead connection, failed to find a fallback [ 188.536427][ T6939] block nbd34: shutting down sockets [ 188.552679][ T6939] blk_print_req_error: 64 callbacks suppressed [ 188.552696][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.589328][T10184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1071'. [ 188.592173][ T6939] buffer_io_error: 64 callbacks suppressed [ 188.592187][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.670875][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.683018][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 188.683273][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.704211][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.714656][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.727595][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.741513][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.771092][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.787637][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.796919][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.812382][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.827718][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.851121][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.860742][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.875006][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.886409][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.894742][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.904096][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.912964][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.933590][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.949340][ T6939] ldm_validate_partition_table(): Disk read failed. [ 188.957300][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.958886][T10184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.968012][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 188.983791][T10191] syzkaller1: entered promiscuous mode [ 189.002398][ T6939] I/O error, dev nbd34, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.016623][T10191] syzkaller1: entered allmulticast mode [ 189.022231][ T6939] Buffer I/O error on dev nbd34, logical block 0, async page read [ 189.036883][T10193] sctp: [Deprecated]: syz.0.1072 (pid 10193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.036883][T10193] Use struct sctp_sack_info instead [ 189.077301][T10200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.078115][ T6939] Dev nbd34: unable to read RDB block 0 [ 189.140121][ T6939] nbd34: unable to read partition table [ 189.151199][ T6939] ldm_validate_partition_table(): Disk read failed. [ 189.173325][ T6939] Dev nbd34: unable to read RDB block 0 [ 189.182956][ T6939] nbd34: unable to read partition table [ 189.232063][ T6939] ldm_validate_partition_table(): Disk read failed. [ 189.263099][T10209] netlink: 'syz.2.1075': attribute type 3 has an invalid length. [ 189.271842][ T6939] Dev nbd34: unable to read RDB block 0 [ 189.306774][ T6939] nbd34: unable to read partition table [ 189.387209][ T6939] ldm_validate_partition_table(): Disk read failed. [ 189.417901][ T6939] Dev nbd34: unable to read RDB block 0 [ 189.457550][ T6939] nbd34: unable to read partition table [ 189.506777][T10220] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 189.569654][T10220] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.579966][T10220] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.588880][T10220] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.597999][T10220] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.613916][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 189.614481][T10220] bond2: (slave geneve2): making interface the new active one [ 189.633924][T10220] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 189.667764][T10226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.708760][T10220] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.787621][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 189.829417][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 189.867113][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 190.001830][T10241] No such timeout policy "syz0" [ 190.136467][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 190.242076][ T54] block nbd35: Receive control failed (result -107) [ 190.272829][T10186] chnl_net:caif_netlink_parms(): no params data found [ 190.313289][T10250] nbd35: detected capacity change from 0 to 256 [ 190.321542][ T6939] block nbd35: Dead connection, failed to find a fallback [ 190.345439][T10256] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 190.366680][ T6939] block nbd35: shutting down sockets [ 190.382573][T10256] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 190.387716][ T6939] ldm_validate_partition_table(): Disk read failed. [ 190.428283][T10262] geneve3: entered promiscuous mode [ 190.475283][T10263] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 190.522946][ T6939] Dev nbd35: unable to read RDB block 0 [ 190.547303][ T6939] nbd35: unable to read partition table [ 190.597311][ T6939] ldm_validate_partition_table(): Disk read failed. [ 190.637446][ T6939] Dev nbd35: unable to read RDB block 0 [ 190.675792][ T6939] nbd35: unable to read partition table [ 190.882663][ T54] Bluetooth: hci0: command tx timeout [ 191.005706][T10186] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.062746][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.070067][T10186] bridge_slave_0: entered allmulticast mode [ 191.090235][T10186] bridge_slave_0: entered promiscuous mode [ 191.249899][T10186] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.273078][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.301283][T10186] bridge_slave_1: entered allmulticast mode [ 191.344559][T10186] bridge_slave_1: entered promiscuous mode [ 191.597906][T10186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.693904][T10186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.694467][T10320] No such timeout policy "syz0" [ 191.862857][T10325] batadv_slave_0: entered promiscuous mode [ 191.875569][T10323] batadv_slave_0: left promiscuous mode [ 191.954300][ T54] block nbd36: Receive control failed (result -107) [ 191.974113][T10186] team0: Port device team_slave_0 added [ 191.985203][T10186] team0: Port device team_slave_1 added [ 192.002562][T10327] nbd36: detected capacity change from 0 to 256 [ 192.017416][ T6939] block nbd36: Dead connection, failed to find a fallback [ 192.033426][ T6939] block nbd36: shutting down sockets [ 192.039734][ T6939] ldm_validate_partition_table(): Disk read failed. [ 192.047867][ T6939] Dev nbd36: unable to read RDB block 0 [ 192.055855][ T6939] nbd36: unable to read partition table [ 192.089920][ T6939] ldm_validate_partition_table(): Disk read failed. [ 192.107667][ T6939] Dev nbd36: unable to read RDB block 0 [ 192.123576][ T6939] nbd36: unable to read partition table [ 192.152956][T10186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.159945][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.189488][T10186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.247687][T10186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.255236][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.331526][T10186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.616944][T10186] hsr_slave_0: entered promiscuous mode [ 192.660998][T10186] hsr_slave_1: entered promiscuous mode [ 192.705966][T10186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.729287][T10186] Cannot create hsr debugfs directory [ 192.952272][T10381] netlink: 'syz.4.1107': attribute type 3 has an invalid length. [ 192.962326][ T54] Bluetooth: hci0: command tx timeout [ 193.943555][T10438] __nla_validate_parse: 13 callbacks suppressed [ 193.943574][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 194.169383][T10186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.227257][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 194.319249][T10186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.577906][T10469] netlink: 'syz.1.1124': attribute type 3 has an invalid length. [ 194.634944][T10186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.810584][T10186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.007150][T10479] syzkaller1: entered promiscuous mode [ 195.013105][T10479] syzkaller1: entered allmulticast mode [ 195.042394][ T5843] Bluetooth: hci0: command tx timeout [ 195.232485][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 195.300859][T10498] team_slave_0: left promiscuous mode [ 195.307871][T10498] team_slave_1: left promiscuous mode [ 195.554058][T10498] team0 (unregistering): left allmulticast mode [ 195.572630][T10498] team_slave_0: left allmulticast mode [ 195.582285][T10498] team_slave_1: left allmulticast mode [ 195.645794][T10498] team0 (unregistering): Port device team_slave_0 removed [ 195.669793][T10498] team0 (unregistering): Port device team_slave_1 removed [ 196.084705][T10186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.141637][T10186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.185765][T10186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.250460][T10186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.324554][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.330621][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 196.396969][T10540] bridge_slave_0: left allmulticast mode [ 196.417930][T10540] bridge_slave_0: left promiscuous mode [ 196.430332][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.456434][T10540] bridge_slave_1: left allmulticast mode [ 196.467649][T10540] bridge_slave_1: left promiscuous mode [ 196.475121][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.493658][T10540] bond0: (slave bond_slave_0): Releasing backup interface [ 196.506387][T10540] bond0: (slave bond_slave_1): Releasing backup interface [ 196.520363][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.532298][T10540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.543381][T10540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.551061][T10540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.657098][T10544] vlan3: entered allmulticast mode [ 196.673428][T10544] bond0: entered allmulticast mode [ 196.691057][T10544] bridge0: port 1(vlan3) entered blocking state [ 196.718912][T10544] bridge0: port 1(vlan3) entered disabled state [ 196.735132][T10544] vlan3: entered promiscuous mode [ 196.740194][T10544] bond0: entered promiscuous mode [ 196.759687][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1144'. [ 196.869013][T10546] netlink: 'syz.0.1141': attribute type 3 has an invalid length. [ 196.991242][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'. [ 197.089525][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.123626][ T5841] Bluetooth: hci0: command tx timeout [ 197.219397][T10577] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 197.227704][T10577] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1149'. [ 197.288959][T10583] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.305516][T10186] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.332861][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.340042][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.744808][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.751996][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.037442][T10621] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 198.053353][T10621] netlink: 'syz.0.1155': attribute type 2 has an invalid length. [ 198.093541][T10621] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1155'. [ 198.236644][T10636] netlink: 'syz.1.1159': attribute type 3 has an invalid length. [ 198.478263][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 198.666469][T10186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.826191][T10186] veth0_vlan: entered promiscuous mode [ 198.830479][T10668] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 198.855789][T10186] veth1_vlan: entered promiscuous mode [ 198.865464][T10668] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1169'. [ 198.953618][T10186] veth0_macvtap: entered promiscuous mode [ 198.991156][T10186] veth1_macvtap: entered promiscuous mode [ 199.079031][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.109304][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.121934][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.140102][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.154591][T10186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.188296][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.218427][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 199.229586][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.230179][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1172'. [ 199.266905][T10186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.301039][T10186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.329464][T10186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.427361][T10186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.473823][T10186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.502383][T10186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.511094][T10186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.730116][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 199.784199][ T6584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.811931][ T6584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.867305][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.890232][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.996384][T10696] netlink: 'syz.1.1177': attribute type 3 has an invalid length. [ 200.785049][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 200.931693][T10764] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1193'. [ 201.801068][T10771] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 202.026810][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'. [ 202.035950][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 202.051954][T10785] bridge0: port 1(syz_tun) entered blocking state [ 202.072428][T10785] bridge0: port 1(syz_tun) entered disabled state [ 202.079069][T10785] syz_tun: entered allmulticast mode [ 202.094302][T10785] syz_tun: entered promiscuous mode [ 202.148935][T10785] bridge0: port 1(syz_tun) entered blocking state [ 202.155573][T10785] bridge0: port 1(syz_tun) entered forwarding state [ 202.178202][T10785] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 202.452983][T10812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1206'. [ 202.484757][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 202.495988][T10809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1208'. [ 202.520852][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.537101][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.547406][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.580497][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.588360][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.310079][T10852] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 203.433439][T10813] chnl_net:caif_netlink_parms(): no params data found [ 203.601470][T10866] netlink: 'syz.2.1225': attribute type 3 has an invalid length. [ 203.738011][T10876] sctp: [Deprecated]: syz.1.1226 (pid 10876) Use of int in maxseg socket option. [ 203.738011][T10876] Use struct sctp_assoc_value instead [ 203.939119][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.990503][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.012353][T10813] bridge_slave_0: entered allmulticast mode [ 204.034005][T10813] bridge_slave_0: entered promiscuous mode [ 204.057694][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.076522][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.090230][T10813] bridge_slave_1: entered allmulticast mode [ 204.105181][T10813] bridge_slave_1: entered promiscuous mode [ 204.351452][T10906] __nla_validate_parse: 3 callbacks suppressed [ 204.351474][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 204.360588][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.368093][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 204.389756][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 204.410050][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 204.419216][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 204.460361][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.722919][ T54] Bluetooth: hci0: command tx timeout [ 205.217300][T10813] team0: Port device team_slave_0 added [ 205.230141][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 205.233363][T10813] team0: Port device team_slave_1 added [ 205.449037][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 205.466539][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 205.496436][T10939] netlink: 'syz.4.1242': attribute type 18 has an invalid length. [ 205.517246][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.534294][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.599682][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.642615][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 205.734957][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.743009][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.775873][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.907373][T10813] hsr_slave_0: entered promiscuous mode [ 205.915097][T10813] hsr_slave_1: entered promiscuous mode [ 205.921696][T10813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.927410][T10947] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 205.929962][T10813] Cannot create hsr debugfs directory [ 205.955411][T10952] tipc: Failed to obtain node identity [ 205.961071][T10952] tipc: Enabling of bearer rejected, failed to enable media [ 205.973704][T10953] veth1_macvtap: left promiscuous mode [ 206.026115][T10947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.035056][T10956] Cannot find add_set index 4 as target [ 206.059910][T10952] bond1: (slave gretap1): making interface the new active one [ 206.071021][T10952] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 206.209461][T10954] Illegal XDP return value 1540016627 on prog (id 535) dev N/A, expect packet loss! [ 206.532068][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 206.574008][T10984] netlink: 'syz.2.1251': attribute type 3 has an invalid length. [ 206.586734][T10981] veth1_macvtap: left promiscuous mode [ 206.729983][T10986] netlink: 'syz.0.1254': attribute type 15 has an invalid length. [ 206.802235][ T54] Bluetooth: hci0: command tx timeout [ 207.018720][T10813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.202746][T11009] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 207.306319][T10813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.494147][T10813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.720020][T11046] netlink: 'syz.4.1267': attribute type 3 has an invalid length. [ 207.878001][T10813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.218496][T10813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.249207][T11080] sctp: [Deprecated]: syz.1.1281 (pid 11080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.249207][T11080] Use struct sctp_sack_info instead [ 208.261419][T11076] netlink: set zone limit has 8 unknown bytes [ 208.269266][T11080] netlink: 'syz.1.1281': attribute type 3 has an invalid length. [ 208.300628][T10813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.328461][T10813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.397489][T10813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.493168][T11091] netlink: 'syz.4.1286': attribute type 2 has an invalid length. [ 208.590498][T11093] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 208.899454][ T54] Bluetooth: hci0: command tx timeout [ 209.198782][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.269824][T11121] netlink: 'syz.4.1289': attribute type 3 has an invalid length. [ 209.366258][T11128] __nla_validate_parse: 14 callbacks suppressed [ 209.366276][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 209.669350][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.688797][T11128] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.741787][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.749014][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.749276][T11128] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 209.761341][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.772418][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.785477][T11137] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1294'. [ 209.899469][T10813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.995985][T11142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1296'. [ 210.130379][T11093] infiniband syz1: set down [ 210.142422][T11093] infiniband syz1: added team_slave_0 [ 210.155952][T11093] syz1: rxe_create_cq: returned err = -12 [ 210.170924][T11093] infiniband syz1: Couldn't create ib_mad CQ [ 210.202506][T11093] infiniband syz1: Couldn't open port 1 [ 210.249293][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.352903][T11093] RDS/IB: syz1: added [ 210.364822][T11093] smc: adding ib device syz1 with port count 1 [ 210.374383][T11093] smc: ib device syz1 port 1 has pnetid [ 210.392992][T10813] veth0_vlan: entered promiscuous mode [ 210.422035][T10813] veth1_vlan: entered promiscuous mode [ 210.525470][T10813] veth0_macvtap: entered promiscuous mode [ 210.553155][T10813] veth1_macvtap: entered promiscuous mode [ 210.604961][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.630793][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.650869][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.672295][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 210.682186][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.702418][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.738580][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.750611][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.770083][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 210.830430][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.843106][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.854306][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.865412][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.875892][T10813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.888294][T10813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.903472][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.935566][T10813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.959943][T10813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.970041][ T54] Bluetooth: hci0: command tx timeout [ 210.983688][T10813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.992849][T10813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.275049][T11177] netlink: 'syz.4.1307': attribute type 10 has an invalid length. [ 211.329096][ T6594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.347410][ T6594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.421594][T11177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.450775][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.461060][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.721667][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 211.731096][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 211.819076][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 211.828256][T11193] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 211.968373][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 212.097117][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1313'. [ 212.209270][T11204] bridge0: port 3(vlan2) entered blocking state [ 212.215811][T11204] bridge0: port 3(vlan2) entered listening state [ 212.222572][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.229714][T11204] bridge0: port 2(bridge_slave_1) entered listening state [ 212.237136][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.245230][T11204] bridge0: port 1(bridge_slave_0) entered listening state [ 212.289119][T11204] bridge_slave_0: left allmulticast mode [ 212.294900][T11204] bridge_slave_0: left promiscuous mode [ 212.300657][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.320965][T11204] bridge_slave_1: left allmulticast mode [ 212.326946][T11204] bridge_slave_1: left promiscuous mode [ 212.333975][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.370555][T11204] bond0: (slave bond_slave_0): Releasing backup interface [ 212.394524][T11204] bond_slave_0: left promiscuous mode [ 212.400203][T11204] bond_slave_0: left allmulticast mode [ 212.422295][T11204] bond0: (slave bond_slave_1): Releasing backup interface [ 212.432797][T11204] bond_slave_1: left promiscuous mode [ 212.438456][T11204] bond_slave_1: left allmulticast mode [ 212.459068][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.467021][T11204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.477277][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.485488][T11204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.518252][T11204] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 212.534773][T11204] erspan1: left promiscuous mode [ 212.539841][T11204] erspan1: left allmulticast mode [ 212.549111][T11204] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 212.557030][T11204] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 212.566925][T11204] macsec1: left promiscuous mode [ 212.572080][T11204] macsec1: left allmulticast mode [ 212.577225][T11204] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 212.588533][T11204] vlan2: left allmulticast mode [ 212.593599][T11204] bond0: left allmulticast mode [ 212.598476][T11204] vlan2: left promiscuous mode [ 212.603450][T11204] bond0: left promiscuous mode [ 212.608585][T11204] bridge0: port 3(vlan2) entered disabled state [ 212.623973][T11204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.634926][T11204] bond2: (slave geneve2): Releasing active interface [ 212.662537][T11204] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.671550][T11204] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.680691][T11204] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.689725][T11204] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.704951][T11204] geneve3: left promiscuous mode [ 212.711943][T11204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.723863][T11207] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 213.606369][T11229] netlink: 'syz.0.1316': attribute type 3 has an invalid length. [ 214.707380][ T5212] udevd[5212]: worker [6363] /devices/virtual/block/nbd5 is taking a long time [ 214.848368][ T5212] udevd[5212]: worker [5976] /devices/virtual/block/nbd1 is taking a long time [ 214.930908][ T5212] udevd[5212]: worker [6435] /devices/virtual/block/nbd6 is taking a long time [ 214.993782][ T5212] udevd[5212]: worker [5963] /devices/virtual/block/nbd2 is taking a long time [ 215.034745][ T5212] udevd[5212]: worker [6230] /devices/virtual/block/nbd3 is taking a long time [ 215.083109][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.101012][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.109703][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.120372][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.138855][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.154794][ T5212] udevd[5212]: worker [5887] /devices/virtual/block/nbd4 is taking a long time [ 215.182275][ T5212] udevd[5212]: worker [6609] /devices/virtual/block/nbd8 is taking a long time [ 215.443579][T11245] __nla_validate_parse: 1 callbacks suppressed [ 215.443598][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 215.511140][T11247] dccp_invalid_packet: P.Data Offset(155) too large [ 215.685883][T11259] netlink: 'syz.2.1327': attribute type 7 has an invalid length. [ 216.376023][T11277] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 216.409833][T11277] ipvlan0: entered promiscuous mode [ 216.456089][T11277] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 216.520699][T11240] chnl_net:caif_netlink_parms(): no params data found [ 216.654110][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1330'. [ 216.922863][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.932294][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.939846][T11240] bridge_slave_0: entered allmulticast mode [ 216.966300][T11240] bridge_slave_0: entered promiscuous mode [ 216.984317][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.013613][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.020910][T11240] bridge_slave_1: entered allmulticast mode [ 217.107236][T11240] bridge_slave_1: entered promiscuous mode [ 217.285620][ T5841] Bluetooth: hci0: command tx timeout [ 217.331532][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1334'. [ 217.373066][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.406372][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.646232][T11240] team0: Port device team_slave_0 added [ 217.666723][T11240] team0: Port device team_slave_1 added [ 217.794875][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.824642][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.867990][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.899902][T11302] ipvlan0: left promiscuous mode [ 217.945740][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.971557][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.032509][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.086111][T11307] bridge0: port 1(gretap0) entered blocking state [ 218.108904][T11307] bridge0: port 1(gretap0) entered disabled state [ 218.118158][T11307] gretap0: entered allmulticast mode [ 218.126242][T11307] gretap0: entered promiscuous mode [ 218.133074][T11302] gretap0: left allmulticast mode [ 218.138204][T11302] gretap0: left promiscuous mode [ 218.144677][T11302] bridge0: port 1(gretap0) entered disabled state [ 218.211721][T11240] hsr_slave_0: entered promiscuous mode [ 218.219887][T11240] hsr_slave_1: entered promiscuous mode [ 218.226353][T11240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.235555][T11240] Cannot create hsr debugfs directory [ 218.352777][T11318] xt_hashlimit: overflow, try lower: 0/0 [ 218.420170][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 218.752627][T11240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.810256][T11335] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 218.894336][T11240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.006943][T11240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.101639][T11240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.295752][T11240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.315048][T11240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.331108][T11240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.344212][T11240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.362683][ T5841] Bluetooth: hci0: command tx timeout [ 219.504352][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.578749][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.629665][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.636893][ T6584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.681054][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.688289][ T6584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.811944][T11240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.048630][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.197038][T11240] veth0_vlan: entered promiscuous mode [ 220.230270][T11240] veth1_vlan: entered promiscuous mode [ 220.323960][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 220.351279][T11240] veth0_macvtap: entered promiscuous mode [ 220.378556][T11240] veth1_macvtap: entered promiscuous mode [ 220.411243][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.442419][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.484252][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.511910][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.522217][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.542210][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.573388][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.594147][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.612992][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.634471][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.672480][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.708298][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.735641][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.767285][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.813200][T11240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.849368][T11240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.862488][T11240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.871223][T11240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.955406][T11362] IPVS: Scheduler module ip_vs_ not found [ 221.030562][T11367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.209070][ T6594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.239110][ T6594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.309601][ T6598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.332384][ T6598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.378622][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 221.442698][ T5841] Bluetooth: hci0: command tx timeout [ 222.161262][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1360'. [ 222.740457][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1362'. [ 222.842447][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 224.631481][T11439] netlink: 134820 bytes leftover after parsing attributes in process `syz.4.1370'. [ 224.914263][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.930598][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.938832][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.959899][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.039886][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.055185][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.063546][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.070578][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.081304][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.093979][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.276274][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 225.486693][T11460] 8021q: VLANs not supported on wg2 [ 225.591431][T11463] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 225.601350][T11463] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1377'. [ 225.902690][T11484] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1378'. [ 226.003455][T11488] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 226.127311][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 226.335733][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 226.493328][T11501] sctp: [Deprecated]: syz.2.1388 (pid 11501) Use of int in max_burst socket option deprecated. [ 226.493328][T11501] Use struct sctp_assoc_value instead [ 226.552802][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 226.573793][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 226.830199][T11441] chnl_net:caif_netlink_parms(): no params data found [ 227.007839][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.015203][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.023172][T11441] bridge_slave_0: entered allmulticast mode [ 227.030969][T11441] bridge_slave_0: entered promiscuous mode [ 227.068669][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.076200][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.083563][T11441] bridge_slave_1: entered allmulticast mode [ 227.091033][T11441] bridge_slave_1: entered promiscuous mode [ 227.122704][ T5840] Bluetooth: hci1: command tx timeout [ 227.122717][ T54] Bluetooth: hci0: command tx timeout [ 227.161728][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.185808][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.233823][T11443] chnl_net:caif_netlink_parms(): no params data found [ 227.253981][T11441] team0: Port device team_slave_0 added [ 227.268841][T11441] team0: Port device team_slave_1 added [ 227.338147][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.345256][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.372894][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.384865][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.391827][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.419880][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.517511][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.525928][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.534483][T11443] bridge_slave_0: entered allmulticast mode [ 227.541569][T11443] bridge_slave_0: entered promiscuous mode [ 227.571161][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.578624][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.586739][T11443] bridge_slave_1: entered allmulticast mode [ 227.596586][T11443] bridge_slave_1: entered promiscuous mode [ 227.626003][T11441] hsr_slave_0: entered promiscuous mode [ 227.632622][T11441] hsr_slave_1: entered promiscuous mode [ 227.638689][T11441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.646656][T11441] Cannot create hsr debugfs directory [ 227.674468][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.687959][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.773581][T11443] team0: Port device team_slave_0 added [ 227.794507][T11443] team0: Port device team_slave_1 added [ 227.860850][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.868113][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.894418][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.907527][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.915011][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.945662][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.035898][T11443] hsr_slave_0: entered promiscuous mode [ 228.042373][T11443] hsr_slave_1: entered promiscuous mode [ 228.048460][T11443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.056390][T11443] Cannot create hsr debugfs directory [ 228.177749][T11441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.200409][T11441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.224771][T11441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.262383][T11441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.334898][T11443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.424725][T11443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.468147][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.497317][T11443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.531758][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.546084][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.553276][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.574135][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.581230][ T6584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.615635][T11443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.819822][T11443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.846671][T11443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.858606][T11443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.870312][T11443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.946938][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.040681][T11443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.091453][T11443] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.108543][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.115724][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.142133][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.149326][ T6584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.204155][ T5840] Bluetooth: hci1: command tx timeout [ 229.209601][ T5840] Bluetooth: hci0: command tx timeout [ 229.284617][T11441] veth0_vlan: entered promiscuous mode [ 229.298894][T11441] veth1_vlan: entered promiscuous mode [ 229.334232][T11441] veth0_macvtap: entered promiscuous mode [ 229.349886][T11441] veth1_macvtap: entered promiscuous mode [ 229.382551][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.393187][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.404019][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.414893][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.430354][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.441231][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.461196][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.472070][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.484141][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.507258][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.529661][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.540692][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.551547][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.563984][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.575037][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.585408][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.596147][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.608941][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.629549][T11441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.638734][T11441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.648225][T11441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.664787][T11441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.706312][T11443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.798457][ T6594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.807470][ T6594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.820740][T11443] veth0_vlan: entered promiscuous mode [ 229.875045][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.879101][T11443] veth1_vlan: entered promiscuous mode [ 229.884027][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.930725][T11443] veth0_macvtap: entered promiscuous mode [ 229.960150][T11443] veth1_macvtap: entered promiscuous mode [ 230.015840][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.040317][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.051124][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.065820][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.077868][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.090162][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.102305][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.113216][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.115509][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 230.131594][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.144382][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.156197][T11443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.285261][T11544] team0 (unregistering): Port device team_slave_0 removed [ 230.301324][T11544] team0 (unregistering): Port device team_slave_1 removed [ 230.339200][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.349894][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.362945][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.373528][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.386823][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.397410][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.411620][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.427364][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.437262][T11443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.448220][T11443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.459653][T11443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.484103][T11443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.493657][T11443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.503119][T11443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.511892][T11443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.619230][ T6584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.629375][ T6584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.670152][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.678791][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.723566][ T31] INFO: task udevd:5963 blocked for more than 143 seconds. [ 230.730816][ T31] Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 [ 230.752172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.760875][ T31] task:udevd state:D stack:22864 pid:5963 tgid:5963 ppid:5212 task_flags:0x400140 flags:0x00004002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 230.774874][ T31] Call Trace: [ 230.778546][ T31] [ 230.782807][ T31] __schedule+0x1b88/0x5240 [ 230.789415][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 230.796681][ T31] ? rcu_is_watching+0x15/0xb0 [ 230.801475][ T31] ? schedule+0x163/0x360 [ 230.806438][ T31] ? __pfx___schedule+0x10/0x10 [ 230.811311][ T31] ? __blk_flush_plug+0x44b/0x500 [ 230.818013][ T31] ? schedule+0x90/0x360 [ 230.822506][ T31] ? schedule+0x90/0x360 [ 230.826769][ T31] schedule+0x163/0x360 [ 230.872578][ T31] schedule_timeout+0x15b/0x2b0 [ 230.877494][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 230.897426][ T31] ? __pfx_process_timeout+0x10/0x10 [ 230.902994][ T31] ? prepare_to_wait_event+0x3ac/0x460 [ 230.908472][ T31] ? prepare_to_wait_event+0x40c/0x460 [ 230.914353][ T31] nbd_queue_rq+0x773/0xf70 [ 230.918898][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 230.924208][ T31] ? rcu_is_watching+0x15/0xb0 [ 230.929188][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 230.935641][ T31] ? __lock_acquire+0xad5/0xd80 [ 230.940520][ T31] blk_mq_dispatch_rq_list+0xad8/0x19d0 [ 230.946353][ T31] ? sbitmap_get+0x289/0x3f0 [ 230.950969][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 230.979522][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 230.992953][ T31] __blk_mq_sched_dispatch_requests+0xb8c/0x1840 [ 230.999354][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 231.022350][ T31] ? __lock_acquire+0xad5/0xd80 [ 231.027279][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 231.042419][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 231.047958][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 231.062270][ T31] blk_mq_flush_plug_list+0x1190/0x1880 [ 231.067910][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 231.074083][ T31] ? blk_mq_submit_bio+0xfbb/0x25e0 [ 231.079298][ T31] ? do_syscall_64+0xf3/0x230 [ 231.098895][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.105548][ T31] ? blk_mq_submit_bio+0x496/0x25e0 [ 231.110776][ T31] __blk_flush_plug+0x422/0x500 [ 231.117689][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 231.123622][ T31] __submit_bio+0x56d/0x6d0 [ 231.128149][ T31] ? __pfx___submit_bio+0x10/0x10 [ 231.136996][ T31] submit_bio_noacct_nocheck+0x4d5/0xe30 [ 231.143326][ T31] ? __pfx___might_resched+0x10/0x10 [ 231.148632][ T31] ? bio_associate_blkg+0x6c/0x230 [ 231.154111][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 231.160321][ T31] block_read_full_folio+0x7c1/0x850 [ 231.166007][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 231.171408][ T31] filemap_read_folio+0x14a/0x3b0 [ 231.183783][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 231.189279][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 231.195357][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 231.208993][ T31] ? __asan_memcpy+0x40/0x70 [ 231.213873][ T31] do_read_cache_folio+0x373/0x5b0 [ 231.219009][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 231.236701][ T31] read_part_sector+0xb3/0x260 [ 231.241506][ T31] adfspart_check_ICS+0xcd/0xa20 [ 231.257670][ T31] ? snprintf+0xdd/0x130 [ 231.261972][ T31] ? vsnprintf+0x114c/0x1230 [ 231.267106][ T31] ? vsnprintf+0x190/0x1230 [ 231.271642][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 231.279293][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 231.283106][ T54] Bluetooth: hci1: command tx timeout [ 231.285636][ T31] bdev_disk_changed+0x783/0x14e0 [ 231.289944][ T5840] Bluetooth: hci0: command tx timeout [ 231.295404][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 231.308171][ T31] ? wait_on_inode+0xc6/0x230 [ 231.313537][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 231.318667][ T31] blkdev_get_whole+0x36c/0x4f0 [ 231.323766][ T31] bdev_open+0x312/0xcd0 [ 231.328027][ T31] blkdev_open+0x38e/0x4e0 [ 231.332788][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 231.337747][ T31] do_dentry_open+0xdec/0x1960 [ 231.342986][ T31] ? vfs_open+0x31/0x370 [ 231.347254][ T31] vfs_open+0x3b/0x370 [ 231.351338][ T31] path_openat+0x2caf/0x35d0 [ 231.356799][ T31] ? stack_depot_save_flags+0x44/0x940 [ 231.380596][ T31] ? kasan_save_track+0x51/0x80 [ 231.385611][ T31] ? __pfx_path_openat+0x10/0x10 [ 231.390666][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.396953][ T31] do_filp_open+0x284/0x4e0 [ 231.404184][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 231.409246][ T31] ? do_raw_spin_lock+0x151/0x370 [ 231.414417][ T31] do_sys_openat2+0x12b/0x1d0 [ 231.419105][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.424495][ T31] __x64_sys_openat+0x249/0x2a0 [ 231.429366][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 231.434851][ T31] ? do_syscall_64+0xb6/0x230 [ 231.439543][ T31] do_syscall_64+0xf3/0x230 [ 231.446146][ T31] ? clear_bhb_loop+0x45/0xa0 [ 231.450980][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.459573][ T31] RIP: 0033:0x7f6a52b559a4 [ 231.465177][ T31] RSP: 002b:00007ffff8937810 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.473922][ T31] RAX: ffffffffffffffda RBX: 000055f7f5c63ec0 RCX: 00007f6a52b559a4 [ 231.481914][ T31] RDX: 00000000000a0800 RSI: 000055f7f5c502b0 RDI: 00000000ffffff9c [ 231.490137][ T31] RBP: 000055f7f5c502b0 R08: 0000000000000001 R09: 7fffffffffffffff [ 231.498362][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 231.508715][ T31] R13: 000055f7f5c66890 R14: 0000000000000001 R15: 000055f7f5c4f910 [ 231.516786][ T31] [ 231.519815][ T31] INFO: task udevd:5976 blocked for more than 144 seconds. [ 231.529463][ T31] Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 [ 231.536860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.545756][ T31] task:udevd state:D stack:22600 pid:5976 tgid:5976 ppid:5212 task_flags:0x400140 flags:0x00004002 [ 231.557892][ T31] Call Trace: [ 231.561176][ T31] [ 231.565198][ T31] __schedule+0x1b88/0x5240 [ 231.569774][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 231.575893][ T31] ? rcu_is_watching+0x15/0xb0 [ 231.580681][ T31] ? schedule+0x163/0x360 [ 231.585210][ T31] ? __pfx___schedule+0x10/0x10 [ 231.590071][ T31] ? __blk_flush_plug+0x44b/0x500 [ 231.595205][ T31] ? schedule+0x90/0x360 [ 231.599463][ T31] ? schedule+0x90/0x360 [ 231.609078][ T31] schedule+0x163/0x360 [ 231.613980][ T31] schedule_timeout+0x15b/0x2b0 [ 231.618878][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 231.624898][ T31] ? __pfx_process_timeout+0x10/0x10 [ 231.630217][ T31] ? prepare_to_wait_event+0x3ac/0x460 [ 231.636024][ T31] ? prepare_to_wait_event+0x40c/0x460 [ 231.641511][ T31] nbd_queue_rq+0x773/0xf70 [ 231.646201][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 231.651261][ T31] ? rcu_is_watching+0x15/0xb0 [ 231.656122][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 231.662384][ T31] ? __lock_acquire+0xad5/0xd80 [ 231.667261][ T31] blk_mq_dispatch_rq_list+0xad8/0x19d0 [ 231.672902][ T31] ? sbitmap_get+0x289/0x3f0 [ 231.677500][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 231.685467][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 231.691487][ T31] __blk_mq_sched_dispatch_requests+0xb8c/0x1840 [ 231.698577][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 231.705748][ T31] ? __lock_acquire+0xad5/0xd80 [ 231.713863][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 231.719892][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 231.726569][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 231.731722][ T31] blk_mq_flush_plug_list+0x1190/0x1880 [ 231.737945][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 231.745002][ T31] ? blk_mq_submit_bio+0xfbb/0x25e0 [ 231.750228][ T31] ? do_syscall_64+0xf3/0x230 [ 231.755547][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.761637][ T31] ? blk_mq_submit_bio+0x496/0x25e0 [ 231.767952][ T31] __blk_flush_plug+0x422/0x500 [ 231.774001][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 231.779403][ T31] __submit_bio+0x56d/0x6d0 [ 231.784490][ T31] ? __pfx___submit_bio+0x10/0x10 [ 231.789548][ T31] submit_bio_noacct_nocheck+0x4d5/0xe30 [ 231.796363][ T31] ? __pfx___might_resched+0x10/0x10 [ 231.801672][ T31] ? bio_associate_blkg+0x6c/0x230 [ 231.807133][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 231.816116][ T31] block_read_full_folio+0x7c1/0x850 [ 231.821429][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 231.826968][ T31] filemap_read_folio+0x14a/0x3b0 [ 231.832582][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 231.838059][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 231.844375][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 231.849697][ T31] ? __asan_memcpy+0x40/0x70 [ 231.855005][ T31] do_read_cache_folio+0x373/0x5b0 [ 231.860307][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 231.866226][ T31] read_part_sector+0xb3/0x260 [ 231.871020][ T31] adfspart_check_ICS+0xcd/0xa20 [ 231.876336][ T31] ? snprintf+0xdd/0x130 [ 231.880599][ T31] ? vsnprintf+0x114c/0x1230 [ 231.885424][ T31] ? vsnprintf+0x190/0x1230 [ 231.889944][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 231.895605][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 231.900840][ T31] bdev_disk_changed+0x783/0x14e0 [ 231.907327][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 231.916255][ T31] ? wait_on_inode+0xc6/0x230 [ 231.920958][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 231.926621][ T31] blkdev_get_whole+0x36c/0x4f0 [ 231.931506][ T31] bdev_open+0x312/0xcd0 [ 231.936256][ T31] blkdev_open+0x38e/0x4e0 [ 231.940697][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 231.945685][ T31] do_dentry_open+0xdec/0x1960 [ 231.950467][ T31] ? vfs_open+0x31/0x370 [ 231.955810][ T31] vfs_open+0x3b/0x370 [ 231.959908][ T31] path_openat+0x2caf/0x35d0 [ 231.964585][ T31] ? stack_depot_save_flags+0x44/0x940 [ 231.970056][ T31] ? kasan_save_track+0x51/0x80 [ 231.975076][ T31] ? __pfx_path_openat+0x10/0x10 [ 231.980040][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.986230][ T31] do_filp_open+0x284/0x4e0 [ 231.990753][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 231.995959][ T31] ? do_raw_spin_lock+0x151/0x370 [ 232.001021][ T31] do_sys_openat2+0x12b/0x1d0 [ 232.006496][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.011736][ T31] __x64_sys_openat+0x249/0x2a0 [ 232.018458][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.024078][ T31] ? do_syscall_64+0xb6/0x230 [ 232.028784][ T31] do_syscall_64+0xf3/0x230 [ 232.033364][ T31] ? clear_bhb_loop+0x45/0xa0 [ 232.038032][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.043990][ T31] RIP: 0033:0x7f6a52b559a4 [ 232.048407][ T31] RSP: 002b:00007ffff8937810 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.056907][ T31] RAX: ffffffffffffffda RBX: 000055f7f5c63ec0 RCX: 00007f6a52b559a4 [ 232.064942][ T31] RDX: 00000000000a0800 RSI: 000055f7f5c64090 RDI: 00000000ffffff9c [ 232.073004][ T31] RBP: 000055f7f5c64090 R08: 0000000000000001 R09: 7fffffffffffffff [ 232.080980][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 232.089621][ T31] R13: 000055f7f5c588a0 R14: 0000000000000001 R15: 000055f7f5c4f910 [ 232.097692][ T31] [ 232.100766][ T31] [ 232.100766][ T31] Showing all locks held in the system: [ 232.137843][ T31] 1 lock held by khungtaskd/31: [ 232.150918][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 232.202834][ T31] 4 locks held by kworker/u8:4/63: [ 232.207998][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.235372][ T31] #1: ffffc9000215fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.261679][ T31] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 232.282212][ T31] #3: ffffffff8ed433c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 232.312631][ T31] 2 locks held by getty/5596: [ 232.317355][ T31] #0: ffff8881491bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 232.374221][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 232.402809][ T31] 3 locks held by syz-executor/5842: [ 232.408150][ T31] 1 lock held by syz-executor/5847: [ 232.432413][ T31] 3 locks held by syz-executor/5849: [ 232.437746][ T31] #0: ffff88805daf8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 232.457768][ T31] #1: ffff88805daf8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 232.474380][ T31] #2: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 232.495539][ T31] 3 locks held by udevd/5887: [ 232.500381][ T31] #0: ffff888025979358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.550561][ T31] #1: ffff8880252e4190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.583973][ T31] #2: ffff888025a4e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.602932][ T31] 3 locks held by kworker/1:5/5891: [ 232.608162][ T31] 3 locks held by kworker/0:4/5892: [ 232.621366][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.635934][ T31] #1: ffffc900040dfc60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.650726][ T31] #2: ffff888054c89240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x316/0x3f10 [ 232.661395][ T31] 2 locks held by kworker/0:7/5921: [ 232.667211][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.678710][ T31] #1: ffffc90005477c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.706090][ T31] 3 locks held by udevd/5963: [ 232.710801][ T31] #0: ffff88802583d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.720763][ T31] #1: ffff8880252bca10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.734104][ T31] #2: ffff8880259b7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.743508][ T31] 3 locks held by udevd/5976: [ 232.748202][ T31] #0: ffff8880256fc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.757684][ T31] #1: ffff888025060890 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.767750][ T31] #2: ffff888025947178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.776792][ T31] 3 locks held by udevd/6230: [ 232.781455][ T31] #0: ffff8880259d0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.790760][ T31] #1: ffff888025060f10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.800664][ T31] #2: ffff888025a1e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.810148][ T31] 3 locks held by udevd/6363: [ 232.816005][ T31] #0: ffff88802597d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.825660][ T31] #1: ffff8880252e4690 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.837747][ T31] #2: ffff888025a7e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.847042][ T31] 3 locks held by udevd/6435: [ 232.851727][ T31] #0: ffff888143f89358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.861300][ T31] #1: ffff8880252e4c90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.871000][ T31] #2: ffff888025ab51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.880021][ T31] 3 locks held by udevd/6609: [ 232.884917][ T31] #0: ffff888025b60358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.895908][ T31] #1: ffff88802506de90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.905555][ T31] #2: ffff888025bc51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.914645][ T31] 3 locks held by syz-executor/11443: [ 232.920024][ T31] #0: ffff88804d4a8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 232.930487][ T31] #1: ffff88804d4a8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60f/0x1260 [ 232.942483][ T31] #2: ffffffff90262a48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa6/0x240 [ 232.952912][ T31] 1 lock held by syz.5.1363/11544: [ 232.958034][ T31] #0: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 232.970249][ T31] [ 232.979539][ T31] ============================================= [ 232.979539][ T31] [ 232.991382][ T31] NMI backtrace for cpu 0 [ 232.991402][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 232.991421][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.991431][ T31] Call Trace: [ 232.991438][ T31] [ 232.991444][ T31] dump_stack_lvl+0x241/0x360 [ 232.991475][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.991498][ T31] ? __pfx__printk+0x10/0x10 [ 232.991531][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 232.991561][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 232.991583][ T31] ? _printk+0xd5/0x120 [ 232.991605][ T31] ? __wake_up_klogd+0xcc/0x110 [ 232.991629][ T31] ? __pfx__printk+0x10/0x10 [ 232.991654][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 232.991672][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 232.991699][ T31] watchdog+0x1058/0x10a0 [ 232.991719][ T31] ? watchdog+0x1ea/0x10a0 [ 232.991740][ T31] ? __pfx_watchdog+0x10/0x10 [ 232.991757][ T31] kthread+0x7b7/0x940 [ 232.991780][ T31] ? __pfx_watchdog+0x10/0x10 [ 232.991797][ T31] ? __pfx_kthread+0x10/0x10 [ 232.991816][ T31] ? __pfx_kthread+0x10/0x10 [ 232.991836][ T31] ? __pfx_kthread+0x10/0x10 [ 232.991856][ T31] ? __pfx_kthread+0x10/0x10 [ 232.991877][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.991892][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.991909][ T31] ? __pfx_kthread+0x10/0x10 [ 232.991931][ T31] ret_from_fork+0x4b/0x80 [ 232.991947][ T31] ? __pfx_kthread+0x10/0x10 [ 232.991968][ T31] ret_from_fork_asm+0x1a/0x30 [ 232.991999][ T31] [ 232.992005][ T31] Sending NMI from CPU 0 to CPUs 1: [ 233.161854][ C1] NMI backtrace for cpu 1 [ 233.161872][ C1] CPU: 1 UID: 0 PID: 11544 Comm: syz.5.1363 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 233.161890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.161900][ C1] RIP: 0010:check_preemption_disabled+0x43/0x120 [ 233.161926][ C1] Code: 48 89 44 24 08 65 8b 1d 7f 20 38 07 65 8b 05 74 20 38 07 a9 ff ff ff 7f 74 24 65 49 8b 04 24 48 3b 44 24 08 0f 85 cc 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 [ 233.161939][ C1] RSP: 0018:ffffc900048af5a0 EFLAGS: 00000046 [ 233.161953][ C1] RAX: c496ef0085fb7c00 RBX: 0000000000000001 RCX: c496ef0085fb7c00 [ 233.161964][ C1] RDX: 0000000000000001 RSI: ffffffff8e4fce8a RDI: ffffffff8ca1b120 [ 233.161975][ C1] RBP: ffffffff9368a020 R08: 0000000000000001 R09: 0000000000000001 [ 233.161985][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff9368a020 [ 233.161995][ C1] R13: 0000000000000000 R14: 0000000000000046 R15: 0000000000000000 [ 233.162004][ C1] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 233.162017][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.162027][ C1] CR2: 000056389b8b5f50 CR3: 000000007d2ea000 CR4: 00000000003526f0 [ 233.162045][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.162053][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.162063][ C1] Call Trace: [ 233.162070][ C1] [ 233.162078][ C1] lock_acquire+0x126/0x2f0 [ 233.162100][ C1] _raw_spin_lock_irqsave+0xd8/0x130 [ 233.162113][ C1] ? debug_check_no_obj_freed+0x245/0x590 [ 233.162128][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 233.162143][ C1] ? locks_remove_file+0x402/0x10d0 [ 233.162166][ C1] debug_check_no_obj_freed+0x245/0x590 [ 233.162186][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 233.162208][ C1] remove_vm_area+0x1d3/0x300 [ 233.162233][ C1] vfree+0x7f/0x360 [ 233.162256][ C1] kcov_close+0x28/0x50 [ 233.162270][ C1] ? __pfx_kcov_close+0x10/0x10 [ 233.162284][ C1] __fput+0x3e9/0x9f0 [ 233.162302][ C1] task_work_run+0x251/0x310 [ 233.162326][ C1] ? __pfx_task_work_run+0x10/0x10 [ 233.162347][ C1] ? do_exit+0xa0c/0x27f0 [ 233.162367][ C1] ? do_exit+0xa0c/0x27f0 [ 233.162386][ C1] do_exit+0xa11/0x27f0 [ 233.162406][ C1] ? do_raw_spin_lock+0x151/0x370 [ 233.162428][ C1] ? __pfx_do_exit+0x10/0x10 [ 233.162446][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.162474][ C1] do_group_exit+0x207/0x2c0 [ 233.162493][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.162506][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.162524][ C1] get_signal+0x1696/0x1730 [ 233.162544][ C1] ? __pfx_get_signal+0x10/0x10 [ 233.162561][ C1] arch_do_signal_or_restart+0x98/0x840 [ 233.162586][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 233.162614][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 233.162633][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 233.162652][ C1] do_syscall_64+0x100/0x230 [ 233.162669][ C1] ? clear_bhb_loop+0x45/0xa0 [ 233.162686][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.162700][ C1] RIP: 0033:0x7fef0098d169 [ 233.162712][ C1] Code: Unable to access opcode bytes at 0x7fef0098d13f. [ 233.162720][ C1] RSP: 002b:00007feefe7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.162735][ C1] RAX: 0000000000000024 RBX: 00007fef00ba6080 RCX: 00007fef0098d169 [ 233.162746][ C1] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 233.162756][ C1] RBP: 00007fef00a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 233.162765][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.162774][ C1] R13: 0000000000000000 R14: 00007fef00ba6080 R15: 00007ffc2bb55a88 [ 233.162790][ C1] [ 233.163703][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 233.163720][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 233.163740][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.163750][ T31] Call Trace: [ 233.163757][ T31] [ 233.163765][ T31] dump_stack_lvl+0x241/0x360 [ 233.163806][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.163829][ T31] ? __pfx__printk+0x10/0x10 [ 233.163856][ T31] ? vscnprintf+0x5d/0x90 [ 233.163882][ T31] panic+0x349/0x880 [ 233.163901][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 233.163919][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 233.163944][ T31] ? __pfx_panic+0x10/0x10 [ 233.163962][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 233.163988][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 233.164006][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 233.164028][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 233.164054][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 233.164080][ T31] watchdog+0x1097/0x10a0 [ 233.164098][ T31] ? watchdog+0x1ea/0x10a0 [ 233.164119][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.164136][ T31] kthread+0x7b7/0x940 [ 233.164159][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.164177][ T31] ? __pfx_kthread+0x10/0x10 [ 233.164197][ T31] ? __pfx_kthread+0x10/0x10 [ 233.164217][ T31] ? __pfx_kthread+0x10/0x10 [ 233.164238][ T31] ? __pfx_kthread+0x10/0x10 [ 233.164258][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.164273][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.164291][ T31] ? __pfx_kthread+0x10/0x10 [ 233.164313][ T31] ret_from_fork+0x4b/0x80 [ 233.164330][ T31] ? __pfx_kthread+0x10/0x10 [ 233.164350][ T31] ret_from_fork_asm+0x1a/0x30 [ 233.164381][ T31] [ 233.700565][ T31] Kernel Offset: disabled [ 233.704875][ T31] Rebooting in 86400 seconds..