last executing test programs: 4.026720672s ago: executing program 3 (id=1086): r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0) 2.066277617s ago: executing program 4 (id=1124): unshare(0x22020600) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 1.963944818s ago: executing program 4 (id=1126): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xfff, &(0x7f0000000280)={[0x2]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004848}, 0x4041) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x8088}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 1.547500909s ago: executing program 0 (id=1133): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x38, 0x4a, 0x100, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x0, 0x0, 0x7}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x10000) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4092, 0xffc}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4126, 0x1029}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000780)=""/178, 0xfffffffffffffd79}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) 1.543598293s ago: executing program 0 (id=1134): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40010c0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.488230491s ago: executing program 2 (id=1136): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x18, 0x3, 0x70fb}) read$nci(r0, &(0x7f0000000040)=""/4096, 0x1000) write$nci(r0, &(0x7f0000001040)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x7, {0x1, 0x2}}, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000010c0), &(0x7f0000001100)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001140)={0x0, 0x7ff, 0x10, 0x10000, 0x1}, &(0x7f0000001180)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000011c0)={r1, 0x2}, &(0x7f0000001200)=0x8) r2 = socket$igmp(0x2, 0x3, 0x2) tee(r2, r0, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001280)=0x24) accept4$inet(r0, &(0x7f00000012c0)={0x2, 0x0, @private}, &(0x7f0000001300)=0x10, 0x800) write$nci(r0, &(0x7f0000001340)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x9}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x635f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001540), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000016c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000017c0)={'erspan0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001800)=0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r10, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x30044002}, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r12, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000000) 1.343137485s ago: executing program 0 (id=1138): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x52, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x5}, 0x0) 1.288211878s ago: executing program 0 (id=1139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000800000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.276421947s ago: executing program 2 (id=1140): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x671a}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.226861434s ago: executing program 3 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x4c040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280"], 0x4c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x10, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0xe) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x4, 0x0, &(0x7f0000000180)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000ee41ca35422186f7000a7c000000060a010400000000000000000a0000050900010073797a31000000005000048020000180070001006374000014000280080002400000000708000140000000092c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000090900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) 1.208117011s ago: executing program 1 (id=1142): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x880, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x7fffffff, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x1ff, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x101, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x4, 0x1, 0xc, 0x6, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x101, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x3, 0xffffffff, 0x1, 0x8, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x2, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x6, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0x3, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543f, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x0, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0xfffffff7, 0x0, 0xc7f5, {0xe, 0x0, 0xdfb, 0x7, 0xc, 0x7aefe6b8}, {0x1, 0x0, 0x3, 0xd, 0x1, 0x9}, 0x9, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x9, 0x2, 0x40, 0x308, 0x1, 0x1000000, 0xffffff74, 0x1, 0x80, 0xe, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x5, 0x380, 0x7, 0x9, 0xc, 0xa70, 0x3, 0x5c05, 0x1, 0x3, 0x0, 0x4, 0x1, 0x57, 0x39800000, 0x8, 0x0, 0x9, 0xff, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xa94, 0x8, 0x5, 0x80, 0x0, 0x100, 0xebf, 0x69, 0x1ff, 0xcda2, 0x401, 0xfffffffc, 0x5ed755fb, 0x318d, 0x101, 0x8, 0x6, 0x3d75, 0xe48e, 0x1, 0x80000001, 0x9b, 0xffffff07, 0xfffffffe, 0x5, 0x0, 0x7, 0x7, 0x8, 0x3, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x1f, 0x9, 0x8000, 0x6, 0x1, 0xaef, 0x9, 0x7f, 0x3, 0x6, 0x5, 0x0, 0x0, 0xccdd, 0xe0b, 0x6, 0x3, 0x8, 0x2, 0x4, 0x3f7, 0x4, 0x101, 0x3, 0x2, 0x3, 0x6, 0x8, 0x0, 0x2dbb9dea, 0x6, 0x80000001, 0x0, 0x3ff, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1, 0x4, 0xad71, 0x39, 0x8, 0x4, 0xb, 0xd, 0x9, 0x1, 0x10000, 0xf0, 0xfffffffb, 0x5, 0x2fc3, 0x5, 0xb, 0xc4, 0x1ff, 0x80000001, 0x0, 0x5, 0x70000, 0xd85, 0x1603, 0xfffffffc, 0x40, 0x3ff, 0x8000, 0xbae, 0x1, 0x2, 0x1ff, 0x7ac7, 0x8, 0xc8, 0x53, 0xfffffe00, 0x7fffffff, 0x1000, 0x0, 0x3, 0x3, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0x23, 0x7, 0x7ff, 0x0, 0x0, 0x2, 0x5, 0x101, 0x2, 0x3, 0x5, 0x9e, 0x9, 0x0, 0x7, 0xc1, 0x5, 0x9, 0x4, 0x7, 0xfffffff2, 0x81, 0x3, 0x1, 0x2, 0x0, 0x1, 0x9, 0x2, 0x13e3, 0x180000, 0x9, 0x0, 0xfff, 0x1fb0, 0x4ae, 0x80, 0xc, 0xb1, 0x2, 0x3, 0x8, 0x2, 0x6, 0x1, 0x200, 0x98e0, 0x3, 0x2, 0x0, 0xfffffffe, 0x8de0, 0x5, 0xfffffffe, 0x1, 0x4, 0x4, 0xec, 0x9, 0x6, 0x6, 0x0, 0x19, 0x9, 0x7e, 0x7, 0x5, 0x1, 0x9, 0xc, 0x1, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x1, 0x5, 0x4, 0x58, 0x7f, 0x223, 0x7, 0x8000, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8]}]}]}}]}, 0x880}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.187706793s ago: executing program 0 (id=1143): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000040)={0x7, 'bridge_slave_1\x00', {0x9c000000}}) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001"], 0x60}}, 0x0) 970.857963ms ago: executing program 0 (id=1144): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = epoll_create1(0x80000) sendfile(r3, r3, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) close(0x3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000", @ANYRESDEC=r4, @ANYRESOCT=0x0, @ANYRES32=r9, @ANYBLOB="80007d80770002003a31a0fca37450391d527432e703208911ac36f5a847a75102fadcd0117a4e819f538c6b642c49871b0b11d55d42a065c94538e95f7836a225b85353f6110247e5170cabebb4558532e0ee1968f5f2b4ad7e93490e2c20348a6a1899a900dd2275001302611000de0890f4e2a073a4558d9d415e4f5c1c31ff7e507963c6280e851f26429c8fc373c22f614304d10e45879acb374d88af9c92db52c29bfc5bcc8a6a7687cb7ac8300f04186397c710350019852c3c229dbbf2ac132c7e835f1da19189bc3b3910ad638b170041cc94c15173960086160496ca73ea29fcca2f0f567ba7aea64ccd5aaa33793b", @ANYRES64=r1, @ANYBLOB="982951db9948482f15efc9579346c8677d428a77c193c3da605f22930c08927a066c398aa880788df63f850d112200d71006688b2b8e9c99bf0198ec89afb7bdebe923359d84e145dca525a4f5e622805b9934ffe4956ad1d7c5db4793baf2a51ac96a0316564be0113380ac47db76f76ee4e8a4c5bc42764a9941a912fa9d74547b5ee03c13229fcd655101aa89d26759e7c07a5be0a27cd0ebae92dca14aaa9f928922d4e1b18fc3bb64b9d8457bb443", @ANYRES16=r3, @ANYRESDEC=r9, @ANYRES16=r4], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 970.250128ms ago: executing program 4 (id=1145): socket(0x1, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 969.434656ms ago: executing program 2 (id=1146): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0xbcdccc4738661794, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000190000002cbd700000000000020013000100000027bd7000013500000800120000000000000000000000000006000000000000000000000000000000e0000002000000400000000000000000fc01000000000000000000000000000005000600000000000a0000000000000000000e00000000000000000000000000000000000000000008001900000000010a00000000000002fc0000000000000000000000000000000000000002000000000000002001000000000000000000000000000200000000"], 0xc8}}, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x401) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x891d, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 967.780404ms ago: executing program 1 (id=1147): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "687f434b5d2872e3"}]}]}, 0x2c}}, 0x8000) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000200000000000000000000a14000000e803010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 938.751276ms ago: executing program 3 (id=1148): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x380}, 0x80, &(0x7f0000000640)}, 0x44000) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}], 0x1, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 838.074466ms ago: executing program 1 (id=1149): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) 698.992261ms ago: executing program 3 (id=1150): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x6) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@empty, 0x4e20, 0x4, 0x4e20, 0x5, 0x2, 0x20, 0x80, 0x0, r4, r5}, {0x4, 0x101, 0x8000, 0x3ff, 0x378, 0x2e58000000000000, 0x1, 0x1}, {0x81, 0x8, 0x8daf, 0x4}, 0x1, 0x6e6bc0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private2, 0x4d4, 0xff}, 0xa, @in6=@private0, 0x0, 0x4, 0x0, 0x2, 0x3a, 0xd, 0x7f}}, 0xe8) 646.216982ms ago: executing program 2 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @local]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70b52b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}}, 0x20}}, 0x24000050) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 608.785498ms ago: executing program 1 (id=1152): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040), 0x2) 538.743551ms ago: executing program 3 (id=1153): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1833d8a7, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4a}}]}, 0x84}}, 0x20004084) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1833d8a7, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4a}}]}, 0x84}}, 0x20004084) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 510.248247ms ago: executing program 4 (id=1154): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311330000000000850200000200000085000000c400000095180500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 417.767855ms ago: executing program 1 (id=1155): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="b982639e3d09", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x0, @empty}}) 358.739969ms ago: executing program 4 (id=1156): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x3f}, 0x20) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="cf0400000000fcdbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x48852) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000012c0)={0x0, @llc={0x1a, 0x207, 0x8, 0x80, 0x81, 0xac}, @generic={0x28, "f05d8397672b0aadf346329c7259"}, @l2={0x1f, 0x6, @any, 0xff, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)='team0\x00', 0xfffffffffffffff7, 0x5, 0xfff}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r4, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x22, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="340000001000000340000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="6c5c3d40020000000000000014ddfdffee31a2a209"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 357.722376ms ago: executing program 3 (id=1157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x150, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x104, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2cdef79bdf174a1ef9cf99199c5cd088660da4a5717c0c242a7c527844d78750"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "59c065b76d39b875a47b0f9a8f19268758e07c09e7ee631ebfa95718777511d4"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd8d}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dd3b65aab715e1053faa37ca7f76330d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d8940708c58c08e5316fe9601ccbeaa6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a3fd87af61e2ec1d18029b2d168be8f7"}]}]}, 0x150}}, 0x804) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r3, 0x1, 0xfffffffe, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1917}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x24044800) getsockopt$inet_udp_int(r5, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 260.467969ms ago: executing program 1 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @empty}, {0x6, @remote}, 0x28, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nicvf0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, 0x0, 0x0) vmsplice(r3, &(0x7f0000000040), 0x100000000000026a, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="dcb900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000300000000000800"/28], 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x4, 0x1c}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x23, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r3, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="000000001000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) 233.237279ms ago: executing program 2 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x401, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000001010475654134730700000000000000000000e74d44ad4a6f070ae894ad18f40226f4a6000019f272fd11caef3f6d4644e9a7c4eb0600"/75], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) socketpair(0x2a, 0x2, 0x4, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x808000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x808000}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0x1, 0xfff8}, &(0x7f0000000380)=0x8) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 2.939703ms ago: executing program 4 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELRULE={0xe0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "160a41cbc2dc1e5c793e379dd88b28d84841c40f71f67c75424f31174b46a1a4ac8593eede0ca8a30a23f0eeb2a8993b86c8ed70c6a8b647e1a16ea179eed1440c7e64feaf0a571785278ead376ac8da85090aedfd91b85ff7e3519bd82c4796c264c3c5853475320fd86538d7db301278bb326b55353a414cdf1ab5eb47da0f5457b8dd9284167d5e650fa500cb2611d73130e28cac2baef1604cf688b4172193b197f3103aa6"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0x108}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00w\x00', @ANYRES32=0x0, @ANYBLOB="040200800433c04c32008a9691e0a6f5410904afaeb3a14a67315db2afdb26b62b9e0a11321fbcd3f8f7129cc13886a767bce71b110b3ee824acc9dc97b476ef344700e03a31f073e2be31791cc2daf62b90c187b1eb7170e01ce1989181905c750ff2a4cc8b23b56e020544b91dd207fcbb05e3312a2070b89c8052739ff2c86fdf508c1b627db79831e648129cde95e24feffbf78992dd13271d95fd09664c760b57f94d78be"], 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x2ab1f9572289bd5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) 0s ago: executing program 2 (id=1161): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x80000000, 0x0, 0x2, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xf}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0xffff6857, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={0x1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r14, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r14, &(0x7f0000000100)=0x3, 0x12) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0xffffffffffffffff, 0x8, 0x8}, 0xc) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0xffffffffffffffff, 0x4, 0x14}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1b, 0x2b, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ldst={0x3, 0x2, 0x4, 0x4, 0x5, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x40, 0x9e, &(0x7f0000000540)=""/158, 0x40f00, 0x6, '\x00', r4, @fallback=0x38, r5, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0xe, 0x2, 0x8}, 0x10, r6, r7, 0x4, &(0x7f0000000cc0)=[r8, r9, 0xffffffffffffffff, r10, r0, r11, r12, r14, r15, r16], &(0x7f0000000d00)=[{0x3, 0x5, 0xb}, {0x1, 0x3, 0x5, 0x5}, {0x0, 0x1, 0x4, 0x8}, {0x0, 0x2, 0x6, 0x6}], 0x10, 0x8000}, 0x94) r17 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r17, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r18 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r17}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r18, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r17) close(r18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 72.189728][ T5852] cgroup: Unknown subsys name 'net' [ 72.321125][ T5852] cgroup: Unknown subsys name 'cpuset' [ 72.330389][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.721156][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.067678][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.084319][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.092409][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.102320][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.109936][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.119473][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.136507][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.144888][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.154791][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.163682][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.172114][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.180158][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.180245][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.196172][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.198472][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.204299][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.219448][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.229502][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.229910][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.246823][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.248169][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.256126][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.281370][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.291142][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.312212][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.869141][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 76.978490][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.050961][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 77.085147][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.093287][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.101819][ T5863] bridge_slave_0: entered allmulticast mode [ 77.109075][ T5863] bridge_slave_0: entered promiscuous mode [ 77.171207][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.179290][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.186467][ T5863] bridge_slave_1: entered allmulticast mode [ 77.193669][ T5863] bridge_slave_1: entered promiscuous mode [ 77.205897][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 77.295683][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.345508][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.366960][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 77.450856][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.458145][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.465454][ T5862] bridge_slave_0: entered allmulticast mode [ 77.473721][ T5862] bridge_slave_0: entered promiscuous mode [ 77.495987][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.503271][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.510827][ T5869] bridge_slave_0: entered allmulticast mode [ 77.518067][ T5869] bridge_slave_0: entered promiscuous mode [ 77.538461][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.545606][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.553172][ T5862] bridge_slave_1: entered allmulticast mode [ 77.560971][ T5862] bridge_slave_1: entered promiscuous mode [ 77.600880][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.608190][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.615518][ T5869] bridge_slave_1: entered allmulticast mode [ 77.623217][ T5869] bridge_slave_1: entered promiscuous mode [ 77.633429][ T5863] team0: Port device team_slave_0 added [ 77.683290][ T5863] team0: Port device team_slave_1 added [ 77.719573][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.762061][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.775150][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.787297][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.815955][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.823254][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.830678][ T5866] bridge_slave_0: entered allmulticast mode [ 77.837937][ T5866] bridge_slave_0: entered promiscuous mode [ 77.846419][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.853628][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.880106][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.892643][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.899669][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.925627][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.969477][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.976635][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.984278][ T5866] bridge_slave_1: entered allmulticast mode [ 77.992257][ T5866] bridge_slave_1: entered promiscuous mode [ 78.024129][ T5862] team0: Port device team_slave_0 added [ 78.043561][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.051053][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.058859][ T5870] bridge_slave_0: entered allmulticast mode [ 78.065793][ T5870] bridge_slave_0: entered promiscuous mode [ 78.104958][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.115848][ T5869] team0: Port device team_slave_0 added [ 78.123340][ T5862] team0: Port device team_slave_1 added [ 78.130217][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.137404][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.145483][ T5870] bridge_slave_1: entered allmulticast mode [ 78.153726][ T5870] bridge_slave_1: entered promiscuous mode [ 78.163132][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.185138][ T5869] team0: Port device team_slave_1 added [ 78.258741][ T5868] Bluetooth: hci1: command tx timeout [ 78.301433][ T5863] hsr_slave_0: entered promiscuous mode [ 78.308175][ T5863] hsr_slave_1: entered promiscuous mode [ 78.316308][ T5866] team0: Port device team_slave_0 added [ 78.334601][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.341755][ T5868] Bluetooth: hci3: command tx timeout [ 78.342035][ T5868] Bluetooth: hci2: command tx timeout [ 78.347633][ T5883] Bluetooth: hci0: command tx timeout [ 78.353831][ T5868] Bluetooth: hci4: command tx timeout [ 78.358634][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.389865][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.403185][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.410548][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.436833][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.451017][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.464182][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.476219][ T5866] team0: Port device team_slave_1 added [ 78.483196][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.490293][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.516340][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.534799][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.541848][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.567776][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.662494][ T5870] team0: Port device team_slave_0 added [ 78.671437][ T5870] team0: Port device team_slave_1 added [ 78.680330][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.687289][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.713302][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.736588][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.744075][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.770067][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.870981][ T5862] hsr_slave_0: entered promiscuous mode [ 78.877262][ T5862] hsr_slave_1: entered promiscuous mode [ 78.884646][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 78.890798][ T5862] Cannot create hsr debugfs directory [ 78.919295][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.926360][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.952650][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.966214][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.973371][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.000827][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.030240][ T5869] hsr_slave_0: entered promiscuous mode [ 79.036695][ T5869] hsr_slave_1: entered promiscuous mode [ 79.043204][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 79.049111][ T5869] Cannot create hsr debugfs directory [ 79.145679][ T5866] hsr_slave_0: entered promiscuous mode [ 79.152104][ T5866] hsr_slave_1: entered promiscuous mode [ 79.158536][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 79.164272][ T5866] Cannot create hsr debugfs directory [ 79.336590][ T5870] hsr_slave_0: entered promiscuous mode [ 79.344711][ T5870] hsr_slave_1: entered promiscuous mode [ 79.351004][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 79.356741][ T5870] Cannot create hsr debugfs directory [ 79.665472][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.694018][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.730525][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.771416][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.823170][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.833504][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.845711][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.866755][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.944209][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.984634][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.012107][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.023845][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.126598][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.147282][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.160604][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.172741][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.316513][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.333133][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.340102][ T5868] Bluetooth: hci1: command tx timeout [ 80.353294][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.372012][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.406133][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.413380][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.420448][ T5871] Bluetooth: hci2: command tx timeout [ 80.420489][ T5871] Bluetooth: hci3: command tx timeout [ 80.424739][ T5868] Bluetooth: hci0: command tx timeout [ 80.431835][ T5883] Bluetooth: hci4: command tx timeout [ 80.446788][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.482245][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.506802][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.514094][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.525152][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.532504][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.561387][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.568679][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.585795][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.592994][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.636839][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.709964][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.726175][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.766400][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.803318][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.813959][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.831390][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.838650][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.850942][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.858078][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.867899][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.875041][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.943861][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.951525][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.153671][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.255685][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.298658][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.305832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.356178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.363374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.452078][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.535266][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.694611][ T5862] veth0_vlan: entered promiscuous mode [ 81.775715][ T5862] veth1_vlan: entered promiscuous mode [ 81.836076][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.899650][ T5862] veth0_macvtap: entered promiscuous mode [ 81.934940][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.963535][ T5862] veth1_macvtap: entered promiscuous mode [ 82.080979][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.104477][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.148218][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.159172][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.232005][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.245782][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.261913][ T5866] veth0_vlan: entered promiscuous mode [ 82.311077][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.322310][ T5869] veth0_vlan: entered promiscuous mode [ 82.333005][ T5866] veth1_vlan: entered promiscuous mode [ 82.389746][ T5869] veth1_vlan: entered promiscuous mode [ 82.419667][ T5868] Bluetooth: hci1: command tx timeout [ 82.479146][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.487086][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.499124][ T5868] Bluetooth: hci4: command tx timeout [ 82.502584][ T5883] Bluetooth: hci0: command tx timeout [ 82.504553][ T5871] Bluetooth: hci3: command tx timeout [ 82.513332][ T5877] Bluetooth: hci2: command tx timeout [ 82.564526][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.586060][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.612944][ T5863] veth0_vlan: entered promiscuous mode [ 82.630856][ T5866] veth0_macvtap: entered promiscuous mode [ 82.648519][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.667265][ T5870] veth0_vlan: entered promiscuous mode [ 82.683327][ T5866] veth1_macvtap: entered promiscuous mode [ 82.720691][ T5863] veth1_vlan: entered promiscuous mode [ 82.756087][ T5869] veth0_macvtap: entered promiscuous mode [ 82.780219][ T5870] veth1_vlan: entered promiscuous mode [ 82.782727][ T5984] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 82.798551][ T5869] veth1_macvtap: entered promiscuous mode [ 82.851502][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.880745][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.924663][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.940322][ T5870] veth0_macvtap: entered promiscuous mode [ 82.961473][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.989830][ T5863] veth0_macvtap: entered promiscuous mode [ 83.006428][ T775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.028848][ T775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.039292][ T775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.050823][ T5870] veth1_macvtap: entered promiscuous mode [ 83.080047][ T5863] veth1_macvtap: entered promiscuous mode [ 83.095620][ T775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.139888][ T775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.163618][ T775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.203754][ T775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.216173][ T775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.240101][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.256362][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.293444][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.341653][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.373150][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.426351][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.450201][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.475707][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499200][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.506633][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.519586][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.584771][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.594890][ T5988] Zero length message leads to an empty skb [ 83.624016][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.655969][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.695447][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.708066][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.753347][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.775223][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.795960][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.823797][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.938790][ T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.946643][ T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.024430][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.063910][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.152742][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.172709][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.252118][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.286845][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.433929][ T6012] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 84.501059][ T5877] Bluetooth: hci1: command tx timeout [ 84.582277][ T5877] Bluetooth: hci2: command tx timeout [ 84.588268][ T5877] Bluetooth: hci4: command tx timeout [ 84.593700][ T5877] Bluetooth: hci0: command tx timeout [ 84.601377][ T5883] Bluetooth: hci3: command tx timeout [ 84.716729][ T6025] delete_channel: no stack [ 84.755045][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.785306][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13'. [ 84.791790][ T6021] tipc: Started in network mode [ 84.821929][ T6021] tipc: Node identity dada5b8d05de, cluster identity 4711 [ 84.865864][ T6021] tipc: Enabled bearer , priority 0 [ 84.966528][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16'. [ 84.982202][ T6042] trusted_key: syz.0.15 sent an empty control message without MSG_MORE. [ 84.988752][ T6041] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 85.000268][ T6042] xt_socket: unknown flags 0xe4 [ 85.008532][ T6021] tipc: Disabling bearer [ 85.172058][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 85.335640][ T6054] openvswitch: netlink: IPv4 tun info is not correct [ 85.729819][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 85.757162][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26'. [ 85.773129][ T6068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.27'. [ 85.795043][ T6068] netlink: 35 bytes leftover after parsing attributes in process `syz.2.27'. [ 85.810258][ T6068] netlink: 'syz.2.27': attribute type 5 has an invalid length. [ 85.873008][ T6068] netlink: 'syz.2.27': attribute type 6 has an invalid length. [ 85.901346][ T6068] netlink: 35 bytes leftover after parsing attributes in process `syz.2.27'. [ 85.929119][ T6078] RDS: rds_bind could not find a transport for 7c00::, load rds_tcp or rds_rdma? [ 86.038890][ T6078] tipc: Started in network mode [ 86.048259][ T6078] tipc: Node identity eafaca2db92f, cluster identity 4711 [ 86.055622][ T6078] tipc: Enabled bearer , priority 0 [ 86.174358][ T6078] tipc: Resetting bearer [ 86.198267][ T6075] tipc: Disabling bearer [ 86.281630][ T6097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.36'. [ 86.318239][ T6097] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 86.382640][ T6096] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 86.754043][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.822728][ T1212] cfg80211: failed to load regulatory.db [ 86.863118][ T6114] warning: `syz.0.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.906585][ T6119] netlink: 'syz.1.45': attribute type 10 has an invalid length. [ 86.957146][ T6119] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 87.107804][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.130863][ T6128] netlink: 'syz.3.47': attribute type 6 has an invalid length. [ 88.159902][ T6173] syz.0.60 (6173) used greatest stack depth: 17864 bytes left [ 88.442665][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.466921][ T6210] netlink: 'syz.1.72': attribute type 11 has an invalid length. [ 88.476823][ T6210] x_tables: ip_tables: udplite.0 match: invalid size 16 (kernel) != (user) 32 [ 89.185470][ T6254] netlink: 'syz.2.83': attribute type 24 has an invalid length. [ 89.763646][ T6280] __nla_validate_parse: 15 callbacks suppressed [ 89.763673][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 89.809038][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 89.889675][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'. [ 90.108389][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 90.185434][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 90.213940][ T6301] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 90.281193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141fd6c00: rx timeout, send abort [ 90.383514][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 90.571862][ T6319] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 90.594199][ T6322] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 90.629224][ T6323] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 90.781886][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057909800: rx timeout, send abort [ 90.790387][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141fd6c00: abort rx timeout. Force session deactivation [ 90.875405][ T6319] team0: Port device dummy0 added [ 90.925042][ T6323] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 91.003522][ T6323] team0: Failed to send options change via netlink (err -105) [ 91.023154][ T6323] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 91.053683][ T6323] team0: Port device dummy0 removed [ 91.111016][ T6323] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 91.290415][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057909800: abort rx timeout. Force session deactivation [ 91.546803][ T6348] 8021q: VLANs not supported on ipvlan1 [ 91.945544][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 91.990137][ T6380] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.119'. [ 92.026198][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 92.298878][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 92.348953][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.644784][ T6422] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 92.786008][ T6427] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 93.010464][ T6447] sctp: [Deprecated]: syz.1.135 (pid 6447) Use of int in max_burst socket option. [ 93.010464][ T6447] Use struct sctp_assoc_value instead [ 93.050528][ T6447] sctp: [Deprecated]: syz.1.135 (pid 6447) Use of int in max_burst socket option deprecated. [ 93.050528][ T6447] Use struct sctp_assoc_value instead [ 93.635918][ T6481] raw_sendmsg: syz.2.147 forgot to set AF_INET. Fix it! [ 93.687407][ T6478] gtp0: entered promiscuous mode [ 93.709069][ T6483] sit0: entered promiscuous mode [ 93.748579][ T6483] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 93.891674][ T6495] netlink: 'syz.1.153': attribute type 7 has an invalid length. [ 94.694836][ T6546] netlink: 'syz.1.166': attribute type 8 has an invalid length. [ 94.844926][ T6553] netlink: 'syz.0.170': attribute type 3 has an invalid length. [ 94.869862][ T6553] __nla_validate_parse: 8 callbacks suppressed [ 94.869879][ T6553] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.939865][ T6544] netlink: 'syz.3.169': attribute type 8 has an invalid length. [ 94.950526][ T6545] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.971661][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 94.987733][ T6545] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 95.060307][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 95.103980][ T6545] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.121799][ T6545] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 95.222377][ T6545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.243442][ T6566] sctp: failed to load transform for md5: -2 [ 95.250993][ T6545] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 95.404666][ T6545] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 95.440552][ T6545] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 95.535522][ T6545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.542186][ T6545] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 96.211571][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.289007][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 96.693749][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.706070][ T6632] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 96.963912][ T6641] netlink: 348 bytes leftover after parsing attributes in process `syz.3.188'. [ 97.233543][ T6583] syz.0.176: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.275416][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) [ 97.275441][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.275459][ T6583] Call Trace: [ 97.275467][ T6583] [ 97.275475][ T6583] dump_stack_lvl+0x189/0x250 [ 97.275510][ T6583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.275531][ T6583] ? __pfx__printk+0x10/0x10 [ 97.275562][ T6583] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.275583][ T6583] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.275604][ T6583] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 97.275628][ T6583] warn_alloc+0x214/0x310 [ 97.275654][ T6583] ? __pfx_warn_alloc+0x10/0x10 [ 97.275695][ T6583] ? __get_vm_area_node+0x28f/0x300 [ 97.275720][ T6583] ? hash_netport4_resize+0x235/0x1b60 [ 97.275744][ T6583] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 97.275800][ T6583] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.275831][ T6583] ? rcu_is_watching+0x15/0xb0 [ 97.275851][ T6583] ? hash_netport4_resize+0x235/0x1b60 [ 97.275869][ T6583] ? hash_netport4_resize+0x235/0x1b60 [ 97.275887][ T6583] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 97.275912][ T6583] ? hash_netport4_resize+0x235/0x1b60 [ 97.275937][ T6583] hash_netport4_resize+0x235/0x1b60 [ 97.275957][ T6583] ? hash_netport4_uadt+0xc97/0xf30 [ 97.275983][ T6583] ? __pfx_hash_netport4_add+0x10/0x10 [ 97.276002][ T6583] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 97.276032][ T6583] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 97.276063][ T6583] call_ad+0x44e/0xb00 [ 97.276096][ T6583] ? __pfx_call_ad+0x10/0x10 [ 97.276133][ T6583] ? __nla_parse+0x40/0x60 [ 97.276161][ T6583] ip_set_ad+0x791/0x930 [ 97.276194][ T6583] ? __pfx_ip_set_ad+0x10/0x10 [ 97.276258][ T6583] nfnetlink_rcv_msg+0xb4a/0x1130 [ 97.276283][ T6583] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 97.276326][ T6583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.276348][ T6583] ? kasan_save_free_info+0x46/0x50 [ 97.276424][ T6583] netlink_rcv_skb+0x208/0x470 [ 97.276451][ T6583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.276476][ T6583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.276514][ T6583] ? bpf_lsm_capable+0x9/0x20 [ 97.276536][ T6583] ? security_capable+0x7e/0x2e0 [ 97.276569][ T6583] nfnetlink_rcv+0x26a/0x2520 [ 97.276596][ T6583] ? __dev_queue_xmit+0x1d79/0x3b50 [ 97.276628][ T6583] ? __dev_queue_xmit+0x27b/0x3b50 [ 97.276661][ T6583] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 97.276689][ T6583] ? __pfx___dev_queue_xmit+0x10/0x10 [ 97.276725][ T6583] ? ref_tracker_free+0x63a/0x7d0 [ 97.276749][ T6583] ? __asan_memcpy+0x40/0x70 [ 97.276767][ T6583] ? __pfx_ref_tracker_free+0x10/0x10 [ 97.276809][ T6583] ? skb_clone+0x246/0x3a0 [ 97.276833][ T6583] ? __netlink_deliver_tap+0x807/0x850 [ 97.276857][ T6583] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.276889][ T6583] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.276922][ T6583] netlink_unicast+0x82f/0x9e0 [ 97.276955][ T6583] ? __pfx_netlink_unicast+0x10/0x10 [ 97.276981][ T6583] ? netlink_sendmsg+0x642/0xb30 [ 97.276996][ T6583] ? skb_put+0x11b/0x210 [ 97.277018][ T6583] netlink_sendmsg+0x805/0xb30 [ 97.277045][ T6583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.277067][ T6583] ? aa_sock_msg_perm+0xf1/0x1d0 [ 97.277086][ T6583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.277105][ T6583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.277123][ T6583] __sock_sendmsg+0x219/0x270 [ 97.277152][ T6583] ____sys_sendmsg+0x505/0x830 [ 97.277178][ T6583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.277206][ T6583] ? import_iovec+0x74/0xa0 [ 97.277230][ T6583] ___sys_sendmsg+0x21f/0x2a0 [ 97.277253][ T6583] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.277312][ T6583] ? __fget_files+0x2a/0x420 [ 97.277327][ T6583] ? __fget_files+0x3a0/0x420 [ 97.277355][ T6583] __x64_sys_sendmsg+0x19b/0x260 [ 97.277378][ T6583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.277409][ T6583] ? rcu_is_watching+0x15/0xb0 [ 97.277429][ T6583] ? do_syscall_64+0xbe/0x3b0 [ 97.277446][ T6583] do_syscall_64+0xfa/0x3b0 [ 97.277459][ T6583] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.277480][ T6583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.277496][ T6583] ? clear_bhb_loop+0x60/0xb0 [ 97.277515][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.277530][ T6583] RIP: 0033:0x7fbc1158eba9 [ 97.277552][ T6583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.277565][ T6583] RSP: 002b:00007fbc123ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.277582][ T6583] RAX: ffffffffffffffda RBX: 00007fbc117d5fa0 RCX: 00007fbc1158eba9 [ 97.277594][ T6583] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 97.277605][ T6583] RBP: 00007fbc11611e19 R08: 0000000000000000 R09: 0000000000000000 [ 97.277614][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.277623][ T6583] R13: 00007fbc117d6038 R14: 00007fbc117d5fa0 R15: 00007ffd01fcd168 [ 97.277652][ T6583] [ 97.876987][ T6583] Mem-Info: [ 97.891150][ T6583] active_anon:6377 inactive_anon:0 isolated_anon:0 [ 97.891150][ T6583] active_file:2564 inactive_file:39866 isolated_file:0 [ 97.891150][ T6583] unevictable:768 dirty:400 writeback:0 [ 97.891150][ T6583] slab_reclaimable:10769 slab_unreclaimable:97302 [ 97.891150][ T6583] mapped:29180 shmem:1360 pagetables:1180 [ 97.891150][ T6583] sec_pagetables:0 bounce:0 [ 97.891150][ T6583] kernel_misc_reclaimable:0 [ 97.891150][ T6583] free:1329749 free_pcp:15434 free_cma:0 [ 97.984176][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'. [ 98.059156][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'. [ 98.128984][ T6583] Node 0 active_anon:23264kB inactive_anon:0kB active_file:10256kB inactive_file:159264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116412kB dirty:1588kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12040kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.162725][ T6583] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.196818][ T6583] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.225828][ T6583] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 98.235182][ T6583] Node 0 DMA32 free:1426988kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23320kB inactive_anon:0kB active_file:10256kB inactive_file:157696kB unevictable:1536kB writepending:1584kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:38792kB local_pcp:20208kB free_cma:0kB [ 98.268054][ T6583] lowmem_reserve[]: 0 0 1 1 1 [ 98.272791][ T6583] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 98.317847][ T6583] lowmem_reserve[]: 0 0 0 0 0 [ 98.330203][ T6583] Node 1 Normal free:3881152kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:11200kB free_cma:0kB [ 98.416617][ T6583] lowmem_reserve[]: 0 0 0 0 0 [ 98.425275][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 98.439795][ T6685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.197'. [ 98.484887][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 98.492216][ T6685] tipc: Failed to obtain node identity [ 98.496347][ T6583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.523532][ T6583] Node 0 DMA32: 537*4kB (UME) 608*8kB (UME) 150*16kB (UM) 113*32kB (UME) 39*64kB (UME) 19*128kB (UM) 13*256kB (ME) 9*512kB (UM) 10*1024kB (UME) 5*2048kB (M) 337*4096kB (UM) = 1426724kB [ 98.526357][ T6685] tipc: Enabling of bearer rejected, failed to enable media [ 98.543704][ T6583] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 98.563990][ T6583] Node 1 Normal: 206*4kB (UE) 49*8kB (UME) 38*16kB (UME) 61*32kB (UME) 20*64kB (UME) 10*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3881152kB [ 98.592650][ T6583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.624037][ T6583] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.646663][ T6688] tipc: Started in network mode [ 98.653788][ T6688] tipc: Node identity , cluster identity 4711 [ 98.669708][ T6688] tipc: Failed to obtain node identity [ 98.679200][ T6688] tipc: Enabling of bearer rejected, failed to enable media [ 98.762391][ T6583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.816245][ T6700] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 98.857545][ T6583] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.878850][ T6583] 43785 total pagecache pages [ 98.897406][ T6583] 0 pages in swap cache [ 98.900296][ T6694] syzkaller0: entered promiscuous mode [ 98.905008][ T6694] syzkaller0: entered allmulticast mode [ 98.929737][ T6705] Bluetooth: MGMT ver 1.23 [ 98.950749][ T6583] Free swap = 124996kB [ 98.954950][ T6583] Total swap = 124996kB [ 98.963631][ T6583] 2097051 pages RAM [ 98.969278][ T6583] 0 pages HighMem/MovableOnly [ 98.969732][ T6704] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 98.995993][ T6583] 425667 pages reserved [ 99.006154][ T6583] 0 pages cma reserved [ 101.224461][ T6784] __nla_validate_parse: 2 callbacks suppressed [ 101.224480][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.214'. [ 101.379624][ T5864] udevd[5864]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 102.084405][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 102.131864][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 102.221526][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 102.230609][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 102.276739][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.290246][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.339916][ T6834] ip6gre1: entered allmulticast mode [ 102.446102][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.484818][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.614476][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.227'. [ 102.669537][ T6853] netlink: 'syz.3.229': attribute type 33 has an invalid length. [ 102.699273][ T24] IPVS: starting estimator thread 0... [ 102.807799][ T6858] IPVS: using max 35 ests per chain, 84000 per kthread [ 103.162436][ T43] IPVS: starting estimator thread 0... [ 103.267530][ T6886] IPVS: using max 36 ests per chain, 86400 per kthread [ 103.443024][ T6900] netlink: 256 bytes leftover after parsing attributes in process `syz.1.240'. [ 103.663109][ T6898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.707397][ T6901] ve: renamed from ipvlan1 [ 103.925719][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 103.966676][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 103.977710][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.020483][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 104.114539][ T6921] C: renamed from lo (while UP) [ 104.950954][ T6973] netlink: 'syz.0.255': attribute type 25 has an invalid length. [ 105.428858][ T6990] tipc: Enabled bearer , priority 10 [ 105.760944][ T6999] team0: Cannot enslave team device to itself [ 105.821612][ T6999] tipc: Enabled bearer , priority 0 [ 105.891932][ T6999] +: renamed from syzkaller0 [ 105.947361][ T6999] tipc: Disabling bearer [ 106.040245][ T7017] bridge_slave_0: left allmulticast mode [ 106.054932][ T7017] bridge_slave_0: left promiscuous mode [ 106.067348][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.113178][ T7017] bridge_slave_1: left allmulticast mode [ 106.119071][ T7017] bridge_slave_1: left promiscuous mode [ 106.127244][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.167356][ T7017] bond0: (slave bond_slave_0): Releasing backup interface [ 106.202633][ T7017] bond0: (slave bond_slave_1): Releasing backup interface [ 106.252495][ T7017] team0: Port device team_slave_0 removed [ 106.284469][ T7017] team0: Port device team_slave_1 removed [ 106.294677][ T7017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.314612][ T7017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.341557][ T7017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.354018][ T7017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.532639][ T7025] tipc: Started in network mode [ 106.545749][ T7025] tipc: Node identity b25f4ef3179b, cluster identity 4711 [ 106.567403][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.576950][ T7025] tipc: Enabled bearer , priority 0 [ 106.644773][ T7038] IPv6: sit1: Disabled Multicast RS [ 106.678586][ T7044] : entered promiscuous mode [ 106.796508][ T7025] tipc: Disabling bearer [ 106.832581][ T5953] tipc: Node number set to 3741604749 [ 106.948499][ T7061] openvswitch: netlink: Multiple metadata blocks provided [ 107.141059][ T7071] __nla_validate_parse: 25 callbacks suppressed [ 107.141076][ T7071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 107.216076][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.223924][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.746304][ T7100] netlink: 104 bytes leftover after parsing attributes in process `syz.4.286'. [ 107.751190][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 108.064826][ T7118] Driver unsupported XDP return value 0 on prog (id 108) dev N/A, expect packet loss! [ 108.219726][ T7123] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 108.928827][ T7173] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 108.936517][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 109.174547][ T7182] netlink: 'syz.3.309': attribute type 11 has an invalid length. [ 109.284125][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 109.343274][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 109.389471][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 109.487713][ T7199] netlink: 'syz.2.314': attribute type 6 has an invalid length. [ 109.657316][ T7207] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.683742][ T7212] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.335119][ T7247] netlink: 156 bytes leftover after parsing attributes in process `syz.2.325'. [ 110.361917][ T7242] veth0: entered promiscuous mode [ 110.771718][ T7265] netlink: 13 bytes leftover after parsing attributes in process `syz.4.328'. [ 110.868651][ T7271] netlink: 13 bytes leftover after parsing attributes in process `syz.4.328'. [ 111.212539][ T7241] veth0: left promiscuous mode [ 111.354048][ T7297] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 111.661444][ T7305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.733548][ T7305] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 111.736401][ T7307] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 111.773781][ T7307] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 111.866758][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.994380][ T7314] tc_dump_action: action bad kind [ 112.052668][ T7324] bridge1: entered allmulticast mode [ 112.128522][ T7326] bridge2: entered allmulticast mode [ 112.195260][ T7329] __nla_validate_parse: 5 callbacks suppressed [ 112.195277][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.348'. [ 112.443372][ T7342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'. [ 112.574594][ T7347] veth5: entered allmulticast mode [ 113.159494][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 113.193255][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 113.290906][ T7380] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 113.311121][ T7380] netlink: 228 bytes leftover after parsing attributes in process `syz.4.365'. [ 113.343503][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.364'. [ 113.441763][ T7384] syz.2.367 uses old SIOCAX25GETINFO [ 113.476637][ T7384] netlink: 'syz.2.367': attribute type 39 has an invalid length. [ 113.571828][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 113.608012][ T7390] netlink: 224 bytes leftover after parsing attributes in process `syz.1.370'. [ 113.628218][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 113.670239][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 113.711189][ T775] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.758272][ T775] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.767026][ T775] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.818197][ T775] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.276456][ T7420] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 114.348222][ T7422] bridge3: entered allmulticast mode [ 114.418562][ T7420] bridge4: entered allmulticast mode [ 114.740730][ T7440] netlink: 'syz.1.386': attribute type 15 has an invalid length. [ 115.484407][ T7487] delete_channel: no stack [ 115.605489][ T7492] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 115.646901][ T7492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.649646][ T7495] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 115.676974][ T7495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.603593][ T7548] tipc: Enabled bearer , priority 0 [ 116.634027][ T7550] syzkaller0: entered promiscuous mode [ 116.651807][ T7550] syzkaller0: entered allmulticast mode [ 116.790444][ T7548] tipc: Resetting bearer [ 116.837242][ T7548] tipc: Disabling bearer [ 116.943396][ T7564] gtp0: entered promiscuous mode [ 116.950850][ T7564] gtp0: entered allmulticast mode [ 117.223847][ T7584] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 117.286446][ T7584] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 117.346733][ T7592] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.349054][ T7591] __nla_validate_parse: 21 callbacks suppressed [ 117.349073][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'. [ 117.386436][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 117.410499][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.425'. [ 117.444778][ T7595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.632385][ T7553] infiniband syz!: set active [ 117.645246][ T7553] infiniband syz!: added team_slave_0 [ 117.664766][ T7553] syz!: rxe_create_cq: returned err = -12 [ 117.705946][ T7553] infiniband syz!: Couldn't create ib_mad CQ [ 117.712692][ T7553] infiniband syz!: Couldn't open port 1 [ 117.804347][ T7612] netlink: 'syz.0.432': attribute type 5 has an invalid length. [ 117.855716][ T7553] RDS/IB: syz!: added [ 117.882644][ T7553] smc: adding ib device syz! with port count 1 [ 117.893783][ T7553] smc: ib device syz! port 1 has pnetid [ 117.913750][ T7616] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 118.102908][ T7619] sctp: [Deprecated]: syz.0.434 (pid 7619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.102908][ T7619] Use struct sctp_sack_info instead [ 118.150846][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 118.666662][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.840991][ T7643] delete_channel: no stack [ 118.845633][ T7643] delete_channel: no stack [ 118.883004][ T7643] delete_channel: no stack [ 118.891523][ T7643] delete_channel: no stack [ 118.899508][ T7643] delete_channel: no stack [ 118.904115][ T7643] delete_channel: no stack [ 118.912564][ T7643] delete_channel: no stack [ 118.917306][ T7643] delete_channel: no stack [ 118.930790][ T7651] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 118.946786][ T7643] delete_channel: no stack [ 118.962867][ T7643] delete_channel: no stack [ 119.003309][ T7643] delete_channel: no stack [ 119.013171][ T7643] delete_channel: no stack [ 119.019603][ T7643] delete_channel: no stack [ 119.024631][ T7643] delete_channel: no stack [ 119.029932][ T7643] delete_channel: no stack [ 119.034598][ T7643] delete_channel: no stack [ 119.039568][ T7643] delete_channel: no stack [ 119.046840][ T7653] unsupported nla_type 52263 [ 119.080638][ T7643] delete_channel: no stack [ 119.085362][ T7643] delete_channel: no stack [ 119.095053][ T7643] delete_channel: no stack [ 119.105341][ T7657] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 119.144343][ T7657] netlink: 'syz.3.445': attribute type 3 has an invalid length. [ 119.152570][ T7657] netlink: 224 bytes leftover after parsing attributes in process `syz.3.445'. [ 119.210020][ T7646] delete_channel: no stack [ 119.246006][ T7662] pim6reg1: entered promiscuous mode [ 119.251711][ T7662] pim6reg1: entered allmulticast mode [ 119.266471][ T7646] delete_channel: no stack [ 119.287241][ T7646] delete_channel: no stack [ 119.303534][ T7646] delete_channel: no stack [ 119.314399][ T7646] delete_channel: no stack [ 119.315639][ T7665] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 119.323920][ T7646] delete_channel: no stack [ 119.350285][ T7646] delete_channel: no stack [ 119.364902][ T7646] delete_channel: no stack [ 119.372501][ T7665] netlink: 76 bytes leftover after parsing attributes in process `syz.3.447'. [ 119.375780][ T7646] delete_channel: no stack [ 119.396728][ T7665] nbd: illegal input index -8454144 [ 119.401996][ T7646] delete_channel: no stack [ 119.417867][ T7646] delete_channel: no stack [ 119.427193][ T7646] delete_channel: no stack [ 119.445868][ T7646] delete_channel: no stack [ 120.020792][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 120.247217][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 120.402459][ T7708] pim6reg: entered allmulticast mode [ 120.646857][ T7720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.684211][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 120.878636][ T7727] netlink: 348 bytes leftover after parsing attributes in process `syz.2.464'. [ 121.061912][ T7739] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 121.105688][ T7741] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 121.235676][ T7739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.243987][ T7741] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 121.471692][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.555865][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.569343][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.590439][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.705086][ T7779] batadv_slave_1: entered promiscuous mode [ 121.720492][ T7779] netlink: 'syz.1.477': attribute type 7 has an invalid length. [ 121.734820][ T7778] netlink: 'syz.1.477': attribute type 7 has an invalid length. [ 121.744153][ T7773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.769295][ T7776] batadv_slave_1: left promiscuous mode [ 122.084684][ T5982] IPVS: starting estimator thread 0... [ 122.189716][ T7798] IPVS: using max 36 ests per chain, 86400 per kthread [ 122.204178][ T7806] vcan0: entered allmulticast mode [ 122.339459][ T7813] netlink: 'syz.0.487': attribute type 5 has an invalid length. [ 122.357088][ T7813] __nla_validate_parse: 9 callbacks suppressed [ 122.357106][ T7813] netlink: 43 bytes leftover after parsing attributes in process `syz.0.487'. [ 122.381118][ T7812] syzkaller1: entered promiscuous mode [ 122.386896][ T7812] syzkaller1: entered allmulticast mode [ 122.468592][ T7820] netlink: 84 bytes leftover after parsing attributes in process `syz.0.487'. [ 122.509162][ T7813] can: request_module (can-proto-0) failed. [ 122.533881][ T7825] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 122.586723][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 122.796086][ T7834] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 122.882927][ T7839] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 122.936679][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'. [ 123.041328][ T7825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.063917][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 123.084184][ T7833] tc_dump_action: action bad kind [ 123.183012][ T7854] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 123.191913][ T7854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 123.205430][ T7842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.227365][ T7854] dummy0: entered promiscuous mode [ 123.244202][ T7854] bridge0: port 1(dummy0) entered blocking state [ 123.250912][ T7854] bridge0: port 1(dummy0) entered disabled state [ 123.258962][ T7854] dummy0: entered allmulticast mode [ 123.268464][ T7854] bridge0: port 1(dummy0) entered blocking state [ 123.274979][ T7854] bridge0: port 1(dummy0) entered forwarding state [ 123.314158][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 123.970798][ T7892] syzkaller0: create flow: hash 2221763591 index 1 [ 124.049461][ T12] syzkaller0: tun_net_xmit 76 [ 124.084491][ T12] syzkaller0: tun_net_xmit 48 [ 124.089217][ T7905] Bluetooth: MGMT ver 1.23 [ 124.089665][ T9] syzkaller0: tun_net_xmit 76 [ 124.245766][ T7904] macvlan0: entered allmulticast mode [ 124.256525][ T7904] bond0: (slave macvlan0): Opening slave failed [ 124.268107][ T5953] syzkaller0: tun_net_xmit 76 [ 124.292573][ T7913] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 124.301925][ T7879] syzkaller0: delete flow: hash 2221763591 index 1 [ 125.603870][ T7917] netlink: 72 bytes leftover after parsing attributes in process `syz.3.514'. [ 125.632805][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 125.679626][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 125.911602][ T7946] syzkaller1: entered promiscuous mode [ 125.917139][ T7946] syzkaller1: entered allmulticast mode [ 126.021153][ T7951] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 126.035064][ T7952] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 126.458558][ T7975] delete_channel: no stack [ 126.928345][ T7998] syzkaller1: entered promiscuous mode [ 126.934410][ T7998] syzkaller1: entered allmulticast mode [ 127.218953][ T8013] netlink: 'syz.4.548': attribute type 11 has an invalid length. [ 127.300185][ T8013] tipc: Started in network mode [ 127.306616][ T8013] tipc: Node identity 12fda1edd89d, cluster identity 4711 [ 127.314778][ T8013] tipc: Enabled bearer , priority 0 [ 127.416923][ T8013] syzkaller0: entered promiscuous mode [ 127.418379][ T8018] __nla_validate_parse: 11 callbacks suppressed [ 127.418395][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'. [ 127.422832][ T8013] syzkaller0: entered allmulticast mode [ 127.444075][ T8013] tipc: Resetting bearer [ 127.485703][ T8012] tipc: Resetting bearer [ 127.580835][ T8024] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 128.347618][ T5982] tipc: Node number set to 3395330541 [ 128.908777][ T8012] tipc: Disabling bearer [ 128.937485][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 128.948448][ T8032] batman_adv: batadv0: Adding interface: wlan1 [ 128.954676][ T8032] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.982880][ T8032] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 129.239465][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 129.482460][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 129.936790][ T8076] can: request_module (can-proto-0) failed. [ 130.022220][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 130.057760][ T8091] netlink: 'syz.3.568': attribute type 11 has an invalid length. [ 130.065540][ T8091] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 130.117662][ T8091] netlink: 224 bytes leftover after parsing attributes in process `syz.3.568'. [ 130.273071][ T8103] netlink: 64 bytes leftover after parsing attributes in process `syz.2.573'. [ 130.365993][ T8103] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 130.407141][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 130.468073][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 130.679824][ T8124] sctp: [Deprecated]: syz.2.579 (pid 8124) Use of int in max_burst socket option deprecated. [ 130.679824][ T8124] Use struct sctp_assoc_value instead [ 130.841014][ T8131] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 130.842921][ T8135] netlink: 104 bytes leftover after parsing attributes in process `syz.0.587'. [ 131.369437][ T8164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.583446][ T8176] netlink: 'syz.2.596': attribute type 21 has an invalid length. [ 131.588165][ T8179] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 131.694828][ T8188] tipc: Enabled bearer , priority 0 [ 131.712938][ T8185] tipc: Enabling of bearer rejected, already enabled [ 131.744928][ T8184] syzkaller0: entered promiscuous mode [ 131.755617][ T8184] syzkaller0: entered allmulticast mode [ 131.806781][ T8187] veth0_macvtap: left promiscuous mode [ 131.844200][ T8190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.944988][ T8184] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.066184][ T8185] tipc: Resetting bearer [ 132.187310][ T8188] tipc: Resetting bearer [ 132.271719][ T8188] tipc: Disabling bearer [ 132.314002][ T8224] netlink: 'syz.1.607': attribute type 8 has an invalid length. [ 132.446736][ T8230] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 132.450657][ T8233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.464155][ T8230] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 132.480734][ T8237] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 132.491930][ T8237] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 132.861587][ T8281] __nla_validate_parse: 9 callbacks suppressed [ 132.861605][ T8281] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.616'. [ 132.917556][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930120][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.311740][ T8333] netlink: 'syz.3.620': attribute type 21 has an invalid length. [ 133.337832][ T8333] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.379008][ T8333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.386655][ T8333] IPv6: NLM_F_CREATE should be set when creating new route [ 133.394116][ T8333] IPv6: NLM_F_CREATE should be set when creating new route [ 133.401403][ T8333] IPv6: NLM_F_CREATE should be set when creating new route [ 133.482334][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 133.518580][ T8340] tipc: Invalid UDP bearer configuration [ 133.518653][ T8340] tipc: Enabling of bearer rejected, failed to enable media [ 133.720580][ T8354] netlink: 'syz.4.625': attribute type 21 has an invalid length. [ 133.756393][ T8354] netlink: 152 bytes leftover after parsing attributes in process `syz.4.625'. [ 133.780785][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 133.866099][ T8359] lo: entered promiscuous mode [ 133.884425][ T8359] tunl0: entered promiscuous mode [ 133.936290][ T8359] gre0: entered promiscuous mode [ 134.028497][ T8359] gretap0: entered promiscuous mode [ 134.041532][ T8370] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 134.118173][ T8359] erspan0: entered promiscuous mode [ 134.159354][ T8359] ip_vti0: entered promiscuous mode [ 134.417072][ T8389] veth1_macvtap: left promiscuous mode [ 134.633035][ T8400] netlink: 'syz.1.638': attribute type 11 has an invalid length. [ 134.913790][ T8411] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 134.922158][ T8411] netlink: 232 bytes leftover after parsing attributes in process `syz.3.642'. [ 134.963035][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 135.026647][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 135.214130][ T8422] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000 [ 135.221959][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 135.231557][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 135.487838][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 135.625781][ T8444] geneve2: entered promiscuous mode [ 135.637807][ T8444] geneve2: entered allmulticast mode [ 135.711778][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.719390][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.732223][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.747682][ T8450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.192483][ T8477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.501543][ T8502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.681930][ T8515] veth1_macvtap: left promiscuous mode [ 136.857043][ T8523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.929735][ T8525] netlink: 'syz.4.678': attribute type 7 has an invalid length. [ 137.110798][ T8535] netlink: 'syz.4.682': attribute type 3 has an invalid length. [ 137.262666][ T8543] tipc: Enabled bearer , priority 0 [ 137.290487][ T8541] vcan0 (unregistering): left allmulticast mode [ 137.332860][ T8543] syzkaller0: entered promiscuous mode [ 137.338609][ T8543] syzkaller0: entered allmulticast mode [ 137.355991][ T8547] tap0: tun_chr_ioctl cmd 1074025677 [ 137.362296][ T8547] tap0: linktype set to 65534 [ 137.368932][ T8543] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.558978][ T8545] tipc: Resetting bearer [ 137.612139][ T8545] tipc: Disabling bearer [ 137.705594][ T8543] tipc: Resetting bearer [ 137.764377][ T8542] tipc: Resetting bearer [ 137.851954][ T8542] tipc: Disabling bearer [ 138.320914][ T8588] __nla_validate_parse: 16 callbacks suppressed [ 138.320933][ T8588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.701'. [ 138.354009][ T8585] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 138.400406][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 138.415358][ T8595] netlink: 'syz.4.700': attribute type 3 has an invalid length. [ 138.836462][ T8619] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 138.852086][ T8619] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 138.868806][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 138.881043][ T8619] netlink: 256 bytes leftover after parsing attributes in process `syz.0.709'. [ 139.228693][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 139.296656][ T8640] ip6gre1: entered allmulticast mode [ 139.732115][ T8670] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 139.762049][ T8670] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 139.776425][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 139.804181][ T8670] netlink: 'syz.3.724': attribute type 4 has an invalid length. [ 139.831855][ T8670] netlink: 136 bytes leftover after parsing attributes in process `syz.3.724'. [ 139.990745][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 140.031621][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 140.048483][ T8691] netlink: 'syz.2.728': attribute type 6 has an invalid length. [ 140.076141][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 140.118446][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 140.186483][ T8691] veth7: entered promiscuous mode [ 140.194882][ T8691] veth7: entered allmulticast mode [ 140.206523][ T8693] tipc: Enabled bearer , priority 0 [ 140.215412][ T8701] syzkaller0: entered promiscuous mode [ 140.235211][ T8701] syzkaller0: entered allmulticast mode [ 140.294425][ T8693] tipc: Resetting bearer [ 140.364572][ T8692] tipc: Resetting bearer [ 140.425603][ T8692] tipc: Disabling bearer [ 140.589193][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 140.614021][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 140.640215][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 140.908496][ T8729] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 140.941740][ T8735] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 140.946529][ T8717] infiniband syz2: set active [ 140.965623][ T8717] infiniband syz2: added vxcan1 [ 140.978461][ T5953] vxcan1 speed is unknown, defaulting to 1000 [ 141.094414][ T8717] RDS/IB: syz2: added [ 141.104614][ T8717] smc: adding ib device syz2 with port count 1 [ 141.114677][ T8717] smc: ib device syz2 port 1 has pnetid [ 141.125607][ T5953] vxcan1 speed is unknown, defaulting to 1000 [ 141.133368][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 141.260944][ T8751] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 141.375137][ T8757] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 141.505039][ T8761] bond2: (slave bridge2): making interface the new active one [ 141.514730][ T8761] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 141.592299][ T8765] openvswitch: netlink: Message has 5 unknown bytes. [ 141.623598][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 141.766189][ T8777] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 141.920911][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 142.177119][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 142.222772][ T8792] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 142.636191][ T8804] netlink: zone id is out of range [ 142.645788][ T8804] netlink: zone id is out of range [ 142.665965][ T8804] netlink: zone id is out of range [ 142.666670][ T8717] vxcan1 speed is unknown, defaulting to 1000 [ 142.673358][ T8804] netlink: zone id is out of range [ 142.686474][ T8804] netlink: zone id is out of range [ 142.694597][ T8804] netlink: zone id is out of range [ 142.703986][ T8804] netlink: del zone limit has 4 unknown bytes [ 143.092346][ T8832] pim6reg1: entered promiscuous mode [ 143.094725][ T8830] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.101364][ T8832] pim6reg1: entered allmulticast mode [ 143.324171][ T8844] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.349334][ T8840] __nla_validate_parse: 6 callbacks suppressed [ 143.349354][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 143.456077][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 143.774793][ T8862] netlink: 'syz.4.779': attribute type 12 has an invalid length. [ 143.832223][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.779'. [ 144.326898][ T8898] netlink: 72 bytes leftover after parsing attributes in process `syz.1.786'. [ 144.377996][ T8902] netlink: 72 bytes leftover after parsing attributes in process `syz.1.786'. [ 144.389752][ T8903] netlink: 'syz.4.788': attribute type 23 has an invalid length. [ 144.740449][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 145.530580][ T8966] netlink: 'syz.3.806': attribute type 12 has an invalid length. [ 145.562309][ T8966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.806'. [ 145.589341][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'. [ 145.681121][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 145.861758][ T8984] tipc: Enabling of bearer rejected, failed to enable media [ 146.130805][ T8998] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 146.167353][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.197789][ T9000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.812803][ T8997] netlink: 220 bytes leftover after parsing attributes in process `syz.3.812'. [ 147.185430][ T9050] team0: No ports can be present during mode change [ 147.203684][ T9049] syzkaller1: entered promiscuous mode [ 147.227198][ T9049] syzkaller1: entered allmulticast mode [ 147.299618][ T9061] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:21 [ 147.519331][ T9076] IPVS: set_ctl: invalid protocol: 99 224.0.0.2:20002 [ 147.559047][ T9074] tipc: Enabling of bearer rejected, media not registered [ 148.165061][ T9121] bridge3: entered promiscuous mode [ 148.172167][ T9121] bridge3: entered allmulticast mode [ 148.722211][ T9119] vxcan1 speed is unknown, defaulting to 1000 [ 148.790461][ T9152] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 149.073325][ T9157] block nbd4: not configured, cannot reconfigure [ 149.191993][ T9159] nbd1: detected capacity change from 0 to 127 [ 149.208582][ T5877] block nbd1: Receive control failed (result -32) [ 149.211546][ T5873] block nbd1: Send control failed (result -32) [ 149.243247][ T5873] block nbd1: Request send failed, requeueing [ 149.264288][ T55] block nbd1: Dead connection, failed to find a fallback [ 149.273576][ T55] block nbd1: shutting down sockets [ 149.279451][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.289400][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 149.298169][ T5873] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.307634][ T5873] Buffer I/O error on dev nbd1, logical block 1, async page read [ 149.318135][ T5873] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.327888][ T5873] Buffer I/O error on dev nbd1, logical block 2, async page read [ 149.336198][ T5873] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.345960][ T5873] Buffer I/O error on dev nbd1, logical block 3, async page read [ 149.354315][ T5873] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.365286][ T5873] Buffer I/O error on dev nbd1, logical block 0, async page read [ 149.385328][ T5873] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.396909][ T5873] Buffer I/O error on dev nbd1, logical block 1, async page read [ 149.405400][ T5873] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.414806][ T5873] Buffer I/O error on dev nbd1, logical block 2, async page read [ 149.424919][ T5873] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.435294][ T5873] Buffer I/O error on dev nbd1, logical block 3, async page read [ 149.443722][ T5873] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.478251][ T5873] Buffer I/O error on dev nbd1, logical block 0, async page read [ 149.486235][ T5873] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.506933][ T5873] Buffer I/O error on dev nbd1, logical block 1, async page read [ 149.546304][ T5873] ldm_validate_partition_table(): Disk read failed. [ 149.641655][ T5873] Dev nbd1: unable to read RDB block 0 [ 149.718344][ T5873] nbd1: unable to read partition table [ 149.726915][ T9179] __nla_validate_parse: 5 callbacks suppressed [ 149.727109][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 149.804904][ T5873] ldm_validate_partition_table(): Disk read failed. [ 149.824652][ T5873] Dev nbd1: unable to read RDB block 0 [ 149.864823][ T5873] nbd1: unable to read partition table [ 150.408101][ T9212] syzkaller0: entered promiscuous mode [ 150.427123][ T9212] syzkaller0: entered allmulticast mode [ 150.522849][ T9212] ip6gre0: mtu less than device minimum [ 150.720104][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 150.786561][ T9230] team0 (unregistering): Port device team_slave_0 removed [ 150.807792][ T9230] team0 (unregistering): Port device team_slave_1 removed [ 150.840701][ T5982] syz!: Port: 1 Link DOWN [ 150.850177][ T9233] tipc: Enabled bearer , priority 0 [ 150.861357][ T9233] syzkaller0: entered promiscuous mode [ 150.869891][ T9233] syzkaller0: entered allmulticast mode [ 150.881416][ T9230] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 150.929537][ T9230] tipc: Resetting bearer [ 150.941878][ T9229] tipc: Resetting bearer [ 151.001082][ T9229] tipc: Disabling bearer [ 151.425106][ T9259] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 151.451849][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 151.664310][ T9274] netlink: 232 bytes leftover after parsing attributes in process `syz.2.891'. [ 151.774315][ T9280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.890'. [ 152.689508][ T9332] bond3: entered promiscuous mode [ 152.710231][ T9332] bond3: entered allmulticast mode [ 152.715940][ T9332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.806865][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 152.902851][ T8263] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 152.965864][ T9361] netlink: 'syz.4.909': attribute type 10 has an invalid length. [ 153.015504][ T9332] bond3 (unregistering): Released all slaves [ 153.143463][ T9361] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.215887][ T9369] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.226991][ T9369] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 153.424153][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 153.696481][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 153.752897][ T9390] ip6erspan0: entered promiscuous mode [ 153.759883][ T9390] ip6erspan0: entered allmulticast mode [ 153.775095][ T9388] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 153.801789][ T9388] netlink: 'syz.4.919': attribute type 2 has an invalid length. [ 153.830202][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 153.860819][ T9406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.073628][ T9415] pim6reg: entered allmulticast mode [ 154.081095][ T9426] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 154.095851][ T9426] netlink: 'syz.2.930': attribute type 1 has an invalid length. [ 154.106680][ T9415] pim6reg: left allmulticast mode [ 154.329577][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 154.375994][ T9439] tipc: Enabled bearer , priority 0 [ 154.405060][ T9439] syzkaller0: entered promiscuous mode [ 154.413321][ T9439] syzkaller0: entered allmulticast mode [ 154.425394][ T9439] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.476715][ T9446] netlink: 'syz.4.935': attribute type 16 has an invalid length. [ 154.487084][ T9439] tipc: Resetting bearer [ 154.504446][ T9435] tipc: Resetting bearer [ 154.512151][ T9446] netlink: 'syz.4.935': attribute type 17 has an invalid length. [ 154.530640][ T9435] tipc: Disabling bearer [ 154.583156][ T9446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.630396][ T9454] netlink: 'syz.3.938': attribute type 9 has an invalid length. [ 154.927059][ T9471] wg1: entered promiscuous mode [ 154.938403][ T9471] wg1: entered allmulticast mode [ 154.977956][ T9479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.985237][ T9479] IPv6: NLM_F_CREATE should be set when creating new route [ 155.015006][ T9478] tipc: Enabled bearer , priority 0 [ 155.053765][ T9478] syzkaller0: entered promiscuous mode [ 155.073546][ T9478] syzkaller0: entered allmulticast mode [ 155.100804][ T9478] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.141397][ T9487] __nla_validate_parse: 3 callbacks suppressed [ 155.141415][ T9487] netlink: 76 bytes leftover after parsing attributes in process `syz.2.949'. [ 155.177994][ T9478] tipc: Resetting bearer [ 155.201406][ T9492] tipc: Enabled bearer , priority 0 [ 155.277316][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 155.476374][ T9510] netlink: 'syz.3.954': attribute type 6 has an invalid length. [ 155.484997][ T9510] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.954'. [ 155.503703][ T9473] tipc: Resetting bearer [ 155.538825][ T9473] tipc: Disabling bearer [ 155.554555][ T9502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.950'. [ 155.564163][ T9502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.950'. [ 155.671741][ T9513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.803644][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.955'. [ 155.837879][ T9520] tipc: Started in network mode [ 155.842789][ T9520] tipc: Node identity 6e97daa0946a, cluster identity 4711 [ 155.865706][ T9520] tipc: Enabled bearer , priority 0 [ 155.889036][ T9520] syzkaller0: entered promiscuous mode [ 155.894661][ T9520] syzkaller0: entered allmulticast mode [ 155.906052][ T9520] tipc: Resetting bearer [ 155.922798][ T9516] tipc: Resetting bearer [ 156.000280][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 156.010262][ T9516] tipc: Disabling bearer [ 156.036374][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 156.238471][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 156.272085][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 156.337709][ T5953] tipc: Node number set to 2781105907 [ 156.926255][ T9590] xt_limit: Overflow, try lower: 604147548/4200216962 [ 156.970092][ T9585] siw: device registration error -23 [ 157.124836][ T9598] bridge_slave_0: left allmulticast mode [ 157.146824][ T9598] bridge_slave_0: left promiscuous mode [ 157.153716][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.172942][ T9598] bridge_slave_1: left allmulticast mode [ 157.182911][ T9598] bridge_slave_1: left promiscuous mode [ 157.192259][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.207939][ T9598] bond0: (slave bond_slave_0): Releasing backup interface [ 157.223476][ T9598] bond0: (slave bond_slave_1): Releasing backup interface [ 157.239552][ T9598] team0: Port device team_slave_0 removed [ 157.251742][ T9598] team0: Port device team_slave_1 removed [ 157.264861][ T9598] bond0: (slave wlan1): Releasing backup interface [ 157.382922][ T9604] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 157.401073][ T9608] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 157.579827][ T9624] validate_nla: 4 callbacks suppressed [ 157.579845][ T9624] netlink: 'syz.3.985': attribute type 7 has an invalid length. [ 157.603698][ T9624] : entered promiscuous mode [ 157.613052][ T9626] netlink: 'syz.3.985': attribute type 7 has an invalid length. [ 157.674442][ T9633] netlink: 'syz.2.986': attribute type 10 has an invalid length. [ 157.873160][ T9646] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 157.957654][ T9638] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (524294) [ 157.977600][ T9638] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 158.672306][ T9688] netlink: 'syz.1.1003': attribute type 12 has an invalid length. [ 158.712557][ T9688] netlink: 'syz.1.1003': attribute type 12 has an invalid length. [ 158.823194][ T9694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.234766][ T9714] netlink: 'syz.3.1012': attribute type 5 has an invalid length. [ 159.250363][ T9714] bond0: option mode: unable to set because the bond device has slaves [ 159.481720][ T9728] netlink: 'syz.4.1016': attribute type 8 has an invalid length. [ 159.528370][ T9728] netlink: 'syz.4.1016': attribute type 9 has an invalid length. [ 159.741733][ T9743] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 159.795798][ T9746] tipc: Enabled bearer , priority 0 [ 159.828778][ T9746] syzkaller0: entered promiscuous mode [ 159.875428][ T9746] syzkaller0: entered allmulticast mode [ 159.891686][ T9756] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.979493][ T9746] tipc: Resetting bearer [ 160.025635][ T9745] tipc: Resetting bearer [ 160.121189][ T9745] tipc: Disabling bearer [ 160.403075][ T9786] batadv_slave_0: entered allmulticast mode [ 160.414696][ T9785] batadv_slave_0: left allmulticast mode [ 160.471506][ T9789] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 160.509791][ T9789] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 160.540403][ T9793] openvswitch: netlink: IP tunnel dst address not specified [ 160.706320][ T9808] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 161.072915][ T9833] __nla_validate_parse: 21 callbacks suppressed [ 161.072931][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 162.669166][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1055'. [ 162.833081][ T9868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'. [ 162.847154][ T9868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1058'. [ 163.016200][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 163.063384][ T9885] netlink: 'syz.4.1062': attribute type 1 has an invalid length. [ 163.086803][ T9888] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 163.170198][ T9893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1066'. [ 163.268355][ T9891] tipc: Enabled bearer , priority 0 [ 163.276021][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 163.276208][ T9891] syzkaller0: entered promiscuous mode [ 163.293891][ T9891] syzkaller0: entered allmulticast mode [ 163.356689][ T9891] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1065'. [ 163.398098][ T9891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1065'. [ 163.423171][ T9889] tipc: Resetting bearer [ 163.466755][ T9889] tipc: Disabling bearer [ 164.233599][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 164.805875][T10002] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 164.816703][T10002] netlink: 'syz.2.1096': attribute type 12 has an invalid length. [ 165.312214][T10030] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 165.504745][T10032] vlan2: entered allmulticast mode [ 165.510953][T10032] veth0_to_bond: entered allmulticast mode [ 165.663429][T10056] bridge_slave_0: left allmulticast mode [ 165.669935][T10056] bridge_slave_0: left promiscuous mode [ 165.675814][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.693619][T10056] bridge_slave_1: left allmulticast mode [ 165.702608][T10056] bridge_slave_1: left promiscuous mode [ 165.711318][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.750509][T10056] bond0: (slave bond_slave_0): Releasing backup interface [ 165.765739][T10056] bond0: (slave bond_slave_1): Releasing backup interface [ 165.789084][T10056] team0: Port device team_slave_0 removed [ 165.802226][T10056] team0: Port device team_slave_1 removed [ 165.830701][T10056] bond2: (slave bridge2): Releasing active interface [ 166.052648][T10076] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 166.066555][T10074] vlan2: entered allmulticast mode [ 166.090243][T10078] __nla_validate_parse: 7 callbacks suppressed [ 166.090260][T10078] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1116'. [ 166.125898][T10074] veth1: entered allmulticast mode [ 166.283077][T10091] tipc: Enabling of bearer rejected, failed to enable media [ 166.320296][T10089] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1118'. [ 166.347201][T10095] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1121'. [ 166.585512][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 166.645905][T10107] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 166.940648][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 167.165092][T10139] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1137'. [ 167.184007][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 167.352468][T10148] netlink: 'syz.3.1141': attribute type 2 has an invalid length. [ 167.394745][T10148] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1141'. [ 167.429637][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1143'. [ 167.439153][T10154] tipc: Invalid UDP bearer configuration [ 167.439199][T10154] tipc: Enabling of bearer rejected, failed to enable media [ 167.632182][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 167.942992][T10184] veth0: entered promiscuous mode [ 168.089929][T10183] veth0: left promiscuous mode [ 168.392060][T10212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.415656][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.522218][T10205] [ 168.524601][T10205] ====================================================== [ 168.531619][T10205] WARNING: possible circular locking dependency detected [ 168.538652][T10205] syzkaller #0 Not tainted [ 168.543070][T10205] ------------------------------------------------------ [ 168.550098][T10205] syz.3.1157/10205 is trying to acquire lock: [ 168.556151][T10205] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 168.565720][T10205] [ 168.565720][T10205] but task is already holding lock: [ 168.573083][T10205] ffff8881433dd8f8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 168.583362][T10205] [ 168.583362][T10205] which lock already depends on the new lock. [ 168.583362][T10205] [ 168.593762][T10205] [ 168.593762][T10205] the existing dependency chain (in reverse order) is: [ 168.602770][T10205] [ 168.602770][T10205] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 168.611382][T10205] lock_acquire+0x120/0x360 [ 168.616492][T10205] blk_alloc_queue+0x538/0x620 [ 168.621773][T10205] __blk_mq_alloc_disk+0x15c/0x340 [ 168.627398][T10205] nbd_dev_add+0x46c/0xae0 [ 168.632335][T10205] nbd_init+0x168/0x1f0 [ 168.637000][T10205] do_one_initcall+0x233/0x820 [ 168.642288][T10205] do_initcall_level+0x104/0x190 [ 168.647750][T10205] do_initcalls+0x59/0xa0 [ 168.652606][T10205] kernel_init_freeable+0x334/0x4b0 [ 168.658314][T10205] kernel_init+0x1d/0x1d0 [ 168.663151][T10205] ret_from_fork+0x3fc/0x770 [ 168.668247][T10205] ret_from_fork_asm+0x1a/0x30 [ 168.673529][T10205] [ 168.673529][T10205] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 168.680730][T10205] lock_acquire+0x120/0x360 [ 168.685751][T10205] fs_reclaim_acquire+0x72/0x100 [ 168.691202][T10205] prepare_alloc_pages+0x153/0x610 [ 168.696816][T10205] __alloc_frozen_pages_noprof+0x123/0x370 [ 168.703133][T10205] __alloc_pages_noprof+0xa/0x30 [ 168.708584][T10205] pcpu_populate_chunk+0x182/0xb30 [ 168.714292][T10205] pcpu_alloc_noprof+0xcbf/0x16b0 [ 168.719844][T10205] bpf_map_alloc_percpu+0xbc/0x1b0 [ 168.725476][T10205] prealloc_init+0x225/0x630 [ 168.730584][T10205] htab_map_alloc+0x6ce/0xc70 [ 168.735770][T10205] map_create+0xaa0/0x14d0 [ 168.740698][T10205] __sys_bpf+0x60f/0x870 [ 168.745456][T10205] __x64_sys_bpf+0x7c/0x90 [ 168.750392][T10205] do_syscall_64+0xfa/0x3b0 [ 168.755409][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.761811][T10205] [ 168.761811][T10205] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 168.769555][T10205] validate_chain+0xb9b/0x2140 [ 168.774831][T10205] __lock_acquire+0xab9/0xd20 [ 168.780019][T10205] lock_acquire+0x120/0x360 [ 168.785030][T10205] __mutex_lock+0x187/0x1350 [ 168.790143][T10205] pcpu_alloc_noprof+0x286/0x16b0 [ 168.795680][T10205] sbitmap_init_node+0x1e1/0x630 [ 168.801124][T10205] sbitmap_queue_init_node+0x3e/0x4d0 [ 168.807003][T10205] blk_mq_init_tags+0x110/0x280 [ 168.812375][T10205] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 168.818353][T10205] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 168.824677][T10205] nbd_start_device+0x17f/0xb10 [ 168.830052][T10205] nbd_genl_connect+0x135b/0x18f0 [ 168.835601][T10205] genl_family_rcv_msg_doit+0x212/0x300 [ 168.841658][T10205] genl_rcv_msg+0x60e/0x790 [ 168.846732][T10205] netlink_rcv_skb+0x208/0x470 [ 168.852007][T10205] genl_rcv+0x28/0x40 [ 168.856499][T10205] netlink_unicast+0x82f/0x9e0 [ 168.861773][T10205] netlink_sendmsg+0x805/0xb30 [ 168.867040][T10205] __sock_sendmsg+0x219/0x270 [ 168.872222][T10205] ____sys_sendmsg+0x505/0x830 [ 168.877503][T10205] ___sys_sendmsg+0x21f/0x2a0 [ 168.882692][T10205] __x64_sys_sendmsg+0x19b/0x260 [ 168.888134][T10205] do_syscall_64+0xfa/0x3b0 [ 168.893144][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.899542][T10205] [ 168.899542][T10205] other info that might help us debug this: [ 168.899542][T10205] [ 168.909757][T10205] Chain exists of: [ 168.909757][T10205] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 168.909757][T10205] [ 168.923399][T10205] Possible unsafe locking scenario: [ 168.923399][T10205] [ 168.930836][T10205] CPU0 CPU1 [ 168.936214][T10205] ---- ---- [ 168.941565][T10205] lock(&q->q_usage_counter(io)#51); [ 168.946929][T10205] lock(fs_reclaim); [ 168.953418][T10205] lock(&q->q_usage_counter(io)#51); [ 168.961307][T10205] lock(pcpu_alloc_mutex); [ 168.965884][T10205] [ 168.965884][T10205] *** DEADLOCK *** [ 168.965884][T10205] [ 168.974013][T10205] 6 locks held by syz.3.1157/10205: [ 168.979190][T10205] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 168.987381][T10205] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 168.996334][T10205] #2: ffff88802514e188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 169.007712][T10205] #3: ffff88802514e0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 169.018658][T10205] #4: ffff8881433dd8f8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 169.029355][T10205] #5: ffff8881433dd930 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 169.040311][T10205] [ 169.040311][T10205] stack backtrace: [ 169.046187][T10205] CPU: 1 UID: 0 PID: 10205 Comm: syz.3.1157 Not tainted syzkaller #0 PREEMPT(full) [ 169.046204][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.046213][T10205] Call Trace: [ 169.046222][T10205] [ 169.046231][T10205] dump_stack_lvl+0x189/0x250 [ 169.046250][T10205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.046265][T10205] ? __pfx__printk+0x10/0x10 [ 169.046284][T10205] ? print_lock_name+0xde/0x100 [ 169.046301][T10205] print_circular_bug+0x2ee/0x310 [ 169.046318][T10205] check_noncircular+0x134/0x160 [ 169.046334][T10205] validate_chain+0xb9b/0x2140 [ 169.046355][T10205] __lock_acquire+0xab9/0xd20 [ 169.046375][T10205] ? pcpu_alloc_noprof+0x286/0x16b0 [ 169.046393][T10205] lock_acquire+0x120/0x360 [ 169.046410][T10205] ? pcpu_alloc_noprof+0x286/0x16b0 [ 169.046428][T10205] ? __free_frozen_pages+0x691/0xd30 [ 169.046449][T10205] __mutex_lock+0x187/0x1350 [ 169.046468][T10205] ? pcpu_alloc_noprof+0x286/0x16b0 [ 169.046485][T10205] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 169.046504][T10205] ? kasan_save_track+0x4f/0x80 [ 169.046520][T10205] ? kasan_save_track+0x3e/0x80 [ 169.046534][T10205] ? __kasan_kmalloc+0x93/0xb0 [ 169.046549][T10205] ? blk_mq_init_tags+0x85/0x280 [ 169.046564][T10205] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 169.046582][T10205] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 169.046594][T10205] ? pcpu_alloc_noprof+0x286/0x16b0 [ 169.046611][T10205] ? nbd_genl_connect+0x135b/0x18f0 [ 169.046628][T10205] ? genl_family_rcv_msg_doit+0x212/0x300 [ 169.046644][T10205] ? genl_rcv_msg+0x60e/0x790 [ 169.046658][T10205] ? __pfx___mutex_lock+0x10/0x10 [ 169.046669][T10205] ? ____sys_sendmsg+0x505/0x830 [ 169.046683][T10205] ? do_syscall_64+0xfa/0x3b0 [ 169.046695][T10205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.046714][T10205] pcpu_alloc_noprof+0x286/0x16b0 [ 169.046737][T10205] sbitmap_init_node+0x1e1/0x630 [ 169.046751][T10205] ? __kasan_kmalloc+0x93/0xb0 [ 169.046768][T10205] sbitmap_queue_init_node+0x3e/0x4d0 [ 169.046783][T10205] blk_mq_init_tags+0x110/0x280 [ 169.046799][T10205] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 169.046820][T10205] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 169.046833][T10205] ? kfree+0x18e/0x440 [ 169.046850][T10205] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 169.046870][T10205] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 169.046890][T10205] ? sysfs_add_file_mode_ns+0x259/0x300 [ 169.046912][T10205] nbd_start_device+0x17f/0xb10 [ 169.046932][T10205] ? device_create_file+0xf4/0x1c0 [ 169.046946][T10205] nbd_genl_connect+0x135b/0x18f0 [ 169.046967][T10205] ? __pfx_nbd_genl_connect+0x10/0x10 [ 169.046988][T10205] ? __nla_parse+0x40/0x60 [ 169.047008][T10205] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 169.047027][T10205] genl_family_rcv_msg_doit+0x212/0x300 [ 169.047044][T10205] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.047064][T10205] ? stack_trace_save+0x9c/0xe0 [ 169.047082][T10205] genl_rcv_msg+0x60e/0x790 [ 169.047099][T10205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.047113][T10205] ? __pfx_nbd_genl_connect+0x10/0x10 [ 169.047135][T10205] netlink_rcv_skb+0x208/0x470 [ 169.047153][T10205] ? __lock_acquire+0xab9/0xd20 [ 169.047169][T10205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.047184][T10205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.047208][T10205] ? down_read+0x1ad/0x2e0 [ 169.047222][T10205] genl_rcv+0x28/0x40 [ 169.047235][T10205] netlink_unicast+0x82f/0x9e0 [ 169.047255][T10205] ? __pfx_netlink_unicast+0x10/0x10 [ 169.047272][T10205] ? netlink_sendmsg+0x642/0xb30 [ 169.047284][T10205] ? skb_put+0x11b/0x210 [ 169.047298][T10205] netlink_sendmsg+0x805/0xb30 [ 169.047313][T10205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.047326][T10205] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.047339][T10205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.047353][T10205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.047366][T10205] __sock_sendmsg+0x219/0x270 [ 169.047385][T10205] ____sys_sendmsg+0x505/0x830 [ 169.047402][T10205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.047420][T10205] ? import_iovec+0x74/0xa0 [ 169.047436][T10205] ___sys_sendmsg+0x21f/0x2a0 [ 169.047451][T10205] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.047482][T10205] ? __fget_files+0x2a/0x420 [ 169.047493][T10205] ? __fget_files+0x3a0/0x420 [ 169.047508][T10205] __x64_sys_sendmsg+0x19b/0x260 [ 169.047523][T10205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.047541][T10205] ? rcu_is_watching+0x15/0xb0 [ 169.047556][T10205] ? do_syscall_64+0xbe/0x3b0 [ 169.047569][T10205] do_syscall_64+0xfa/0x3b0 [ 169.047580][T10205] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.047598][T10205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.047610][T10205] ? clear_bhb_loop+0x60/0xb0 [ 169.047625][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.047638][T10205] RIP: 0033:0x7f86cd18eba9 [ 169.047651][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.047662][T10205] RSP: 002b:00007f86ce02e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.047677][T10205] RAX: ffffffffffffffda RBX: 00007f86cd3d6090 RCX: 00007f86cd18eba9 [ 169.047687][T10205] RDX: 0000000024044800 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 169.047697][T10205] RBP: 00007f86cd211e19 R08: 0000000000000000 R09: 0000000000000000 [ 169.047705][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.047713][T10205] R13: 00007f86cd3d6128 R14: 00007f86cd3d6090 R15: 00007ffd087cb948 [ 169.047728][T10205] [ 169.634037][ T5883] block nbd2: Receive control failed (result -32) [ 169.640775][ T5877] block nbd2: Receive control failed (result -32) [ 169.649311][T10205] nbd2: detected capacity change from 0 to 127 [ 169.656449][ T5873] block nbd2: Dead connection, failed to find a fallback [ 169.665088][ T5873] block nbd2: shutting down sockets [ 169.670664][ T5873] blk_print_req_error: 138 callbacks suppressed [ 169.670680][ T5873] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.694197][T10230] syzkaller1: entered promiscuous mode [ 169.699186][ T5873] buffer_io_error: 138 callbacks suppressed [ 169.699202][ T5873] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.699963][T10230] syzkaller1: entered allmulticast mode [ 169.705706][ T5873] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.722501][T10230] bridge0: entered promiscuous mode [ 169.734228][T10230] ip6gretap0: entered promiscuous mode [ 169.744859][ T5873] Buffer I/O error on dev nbd2, logical block 1, async page read [ 169.746374][T10229] base_sock_release(ffff888057dcf800) sk=ffff88805801e000 [ 169.754129][ T5873] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.770557][ T5873] Buffer I/O error on dev nbd2, logical block 2, async page read [ 169.778875][ T5873] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.788193][ T5873] Buffer I/O error on dev nbd2, logical block 3, async page read [ 169.796099][ T5873] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.807030][ T5873] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.814946][ T5873] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.824096][ T5873] Buffer I/O error on dev nbd2, logical block 1, async page read [ 169.832112][ T5873] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.841402][ T5873] Buffer I/O error on dev nbd2, logical block 2, async page read [ 169.849293][ T5873] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.858469][ T5873] Buffer I/O error on dev nbd2, logical block 3, async page read [ 169.866316][ T5873] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.875434][ T5873] Buffer I/O error on dev nbd2, logical block 0, async page read [ 169.883297][ T5873] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.892405][ T5873] Buffer I/O error on dev nbd2, logical block 1, async page read [ 169.901113][ T5873] ldm_validate_partition_table(): Disk read failed. [ 169.909575][ T5873] Dev nbd2: unable to read RDB block 0 [ 169.915819][ T5873] nbd2: unable to read partition table [ 169.924860][ T5873] ldm_validate_partition_table(): Disk read failed. [ 169.932659][ T5873] Dev nbd2: unable to read RDB block 0 [ 169.940749][ T5873] nbd2: unable to read partition table