last executing test programs: 2.44119119s ago: executing program 1 (id=1040): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x2000000, 0x4, 0x0, &(0x7f00000000c0)="2d1d5bd9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000040000000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x6, 0xa, 0x0, 0x0, @str='!\x00'}]}, 0x24}}, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000280)=r4}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) 2.21832156s ago: executing program 1 (id=1044): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), 0xffffffffffffffff) 2.019968746s ago: executing program 1 (id=1045): unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.922853774s ago: executing program 3 (id=1047): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/29, 0x1d}, 0x2b6}], 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x50, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6f}]}, 0x50}}, 0x20000034) 1.580169529s ago: executing program 2 (id=1051): getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.219222362s ago: executing program 2 (id=1056): ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) socketpair(0x11, 0x5, 0x967, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_getaddr={0x98, 0x16, 0x8, 0x70bd28, 0x25dfdbff, {0xa, 0x8, 0x2, 0x0, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2e1a1bcc}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x5, 0x7, 0x156}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000}, 0x40400c0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0xe3fc, 0xffffff2c, 0x2}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x5a1d8c8aeb096064, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000003c0)={&(0x7f0000000380)=""/21, 0x15}) r4 = accept4$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x0, @fixed}, &(0x7f0000000440)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000480)={0xfffa, 0x5, 0x1, 0xe, 0xc, 0x40, 0x6}, 0xc) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0xe, 0xef39, 0x80000000, 0x10], 0x2, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) connect$bt_l2cap(r1, &(0x7f0000000600)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800}, 0xe) r5 = socket$packet(0x11, 0x2, 0x300) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000007c0)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000d80)={&(0x7f0000000840)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000880)="22f64a5545b9b9515a53e9a8ad293061f9081e444eac29e0ef4c33ba82cc584d72b9a3c6510c25e3fa73e2f04a4e", 0x2e}, {&(0x7f00000008c0)="ef5dbc613272685e9d1bccdd7f0712f824abec1525535860557174e7dddea9db854b198297744ab3509413d644c2703c3f544a3cfeecdf0af00b9cb778082d8e6b21b911de6138c31bf2", 0x4a}, {&(0x7f0000000940)="3a1b4863355c4bf7cdf53aa4266ba200b61c65f9bdaf354753f72a49d8399b5086c20a603800aa02294029ce8cad3224705c1840cd6449e6278ecf35cf396371a3a3254c387548092f24d7bb1e40d5a8add3d8d956946fe4596c2d72789230a8e6a5674aad9bf2fc35307ef2558f23550bdf986aea1bfb0d8245fdebc6220a24b4c862a77f005c31e5836353a6f9df6745e11e6ddfb3d33da6668da281c0af9f12f1f377787a4cd93e3fc8b2146c283309ff3b87f8003cd559b434695cb9a6a891c8c54e20bbdb9b5494d0f68ab706f870ced936748b", 0xd6}, {&(0x7f0000000a40)="19d62443a0128fbb10d5f7b388aa3411ee1f2a60e33be15b8ee49ceb02500af5b2b5eaafdcc85283afe2231e40a33224030ad8ff31bfd26758eb93e79d00c287a1c86815eeb3c1ca0f7b6ef08866b7aa7d18", 0x52}, {&(0x7f0000000ac0)="b048cf421cbc1b54a90305edbe2321ec972946b1c6ea1eb15e3c5dda4237c770d8c4657b54638cf4544d0aad6b709b1a37ea8fb5616050e312d760455d8aa4611dd4074f7477d039da542b138707219b61340c53c31d4c9cd0caa3564556fb836ca41f52063437f3f1d1ae3656cb267b50d56a35fc58e13baf8ab6e15d47a644eae0ca4b", 0x84}], 0x5, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x5d, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x55}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xc1, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x1e40}, {@remote, 0x7}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7}, {@multicast2, 0x9}, {@multicast2, 0x6}, {@multicast1, 0x10}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}]}, @noop, @end, @timestamp={0x44, 0x8, 0x47, 0x0, 0x9, [0x5]}, @timestamp={0x44, 0x10, 0x51, 0x0, 0x1, [0x6, 0x2, 0x8]}, @cipso={0x86, 0x38, 0x3, [{0x6, 0x8, "7a3b049455e1"}, {0x0, 0x6, "94908296"}, {0x5, 0x12, "5ef41048449f3ea980fd21f585f1750b"}, {0x6, 0xd, "ec501f09f7e453d6dad7ec"}, {0x2, 0x5, "282dc5"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x148}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40040090) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6000004, 0x2010, r3, 0x53dd8000) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000001100)=0x8, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000001140), 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001280)={0x0, 0x800}, 0x8) 1.101721299s ago: executing program 0 (id=1058): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x74d2ae3cc6f38ca2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x124, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2001, 0x1, 0x2, 0x0, {0x3b, 0xb, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x100, 0x70}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x2, 0x5, 0x0, {0xff, 0xc, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x0, 0x7}}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x63, 0xfc, "5fd4fc8ea291fcc343aaf2c0bb314c4b7ea3831e89145b3627310f216b919b75c8007011e4c47f0f3d021868e5fc59c2489304c99cc357b473df235779fb72d35062359aa18edf4aff44b7727c0a0058576612fd582c634be0a45f64d4a5e1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "e4d9c0f0e538ea91e0f4641595a7"}, @NL80211_ATTR_FILS_ERP_REALM={0x13, 0xfa, "fa7888cda45c5001f76d71ed4687f0"}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) 1.092395832s ago: executing program 1 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170a01040000000000000000020000000900020085797a30000000000900010073797a3000"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x14) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 1.090391517s ago: executing program 2 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r0, 0xffffff52, 0x7ff, &(0x7f0000000080), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a7720000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000003c0)=r8, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r9}, 0x10) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000200)={&(0x7f0000000100)=[{0xb1, 0x3, 0x1}], 0x1, 0x10, 0x26f, 0x4}) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r5, &(0x7f0000000080), 0x10) listen(r1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 932.286533ms ago: executing program 4 (id=1061): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0xfff0}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 929.990311ms ago: executing program 3 (id=1062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xffffffe0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9, 0x0, 0x4000}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 872.791964ms ago: executing program 0 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000810500000000fcdb"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0xffffffffffffffff, &(0x7f0000000140)=0x4) r4 = socket(0x23, 0x80002, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r4) 849.685658ms ago: executing program 3 (id=1064): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x4, 0x2, 0x4, 0xfffffffffffffffe, 0x1}, @map_fd={0x18, 0x4}], &(0x7f0000000280)='GPL\x00', 0x2, 0xb3, &(0x7f00000002c0)=""/179, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x1, 0x2, 0x4, 0x7}, {0x4, 0x1, 0x10, 0x1}, {0x1, 0x4, 0x5}, {0x4, 0x4, 0xe}, {0xd2a, 0x4, 0xd, 0x3}], 0x10, 0x2dd4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x1, 0x1, 0xe, 0x4, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0xc, 0x2, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x6c}], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x22, r1, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x7, 0x0, 0x3}, 0x10, 0x0, r2, 0x3, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x9}, {0x0, 0x5, 0x6, 0xc}], 0x10, 0x401}, 0x94) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10080}, 0x400c800) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000740), 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000007c0)={'vcan0\x00', 0x200}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @private1, 0x7800, 0x40, 0x43, 0xa244}}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r1, 0x20, &(0x7f0000000c40)={&(0x7f0000000b40)=""/29, 0x1d, 0x0, &(0x7f0000000b80)=""/142, 0x8e}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0x7, &(0x7f00000008c0)=@raw=[@jmp={0x5, 0x1, 0x6, 0x8, 0x1, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x84}], &(0x7f0000000900)='GPL\x00', 0xc, 0xf8, &(0x7f0000000940)=""/248, 0x0, 0x1, '\x00', r7, @fallback=0x20, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x4, 0x5, 0xfffffffc, 0xffffffff}, 0x10, r8, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000d80)={0x3}) (async) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000ec0)={r11, &(0x7f0000000dc0)='\x00', 0x4402, &(0x7f0000000e00)={@align=0x7, {0x9, 0xfff9, 0x0, 0xa}}, 0x2, &(0x7f0000000e40), &(0x7f0000000e80)=0x1}) getsockopt$bt_hci(r12, 0x0, 0x2, &(0x7f0000000f00)=""/4096, &(0x7f0000001f00)=0x1000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000001f40)={0x1, 0x63}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@bloom_filter={0x1e, 0x4, 0x1, 0x5, 0x4b005, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xf, @value=r1}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000002000)) setsockopt$inet6_mreq(r12, 0x29, 0x1c, &(0x7f0000002040)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14) (async) sendmsg$nl_route(r12, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@bridge_getvlan={0x58, 0x72, 0x300, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x28000801}, 0x8000) getsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000021c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000002240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@getqdisc={0x30, 0x26, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x5, 0xc}, {0xfff2, 0xb}, {0xfffc, 0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004080}, 0x60000004) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000002340)={'pim6reg\x00', 0x600}) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, 0x0, 0x402, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x28000000) 739.329499ms ago: executing program 4 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x62}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1}, 0x94) 739.041532ms ago: executing program 3 (id=1066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000029"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac0000001800dd8d0000000000000000020000000000fd0500000000880016"], 0xac}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x4000) 738.00523ms ago: executing program 2 (id=1067): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff8, 0x2000}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xffffffe0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xffffffb0}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 660.737625ms ago: executing program 1 (id=1068): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000500160001000000080015004b3405de"], 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000380)=0xffffffff, 0x4) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3b492bbd7000fcdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e001000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc014) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x5d985000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0xcd, 0x0, &(0x7f0000000300)="b994bc444b9893b04bf30981fd1a626f7389e32a4a7941c2515284700e44a97c20a00f058be0da09f79b19459fe87a2d1c33b64e62a91efc244b5f1e5f2751a8a71426c42e2819529c68f0cb08d7abcb7517687c402e46f41741ed42cf78d4bb059cdd4cb3b8a6688aec470f364827b2fe1b2f117ffed12a16621878284769347464b039230762fe3606c1f2ad62d657d2280e735362c779b4e7ecf49f3f0f2ba3394636a7f2eb647d3fac6fe0e1360ed0c4e9bba1c89cd8bc9f415189d695f401f4993481e036bf159b1ff68c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x1b) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="fdd8eb50b48349bafe5a563f84817adf2fd72024ec2412e3d282ed8e86ee666085aaa7fe37cb76a2193b752f395ffd1e758ec2f3dfb93ca47b33f8ee8e24ddcc25a50865af2254ec88f2fa1ecf03104f1b8496eab7013868beacf5f7f59b0efffbf2c24f4a2b24917c8652bdedd3f03f10eb6ea122d2c06086e33101ad8fdddc76f4004c9faa3d0fd86dfb00df4ebadc2d6d202401f2978785dec6f3b5d6f178ae7215a4f0eddf25f2e2d56670ba940aae19bccc8978739add5c629794ab7e060f805cacb0e6cdd01d0c237c686268cb35e69ff89fdcbddaa4d1dae508a4eea2", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf250300000008000100", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 623.943759ms ago: executing program 3 (id=1069): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) bind$x25(r2, &(0x7f0000000080), 0x12) socket$nl_route(0x10, 0x3, 0x0) close(r2) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}, {0x1000000, 0x5, 0x9}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, 0x0, 0x42, 0x0, 0x8}, 0x28) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r8, &(0x7f0000000380)='k', 0x1, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000017000000000000000100394500000000000000000000d22bbec6fbefaa8c8e4c38cb1ec60e2dcc93419f0d8bff7282fb516331"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="f5681d8918cfb04f1808000090ff000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8ff10010000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0x10, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x54}}, 0x4804) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r11, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r12, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 618.526198ms ago: executing program 0 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x3, 0x75, 0x7, 0x6, 0xffffffff}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x24, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) 564.719473ms ago: executing program 2 (id=1071): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x49, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x0, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x0, 0x38, 0x1}]}, 0x24}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@empty, [0xff000000, 0xff, 0xffffffff, 0xff000000], 0x4e22, 0x6c, 0x6, 0x4e22, 0x20, 0x20}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'batadv_slave_0\x00'}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xff, 0xff000000, 0xff000000, 0xffffffff], 'hsr0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x2c, 0x50, 0x0, 0x21}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 564.50847ms ago: executing program 4 (id=1072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="3c010000190001000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000034e2400000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000010000800000000000000000000000000000000000000000000000000000000000000000000001001d00000000000000000004000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084000500ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001"], 0x13c}}, 0x0) 441.152224ms ago: executing program 0 (id=1073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="0100fdff7ffffdffffff1d00000008000300", @ANYRES32=r3], 0xcc}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) 426.835252ms ago: executing program 4 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x200, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x200, 0xfffd, 0x5, 0x6, 0xfffffffb}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a0500000000000000000002000000090001c5a999a009c30073797a300000000014000380080001400000000008000240000000030900020073797a30000000001400000011000100000000000000"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380080003801400010067656e65766530000000000000000000140000001100010000000000000000000000000a"], 0x70}}, 0x24040884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) getpeername(r1, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) 252.224987ms ago: executing program 1 (id=1075): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0x4000000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10) 190.409306ms ago: executing program 0 (id=1076): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0xffff}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 178.610783ms ago: executing program 3 (id=1077): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'pim6reg\x00'}) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1a00000e22fb3b58ca0000000000000047325f89bcaab68ab5bedb28a4edaaa5ec67dde8cba730c510fe1c975064bbc12efaffd307b69e836a63b3996d8b56af30ff76a2390d06dc5dbf0dfb09ef4c32506445c6e4d954d8533587f58fbd50932fdc3fa97a5df769062823e466e0b7a072ae0bcb068f4903a082d9ba45f8466716c991d7a216e3941f8fbb9b41ef3036847ae6", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008201", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}, [{0x8, 0xb, 0x60f5}]}, 0x2c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002e00012026bdf000fcdbdf272500000095d4809ef72a079834793c62d8055987497a563640c5140259fac6f2a7c947284fcda671a6ee24f072f2a852bfa01f6152d2e4a605bc62b06adc27326c82308ba90cc7e728f9c3aefeba4b31dbe6c7b2d450b5b859fa8d1569ec575dd846a1752382307d489b78f55122db00b659d3990ee2c56c81cde1e9dabfd88f871bcacbb11e4f96f4958a727495cbf57fbf97e04d0cac0caa0f506cc6cb38dcea6a02be20bccf883300a6f496d15b68ee47fd8dfc39bad3fd92739d2fc5dd296bb16bd7a484d5142570b5851529eda0e67b06"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3aa00fe0000000071101a0059bedb8e1aba01c596080ec8"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0x75, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x58}, 0x20040044) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 163.973564ms ago: executing program 4 (id=1078): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x20, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x2, 0x10}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d, @void, @value=0x5802}, 0x94) 104.735355ms ago: executing program 2 (id=1079): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f00000001c0)=@generic={0x1, "9bb911e625cc503512529b97522973a93b13aa1029208848ab99686dd79afdc9b4170ca49249c4dd9308f822723b25df58f2ca70ad88c2f9370de58822d8b0ed429763112babad216201998b6b286f4ba42ce05e4e591ba967b1e4b39816f79960b882d0630711c2fde635e0b34715ecc1d6cc01f9e2def16efa2f260074"}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd3000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0000000000000c9c0a00103000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000070000000000000003000000ffffffff050000a600000000ffffffffffffffffffffffff00000000000000000000000000000000000000000500000000000000000000000000000001010200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000500)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000f0000000008000000180001801400020073797a5f74756e0000000000000000001800028004000100100003800c0001800800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xff, 0x9}) pwritev(r11, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r10, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x0) 20.523657ms ago: executing program 0 (id=1080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}}, 0x24}}, 0x4000010) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e24, 0xb3c6, @local, 0x2}, 0xffffffffffffffff, {[0x200, 0x6, 0x7, 0x200, 0xd, 0x8, 0x0, 0x9]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffd3a7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) 0s ago: executing program 4 (id=1081): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10130}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x24004004) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered blocking state [ 69.245815][ T5633] Bluetooth: hci4: command tx timeout [ 69.246284][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.258446][ T5628] bridge_slave_0: entered allmulticast mode [ 69.265743][ T5628] bridge_slave_0: entered promiscuous mode [ 69.274956][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.286962][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.320123][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.327480][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.334964][ T5628] bridge_slave_1: entered allmulticast mode [ 69.341812][ T5628] bridge_slave_1: entered promiscuous mode [ 69.367942][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.375121][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.401270][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.449667][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.456961][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.482871][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.496575][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.507324][ T5632] team0: Port device team_slave_0 added [ 69.515643][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.526432][ T5624] team0: Port device team_slave_0 added [ 69.540509][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.551216][ T5632] team0: Port device team_slave_1 added [ 69.559015][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.578828][ T5624] team0: Port device team_slave_1 added [ 69.632432][ T5628] team0: Port device team_slave_0 added [ 69.658867][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.666131][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.692331][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.714372][ T5628] team0: Port device team_slave_1 added [ 69.720492][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.727787][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.753770][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.766518][ T5637] team0: Port device team_slave_0 added [ 69.772755][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.779729][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.805651][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.834959][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.841960][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.867909][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.880820][ T5637] team0: Port device team_slave_1 added [ 69.896923][ T5640] hsr_slave_0: entered promiscuous mode [ 69.903171][ T5640] hsr_slave_1: entered promiscuous mode [ 69.943387][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.950353][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.977051][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.988975][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.996319][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.022410][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.034949][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.041904][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.068348][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.088006][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.095168][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.121140][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.194916][ T5632] hsr_slave_0: entered promiscuous mode [ 70.201314][ T5632] hsr_slave_1: entered promiscuous mode [ 70.207526][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 70.213361][ T5632] Cannot create hsr debugfs directory [ 70.242672][ T5624] hsr_slave_0: entered promiscuous mode [ 70.248936][ T5624] hsr_slave_1: entered promiscuous mode [ 70.255108][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 70.260827][ T5624] Cannot create hsr debugfs directory [ 70.305521][ T5628] hsr_slave_0: entered promiscuous mode [ 70.311723][ T5628] hsr_slave_1: entered promiscuous mode [ 70.317879][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 70.323634][ T5628] Cannot create hsr debugfs directory [ 70.412695][ T5637] hsr_slave_0: entered promiscuous mode [ 70.419157][ T5637] hsr_slave_1: entered promiscuous mode [ 70.425296][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 70.431019][ T5637] Cannot create hsr debugfs directory [ 70.836922][ T5640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.850242][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.859211][ T5640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.869136][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.876975][ T5640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.887232][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.895686][ T5640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.906383][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.970320][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.980370][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.991317][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.004242][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.013964][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.025209][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.032840][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.042211][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.125770][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.134779][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.142764][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.153092][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.164842][ T5633] Bluetooth: hci1: command tx timeout [ 71.172413][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.182472][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.190357][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.199046][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.246730][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.253469][ T5633] Bluetooth: hci0: command tx timeout [ 71.254347][ T50] Bluetooth: hci3: command tx timeout [ 71.259150][ T5633] Bluetooth: hci2: command tx timeout [ 71.272105][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.319879][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.333162][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.340863][ T5633] Bluetooth: hci4: command tx timeout [ 71.349838][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.358467][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.367298][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.381495][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.391923][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.399770][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.409977][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.465215][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.496545][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.504060][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.547994][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.555162][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.568750][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.578427][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.594153][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.604452][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.612152][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.624640][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.645499][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.655472][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.669250][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.742482][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.759129][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.766285][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.787296][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.802376][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.809503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.874804][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.912180][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.919357][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.961509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.968621][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.032565][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.092866][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.128088][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.135262][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.170003][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.177169][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.191239][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.315218][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.340755][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.347888][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.412268][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.419479][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.614922][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.092183][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.196471][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.243447][ T5633] Bluetooth: hci1: command tx timeout [ 73.282123][ T5624] veth0_vlan: entered promiscuous mode [ 73.323448][ T5629] Bluetooth: hci3: command tx timeout [ 73.323504][ T50] Bluetooth: hci0: command tx timeout [ 73.328920][ T5633] Bluetooth: hci2: command tx timeout [ 73.365561][ T5624] veth1_vlan: entered promiscuous mode [ 73.403735][ T5633] Bluetooth: hci4: command tx timeout [ 73.461877][ T5632] veth0_vlan: entered promiscuous mode [ 73.492047][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.533146][ T5640] veth0_vlan: entered promiscuous mode [ 73.546528][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.555203][ T5632] veth1_vlan: entered promiscuous mode [ 73.567933][ T5624] veth0_macvtap: entered promiscuous mode [ 73.594480][ T5640] veth1_vlan: entered promiscuous mode [ 73.601581][ T5624] veth1_macvtap: entered promiscuous mode [ 73.676396][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.686354][ T5632] veth0_macvtap: entered promiscuous mode [ 73.696448][ T5628] veth0_vlan: entered promiscuous mode [ 73.729474][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.747666][ T5632] veth1_macvtap: entered promiscuous mode [ 73.759325][ T5640] veth0_macvtap: entered promiscuous mode [ 73.767381][ T5637] veth0_vlan: entered promiscuous mode [ 73.786498][ T5640] veth1_macvtap: entered promiscuous mode [ 73.795413][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.805374][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.816727][ T5628] veth1_vlan: entered promiscuous mode [ 73.834940][ T3387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.843793][ T3387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.876042][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.884712][ T5637] veth1_vlan: entered promiscuous mode [ 73.894755][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.930821][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.945049][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.980917][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.989932][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.015463][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.024557][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.049668][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.062356][ T3387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.064671][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.101403][ T3387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112988][ T5628] veth0_macvtap: entered promiscuous mode [ 74.133358][ T3387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.169050][ T3387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.187233][ T5628] veth1_macvtap: entered promiscuous mode [ 74.197850][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.206668][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.222272][ T5637] veth0_macvtap: entered promiscuous mode [ 74.238464][ T5637] veth1_macvtap: entered promiscuous mode [ 74.250043][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.258797][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.336138][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.346841][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.357287][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.377088][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.396945][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.439004][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.457360][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.467844][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.473497][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.502311][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.536706][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.592476][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.631599][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.640608][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.670079][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.678491][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.681157][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697643][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.730445][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848905][ T5740] IPVS: starting estimator thread 0... [ 74.950846][ T5827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 74.951004][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.972159][ T5827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'. [ 74.975807][ T5825] IPVS: using max 30 ests per chain, 72000 per kthread [ 74.998814][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.062232][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.095430][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.182274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.222903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.271284][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.292988][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.323799][ T5633] Bluetooth: hci1: command tx timeout [ 75.403406][ T5633] Bluetooth: hci2: command tx timeout [ 75.403435][ T50] Bluetooth: hci3: command tx timeout [ 75.409082][ T5629] Bluetooth: hci0: command tx timeout [ 75.484078][ T5633] Bluetooth: hci4: command tx timeout [ 75.555985][ T5845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 76.091726][ T5872] Zero length message leads to an empty skb [ 76.226719][ T5877] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 76.271300][ T5877] team0: Port device dummy0 added [ 76.396509][ T5881] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 76.943304][ T5881] team0: Port device dummy0 removed [ 76.986447][ T5881] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.847034][ T5633] block nbd0: Receive control failed (result -32) [ 77.855506][ T5629] block nbd0: Receive control failed (result -32) [ 77.893451][ T5877] nbd0: detected capacity change from 0 to 63 [ 77.931011][ T5625] block nbd0: Dead connection, failed to find a fallback [ 77.988241][ T5625] block nbd0: shutting down sockets [ 78.019943][ T5625] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.065830][ T5625] Buffer I/O error on dev nbd0, logical block 0, async page read [ 78.090244][ T5909] netlink: 56 bytes leftover after parsing attributes in process `syz.3.29'. [ 78.111655][ T5625] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.152566][ T5916] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 78.158361][ T5625] Buffer I/O error on dev nbd0, logical block 1, async page read [ 78.194787][ T5625] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.249899][ T5925] netlink: 120 bytes leftover after parsing attributes in process `syz.1.33'. [ 78.256891][ T5625] Buffer I/O error on dev nbd0, logical block 2, async page read [ 78.299654][ T5625] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.322978][ T5924] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 78.323019][ T5925] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 78.346375][ T5625] Buffer I/O error on dev nbd0, logical block 3, async page read [ 78.356494][ T5625] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.405684][ T5625] Buffer I/O error on dev nbd0, logical block 0, async page read [ 78.451803][ T5625] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.457366][ T5925] netlink: 64 bytes leftover after parsing attributes in process `syz.1.33'. [ 78.472996][ T5625] Buffer I/O error on dev nbd0, logical block 1, async page read [ 78.496104][ T5625] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.528876][ T5625] Buffer I/O error on dev nbd0, logical block 2, async page read [ 78.562164][ T5625] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.597256][ T5625] Buffer I/O error on dev nbd0, logical block 3, async page read [ 78.617162][ T5625] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.631393][ T5625] Buffer I/O error on dev nbd0, logical block 0, async page read [ 78.649429][ T5625] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.659092][ T5625] Buffer I/O error on dev nbd0, logical block 1, async page read [ 78.728621][ T5625] ldm_validate_partition_table(): Disk read failed. [ 78.781368][ T5625] Dev nbd0: unable to read RDB block 0 [ 78.806988][ T5625] nbd0: unable to read partition table [ 78.824330][ T5625] ldm_validate_partition_table(): Disk read failed. [ 78.833372][ T5625] Dev nbd0: unable to read RDB block 0 [ 78.842121][ T5625] nbd0: unable to read partition table [ 78.846275][ T5942] netlink: 120 bytes leftover after parsing attributes in process `syz.1.36'. [ 78.876952][ T5942] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 78.894739][ T5942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.36'. [ 78.910767][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 79.679123][ T5956] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.180420][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 80.215038][ T5984] netlink: 128 bytes leftover after parsing attributes in process `syz.0.50'. [ 80.252416][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 80.777715][ T6004] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 80.841221][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 81.259298][ T6015] syzkaller0: entered promiscuous mode [ 81.275250][ T6019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 81.287661][ T6015] syzkaller0: entered allmulticast mode [ 81.319068][ T6019] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 81.330113][ T6019] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 81.341396][ T6019] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 81.521229][ T992] cfg80211: failed to load regulatory.db [ 82.117950][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 82.248997][ T6044] netlink: 'syz.2.71': attribute type 10 has an invalid length. [ 82.335281][ T6044] team0: Port device dummy0 added [ 82.397194][ T6050] netlink: zone id is out of range [ 82.411859][ T6050] netlink: zone id is out of range [ 82.434931][ T6044] netlink: 'syz.2.71': attribute type 10 has an invalid length. [ 82.467408][ T6044] team0: Port device dummy0 removed [ 82.477584][ T6044] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.498963][ T6056] tipc: Can't bind to reserved service type 0 [ 82.583992][ T6048] nbd1: detected capacity change from 0 to 63 [ 82.622495][ T5633] block nbd1: Receive control failed (result -104) [ 82.629760][ T5629] block nbd1: Receive control failed (result -32) [ 82.795642][ T6064] netlink: 'syz.3.76': attribute type 4 has an invalid length. [ 82.857079][ T6064] netlink: 'syz.3.76': attribute type 4 has an invalid length. [ 82.909967][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 83.141273][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 83.289076][ T6089] netlink: 9 bytes leftover after parsing attributes in process `syz.3.87'. [ 83.331745][ T6089] gretap0: entered promiscuous mode [ 83.622373][ T6100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.90'. [ 84.618084][ T6153] openvswitch: netlink: IP tunnel dst address not specified [ 86.004702][ T6205] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 86.025118][ T6205] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 86.049100][ T6205] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 87.177686][ T6135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.514529][ T6227] __nla_validate_parse: 5 callbacks suppressed [ 87.514547][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 87.706152][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 87.749201][ T6227] bond1: entered promiscuous mode [ 87.772417][ T6248] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 87.774203][ T6227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.787940][ T6248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.132'. [ 87.810427][ T6248] netlink: 658 bytes leftover after parsing attributes in process `syz.0.132'. [ 87.827134][ T6227] bond1 (unregistering): Released all slaves [ 87.906724][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.915187][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.175445][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.136'. [ 88.210385][ T6264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.391687][ T6271] netlink: 'syz.2.139': attribute type 32 has an invalid length. [ 88.411386][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 88.832634][ T6283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.909250][ T6283] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 88.918001][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.144'. [ 89.011570][ T6283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.031810][ T6283] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 89.096683][ T6283] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.117689][ T6283] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 89.152266][ T6283] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.176918][ T6283] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 89.245278][ T6283] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.265902][ T6283] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 89.986980][ T6296] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 90.172002][ T6328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.406310][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 90.417748][ T6328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.419766][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 90.498736][ T6361] netem: incorrect gi model size [ 90.506024][ T6361] netem: change failed [ 90.591139][ T6328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.698534][ T6328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.854477][ T6378] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 90.873067][ T6378] netlink: 228 bytes leftover after parsing attributes in process `syz.3.162'. [ 90.922125][ T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.001232][ T62] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066380][ T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.109702][ T62] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.265333][ T6432] Bluetooth: MGMT ver 1.23 [ 92.566611][ T6442] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 92.575791][ T6442] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 92.584322][ T6442] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 92.801988][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.809963][ T6446] bridge0: port 2(bridge_slave_1) entered listening state [ 92.817799][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.825064][ T6446] bridge0: port 1(bridge_slave_0) entered listening state [ 92.882586][ T6451] netlink: 'syz.4.175': attribute type 11 has an invalid length. [ 93.006953][ T6446] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 93.255571][ T6472] __nla_validate_parse: 1 callbacks suppressed [ 93.255588][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 93.296063][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 93.329793][ T6461] syzkaller0: entered promiscuous mode [ 93.335517][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 93.347948][ T6461] syzkaller0: entered allmulticast mode [ 93.365819][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 93.382333][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 93.415188][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 93.564755][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 93.611125][ T6482] ip6gre1: entered promiscuous mode [ 93.631071][ T6482] ip6gre1: entered allmulticast mode [ 93.642515][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.652027][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.663491][ T992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.840585][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 94.088840][ T6497] IPVS: persistence engine module ip_vs_pe_ not found [ 94.533655][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.541874][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.399733][ T6513] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 95.440771][ T6515] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 95.487524][ T6515] team0: Port device dummy0 added [ 95.589875][ T6516] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 95.660822][ T6516] team0: Port device dummy0 removed [ 95.695761][ T6516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.844455][ T6515] nbd2: detected capacity change from 0 to 63 [ 95.867448][ T6538] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 95.916866][ T5633] block nbd2: Receive control failed (result -104) [ 95.917109][ T5629] block nbd2: Receive control failed (result -32) [ 95.988184][ T6534] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 96.049152][ T6529] warning: `syz.4.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.082710][ T6544] syz_tun: entered allmulticast mode [ 96.094517][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 96.192047][ T6548] syz_tun (unregistering): left allmulticast mode [ 96.602131][ T6556] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 97.483425][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.014621][ T6611] netlink: 'syz.2.220': attribute type 13 has an invalid length. [ 98.057438][ T6623] netlink: 128 bytes leftover after parsing attributes in process `syz.4.223'. [ 98.428776][ T6636] __nla_validate_parse: 1 callbacks suppressed [ 98.428794][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 98.428954][ T6639] netlink: 'syz.2.228': attribute type 1 has an invalid length. [ 98.712973][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.733382][ T6650] netlink: 128 bytes leftover after parsing attributes in process `syz.1.231'. [ 98.790818][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 99.001563][ T6663] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 99.184821][ T6663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.302559][ T6668] bond1: (slave geneve2): making interface the new active one [ 99.328404][ T6668] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 99.376617][ T187] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.419009][ T187] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.555944][ T187] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.600843][ T187] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 99.768997][ T6672] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 99.776890][ T6672] netlink: 224 bytes leftover after parsing attributes in process `syz.3.235'. [ 99.789034][ T6672] netlink: 72 bytes leftover after parsing attributes in process `syz.3.235'. [ 99.963061][ T6680] "syz.4.237" (6680) uses obsolete ecb(arc4) skcipher [ 100.271962][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 100.339880][ T6693] ip6gre1: entered promiscuous mode [ 100.355234][ T6693] ip6gre1: entered allmulticast mode [ 100.382308][ T3352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.419037][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.426816][ T3352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.478000][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 100.543158][ T6706] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 100.593388][ T992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.670720][ T6711] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 100.703422][ T5814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.032105][ T6706] bond0: (slave dummy0): Releasing backup interface [ 101.079334][ T6706] team0: Port device dummy0 added [ 101.106664][ T6711] team0: Port device dummy0 removed [ 101.137640][ T6711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.164208][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.177520][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.335913][ T6708] nbd3: detected capacity change from 0 to 63 [ 101.370086][ T5629] block nbd3: Receive control failed (result -32) [ 101.370369][ T5633] block nbd3: Receive control failed (result -32) [ 101.389629][ T5933] block nbd3: Dead connection, failed to find a fallback [ 101.406458][ T5933] block nbd3: shutting down sockets [ 101.412562][ T5933] blk_print_req_error: 138 callbacks suppressed [ 101.412576][ T5933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.428870][ T5933] buffer_io_error: 138 callbacks suppressed [ 101.428883][ T5933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 101.456010][ T5933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.475316][ T5933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 101.496283][ T5933] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.516012][ T5933] Buffer I/O error on dev nbd3, logical block 2, async page read [ 101.543505][ T5933] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.579232][ T5933] Buffer I/O error on dev nbd3, logical block 3, async page read [ 101.610657][ T5933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.651243][ T5933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 101.679315][ T5933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.721749][ T5933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 101.761556][ T5933] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.805432][ T5933] Buffer I/O error on dev nbd3, logical block 2, async page read [ 101.849126][ T5933] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.887624][ T5933] Buffer I/O error on dev nbd3, logical block 3, async page read [ 101.919207][ T5933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.947789][ T5933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 101.970321][ T6754] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 101.970439][ T5933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.003634][ T5933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 102.013926][ T5933] ldm_validate_partition_table(): Disk read failed. [ 102.037297][ T5933] Dev nbd3: unable to read RDB block 0 [ 102.055261][ T5933] nbd3: unable to read partition table [ 102.078249][ T5933] ldm_validate_partition_table(): Disk read failed. [ 102.088018][ T5933] Dev nbd3: unable to read RDB block 0 [ 102.094706][ T6760] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 102.113514][ T5933] nbd3: unable to read partition table [ 102.542439][ T6754] bond0: (slave dummy0): Releasing backup interface [ 102.788105][ T6754] team0: Port device dummy0 added [ 102.829046][ T6760] team0: Port device dummy0 removed [ 102.838432][ T6760] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.870731][ T6766] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 102.966740][ T5633] block nbd4: Receive control failed (result -32) [ 102.975098][ T5629] block nbd4: Receive control failed (result -32) [ 102.994879][ T6787] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 103.006104][ T6759] nbd4: detected capacity change from 0 to 63 [ 103.022353][ T5933] block nbd4: Dead connection, failed to find a fallback [ 103.051839][ T5933] block nbd4: shutting down sockets [ 103.074141][ T5933] ldm_validate_partition_table(): Disk read failed. [ 103.093089][ T5933] Dev nbd4: unable to read RDB block 0 [ 103.096204][ T6787] bond0: (slave dummy0): Releasing backup interface [ 103.128452][ T5933] nbd4: unable to read partition table [ 103.147237][ T6791] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 103.176390][ T5933] ldm_validate_partition_table(): Disk read failed. [ 103.188414][ T5933] Dev nbd4: unable to read RDB block 0 [ 103.200208][ T6787] team0: Port device dummy0 added [ 103.209558][ T5933] nbd4: unable to read partition table [ 103.301331][ T6791] team0: Port device dummy0 removed [ 103.321357][ T6791] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 103.414704][ T6788] nbd5: detected capacity change from 0 to 63 [ 103.436626][ T5633] block nbd5: Receive control failed (result -32) [ 103.436922][ T5629] block nbd5: Receive control failed (result -32) [ 103.462819][ T5933] block nbd5: Dead connection, failed to find a fallback [ 103.501440][ T5933] block nbd5: shutting down sockets [ 103.535758][ T5933] ldm_validate_partition_table(): Disk read failed. [ 103.546637][ T5933] Dev nbd5: unable to read RDB block 0 [ 103.556321][ T5933] nbd5: unable to read partition table [ 103.614708][ T5933] ldm_validate_partition_table(): Disk read failed. [ 103.634436][ T5933] Dev nbd5: unable to read RDB block 0 [ 103.661351][ T5933] nbd5: unable to read partition table [ 103.757694][ T6813] netlink: 'syz.0.273': attribute type 5 has an invalid length. [ 103.770670][ T6808] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 103.782927][ T6808] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 103.798265][ T6808] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 104.060747][ T6821] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 104.203388][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.437380][ T6836] netlink: 64 bytes leftover after parsing attributes in process `syz.0.280'. [ 105.004937][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 105.053314][ T6854] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 105.081326][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 105.163321][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.185158][ T6856] x_tables: duplicate underflow at hook 2 [ 105.191851][ T6869] netlink: 44 bytes leftover after parsing attributes in process `syz.1.289'. [ 105.369148][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.369747][ T6871] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 105.379899][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.415100][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.438204][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.466355][ T6871] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 105.503376][ T6871] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 105.582688][ T6886] netlink: 'syz.0.296': attribute type 2 has an invalid length. [ 106.657209][ T6928] gretap0: left promiscuous mode [ 106.792786][ T6928] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 106.854943][ T6937] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 106.919795][ T6937] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 106.976161][ T6937] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 107.037449][ T6946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 107.090802][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 107.144427][ T6951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'. [ 107.295180][ T6952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 107.434233][ T6950] x_tables: duplicate underflow at hook 2 [ 108.499458][ T6991] netlink: 'syz.4.322': attribute type 10 has an invalid length. [ 108.540109][ T6988] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 108.599429][ T6991] bond0: (slave dummy0): Releasing backup interface [ 108.630993][ T7000] netlink: 'syz.4.322': attribute type 10 has an invalid length. [ 108.666967][ T6991] team0: Port device dummy0 added [ 108.730372][ T7000] team0: Port device dummy0 removed [ 108.739952][ T7000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.393433][ T5633] block nbd6: Receive control failed (result -32) [ 109.404342][ T6997] nbd6: detected capacity change from 0 to 63 [ 109.410518][ T5629] block nbd6: Receive control failed (result -32) [ 109.428601][ T5933] block nbd6: Dead connection, failed to find a fallback [ 109.449531][ T5933] block nbd6: shutting down sockets [ 109.467009][ T5933] blk_print_req_error: 434 callbacks suppressed [ 109.467024][ T5933] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.522662][ T5933] buffer_io_error: 434 callbacks suppressed [ 109.522683][ T5933] Buffer I/O error on dev nbd6, logical block 0, async page read [ 109.564834][ T5933] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.583816][ T5933] Buffer I/O error on dev nbd6, logical block 1, async page read [ 109.615722][ T5933] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.659623][ T5933] Buffer I/O error on dev nbd6, logical block 2, async page read [ 109.678503][ T5933] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.701951][ T5933] Buffer I/O error on dev nbd6, logical block 3, async page read [ 109.739606][ T5933] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.773621][ T5933] Buffer I/O error on dev nbd6, logical block 0, async page read [ 109.809193][ T5933] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.809421][ T7037] netlink: 'syz.1.335': attribute type 49 has an invalid length. [ 109.835475][ T5933] Buffer I/O error on dev nbd6, logical block 1, async page read [ 109.870566][ T5933] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.887322][ T5933] Buffer I/O error on dev nbd6, logical block 2, async page read [ 109.897226][ T5933] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.917125][ T5933] Buffer I/O error on dev nbd6, logical block 3, async page read [ 109.942926][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'. [ 109.944715][ T5933] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.981644][ T7037] ip6gretap0: entered promiscuous mode [ 109.989571][ T7037] ip6gretap0: entered allmulticast mode [ 110.015684][ T5933] Buffer I/O error on dev nbd6, logical block 0, async page read [ 110.027699][ T7041] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 110.070755][ T5933] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.129559][ T5933] Buffer I/O error on dev nbd6, logical block 1, async page read [ 110.182322][ T5933] ldm_validate_partition_table(): Disk read failed. [ 110.220632][ T5933] Dev nbd6: unable to read RDB block 0 [ 110.247823][ T5933] nbd6: unable to read partition table [ 110.308197][ T5933] ldm_validate_partition_table(): Disk read failed. [ 110.341608][ T7051] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 110.356926][ T5933] Dev nbd6: unable to read RDB block 0 [ 110.386508][ T5933] nbd6: unable to read partition table [ 110.523604][ T7051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.920937][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 110.966687][ T7086] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 110.991605][ T7086] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 111.034614][ T7086] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 111.415304][ T7105] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 111.573353][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.705024][ T7118] netlink: 'syz.4.354': attribute type 30 has an invalid length. [ 111.863109][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 111.887265][ T7123] xt_policy: neither incoming nor outgoing policy selected [ 111.901658][ T7123] netlink: 'syz.4.356': attribute type 33 has an invalid length. [ 111.910253][ T7123] netlink: 152 bytes leftover after parsing attributes in process `syz.4.356'. [ 112.055699][ T7123] `: renamed from team0 (while UP) [ 112.217641][ T7132] gre1: entered allmulticast mode [ 112.238515][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.358'. [ 112.577262][ T7146] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 112.648553][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 112.700770][ T7154] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 112.745801][ T7154] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 112.796412][ T7154] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 112.846724][ T2541] block nbd1: Connection timed out, retrying (0/2 alive) [ 112.854697][ T2541] block nbd1: Connection timed out, retrying (0/2 alive) [ 112.861762][ T2541] block nbd1: Connection timed out, retrying (0/2 alive) [ 112.869179][ T2541] block nbd1: Connection timed out, retrying (0/2 alive) [ 112.877493][ T2541] block nbd1: Dead connection, failed to find a fallback [ 112.885774][ T2541] block nbd1: shutting down sockets [ 112.910041][ T5631] ldm_validate_partition_table(): Disk read failed. [ 112.948615][ T5631] Dev nbd1: unable to read RDB block 0 [ 112.970901][ T5631] nbd1: unable to read partition table [ 112.996151][ T5631] ldm_validate_partition_table(): Disk read failed. [ 113.012520][ T5631] Dev nbd1: unable to read RDB block 0 [ 113.021944][ T5631] nbd1: unable to read partition table [ 113.127033][ T7163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.368'. [ 114.194088][ T7210] netlink: 'syz.2.381': attribute type 21 has an invalid length. [ 114.218711][ T7210] netlink: 128 bytes leftover after parsing attributes in process `syz.2.381'. [ 114.309385][ T7201] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 114.357630][ T7207] erspan0: entered promiscuous mode [ 114.441008][ T7210] netlink: 'syz.2.381': attribute type 4 has an invalid length. [ 114.458633][ T7210] netlink: 3 bytes leftover after parsing attributes in process `syz.2.381'. [ 114.504185][ T7204] erspan0: left promiscuous mode [ 114.912414][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 115.129975][ T7242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.172010][ T7242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 115.236507][ T7264] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 115.341282][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.482336][ T7242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.517803][ T7242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 115.640692][ T7269] bond1: (slave ip6gretap0): making interface the new active one [ 115.661719][ T7269] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 115.804807][ T7242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.846962][ T7242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 115.916029][ T7292] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 116.026433][ T7242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.038479][ T7242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 116.050703][ T7300] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 116.098704][ T7292] team0: Port device dummy0 added [ 116.145522][ T7300] team0: Port device dummy0 removed [ 116.164544][ T7300] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.185828][ T7307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.403'. [ 116.252161][ T187] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.261319][ T187] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.278681][ T187] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.287746][ T187] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.293404][ T7295] nbd7: detected capacity change from 0 to 63 [ 116.309479][ T62] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.332198][ T62] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.348305][ T5633] block nbd7: Receive control failed (result -104) [ 116.355382][ T5629] block nbd7: Receive control failed (result -32) [ 116.450310][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 116.472348][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'. [ 116.488398][ T48] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.489201][ T7312] netlink: 260 bytes leftover after parsing attributes in process `syz.1.407'. [ 116.632782][ T7310] Bluetooth: MGMT ver 1.23 [ 116.738970][ T7323] macsec1: entered promiscuous mode [ 116.859536][ T7327] syzkaller1: entered promiscuous mode [ 116.892344][ T7327] syzkaller1: entered allmulticast mode [ 117.042193][ T7339] netlink: 260 bytes leftover after parsing attributes in process `syz.1.415'. [ 117.046906][ T7341] netem: change failed [ 117.741387][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 117.773615][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 117.774695][ T7388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 117.814837][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 117.875111][ T7398] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 117.879410][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 117.906126][ T7398] bond0: (slave dummy0): Releasing backup interface [ 117.938230][ T7398] team0: Port device dummy0 added [ 117.992155][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 118.028178][ T7398] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 118.069711][ T7398] team0: Port device dummy0 removed [ 118.105165][ T7398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.213304][ T7400] nbd8: detected capacity change from 0 to 63 [ 118.238800][ T5629] block nbd8: Receive control failed (result -104) [ 118.240070][ T5633] block nbd8: Receive control failed (result -32) [ 118.729615][ T7432] x_tables: duplicate underflow at hook 1 [ 118.752376][ T7432] syzkaller0: entered promiscuous mode [ 118.758450][ T7432] syzkaller0: entered allmulticast mode [ 118.844838][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 118.852123][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 118.862650][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 118.882683][ T7440] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.930662][ T7440] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.981115][ T7440] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 119.019114][ T7440] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.079682][ T7440] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.222095][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 119.248695][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 119.259260][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 119.268050][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 119.276594][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 119.286190][ T7440] macsec0 speed is unknown, defaulting to 1000 [ 119.743314][ T7459] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 119.765620][ T7440] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 119.928335][ T7459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.110470][ T7479] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.524673][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.179491][ T7514] IPVS: Unknown mcast interface: . [ 121.198790][ T7516] __nla_validate_parse: 65 callbacks suppressed [ 121.198808][ T7516] netlink: 128 bytes leftover after parsing attributes in process `syz.0.458'. [ 121.240511][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 121.371748][ T7524] syzkaller0: entered promiscuous mode [ 121.394448][ T7524] syzkaller0: entered allmulticast mode [ 121.438669][ T7524] tipc: Started in network mode [ 121.461874][ T7524] tipc: Node identity 0e30ba11c25, cluster identity 4711 [ 121.487848][ T7524] tipc: Enabled bearer , priority 0 [ 121.506381][ T7516] macsec0 speed is unknown, defaulting to 1000 [ 121.535367][ T7524] tipc: Resetting bearer [ 121.562393][ T7522] tipc: Resetting bearer [ 121.644984][ T7522] tipc: Disabling bearer [ 121.679408][ T7540] netlink: 260 bytes leftover after parsing attributes in process `syz.1.463'. [ 121.934930][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 122.114115][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 122.158210][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 122.271840][ T7559] netlink: 'syz.2.466': attribute type 5 has an invalid length. [ 122.281616][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 122.691823][ T7563] veth3: entered allmulticast mode [ 122.706743][ T7579] vlan0: entered promiscuous mode [ 122.850348][ T7583] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 122.887675][ T7583] netlink: 228 bytes leftover after parsing attributes in process `syz.0.473'. [ 122.930906][ T7587] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 122.980501][ T7585] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 122.995860][ T7585] netlink: 936 bytes leftover after parsing attributes in process `syz.1.475'. [ 123.011169][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 123.084819][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 123.092999][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 123.226050][ T7598] netlink: 'syz.0.477': attribute type 29 has an invalid length. [ 123.402855][ T7598] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 123.425374][ T7611] netlink: 'syz.2.480': attribute type 58 has an invalid length. [ 123.439426][ T7598] bond1 (unregistering): Released all slaves [ 123.558678][ T7619] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 123.598044][ T7619] bond0: (slave dummy0): Releasing backup interface [ 123.668651][ T7619] team0: Port device dummy0 added [ 123.731880][ T7617] macsec0 speed is unknown, defaulting to 1000 [ 123.739532][ T7626] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 123.763542][ T7619] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 123.781744][ T7626] bond0: (slave dummy0): Releasing backup interface [ 123.806373][ T7626] team0: Port device dummy0 added [ 123.859766][ T7619] team0: Port device dummy0 removed [ 123.894588][ T7632] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 123.907598][ T7619] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.022397][ T7632] team0: Port device dummy0 removed [ 124.044105][ T7624] nbd9: detected capacity change from 0 to 63 [ 124.071482][ T7632] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.073951][ T5629] block nbd9: Receive control failed (result -104) [ 124.081212][ T5633] block nbd9: Receive control failed (result -32) [ 124.096931][ T7465] block nbd9: Send control failed (result -32) [ 124.114398][ T7465] block nbd9: Request send failed, requeueing [ 124.132653][ T2541] block nbd9: Dead connection, failed to find a fallback [ 124.139795][ T2541] block nbd9: shutting down sockets [ 124.146045][ T2541] blk_print_req_error: 286 callbacks suppressed [ 124.146059][ T2541] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.162160][ T2541] buffer_io_error: 286 callbacks suppressed [ 124.162171][ T2541] Buffer I/O error on dev nbd9, logical block 3, async page read [ 124.917563][ T7674] atomic_op ffff88805643e198 conn xmit_atomic 0000000000000000 [ 125.266379][ T7687] netlink: 'syz.0.499': attribute type 10 has an invalid length. [ 125.315705][ T7687] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.332207][ T7687] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.762636][ T7704] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 126.168918][ T7736] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 126.246287][ T7736] __nla_validate_parse: 4 callbacks suppressed [ 126.246304][ T7736] netlink: 44 bytes leftover after parsing attributes in process `syz.4.514'. [ 126.259543][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.517'. [ 126.283340][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.297028][ T4959] block nbd2: Connection timed out, retrying (0/2 alive) [ 126.304623][ T4959] block nbd2: Connection timed out, retrying (0/2 alive) [ 126.312357][ T4959] block nbd2: Connection timed out, retrying (0/2 alive) [ 126.323471][ T4959] block nbd2: Connection timed out, retrying (0/2 alive) [ 126.330578][ T4959] block nbd2: Dead connection, failed to find a fallback [ 126.337837][ T4959] block nbd2: shutting down sockets [ 126.343066][ T4959] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.352193][ T4959] Buffer I/O error on dev nbd2, logical block 3, async page read [ 126.360262][ T4959] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.369504][ T4959] Buffer I/O error on dev nbd2, logical block 2, async page read [ 126.377409][ T4959] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.386510][ T4959] Buffer I/O error on dev nbd2, logical block 1, async page read [ 126.394530][ T4959] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.403631][ T4959] Buffer I/O error on dev nbd2, logical block 0, async page read [ 126.411515][ T5927] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.433323][ T5927] Buffer I/O error on dev nbd2, logical block 0, async page read [ 126.444147][ T5927] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.461408][ T5927] Buffer I/O error on dev nbd2, logical block 1, async page read [ 126.471979][ T5927] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.481563][ T5927] Buffer I/O error on dev nbd2, logical block 2, async page read [ 126.489643][ T5927] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.499554][ T5927] Buffer I/O error on dev nbd2, logical block 3, async page read [ 126.507968][ T5927] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.533587][ T5927] Buffer I/O error on dev nbd2, logical block 0, async page read [ 126.556150][ T5927] ldm_validate_partition_table(): Disk read failed. [ 126.571769][ T5927] Dev nbd2: unable to read RDB block 0 [ 126.615314][ T5927] nbd2: unable to read partition table [ 126.667434][ T5927] ldm_validate_partition_table(): Disk read failed. [ 126.700984][ T5927] Dev nbd2: unable to read RDB block 0 [ 126.732036][ T5927] nbd2: unable to read partition table [ 126.892088][ T7766] netlink: 'syz.1.522': attribute type 13 has an invalid length. [ 127.131580][ T7783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.529'. [ 127.165397][ T7779] netlink: 176 bytes leftover after parsing attributes in process `syz.0.528'. [ 127.167227][ T7783] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.529'. [ 127.275961][ T7791] netlink: 128 bytes leftover after parsing attributes in process `syz.4.530'. [ 127.322772][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 127.384352][ T7795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.532'. [ 127.454929][ T7795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.532'. [ 127.466958][ T7787] macsec0 speed is unknown, defaulting to 1000 [ 127.491984][ T7799] netlink: 252 bytes leftover after parsing attributes in process `syz.2.533'. [ 127.870601][ T7801] macsec0 speed is unknown, defaulting to 1000 [ 128.377706][ T7837] pim6reg1: entered promiscuous mode [ 128.412080][ T7837] pim6reg1: entered allmulticast mode [ 128.583582][ T7833] tipc: Trying to set illegal importance in message [ 128.686704][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.729034][ T7843] bridge_slave_0 (unregistering): left allmulticast mode [ 128.752844][ T7843] bridge_slave_0 (unregistering): left promiscuous mode [ 128.770322][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.905897][ T24] IPVS: starting estimator thread 0... [ 129.023528][ T7858] IPVS: using max 28 ests per chain, 67200 per kthread [ 129.077259][ T7865] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 129.133010][ T7867] netlink: 'syz.3.554': attribute type 2 has an invalid length. [ 129.184360][ T7874] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 129.200209][ T7867] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 129.209648][ T7865] team0: Port device dummy0 added [ 129.277117][ T7873] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 129.308929][ T7873] bond3 (unregistering): Released all slaves [ 129.355649][ T7874] team0: Port device dummy0 removed [ 129.378594][ T7874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.449221][ T7879] netlink: 'syz.1.556': attribute type 29 has an invalid length. [ 129.488100][ T7879] netlink: 'syz.1.556': attribute type 29 has an invalid length. [ 129.748127][ T7891] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 130.366339][ T7930] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 131.620245][ T7972] __nla_validate_parse: 11 callbacks suppressed [ 131.620262][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 131.658074][ T7974] netlink: 252 bytes leftover after parsing attributes in process `syz.4.588'. [ 131.739093][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 131.781855][ T7972] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 132.169268][ T7995] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 132.179720][ T7990] syzkaller0: entered promiscuous mode [ 132.188274][ T7990] syzkaller0: entered allmulticast mode [ 132.239751][ T7995] bond0: (slave dummy0): Releasing backup interface [ 132.279805][ T7995] team0: Port device dummy0 added [ 132.359962][ T7995] netlink: 'syz.2.593': attribute type 10 has an invalid length. [ 132.405974][ T7995] team0: Port device dummy0 removed [ 132.430398][ T7995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.663263][ T7998] nbd10: detected capacity change from 0 to 63 [ 132.686755][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697074][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.712651][ T8015] netlink: 252 bytes leftover after parsing attributes in process `syz.4.601'. [ 132.715418][ T5633] block nbd10: Receive control failed (result -104) [ 132.728999][ T5629] block nbd10: Receive control failed (result -32) [ 132.890049][ T8022] netlink: 'syz.2.603': attribute type 2 has an invalid length. [ 132.909367][ T8022] sctp: [Deprecated]: syz.2.603 (pid 8022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.909367][ T8022] Use struct sctp_sack_info instead [ 133.940026][ T8053] 8021q: adding VLAN 0 to HW filter on device eth0 [ 134.015463][ T8053] 8021q: adding VLAN 0 to HW filter on device eth1 [ 134.058195][ T8071] netlink: 120 bytes leftover after parsing attributes in process `syz.1.618'. [ 134.080098][ T8071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.618'. [ 134.093094][ T8053] 8021q: adding VLAN 0 to HW filter on device eth2 [ 134.100012][ T29] audit: type=1804 audit(1778328308.332:2): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.617" name="/newroot/136/memory.events" dev="tmpfs" ino=706 res=1 errno=0 [ 134.130407][ T8053] 8021q: adding VLAN 0 to HW filter on device eth3 [ 134.139063][ T8053] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 134.156399][ T29] audit: type=1800 audit(1778328308.332:3): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="memory.events" dev="tmpfs" ino=706 res=0 errno=0 [ 134.264356][ T8070] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 134.290494][ T8070] bond1 (unregistering): Released all slaves [ 134.632505][ T8091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 134.739546][ T8091] batadv0: entered promiscuous mode [ 134.764803][ T8091] macsec1: entered promiscuous mode [ 134.783890][ T8091] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 134.807215][ T8091] batadv0: left promiscuous mode [ 134.879893][ T8095] netlink: 220 bytes leftover after parsing attributes in process `syz.3.626'. [ 134.898932][ T8103] netlink: 548 bytes leftover after parsing attributes in process `syz.1.627'. [ 134.902477][ T8095] validate_nla: 1 callbacks suppressed [ 134.902492][ T8095] netlink: 'syz.3.626': attribute type 2 has an invalid length. [ 134.922301][ T8098] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 134.931079][ T8101] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 134.950513][ T8101] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 134.998099][ T8101] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.628'. [ 135.106596][ T8104] veth0_to_team: entered promiscuous mode [ 135.116046][ T8104] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 135.153588][ T24] macsec0 speed is unknown, defaulting to 1000 [ 135.437259][ T8127] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 135.466894][ T8127] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 135.878392][ T8148] syzkaller1: entered promiscuous mode [ 135.890350][ T8148] syzkaller1: entered allmulticast mode [ 136.139724][ T8167] macsec1: entered promiscuous mode [ 136.248313][ T8175] netlink: 'syz.4.651': attribute type 13 has an invalid length. [ 136.299069][ T8175] netlink: 'syz.4.651': attribute type 17 has an invalid length. [ 136.397218][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.405150][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.574541][ T8193] IPv6: Can't replace route, no match found [ 136.653023][ T8197] __nla_validate_parse: 9 callbacks suppressed [ 136.653040][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.657'. [ 136.676865][ T8174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.700938][ T8174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.079224][ T8208] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 137.157963][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.174164][ T8175] 8021q: adding VLAN 0 to HW filter on device ` [ 137.187022][ T8175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.276367][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.298009][ T8175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.335151][ T8175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.355503][ T8175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.391577][ T8175] veth1_vlan: left promiscuous mode [ 137.407722][ T8175] veth0_vlan: left promiscuous mode [ 137.425530][ T8175] veth0_vlan: entered promiscuous mode [ 137.437283][ T8175] veth1_vlan: entered promiscuous mode [ 137.437814][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 137.456704][ T8175] veth1_macvtap: left promiscuous mode [ 137.463081][ T8175] veth0_macvtap: left promiscuous mode [ 137.469505][ T8175] veth0_macvtap: entered promiscuous mode [ 137.481644][ T8175] veth1_macvtap: entered promiscuous mode [ 137.498193][ T8175] 8021q: adding VLAN 0 to HW filter on device eth0 [ 137.509244][ T8175] 8021q: adding VLAN 0 to HW filter on device eth1 [ 137.519780][ T8175] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.531775][ T8175] 8021q: adding VLAN 0 to HW filter on device eth3 [ 137.543877][ T8175] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 137.567088][ T8225] trusted_key: syz.0.665 sent an empty control message without MSG_MORE. [ 137.575557][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.583057][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.612886][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.620056][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.696807][ T8223] batman_adv: batadv0: Adding interface: vlan2 [ 137.722054][ T8223] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.767549][ T8223] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 138.144738][ T8249] netlink: 'syz.0.672': attribute type 32 has an invalid length. [ 138.160350][ T8232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.179335][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 138.202840][ T8232] veth3: left allmulticast mode [ 138.325585][ T8249] bond1: option coupled_control: invalid value (12) [ 138.422985][ T8249] bond1 (unregistering): Released all slaves [ 138.519966][ T8267] netlink: 120 bytes leftover after parsing attributes in process `syz.1.677'. [ 138.528148][ T8269] FAULT_INJECTION: forcing a failure. [ 138.528148][ T8269] name failslab, interval 1, probability 0, space 0, times 1 [ 138.529391][ T8267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.677'. [ 138.558058][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.3.678 Not tainted syzkaller #0 PREEMPT(full) [ 138.558079][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.558094][ T8269] Call Trace: [ 138.558105][ T8269] [ 138.558113][ T8269] dump_stack_lvl+0xe8/0x150 [ 138.558148][ T8269] should_fail_ex+0x412/0x560 [ 138.558175][ T8269] should_failslab+0xa8/0x100 [ 138.558203][ T8269] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 138.558226][ T8269] ? __alloc_skb+0x186/0x7d0 [ 138.558247][ T8269] ? __alloc_skb+0x1d0/0x7d0 [ 138.558266][ T8269] ? __local_bh_enable_ip+0xd0/0x130 [ 138.558288][ T8269] __alloc_skb+0x1d0/0x7d0 [ 138.558318][ T8269] netlink_sendmsg+0x5d4/0xb40 [ 138.558357][ T8269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.558384][ T8269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.558407][ T8269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.558434][ T8269] ____sys_sendmsg+0x972/0x9f0 [ 138.558457][ T8269] ? __might_fault+0xaf/0x130 [ 138.558484][ T8269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.558514][ T8269] ? import_iovec+0x73/0xa0 [ 138.558538][ T8269] ___sys_sendmsg+0x2a5/0x360 [ 138.558562][ T8269] ? __lock_acquire+0x6b5/0x2cf0 [ 138.558583][ T8269] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.558639][ T8269] ? __fget_files+0x2a/0x420 [ 138.558658][ T8269] ? __fget_files+0x3a0/0x420 [ 138.558685][ T8269] __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.558711][ T8269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.558742][ T8269] ? __pfx_ksys_write+0x10/0x10 [ 138.558773][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.558792][ T8269] do_syscall_64+0x15f/0xf80 [ 138.558808][ T8269] ? trace_irq_disable+0x3b/0x140 [ 138.558833][ T8269] ? clear_bhb_loop+0x40/0x90 [ 138.558854][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.558870][ T8269] RIP: 0033:0x7fed1559cdd9 [ 138.558893][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.558907][ T8269] RSP: 002b:00007fed16398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.558931][ T8269] RAX: ffffffffffffffda RBX: 00007fed15815fa0 RCX: 00007fed1559cdd9 [ 138.558943][ T8269] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 138.558954][ T8269] RBP: 00007fed16398090 R08: 0000000000000000 R09: 0000000000000000 [ 138.558964][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.558973][ T8269] R13: 00007fed15816038 R14: 00007fed15815fa0 R15: 00007ffc953508d8 [ 138.559000][ T8269] [ 139.120899][ T8281] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 139.140502][ T8281] bond2 (unregistering): Released all slaves [ 139.180605][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 139.213402][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 139.419279][ T8299] netlink: 52 bytes leftover after parsing attributes in process `syz.0.688'. [ 139.445688][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 139.510090][ T8301] FAULT_INJECTION: forcing a failure. [ 139.510090][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.533408][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.4.689 Not tainted syzkaller #0 PREEMPT(full) [ 139.533431][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.533441][ T8301] Call Trace: [ 139.533448][ T8301] [ 139.533455][ T8301] dump_stack_lvl+0xe8/0x150 [ 139.533481][ T8301] should_fail_ex+0x412/0x560 [ 139.533509][ T8301] _copy_from_iter+0x1d3/0x1670 [ 139.533534][ T8301] ? rcu_is_watching+0x15/0xb0 [ 139.533560][ T8301] ? __pfx__copy_from_iter+0x10/0x10 [ 139.533590][ T8301] ? netlink_sendmsg+0x650/0xb40 [ 139.533614][ T8301] ? skb_put+0x11b/0x210 [ 139.533641][ T8301] netlink_sendmsg+0x6c0/0xb40 [ 139.533677][ T8301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.533704][ T8301] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.533728][ T8301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.533755][ T8301] ____sys_sendmsg+0x972/0x9f0 [ 139.533780][ T8301] ? __might_fault+0xaf/0x130 [ 139.533808][ T8301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.533842][ T8301] ? import_iovec+0x73/0xa0 [ 139.533869][ T8301] ___sys_sendmsg+0x2a5/0x360 [ 139.533892][ T8301] ? __lock_acquire+0x6b5/0x2cf0 [ 139.533914][ T8301] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.533970][ T8301] ? __fget_files+0x2a/0x420 [ 139.533990][ T8301] ? __fget_files+0x3a0/0x420 [ 139.534019][ T8301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 139.534047][ T8301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.534079][ T8301] ? __pfx_ksys_write+0x10/0x10 [ 139.534109][ T8301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.534129][ T8301] do_syscall_64+0x15f/0xf80 [ 139.534146][ T8301] ? trace_irq_disable+0x3b/0x140 [ 139.534171][ T8301] ? clear_bhb_loop+0x40/0x90 [ 139.534193][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.534209][ T8301] RIP: 0033:0x7f95d659cdd9 [ 139.534225][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.534239][ T8301] RSP: 002b:00007f95d74b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.534264][ T8301] RAX: ffffffffffffffda RBX: 00007f95d6815fa0 RCX: 00007f95d659cdd9 [ 139.534276][ T8301] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000003 [ 139.534285][ T8301] RBP: 00007f95d74b4090 R08: 0000000000000000 R09: 0000000000000000 [ 139.534295][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.534305][ T8301] R13: 00007f95d6816038 R14: 00007f95d6815fa0 R15: 00007ffd6a8da168 [ 139.534330][ T8301] [ 139.811636][ T8306] sctp: [Deprecated]: syz.1.690 (pid 8306) Use of int in max_burst socket option deprecated. [ 139.811636][ T8306] Use struct sctp_assoc_value instead [ 140.029506][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.036249][ T8312] macsec0 speed is unknown, defaulting to 1000 [ 140.047155][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.071339][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.088512][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.108583][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.130184][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.376726][ T8316] gretap0: entered promiscuous mode [ 140.391813][ T8320] netlink: 120 bytes leftover after parsing attributes in process `syz.4.694'. [ 140.401238][ T8316] vlan3: entered promiscuous mode [ 140.460157][ T8322] xt_bpf: check failed: parse error [ 140.469627][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.476253][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.548368][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.561277][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.585923][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 140.621310][ T8313] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 141.102053][ T8351] bond2: entered allmulticast mode [ 141.562990][ T8365] macsec0 speed is unknown, defaulting to 1000 [ 141.739538][ T8372] __nla_validate_parse: 4 callbacks suppressed [ 141.739557][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 141.789967][ T8372] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 142.090425][ T8388] tipc: Started in network mode [ 142.131559][ T8388] tipc: Node identity ac14140f, cluster identity 4711 [ 142.184981][ T8388] tipc: New replicast peer: 255.255.255.255 [ 142.225566][ T8388] tipc: Enabled bearer , priority 10 [ 142.543600][ T8365] netlink: 'syz.1.708': attribute type 4 has an invalid length. [ 142.564742][ T8365] netlink: 17 bytes leftover after parsing attributes in process `syz.1.708'. [ 142.876911][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 143.189248][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 143.321307][ T10] tipc: Node number set to 2886997007 [ 143.511108][ T8432] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 143.543563][ T8432] netlink: 244 bytes leftover after parsing attributes in process `syz.2.729'. [ 143.618990][ T8432] netlink: 492 bytes leftover after parsing attributes in process `syz.2.729'. [ 143.633940][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'. [ 143.645137][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 143.675453][ T8435] netlink: 'syz.1.731': attribute type 8 has an invalid length. [ 143.847609][ T8455] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 144.136386][ T8455] bond3: entered promiscuous mode [ 144.142045][ T8455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.236720][ T8461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.257774][ T8461] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 144.268622][ T8461] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 144.287524][ T8461] bond3: (slave vti0): making interface the new active one [ 144.294998][ T8461] vti0: entered promiscuous mode [ 144.314499][ T8461] bond3: (slave vti0): Enslaving as an active interface with an up link [ 144.437855][ T8466] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.737'. [ 145.180466][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.749'. [ 145.730170][ T8533] macsec0 speed is unknown, defaulting to 1000 [ 146.765502][ T4959] block nbd7: Connection timed out, retrying (0/2 alive) [ 146.772598][ T4959] block nbd7: Connection timed out, retrying (0/2 alive) [ 146.779786][ T4959] block nbd7: Connection timed out, retrying (0/2 alive) [ 146.786955][ T25] block nbd7: Dead connection, failed to find a fallback [ 146.794345][ T25] block nbd7: shutting down sockets [ 146.800285][ T25] blk_print_req_error: 139 callbacks suppressed [ 146.800295][ T25] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.816092][ T4959] block nbd7: Connection timed out, retrying (0/2 alive) [ 146.823258][ T25] buffer_io_error: 139 callbacks suppressed [ 146.823270][ T25] Buffer I/O error on dev nbd7, logical block 1, async page read [ 146.837098][ T25] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.846234][ T25] Buffer I/O error on dev nbd7, logical block 0, async page read [ 146.854096][ T25] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.863223][ T25] Buffer I/O error on dev nbd7, logical block 3, async page read [ 146.870998][ T25] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.880121][ T25] Buffer I/O error on dev nbd7, logical block 2, async page read [ 146.888071][ T5631] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.898424][ T5631] Buffer I/O error on dev nbd7, logical block 0, async page read [ 146.906322][ T5631] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.915480][ T5631] Buffer I/O error on dev nbd7, logical block 1, async page read [ 146.923493][ T5631] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.932542][ T5631] Buffer I/O error on dev nbd7, logical block 2, async page read [ 146.940550][ T5631] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.949628][ T5631] Buffer I/O error on dev nbd7, logical block 3, async page read [ 146.957659][ T5631] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.966748][ T5631] Buffer I/O error on dev nbd7, logical block 0, async page read [ 146.974820][ T5631] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.983889][ T5631] Buffer I/O error on dev nbd7, logical block 1, async page read [ 146.994072][ T5631] ldm_validate_partition_table(): Disk read failed. [ 147.001823][ T5631] Dev nbd7: unable to read RDB block 0 [ 147.008727][ T5631] nbd7: unable to read partition table [ 147.019096][ T5631] ldm_validate_partition_table(): Disk read failed. [ 147.026963][ T5631] Dev nbd7: unable to read RDB block 0 [ 147.035029][ T5631] nbd7: unable to read partition table [ 147.695698][ T8495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.705897][ T8501] netlink: 120 bytes leftover after parsing attributes in process `syz.0.747'. [ 147.719704][ T8501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.747'. [ 147.914674][ T8554] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 147.942662][ T8554] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 147.982662][ T8554] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 148.204142][ T8567] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 148.689663][ T25] block nbd8: Connection timed out, retrying (0/2 alive) [ 148.697200][ T25] block nbd8: Connection timed out, retrying (0/2 alive) [ 148.704491][ T8546] block nbd8: Dead connection, failed to find a fallback [ 148.712158][ T8546] block nbd8: shutting down sockets [ 148.717739][ T25] block nbd8: Connection timed out, retrying (0/2 alive) [ 148.728630][ T25] block nbd8: Connection timed out, retrying (0/2 alive) [ 148.749838][ T5933] ldm_validate_partition_table(): Disk read failed. [ 148.753659][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 148.767256][ T5933] Dev nbd8: unable to read RDB block 0 [ 148.775749][ T5933] nbd8: unable to read partition table [ 148.788753][ T5933] ldm_validate_partition_table(): Disk read failed. [ 148.799041][ T5933] Dev nbd8: unable to read RDB block 0 [ 148.807127][ T5933] nbd8: unable to read partition table [ 148.871839][ T8583] netlink: 260 bytes leftover after parsing attributes in process `syz.2.764'. [ 149.787913][ T8595] netlink: 52 bytes leftover after parsing attributes in process `syz.1.765'. [ 150.097597][ T8595] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.187960][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 150.246873][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.318802][ T8607] vlan0: left promiscuous mode [ 150.354657][ T8607] gre1: left allmulticast mode [ 150.400911][ T8612] ip6gretap1: entered promiscuous mode [ 150.517794][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 150.574946][ T8622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.599196][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.608837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.637982][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.645958][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.783549][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.223349][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.231379][ T8648] netlink: 260 bytes leftover after parsing attributes in process `syz.1.779'. [ 151.388508][ T8654] netlink: 'syz.4.781': attribute type 1 has an invalid length. [ 151.777549][ T8654] bond2: entered promiscuous mode [ 151.783143][ T8654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.818592][ T8657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.826173][ T8657] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 151.838166][ T8657] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 151.857917][ T8657] bond2: (slave wireguard0): making interface the new active one [ 151.865989][ T8657] wireguard0: entered promiscuous mode [ 151.873128][ T8657] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 151.989232][ T8671] netlink: 'syz.4.784': attribute type 12 has an invalid length. [ 152.036129][ T8661] ip6gre1: left promiscuous mode [ 152.041182][ T8661] ip6gre1: left allmulticast mode [ 152.070909][ T8661] 8021q: adding VLAN 0 to HW filter on device eth0 [ 152.081398][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.098701][ T8661] 8021q: adding VLAN 0 to HW filter on device eth1 [ 152.127441][ T8661] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.137337][ T8661] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.160900][ T8661] macsec1: left promiscuous mode [ 152.171889][ T8661] batman_adv: batadv0: Interface activated: vlan2 [ 152.181681][ T8661] bond3: left promiscuous mode [ 152.186987][ T8661] vti0: left promiscuous mode [ 152.656421][ T3387] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 152.689064][ T992] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 152.696852][ T3387] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 152.780609][ T8710] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 153.166026][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.173334][ C1] bridge0: topology change detected, propagating [ 153.179986][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.187239][ C1] bridge0: topology change detected, propagating [ 153.793966][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 153.822689][ T8755] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.893591][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 153.921129][ T8760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.814'. [ 154.127327][ T8768] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 154.209138][ T8768] netlink: 56 bytes leftover after parsing attributes in process `syz.3.816'. [ 154.391191][ T8788] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 154.404980][ T8788] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 154.424397][ T8788] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 154.444868][ T2541] block nbd9: Connection timed out, retrying (0/2 alive) [ 154.451977][ T2541] block nbd9: Connection timed out, retrying (0/2 alive) [ 154.453344][ T8788] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 154.459207][ T7159] blk_print_req_error: 286 callbacks suppressed [ 154.459222][ T7159] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.459377][ T7159] buffer_io_error: 286 callbacks suppressed [ 154.459387][ T7159] Buffer I/O error on dev nbd9, logical block 0, async page read [ 154.459514][ T2541] block nbd9: Connection timed out, retrying (0/2 alive) [ 154.459631][ T2541] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.459653][ T2541] Buffer I/O error on dev nbd9, logical block 2, async page read [ 154.459707][ T2541] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.459727][ T2541] Buffer I/O error on dev nbd9, logical block 1, async page read [ 154.459900][ T7465] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.459922][ T7465] Buffer I/O error on dev nbd9, logical block 0, async page read [ 154.460039][ T7465] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.566526][ T7465] Buffer I/O error on dev nbd9, logical block 1, async page read [ 154.574452][ T7465] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.585366][ T7465] Buffer I/O error on dev nbd9, logical block 2, async page read [ 154.593833][ T7465] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.632821][ T7465] Buffer I/O error on dev nbd9, logical block 3, async page read [ 154.666516][ T7465] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.690946][ T7465] Buffer I/O error on dev nbd9, logical block 0, async page read [ 154.712282][ T7465] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.726740][ T7465] Buffer I/O error on dev nbd9, logical block 1, async page read [ 154.752399][ T7465] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.762256][ T8800] tipc: Started in network mode [ 154.775495][ T8800] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 154.785606][ T7465] Buffer I/O error on dev nbd9, logical block 2, async page read [ 154.795854][ T8800] tipc: Enabling of bearer rejected, failed to enable media [ 154.808708][ T7465] ldm_validate_partition_table(): Disk read failed. [ 154.823385][ T7465] Dev nbd9: unable to read RDB block 0 [ 154.832419][ T7465] nbd9: unable to read partition table [ 154.852573][ T7465] ldm_validate_partition_table(): Disk read failed. [ 154.869923][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 154.879075][ T7465] Dev nbd9: unable to read RDB block 0 [ 154.880912][ T7465] nbd9: unable to read partition table [ 154.957606][ T8815] dummy0: mtu less than device minimum [ 154.988003][ T8816] xt_hashlimit: size too large, truncated to 1048576 [ 155.043988][ T8816] xt_hashlimit: invalid interval [ 155.117621][ T8820] macsec0 speed is unknown, defaulting to 1000 [ 155.281098][ T8833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.834'. [ 155.593483][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.837'. [ 155.677442][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 155.704929][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.830'. [ 155.726713][ T8856] netlink: 'syz.0.838': attribute type 30 has an invalid length. [ 155.978783][ T8864] netlink: 9 bytes leftover after parsing attributes in process `syz.3.840'. [ 156.178648][ T8864] 0: renamed from hsr0 (while UP) [ 156.220612][ T8864] 0: entered allmulticast mode [ 156.236837][ T8864] hsr_slave_0: entered allmulticast mode [ 156.260188][ T8864] hsr_slave_1: entered allmulticast mode [ 156.274402][ T8864] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 156.320784][ T8872] tipc: Enabling of bearer rejected, failed to enable media [ 156.363411][ C0] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 156.363429][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 156.901597][ T8911] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 156.937027][ T8911] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 156.975256][ T8911] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 157.161915][ T8914] macsec0 speed is unknown, defaulting to 1000 [ 157.211225][ T8926] veth1_to_team: entered promiscuous mode [ 157.235084][ T8926] dummy0: entered promiscuous mode [ 157.263812][ T8926] dummy0: left promiscuous mode [ 157.276690][ T8926] veth1_to_team: left promiscuous mode [ 158.428212][ T8971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.586503][ T8983] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 158.604425][ T8983] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 158.626854][ T8983] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 158.758631][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.766238][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.870546][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.886853][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.095951][ T10] macsec0 speed is unknown, defaulting to 1000 [ 159.097707][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.106581][ T10] syz0: Port: 1 Link DOWN [ 159.146885][ T8974] bridge_slave_0 (unregistering): left allmulticast mode [ 159.157626][ T8974] bridge_slave_0 (unregistering): left promiscuous mode [ 159.170846][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.199583][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.229421][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.239332][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.276595][ T9006] macsec0 speed is unknown, defaulting to 1000 [ 159.320559][ T9009] netlink: 'syz.1.883': attribute type 32 has an invalid length. [ 159.341745][ T9009] __nla_validate_parse: 9 callbacks suppressed [ 159.341760][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 159.426171][ T9009] bond3: option coupled_control: invalid value (12) [ 159.471303][ T9015] netlink: 15 bytes leftover after parsing attributes in process `syz.0.884'. [ 159.497634][ T9009] bond3 (unregistering): Released all slaves [ 159.589061][ T9000] syz.4.880 (9000) used greatest stack depth: 17944 bytes left [ 159.646457][ T9020] netlink: 'syz.0.885': attribute type 13 has an invalid length. [ 159.758552][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 159.874248][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.920596][ T9031] netlink: 128 bytes leftover after parsing attributes in process `syz.4.889'. [ 159.951281][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 160.014334][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.140396][ T9031] macsec0 speed is unknown, defaulting to 1000 [ 160.158141][ T9042] tipc: Failed to remove unknown binding: 66,0,0/0:3136738530/3136738532 [ 160.178722][ T9043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.892'. [ 160.189051][ T9042] tipc: Failed to remove unknown binding: 66,0,0/0:3136738530/3136738531 [ 160.202437][ T9042] tipc: Failed to remove unknown binding: 66,0,0/0:3136738530/3136738532 [ 160.219739][ T9042] tipc: Failed to remove unknown binding: 66,0,0/0:3136738530/3136738531 [ 160.332383][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 160.368650][ T9045] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 160.400548][ T9045] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 160.439915][ T9045] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 160.677762][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.899'. [ 160.880664][ T9068] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 161.423921][ T9092] netlink: 'syz.0.905': attribute type 13 has an invalid length. [ 161.526959][ T9094] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 161.583732][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.612805][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 161.697715][ T9098] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.734868][ T9098] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 161.764196][ T9094] ip6gretap2: entered promiscuous mode [ 161.769687][ T9094] ip6gretap2: entered allmulticast mode [ 161.784898][ T9094] bond3: (slave ip6gretap2): making interface the new active one [ 161.798389][ T9094] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 161.897949][ T9115] netlink: 104 bytes leftover after parsing attributes in process `syz.4.910'. [ 161.899736][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.914505][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.970515][ T9117] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 162.085436][ T9123] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 162.095800][ T9102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.113825][ T9102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.236899][ T9121] nbd11: detected capacity change from 0 to 63 [ 162.307091][ T9105] vxcan2: entered allmulticast mode [ 162.324938][ T9117] bond0: (slave dummy0): Releasing backup interface [ 162.350431][ T9117] team0: Port device dummy0 added [ 162.396144][ T9123] team0: Port device dummy0 removed [ 162.426190][ T9123] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.443728][ T992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.466548][ T3338] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.480381][ T5633] block nbd11: Receive control failed (result -104) [ 162.493072][ T5629] block nbd11: Receive control failed (result -32) [ 162.510254][ T3338] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.521912][ T3338] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.531206][ T3338] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.620146][ T9126] macsec0 speed is unknown, defaulting to 1000 [ 162.772023][ T25] block nbd10: Connection timed out, retrying (0/2 alive) [ 162.779426][ T25] block nbd10: Connection timed out, retrying (0/2 alive) [ 162.786722][ T8546] block nbd10: Dead connection, failed to find a fallback [ 162.796428][ T25] block nbd10: Connection timed out, retrying (0/2 alive) [ 162.803660][ T8546] block nbd10: shutting down sockets [ 162.808982][ T8546] blk_print_req_error: 137 callbacks suppressed [ 162.808996][ T8546] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.824682][ T25] block nbd10: Connection timed out, retrying (0/2 alive) [ 162.831979][ T8546] buffer_io_error: 137 callbacks suppressed [ 162.831992][ T8546] Buffer I/O error on dev nbd10, logical block 0, async page read [ 162.850340][ T8546] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.860121][ T8546] Buffer I/O error on dev nbd10, logical block 3, async page read [ 162.869886][ T8546] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.879863][ T8546] Buffer I/O error on dev nbd10, logical block 2, async page read [ 162.888446][ T8546] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.897812][ T8546] Buffer I/O error on dev nbd10, logical block 1, async page read [ 162.908040][ T5927] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.919922][ T5927] Buffer I/O error on dev nbd10, logical block 0, async page read [ 162.928249][ T5927] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.937524][ T5927] Buffer I/O error on dev nbd10, logical block 1, async page read [ 162.947535][ T5927] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.956808][ T5927] Buffer I/O error on dev nbd10, logical block 2, async page read [ 162.965897][ T5927] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.975145][ T5927] Buffer I/O error on dev nbd10, logical block 3, async page read [ 162.986866][ T5927] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.996216][ T5927] Buffer I/O error on dev nbd10, logical block 0, async page read [ 163.004828][ T5927] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.014235][ T5927] Buffer I/O error on dev nbd10, logical block 1, async page read [ 163.024857][ T5927] ldm_validate_partition_table(): Disk read failed. [ 163.033486][ T5927] Dev nbd10: unable to read RDB block 0 [ 163.041019][ T5927] nbd10: unable to read partition table [ 163.052939][ T5927] ldm_validate_partition_table(): Disk read failed. [ 163.062027][ T5927] Dev nbd10: unable to read RDB block 0 [ 163.069823][ T5927] nbd10: unable to read partition table [ 163.149685][ T9143] hma(kX: entered promiscuous mode [ 163.180831][ T9156] netlink: 'syz.1.922': attribute type 13 has an invalid length. [ 163.235130][ T24] IPVS: starting estimator thread 0... [ 163.291748][ T9153] macsec0 speed is unknown, defaulting to 1000 [ 163.333588][ T9159] IPVS: using max 30 ests per chain, 72000 per kthread [ 163.806354][ T9169] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 163.849468][ T9169] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 163.876216][ T9169] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 164.043343][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 164.043354][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.102717][ T9183] netlink: ct family unspecified [ 164.113920][ T9183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.340514][ T9190] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 164.379996][ T9171] __nla_validate_parse: 3 callbacks suppressed [ 164.380012][ T9171] netlink: 256 bytes leftover after parsing attributes in process `syz.3.926'. [ 164.383080][ T9194] pimreg: entered allmulticast mode [ 164.386892][ T9171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.926'. [ 164.582185][ T9192] pimreg: left allmulticast mode [ 164.659806][ T9199] macsec0 speed is unknown, defaulting to 1000 [ 164.740903][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 164.918161][ T9214] netlink: 'syz.0.940': attribute type 13 has an invalid length. [ 165.074964][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.121762][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 165.331844][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'. [ 165.377600][ T9230] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 165.425735][ T9240] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 165.443940][ T9240] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 165.463276][ T9240] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 165.554416][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 165.793088][ T9263] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 165.801782][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.956'. [ 165.884465][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.995848][ T9275] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 166.014144][ T9275] netlink: get zone limit has 4 unknown bytes [ 166.042733][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 166.130238][ T9279] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 166.445290][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 166.620218][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 166.728944][ T9310] wg2: Caught tx_queue_len zero misconfig [ 166.775959][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.014648][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.022378][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.032738][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.067255][ T9327] veth0_to_team: left promiscuous mode [ 167.082363][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.094751][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.106087][ T9327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.116625][ T9327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.130055][ T9327] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 167.153013][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.160208][ T187] bridge0: port 2(bridge_slave_1) entered listening state [ 167.365322][ T9337] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.204229][ T9282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.422386][ T9355] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 169.450802][ T9355] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 169.451708][ T9361] FAULT_INJECTION: forcing a failure. [ 169.451708][ T9361] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 169.471466][ T9355] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 169.498904][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(full) [ 169.498928][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.498939][ T9361] Call Trace: [ 169.498946][ T9361] [ 169.498953][ T9361] dump_stack_lvl+0xe8/0x150 [ 169.498980][ T9361] should_fail_ex+0x412/0x560 [ 169.499009][ T9361] prepare_alloc_pages+0x22a/0x650 [ 169.499043][ T9361] __alloc_frozen_pages_noprof+0x12f/0x380 [ 169.499073][ T9361] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.499103][ T9361] ? __pfx_policy_nodemask+0x10/0x10 [ 169.499133][ T9361] ? __lock_acquire+0x6b5/0x2cf0 [ 169.499157][ T9361] alloc_pages_mpol+0x235/0x490 [ 169.499187][ T9361] folio_alloc_mpol_noprof+0x39/0x160 [ 169.499214][ T9361] vma_alloc_folio_noprof+0xe1/0x1e0 [ 169.499237][ T9361] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 169.499255][ T9361] ? __pte_offset_map+0x29/0x240 [ 169.499276][ T9361] ? __pte_offset_map+0x29/0x240 [ 169.499300][ T9361] do_pte_missing+0x159d/0x33f0 [ 169.499337][ T9361] ? handle_mm_fault+0xee/0x3170 [ 169.499362][ T9361] handle_mm_fault+0x1bd7/0x3170 [ 169.499397][ T9361] ? handle_mm_fault+0xee/0x3170 [ 169.499426][ T9361] ? __pfx_handle_mm_fault+0x10/0x10 [ 169.499445][ T9361] ? lock_vma_under_rcu+0x45a/0x500 [ 169.499468][ T9361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.499511][ T9361] do_user_addr_fault+0xa73/0x1340 [ 169.499543][ T9361] ? rcu_is_watching+0x15/0xb0 [ 169.499565][ T9361] ? trace_page_fault_user+0x84/0x1e0 [ 169.499585][ T9361] exc_page_fault+0x6a/0xc0 [ 169.499612][ T9361] asm_exc_page_fault+0x26/0x30 [ 169.499629][ T9361] RIP: 0033:0x7fed1545e58b [ 169.499646][ T9361] Code: 00 00 00 48 8d 3d 35 a1 1a 00 48 89 c1 31 c0 e8 9b 2c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 69 a1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 169.499660][ T9361] RSP: 002b:00007fed16396fa0 EFLAGS: 00010206 [ 169.499676][ T9361] RAX: 0000000000000000 RBX: 00007fed15815fa0 RCX: 0000000000000000 [ 169.499688][ T9361] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000100 [ 169.499698][ T9361] RBP: 00007fed16398090 R08: 0000000000000000 R09: 0000000000000000 [ 169.499709][ T9361] R10: 0000200000000100 R11: 0000000000000000 R12: 0000000000000001 [ 169.499719][ T9361] R13: 00007fed15816038 R14: 00007fed15815fa0 R15: 00007ffc953508d8 [ 169.499749][ T9361] [ 169.499935][ T9361] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 169.666088][ T9362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.774614][ T9362] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.835288][ T9362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.884147][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.895353][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.909768][ T9362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.932543][ T9362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.959379][ T9362] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.997766][ T9356] macsec0 speed is unknown, defaulting to 1000 [ 170.014662][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.021879][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.048114][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.055329][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.774178][ T9406] FAULT_INJECTION: forcing a failure. [ 170.774178][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.828007][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.4.996 Not tainted syzkaller #0 PREEMPT(full) [ 170.828036][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.828045][ T9406] Call Trace: [ 170.828055][ T9406] [ 170.828062][ T9406] dump_stack_lvl+0xe8/0x150 [ 170.828087][ T9406] should_fail_ex+0x412/0x560 [ 170.828114][ T9406] _copy_from_user+0x2d/0xb0 [ 170.828140][ T9406] __sys_sendto+0x2b0/0x710 [ 170.828167][ T9406] ? __pfx___sys_sendto+0x10/0x10 [ 170.828214][ T9406] ? exc_page_fault+0x6a/0xc0 [ 170.828243][ T9406] ? do_user_addr_fault+0xc6f/0x1340 [ 170.828267][ T9406] __x64_sys_sendto+0xde/0x100 [ 170.828289][ T9406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.828312][ T9406] do_syscall_64+0x15f/0xf80 [ 170.828330][ T9406] ? trace_irq_disable+0x3b/0x140 [ 170.828356][ T9406] ? clear_bhb_loop+0x40/0x90 [ 170.828377][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.828392][ T9406] RIP: 0033:0x7f95d655d60e [ 170.828408][ T9406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.828421][ T9406] RSP: 002b:00007f95d74b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 170.828439][ T9406] RAX: ffffffffffffffda RBX: 00007f95d74b46c0 RCX: 00007f95d655d60e [ 170.828450][ T9406] RDX: 000000000000001c RSI: 00007f95d74b3000 RDI: 0000000000000003 [ 170.828460][ T9406] RBP: 0000000000000000 R08: 00007f95d74b2f04 R09: 000000000000000c [ 170.828469][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 170.828479][ T9406] R13: 00007f95d74b2f58 R14: 00007f95d74b3000 R15: 0000000000000000 [ 170.828505][ T9406] [ 171.219753][ T9420] netlink: 'syz.4.1000': attribute type 4 has an invalid length. [ 171.227906][ T9420] __nla_validate_parse: 1 callbacks suppressed [ 171.227922][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 171.417933][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 171.528871][ T9424] macsec0 speed is unknown, defaulting to 1000 [ 171.686247][ T9430] syzkaller0: entered promiscuous mode [ 171.699331][ T9430] syzkaller0: entered allmulticast mode [ 172.551166][ T9463] netlink: 'syz.2.1011': attribute type 3 has an invalid length. [ 172.569910][ T9463] veth0: entered promiscuous mode [ 172.600226][ T9468] veth0: left promiscuous mode [ 172.736926][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 172.827391][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 173.197154][ T9500] macsec0 speed is unknown, defaulting to 1000 [ 173.361662][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'. [ 173.424989][ T9504] macsec0 speed is unknown, defaulting to 1000 [ 173.599657][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1019'. [ 173.691733][ T9518] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 173.895944][ T9518] macsec0 speed is unknown, defaulting to 1000 [ 174.035580][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 174.405174][ T9536] netlink: 'syz.1.1024': attribute type 32 has an invalid length. [ 174.449164][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 174.625173][ T9536] bond3: option coupled_control: invalid value (12) [ 174.641723][ T9536] bond3 (unregistering): Released all slaves [ 174.729610][ T9542] dvmrp6: entered allmulticast mode [ 174.761979][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 174.869851][ T9543] xt_connbytes: Forcing CT accounting to be enabled [ 174.875856][ T9542] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.906947][ T9544] xt_connbytes: Forcing CT accounting to be enabled [ 175.085681][ T9553] IPVS: set_ctl: invalid protocol: 41 172.20.20.16:20003 [ 175.142216][ T9553] 8021q: VLANs not supported on vxcan1 [ 175.159455][ T9548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.469327][ T9560] macsec0 speed is unknown, defaulting to 1000 [ 175.961169][ T9582] hsr0: mtu less than device minimum [ 176.077559][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1041'. [ 176.121996][ T9593] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 176.268330][ T9602] __nla_validate_parse: 1 callbacks suppressed [ 176.268348][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 176.275785][ T9604] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 176.909773][ T9622] netlink: 'syz.2.1051': attribute type 16 has an invalid length. [ 176.917821][ T9622] netlink: 'syz.2.1051': attribute type 17 has an invalid length. [ 176.962595][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 176.985317][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.078305][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.085539][ T9622] bridge0: port 2(bridge_slave_1) entered listening state [ 177.107851][ T9622] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 177.127872][ T9628] netlink: 'syz.0.1054': attribute type 3 has an invalid length. [ 177.139190][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 177.156981][ T9628] nbd: nbd0 already in use [ 177.164926][ T9628] block nbd0: NBD_DISCONNECT [ 177.188747][ T9628] block nbd0: Send disconnect failed -32 [ 177.200250][ T9628] block nbd0: Send disconnect failed -32 [ 177.242482][ T9628] siw: device registration error -23 [ 177.449437][ T9642] vlan0: Caught tx_queue_len zero misconfig [ 177.591387][ T9649] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 177.620635][ T9649] sctp: [Deprecated]: syz.0.1063 (pid 9649) Use of int in maxseg socket option. [ 177.620635][ T9649] Use struct sctp_assoc_value instead [ 177.677900][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 177.890488][ T9667] netlink: del zone limit has 8 unknown bytes [ 177.905059][ T9668] x_tables: duplicate underflow at hook 3 [ 177.933661][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 177.943613][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 177.961590][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.977590][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.007245][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.039315][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.059831][ T9678] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1073'. [ 178.066552][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 178.086512][ T9680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1074'. [ 178.123451][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 178.155360][ T9680] B: renamed from ipvlan1 (while UP) [ 178.156335][ T9683] netlink: 'syz.1.1075': attribute type 10 has an invalid length. [ 178.185494][ T9683] bond0: (slave dummy0): Releasing backup interface [ 178.252984][ T9683] team0: Port device dummy0 added [ 178.352698][ T9683] netlink: 'syz.1.1075': attribute type 10 has an invalid length. [ 178.392952][ T9683] team0: Port device dummy0 removed [ 178.414281][ T9684] ================================================================== [ 178.422368][ T9684] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0xea/0x680 [ 178.429938][ T9684] Read of size 8 at addr ffff888026546c88 by task syz.1.1075/9684 [ 178.437740][ T9684] [ 178.440049][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.1.1075 Not tainted syzkaller #0 PREEMPT(full) [ 178.440062][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.440070][ T9684] Call Trace: [ 178.440076][ T9684] [ 178.440080][ T9684] dump_stack_lvl+0xe8/0x150 [ 178.440096][ T9684] print_address_description+0x55/0x1e0 [ 178.440108][ T9684] ? blk_mq_free_rqs+0xea/0x680 [ 178.440124][ T9684] print_report+0x58/0x70 [ 178.440139][ T9684] kasan_report+0x117/0x150 [ 178.440156][ T9684] ? blk_mq_free_rqs+0xea/0x680 [ 178.440173][ T9684] blk_mq_free_rqs+0xea/0x680 [ 178.440189][ T9684] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.440206][ T9684] blk_mq_free_map_and_rqs+0x40/0xf0 [ 178.440216][ T9684] blk_mq_free_sched_res+0xeb/0x280 [ 178.440228][ T9684] elevator_change_done+0x1d2/0x5f0 [ 178.440245][ T9684] ? __pfx_elevator_change_done+0x10/0x10 [ 178.440261][ T9684] ? elevator_change+0x2e0/0x450 [ 178.440277][ T9684] elevator_change+0x321/0x450 [ 178.440293][ T9684] elevator_set_none+0xb5/0x140 [ 178.440307][ T9684] ? __pfx_elevator_set_none+0x10/0x10 [ 178.440323][ T9684] ? xa_load+0x1db/0x210 [ 178.440334][ T9684] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 178.440349][ T9684] ? kernfs_add_one+0x477/0x5c0 [ 178.440363][ T9684] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 178.440376][ T9684] ? sysfs_add_file_mode_ns+0x259/0x300 [ 178.440389][ T9684] nbd_start_device+0x17f/0xb10 [ 178.440402][ T9684] ? device_create_file+0xf4/0x1b0 [ 178.440414][ T9684] nbd_genl_connect+0x165b/0x1cf0 [ 178.440424][ T9684] ? __pfx___nla_validate_parse+0x10/0x10 [ 178.440443][ T9684] ? __pfx_nbd_genl_connect+0x10/0x10 [ 178.440455][ T9684] ? rcu_is_watching+0x15/0xb0 [ 178.440467][ T9684] ? trace_kmalloc+0x2a/0xf0 [ 178.440482][ T9684] ? __nla_parse+0x40/0x60 [ 178.440497][ T9684] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 178.440511][ T9684] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 178.440525][ T9684] genl_family_rcv_msg_doit+0x22a/0x330 [ 178.440538][ T9684] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 178.440555][ T9684] genl_rcv_msg+0x61c/0x7a0 [ 178.440567][ T9684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.440577][ T9684] ? __pfx_nbd_genl_connect+0x10/0x10 [ 178.440588][ T9684] ? __pfx_clockevents_program_event+0x10/0x10 [ 178.440603][ T9684] netlink_rcv_skb+0x232/0x4b0 [ 178.440618][ T9684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.440629][ T9684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.440646][ T9684] ? down_read+0x270/0x2e0 [ 178.440656][ T9684] ? genl_rcv+0xd/0x40 [ 178.440666][ T9684] genl_rcv+0x28/0x40 [ 178.440676][ T9684] netlink_unicast+0x75c/0x8e0 [ 178.440691][ T9684] netlink_sendmsg+0x813/0xb40 [ 178.440708][ T9684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.440723][ T9684] ? aa_sock_msg_perm+0xf1/0x1b0 [ 178.440736][ T9684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.440751][ T9684] ____sys_sendmsg+0x972/0x9f0 [ 178.440766][ T9684] ? __might_fault+0xaf/0x130 [ 178.440780][ T9684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.440797][ T9684] ? import_iovec+0x73/0xa0 [ 178.440812][ T9684] ___sys_sendmsg+0x2a5/0x360 [ 178.440827][ T9684] ? __lock_acquire+0x6b5/0x2cf0 [ 178.440838][ T9684] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.440855][ T9684] ? futex_wait+0x2a2/0x390 [ 178.440874][ T9684] ? __fget_files+0x2a/0x420 [ 178.440886][ T9684] ? __fget_files+0x3a0/0x420 [ 178.440900][ T9684] __x64_sys_sendmsg+0x1bd/0x2a0 [ 178.440916][ T9684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.440933][ T9684] ? rcu_is_watching+0x15/0xb0 [ 178.440947][ T9684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.440958][ T9684] do_syscall_64+0x15f/0xf80 [ 178.440967][ T9684] ? trace_irq_disable+0x3b/0x140 [ 178.440982][ T9684] ? clear_bhb_loop+0x40/0x90 [ 178.440994][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.441004][ T9684] RIP: 0033:0x7f14fd59cdd9 [ 178.441017][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.441027][ T9684] RSP: 002b:00007f14fe4d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.441039][ T9684] RAX: ffffffffffffffda RBX: 00007f14fd816090 RCX: 00007f14fd59cdd9 [ 178.441048][ T9684] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 178.441055][ T9684] RBP: 00007f14fd632d69 R08: 0000000000000000 R09: 0000000000000000 [ 178.441062][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.441068][ T9684] R13: 00007f14fd816128 R14: 00007f14fd816090 R15: 00007ffdda7cb9e8 [ 178.441080][ T9684] [ 178.441084][ T9684] [ 178.875916][ T9684] Allocated by task 1: [ 178.879970][ T9684] kasan_save_track+0x3e/0x80 [ 178.884644][ T9684] __kasan_kmalloc+0x93/0xb0 [ 178.889224][ T9684] __kmalloc_node_noprof+0x4e0/0x7c0 [ 178.894502][ T9684] blk_mq_alloc_tag_set+0x4e3/0xfc0 [ 178.899686][ T9684] nbd_dev_add+0x30e/0xb50 [ 178.904089][ T9684] nbd_init+0x168/0x1f0 [ 178.908227][ T9684] do_one_initcall+0x250/0x870 [ 178.912976][ T9684] do_initcall_level+0x104/0x190 [ 178.917915][ T9684] do_initcalls+0x59/0xa0 [ 178.922250][ T9684] kernel_init_freeable+0x2a6/0x3e0 [ 178.927445][ T9684] kernel_init+0x1d/0x1d0 [ 178.931767][ T9684] ret_from_fork+0x514/0xb70 [ 178.936347][ T9684] ret_from_fork_asm+0x1a/0x30 [ 178.941105][ T9684] [ 178.943416][ T9684] The buggy address belongs to the object at ffff888026546c80 [ 178.943416][ T9684] which belongs to the cache kmalloc-8 of size 8 [ 178.957109][ T9684] The buggy address is located 0 bytes to the right of [ 178.957109][ T9684] allocated 8-byte region [ffff888026546c80, ffff888026546c88) [ 178.971418][ T9684] [ 178.973739][ T9684] The buggy address belongs to the physical page: [ 178.980158][ T9684] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26546 [ 178.988906][ T9684] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 178.996005][ T9684] page_type: f5(slab) [ 178.999974][ T9684] raw: 00fff00000000000 ffff88813fe1a500 dead000000000100 dead000000000122 [ 179.008544][ T9684] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 179.017108][ T9684] page dumped because: kasan: bad access detected [ 179.023514][ T9684] page_owner tracks the page as allocated [ 179.029215][ T9684] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5564038233, free_ts 4965659901 [ 179.048996][ T9684] post_alloc_hook+0x231/0x280 [ 179.053756][ T9684] get_page_from_freelist+0x24ba/0x2540 [ 179.059293][ T9684] __alloc_frozen_pages_noprof+0x18d/0x380 [ 179.065098][ T9684] allocate_slab+0x77/0x660 [ 179.069586][ T9684] refill_objects+0x339/0x3d0 [ 179.074254][ T9684] __pcs_replace_empty_main+0x321/0x720 [ 179.079786][ T9684] __kmalloc_node_noprof+0x577/0x7c0 [ 179.085059][ T9684] blk_mq_alloc_tag_set+0x5a4/0xfc0 [ 179.090246][ T9684] loop_add+0x43c/0xb40 [ 179.094390][ T9684] loop_init+0xd9/0x170 [ 179.098530][ T9684] do_one_initcall+0x250/0x870 [ 179.103280][ T9684] do_initcall_level+0x104/0x190 [ 179.108209][ T9684] do_initcalls+0x59/0xa0 [ 179.112526][ T9684] kernel_init_freeable+0x2a6/0x3e0 [ 179.117724][ T9684] kernel_init+0x1d/0x1d0 [ 179.122046][ T9684] ret_from_fork+0x514/0xb70 [ 179.126628][ T9684] page last free pid 10 tgid 10 stack trace: [ 179.132590][ T9684] __free_frozen_pages+0xbc7/0xd30 [ 179.137697][ T9684] vfree+0x1d1/0x2f0 [ 179.141579][ T9684] delayed_vfree_work+0x55/0x80 [ 179.146416][ T9684] process_scheduled_works+0xb5d/0x1860 [ 179.151943][ T9684] worker_thread+0xa53/0xfc0 [ 179.156515][ T9684] kthread+0x388/0x470 [ 179.160574][ T9684] ret_from_fork+0x514/0xb70 [ 179.165148][ T9684] ret_from_fork_asm+0x1a/0x30 [ 179.169897][ T9684] [ 179.172200][ T9684] Memory state around the buggy address: [ 179.177809][ T9684] ffff888026546b80: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 179.185854][ T9684] ffff888026546c00: 02 fc fc fc 02 fc fc fc 07 fc fc fc 05 fc fc fc [ 179.193896][ T9684] >ffff888026546c80: 00 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 179.201936][ T9684] ^ [ 179.206243][ T9684] ffff888026546d00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 179.214284][ T9684] ffff888026546d80: 02 fc fc fc 02 fc fc fc 07 fc fc fc 05 fc fc fc [ 179.222322][ T9684] ================================================================== [ 179.242232][ T9684] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.249469][ T9684] CPU: 0 UID: 0 PID: 9684 Comm: syz.1.1075 Not tainted syzkaller #0 PREEMPT(full) [ 179.258755][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.268827][ T9684] Call Trace: [ 179.272110][ T9684] [ 179.275046][ T9684] vpanic+0x56c/0xa60 [ 179.279045][ T9684] ? __pfx_vpanic+0x10/0x10 [ 179.283568][ T9684] panic+0xc5/0xd0 [ 179.287299][ T9684] ? __pfx_panic+0x10/0x10 [ 179.291728][ T9684] ? preempt_schedule_thunk+0x16/0x30 [ 179.297111][ T9684] ? preempt_schedule_thunk+0x16/0x30 [ 179.302504][ T9684] ? blk_mq_free_rqs+0xea/0x680 [ 179.307377][ T9684] check_panic_on_warn+0x89/0xb0 [ 179.312328][ T9684] ? blk_mq_free_rqs+0xea/0x680 [ 179.317196][ T9684] end_report+0x73/0x170 [ 179.321428][ T9684] ? blk_mq_free_rqs+0xea/0x680 [ 179.326268][ T9684] kasan_report+0x128/0x150 [ 179.330792][ T9684] ? blk_mq_free_rqs+0xea/0x680 [ 179.335670][ T9684] blk_mq_free_rqs+0xea/0x680 [ 179.340361][ T9684] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.346167][ T9684] blk_mq_free_map_and_rqs+0x40/0xf0 [ 179.351461][ T9684] blk_mq_free_sched_res+0xeb/0x280 [ 179.356672][ T9684] elevator_change_done+0x1d2/0x5f0 [ 179.361899][ T9684] ? __pfx_elevator_change_done+0x10/0x10 [ 179.367638][ T9684] ? elevator_change+0x2e0/0x450 [ 179.372595][ T9684] elevator_change+0x321/0x450 [ 179.377376][ T9684] elevator_set_none+0xb5/0x140 [ 179.382246][ T9684] ? __pfx_elevator_set_none+0x10/0x10 [ 179.387723][ T9684] ? xa_load+0x1db/0x210 [ 179.391964][ T9684] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 179.397767][ T9684] ? kernfs_add_one+0x477/0x5c0 [ 179.402622][ T9684] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 179.408859][ T9684] ? sysfs_add_file_mode_ns+0x259/0x300 [ 179.414402][ T9684] nbd_start_device+0x17f/0xb10 [ 179.419247][ T9684] ? device_create_file+0xf4/0x1b0 [ 179.424346][ T9684] nbd_genl_connect+0x165b/0x1cf0 [ 179.429357][ T9684] ? __pfx___nla_validate_parse+0x10/0x10 [ 179.435076][ T9684] ? __pfx_nbd_genl_connect+0x10/0x10 [ 179.440436][ T9684] ? rcu_is_watching+0x15/0xb0 [ 179.445187][ T9684] ? trace_kmalloc+0x2a/0xf0 [ 179.449771][ T9684] ? __nla_parse+0x40/0x60 [ 179.454185][ T9684] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 179.460503][ T9684] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 179.466829][ T9684] genl_family_rcv_msg_doit+0x22a/0x330 [ 179.472366][ T9684] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.478429][ T9684] genl_rcv_msg+0x61c/0x7a0 [ 179.482926][ T9684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.487936][ T9684] ? __pfx_nbd_genl_connect+0x10/0x10 [ 179.493298][ T9684] ? __pfx_clockevents_program_event+0x10/0x10 [ 179.499445][ T9684] netlink_rcv_skb+0x232/0x4b0 [ 179.504211][ T9684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.509223][ T9684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.514504][ T9684] ? down_read+0x270/0x2e0 [ 179.518909][ T9684] ? genl_rcv+0xd/0x40 [ 179.522972][ T9684] genl_rcv+0x28/0x40 [ 179.526943][ T9684] netlink_unicast+0x75c/0x8e0 [ 179.531706][ T9684] netlink_sendmsg+0x813/0xb40 [ 179.536468][ T9684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.541745][ T9684] ? aa_sock_msg_perm+0xf1/0x1b0 [ 179.546676][ T9684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.551952][ T9684] ____sys_sendmsg+0x972/0x9f0 [ 179.556712][ T9684] ? __might_fault+0xaf/0x130 [ 179.561381][ T9684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.566660][ T9684] ? import_iovec+0x73/0xa0 [ 179.571157][ T9684] ___sys_sendmsg+0x2a5/0x360 [ 179.575828][ T9684] ? __lock_acquire+0x6b5/0x2cf0 [ 179.580753][ T9684] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.585956][ T9684] ? futex_wait+0x2a2/0x390 [ 179.590462][ T9684] ? __fget_files+0x2a/0x420 [ 179.595044][ T9684] ? __fget_files+0x3a0/0x420 [ 179.599712][ T9684] __x64_sys_sendmsg+0x1bd/0x2a0 [ 179.604646][ T9684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.610100][ T9684] ? rcu_is_watching+0x15/0xb0 [ 179.614858][ T9684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.620910][ T9684] do_syscall_64+0x15f/0xf80 [ 179.625492][ T9684] ? trace_irq_disable+0x3b/0x140 [ 179.630507][ T9684] ? clear_bhb_loop+0x40/0x90 [ 179.635170][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.641050][ T9684] RIP: 0033:0x7f14fd59cdd9 [ 179.645452][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.665045][ T9684] RSP: 002b:00007f14fe4d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.673448][ T9684] RAX: ffffffffffffffda RBX: 00007f14fd816090 RCX: 00007f14fd59cdd9 [ 179.681404][ T9684] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 179.689368][ T9684] RBP: 00007f14fd632d69 R08: 0000000000000000 R09: 0000000000000000 [ 179.697338][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.705307][ T9684] R13: 00007f14fd816128 R14: 00007f14fd816090 R15: 00007ffdda7cb9e8 [ 179.713275][ T9684] [ 179.716891][ T9684] Kernel Offset: disabled [ 179.721198][ T9684] Rebooting in 86400 seconds..