last executing test programs: 1.861574203s ago: executing program 1 (id=3556): r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x10, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xfc, 0x0, 0x0, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) 1.750810118s ago: executing program 0 (id=3558): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="610306c2061262"], 0x12) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8, 0x10, 0x1, 0x7, {{0x38, 0x4, 0x2, 0x20, 0xe0, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xda, 0x1, 0xc, [{@remote, 0x4}, {@broadcast, 0x7}, {@rand_addr=0x64010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x3}]}, @rr={0x7, 0x1b, 0x93, [@multicast2, @remote, @private=0x1, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @local]}, @rr={0x7, 0xb, 0x49, [@remote, @rand_addr=0x64010102]}, @timestamp={0x44, 0x28, 0xa5, 0x0, 0x8, [0x5, 0x587, 0x5, 0x8, 0x7, 0x1, 0x8, 0x6, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0x1, [{@multicast2, 0x4}, {@empty, 0x3dc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}]}, @cipso={0x86, 0x2b, 0xfffffffffffffffd, [{0x1, 0xd, "9fc8dd214d7d72968dca7c"}, {0x1, 0x2}, {0x1, 0x9, "0a77baf64b9c26"}, {0x6, 0xd, "2497bd83837396f622b74a"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4e2008}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@deltclass={0x88, 0x29, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {0xe, 0x18}, {0x10000, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9c, 0x8}}, @TCA_RATE={0x6, 0x5, {0x91, 0x9}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x8}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fff}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x8044) unshare(0x20000400) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB="4f03d695", @ANYRES32=r10, @ANYBLOB], 0x40}}, 0x48010) 1.62828146s ago: executing program 2 (id=3560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) write$nci(r1, &(0x7f0000000140)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x64, {0x0, 0x1}}, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfc100000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10) 1.406474919s ago: executing program 1 (id=3562): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0x176}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe", 0x42}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a", 0x71}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="52c1200795785ced9271d7731e97f6ba83b9a7488c08cc478be431490c3017a7d076d747b2ff91a5", 0x28}, {&(0x7f0000000140)="b6320fd093b5ac9c5c5b77c78ebffdab874a16b30098fa6457cedc7b3573c56e40c88f6052bfb776d8d201c82788b44a97fcb7b5eff6bbd1e9b4d97a6fa970adac912dfbedbdcd97e57c9dafa68326357f94f16edb34fe14287113e29f81595a1a7747527a9edff498df115a1636c649366ac184ebc55de03f2174c92de259ea59328cf4a5e1e28d38859f253d16376c01d059d17a5b2f42c2e220e8f41bf1c4a178b4a7e78cdd67b238d3088a74a540f44914c42192c305b0c59b77084444e471bf5f7379d598de62b395cf532429", 0xcf}, {&(0x7f00000002c0)="a2295efe444f7f5a2ad997cfa7d82f3697ba9fa155cae0f0cec3e91e7b87a0d2eb5e0b652eb43503fee7ca81528aacc049e08354b345f6fd5225cb4cf11ba9f66c053fac23c8", 0x46}, {&(0x7f0000000340)="a26d200309ca7a5439d6052ac2b61f24673ced7237ffb203b0b7a47d3afb448956b6a1ad9f5991", 0x27}], 0x4}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.40568759s ago: executing program 3 (id=3563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x30018}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.364182266s ago: executing program 3 (id=3565): setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x2}, 0x3c) r0 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)=']++*^\x00', 0x20000, &(0x7f0000000040)={@align=0x7fff, {0x8, 0x9, 0xb0e2, 0x100000000}}, 0x1a, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffff046}) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bind$packet(r2, &(0x7f0000000140)={0x11, 0x9, r3, 0x1, 0x1}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x2}, 0x3c) (async) socket$kcm(0x10, 0x2, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)=']++*^\x00', 0x20000, &(0x7f0000000040)={@align=0x7fff, {0x8, 0x9, 0xb0e2, 0x100000000}}, 0x1a, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffff046}) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async) bind$packet(r2, &(0x7f0000000140)={0x11, 0x9, r3, 0x1, 0x1}, 0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) (async) 1.30510432s ago: executing program 1 (id=3566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc0100000000000000000000001a0000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 1.272469388s ago: executing program 4 (id=3567): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e009a3c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}, {&(0x7f0000000f80)="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", 0x130}], 0x5}, 0x8bb3a321ef809a) 1.161282714s ago: executing program 3 (id=3568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f962330000800030034"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 1.160825421s ago: executing program 1 (id=3569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="abb61835a4b6b45c83026913089b9b304125dca61f1454f2fd9ce1dfc02260435cb4348970f84382b8cecd5fb599be298dafc9c80898e83461cc63267110006b9aa146a40edf38109970e293a3ccf41a606ad9da28d29221ef9a007e9b76d2db40f574", &(0x7f0000000240)=""/92, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ddff00"/28], 0x48) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000140)="96c3f1", 0x3}], 0x1}}, {{&(0x7f0000002980)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002a80)=[{&(0x7f00000029c0)="93", 0x1}], 0x1}}], 0x2, 0x4040040) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socket(0x2, 0x80805, 0x0) (async, rerun: 64) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xbae}, 0x1c) 1.092264163s ago: executing program 3 (id=3570): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @loopback, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@local, r1}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) bind$x25(r0, &(0x7f00000003c0), 0x12) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x140b, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x801) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xee, 0xc9, 0x80}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000740)={r5, &(0x7f0000000640)='\x00', 0x100, &(0x7f0000000680)={@align=0x7fffffff, {0xff, 0x2, 0x7fffffff, 0x4f}}, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x3}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r8, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x40051) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000900)={{0x0, 0x8, 0x7, 0x8, 0x7, 0x200000, 0x80000001, 0x4, 0x53b, 0x5, 0x0, 0x8, 0x1, 0xfffffffffffffffb, 0x8}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000b80)={{0x0, 0x3, 0xcd4e, 0xffff, 0x4, 0x8, 0x40000000000, 0x3ff, 0x100, 0x3, 0x800, 0x5, 0xa5, 0x80000000, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001b80)={{0x0, 0x8001, 0x8000000000000001, 0x1, 0x1ff, 0x9, 0x8, 0x7, 0x9, 0x9, 0x5, 0x21, 0x3, 0x0, 0x7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001c40)={0x0, 0x0, "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", "c9a9ba1ba8ca8e3d1f86864c849e13a7c601c825f8fb70a21a49100ceabf644bead91b1177e8a9434bd1800fa379cd28dc8d5e0288cc58103771c6a6c48801ba514fc3fddcdbac0071bb2cb62964e2da7a8cf84a5431b2f027f26b2e88a919924f28d74678abea2844c925a08999319752987a86ca178cabddc20d5642ce23be8f1ea27c98e8da5744ef4b27d8b70a5a704d48ebbca95436c66cfdd78a0dffe3d396cc69c0cfcce7e060ab2197b2a831522524eace1ba35d6e3c2cec934c1f028e5f4ae526eaba82d5ac19d63cd8ad8f00b33ea7cd892b440510d6149d37ee14290198db1ed1633a6766ccb0b91e15545c9c35f4ce6b775c7a5a459d99d23ba05371d76b5198c88cc96f50dc6a90be5231c4274ffc4ca875edf8587d82a91831767b7386cc183c7eef6a5df2bb800bf5062d1aa3e4783734d8647aaffd027a765d1d8d93370e5571de1fbd2dee7aa8fa6d238c3c9381c8a259c201ac81cb601573cddbc4b53479b1dad2869c805f5ffcba0a5eab6cbd44b985d483f6d99e1d17b498a845ea8a70e09f1fbd85260e6fb194599e10edb90dd3a8ccbda5150079645f4be3000bdcfe44c3380d8146f69fb2c5d7f26ce1cdcf56276bf5180858d929a0f7e0528014ca804c688eaadd7d1d29fd243750da7fce018bfa1e541af2d9ef19957db2dc1d50e14fc27e326e7f6a0cffc02313dd550aaa0c3375c85039fac637db8952f04218e4a2df45cd029bb2be6e59037fcf828e599d6f5fdf3dd1b7425f2b8d86215ac89f56ce57631d9f77284fe081274590512749f7d3fa04201e69c91f81518d5c2d59590042d529bffc5337727ee4e5d814d1afbcb97155a59972a4283e350722bee828e00e864b957327173cf3d3c026d793faeadf715be4ab49d5d61cd59316018f8a06e3276fa7c7f9a4129b3012429aa75165c5810e27c9c00058577aeb9aba7e8fd483e70af7dbf4f057963832bdcd25372f67962a5f89eeda9d1d6a17ccf613204c0b7fb23af02cc11a7daa6a0dbfa74359bed178013cad479fa1d039b5d612f0d621f70b254d493d62813a5c3054174d4d9a08406d633ea3cb29e3e3aa3deb0bb7550d7af86a4ceb5cc5586d94a08720cfccd819219e411db93f2a6a89056305b6469bb8ea60b8f69ed25b0f4c9fceaf2ce2f49a0bb4a029e7bc9ff9a9cbb98d16a78d181a747a05ff144fbd04b8a8b49e9ddca864604fc40eded07cad64de410099230213f7cb37cb773a81b097ace0815d913064c7e9a28ac2bfebfda5c6fe58dd9af267d9b277ef79004dcb4adaf305b5e129ea1d241632a6d33f68b478c70e92b4fbb72136e38c95eafbb33c1341918105b26b0d4fc1cc1b4b6cab6ea7f8becbe7f6895b43f938488a285c857ce8a442e51ecf51a4c5695f6734dbee5ec600dee4dfe7b2d006e6b08f8a46897edfad7c37f78489ac9421638c175a75174f5bcfe0ffdf1f291595370bb1b200645601d05d6654210a43cbaf466c3815ecf0af79a956374a9b6555091aa9388b905e240a618e92da7a4e7350ae795f2def902e5f50740517b3614dfb99f50353d7ed03def7c612e0ac568f510592d5e85b88f96ba0785b23cea8c88ead530b07024ea0dfd6f5b95657f6c5519895494fed7a37e47b31a78c16ca24b2084f3d24eebdd152e1ba11d0a2d1f841065d7b25a4db36dbdea1253e559795168bab54396334807fe7599529c65e22c29c0dba9b64f45018cd9a2692248bb4a0dc72443f6992d73027cba1d33119150ddca029eb1082cccbb28de5c8f5b7609972aace823fc38c81ed0ca8a8b3295e609b2944c519536294872fd3797a042b59954ae480ac47b7f2f94088cef9c632ff4fd8a8c620b0628082985680e224c1761a542bdf5845ae80f2ab92e4923b072542cf7f4a7b67801b1686dcdc17ddcfadaddfce767b3c2a379fbed743ba7e8b30de4332ef5f8f421059f0305fcc091ce7bf99325d092a54d185c1169c4087e8f3f837586e0cb9943c98c156724cf5c92060e53417ff195d2c7f87e548b6fe87c3acb11af7b204645f6bfc2f8cd6a1e647ff0b1524d94379138343017402637566933910337b64cda481fb51606091d65c434da4667be551e14831611035af4e748bd9170a3dc27072228ea4534a2193165ba7ea04de1538adf49caa0adf285d33d9da5e474a4e56407da42edf8c3fbe495c4f655806aad46747f23c223a462076c641b88b786b129ee8839bccc8320ebc27ab5d24aec4f3489e51e9fb454c8428aaf5428aa658249360da5d63eb78ec96af8959fe2a29e4b7139b0f887138405cc40854e5c6d60b0b367fde015850b696e1904496466060a076ad113ba398b96253f7af1e4db8a4fe28bd0cb2029691029c30c2e9cc31c3f5cb2a9bd0c0bf46789ac01224a82d78aea1849e98a903f920b8b005f2e4b5e35c267edcdce265f3ebd9d4f471acd3af198bde67cf1dcbf123ba9f4012811c43a49a3b51a85726e36ff28d9c91e1b3cacd12f0be78da596256c3c9fd06c70f15512d345e472542639a73d7cc8fdf15f0164e1adbffa1753ee8de2d14c27ccbce3e9a12cef43eae025b5617ebca4c56c3a1016e8561adefe6fce90a80221e4f9b396a8a56cde6dd40ea5c51966da67a90a5d5841adfb2a6e5f6d37978824d33da129f0982118c4ad987bff44e72518cbe6be6e714898c9c91d6a6a988012c7dc9054bbf4ed8c78b4f056e8a566447a9e0e238cd2df460640ed4b67ed70764fb3897a9baa29fee09bbd3d21c7b3e504d4cd97ba707b3ae906df35768378d60d364186d78c759173434d864eb9f648227c53c4c56dda9e6fe4cb3850c32fd9c00a535dba27ba75705bee95a130d4dcb1658dc65f0ad9d9e2046435427a59bab3fdf4954f8387576621d0e08dec1af0b2c6e804e5dc034e90c8a62a689fba6d25828745a508edd6316dcd221ee608f264a705039ec732f85140b45a8fa7e66b09e380bd3627ebb11fb6372d50014bde48ec2bec80edea0ee7af39b9247557583de278442808efa080fdabfd131c1c3d1a37358b6cde80e514b9336d7254c541d26f3065e23094fcfac1358175f34006c3f1cb188e68b160ad64777b0ccae05293af17f3422c87340e58db9caf9097e60898f9971071d8e17da9f6b5d2b1ba568340460748b3078ebeeed32fcac4efd646cde9b984b7a1fa9cdca1668a882e6c5e2c73ce95e928141a0619faa342a7fb640ffcdf2e8557d3ee8085b1a1cfcda7e8f0c240700c16e5de499e104674b4dc824ee81cdf390e1797082d6bf0ed1a665ee8994fe2b39a299ddf864379afaa7798171b453c11faca9543997716101e2ab6aee0b8c8a94ca556884fdd2458c5f1a7a6b4bfc91db59147352273cd307dcccf9e0eff2265604e3521567725ed7358b74f5769e1d802f7046f8b8ece5f43d8fa0e20e6a85c127bd53a6ea4dc2f099abe0c8f574e384b73eb6a9fc62978253500779863cdfb472f44ac0a4c9473a557fb9e0c7034f027b1926dc6032437b56b13b9b2ea2f418a9d8f1625f60ab9d6d3226a0eb478914bc147dc594db84ad7b7b2d72295ae62341aaf9d239a0bf0dc98fa6c500091752f2e64f74171e823c8f7beed7a88795874386fabbda77965b4d27cb6988cb0eb46fffcbd8f14a3bf5ac202d3c5bfa954ca715ad48e7c15e7353cd2b2ad6ebdcd420a1e6907d70699896a81eb74d56ce6976b1673e94aa7fafccf8044753fb3a2833eb9cacd92577e0379ffac4c043340651bb32825b05fd8312093b7a2f4cb25b40106db4bbf06d04a98eb3e850c62dfbe4464d1919a74d741a87fff01bfadeb4473cc8984fe5cb29a137e3ec9b58f39e95b3a2297efd775566e212c641951a7fa2ece7e652ec1fbdbd34a73e224891490a8af3e5ad92f3064cfa259352fb8b0269f56c273985ad00ba93252dfe0e51d8e46927d5dcf310851aba98dffa10e6fd2d17f27183064ec536048025f922d28a93d774083e1127009c190a8849b0a4239e1d26661905933cc3822c2bde13fb879f5decfdd49d98395a18fec8d5a674b5f675e0c4b19043443835946714347d5e15c002853ab29be84ed7a7ebaa35ac4ba75ebac259b1a75a2d5c05284e54bca88517857db04170c5a95c8d7b92b3d31580c23e084169d6a3e80093d0795a8655f51d08d1ec56eb157e2bff673b12e6d9a43980e48b7ba9302085750a7da68fa809b0c0c66b94712b431ca32ee82d334cb30905c9655204532260c302b868ec1e63f5014f58b1c35448322a1edd40c8c1ba5183acd292863195ecdc33fed7bdb2c0bd9b5674fb7646ab9b5c1aa2e19308169b122438747564d521341e1bd9c458f178d8973aca40a444f0e5482848244da4bab3d43b818c7eb2d8b4382a3dc94efb8f7f86c6c4a3006eea2217726728b89b1d2280d9594b13b5888b2822bccab560f0471a64719d0dd4defb94712b87704465341aa4bdee2a643cae50723fbcefd1a11a943aef0cf482f8c58df45d082ba851f076c7ec361ce5d799e87527007b2b2d0a26caa0dc2a70132b69bb552ea7f6dbad864255ee81bd9ce24dbe097b5d8b0c77148f0a2a762924ccc906b7cec294a55d9aebe275a9ca3ee063711c348408e68c60cf63d5165d5edbf24f6bc32c2ed1aabd3fc6b66de2fb1a7ae50a3cac08076a9c542007a0b895ddf82ddc8b05ee8855eb3b4025177d8f87f773958029bbb9c49121afcadc47e8e875b436596744d95e2a845a87fed8ec2e0890ba922fd7989f61662f88d979d86b0734b640334367b7b90b73c45e9493172026c33f0c22c3f3ff74eade65ce4d67853809b9f7cc5261cb20b336d4125503f4b743b61b48b86e732bccbe8a446ec5f80017625b0df807339ace2ccf77ae23a3a0f0e4a889944fc41360259035e49f6e8fe9dcf7f10cf1bcb60ee51460057b3f9e39b44467f961e838dd3e3c5965888d826b5423bc45cfd1c6366557d22e4d1a1ec26054da19230edb5ba81e0558b972174532b44746efcdcaa606bd16f12e544cd6c0b94937a396132adc3498e263568ccbe4e1e589ecf618fd5027252ea05b9ebc8595b5af4ec07fad6c693421bd6f24a6e23433c0832ae32503ec3d0aeaa0dda054bd5c4628b6dc47afd030020b0b48597c4d805a4472f4ec601ec6550b6adef26900f0dfbe2cb582b970f9f0aeb902b9cc56a835e72b74ea4fb386026b835ffd61ab6fa4ea9c9661577bc5f79d2c3ddc905bd5fc8daaf5b84a7062f8a7f035c9655eea8d7ecef83ece9ab999c6960bc8a880c6ac15281d5e73da18c00dc22a599e3ce73826562e541bb9f35b9aec6b26aaf9aa9c1306a52608a27908b5fbcc3e5a26c5d7da0ac1d22be75098bb417827ee08a6ca8febfa11788ef69e412f9a17c15ee2516cb96ea6d177d1425ae9aa7b7db695f6"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002c40)={{0x0, 0x6, 0x0, 0x6, 0x9, 0x2, 0x9, 0x5, 0xfff, 0x9, 0xc7d0, 0xaf6c, 0x3f702a8, 0x0, 0x8}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000004c40)={{0x0, 0x1, 0x8, 0x100000001, 0xa59, 0x6, 0x6, 0x9, 0x7, 0x8, 0x6, 0x3, 0xc, 0x6, 0x6d}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000005c40)={0xd7e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8a, "8f5d6a4d7d3f8e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006c40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000006e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000007040)={{0x0, 0x126235ee, 0xbef7, 0xffff, 0x8d3c, 0x9, 0xffffffffffff7fff, 0x5, 0x9, 0x3fb, 0xf, 0x8000000000000001, 0x0, 0x101, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000008040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00001159c0)={0x1, [{r9, r10}, {r11}, {r12, r13}, {r14, r15}, {r16, r17}, {r18, r19}, {r20, r21}], 0x2, "6c79eab07b7fbe"}) 1.035363986s ago: executing program 1 (id=3571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001c80)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x1, 0x40, 0x4255, 0x4}, {0x80, 0xa382b932ee83be1b, 0x1, 0x8, 0x1ff, 0x5}, 0x1, 0x80000000, 0x1b39}}, @TCA_TBF_RATE64={0xc, 0x4, 0xe8eb9bca25e8f4c7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x98}, 0x40000) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x15, 0xa, 0x204, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xaf, 0x8, "c43a1c560cf09887ddf462ab09ea8d0690aee358a4bc43a45dbbff30461c25a9d52a3d5d2223afd49b64a9460aefb74fbf6ada2ada7b9ce64ac14586de46dbe5e8dbfeefa4f6bb765d31d9265de2067dce5c5e389f959cb6e54f1b5ba4d160e89e7a5a5bd41ca2c75bc42a72558410357a4ea9d84feb4a538d71b3e27bf1d22f767c0ed2c09155ec0a9baab1c6244c56ff8ff76564859611ec01e6f5fab408a4a488d928cbe420e64624e6"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010400000000000000000000000005000400000000000900020073797a30000000000c0007800800120000000000050095e56668be3c621885a45a8f1b940500020000000500010006000000120003006861"], 0x58}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400007}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 900.92235ms ago: executing program 4 (id=3572): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000800000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000d11300"/28], 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002c00070100fa000000dbdf25037c0000080001800d000000100002800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c800}, 0xc010) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002100)={r2, 0x0, 0x1000, 0x0, &(0x7f00000010c0)="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", 0x0, 0x2, 0x0, 0x1f, 0x0, &(0x7f00000020c0)="a7eae8b3952a23e0654b1fee7e62e545b3460518e61ffdc84abc3f3bee86e2", 0x0, 0x2, 0x0, 0x401}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 773.171415ms ago: executing program 2 (id=3573): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2, [], [], [0x4000]}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) 740.176763ms ago: executing program 0 (id=3574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000000000fff50000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) 685.745855ms ago: executing program 4 (id=3575): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1d32000000000000000010000000140000000000ad0ef26ce80da23d048000002d80e344d802c8f500bb"], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) listen(r2, 0xffffffe0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000180)={'nr0\x00', @ifru_ivalue=0x26}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x1) 685.057786ms ago: executing program 3 (id=3576): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=""/250, &(0x7f0000000080)=0xfa) 684.39421ms ago: executing program 1 (id=3577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf4e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@acquire={0x128, 0x17, 0x400, 0x0, 0x0, {{@in=@loopback}, @in=@dev, {@in6=@mcast2, @in=@broadcast}, {{@in=@dev, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1a0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}}}, 0x128}}, 0x0) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async) poll(&(0x7f0000002100)=[{r3, 0x400}], 0x1, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000002c0)={0x1d, r6}, 0x10) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/411], 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 576.800841ms ago: executing program 2 (id=3578): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c0001"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="09010000", @ANYRES16=r4, @ANYBLOB="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"], 0x114}}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000002d000100000008000000000000000000", @ANYRES32, @ANYBLOB="0b000080976b640868603000910001"], 0xb8}], 0x1}, 0x0) 552.231621ms ago: executing program 0 (id=3579): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000002c0)="6623d6b1fc6c5f1a03e03d2f51d7c5ee1498a07bce9b8e588b2531d25fb5da2cad59ff9cbdc758a2b395fcdad9f280ab2617a2b340b14e804ce4d42450ac7f68816a2dc3f30aa0d82fa3dab0a28847c73644042d357f3f701241880b2e078882edc5bcee73b56f898e2d727210cb65b2d276f569", &(0x7f0000000340)=""/39}, 0x20) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x3ff, 0x7cca, 0x7ff, 0x7, 0x1, 0x2, 0x9, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x8, 0x3, 0x2, 0x101}}, &(0x7f00000000c0)=0xb0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x1}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f00000001c0)=0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) 521.000972ms ago: executing program 4 (id=3580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002e40)="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", 0xff}], 0x1}}], 0x1, 0xbac3b45ebcb1b94a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x38, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008054}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="e281438f365c56a51bbf4d6edf5111e6a7257a261bc7d15d62a251a32e39da46d8ce7065a24e699391bc004fbc673a7a2ed7ef44492ea45e4395d7095301d5e9ba1a7cfcb3180d1a9b805d36ff7ac6cf28ecf7f3aaf80315a16c83d9a673d1777d", @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf25530000000c009900810000005d000000"], 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x8040) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000)=0x7, 0x4) 461.186603ms ago: executing program 2 (id=3581): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x804) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r3, 0xf6695000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xdd1, 0xffbe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x804) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r3, 0xf6695000) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xdd1, 0xffbe) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) 312.137087ms ago: executing program 3 (id=3582): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e009a3c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355e9254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c41231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a34484005b58a703899ad2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e51619967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf", 0xc9c}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}, {&(0x7f0000000f80)="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", 0x130}], 0x5}, 0x8bb3a321ef809a) 306.332187ms ago: executing program 0 (id=3583): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x7ffffffe, 0x0, 0x0, 0x42804}, 0x10) 233.178328ms ago: executing program 2 (id=3584): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffffb8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)=[{0x40, 0x109, 0x7f, "cfb03863012106f42adab3e68e2c73a748b487b17644cf4aa5693ff16cdf19a1353343e297de06739a30464272"}, {0xb8, 0x10d, 0x6, "6a8b732cda37494c560fe2bdbcd829957b42733337ab720c290244361846c93dbb8855c6235f8814ec3ce237712137f58a6bc9d288c9dfb67cd3c90eb529109128105a565dfa7bd32efb3515286547b767ab693acaf050d1af17dbeee54aa566131b6f0708574dc2eda7ee50cf2b58af4cbd906d9dd16d45a7b5f29b8fed45c88cf9830dfb6de37c5b8f9023be0dbc782c1e83a17fe75c1554c2fedc817d43e62c972f34c381"}, {0x98, 0x119, 0x8001, "25952d924dbb43094a2d56877b3c6cf8b9a76b961c35259c5dff8234f5767a711a5fc4d5d46d5fc4b3c1508c78c307795791a99db46068e45159a51ff1f87faf61552bf9f3d345c333ccdfcfce363d931579ca67892c91bbd81be4acd5534d02207a6147e53144320ed593202b2f998714d8e4ba7ee3d08a0e1e5cd5fcd232e4374e5d1b"}, {0xa8, 0x116, 0x5, "6d8e708f00e408cb33a04d52548b56638351a72fb08f5cf6d92cc64a209d3e063fe37ac7cef5486f8f706a25b76714a14e6aa3c0b5a35d7371c9661eb28a7996c20eeda4a64a631806512101800000000000008d551e87d2966468aa4a8719758761b922a1cfa4d2d041b81916dd3f60bdaddf6f2b13c43673438645ea987e6843eff10f8be22e62b0e5380c765a949ba9ec6b61b40f1d99"}, {0xa0, 0x185, 0x7, "00e4780f5289a8cb95458267ffba5025917eea7f98342b409cb1c215ffc48b8adc9c9abfa0a7b4200630cfeb8ac07e8cb447ab5c746013c3c0c326a670fa4f59061bc2390677368a86063ca443588f31ba8e0803be6e6572fcfdb567105dae4877b481f4c65aa371b329724eb17945274c94e329312a4b3ef6b49858149027809752be4c7775508c398aaa8cb2"}, {0x28, 0x1, 0x2, "5a94a605ecbca33caf84ef7479aed81fd6fb2987"}], 0x300}, 0x40803) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x100080c5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 219.075476ms ago: executing program 4 (id=3585): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (fail_nth: 59) 198.19971ms ago: executing program 0 (id=3586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80) 36.482777ms ago: executing program 0 (id=3587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x800) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x4, 0x100, @void}}}}}}}}, 0x36) 35.216691ms ago: executing program 4 (id=3588): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x44}, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) 0s ago: executing program 2 (id=3589): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000100800007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): mode [ 277.168002][T12670] syzkaller0: entered allmulticast mode [ 277.197421][T12666] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.591840][T12699] syzkaller0: entered promiscuous mode [ 278.597566][T12699] syzkaller0: entered allmulticast mode [ 278.820144][T12712] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 278.867427][T12712] __nla_validate_parse: 3 callbacks suppressed [ 278.867446][T12712] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.2203'. [ 278.885816][T12716] bond2: Unable to set down delay as MII monitoring is disabled [ 278.906131][T12716] bond2 (unregistering): Released all slaves [ 279.354441][T12749] syzkaller0: entered promiscuous mode [ 279.360125][T12749] syzkaller0: entered allmulticast mode [ 279.371478][T12753] netlink: 'syz.3.2217': attribute type 22 has an invalid length. [ 279.380797][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 279.395803][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 279.450636][ T1145] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.469582][ T1145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.486482][ T1145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.502856][ T1145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.576630][T12771] netlink: 'syz.3.2223': attribute type 10 has an invalid length. [ 279.587479][T12771] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2223'. [ 279.713222][T12778] bridge0: entered allmulticast mode [ 279.720490][T12779] team0: No ports can be present during mode change [ 279.737283][T12778] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 279.827936][T12778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.984696][T12797] syzkaller0: entered promiscuous mode [ 279.990324][T12797] syzkaller0: entered allmulticast mode [ 280.037925][T12801] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2233'. [ 280.064568][T12801] netlink: 582 bytes leftover after parsing attributes in process `syz.2.2233'. [ 280.073654][T12801] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2233'. [ 281.320892][T12818] ipvlan2: entered allmulticast mode [ 281.337911][T12818] batman_adv: batadv0: Adding interface: ipvlan2 [ 281.347545][T12818] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.382254][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.393718][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.405668][T12818] batman_adv: batadv0: Interface activated: ipvlan2 [ 281.534916][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 281.599116][T12838] validate_nla: 3 callbacks suppressed [ 281.599135][T12838] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 281.652582][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2248'. [ 281.774696][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 281.791925][T12848] tipc: Started in network mode [ 281.804835][T12848] tipc: Node identity ac14140f, cluster identity 4711 [ 281.850061][T12848] tipc: New replicast peer: 255.255.255.255 [ 281.879885][T12848] tipc: Enabled bearer , priority 10 [ 281.892128][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 282.446141][T12885] syzkaller0: entered promiscuous mode [ 282.452831][T12885] syzkaller0: entered allmulticast mode [ 282.745232][T12916] syzkaller0: entered promiscuous mode [ 282.750747][T12916] syzkaller0: entered allmulticast mode [ 282.983996][ T10] tipc: Node number set to 2886997007 [ 283.446162][T12904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.461699][T12942] bond3: entered promiscuous mode [ 283.469507][T12942] bond3: entered allmulticast mode [ 283.475481][T12942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.655308][T12951] netlink: 'syz.4.2288': attribute type 21 has an invalid length. [ 283.675771][T12951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.698189][T12951] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.749699][T12955] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.758857][T12955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.939155][T12968] syzkaller0: entered promiscuous mode [ 284.956256][T12968] syzkaller0: entered allmulticast mode [ 285.018759][T12978] __nla_validate_parse: 3 callbacks suppressed [ 285.018777][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 285.118054][T12982] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 285.152004][T12982] sctp: [Deprecated]: syz.3.2300 (pid 12982) Use of int in maxseg socket option. [ 285.152004][T12982] Use struct sctp_assoc_value instead [ 285.223061][T12989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2302'. [ 285.226033][T12990] x_tables: duplicate underflow at hook 1 [ 285.371673][T12997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2304'. [ 285.445870][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2307'. [ 285.564399][T13007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2308'. [ 285.649044][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 285.979645][T13019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.081471][T13021] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 286.097148][T13021] CPU: 0 UID: 0 PID: 13021 Comm: syz.0.2313 Not tainted syzkaller #0 PREEMPT(full) [ 286.097173][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.097186][T13021] Call Trace: [ 286.097194][T13021] [ 286.097202][T13021] dump_stack_lvl+0xe8/0x150 [ 286.097236][T13021] sysfs_warn_dup+0x8e/0xa0 [ 286.097264][T13021] sysfs_do_create_link_sd+0xc0/0x110 [ 286.097296][T13021] device_add_class_symlinks+0x1cf/0x240 [ 286.097324][T13021] device_add+0x475/0xb70 [ 286.097352][T13021] wiphy_register+0x1d73/0x2d50 [ 286.097399][T13021] ? __pfx_wiphy_register+0x10/0x10 [ 286.097426][T13021] ? __pfx_netdev_run_todo+0x10/0x10 [ 286.097450][T13021] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 286.097494][T13021] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 286.097523][T13021] ieee80211_register_hw+0x3562/0x4200 [ 286.097562][T13021] ? ieee80211_register_hw+0x1421/0x4200 [ 286.097597][T13021] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 286.097638][T13021] ? __hrtimer_setup+0x181/0x200 [ 286.097664][T13021] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 286.097695][T13021] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 286.097750][T13021] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 286.097773][T13021] ? kstrndup+0xbf/0x160 [ 286.097808][T13021] hwsim_new_radio_nl+0xf35/0x1bd0 [ 286.097855][T13021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.097890][T13021] ? rcu_is_watching+0x15/0xb0 [ 286.097917][T13021] ? trace_kmalloc+0x2a/0x110 [ 286.097944][T13021] ? __nla_parse+0x40/0x60 [ 286.097967][T13021] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 286.098000][T13021] genl_family_rcv_msg_doit+0x22a/0x330 [ 286.098031][T13021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.098068][T13021] ? bpf_lsm_capable+0x9/0x20 [ 286.098093][T13021] ? security_capable+0x7e/0x2c0 [ 286.098126][T13021] genl_rcv_msg+0x61c/0x7a0 [ 286.098155][T13021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.098177][T13021] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.098202][T13021] ? __lock_acquire+0x6b5/0x2cf0 [ 286.098238][T13021] netlink_rcv_skb+0x232/0x4b0 [ 286.098267][T13021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.098291][T13021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.098338][T13021] ? down_read+0x272/0x2e0 [ 286.098360][T13021] ? genl_rcv+0xd/0x40 [ 286.098383][T13021] genl_rcv+0x28/0x40 [ 286.098402][T13021] netlink_unicast+0x80f/0x9b0 [ 286.098438][T13021] ? __pfx_netlink_unicast+0x10/0x10 [ 286.098462][T13021] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 286.098493][T13021] ? netlink_sendmsg+0x650/0xb40 [ 286.098519][T13021] ? skb_put+0x11b/0x210 [ 286.098545][T13021] netlink_sendmsg+0x813/0xb40 [ 286.098583][T13021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.098615][T13021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.098644][T13021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.098670][T13021] ____sys_sendmsg+0x972/0x9f0 [ 286.098690][T13021] ? futex_unqueue+0x211/0x240 [ 286.098721][T13021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.098752][T13021] ? import_iovec+0x73/0xa0 [ 286.098777][T13021] ___sys_sendmsg+0x2a5/0x360 [ 286.098806][T13021] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.098835][T13021] ? futex_wait+0x29a/0x380 [ 286.098890][T13021] ? __fget_files+0x2a/0x420 [ 286.098917][T13021] ? __fget_files+0x3a0/0x420 [ 286.098956][T13021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 286.098981][T13021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.099013][T13021] ? rcu_is_watching+0x15/0xb0 [ 286.099052][T13021] do_syscall_64+0x14d/0xf80 [ 286.099073][T13021] ? trace_irq_disable+0x3b/0x150 [ 286.099100][T13021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.099119][T13021] ? clear_bhb_loop+0x40/0x90 [ 286.099143][T13021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.099162][T13021] RIP: 0033:0x7fb37119c799 [ 286.099181][T13021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.099198][T13021] RSP: 002b:00007fb36f3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.099218][T13021] RAX: ffffffffffffffda RBX: 00007fb371415fa0 RCX: 00007fb37119c799 [ 286.099233][T13021] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 286.099245][T13021] RBP: 00007fb371232c99 R08: 0000000000000000 R09: 0000000000000000 [ 286.099258][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.099270][T13021] R13: 00007fb371416038 R14: 00007fb371415fa0 R15: 00007fff46fae708 [ 286.099304][T13021] [ 286.609285][T13030] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2315'. [ 286.614314][T13031] macsec0: entered promiscuous mode [ 286.676538][T13032] macsec0: left promiscuous mode [ 286.681814][T13032] macsec0: left allmulticast mode [ 286.830839][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 286.856253][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 287.311130][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'. [ 287.413477][T13083] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 288.304947][T13148] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 288.537366][T13164] geneve2: entered promiscuous mode [ 289.403023][T13216] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 289.441629][T13216] bond2 (unregistering): Released all slaves [ 289.486037][T13226] tipc: Started in network mode [ 289.490948][T13226] tipc: Node identity 26e6c4f7ba96, cluster identity 4711 [ 289.498988][T13226] tipc: Enabled bearer , priority 0 [ 289.518332][T13229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.547848][T13225] tipc: Disabling bearer [ 289.911865][T13261] atomic_op ffff888028223198 conn xmit_atomic 0000000000000000 [ 290.458371][T13288] gtp0: entered promiscuous mode [ 290.469165][T13288] gtp0: entered allmulticast mode [ 290.903879][T13306] nbd16: detected capacity change from 0 to 63 [ 290.911751][ T5838] block nbd16: Receive control failed (result -32) [ 290.920522][ T5830] block nbd16: Receive control failed (result -32) [ 290.930292][T11169] block nbd16: Dead connection, failed to find a fallback [ 290.938719][T11169] block nbd16: shutting down sockets [ 290.944540][T11169] blk_print_req_error: 138 callbacks suppressed [ 290.944556][T11169] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.961162][T11169] buffer_io_error: 138 callbacks suppressed [ 290.961177][T11169] Buffer I/O error on dev nbd16, logical block 0, async page read [ 290.977111][T11169] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.988062][T11169] Buffer I/O error on dev nbd16, logical block 1, async page read [ 290.996315][T11169] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.006236][T11169] Buffer I/O error on dev nbd16, logical block 2, async page read [ 291.014508][T11169] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.024595][T11169] Buffer I/O error on dev nbd16, logical block 3, async page read [ 291.032504][T11169] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.042395][T11169] Buffer I/O error on dev nbd16, logical block 0, async page read [ 291.050813][T11169] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.074117][T11169] Buffer I/O error on dev nbd16, logical block 1, async page read [ 291.086874][T11169] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.111021][T11169] Buffer I/O error on dev nbd16, logical block 2, async page read [ 291.143576][T11169] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.181497][T11169] Buffer I/O error on dev nbd16, logical block 3, async page read [ 291.185662][T13326] __nla_validate_parse: 14 callbacks suppressed [ 291.185679][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'. [ 291.189915][T11169] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.225702][T11169] Buffer I/O error on dev nbd16, logical block 0, async page read [ 291.234347][T11169] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.246746][T11169] Buffer I/O error on dev nbd16, logical block 1, async page read [ 291.258493][T11169] ldm_validate_partition_table(): Disk read failed. [ 291.283581][T11169] Dev nbd16: unable to read RDB block 0 [ 291.290234][T11169] nbd16: unable to read partition table [ 291.299910][T11169] ldm_validate_partition_table(): Disk read failed. [ 291.307286][T11169] Dev nbd16: unable to read RDB block 0 [ 291.317044][T11169] nbd16: unable to read partition table [ 291.369549][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 291.509621][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2422'. [ 292.043055][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2430'. [ 292.051490][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2434'. [ 292.053631][T13381] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 292.068886][T13381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2433'. [ 292.082482][T13381] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 292.156612][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 292.233002][T13390] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2437'. [ 292.282015][T13393] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 292.325901][T13397] netlink: 'syz.3.2440': attribute type 21 has an invalid length. [ 292.344962][T13397] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2440'. [ 292.361561][T13393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.382648][T13399] bond2: (slave geneve2): making interface the new active one [ 292.406646][T13399] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 292.416318][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.429310][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.439161][T13397] netlink: 'syz.3.2440': attribute type 5 has an invalid length. [ 292.447757][T13397] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2440'. [ 292.458306][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.477798][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.665676][T13422] ip6t_srh: unknown srh match flags 4000 [ 292.671644][T13423] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 292.774989][T13423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.799361][T13424] vlan0: entered promiscuous mode [ 292.804674][T13424] bond3: entered promiscuous mode [ 292.809861][T13424] vlan0: entered allmulticast mode [ 292.853416][T13424] bond3: entered allmulticast mode [ 292.896060][T13434] ipvlan3: entered allmulticast mode [ 292.902750][T13434] batman_adv: batadv0: Adding interface: ipvlan3 [ 292.909860][T13434] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.980334][T13434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.013893][T13434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.024352][T13434] batman_adv: batadv0: Interface activated: ipvlan3 [ 293.286333][T13461] netlink: 'syz.2.2457': attribute type 10 has an invalid length. [ 293.483004][T13466] gre0: entered promiscuous mode [ 293.613683][T13475] syzkaller0: entered promiscuous mode [ 293.624876][T13475] syzkaller0: entered allmulticast mode [ 294.722525][T13554] syzkaller0: entered promiscuous mode [ 294.766316][T13554] 0: reclassify loop, rule prio 0, protocol 800 [ 295.204318][T13582] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 295.243980][T13582] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 295.272808][T13582] netlink: 'syz.0.2487': attribute type 8 has an invalid length. [ 295.355567][T13586] syzkaller0: entered promiscuous mode [ 295.361085][T13586] syzkaller0: entered allmulticast mode [ 296.531876][T13646] __nla_validate_parse: 13 callbacks suppressed [ 296.531895][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 296.588477][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 296.752946][T13657] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2507'. [ 296.940629][T13671] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.046115][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 297.312493][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 297.602099][T13705] syzkaller0: entered promiscuous mode [ 297.810249][T13722] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.2525'. [ 297.840007][T13722] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.2525'. [ 297.890897][T13722] IPv6: sit4: Disabled Multicast RS [ 297.946203][T13722] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2525'. [ 297.977808][T13722] netlink: 'syz.0.2525': attribute type 1 has an invalid length. [ 298.123088][T13746] delete_channel: no stack [ 299.007118][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 299.028501][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 299.110077][T13792] netlink: 'syz.1.2542': attribute type 1 has an invalid length. [ 299.159977][T13813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.177751][T13813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.310201][T13804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.060074][T13868] xt_cluster: node mask cannot exceed total number of nodes [ 300.105183][T13872] netlink: 'syz.2.2571': attribute type 39 has an invalid length. [ 300.680351][T13909] netlink: 'syz.3.2586': attribute type 6 has an invalid length. [ 300.828556][T13917] syzkaller0: entered promiscuous mode [ 300.834354][T13917] syzkaller0: entered allmulticast mode [ 300.940671][T13928] syzkaller0: entered promiscuous mode [ 300.967225][T13930] macvlan3: entered allmulticast mode [ 301.057598][T13930] veth3: entered allmulticast mode [ 301.566124][T13963] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 301.689417][T13963] bond7 (unregistering): Released all slaves [ 302.027963][T13990] __nla_validate_parse: 13 callbacks suppressed [ 302.027982][T13990] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2617'. [ 302.070069][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 302.134239][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 302.233649][T14001] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 302.242695][T14001] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2621'. [ 302.272512][T14001] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2621'. [ 302.274123][T14004] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 302.307323][T14001] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2621'. [ 302.367810][T14014] syzkaller0: entered promiscuous mode [ 302.383402][T14014] syzkaller0: entered allmulticast mode [ 302.406415][T14015] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 302.636756][T14042] IPVS: length: 137 != 8 [ 302.793289][T14046] syzkaller0: entered promiscuous mode [ 302.799580][T14046] syzkaller0: entered allmulticast mode [ 303.053112][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'. [ 303.242098][T14076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'. [ 303.427619][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 303.456455][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 303.598042][T14097] lo: left promiscuous mode [ 303.602600][T14097] lo: entered allmulticast mode [ 303.617744][T14097] tunl0: left promiscuous mode [ 303.630119][T14097] tunl0: entered allmulticast mode [ 303.644604][T14097] gre0: left promiscuous mode [ 303.653048][T14097] gre0: entered allmulticast mode [ 303.660188][T14097] gretap0: left promiscuous mode [ 303.668406][T14107] x_tables: duplicate underflow at hook 3 [ 303.680661][T14097] gretap0: entered allmulticast mode [ 303.686498][T14097] erspan0: left promiscuous mode [ 303.691561][T14097] erspan0: entered allmulticast mode [ 303.698061][T14097] ip_vti0: left promiscuous mode [ 303.703021][T14097] ip_vti0: entered allmulticast mode [ 303.709187][T14097] ip6_vti0: entered allmulticast mode [ 303.715537][T14097] sit0: entered allmulticast mode [ 303.721235][T14097] ip6tnl0: entered allmulticast mode [ 303.727550][T14097] ip6gre0: entered allmulticast mode [ 303.733747][T14097] syz_tun: entered allmulticast mode [ 303.744206][T14097] ip6gretap0: entered allmulticast mode [ 303.752903][T14097] vcan0: entered allmulticast mode [ 303.759574][T14097] bond0: entered allmulticast mode [ 303.765785][T14097] team0: entered allmulticast mode [ 303.771812][T14097] nlmon0: entered allmulticast mode [ 303.777907][T14097] caif0: entered allmulticast mode [ 303.785432][T14097] @: entered allmulticast mode [ 303.792397][T14097] bridge1: entered allmulticast mode [ 303.800837][T14097] bond3: left promiscuous mode [ 303.806509][T14097] vlan0: entered allmulticast mode [ 303.824395][ T73] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.852509][ T73] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.871606][ T73] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.881000][ T73] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.207951][T14138] netlink: 'syz.2.2663': attribute type 26 has an invalid length. [ 304.243286][T14140] lo: entered promiscuous mode [ 304.253412][T14140] lo: left allmulticast mode [ 304.259657][T14140] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 304.269262][T14140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.286098][T14138] netlink: 'syz.2.2663': attribute type 26 has an invalid length. [ 304.623440][T14174] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 304.942845][T14192] bond3 (unregistering): Released all slaves [ 304.950876][T14196] sctp: [Deprecated]: syz.1.2682 (pid 14196) Use of int in maxseg socket option. [ 304.950876][T14196] Use struct sctp_assoc_value instead [ 305.119093][T14212] netlink: 'syz.2.2684': attribute type 7 has an invalid length. [ 305.434850][T14226] openvswitch: netlink: Flow actions attr not present in new flow. [ 305.495847][T14230] netlink: 'syz.3.2692': attribute type 1 has an invalid length. [ 305.657284][T14240] netlink: 'syz.2.2695': attribute type 8 has an invalid length. [ 305.863507][T14247] xt_TCPMSS: Only works on TCP SYN packets [ 305.932849][T14255] netlink: zone id is out of range [ 305.958526][T14255] netlink: zone id is out of range [ 305.977507][T14249] netlink: set zone limit has 4 unknown bytes [ 306.005932][T14255] netlink: zone id is out of range [ 306.011099][T14255] netlink: zone id is out of range [ 306.058551][T14255] netlink: zone id is out of range [ 306.079290][T14255] netlink: zone id is out of range [ 306.093938][T14255] netlink: zone id is out of range [ 306.121451][T14262] veth0_to_bridge: entered promiscuous mode [ 306.134402][T14261] veth0_to_bridge: left promiscuous mode [ 306.185015][T14265] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 306.468417][T14287] syzkaller0: entered promiscuous mode [ 306.500680][T14287] syzkaller0: entered allmulticast mode [ 306.701506][T14305] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 306.723557][T14305] bond3 (unregistering): Released all slaves [ 306.798791][T14314] delete_channel: no stack [ 306.909250][T14308] syzkaller0: entered promiscuous mode [ 306.915106][T14308] syzkaller0: entered allmulticast mode [ 306.939798][T14308] netlink: 'syz.2.2716': attribute type 2 has an invalid length. [ 307.318804][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.334382][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.342458][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.362253][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.376002][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.367813][T14341] __nla_validate_parse: 20 callbacks suppressed [ 308.367831][T14341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2725'. [ 308.567779][T14343] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 308.625781][T14343] bond5 (unregistering): Released all slaves [ 308.770509][T14355] syzkaller0: entered promiscuous mode [ 308.838005][T14355] syzkaller0: entered allmulticast mode [ 309.008322][T14369] vlan1: entered allmulticast mode [ 309.388740][T14338] chnl_net:caif_netlink_parms(): no params data found [ 309.455025][ T5838] Bluetooth: hci5: command tx timeout [ 309.625793][T14338] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.644508][T14338] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.662595][T14338] bridge_slave_0: entered allmulticast mode [ 309.690651][T14338] bridge_slave_0: entered promiscuous mode [ 309.702408][T14338] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.709777][T14338] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.717562][T14338] bridge_slave_1: entered allmulticast mode [ 309.725364][T14338] bridge_slave_1: entered promiscuous mode [ 309.832803][T14338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.865285][T14338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.983008][T14338] team0: Port device team_slave_0 added [ 310.023447][T14338] team0: Port device team_slave_1 added [ 310.096700][T14338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.104531][T14338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.136148][T14338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.153075][T14338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.160725][T14338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.188281][T14338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.217298][T14437] ip6tnl3: entered allmulticast mode [ 310.262845][T14338] hsr_slave_0: entered promiscuous mode [ 310.269722][T14338] hsr_slave_1: entered promiscuous mode [ 310.277019][T14338] debugfs: 'hsr0' already exists in 'hsr' [ 310.282843][T14338] Cannot create hsr debugfs directory [ 310.766838][T14466] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 310.797761][T14462] bond0: (slave bond_slave_0): Releasing backup interface [ 310.819977][T14462] bond0: (slave bond_slave_1): Releasing backup interface [ 310.831043][T14462] team0: Port device team_slave_0 removed [ 310.845748][T14462] team0: Port device team_slave_1 removed [ 310.854695][T14462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.882924][T14462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.890962][T14462] net_ratelimit: 156 callbacks suppressed [ 310.890977][T14462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.915656][T14463] team0: Mode changed to "random" [ 310.936346][T14471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2759'. [ 310.954755][T14465] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 311.167106][T14493] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2767'. [ 311.342028][T14338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.362220][T14338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.414927][T14338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.438474][T14338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.534474][ T5838] Bluetooth: hci5: command tx timeout [ 311.683143][T14338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.712687][T14338] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.726736][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.733977][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.786242][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.793426][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.868796][T14535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2780'. [ 311.906951][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2780'. [ 312.091032][T14545] Unsupported ieee802154 address type: 0 [ 312.107482][T14547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.159798][T14547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.197966][T14545] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 312.213153][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'. [ 312.229865][T14545] : left allmulticast mode [ 312.237053][T14545] : entered allmulticast mode [ 312.242049][T14545] team0: Device is of different type [ 312.255613][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'. [ 312.289916][T14338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.594255][T14562] openvswitch: netlink: IP tunnel dst address not specified [ 313.349546][T14338] veth0_vlan: entered promiscuous mode [ 313.411176][T14338] veth1_vlan: entered promiscuous mode [ 313.511823][T14338] veth0_macvtap: entered promiscuous mode [ 313.522552][T14338] veth1_macvtap: entered promiscuous mode [ 313.546509][T14338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.561584][T14338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.586833][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.597518][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.604405][T14578] nbd17: detected capacity change from 0 to 63 [ 313.617215][ T5826] Bluetooth: hci5: command tx timeout [ 313.627689][ T5838] block nbd17: Receive control failed (result -104) [ 313.627793][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.636433][ T5830] block nbd17: Receive control failed (result -32) [ 313.656497][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.761217][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 313.777716][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2798'. [ 313.793242][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.814675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.852435][T14602] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 313.862404][T14602] netlink: 'syz.1.2797': attribute type 3 has an invalid length. [ 313.873376][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.888293][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.271747][T14626] raw_sendmsg: syz.0.2806 forgot to set AF_INET. Fix it! [ 314.289511][T14627] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.505927][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'. [ 314.529951][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 314.553282][T14649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2812'. [ 314.572330][T14654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2814'. [ 314.622847][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2815'. [ 314.633242][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'. [ 314.730197][T14665] netlink: 'syz.1.2818': attribute type 24 has an invalid length. [ 314.946282][T14680] Cannot find add_set index 0 as target [ 315.010261][T14682] nft_compat: unsupported protocol 0 [ 315.122034][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2826'. [ 315.131589][T14694] FAULT_INJECTION: forcing a failure. [ 315.131589][T14694] name failslab, interval 1, probability 0, space 0, times 0 [ 315.149093][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'. [ 315.152970][T14694] CPU: 1 UID: 0 PID: 14694 Comm: syz.3.2827 Not tainted syzkaller #0 PREEMPT(full) [ 315.152997][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.153009][T14694] Call Trace: [ 315.153016][T14694] [ 315.153024][T14694] dump_stack_lvl+0xe8/0x150 [ 315.153055][T14694] should_fail_ex+0x412/0x560 [ 315.153085][T14694] should_failslab+0xa8/0x100 [ 315.153110][T14694] __kvmalloc_node_noprof+0x178/0x8a0 [ 315.153132][T14694] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 315.153167][T14694] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 315.153200][T14694] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 315.153236][T14694] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 315.153265][T14694] ? __pfx_autoremove_wake_function+0x10/0x10 [ 315.153288][T14694] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 315.153334][T14694] ? 0xffffffffa02019d0 [ 315.153373][T14694] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 315.153401][T14694] ? _copy_from_user+0x94/0xb0 [ 315.153421][T14694] ? bpf_test_init+0x113/0x150 [ 315.153452][T14694] ? xdp_convert_md_to_buff+0x5b/0x330 [ 315.153481][T14694] bpf_prog_test_run_xdp+0x81c/0x1160 [ 315.153521][T14694] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 315.153552][T14694] ? __fget_files+0x2a/0x420 [ 315.153584][T14694] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 315.153612][T14694] bpf_prog_test_run+0x2c7/0x340 [ 315.153634][T14694] __sys_bpf+0x643/0x950 [ 315.153663][T14694] ? __pfx___sys_bpf+0x10/0x10 [ 315.153704][T14694] ? ksys_write+0x242/0x270 [ 315.153726][T14694] ? __pfx_ksys_write+0x10/0x10 [ 315.153751][T14694] __x64_sys_bpf+0x7c/0x90 [ 315.153779][T14694] do_syscall_64+0x14d/0xf80 [ 315.153799][T14694] ? trace_irq_disable+0x3b/0x150 [ 315.153824][T14694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.153842][T14694] ? clear_bhb_loop+0x40/0x90 [ 315.153864][T14694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.153882][T14694] RIP: 0033:0x7fb9f0b9c799 [ 315.153898][T14694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.153914][T14694] RSP: 002b:00007fb9f1b02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.153934][T14694] RAX: ffffffffffffffda RBX: 00007fb9f0e15fa0 RCX: 00007fb9f0b9c799 [ 315.153948][T14694] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 315.153959][T14694] RBP: 00007fb9f1b02090 R08: 0000000000000000 R09: 0000000000000000 [ 315.153970][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.153980][T14694] R13: 00007fb9f0e16038 R14: 00007fb9f0e15fa0 R15: 00007fff4382bb38 [ 315.154008][T14694] [ 315.393292][T14701] netlink: 'syz.0.2832': attribute type 34 has an invalid length. [ 315.631954][T14711] netlink: 'syz.0.2834': attribute type 3 has an invalid length. [ 315.694604][ T5830] Bluetooth: hci5: command tx timeout [ 315.870836][T14729] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 315.879649][T14731] FAULT_INJECTION: forcing a failure. [ 315.879649][T14731] name failslab, interval 1, probability 0, space 0, times 0 [ 315.913105][T14732] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 315.913315][T14731] CPU: 0 UID: 0 PID: 14731 Comm: syz.4.2843 Not tainted syzkaller #0 PREEMPT(full) [ 315.913337][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.913348][T14731] Call Trace: [ 315.913355][T14731] [ 315.913363][T14731] dump_stack_lvl+0xe8/0x150 [ 315.913393][T14731] should_fail_ex+0x412/0x560 [ 315.913425][T14731] should_failslab+0xa8/0x100 [ 315.913449][T14731] __kvmalloc_node_noprof+0x178/0x8a0 [ 315.913471][T14731] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 315.913501][T14731] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 315.913526][T14731] bpf_test_run_xdp_live+0x223/0x1cf0 [ 315.913559][T14731] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 315.913595][T14731] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 315.913624][T14731] ? __pfx_autoremove_wake_function+0x10/0x10 [ 315.913646][T14731] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 315.913691][T14731] ? 0xffffffffa02019c8 [ 315.913731][T14731] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 315.913761][T14731] ? _copy_from_user+0x94/0xb0 [ 315.913780][T14731] ? bpf_test_init+0x113/0x150 [ 315.913803][T14731] ? xdp_convert_md_to_buff+0x5b/0x330 [ 315.913832][T14731] bpf_prog_test_run_xdp+0x81c/0x1160 [ 315.913872][T14731] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 315.913910][T14731] ? __fget_files+0x2a/0x420 [ 315.913941][T14731] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 315.913968][T14731] bpf_prog_test_run+0x2c7/0x340 [ 315.913989][T14731] __sys_bpf+0x643/0x950 [ 315.914018][T14731] ? __pfx___sys_bpf+0x10/0x10 [ 315.914057][T14731] ? ksys_write+0x242/0x270 [ 315.914079][T14731] ? __pfx_ksys_write+0x10/0x10 [ 315.914104][T14731] __x64_sys_bpf+0x7c/0x90 [ 315.914129][T14731] do_syscall_64+0x14d/0xf80 [ 315.914148][T14731] ? trace_irq_disable+0x3b/0x150 [ 315.914173][T14731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.914192][T14731] ? clear_bhb_loop+0x40/0x90 [ 315.914213][T14731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.914231][T14731] RIP: 0033:0x7fcbad19c799 [ 315.914246][T14731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.914262][T14731] RSP: 002b:00007fcbab3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.914281][T14731] RAX: ffffffffffffffda RBX: 00007fcbad415fa0 RCX: 00007fcbad19c799 [ 315.914294][T14731] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 315.914306][T14731] RBP: 00007fcbab3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 315.914317][T14731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.914327][T14731] R13: 00007fcbad416038 R14: 00007fcbad415fa0 R15: 00007ffdbfc6fff8 [ 315.914355][T14731] [ 315.922034][T14729] net veth1_virt_wifi : renamed from virt_wifi0 [ 316.503085][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.516192][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.525972][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.534997][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.543213][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.861575][T14777] can: request_module (can-proto-0) failed. [ 316.979263][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995534][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.003745][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 317.036086][T14791] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 317.293191][T14806] team_slave_0: left promiscuous mode [ 317.306527][T14806] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 317.317047][T14806] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 317.325935][T14806] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 317.333379][T14806] macvlan2: entered allmulticast mode [ 317.339380][T14806] h: left promiscuous mode [ 317.344261][T14806] h: entered allmulticast mode [ 317.349329][T14806] bond1: entered allmulticast mode [ 317.355727][T14806] batadv0.2: entered allmulticast mode [ 317.362645][T14806] vlan2: entered allmulticast mode [ 317.370308][T14806] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode [ 317.378171][T14806] geneve2: entered allmulticast mode [ 317.385027][T14806] bond2: left promiscuous mode [ 317.390007][T14806] bond2: entered allmulticast mode [ 317.398371][T14806] vxlan0: entered allmulticast mode [ 317.414987][T14806] vlan3: entered allmulticast mode [ 317.421078][T14806] gre1: entered allmulticast mode [ 317.431585][T14806] syztnl2: entered allmulticast mode [ 317.437537][T14806] vti60: entered allmulticast mode [ 317.443544][T14806] gtp0: left promiscuous mode [ 317.451172][T14806] syztnl0: entered allmulticast mode [ 317.460219][T14806] vlan0: left promiscuous mode [ 317.465365][T14806] bond3: left promiscuous mode [ 317.475447][T14806] veth2: entered allmulticast mode [ 317.483520][T14806] vlan4: entered allmulticast mode [ 317.489531][T14806] gre2: entered allmulticast mode [ 317.497075][T14806] gre3: entered allmulticast mode [ 317.510335][ T1112] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.529347][ T1112] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.549614][ T1112] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.585440][ T1112] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.602118][T14762] chnl_net:caif_netlink_parms(): no params data found [ 317.743524][T14762] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.751743][T14762] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.759176][T14762] bridge_slave_0: entered allmulticast mode [ 317.777359][T14762] bridge_slave_0: entered promiscuous mode [ 317.790105][T14762] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.799510][T14762] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.811484][T14762] bridge_slave_1: entered allmulticast mode [ 317.820724][T14762] bridge_slave_1: entered promiscuous mode [ 317.867698][T14762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.880009][T14762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.920100][T14762] team0: Port device team_slave_0 added [ 317.930385][T14762] team0: Port device team_slave_1 added [ 317.964574][T14762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.971605][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.998348][T14762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.011221][T14762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.018882][T14762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.045812][T14762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.094553][T14827] nbd18: detected capacity change from 0 to 63 [ 318.104654][T14762] hsr_slave_0: entered promiscuous mode [ 318.108580][ T5830] block nbd18: Receive control failed (result -104) [ 318.111461][T14762] hsr_slave_1: entered promiscuous mode [ 318.118050][ T5838] block nbd18: Receive control failed (result -32) [ 318.132993][T12058] block nbd18: Send control failed (result -32) [ 318.151140][T14762] debugfs: 'hsr0' already exists in 'hsr' [ 318.161139][T12058] block nbd18: Request send failed, requeueing [ 318.173443][ T7873] block nbd18: Dead connection, failed to find a fallback [ 318.177217][T14762] Cannot create hsr debugfs directory [ 318.186459][ T7873] block nbd18: shutting down sockets [ 318.193614][ T7873] blk_print_req_error: 138 callbacks suppressed [ 318.193631][ T7873] I/O error, dev nbd18, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 318.210267][ T7873] buffer_io_error: 138 callbacks suppressed [ 318.210282][ T7873] Buffer I/O error on dev nbd18, logical block 3, async page read [ 318.473082][T14845] syzkaller0: entered promiscuous mode [ 318.548547][T14854] Cannot find add_set index 0 as target [ 318.573959][ T5830] Bluetooth: hci0: command tx timeout [ 318.676298][T14859] team0 (unregistering): Port device team_slave_0 removed [ 318.710174][T14859] team0 (unregistering): Port device team_slave_1 removed [ 318.799229][T14868] syzkaller0: entered promiscuous mode [ 318.805979][T14868] syzkaller0: entered allmulticast mode [ 318.862259][T14871] __nla_validate_parse: 16 callbacks suppressed [ 318.862279][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 319.026113][T14762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.040866][T14762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.065635][T14762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.078710][T14762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.129130][T14896] Cannot find add_set index 0 as target [ 319.233406][T14762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.261330][T14762] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.281530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.288780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.336977][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.344220][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.417617][T14907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2893'. [ 319.444132][T14907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2893'. [ 319.600028][T14919] syzkaller0: entered promiscuous mode [ 319.606498][T14919] syzkaller0: entered allmulticast mode [ 319.673745][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 319.730873][T14762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.816261][T14762] veth0_vlan: entered promiscuous mode [ 319.876584][T14762] veth1_vlan: entered promiscuous mode [ 320.010001][T14762] veth0_macvtap: entered promiscuous mode [ 320.030311][T14945] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2902'. [ 320.042138][T14762] veth1_macvtap: entered promiscuous mode [ 320.067341][T14936] ipt_REJECT: ECHOREPLY no longer supported. [ 320.093323][T14762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.109659][T14762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.134663][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.144221][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.165216][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.177371][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.304927][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.313296][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.383148][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.401263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.510163][T14961] syzkaller0: entered promiscuous mode [ 320.516310][T14961] syzkaller0: entered allmulticast mode [ 320.583149][T14965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.603336][T14968] gre0: entered promiscuous mode [ 320.642835][T14970] Cannot find add_set index 0 as target [ 320.657197][ T5830] Bluetooth: hci0: command tx timeout [ 321.084392][T14977] nbd19: detected capacity change from 0 to 63 [ 321.096977][ T5838] block nbd19: Receive control failed (result -104) [ 321.104388][ T5830] block nbd19: Receive control failed (result -32) [ 321.212086][T14997] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 321.264861][T14997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.281775][T14997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2923'. [ 321.321612][T15002] syzkaller0: entered promiscuous mode [ 321.327657][T15002] syzkaller0: entered allmulticast mode [ 321.586719][T15021] syzkaller0: entered promiscuous mode [ 321.606051][T15024] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.2930'. [ 321.632732][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 321.661589][T15028] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 321.807069][T15033] syz.2.2933: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 321.928322][T15033] CPU: 0 UID: 0 PID: 15033 Comm: syz.2.2933 Not tainted syzkaller #0 PREEMPT(full) [ 321.928350][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.928362][T15033] Call Trace: [ 321.928371][T15033] [ 321.928380][T15033] dump_stack_lvl+0xe8/0x150 [ 321.928414][T15033] warn_alloc+0x249/0x340 [ 321.928438][T15033] ? stack_trace_save+0xa9/0x100 [ 321.928471][T15033] ? __pfx_warn_alloc+0x10/0x10 [ 321.928501][T15033] ? kasan_save_track+0x4f/0x80 [ 321.928522][T15033] ? kasan_save_track+0x3e/0x80 [ 321.928540][T15033] ? __kasan_kmalloc+0x93/0xb0 [ 321.928561][T15033] ? __kmalloc_cache_noprof+0x31c/0x660 [ 321.928582][T15033] ? xskq_create+0x56/0x170 [ 321.928601][T15033] ? xsk_setsockopt+0x54c/0x990 [ 321.928627][T15033] ? do_sock_setsockopt+0x17c/0x1b0 [ 321.928647][T15033] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 321.928666][T15033] ? do_syscall_64+0x14d/0xf80 [ 321.928692][T15033] __vmalloc_node_range_noprof+0x132/0x1730 [ 321.928746][T15033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 321.928775][T15033] ? __kasan_kmalloc+0x93/0xb0 [ 321.928803][T15033] vmalloc_user_noprof+0xad/0xe0 [ 321.928824][T15033] ? xskq_create+0xbf/0x170 [ 321.928843][T15033] xskq_create+0xbf/0x170 [ 321.928863][T15033] xsk_init_queue+0x8a/0xe0 [ 321.928893][T15033] xsk_setsockopt+0x54c/0x990 [ 321.928923][T15033] ? __pfx_xsk_setsockopt+0x10/0x10 [ 321.928950][T15033] ? __pfx_aa_sk_perm+0x10/0x10 [ 321.928979][T15033] ? aa_sock_opt_perm+0xff/0x1a0 [ 321.929009][T15033] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 321.929029][T15033] ? __pfx_xsk_setsockopt+0x10/0x10 [ 321.929057][T15033] do_sock_setsockopt+0x17c/0x1b0 [ 321.929082][T15033] __x64_sys_setsockopt+0x13d/0x1b0 [ 321.929109][T15033] do_syscall_64+0x14d/0xf80 [ 321.929127][T15033] ? trace_irq_disable+0x3b/0x150 [ 321.929152][T15033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.929171][T15033] ? clear_bhb_loop+0x40/0x90 [ 321.929194][T15033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.929214][T15033] RIP: 0033:0x7fabfcb9c799 [ 321.929232][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.929249][T15033] RSP: 002b:00007fabfda71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 321.929271][T15033] RAX: ffffffffffffffda RBX: 00007fabfce15fa0 RCX: 00007fabfcb9c799 [ 321.929286][T15033] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 321.929298][T15033] RBP: 00007fabfcc32c99 R08: 0000000000000004 R09: 0000000000000000 [ 321.929311][T15033] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.929322][T15033] R13: 00007fabfce16038 R14: 00007fabfce15fa0 R15: 00007fffccf3de58 [ 321.929353][T15033] [ 321.929377][T15033] Mem-Info: [ 321.949324][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 322.002384][T15033] active_anon:6097 inactive_anon:0 isolated_anon:0 [ 322.002384][T15033] active_file:3801 inactive_file:40036 isolated_file:0 [ 322.002384][T15033] unevictable:768 dirty:210 writeback:0 [ 322.002384][T15033] slab_reclaimable:12703 slab_unreclaimable:106479 [ 322.002384][T15033] mapped:29986 shmem:1362 pagetables:1397 [ 322.002384][T15033] sec_pagetables:0 bounce:0 [ 322.002384][T15033] kernel_misc_reclaimable:0 [ 322.002384][T15033] free:1315964 free_pcp:10055 free_cma:0 [ 322.087023][T15048] syzkaller0: entered promiscuous mode [ 322.161838][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 322.224054][T15033] Node 0 active_anon:24488kB inactive_anon:0kB active_file:15204kB inactive_file:159944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120044kB dirty:836kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14328kB pagetables:5440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.273911][T15048] syzkaller0: entered allmulticast mode [ 322.335453][T15033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.433905][T15033] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 322.520348][T15033] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 322.563269][T15033] Node 0 DMA32 free:1304936kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24588kB inactive_anon:0kB active_file:15204kB inactive_file:159944kB unevictable:1536kB writepending:836kB zspages:0kB present:3129332kB managed:2552712kB mlocked:0kB bounce:0kB free_pcp:38816kB local_pcp:16484kB free_cma:0kB [ 322.696378][T15033] lowmem_reserve[]: 0 0 0 0 0 [ 322.701156][T15033] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 322.734946][ T5838] Bluetooth: hci0: command tx timeout [ 322.810172][T15033] lowmem_reserve[]: 0 0 0 0 0 [ 322.819523][T15033] Node 1 Normal free:3943176kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:1760kB free_cma:0kB [ 322.854137][T15033] lowmem_reserve[]: 0 0 0 0 0 [ 322.859118][T15033] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 322.903281][T15033] Node 0 DMA32: 3780*4kB (UME) 2985*8kB (UME) 1272*16kB (UME) 140*32kB (UME) 81*64kB (UME) 60*128kB (UME) 76*256kB (UM) 96*512kB (UM) 76*1024kB (UME) 37*2048kB (UM) 246*4096kB (UM) = 1306520kB [ 322.966707][T15033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 322.993574][T15033] Node 1 Normal: 0*4kB 1*8kB (M) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3943176kB [ 323.038902][T15033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.060192][T15075] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 323.071576][T15033] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 323.081832][T15033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.134488][T15033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.155793][T15033] 45196 total pagecache pages [ 323.170850][T15033] 0 pages in swap cache [ 323.177498][T15033] Free swap = 124996kB [ 323.193020][T15033] Total swap = 124996kB [ 323.198518][T15033] 2097051 pages RAM [ 323.202371][T15033] 0 pages HighMem/MovableOnly [ 323.233961][T15033] 427038 pages reserved [ 323.238168][T15033] 0 pages cma reserved [ 323.425303][T15106] syzkaller0: entered promiscuous mode [ 323.430951][T15106] syzkaller0: entered allmulticast mode [ 323.613085][T15114] syzkaller1: entered promiscuous mode [ 323.625171][T15114] syzkaller1: entered allmulticast mode [ 323.953448][T15134] sctp: [Deprecated]: syz.0.2961 (pid 15134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.953448][T15134] Use struct sctp_sack_info instead [ 324.104622][T15145] netlink: 'syz.1.2964': attribute type 1 has an invalid length. [ 324.127426][T15139] __nla_validate_parse: 2 callbacks suppressed [ 324.127443][T15139] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2963'. [ 324.147760][T15149] Cannot find add_set index 0 as target [ 324.226503][T15145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.400525][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.409396][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.418437][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.435507][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.444367][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.748791][T15168] syzkaller0: entered promiscuous mode [ 324.755041][T15168] syzkaller0: entered allmulticast mode [ 324.817084][ T5830] Bluetooth: hci0: command tx timeout [ 324.945515][T15179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.946617][T10493] hid-generic 0005:04F3:0C6E.0002: unknown main item tag 0x0 [ 324.968052][T15161] nbd20: detected capacity change from 0 to 63 [ 324.986628][ T5838] block nbd20: Receive control failed (result -104) [ 324.986635][ T5830] block nbd20: Receive control failed (result -32) [ 325.011170][T10493] hid-generic 0005:04F3:0C6E.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 325.023695][T15179] bond1: Removing last arp target with arp_interval on [ 325.143906][T15185] Cannot find add_set index 0 as target [ 325.189985][T15191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2980'. [ 325.229558][T15194] netlink: 'syz.3.2978': attribute type 1 has an invalid length. [ 325.318974][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 325.328054][T15201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2978'. [ 325.383609][T15194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.414844][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2981'. [ 325.655276][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2986'. [ 325.677013][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2985'. [ 325.718017][T15203] syzkaller0: entered promiscuous mode [ 325.723587][T15203] syzkaller0: entered allmulticast mode [ 325.739271][T15220] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 325.805194][T15228] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2986'. [ 325.858501][T15228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2986'. [ 326.108451][T15227] nbd21: detected capacity change from 0 to 63 [ 326.128224][ T5838] block nbd21: Receive control failed (result -104) [ 326.132870][ T5830] block nbd21: Receive control failed (result -32) [ 326.198658][T15234] Cannot find add_set index 0 as target [ 326.314147][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2991'. [ 326.507259][ T5830] Bluetooth: hci2: command tx timeout [ 327.105154][T15238] : renamed from bond0 (while UP) [ 327.478942][T15156] chnl_net:caif_netlink_parms(): no params data found [ 327.640804][T15266] IPVS: persistence engine module ip_vs_pe_ not found [ 327.770897][T15156] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.778979][T15156] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.787113][T15156] bridge_slave_0: entered allmulticast mode [ 327.795551][T15156] bridge_slave_0: entered promiscuous mode [ 327.804374][T15156] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.811559][T15156] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.819189][T15156] bridge_slave_1: entered allmulticast mode [ 327.827156][T15156] bridge_slave_1: entered promiscuous mode [ 327.899180][T15156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.911613][T15156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.033271][T15156] team0: Port device team_slave_0 added [ 328.060800][T15156] team0: Port device team_slave_1 added [ 328.141270][T15287] syzkaller0: entered promiscuous mode [ 328.153631][T15287] syzkaller0: entered allmulticast mode [ 328.187018][T15156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.199603][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.228610][T15156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.300277][T15156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.307651][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.337926][T15156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.452242][T15156] hsr_slave_0: entered promiscuous mode [ 328.469717][T15156] hsr_slave_1: entered promiscuous mode [ 328.503199][T15156] debugfs: 'hsr0' already exists in 'hsr' [ 328.509976][T15156] Cannot create hsr debugfs directory [ 328.576905][ T5830] Bluetooth: hci2: command tx timeout [ 328.586829][T15316] syzkaller0: entered promiscuous mode [ 328.806109][T15156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.968071][T15156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.084486][T15156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.154513][T15156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.222158][T15364] __nla_validate_parse: 12 callbacks suppressed [ 329.222178][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 329.253153][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 329.435784][T15156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.459182][T15156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.497154][T15156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.541337][T15156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.551386][T15376] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 329.580524][T15376] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.593348][T15376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3032'. [ 329.605265][T15376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3032'. [ 329.633403][T15376] vlan1: entered allmulticast mode [ 329.700135][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3032'. [ 329.709769][T15377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3032'. [ 329.761463][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3033'. [ 329.874562][T15156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.999229][T15156] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.026812][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.034046][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.089273][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.096486][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.194578][T15403] FAULT_INJECTION: forcing a failure. [ 330.194578][T15403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.258509][T15403] CPU: 0 UID: 0 PID: 15403 Comm: syz.2.3037 Not tainted syzkaller #0 PREEMPT(full) [ 330.258535][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.258547][T15403] Call Trace: [ 330.258556][T15403] [ 330.258564][T15403] dump_stack_lvl+0xe8/0x150 [ 330.258595][T15403] should_fail_ex+0x412/0x560 [ 330.258627][T15403] _copy_from_iter+0x1d3/0x1670 [ 330.258660][T15403] ? rcu_is_watching+0x15/0xb0 [ 330.258693][T15403] ? __pfx__copy_from_iter+0x10/0x10 [ 330.258728][T15403] ? netlink_sendmsg+0x650/0xb40 [ 330.258755][T15403] ? skb_put+0x11b/0x210 [ 330.258778][T15403] netlink_sendmsg+0x6c0/0xb40 [ 330.258814][T15403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.258845][T15403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.258874][T15403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.258906][T15403] ____sys_sendmsg+0x972/0x9f0 [ 330.258936][T15403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.258966][T15403] ? import_iovec+0x73/0xa0 [ 330.258991][T15403] ___sys_sendmsg+0x2a5/0x360 [ 330.259017][T15403] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.259065][T15403] ? __fget_files+0x2a/0x420 [ 330.259090][T15403] ? __fget_files+0x3a0/0x420 [ 330.259122][T15403] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.259146][T15403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.259174][T15403] ? __pfx_ksys_write+0x10/0x10 [ 330.259205][T15403] do_syscall_64+0x14d/0xf80 [ 330.259225][T15403] ? trace_irq_disable+0x3b/0x150 [ 330.259250][T15403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.259267][T15403] ? clear_bhb_loop+0x40/0x90 [ 330.259287][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.259304][T15403] RIP: 0033:0x7fabfcb9c799 [ 330.259322][T15403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.259337][T15403] RSP: 002b:00007fabfda71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.259357][T15403] RAX: ffffffffffffffda RBX: 00007fabfce15fa0 RCX: 00007fabfcb9c799 [ 330.259369][T15403] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 330.259381][T15403] RBP: 00007fabfda71090 R08: 0000000000000000 R09: 0000000000000000 [ 330.259393][T15403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.259405][T15403] R13: 00007fabfce16038 R14: 00007fabfce15fa0 R15: 00007fffccf3de58 [ 330.259435][T15403] [ 330.656576][ T5830] Bluetooth: hci2: command tx timeout [ 330.784783][T15156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.792746][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 330.831482][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 330.900246][T15156] veth0_vlan: entered promiscuous mode [ 330.949011][T15156] veth1_vlan: entered promiscuous mode [ 331.042643][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 331.139010][T15156] veth0_macvtap: entered promiscuous mode [ 331.156351][T15156] veth1_macvtap: entered promiscuous mode [ 331.241765][T15156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.272507][T15442] Cannot find add_set index 0 as target [ 331.276678][T15156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.311575][ T3557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.347879][ T3557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.384954][ T3557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.402929][ T3557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.476760][T15435] nbd22: detected capacity change from 0 to 63 [ 331.498804][ T5838] block nbd22: Receive control failed (result -32) [ 331.505872][ T5830] block nbd22: Receive control failed (result -32) [ 331.530096][T15367] block nbd22: Dead connection, failed to find a fallback [ 331.547062][T15367] block nbd22: shutting down sockets [ 331.572839][T15367] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.582556][T15367] Buffer I/O error on dev nbd22, logical block 0, async page read [ 331.590661][T15367] I/O error, dev nbd22, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.604172][T15367] Buffer I/O error on dev nbd22, logical block 1, async page read [ 331.614850][T15367] I/O error, dev nbd22, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.644771][T15367] Buffer I/O error on dev nbd22, logical block 2, async page read [ 331.682022][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.706759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.724167][T15367] I/O error, dev nbd22, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.743896][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.751749][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.763018][T15367] Buffer I/O error on dev nbd22, logical block 3, async page read [ 331.807383][T15367] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.825211][T15367] Buffer I/O error on dev nbd22, logical block 0, async page read [ 331.860771][T15367] I/O error, dev nbd22, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.892223][T15367] Buffer I/O error on dev nbd22, logical block 1, async page read [ 331.913324][T15367] I/O error, dev nbd22, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.940248][T15367] Buffer I/O error on dev nbd22, logical block 2, async page read [ 331.960174][T15367] I/O error, dev nbd22, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.001134][T15367] Buffer I/O error on dev nbd22, logical block 3, async page read [ 332.013350][T15367] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.016708][T15467] syzkaller0: entered promiscuous mode [ 332.043544][T15367] Buffer I/O error on dev nbd22, logical block 0, async page read [ 332.057846][T15467] syzkaller0: entered allmulticast mode [ 332.065803][T15367] I/O error, dev nbd22, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.076054][T15367] Buffer I/O error on dev nbd22, logical block 1, async page read [ 332.100956][T15367] ldm_validate_partition_table(): Disk read failed. [ 332.111061][T15367] Dev nbd22: unable to read RDB block 0 [ 332.117959][T15367] nbd22: unable to read partition table [ 332.127305][T15471] bond1: option resend_igmp: invalid value (32767) [ 332.128044][T15367] ldm_validate_partition_table(): Disk read failed. [ 332.134865][T15471] bond1: option resend_igmp: allowed values 0 - 255 [ 332.141214][T15367] Dev nbd22: unable to read RDB block 0 [ 332.156436][T15471] bond1 (unregistering): Released all slaves [ 332.166573][T15367] nbd22: unable to read partition table [ 332.448826][T15477] syzkaller0: entered promiscuous mode [ 332.458276][T15477] syzkaller0: entered allmulticast mode [ 332.744205][ T5838] Bluetooth: hci2: command tx timeout [ 333.714404][T15505] syzkaller0: entered promiscuous mode [ 333.782121][ T73] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.802378][ T73] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.829674][ T73] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.850176][ T73] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.903940][T15522] Cannot find add_set index 0 as target [ 334.233575][T15551] __nla_validate_parse: 2 callbacks suppressed [ 334.233594][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3074'. [ 334.273234][T15543] syzkaller0: entered promiscuous mode [ 334.291631][T15543] syzkaller0: entered allmulticast mode [ 334.362399][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'. [ 334.810336][T15580] nbd: nbd3 already in use [ 334.819534][T15580] block nbd3: NBD_DISCONNECT [ 334.836249][T15580] block nbd3: Send disconnect failed -32 [ 334.842871][T15580] block nbd3: Send disconnect failed -32 [ 336.006134][T15594] netlink: 'syz.1.3083': attribute type 1 has an invalid length. [ 336.089775][T15594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.120864][T15604] bond5: entered allmulticast mode [ 343.856876][ T7873] block nbd17: Connection timed out, retrying (0/2 alive) [ 343.864221][ T7873] block nbd17: Connection timed out, retrying (0/2 alive) [ 343.871514][ T7873] block nbd17: Connection timed out, retrying (0/2 alive) [ 343.878810][ T7873] block nbd17: Connection timed out, retrying (0/2 alive) [ 343.886044][ T8641] block nbd17: Dead connection, failed to find a fallback [ 343.893184][ T8641] block nbd17: shutting down sockets [ 343.899013][ T8641] blk_print_req_error: 138 callbacks suppressed [ 343.899025][ T8641] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.915109][ T8641] buffer_io_error: 138 callbacks suppressed [ 343.915125][ T8641] Buffer I/O error on dev nbd17, logical block 2, async page read [ 343.929450][ T8641] I/O error, dev nbd17, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.939765][ T8641] Buffer I/O error on dev nbd17, logical block 1, async page read [ 343.947858][ T8641] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.957532][ T8641] Buffer I/O error on dev nbd17, logical block 0, async page read [ 343.965614][ T8641] I/O error, dev nbd17, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.975225][ T8641] Buffer I/O error on dev nbd17, logical block 3, async page read [ 343.983194][T11169] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 343.993291][T11169] Buffer I/O error on dev nbd17, logical block 0, async page read [ 344.001399][T11169] I/O error, dev nbd17, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.010993][T11169] Buffer I/O error on dev nbd17, logical block 1, async page read [ 344.019890][T11169] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.030611][T11169] Buffer I/O error on dev nbd17, logical block 2, async page read [ 344.038596][T11169] I/O error, dev nbd17, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.048195][T11169] Buffer I/O error on dev nbd17, logical block 3, async page read [ 344.056161][T11169] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.065787][T11169] Buffer I/O error on dev nbd17, logical block 0, async page read [ 344.073655][T11169] I/O error, dev nbd17, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.083362][T11169] Buffer I/O error on dev nbd17, logical block 1, async page read [ 344.091970][T11169] ldm_validate_partition_table(): Disk read failed. [ 344.099330][T11169] Dev nbd17: unable to read RDB block 0 [ 344.105859][T11169] nbd17: unable to read partition table [ 344.115337][T11169] ldm_validate_partition_table(): Disk read failed. [ 344.122168][T11169] Dev nbd17: unable to read RDB block 0 [ 344.128289][T11169] nbd17: unable to read partition table [ 348.339517][ T8641] block nbd18: Connection timed out, retrying (0/2 alive) [ 348.346752][ T8641] block nbd18: Connection timed out, retrying (0/2 alive) [ 348.355649][ T8641] block nbd18: Connection timed out, retrying (0/2 alive) [ 348.363973][T12058] ldm_validate_partition_table(): Disk read failed. [ 348.370809][T12058] Dev nbd18: unable to read RDB block 0 [ 348.377138][T12058] nbd18: unable to read partition table [ 348.386354][T12058] ldm_validate_partition_table(): Disk read failed. [ 348.393222][T12058] Dev nbd18: unable to read RDB block 0 [ 348.400668][T12058] nbd18: unable to read partition table [ 351.535982][ T8641] block nbd19: Connection timed out, retrying (0/2 alive) [ 351.543338][ T8641] block nbd19: Connection timed out, retrying (0/2 alive) [ 351.550867][ T5162] block nbd19: Dead connection, failed to find a fallback [ 351.558161][ T5162] block nbd19: shutting down sockets [ 351.563459][ T5162] blk_print_req_error: 285 callbacks suppressed [ 351.563471][ T5162] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.579666][ T8641] block nbd19: Connection timed out, retrying (0/2 alive) [ 351.586936][ T8641] block nbd19: Connection timed out, retrying (0/2 alive) [ 351.594585][ T5162] buffer_io_error: 285 callbacks suppressed [ 351.594605][ T5162] Buffer I/O error on dev nbd19, logical block 0, async page read [ 351.609574][ T5162] I/O error, dev nbd19, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.621883][ T5162] Buffer I/O error on dev nbd19, logical block 3, async page read [ 351.629836][ T5162] I/O error, dev nbd19, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.639490][ T5162] Buffer I/O error on dev nbd19, logical block 2, async page read [ 351.647506][ T5162] I/O error, dev nbd19, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.657099][ T5162] Buffer I/O error on dev nbd19, logical block 1, async page read [ 351.665228][T14986] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.675242][T14986] Buffer I/O error on dev nbd19, logical block 0, async page read [ 351.683140][T14986] I/O error, dev nbd19, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.692783][T14986] Buffer I/O error on dev nbd19, logical block 1, async page read [ 351.701096][T14986] I/O error, dev nbd19, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.711824][T14986] Buffer I/O error on dev nbd19, logical block 2, async page read [ 351.719865][T14986] I/O error, dev nbd19, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.729496][T14986] Buffer I/O error on dev nbd19, logical block 3, async page read [ 351.737432][T14986] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.747060][T14986] Buffer I/O error on dev nbd19, logical block 0, async page read [ 351.754995][T14986] I/O error, dev nbd19, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.764596][T14986] Buffer I/O error on dev nbd19, logical block 1, async page read [ 351.772826][T14986] ldm_validate_partition_table(): Disk read failed. [ 351.780094][T14986] Dev nbd19: unable to read RDB block 0 [ 351.786537][T14986] nbd19: unable to read partition table [ 351.797009][T14986] ldm_validate_partition_table(): Disk read failed. [ 351.804616][T14986] Dev nbd19: unable to read RDB block 0 [ 351.811520][T14986] nbd19: unable to read partition table [ 355.374816][ T9273] block nbd20: Connection timed out, retrying (0/2 alive) [ 355.381984][ T9273] block nbd20: Connection timed out, retrying (0/2 alive) [ 355.389270][ T8844] block nbd20: Dead connection, failed to find a fallback [ 355.396876][ T8844] block nbd20: shutting down sockets [ 355.402343][ T9273] block nbd20: Connection timed out, retrying (0/2 alive) [ 355.410947][ T9273] block nbd20: Connection timed out, retrying (0/2 alive) [ 355.418890][T11088] ldm_validate_partition_table(): Disk read failed. [ 355.426067][T11088] Dev nbd20: unable to read RDB block 0 [ 355.431944][T11088] nbd20: unable to read partition table [ 355.441540][T11088] ldm_validate_partition_table(): Disk read failed. [ 355.448574][T11088] Dev nbd20: unable to read RDB block 0 [ 355.457453][T11088] nbd20: unable to read partition table [ 356.654612][ T9273] block nbd21: Connection timed out, retrying (0/2 alive) [ 356.661815][ T9273] block nbd21: Connection timed out, retrying (0/2 alive) [ 356.669119][ T8844] block nbd21: Dead connection, failed to find a fallback [ 356.676890][ T9273] block nbd21: Connection timed out, retrying (0/2 alive) [ 356.684141][ T8844] block nbd21: shutting down sockets [ 356.689436][ T8844] blk_print_req_error: 286 callbacks suppressed [ 356.689452][ T8844] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.706198][ T9273] block nbd21: Connection timed out, retrying (0/2 alive) [ 356.713434][ T8844] buffer_io_error: 286 callbacks suppressed [ 356.713447][ T8844] Buffer I/O error on dev nbd21, logical block 0, async page read [ 356.727648][ T8844] I/O error, dev nbd21, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.738326][ T8844] Buffer I/O error on dev nbd21, logical block 3, async page read [ 356.746243][ T8844] I/O error, dev nbd21, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.755833][ T8844] Buffer I/O error on dev nbd21, logical block 2, async page read [ 356.763668][ T8844] I/O error, dev nbd21, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.773919][ T8844] Buffer I/O error on dev nbd21, logical block 1, async page read [ 356.781849][T15068] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.791525][T15068] Buffer I/O error on dev nbd21, logical block 0, async page read [ 356.799728][T15068] I/O error, dev nbd21, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.809550][T15068] Buffer I/O error on dev nbd21, logical block 1, async page read [ 356.817636][T15068] I/O error, dev nbd21, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.828424][T15068] Buffer I/O error on dev nbd21, logical block 2, async page read [ 356.836681][T15068] I/O error, dev nbd21, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.846289][T15068] Buffer I/O error on dev nbd21, logical block 3, async page read [ 356.854474][T15068] I/O error, dev nbd21, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.864290][T15068] Buffer I/O error on dev nbd21, logical block 0, async page read [ 356.872140][T15068] I/O error, dev nbd21, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 356.881754][T15068] Buffer I/O error on dev nbd21, logical block 1, async page read [ 356.890776][T15068] ldm_validate_partition_table(): Disk read failed. [ 356.898299][T15068] Dev nbd21: unable to read RDB block 0 [ 356.904503][T15068] nbd21: unable to read partition table [ 356.912842][T15068] ldm_validate_partition_table(): Disk read failed. [ 356.920258][T15068] Dev nbd21: unable to read RDB block 0 [ 356.926815][T15068] nbd21: unable to read partition table [ 361.673871][T15634] Cannot find add_set index 0 as target [ 361.805442][T15643] syzkaller0: entered promiscuous mode [ 361.811044][T15643] syzkaller0: entered allmulticast mode [ 361.889335][T15645] syzkaller0: entered promiscuous mode [ 361.897378][T15645] syzkaller0: entered allmulticast mode [ 361.916301][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 361.988732][T15647] bond6: entered promiscuous mode [ 361.994684][T15647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.540432][T15668] syzkaller0: entered promiscuous mode [ 363.549809][T15668] syzkaller0: entered allmulticast mode [ 363.725664][T10494] IPVS: starting estimator thread 0... [ 363.732998][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 363.772655][T15700] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3102'. [ 363.808454][T15702] syzkaller0: entered promiscuous mode [ 363.814166][T15698] IPVS: using max 27 ests per chain, 64800 per kthread [ 363.842266][T15700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.890359][T15704] syzkaller0: entered promiscuous mode [ 363.904941][T15704] syzkaller0: entered allmulticast mode [ 364.036363][T15712] macvlan2: entered promiscuous mode [ 364.043473][T15712] macvlan2: entered allmulticast mode [ 364.075453][T15710] syzkaller0: entered promiscuous mode [ 364.095046][T15710] 0: reclassify loop, rule prio 0, protocol 800 [ 364.148164][T15726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3114'. [ 364.232631][T15722] syzkaller0: entered promiscuous mode [ 364.241843][T15722] syzkaller0: entered allmulticast mode [ 365.545878][T15744] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 365.698889][T15767] syzkaller0: entered promiscuous mode [ 365.705116][T15767] syzkaller0: entered allmulticast mode [ 365.775480][T15773] Cannot find add_set index 0 as target [ 365.783673][T15765] syzkaller0: entered promiscuous mode [ 365.948612][T15781] netlink: 'syz.2.3127': attribute type 2 has an invalid length. [ 366.018299][T15786] veth0: entered promiscuous mode [ 366.105967][T15785] veth0: left promiscuous mode [ 366.162706][T15799] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 366.269687][T15803] syzkaller0: entered promiscuous mode [ 366.288722][T15803] syzkaller0: entered allmulticast mode [ 366.297876][T15806] Cannot find add_set index 0 as target [ 366.369322][T15808] syzkaller0: entered promiscuous mode [ 366.371983][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 366.375091][T15808] syzkaller0: entered allmulticast mode [ 366.672101][T15838] Bluetooth: MGMT ver 1.23 [ 366.897725][T15852] Cannot find add_set index 0 as target [ 366.904879][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.514193][T15877] syzkaller0: entered promiscuous mode [ 367.519780][T15877] syzkaller0: entered allmulticast mode [ 367.934805][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.974261][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.982435][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.573384][T15825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.718234][T15885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.753284][T15885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3160'. [ 369.763059][T15891] netlink: 'syz.4.3163': attribute type 7 has an invalid length. [ 369.779391][T15891] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 369.788897][T15891] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3163'. [ 370.014813][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.095162][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.107718][T15907] syzkaller0: entered promiscuous mode [ 370.118386][T15907] 0: reclassify loop, rule prio 0, protocol 800 [ 370.214824][T15919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.387464][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.398368][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.406472][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.418484][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.426844][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.684795][T15940] netlink: zone id is out of range [ 370.694018][T15940] netlink: zone id is out of range [ 370.713923][T15940] netlink: zone id is out of range [ 370.719265][T15940] netlink: zone id is out of range [ 370.729390][T15940] netlink: zone id is out of range [ 370.877599][T15950] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 370.889979][T15946] syzkaller0: entered promiscuous mode [ 370.896334][T15946] syzkaller0: entered allmulticast mode [ 370.914301][T15950] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 370.929284][T15950] netlink: 'syz.0.3186': attribute type 1 has an invalid length. [ 371.036168][T15954] syzkaller0: entered promiscuous mode [ 371.291291][T15977] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3194'. [ 371.325659][T15977] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 371.460537][T15927] chnl_net:caif_netlink_parms(): no params data found [ 371.680157][T15927] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.725600][T15927] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.732988][T15927] bridge_slave_0: entered allmulticast mode [ 371.743738][T15927] bridge_slave_0: entered promiscuous mode [ 371.754573][T15927] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.761778][T15927] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.770060][T15927] bridge_slave_1: entered allmulticast mode [ 371.778680][T15927] bridge_slave_1: entered promiscuous mode [ 371.830451][T15927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.849290][T15927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.864868][T16008] syzkaller0: entered promiscuous mode [ 371.870371][T16008] syzkaller0: entered allmulticast mode [ 371.926386][T15927] team0: Port device team_slave_0 added [ 371.936663][T15927] team0: Port device team_slave_1 added [ 371.990532][T15927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.997864][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.027130][T15927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.045818][T15927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.053040][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.081279][T15927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.094628][T16016] syzkaller0: entered promiscuous mode [ 372.238691][T15927] hsr_slave_0: entered promiscuous mode [ 372.265200][T15927] hsr_slave_1: entered promiscuous mode [ 372.274488][T15927] debugfs: 'hsr0' already exists in 'hsr' [ 372.284356][T15927] Cannot create hsr debugfs directory [ 372.291809][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 372.306344][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 372.361245][T16029] syzkaller0: entered promiscuous mode [ 372.368363][T16029] syzkaller0: entered allmulticast mode [ 372.390278][T16033] ipip0: entered allmulticast mode [ 372.397999][T16033] gtp1: entered allmulticast mode [ 372.409712][T16033] bridge0: entered allmulticast mode [ 372.429843][T16033] bond4: entered allmulticast mode [ 372.494033][ T5838] Bluetooth: hci3: command tx timeout [ 372.692013][T16040] syzkaller0: entered promiscuous mode [ 372.701633][T16040] syzkaller0: entered allmulticast mode [ 372.966149][T16064] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 374.111415][T15927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.231825][T15927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.279933][T16081] netlink: 'syz.0.3221': attribute type 4 has an invalid length. [ 374.355369][T15927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.425518][T16087] syzkaller0: entered promiscuous mode [ 374.431456][T16087] syzkaller0: entered allmulticast mode [ 374.498214][T15927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.575508][ T5838] Bluetooth: hci3: command tx timeout [ 374.614977][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 374.730001][T16109] xt_hashlimit: max too large, truncated to 1048576 [ 374.738293][T15927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.752103][T15927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.781093][T15927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.802221][T15927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.860619][T16115] syzkaller0: entered promiscuous mode [ 374.898043][T16115] net_ratelimit: 63 callbacks suppressed [ 374.898060][T16115] 0: reclassify loop, rule prio 0, protocol 800 [ 375.009420][T16126] Cannot find add_set index 0 as target [ 375.081356][T15927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.130052][T15927] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.148265][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.155493][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.211244][T16136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 375.238505][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.240392][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.245736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.265829][T16127] delete_channel: no stack [ 375.314069][T16137] netlink: 'syz.0.3239': attribute type 21 has an invalid length. [ 375.351219][T16137] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.360916][T16136] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 375.437539][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 375.645002][T15927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.713211][T16151] syzkaller0: entered promiscuous mode [ 375.724780][T16151] syzkaller0: entered allmulticast mode [ 375.744693][T15927] veth0_vlan: entered promiscuous mode [ 375.797554][T15927] veth1_vlan: entered promiscuous mode [ 375.888437][T15927] veth0_macvtap: entered promiscuous mode [ 375.899546][T15927] veth1_macvtap: entered promiscuous mode [ 375.962530][T15927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.987154][T16166] Cannot find add_set index 0 as target [ 376.001760][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3246'. [ 376.007269][T15927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.038620][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3246'. [ 376.100146][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.125764][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.177683][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.195325][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.227246][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.259095][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.457176][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.460544][T16191] siw: device registration error -23 [ 376.472077][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.584722][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.611806][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.654135][ T5838] Bluetooth: hci3: command tx timeout [ 376.872883][T16198] syzkaller0: entered promiscuous mode [ 376.884132][T16198] syzkaller0: entered allmulticast mode [ 376.952797][T16210] Cannot find add_set index 0 as target [ 377.304912][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.347671][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.367863][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.384744][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.396490][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.404375][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.334279][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.426059][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.437474][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 378.744192][ T5830] Bluetooth: hci3: command tx timeout [ 378.932835][T16253] openvswitch: netlink: IP tunnel dst address not specified [ 378.956954][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 378.985261][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3266'. [ 379.039695][ T1145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.050594][ T1145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.089286][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.112352][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.232283][T10512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.337809][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 379.374955][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.454865][ T5830] Bluetooth: hci4: command tx timeout [ 379.492006][T16270] syzkaller0: entered promiscuous mode [ 379.497753][T16270] syzkaller0: entered allmulticast mode [ 380.416761][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.756782][T16230] chnl_net:caif_netlink_parms(): no params data found [ 380.975514][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.062098][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 381.082385][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3283'. [ 381.094034][T16230] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.102012][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.110225][T16230] bridge_slave_0: entered allmulticast mode [ 381.118180][T16230] bridge_slave_0: entered promiscuous mode [ 381.138789][T16230] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.153346][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.174597][T16230] bridge_slave_1: entered allmulticast mode [ 381.190208][T16230] bridge_slave_1: entered promiscuous mode [ 381.197626][T16301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3284'. [ 381.347882][T16310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3284'. [ 381.369088][T16230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.439600][T16307] syzkaller0: entered promiscuous mode [ 381.447995][T16307] syzkaller0: entered allmulticast mode [ 381.453212][T16319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.466301][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.477906][T16230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.534548][ T5830] Bluetooth: hci4: command tx timeout [ 381.568547][T16320] syzkaller0: entered promiscuous mode [ 381.575847][T16320] syzkaller0: entered allmulticast mode [ 382.255855][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.494939][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.038921][T16344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3295'. [ 383.111636][T16346] Cannot find add_set index 0 as target [ 383.537152][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.615605][ T5830] Bluetooth: hci4: command tx timeout [ 384.169929][T16230] team0: Port device team_slave_0 added [ 384.181565][T16334] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3294'. [ 384.214349][T16230] team0: Port device team_slave_1 added [ 384.293720][T16230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.313058][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.377421][T16230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.394273][T16360] netlink: 200592 bytes leftover after parsing attributes in process `syz.4.3301'. [ 384.405758][T16352] openvswitch: netlink: EtherType 50a is less than min 600 [ 384.445070][T16230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.452046][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.466125][T16365] xt_socket: unknown flags 0xe4 [ 384.496864][T16365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3302'. [ 384.531156][T16230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.574090][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.679536][T16230] hsr_slave_0: entered promiscuous mode [ 384.705565][T16230] hsr_slave_1: entered promiscuous mode [ 384.711975][T16230] debugfs: 'hsr0' already exists in 'hsr' [ 384.726422][T16230] Cannot create hsr debugfs directory [ 384.758750][T16373] syzkaller0: entered promiscuous mode [ 384.772643][T16373] syzkaller0: entered allmulticast mode [ 384.801317][T16384] openvswitch: netlink: IP tunnel dst address not specified [ 384.817826][T16384] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.842615][T16381] syzkaller0: entered promiscuous mode [ 384.864135][T16381] 0: reclassify loop, rule prio 0, protocol 800 [ 384.925359][T16378] syzkaller0: entered promiscuous mode [ 384.930920][T16378] syzkaller0: entered allmulticast mode [ 385.252044][T16406] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3318'. [ 385.624082][T10508] net_ratelimit: 1 callbacks suppressed [ 385.624103][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.694777][ T5830] Bluetooth: hci4: command tx timeout [ 386.449290][T16413] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3319'. [ 386.477132][T10512] IPVS: starting estimator thread 0... [ 386.482115][T16413] netlink: 'syz.3.3319': attribute type 1 has an invalid length. [ 386.496502][T16413] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3319'. [ 386.593032][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 386.614357][T16420] IPVS: using max 29 ests per chain, 69600 per kthread [ 386.656191][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.658452][T16418] syzkaller0: entered promiscuous mode [ 386.670060][T16418] syzkaller0: entered allmulticast mode [ 386.688295][T16426] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 386.938767][T16444] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3328'. [ 386.948137][T16444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 387.697055][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.335137][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.360998][T16456] syzkaller0: entered promiscuous mode [ 388.373940][T16456] syzkaller0: entered allmulticast mode [ 388.394190][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 388.415585][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 388.427550][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 388.657713][T16458] infiniband syz2: set active [ 388.663027][T16458] infiniband syz2: added vxcan1 [ 388.739494][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.750621][T16458] RDS/IB: syz2: added [ 388.754832][T16458] smc: adding ib device syz2 with port count 1 [ 388.763208][T16458] smc: ib device syz2 port 1 has no pnetid [ 388.812415][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 389.777421][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.250585][ T5956] vxcan1 speed is unknown, defaulting to 1000 [ 390.295022][T10508] vxcan1 speed is unknown, defaulting to 1000 [ 390.309294][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 390.370502][T16230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.409597][T16230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.449089][T16230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.493034][T16230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.507645][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'. [ 390.576429][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.737384][ T12] wlan1: Trigger new scan to find an IBSS to join [ 390.814213][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.867371][T16230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.896993][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3342'. [ 390.978748][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 390.981178][T16230] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.998245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.005449][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.061371][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.068565][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.276789][T16536] syzkaller0: entered promiscuous mode [ 391.305042][T16536] syzkaller0: entered allmulticast mode [ 391.374276][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.813115][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 391.858022][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.866774][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.874937][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.670945][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 392.725256][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.734986][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.895040][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.140439][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.239576][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 393.326729][T16230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.385553][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3363'. [ 393.482708][T16597] syzkaller0: entered promiscuous mode [ 393.519915][T16597] syzkaller0: entered allmulticast mode [ 393.539375][T16230] veth0_vlan: entered promiscuous mode [ 393.555385][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3364'. [ 393.617685][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3364'. [ 393.697806][ T1112] wlan1: Trigger new scan to find an IBSS to join [ 393.938226][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.597960][ T3557] wlan1: Creating new IBSS network, BSSID ea:a5:4e:1c:aa:6c [ 394.798756][T16600] xfrm2: entered promiscuous mode [ 394.803984][T16600] xfrm2: entered allmulticast mode [ 394.814633][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 394.842882][T16230] veth1_vlan: entered promiscuous mode [ 394.898117][T10515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.965066][T16230] veth0_macvtap: entered promiscuous mode [ 394.967495][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 394.985322][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.028044][T16230] veth1_macvtap: entered promiscuous mode [ 395.056093][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 395.090559][T16619] Cannot find add_set index 0 as target [ 395.118316][T16230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.164152][T16230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.200408][ T3557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.216465][ T3557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.236646][ T3557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.244792][T16622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3371'. [ 395.257144][ T3557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.302543][T16623] ip6gre1: entered promiscuous mode [ 395.308273][T16623] ip6gre1: entered allmulticast mode [ 395.337548][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 395.447653][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 395.590734][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.625023][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.777293][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.820221][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.005159][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'. [ 396.024079][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.053211][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'. [ 396.077302][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 396.405792][T16677] nbd: socks must be embedded in a SOCK_ITEM attr [ 396.691399][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 396.813983][T16693] Cannot find add_set index 0 as target [ 397.038278][T16707] delete_channel: no stack [ 397.058518][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.160429][T16712] __nla_validate_parse: 3 callbacks suppressed [ 397.160448][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 397.197579][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'. [ 397.342769][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 397.589173][T16741] Unknown metaid 0 dlen 28 [ 397.598449][T16743] Cannot find add_set index 0 as target [ 397.769075][T16751] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3409'. [ 397.842863][T16458] vxcan1 speed is unknown, defaulting to 1000 [ 397.937512][T10516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.053379][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3412'. [ 398.099339][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.107284][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 398.254245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.590358][T16789] syzkaller0: entered promiscuous mode [ 398.597346][T16789] syzkaller0: entered allmulticast mode [ 399.146694][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.186678][T16831] netlink: 'syz.0.3433': attribute type 11 has an invalid length. [ 399.194646][T16831] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.3433'. [ 399.502849][T16838] kthread_run failed with err -4 [ 399.559140][T16852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3437'. [ 399.568658][T16853] netlink: 'syz.1.3437': attribute type 29 has an invalid length. [ 399.581378][T16849] netlink: 'syz.1.3437': attribute type 29 has an invalid length. [ 399.677774][T16846] netlink: 'syz.1.3437': attribute type 32 has an invalid length. [ 399.739527][T16852] syzkaller0: entered promiscuous mode [ 399.772728][T16852] syzkaller0: entered allmulticast mode [ 399.852005][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3443'. [ 399.863188][T16846] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3437'. [ 399.950758][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 399.994141][T16867] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 400.175467][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.201997][T16885] syzkaller0: entered promiscuous mode [ 400.281854][T16892] Cannot find add_set index 0 as target [ 400.407762][T16898] syzkaller0: entered promiscuous mode [ 400.413381][T16898] syzkaller0: entered allmulticast mode [ 400.422974][T16898] FAULT_INJECTION: forcing a failure. [ 400.422974][T16898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.437707][T16898] CPU: 1 UID: 0 PID: 16898 Comm: syz.1.3453 Not tainted syzkaller #0 PREEMPT(full) [ 400.437734][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.437751][T16898] Call Trace: [ 400.437758][T16898] [ 400.437765][T16898] dump_stack_lvl+0xe8/0x150 [ 400.437796][T16898] should_fail_ex+0x412/0x560 [ 400.437825][T16898] _copy_from_user+0x2d/0xb0 [ 400.437847][T16898] __copy_msghdr+0x3c5/0x5b0 [ 400.437873][T16898] ___sys_sendmsg+0x213/0x360 [ 400.437900][T16898] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.437936][T16898] ? __fget_files+0x2a/0x420 [ 400.437952][T16898] ? __fget_files+0x3a0/0x420 [ 400.437972][T16898] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.437985][T16898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.438002][T16898] ? __pfx_ksys_write+0x10/0x10 [ 400.438027][T16898] do_syscall_64+0x14d/0xf80 [ 400.438039][T16898] ? trace_irq_disable+0x3b/0x150 [ 400.438054][T16898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.438068][T16898] ? clear_bhb_loop+0x40/0x90 [ 400.438089][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.438112][T16898] RIP: 0033:0x7fa473d9c799 [ 400.438129][T16898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.438146][T16898] RSP: 002b:00007fa471ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.438167][T16898] RAX: ffffffffffffffda RBX: 00007fa474015fa0 RCX: 00007fa473d9c799 [ 400.438181][T16898] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000008 [ 400.438193][T16898] RBP: 00007fa471ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.438201][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.438207][T16898] R13: 00007fa474016038 R14: 00007fa474015fa0 R15: 00007ffd49f7eed8 [ 400.438223][T16898] [ 400.746095][T16910] xt_hashlimit: size too large, truncated to 1048576 [ 400.940881][T16922] veth0_to_bond: entered allmulticast mode [ 400.959143][T16922] netlink: 'syz.4.3460': attribute type 2 has an invalid length. [ 400.984191][T16922] netlink: 'syz.4.3460': attribute type 11 has an invalid length. [ 400.984503][T10516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.040942][T16924] netlink: 'syz.1.3462': attribute type 1 has an invalid length. [ 401.104665][T16928] Cannot find add_set index 0 as target [ 401.115021][T16924] netlink: 'syz.1.3462': attribute type 1 has an invalid length. [ 401.216439][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.481154][T16961] xt_policy: too many policy elements [ 401.491537][T16964] netlink: 'syz.1.3474': attribute type 1 has an invalid length. [ 401.506227][T16963] syzkaller0: entered promiscuous mode [ 401.524679][T16963] syzkaller0: entered allmulticast mode [ 401.585223][T16964] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 401.610633][T16964] bond1 (unregistering): Released all slaves [ 401.652286][T16976] Cannot find add_set index 0 as target [ 401.763145][T16980] syzkaller1: entered promiscuous mode [ 401.789600][T16980] syzkaller1: entered allmulticast mode [ 402.072781][ T1150] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.097621][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.256580][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.295876][T17022] Cannot find add_set index 0 as target [ 402.316971][T17018] netlink: 'syz.0.3488': attribute type 1 has an invalid length. [ 402.489725][T17034] __nla_validate_parse: 10 callbacks suppressed [ 402.489743][T17034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3491'. [ 402.510387][T17031] syzkaller0: entered promiscuous mode [ 402.518866][T17031] syzkaller0: entered allmulticast mode [ 402.548801][T17036] erspan0: entered promiscuous mode [ 402.624694][T17040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3495'. [ 402.723723][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'. [ 402.735193][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.897458][T17063] Cannot find add_set index 0 as target [ 403.057836][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 403.109540][T17075] netlink: 'syz.1.3507': attribute type 11 has an invalid length. [ 403.119517][T17075] netlink: 'syz.1.3507': attribute type 11 has an invalid length. [ 403.146600][T17075] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3507'. [ 403.187488][T17080] syzkaller0: entered promiscuous mode [ 403.193002][T17080] syzkaller0: entered allmulticast mode [ 403.201377][T17080] FAULT_INJECTION: forcing a failure. [ 403.201377][T17080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.250995][T17080] CPU: 0 UID: 0 PID: 17080 Comm: syz.2.3509 Not tainted syzkaller #0 PREEMPT(full) [ 403.251026][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.251038][T17080] Call Trace: [ 403.251046][T17080] [ 403.251055][T17080] dump_stack_lvl+0xe8/0x150 [ 403.251088][T17080] should_fail_ex+0x412/0x560 [ 403.251122][T17080] _copy_from_iter+0x1d3/0x1670 [ 403.251154][T17080] ? sock_alloc_send_pskb+0x896/0x990 [ 403.251185][T17080] ? __pfx__copy_from_iter+0x10/0x10 [ 403.251220][T17080] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 403.251245][T17080] skb_copy_datagram_from_iter+0xf5/0x710 [ 403.251271][T17080] ? dev_get_by_index+0x22/0x2e0 [ 403.251295][T17080] ? skb_put+0x11b/0x210 [ 403.251326][T17080] packet_sendmsg+0x37e4/0x50f0 [ 403.251360][T17080] ? __lock_acquire+0x6b5/0x2cf0 [ 403.251410][T17080] ? aa_sk_perm+0x6d5/0x900 [ 403.251436][T17080] ? __pfx_packet_sendmsg+0x10/0x10 [ 403.251462][T17080] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 403.251498][T17080] ? aa_sock_msg_perm+0xf1/0x1b0 [ 403.251525][T17080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.251549][T17080] ____sys_sendmsg+0x972/0x9f0 [ 403.251578][T17080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.251607][T17080] ? import_iovec+0x73/0xa0 [ 403.251631][T17080] ___sys_sendmsg+0x2a5/0x360 [ 403.251656][T17080] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.251706][T17080] ? __fget_files+0x2a/0x420 [ 403.251732][T17080] ? __fget_files+0x3a0/0x420 [ 403.251764][T17080] __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.251788][T17080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.251816][T17080] ? __pfx_ksys_write+0x10/0x10 [ 403.251848][T17080] do_syscall_64+0x14d/0xf80 [ 403.251868][T17080] ? trace_irq_disable+0x3b/0x150 [ 403.251895][T17080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.251915][T17080] ? clear_bhb_loop+0x40/0x90 [ 403.251938][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.251957][T17080] RIP: 0033:0x7fabfcb9c799 [ 403.251975][T17080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.251992][T17080] RSP: 002b:00007fabfda71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.252012][T17080] RAX: ffffffffffffffda RBX: 00007fabfce15fa0 RCX: 00007fabfcb9c799 [ 403.252026][T17080] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000008 [ 403.252039][T17080] RBP: 00007fabfda71090 R08: 0000000000000000 R09: 0000000000000000 [ 403.252050][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.252062][T17080] R13: 00007fabfce16038 R14: 00007fabfce15fa0 R15: 00007fffccf3de58 [ 403.252091][T17080] [ 403.576226][T17088] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3511'. [ 403.638414][T17088] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3511'. [ 403.701906][T17098] Cannot find add_set index 0 as target [ 404.115232][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3522'. [ 404.572585][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 404.787122][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3540'. [ 405.054952][T17205] Cannot find add_set index 0 as target [ 405.076234][T17206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.215965][T17216] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 405.222669][T17217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 405.264080][T17219] xt_hashlimit: size too large, truncated to 1048576 [ 405.300764][T17223] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 405.437369][T17230] ip6gre2: entered promiscuous mode [ 405.461616][T17230] ip6gre2: entered allmulticast mode [ 405.571726][T17238] x_tables: duplicate underflow at hook 1 [ 405.601703][T17240] bond2: (slave ip6gretap1): making interface the new active one [ 405.612252][T17240] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 406.248431][T17291] validate_nla: 2 callbacks suppressed [ 406.248450][T17291] netlink: 'syz.3.3568': attribute type 61 has an invalid length. [ 406.576224][T17251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.680170][T17317] Cannot find add_set index 0 as target [ 406.839573][T17332] netlink: 'syz.2.3578': attribute type 1 has an invalid length. [ 406.911907][T17335] siw: device registration error -23 [ 407.226565][T17357] bridge0: port 3(team0) entered blocking state [ 407.262838][T17357] bridge0: port 3(team0) entered disabled state [ 407.279532][T17357] team0: entered allmulticast mode [ 407.308937][T17357] team_slave_0: entered allmulticast mode [ 407.330606][T17357] team_slave_1: entered allmulticast mode [ 407.350830][T17357] team0: entered promiscuous mode [ 407.358392][T17357] team_slave_0: entered promiscuous mode [ 407.364609][T17357] team_slave_1: entered promiscuous mode [ 407.510637][T17368] ================================================================== [ 407.518754][T17368] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0xea/0x680 [ 407.526326][T17368] Read of size 8 at addr ffff88802599bfe8 by task syz.4.3588/17368 [ 407.534226][T17368] [ 407.536567][T17368] CPU: 1 UID: 0 PID: 17368 Comm: syz.4.3588 Not tainted syzkaller #0 PREEMPT(full) [ 407.536594][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.536607][T17368] Call Trace: [ 407.536615][T17368] [ 407.536624][T17368] dump_stack_lvl+0xe8/0x150 [ 407.536654][T17368] print_report+0xba/0x230 [ 407.536677][T17368] ? blk_mq_free_rqs+0xea/0x680 [ 407.536699][T17368] kasan_report+0x117/0x150 [ 407.536723][T17368] ? blk_mq_free_rqs+0xea/0x680 [ 407.536749][T17368] blk_mq_free_rqs+0xea/0x680 [ 407.536775][T17368] blk_mq_free_map_and_rqs+0x40/0xf0 [ 407.536799][T17368] blk_mq_free_sched_res+0xeb/0x280 [ 407.536825][T17368] elevator_change_done+0x1d2/0x5f0 [ 407.536850][T17368] ? __pfx_elevator_change_done+0x10/0x10 [ 407.536873][T17368] ? elevator_change+0x2e0/0x450 [ 407.536895][T17368] elevator_change+0x321/0x450 [ 407.536918][T17368] elevator_set_none+0xb5/0x140 [ 407.536938][T17368] ? __pfx_elevator_set_none+0x10/0x10 [ 407.536962][T17368] ? xa_load+0x1db/0x210 [ 407.536989][T17368] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 407.537020][T17368] ? kernfs_add_one+0x477/0x5c0 [ 407.537048][T17368] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 407.537075][T17368] ? sysfs_add_file_mode_ns+0x259/0x300 [ 407.537101][T17368] nbd_start_device+0x17f/0xb10 [ 407.537125][T17368] ? device_create_file+0xf4/0x1b0 [ 407.537149][T17368] nbd_genl_connect+0x165b/0x1cf0 [ 407.537174][T17368] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.537196][T17368] ? rcu_is_watching+0x15/0xb0 [ 407.537225][T17368] ? __nla_parse+0x40/0x60 [ 407.537245][T17368] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 407.537273][T17368] genl_family_rcv_msg_doit+0x22a/0x330 [ 407.537298][T17368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 407.537328][T17368] ? __lock_acquire+0x6b5/0x2cf0 [ 407.537354][T17368] genl_rcv_msg+0x61c/0x7a0 [ 407.537378][T17368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.537399][T17368] ? __pfx_nbd_genl_connect+0x10/0x10 [ 407.537418][T17368] ? __lock_acquire+0x6b5/0x2cf0 [ 407.537446][T17368] netlink_rcv_skb+0x232/0x4b0 [ 407.537474][T17368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.537495][T17368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.537539][T17368] ? down_read+0x272/0x2e0 [ 407.537561][T17368] ? genl_rcv+0xd/0x40 [ 407.537582][T17368] genl_rcv+0x28/0x40 [ 407.537602][T17368] netlink_unicast+0x80f/0x9b0 [ 407.537630][T17368] ? __pfx_netlink_unicast+0x10/0x10 [ 407.537655][T17368] ? netlink_sendmsg+0x650/0xb40 [ 407.537680][T17368] ? skb_put+0x11b/0x210 [ 407.537699][T17368] netlink_sendmsg+0x813/0xb40 [ 407.537731][T17368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.537759][T17368] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.537787][T17368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.537809][T17368] ____sys_sendmsg+0x972/0x9f0 [ 407.537834][T17368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.537859][T17368] ? import_iovec+0x73/0xa0 [ 407.537881][T17368] ___sys_sendmsg+0x2a5/0x360 [ 407.537904][T17368] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.537927][T17368] ? futex_wake+0x4ac/0x580 [ 407.537966][T17368] ? __fget_files+0x2a/0x420 [ 407.537993][T17368] ? __fget_files+0x3a0/0x420 [ 407.538021][T17368] __x64_sys_sendmsg+0x1bd/0x2a0 [ 407.538044][T17368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.538069][T17368] ? rcu_is_watching+0x15/0xb0 [ 407.538101][T17368] do_syscall_64+0x14d/0xf80 [ 407.538123][T17368] ? trace_irq_disable+0x3b/0x150 [ 407.538152][T17368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.538171][T17368] ? clear_bhb_loop+0x40/0x90 [ 407.538193][T17368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.538213][T17368] RIP: 0033:0x7fcbad19c799 [ 407.538232][T17368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.538251][T17368] RSP: 002b:00007fcbab3ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.538273][T17368] RAX: ffffffffffffffda RBX: 00007fcbad415fa0 RCX: 00007fcbad19c799 [ 407.538289][T17368] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 407.538303][T17368] RBP: 00007fcbad232c99 R08: 0000000000000000 R09: 0000000000000000 [ 407.538317][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.538330][T17368] R13: 00007fcbad416038 R14: 00007fcbad415fa0 R15: 00007ffdbfc6fff8 [ 407.538353][T17368] [ 407.538361][T17368] [ 407.954809][T17368] Allocated by task 1: [ 407.958940][T17368] kasan_save_track+0x3e/0x80 [ 407.963617][T17368] __kasan_kmalloc+0x93/0xb0 [ 407.968198][T17368] __kmalloc_node_noprof+0x4e0/0x7c0 [ 407.973472][T17368] blk_mq_alloc_tag_set+0x4e3/0xfc0 [ 407.978668][T17368] nbd_dev_add+0x30e/0xb50 [ 407.983074][T17368] nbd_init+0x168/0x1f0 [ 407.987225][T17368] do_one_initcall+0x250/0x8d0 [ 407.991993][T17368] do_initcall_level+0x104/0x190 [ 407.996920][T17368] do_initcalls+0x59/0xa0 [ 408.001270][T17368] kernel_init_freeable+0x2a6/0x3e0 [ 408.006458][T17368] kernel_init+0x1d/0x1d0 [ 408.010781][T17368] ret_from_fork+0x51e/0xb90 [ 408.015369][T17368] ret_from_fork_asm+0x1a/0x30 [ 408.020133][T17368] [ 408.022449][T17368] The buggy address belongs to the object at ffff88802599bfe0 [ 408.022449][T17368] which belongs to the cache kmalloc-8 of size 8 [ 408.036149][T17368] The buggy address is located 0 bytes to the right of [ 408.036149][T17368] allocated 8-byte region [ffff88802599bfe0, ffff88802599bfe8) [ 408.050470][T17368] [ 408.052811][T17368] The buggy address belongs to the physical page: [ 408.059224][T17368] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2599b [ 408.067984][T17368] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 408.075155][T17368] page_type: f5(slab) [ 408.079126][T17368] raw: 00fff00000000000 ffff88813fea5500 dead000000000100 dead000000000122 [ 408.087698][T17368] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 408.096268][T17368] page dumped because: kasan: bad access detected [ 408.102672][T17368] page_owner tracks the page as allocated [ 408.108374][T17368] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5427333986, free_ts 5420964183 [ 408.128176][T17368] post_alloc_hook+0x231/0x280 [ 408.132939][T17368] get_page_from_freelist+0x24dc/0x2580 [ 408.138488][T17368] __alloc_frozen_pages_noprof+0x18d/0x380 [ 408.144290][T17368] allocate_slab+0x77/0x660 [ 408.148785][T17368] refill_objects+0x331/0x3c0 [ 408.153453][T17368] __pcs_replace_empty_main+0x2e6/0x730 [ 408.158995][T17368] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 408.165576][T17368] kstrdup+0x42/0x100 [ 408.169549][T17368] __kernfs_new_node+0xa9/0x8e0 [ 408.174393][T17368] kernfs_new_node+0x102/0x210 [ 408.179164][T17368] kernfs_create_link+0xa7/0x200 [ 408.184116][T17368] sysfs_do_create_link_sd+0x83/0x110 [ 408.189512][T17368] device_add_class_symlinks+0x1cf/0x240 [ 408.195154][T17368] device_add+0x475/0xb70 [ 408.199491][T17368] device_create+0x269/0x300 [ 408.204104][T17368] bdi_register_va+0x9c/0x770 [ 408.208802][T17368] page last free pid 1 tgid 1 stack trace: [ 408.214602][T17368] __free_frozen_pages+0xc2b/0xdb0 [ 408.219801][T17368] vfree+0x25a/0x400 [ 408.223698][T17368] bdev_disk_changed+0x8c1/0x1550 [ 408.228715][T17368] blkdev_get_whole+0x380/0x510 [ 408.233568][T17368] bdev_open+0x31e/0xd30 [ 408.237816][T17368] bdev_file_open_by_dev+0x1be/0x240 [ 408.243111][T17368] disk_scan_partitions+0x1c1/0x2c0 [ 408.248332][T17368] add_disk_fwnode+0x321/0x480 [ 408.253104][T17368] brd_alloc+0x5b9/0x7c0 [ 408.257351][T17368] brd_init+0xc1/0x120 [ 408.261416][T17368] do_one_initcall+0x250/0x8d0 [ 408.266175][T17368] do_initcall_level+0x104/0x190 [ 408.271102][T17368] do_initcalls+0x59/0xa0 [ 408.275444][T17368] kernel_init_freeable+0x2a6/0x3e0 [ 408.280634][T17368] kernel_init+0x1d/0x1d0 [ 408.284956][T17368] ret_from_fork+0x51e/0xb90 [ 408.289538][T17368] [ 408.291849][T17368] Memory state around the buggy address: [ 408.297463][T17368] ffff88802599be80: 00 fc fc fc 05 fc fc fc 00 fc fc fc 00 fc fc fc [ 408.305511][T17368] ffff88802599bf00: 04 fc fc fc 04 fc fc fc 04 fc fc fc 05 fc fc fc [ 408.313752][T17368] >ffff88802599bf80: 00 fc fc fc 05 fc fc fc 00 fc fc fc 00 fc fc fc [ 408.321835][T17368] ^ [ 408.329286][T17368] ffff88802599c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 408.337360][T17368] ffff88802599c080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 [ 408.345416][T17368] ================================================================== [ 408.373963][T17368] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 408.381213][T17368] CPU: 0 UID: 0 PID: 17368 Comm: syz.4.3588 Not tainted syzkaller #0 PREEMPT(full) [ 408.390589][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.400640][T17368] Call Trace: [ 408.403913][T17368] [ 408.406835][T17368] vpanic+0x56c/0xa60 [ 408.410824][T17368] ? __pfx_vpanic+0x10/0x10 [ 408.415333][T17368] panic+0xc5/0xd0 [ 408.419050][T17368] ? __pfx_panic+0x10/0x10 [ 408.423461][T17368] ? preempt_schedule_thunk+0x16/0x30 [ 408.428858][T17368] ? preempt_schedule_thunk+0x16/0x30 [ 408.434225][T17368] ? blk_mq_free_rqs+0xea/0x680 [ 408.439080][T17368] check_panic_on_warn+0x89/0xb0 [ 408.444014][T17368] ? blk_mq_free_rqs+0xea/0x680 [ 408.448870][T17368] end_report+0x73/0x180 [ 408.453109][T17368] ? blk_mq_free_rqs+0xea/0x680 [ 408.457953][T17368] kasan_report+0x128/0x150 [ 408.462450][T17368] ? blk_mq_free_rqs+0xea/0x680 [ 408.467294][T17368] blk_mq_free_rqs+0xea/0x680 [ 408.471966][T17368] blk_mq_free_map_and_rqs+0x40/0xf0 [ 408.477246][T17368] blk_mq_free_sched_res+0xeb/0x280 [ 408.482438][T17368] elevator_change_done+0x1d2/0x5f0 [ 408.487629][T17368] ? __pfx_elevator_change_done+0x10/0x10 [ 408.493371][T17368] ? elevator_change+0x2e0/0x450 [ 408.498302][T17368] elevator_change+0x321/0x450 [ 408.503060][T17368] elevator_set_none+0xb5/0x140 [ 408.507900][T17368] ? __pfx_elevator_set_none+0x10/0x10 [ 408.513352][T17368] ? xa_load+0x1db/0x210 [ 408.517590][T17368] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 408.523396][T17368] ? kernfs_add_one+0x477/0x5c0 [ 408.528245][T17368] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 408.534486][T17368] ? sysfs_add_file_mode_ns+0x259/0x300 [ 408.540044][T17368] nbd_start_device+0x17f/0xb10 [ 408.544898][T17368] ? device_create_file+0xf4/0x1b0 [ 408.550013][T17368] nbd_genl_connect+0x165b/0x1cf0 [ 408.555047][T17368] ? __pfx_nbd_genl_connect+0x10/0x10 [ 408.560415][T17368] ? rcu_is_watching+0x15/0xb0 [ 408.565180][T17368] ? __nla_parse+0x40/0x60 [ 408.569635][T17368] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 408.575980][T17368] genl_family_rcv_msg_doit+0x22a/0x330 [ 408.581535][T17368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.587612][T17368] ? __lock_acquire+0x6b5/0x2cf0 [ 408.592552][T17368] genl_rcv_msg+0x61c/0x7a0 [ 408.597049][T17368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.602062][T17368] ? __pfx_nbd_genl_connect+0x10/0x10 [ 408.607424][T17368] ? __lock_acquire+0x6b5/0x2cf0 [ 408.612359][T17368] netlink_rcv_skb+0x232/0x4b0 [ 408.617123][T17368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.622143][T17368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.627431][T17368] ? down_read+0x272/0x2e0 [ 408.631839][T17368] ? genl_rcv+0xd/0x40 [ 408.635897][T17368] genl_rcv+0x28/0x40 [ 408.639964][T17368] netlink_unicast+0x80f/0x9b0 [ 408.644728][T17368] ? __pfx_netlink_unicast+0x10/0x10 [ 408.650016][T17368] ? netlink_sendmsg+0x650/0xb40 [ 408.654950][T17368] ? skb_put+0x11b/0x210 [ 408.659182][T17368] netlink_sendmsg+0x813/0xb40 [ 408.663951][T17368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.669245][T17368] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.674180][T17368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.679458][T17368] ____sys_sendmsg+0x972/0x9f0 [ 408.684220][T17368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.689500][T17368] ? import_iovec+0x73/0xa0 [ 408.693994][T17368] ___sys_sendmsg+0x2a5/0x360 [ 408.698672][T17368] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.703903][T17368] ? futex_wake+0x4ac/0x580 [ 408.708502][T17368] ? __fget_files+0x2a/0x420 [ 408.713109][T17368] ? __fget_files+0x3a0/0x420 [ 408.717810][T17368] __x64_sys_sendmsg+0x1bd/0x2a0 [ 408.722741][T17368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.728195][T17368] ? rcu_is_watching+0x15/0xb0 [ 408.732960][T17368] do_syscall_64+0x14d/0xf80 [ 408.737542][T17368] ? trace_irq_disable+0x3b/0x150 [ 408.742561][T17368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.748620][T17368] ? clear_bhb_loop+0x40/0x90 [ 408.753293][T17368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.759179][T17368] RIP: 0033:0x7fcbad19c799 [ 408.763589][T17368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.783277][T17368] RSP: 002b:00007fcbab3ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.791682][T17368] RAX: ffffffffffffffda RBX: 00007fcbad415fa0 RCX: 00007fcbad19c799 [ 408.799647][T17368] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 408.807608][T17368] RBP: 00007fcbad232c99 R08: 0000000000000000 R09: 0000000000000000 [ 408.815609][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.823598][T17368] R13: 00007fcbad416038 R14: 00007fcbad415fa0 R15: 00007ffdbfc6fff8 [ 408.831565][T17368] [ 408.834845][T17368] Kernel Offset: disabled [ 408.839156][T17368] Rebooting in 86400 seconds..