last executing test programs: 3.39033028s ago: executing program 2 (id=7435): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[], 0x2e8}}], 0x2, 0x404c840) 3.297425117s ago: executing program 2 (id=7436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c00)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="cea5"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05080000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb64bff7360e7749fe5bee3900900010053"], 0x114}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'veth1_vlan\x00', {}, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYBLOB="03950dd4734731487fcad4b05a377b43530db6c90e103eb250636904a08faf6f6510cdfb90f4adae064a8e3cc53112718fd4a96a3db2734f79f12c8107220dc9fdb6a3aa3833d3776ee12be17ef1640f8db690c067b3fdf77700fc5d9eae", @ANYBLOB="040002"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4) 3.099537537s ago: executing program 1 (id=7438): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000003feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000620a00fe000000007133000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0ffffff, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 2.946658794s ago: executing program 2 (id=7439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmmsg$alg(r2, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="cf32665cdbe38057a78f12ae796b434c4f7826", 0x13}, {&(0x7f00000002c0)=',', 0x1}, {&(0x7f0000000300)="661c7589fc159bbd572efe44f4cf85bf78b6796c7d6deedbd478c036c4fed50ba75f1843f70c626d94634a925e875f3a1835e98c79f4a491c370a221aee41bdb0dedc6e6043651b44850b4c5c00a", 0x4e}], 0x3, &(0x7f0000000740)=[@iv={0x28, 0x117, 0x2, 0xe, "476a7ed21a4c61935a6a52cbf32d"}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x80, 0x117, 0x2, 0x6c, "1ad0b253c8e78043aa1639d217f1794e4c2124b2ebabb92eed627adb4442e1764284dbfedbe856ddb00a2d18543fb7e0e8ef0175ae75b955be43d56d74bc5a5282b2dae104cd249e3fdf0e4489cff0c79661014f070efd6d91a9214c3cf394a9b447ae6400f5d2325d0315d8"}, @assoc={0x18, 0x117, 0x4, 0xfff}], 0xd8, 0x80}, {0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="01100d7ee607aba40c28d69b3989c81118f473146100c0f372a55673ecc56d765119b8528b9a7037519994b28b028b42617cd7b5c65004e3e0458dd3e98b8458c920a0a36a0e0e4643dd9483a9bda4afe116bbbeff525e645366fbd5f8982e30a55e5af00b1cb6e2f00fa2c7c813560e828f78cb3a42ffaff6a593b82aca4048e89e699677f7702d477cbdf38e94856c5ce0537ed1d716e92fc1a5a7c7967a00d487d481da00c6762ba76ff223320c256f1fe74a", 0xb4}, {&(0x7f0000001900)="cfbb17a2e4b0e8372f5a9d0a9049f40117d677c6abe7fccde5edd6d764937e8dd8bfd474e111e5c8cdbb77f5576105d105d56d2c9619d1c2a13e1fc162ef2642f2f52514f9dc6253d531aa61ceeb21686988ed44d42fa72250072257267c3581fe2453372e6bca37dded68d6717d2939c83a2ed126ef1c7f876643290c66db3e9266e5566a77c6494dc7ca96483174f5312d66156c53e435cee57078071d20a1d2dbdcef5f2331cc8a215f11899fdcfc4a5f864272637972afc56bc713db0b1762", 0xc1}, {&(0x7f0000001a00)="42282f8b13ca30aebd452fcb7c72c1cb583b4d0ef36ef89812ebb1eb12d951fb1fb7e096c29d28ce3709094456a855b1cca8ffd93f122e94f90a5e", 0x3b}, {&(0x7f0000001a40)="681697b528cb8874bf8601ff733463cd15e36a029b8c3019a3ba883c7c65b1de922e7320c6da7ee37100cf45a93b5bd90ef7a9e22465b1229dcdc7e8ca1b7b2b1f3b14d083d60788679d752a5a919086409258b9ea97ad89ee71b90ccf600705f52d4fc730d6fa413c295eb3c08ff448e5af66cc28dd6c80641d75288bd5887a0c88b99d085078781910028fa4a062ff79841c9d1c91142d96e771c376e8bf68a295515f2b9837def3ef5e0ec8c4adfab17728e9eb42e47e947472895fcf6ff0b6f92f37d1f0c3c97dbd53ae4c4368fca05fc745b471ed90a2e5750e4a12ac", 0xdf}], 0x5, 0x0, 0x0, 0x8044}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001bc0)="d5a5dd5b8f78d859e6ce8a676d97bda42ba964d72f7f9e6c1e9f15c140f1348230dfaa0b374e17ec8bc044ff222b0860ce0d3442e375cf833a3280ada9ac2d9b86bd08a632365e37efd1a65b936a1d7eb5be3f5d243938f71fa8c8ae4146229a115e46dca9452770b191f9ec294d", 0x6e}, {&(0x7f0000001c40)="4340f019f24b937fbaad0de6367fcca0154b9516c4d018a0bddd41994ec9bcc7c14c95f5", 0x24}, {&(0x7f0000001c80)="bb7e7bfa90abf5a6a2a28b5fa98f983a7c0029d29796871373607ef0f1c3be8e65d3932cdf71acad77c4f9817c9f5a36196b938fc7e80132dfe3f320c9304d5506f19cc328099dc1dde84cb6585607f38a232eeddeaa4e520bd78d8e0239b726eb16e9037b4013d76ce798198e8b488c17b923c2cc", 0x75}, {&(0x7f0000001d00)="cef8d6aae5b1d8eae386aa87b2cc1dff168e23d687f4ea6580f9ab2c244c9f6fc5580e351f027ec6aad1f0107b95ecd3b80a5a4236526d679525e36cbf83fd28bb3d9d9f68d05f2d6ff9dbebb23cbfce4a5ebd199c3767ccf02a06c9d320af3831c78711651d05ad72b1052e4ff7638b9226decd213395061bbb3612bec4c9ad3fc1dc2613fa35d0e8e667189c725dc065aae5b1461836b13ca4499675bbcb31bb7326616732f635afa65bba621dd61a6c2c4b169e7bb22f4871a2f334e466dafc3ff5cf7cbddc8494cd2c23840fceb199ac0cd18c49946bca2e7c724ba3", 0xde}, {&(0x7f0000001e00)="7bf19d2fd17017f51ac7cf4fdd23d36ea9f41fa22fd09f98af8cd2c2e4e2a829cb1331516d7e37eb2582e870c7858207b7e3198f64464c5c6ce67af6a283172f4e60149a5172a7b92f45ee9520edff370a0d8023afa5633bb81c03bc3d9480889cca001949620a6ab61fdc9baef1d2cd98992d17412a46fbf96148", 0x7b}, {&(0x7f0000001e80)="ea78af35ed983aa4856b06eb47ba07a3df17dbd3bf607c0a916eb6b0285958583198c769c242f1b6cf389c69e0beeb604f6b48680e5c723124a28e42fa82b9f1127fa5070aeb7e0f565904528add9756dc8f0150cfa78ea2a8c6a99284080a45fb5dad1d6409e90e31eaf57f882ab3b107f048d40b934dd67d41710ec5724dcb9573e641026a71be50ea46280c1e414ab9c806da9a2dc70bed181eec5e66d7f19633ed9ae6e361be35732bdc6b446f91596d224d8fd0aba398a27fb549d071fa6566fad8ac49dcb94c3df92f0e83936360ff7c05b96aa144fdcbe71c2498e472", 0xe0}, {&(0x7f0000001f80)="990fbadbd6907a25bc9743cf15006820b6588b61d679c48d79ecb0a68dbfcba4437fdeef2b0dcca5801315a06ef7799b86bde283a0247f16330f935a7768382611f2c1de42b4625ec72cbd462b113bf3099f15b0584cf51c082863bc141c8d08e7d0debca0a01e7d7af43642873c703dbea441524b008060cd26ab8ccf87a41613b5ecad3b145accd7e27c6b96d8223c7b3f989ff02aed20083d4df461f1c8cc6ee805c81dbe63a989aa38cf0e31405997881aa122faf433dc9ec7e972052cee6842cc24", 0xc4}, {&(0x7f0000002080)="73d94f7c3df15dc37e043861959106a7151f1050aa498d9963f2c94dac2f3865cfa23a599f23931172cc65f5dd47847ab96b7bb29abadfdbf119348adbb93a1793b76c01bcb7e1a2cbe43c3e8a7b6e4007f77f7b25783ecc7b5107c60999c19f4675e9b436299577aebed2e3253c887ab21f77b598b79e45d9b0200e552a5954c505c82f8159ae7246a735a166417e6d7f6184", 0x93}, {&(0x7f0000002140)="b4ad06f423e877bbc20315f9a3d7548fe2b52636ff1208029b9a7fc5fc63172c00eba62a56dee6d8b7066ba7882d4e6ce76377d57332f63eaaca0af4313ad49c2f9f8bfebd304e6e28c65600c729ae43cc3930dacb5b37edc04da6a40c6429e18dd64763830729f77cfe47beb9351dc501067dbe10d06fccc36426f8e15ac1394f0be0e30e226fc77bfc269e4ac401b13ad66e6e8517232a71a97495148825359679537436d6b32e32caa3c689bcfc5482e5b68c46fb96c8d15804f11e43f252eacf3cb2c79d", 0xc6}], 0x9, &(0x7f0000002300)=[@op={0x18}, @iv={0x100, 0x117, 0x2, 0xe6, "61190b22b269a23b405490465bae9b8f904f5b08ae9d717981a9c1a30b19f9b71a4a921ac25352f64170e99dada27a30730c55611077f7bca32a17a45480522fd4645e7f85bff07f507c01a94a65145a86f8a615ef3e16ce411a92da9dd20ea59c71640dd97f0a57ce3a7a3be2a4b7a50d756a975174aba1089237b17866e5d822a92a136e889b6444cf7f63833ecbd0d52001b987fbd70b3dc79adb4eec6552cb95eca5d5522a77ddcc6d6a4605a56a181a32aabd0c8326903c08744cf09a5b8b861f7bad129ab49c0564ec3e25f37a064457744e34e28d1a331ecde3965675ef11dc8fd8f9"}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x6a, "f8515c4532536e5b35501669d475145d2f036704b92cc4e6389a184954e358cfe2a1070be28feae67e41ac025cb450e6f622ec33ed25733ec5f8d5a9347f1df67b8d6989f9dceb5a64841dfc574894eb8ce637c39ba992caccbf1eab266b25891e808fc6c665b5df73fa"}], 0x1c8, 0x80}, {0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002500)="9247735571547f4c92736204d95e1dd303aabc3b5329ebb5ab0bfe93f218206a16a2023f1a93de16cd138a294b9e793d7257b8132080f70c2013c28a97728a03c4fef27aec51f9f6ecca8bae0a30e284549bb8b2ec09e1ee8d64a1fcb74e3184", 0x60}, {&(0x7f0000002580)="e91f3ae78a434fca1b3b600b9dcc8e9a81f22caae110b2ac3bf42f34bf3f83f7c5242dbd5394e3b9cf76ad69246177ab383008fe305ec9c837bcb6833d14ad2f95855bf64ce2988424", 0x49}, {&(0x7f0000002600)="a203f0c698737087b8d9fa7cf9534b7ba0f7170f1b15ba0077938a041428ec8ff976e2709248de8b357b7ab3bf4de66d7b1720ddac4f545aae1fe591ab7a805336d698a04ab32038b6491e8e2b5ac1e4570dc0647a038bda644d7927aba4483a42049d606c0d8b9f116754c6b4fa1acf0671b04c376cc6364016bc83f54f9642370e6a22546eeff73d9652d27ba9", 0x8e}], 0x3, 0x0, 0x0, 0x8840}], 0x4, 0x8010) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000779116000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) 2.856610371s ago: executing program 1 (id=7441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x208, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x9c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4}]}]}, @NFTA_SET_DESC={0x130, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x230}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884) r11 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100f8ed28"], 0x50) accept$packet(r11, 0x0, &(0x7f0000000180)) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r11, 0x4008f510, &(0x7f0000000140)=0xfffffffffffffffe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000640)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) 2.741610288s ago: executing program 2 (id=7443): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 2.58544374s ago: executing program 2 (id=7446): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0x73) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079a0480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syz_tun\x00', 0x2}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7, 0x11, r0, 0x0) 2.417277033s ago: executing program 2 (id=7448): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000300)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000000c0)) unshare(0x48000400) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.783739446s ago: executing program 4 (id=7456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f00000000c0)={0x2, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100020000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB="5571e00fc246fc9f9022e7aa1c45e4fda01629edf674747d0c69b67a04a2c6573d125a"], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000001c0)=0xd5a4, 0x4) 1.519644595s ago: executing program 0 (id=7458): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7e2, 0x10}, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x4, 0x20, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000009c0)='GPL\x00', 0x101, 0xd8, &(0x7f0000000a00)=""/216, 0x41100, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x4, 0x8000, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000001340)=[{0x0, 0x3, 0xe, 0xb}, {0x4, 0x2, 0xb, 0xa}, {0x1, 0x3, 0x4, 0xa}, {0x5, 0x1, 0xd, 0x8}], 0x10, 0x80000001}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001440)={0xc4, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x219}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xc4}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x608, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x5c}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52300}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x50}}, 0x0) 1.365535369s ago: executing program 4 (id=7460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r1 = socket(0x1e, 0x4, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x1, 0x1, 0x0, 0x7, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x800}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x30, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28d44, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9c0400", 0x28, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8, 0x0, 0x4000, {[@mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x7, @multicast2, 0x9, "f7ff000000"}, @fastopen={0x22, 0x5, 'vl\b'}]}}}}}}}}, 0x0) 1.290765536s ago: executing program 4 (id=7462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 1.197311121s ago: executing program 4 (id=7463): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000c000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000000000095000d00000000008500000008000000bf9800000000000056080000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="660a000000000000619500000000000000000000000000001557f403de4840d96071f59b9c40dd91c10917c340d75a9069913142e1190f8edfe87caba2d6f4d4943d7a6b27afcd0f9fa1b32e153c27438f55b254b967314ac2458bdaf399c49f686da1333ba23d9eedf40cb5f1b686f4dcbecc7b0e45bfbf6dc56dd84cfea0553189138c2bdda1381fb6de75607860fcbc2e22ad9f50c009fe3711db43d5b1"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2511000000080032007d00000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x200480e4}, 0x20008840) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r4, 0xfffff789) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="0000000000f9d900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010100}, 0x4b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x42) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x2b, 0x0, "37ddfa1f1047a0a2be08f9683d9cfc56da791df0d11b215ea51282432449decea58c0afa4c3ec4bcd97121f3cfd07cfd0b2b742475102f6aae7d06a87b36734a8de7a7eb274221db71e0066e94e7de16"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0xc, 0x72}, @timestamp, @window={0x3, 0x5, 0x100}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x9}, @timestamp, @timestamp, @sack_perm], 0x8) sendmmsg$inet(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="3df974a52f545d667dfab50813087f4e5a87aa92ad82dfd62ed1b7a13725fea22328aa6b73c48d2a4479f182c0b862d25d942d0516516fe079dcccaa1ff72329a7f69982fee7293e8fe49262c449c335352361a5ca8135852ea93a295ef200000412f5", 0x63}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x24040014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x23, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) 1.178631017s ago: executing program 1 (id=7464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.124304364s ago: executing program 3 (id=7465): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000140), 0x311000}, 0x20) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000003e58000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000000000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000002009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) close(r0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01010000000000000000000000013c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000043c0000001e0a05020000000000000000010000000900020073797a3200000000100003800c000080797a3000000000140000001000010000000000000000000000000a00"/180], 0xb4}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0xc}, {r7, 0x4000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r7, 0x7866) shutdown(r7, 0x0) unshare(0x400) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000480)=@hopopts={0x2e, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xa3, 0x4, [0x80000000, 0xc8, 0x100]}}, @pad1]}, 0x30) r8 = socket(0x1d, 0x80802, 0x6) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xfd}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) close(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 972.762832ms ago: executing program 1 (id=7466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c00028008003400", @ANYRES32=0x0, @ANYBLOB="311c2f0733bdf2dd", @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="34010000030101010000000000000000020000000800034000002002100004800c000280050002000600000054000f80080003400000cb3808000240000000050800024000000e010800024000000007080003400000000808000340000000030800034000000081080001400000000108000240000000c008000140000080000c001640fffffffa000000040c001880080002400000000708000c40000000007c000680080002000a01010214000500fc02000000000000000000000000000114000400fe88000000000000000000000000000124000380060001004e200000060001004e240000060001004e230000060001004e23000024000380060002004e22000002004e200000060001004e24000008001a40000000071000058009000100707074700000000000000000000000000000a1880838897f4ed72e36d3df2d3b499d23fb45b7c8d3534f3dbbf7b502011fd230c2c3e45579494a4014d859677588501ee4c24c4f1d4038e8fbea95d3c957edfd314543ac4068eb2779148e2ab389c2a5333d7089660f25ed0b313e163700920ce0"], 0x134}, 0x1, 0x0, 0x0, 0x48011}, 0x40) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000140)=@pppol2tp={0x21, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10b8}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettfilter={0x4c, 0x2e, 0x200, 0x8, 0x25dfdc03, {0x0, 0x0, 0x0, r3, {0xcbd673b2a68ffcec, 0x7}, {0xffe0, 0xfff2}, {0xfff3, 0x4}}, [{0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40208c0}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x11, 0xffffffffffffffff, 0x3b3a1000) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0xe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 922.73901ms ago: executing program 0 (id=7467): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="3914f1d60a0000feff00006111a00000000000185000000f00000000000000000000009500000000000000d218621039b78ac7c040d2434bed745cfda3996a2e2efa1cd4ab97a5ed976f2a73fb607491a39453b2dff59ac73f91af65a42b8668483af6cf82f0330153bb9effc5d7a16175996f809590bdb660ec60c0ace5072425f831513db48bb207e91ad8177b68faa230f402df8eabd8c8a78c05e06a2a5ad1ebdbd2"], &(0x7f0000000000)='GPL\x00'}, 0x94) 866.671311ms ago: executing program 0 (id=7468): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000280)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x997c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x19) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) pipe(&(0x7f0000000080)) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 717.021523ms ago: executing program 3 (id=7469): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000003feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000620a00fe000000007133000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xf8030000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 713.176317ms ago: executing program 3 (id=7470): r0 = socket$phonet(0x23, 0x2, 0x1) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, &(0x7f0000000080)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x78a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x563}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x33c, r6, 0xc850334044d692e7, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x270, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "fb32c06e7724f2959ce74c19008abf907473a89ee41d795939859ee498f2e843915b3678feedf32bab7e6ee65cba6acc3374ddcb276ae1b7c59053a7a6d6e1e1ea05a3fbc2ee20c87925cefc85c17268bec6bbb01c89"}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "51c8015e36e6520017c508fdfa7730b3e1f84afbd9c9890b2aa3aa09e159d70b3ccfb82c92cdf85349cd9ff9c68716b1f295101b34de8cf4b98b52649ef9ddbfeb42a75ad7640e67d968a16b74917e2f574416413e9b0150eedaf6e8ab714158d8e6e79bff80113d934d3d1ce27dbc248ba8bc53d96c169f162902de3eb92bb8ab4057995cce94c84e9b7c0f39b7c9cb88ef85863770ea73b96b1236b36a9b6f38e49d46f7129bafa6d9de0da74cf36ddbe585a1cdfd44636734656e86005e"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "6141ccf4cb1cce0a10fed73d927a50836666c13297ec3eac78f50295b34edff8aab15ab4f7bbd60f2c3fd3c31441a941d27f53924e1986313bb9c82ae3d5d45df923a76f398cd1dd11946b527326656a3d00b44cc261186adcc96296e8ddc085d781357630479157cfeab3fb33f735c9d721f607"}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "237223da50af71efdcea4e447cf0a6fc35e0a0848d25115ca2152bae892758c56f99550e66b68a8103b3cc95ab73b5256373ae14305fdd4c0f84c0e52d0d1e2d9dddf0ed7cf8f384a0d2a834bb46c4ba35b1402fff8eaf83f76a1fb8889e3f770832c623e1a42cad9737968f07605674ce9050a7a9024dc90ecc89e1b839ffe833f156e69890a74dc87a4e490723dbb625b37da9c3d0be69c2f280f30f394243b5fd307abac7d94d0c215476f8b6a46fb8f738bcb342958c7e58b9b602334f9ca4a9fc6a3ddb0241"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x44, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "6dd2e4e4287b389f27ec4ee5e48c99166a220c665e3e6359ca664efee2ffbb74771273671d29a801580ba768e451e72f4096aba75dd677054ac1"}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x18800000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4814}, 0x4000000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}]}, 0x1c}}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x1, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r6, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x20000880) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000cc0)=0xea, 0x8) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x7f, 0x0, r1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e80)={&(0x7f0000000d00)="d51ce5eb68958ced491c63fd24f681aa365b7831ccd426eddb5d23fda565dace57a34770", &(0x7f0000000d40)=""/44, &(0x7f0000000d80)="9bf4b8f5ede5aed41cecbc046273abb7c737e888529de2680f49e600867cbc4dd6b5ac89034d8f58d4474582be9edd15dc80", &(0x7f0000000dc0)="7dd3368d8daf8bc1b515b832758edc", 0x153, r11, 0x4}, 0x38) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r2) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x80, r12, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48cd00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001040)=0x7ff, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000010c0)={0x1d0, r3, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14fc842d1941e5be"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="09033b143e0658b9139f1d782809099b2ef3a841e8e57e13"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b49df361cc958e1b"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a1a7334bf6ae38ad619181b75dd16219"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2ada0ea89c4ecbda52ee838541a848a6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="075906da037da1051b53e4217acd5115ad907ca12c319a6d6a17e6c7f6ec00c3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="25f64c8e4352a2a9fb251bdf584da42d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x94}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3ff575d8dbaa34b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="80c608ff0204c4dced5ec60b5b60ae9a"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="72fc33c71243579eca04aa0f83d321a0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2c70231f4ea8de43ad3f4db4ebd1a6ae"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6cb5ff21b5e7cc283e26fcd53b051dd9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b4d2e955199d1c92ad1743f38eb74b934e99bf41c11820f9e4d599cc7f3741e1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4b97cc4f2412ebc0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x31b}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5e64b87405fa06a57072bae8361b6d9329f0553eba8f17665e45efd9c2711a42"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="709552f34a18567a42fe81ff538de539"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="72ada3e2a86a914c3d882acd4cb64fd91edbfc11e397443d7be781bac66e7a97"}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x2400c8d5}, 0x20000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000001380), r2) sendmsg$GTP_CMD_GETPDP(r13, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x94, r14, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FAMILY={0x5, 0xd, 0x2f}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) 287.135081ms ago: executing program 3 (id=7471): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000004200040001"], 0x50) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x44, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000500)={0x2, 0x4e63, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)}], 0x2}}], 0x1, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) 265.71753ms ago: executing program 4 (id=7472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) 262.950703ms ago: executing program 0 (id=7473): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0xfffffffffffffe14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x4a9, 0x52f}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0xffffffffffffff79, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x841) 217.411451ms ago: executing program 1 (id=7474): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'dvmrp1\x00', {0x6}, 0x8}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) close(0x3) r3 = socket$inet(0x2b, 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 211.179699ms ago: executing program 3 (id=7475): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/129, 0x81}], 0x5) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000030000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x3fb, 0x2, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x40) socket$unix(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, 0x0, 0x20048041) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "f35cdffa4c22ce"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001800)={0x0, r8, "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", "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"}) 128.224695ms ago: executing program 4 (id=7476): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000004c00088040000080040009801400040002004e230a010101000000000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000000000000010000002500000051742d634545d0ff670f9d2b8607c7c4c1b9eebce4f8424773e4f76154c4dbd5b238c2397df813993db782db1ee45af087f59a78ee5bf10504f490ff00000000cbbf93fbdebc92b3c1a8d05922f102c75233b1"], 0x50}}], 0x1, 0x4040845) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db700000000000001000400feffffff00000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 60.944312ms ago: executing program 1 (id=7477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pwritev(r3, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="3ae8f4", 0x3}], 0x2, 0x3, 0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x5021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 57.023794ms ago: executing program 0 (id=7478): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e1e, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000580)="7c16ae", 0x3}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x7}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x100000, @empty, 0x2}}, 0xad7, 0x2, 0x5, 0x3, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) 11.163573ms ago: executing program 0 (id=7479): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x2c020400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000180)="1667f18e8fb28b9b953004bef7d7065b1a760db511c9917d784e87a52782fe4d827b73e6907ef1aef522b54a9dcf8f3c6d360fa471fc25140c3c6dd3ae0d6cc004242806caca88073a81c31375cdcc623905027aa80815326494e4c8eda8563ec87d1bdf4f5de341e3c841f888931c", &(0x7f0000000200)=""/115}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a00000004000000140001"], 0x44}}, 0x0) close(r0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r7) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYRES32=r6, @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf250200000014000600fc02000000000000000000000000000114000500ff01000000000000000000000000439f00010800020000000000000002e203000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000c000000aa000000000002ba18000000000000001001000001000000000000000000"], 0x30}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x480, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xcb, 0xf, 0x4, 0x7ff, 0x1, 0x8000, 0xa5, 0x7ff, 0x3676, 0x8de, 0x2, 0x0, 0xc8, 0x7, 0xe14e, 0x2, 0xffff086b, 0x6372, 0x0, 0x200, 0x200, 0x4, 0x3, 0xbf, 0xfffffff9, 0x4, 0x180, 0x94, 0x4, 0x80000000, 0xf0, 0x6, 0x4, 0x7ff, 0x204, 0x6cc7, 0x7, 0x9, 0x16f, 0x5, 0xfffffffa, 0x2, 0x80000001, 0x401, 0x3, 0x832d, 0x0, 0x0, 0x0, 0x7, 0x4, 0x7, 0x5, 0x1f12, 0x2, 0x2, 0x6, 0x7, 0x2, 0x56e23768, 0x4, 0x0, 0xfef, 0x2, 0x3ff, 0x2, 0xfffffff8, 0x7fff, 0x85, 0x693b, 0x8, 0xffffffff, 0x6, 0x0, 0x9, 0x2, 0x5, 0x2, 0x3, 0x6, 0x8, 0x80000001, 0x8b1, 0x7, 0xafd6, 0x80, 0x9, 0x5, 0xa225, 0x477, 0x7, 0x357, 0x800, 0x4, 0x4, 0x4df, 0xfffffffe, 0x7, 0xfffffba5, 0x6, 0x100, 0x400, 0x93ad, 0x2, 0x2, 0xfffffff9, 0x2, 0x7f, 0xff, 0xffffff7f, 0xa1e9, 0x5, 0xffff7fff, 0x6, 0x4, 0x61, 0x1, 0x1382, 0xc, 0x2, 0x5, 0x8, 0x9, 0x1, 0x2, 0x5, 0x74, 0x2, 0x4, 0x24000000, 0xd87, 0xb, 0x4, 0x5, 0x2, 0x1ff, 0x1ff, 0x3, 0xa, 0x4, 0x1ff, 0x0, 0x81, 0x33d0, 0x2, 0x4, 0xfffffffc, 0x1f8, 0xc, 0x0, 0x8, 0xcac, 0x10, 0x4, 0xb04, 0x7, 0x10001, 0x5, 0x2, 0x6, 0x6, 0xa2987dbc, 0x9, 0xc, 0x6717, 0x47bf, 0x9, 0x6000000, 0x1f0f, 0x5e8, 0x9, 0x7, 0x17, 0x8, 0x4da0, 0x8, 0x9, 0xd1, 0x3, 0xffffffff, 0x5, 0xd, 0x3, 0x5, 0x2, 0x6, 0xf, 0xc00, 0x4, 0x10, 0x6a, 0x1, 0x401, 0xec, 0x4, 0xfffffffd, 0xf8f63b5, 0xeb, 0x204000, 0x8, 0x3, 0x967, 0xfffffffd, 0x6fdd5f04, 0x7, 0xc69c, 0x0, 0x6, 0x5, 0x6, 0x4, 0x4, 0x1000, 0x401, 0x7, 0x5, 0x3, 0xfffffff9, 0xb617, 0x0, 0x8, 0x3, 0x2, 0x8, 0x4, 0x40, 0x4c4, 0x7, 0xffff8274, 0x0, 0x2, 0x7f, 0x5, 0x2, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0x5, 0x1, 0x5, 0x5, 0x1, 0xffffff38, 0x1, 0xdd9, 0x0, 0x4, 0x9, 0x1, 0x5, 0x0, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0xaa5, 0x80000001, 0x7, {0x7, 0x1, 0x688, 0x5, 0x24, 0xfffffff8}, {0x6, 0x1, 0x2000, 0x0, 0x2}, 0x101, 0x7fff, 0xf}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 0s ago: executing program 3 (id=7480): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xfdffffff, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) kernel console output (not intermixed with test programs): 9.789011][T29907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.810139][T30356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6321'. [ 709.831758][ T6274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.860612][ T6274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.876442][T30356] erspan0: entered promiscuous mode [ 709.923741][ T6274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.934462][ T6274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.257780][T30376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 710.267158][ T6264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.276867][ T6264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.371984][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.379836][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.788173][T30385] gre1: entered promiscuous mode [ 711.035486][T30391] netlink: 'syz.1.6330': attribute type 9 has an invalid length. [ 711.083731][T30391] netlink: 'syz.1.6330': attribute type 6 has an invalid length. [ 711.122692][T30391] netlink: 'syz.1.6330': attribute type 7 has an invalid length. [ 711.151438][T30391] netlink: 'syz.1.6330': attribute type 8 has an invalid length. [ 711.325731][T30395] FAULT_INJECTION: forcing a failure. [ 711.325731][T30395] name failslab, interval 1, probability 0, space 0, times 0 [ 711.340076][T30395] CPU: 1 UID: 0 PID: 30395 Comm: syz.2.6332 Not tainted syzkaller #0 PREEMPT(full) [ 711.340101][T30395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 711.340113][T30395] Call Trace: [ 711.340121][T30395] [ 711.340129][T30395] dump_stack_lvl+0xe8/0x150 [ 711.340164][T30395] should_fail_ex+0x40c/0x560 [ 711.340198][T30395] should_failslab+0xa8/0x100 [ 711.340218][T30395] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 711.340245][T30395] ? __alloc_skb+0x1d7/0x7a0 [ 711.340270][T30395] ? __local_bh_enable_ip+0xd0/0x130 [ 711.340294][T30395] __alloc_skb+0x1d7/0x7a0 [ 711.340324][T30395] netlink_dump+0x1e7/0xee0 [ 711.340356][T30395] ? __pfx_netlink_dump+0x10/0x10 [ 711.340373][T30395] ? __kasan_kmalloc+0x93/0xb0 [ 711.340410][T30395] ? genl_start+0x497/0x6d0 [ 711.340448][T30395] __netlink_dump_start+0x589/0x7b0 [ 711.340474][T30395] genl_family_rcv_msg_dumpit+0x213/0x310 [ 711.340503][T30395] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 711.340525][T30395] ? genl_get_cmd+0x82f/0x960 [ 711.340553][T30395] ? __pfx_genl_start+0x10/0x10 [ 711.340574][T30395] ? __pfx_genl_dumpit+0x10/0x10 [ 711.340595][T30395] ? __pfx_genl_done+0x10/0x10 [ 711.340620][T30395] ? __lock_acquire+0x683/0x2cd0 [ 711.340650][T30395] genl_rcv_msg+0x5e1/0x7a0 [ 711.340681][T30395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 711.340704][T30395] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 711.340857][T30395] netlink_rcv_skb+0x226/0x4a0 [ 711.340878][T30395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 711.340903][T30395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 711.340939][T30395] ? down_read+0x270/0x2e0 [ 711.340961][T30395] ? genl_rcv+0xd/0x40 [ 711.340985][T30395] genl_rcv+0x28/0x40 [ 711.341007][T30395] netlink_unicast+0x7bb/0x940 [ 711.341045][T30395] netlink_sendmsg+0x813/0xb40 [ 711.341078][T30395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.341102][T30395] ? aa_sock_msg_perm+0xf1/0x1b0 [ 711.341129][T30395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.341151][T30395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.341173][T30395] ____sys_sendmsg+0x9b9/0xa20 [ 711.341193][T30395] ? __might_fault+0xaf/0x130 [ 711.341223][T30395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.341253][T30395] ? import_iovec+0x73/0xa0 [ 711.341279][T30395] ___sys_sendmsg+0x2a5/0x360 [ 711.341297][T30395] ? __lock_acquire+0x683/0x2cd0 [ 711.341320][T30395] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.341378][T30395] ? __fget_files+0x2a/0x420 [ 711.341399][T30395] ? __fget_files+0x3a2/0x420 [ 711.341438][T30395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 711.341461][T30395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 711.341491][T30395] ? __pfx_ksys_write+0x10/0x10 [ 711.341526][T30395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.341547][T30395] do_syscall_64+0x174/0x580 [ 711.341567][T30395] ? trace_irq_disable+0x3b/0x140 [ 711.341593][T30395] ? clear_bhb_loop+0x40/0x90 [ 711.341615][T30395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.341633][T30395] RIP: 0033:0x7f6f8859ce59 [ 711.341652][T30395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.341667][T30395] RSP: 002b:00007f6f894ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.341686][T30395] RAX: ffffffffffffffda RBX: 00007f6f88815fa0 RCX: 00007f6f8859ce59 [ 711.341700][T30395] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 711.341712][T30395] RBP: 00007f6f894ed090 R08: 0000000000000000 R09: 0000000000000000 [ 711.341724][T30395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.341735][T30395] R13: 00007f6f88816038 R14: 00007f6f88815fa0 R15: 00007ffe4faa4328 [ 711.341767][T30395] [ 711.947118][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.958208][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.969534][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.977464][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.985228][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 712.248721][T30409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.723209][T30432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6341'. [ 712.736534][T30432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6341'. [ 712.937698][T30400] xfrm0 speed is unknown, defaulting to 1000 [ 712.955655][T30400] lo speed is unknown, defaulting to 1000 [ 713.390574][T30459] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 713.416884][T30459] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 713.583681][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.600950][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.614846][T30466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.752691][T30472] FAULT_INJECTION: forcing a failure. [ 713.752691][T30472] name failslab, interval 1, probability 0, space 0, times 0 [ 713.765467][T30472] CPU: 0 UID: 0 PID: 30472 Comm: syz.0.6352 Not tainted syzkaller #0 PREEMPT(full) [ 713.765489][T30472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.765499][T30472] Call Trace: [ 713.765506][T30472] [ 713.765513][T30472] dump_stack_lvl+0xe8/0x150 [ 713.765538][T30472] should_fail_ex+0x40c/0x560 [ 713.765570][T30472] should_failslab+0xa8/0x100 [ 713.765590][T30472] __kmalloc_cache_noprof+0x88/0x660 [ 713.765612][T30472] ? __pfx_stack_trace_save+0x10/0x10 [ 713.765637][T30472] ? rtnl_newlink+0x136/0x1bd0 [ 713.765681][T30472] rtnl_newlink+0x136/0x1bd0 [ 713.765706][T30472] ? kasan_save_track+0x4f/0x80 [ 713.765726][T30472] ? kasan_save_track+0x3e/0x80 [ 713.765744][T30472] ? kasan_save_free_info+0x40/0x50 [ 713.765760][T30472] ? __kasan_slab_free+0x5c/0x80 [ 713.765779][T30472] ? kmem_cache_free+0x182/0x650 [ 713.765799][T30472] ? dev_hard_start_xmit+0x2cd/0x830 [ 713.765815][T30472] ? __netlink_deliver_tap+0x5b4/0x860 [ 713.765832][T30472] ? netlink_deliver_tap+0x19c/0x1b0 [ 713.765847][T30472] ? netlink_unicast+0x77f/0x940 [ 713.765870][T30472] ? netlink_sendmsg+0x813/0xb40 [ 713.765888][T30472] ? __pfx_rtnl_newlink+0x10/0x10 [ 713.765909][T30472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.765957][T30472] ? kasan_quarantine_put+0xbb/0x1f0 [ 713.765979][T30472] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.766005][T30472] ? nlmon_xmit+0xb0/0x100 [ 713.766022][T30472] ? kmem_cache_free+0x182/0x650 [ 713.766058][T30472] ? __lock_acquire+0x683/0x2cd0 [ 713.766081][T30472] ? __dev_queue_xmit+0x29b/0x37f0 [ 713.766104][T30472] ? __local_bh_enable_ip+0xd0/0x130 [ 713.766123][T30472] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.766142][T30472] ? __dev_queue_xmit+0x29b/0x37f0 [ 713.766158][T30472] ? __local_bh_enable_ip+0xd0/0x130 [ 713.766174][T30472] ? __dev_queue_xmit+0x29b/0x37f0 [ 713.766200][T30472] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 713.766227][T30472] ? __pfx_rtnl_newlink+0x10/0x10 [ 713.766262][T30472] ? __pfx_rtnl_newlink+0x10/0x10 [ 713.766286][T30472] rtnetlink_rcv_msg+0x802/0xc00 [ 713.766313][T30472] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 713.766337][T30472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 713.766361][T30472] ? ref_tracker_free+0x689/0x830 [ 713.766382][T30472] ? __pfx_ref_tracker_free+0x10/0x10 [ 713.766410][T30472] netlink_rcv_skb+0x226/0x4a0 [ 713.766431][T30472] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 713.766458][T30472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.766491][T30472] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.766509][T30472] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.766534][T30472] netlink_unicast+0x7bb/0x940 [ 713.766569][T30472] netlink_sendmsg+0x813/0xb40 [ 713.766597][T30472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.766621][T30472] ? aa_sock_msg_perm+0xf1/0x1b0 [ 713.766654][T30472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.766677][T30472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.766697][T30472] ____sys_sendmsg+0x9b9/0xa20 [ 713.766716][T30472] ? __might_fault+0xaf/0x130 [ 713.766742][T30472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.766770][T30472] ? import_iovec+0x73/0xa0 [ 713.766794][T30472] ___sys_sendmsg+0x2a5/0x360 [ 713.766811][T30472] ? __lock_acquire+0x683/0x2cd0 [ 713.766831][T30472] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.766879][T30472] ? __fget_files+0x2a/0x420 [ 713.766900][T30472] ? __fget_files+0x3a2/0x420 [ 713.766931][T30472] __x64_sys_sendmsg+0x1bd/0x2a0 [ 713.766953][T30472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.766981][T30472] ? __pfx_ksys_write+0x10/0x10 [ 713.767012][T30472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.767032][T30472] do_syscall_64+0x174/0x580 [ 713.767052][T30472] ? trace_irq_disable+0x3b/0x140 [ 713.767077][T30472] ? clear_bhb_loop+0x40/0x90 [ 713.767099][T30472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.767117][T30472] RIP: 0033:0x7f2386b9ce59 [ 713.767135][T30472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.767148][T30472] RSP: 002b:00007f2387a4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.767165][T30472] RAX: ffffffffffffffda RBX: 00007f2386e15fa0 RCX: 00007f2386b9ce59 [ 713.767176][T30472] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000005 [ 713.767184][T30472] RBP: 00007f2387a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 713.767192][T30472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.767200][T30472] R13: 00007f2386e16038 R14: 00007f2386e15fa0 R15: 00007ffdba0e63e8 [ 713.767222][T30472] [ 713.771609][T30472] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 714.040607][ T5633] Bluetooth: hci2: command tx timeout [ 714.273184][T30472] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 714.512271][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.527224][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.742941][T30489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.967575][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.982582][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.208999][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.225997][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.318598][T30510] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 715.326879][T30510] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 715.386727][T30515] FAULT_INJECTION: forcing a failure. [ 715.386727][T30515] name failslab, interval 1, probability 0, space 0, times 0 [ 715.400455][T30515] CPU: 0 UID: 0 PID: 30515 Comm: syz.2.6365 Not tainted syzkaller #0 PREEMPT(full) [ 715.400479][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.400490][T30515] Call Trace: [ 715.400498][T30515] [ 715.400506][T30515] dump_stack_lvl+0xe8/0x150 [ 715.400532][T30515] should_fail_ex+0x40c/0x560 [ 715.400564][T30515] should_failslab+0xa8/0x100 [ 715.400584][T30515] __kmalloc_cache_noprof+0x88/0x660 [ 715.400607][T30515] ? __pfx_stack_trace_save+0x10/0x10 [ 715.400631][T30515] ? rtnl_newlink+0x136/0x1bd0 [ 715.400661][T30515] rtnl_newlink+0x136/0x1bd0 [ 715.400687][T30515] ? kasan_save_track+0x4f/0x80 [ 715.400707][T30515] ? kasan_save_track+0x3e/0x80 [ 715.400728][T30515] ? kasan_save_free_info+0x40/0x50 [ 715.400744][T30515] ? __kasan_slab_free+0x5c/0x80 [ 715.400766][T30515] ? kmem_cache_free+0x182/0x650 [ 715.400789][T30515] ? dev_hard_start_xmit+0x2cd/0x830 [ 715.400807][T30515] ? __netlink_deliver_tap+0x5b4/0x860 [ 715.400825][T30515] ? netlink_deliver_tap+0x19c/0x1b0 [ 715.400842][T30515] ? netlink_unicast+0x77f/0x940 [ 715.400865][T30515] ? netlink_sendmsg+0x813/0xb40 [ 715.400886][T30515] ? __pfx_rtnl_newlink+0x10/0x10 [ 715.400909][T30515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.400963][T30515] ? kasan_quarantine_put+0xbb/0x1f0 [ 715.400986][T30515] ? lockdep_hardirqs_on+0x7a/0x110 [ 715.401011][T30515] ? nlmon_xmit+0xb0/0x100 [ 715.401027][T30515] ? kmem_cache_free+0x182/0x650 [ 715.401062][T30515] ? __lock_acquire+0x683/0x2cd0 [ 715.401083][T30515] ? __dev_queue_xmit+0x29b/0x37f0 [ 715.401104][T30515] ? __local_bh_enable_ip+0xd0/0x130 [ 715.401121][T30515] ? lockdep_hardirqs_on+0x7a/0x110 [ 715.401138][T30515] ? __dev_queue_xmit+0x29b/0x37f0 [ 715.401156][T30515] ? __local_bh_enable_ip+0xd0/0x130 [ 715.401172][T30515] ? __dev_queue_xmit+0x29b/0x37f0 [ 715.401198][T30515] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 715.401234][T30515] ? __pfx_rtnl_newlink+0x10/0x10 [ 715.401270][T30515] ? __pfx_rtnl_newlink+0x10/0x10 [ 715.401294][T30515] rtnetlink_rcv_msg+0x802/0xc00 [ 715.401322][T30515] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 715.401346][T30515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 715.401366][T30515] ? ref_tracker_free+0x689/0x830 [ 715.401387][T30515] ? __pfx_ref_tracker_free+0x10/0x10 [ 715.401414][T30515] netlink_rcv_skb+0x226/0x4a0 [ 715.401433][T30515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 715.401461][T30515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.401492][T30515] ? netlink_deliver_tap+0x2e/0x1b0 [ 715.401510][T30515] ? netlink_deliver_tap+0x2e/0x1b0 [ 715.401534][T30515] netlink_unicast+0x7bb/0x940 [ 715.401569][T30515] netlink_sendmsg+0x813/0xb40 [ 715.401595][T30515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.401618][T30515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 715.401645][T30515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.401667][T30515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.401689][T30515] ____sys_sendmsg+0x9b9/0xa20 [ 715.401708][T30515] ? __might_fault+0xaf/0x130 [ 715.401737][T30515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.401766][T30515] ? import_iovec+0x73/0xa0 [ 715.401790][T30515] ___sys_sendmsg+0x2a5/0x360 [ 715.401808][T30515] ? __lock_acquire+0x683/0x2cd0 [ 715.401832][T30515] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.401885][T30515] ? __fget_files+0x2a/0x420 [ 715.401906][T30515] ? __fget_files+0x3a2/0x420 [ 715.401937][T30515] __x64_sys_sendmsg+0x1bd/0x2a0 [ 715.401958][T30515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.401985][T30515] ? __pfx_ksys_write+0x10/0x10 [ 715.402019][T30515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.402039][T30515] do_syscall_64+0x174/0x580 [ 715.402059][T30515] ? trace_irq_disable+0x3b/0x140 [ 715.402084][T30515] ? clear_bhb_loop+0x40/0x90 [ 715.402105][T30515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.402123][T30515] RIP: 0033:0x7f6f8859ce59 [ 715.402141][T30515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.402157][T30515] RSP: 002b:00007f6f894ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.402176][T30515] RAX: ffffffffffffffda RBX: 00007f6f88815fa0 RCX: 00007f6f8859ce59 [ 715.402190][T30515] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000005 [ 715.402202][T30515] RBP: 00007f6f894ed090 R08: 0000000000000000 R09: 0000000000000000 [ 715.402221][T30515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.402232][T30515] R13: 00007f6f88816038 R14: 00007f6f88815fa0 R15: 00007ffe4faa4328 [ 715.402263][T30515] [ 715.403172][T30515] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 715.890717][T30515] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 715.893004][ T5009] block nbd0: Possible stuck request ffff8880b3755080: control (read@0,1024B). Runtime 90 seconds [ 715.920268][ T5009] block nbd0: Possible stuck request ffff8880b3755240: control (read@1024,1024B). Runtime 90 seconds [ 715.931172][ T5009] block nbd0: Possible stuck request ffff8880b3755400: control (read@2048,1024B). Runtime 90 seconds [ 715.943582][ T5009] block nbd0: Possible stuck request ffff8880b37555c0: control (read@3072,1024B). Runtime 90 seconds [ 716.015984][T30400] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.042867][T30400] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.051450][T30400] bridge_slave_0: entered allmulticast mode [ 716.060372][T30400] bridge_slave_0: entered promiscuous mode [ 716.068911][T30400] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.076123][T30400] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.083369][T30400] bridge_slave_1: entered allmulticast mode [ 716.091015][T30400] bridge_slave_1: entered promiscuous mode [ 716.132049][ T5633] Bluetooth: hci2: command tx timeout [ 716.154381][T30533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6368'. [ 716.230283][T30400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.317108][ T6264] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 716.330747][T30400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.416233][ T6280] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 716.458417][ T6280] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 716.512040][T30400] team0: Port device team_slave_0 added [ 716.515074][T30545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6372'. [ 716.520749][T30400] team0: Port device team_slave_1 added [ 716.546010][ T6280] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 716.623263][ T12] vlan3: left allmulticast mode [ 716.637125][ T12] vlan3: left promiscuous mode [ 716.642422][ T12] bridge0: port 3(vlan3) entered disabled state [ 716.672390][ T12] bridge_slave_1: left allmulticast mode [ 716.678083][ T12] bridge_slave_1: left promiscuous mode [ 716.683875][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.735608][ T12] bridge_slave_0: left allmulticast mode [ 716.741297][ T12] bridge_slave_0: left promiscuous mode [ 716.761684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.830998][ T12] pimreg: left allmulticast mode [ 716.836066][ T12] dvmrp8: left allmulticast mode [ 717.392513][ T12] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 717.444347][ T12] team0: Port device bridge5 removed [ 717.457277][ T12] bond4 (unregistering): (slave bridge7): Releasing active interface [ 717.471405][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.481975][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.492954][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 717.515400][ T12] bond0 (unregistering): Released all slaves [ 717.525907][ T12] bond1 (unregistering): Released all slaves [ 717.542189][ T12] bond2 (unregistering): Released all slaves [ 717.556266][ T12] bond3 (unregistering): Released all slaves [ 717.569514][ T12] bond4 (unregistering): Released all slaves [ 717.583168][ T12] bond5 (unregistering): left allmulticast mode [ 717.591497][ T12] team0: Port device macvlan1 removed [ 717.600638][ T12] bond5 (unregistering): Released all slaves [ 717.632531][ T12] bond6 (unregistering): Released all slaves [ 717.646328][ T12] bond7 (unregistering): Released all slaves [ 717.660354][ T12] bond8 (unregistering): Released all slaves [ 717.673678][ T12] bond9 (unregistering): Released all slaves [ 717.701040][T30400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.708134][T30400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.745500][T30400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.887963][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 717.941724][T30400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.950444][T30400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.008745][T30400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.041770][ T12] tipc: Disabling bearer [ 718.091238][ T12] tipc: Left network mode [ 718.093649][T30576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.209367][ T5633] Bluetooth: hci2: command tx timeout [ 718.226665][T30400] hsr_slave_0: entered promiscuous mode [ 718.234055][T30400] hsr_slave_1: entered promiscuous mode [ 718.241216][T30400] debugfs: 'hsr0' already exists in 'hsr' [ 718.247062][T30400] Cannot create hsr debugfs directory [ 718.880729][T30400] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 718.961465][T30579] sctp: [Deprecated]: syz.0.6376 (pid 30579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.961465][T30579] Use struct sctp_sack_info instead [ 719.095132][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 719.332355][T30606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6379'. [ 719.426004][T30610] syzkaller0: entered promiscuous mode [ 719.433153][T30610] syzkaller0: entered allmulticast mode [ 719.693844][T30400] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 719.997330][T30634] gre1: entered promiscuous mode [ 720.025593][T30639] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 720.044414][T30639] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 720.237338][T30637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 720.286952][ T5633] Bluetooth: hci2: command tx timeout [ 720.356671][T30400] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 720.511480][T30658] netlink: 'syz.3.6390': attribute type 1 has an invalid length. [ 720.563856][T30658] bond2: (slave bridge2): making interface the new active one [ 720.572310][T30658] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 721.373178][T30684] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.506061][T30400] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 721.893614][T30707] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 721.938650][T30707] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6395'. [ 721.959794][T30707] netlink: 'syz.1.6395': attribute type 1 has an invalid length. [ 721.979094][T30684] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.990292][T30707] netlink: 638 bytes leftover after parsing attributes in process `syz.1.6395'. [ 722.019856][T30707] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6395'. [ 722.071911][T30715] veth1_to_batadv: entered promiscuous mode [ 722.626919][ T12] hsr_slave_0: left promiscuous mode [ 722.635748][ T12] hsr_slave_1: left promiscuous mode [ 722.652482][ T12] veth0_to_team: left promiscuous mode [ 722.994456][ T12] team0 (unregistering): Port device team_slave_1 removed [ 723.057084][ T12] team0 (unregistering): Port device team_slave_0 removed [ 723.189324][T30684] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.324642][T30400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 723.381328][T30400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.393767][T30400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 723.425528][T30400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.438253][T30400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 723.531056][T30400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.569592][T30400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 723.574686][T30767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.602022][T30400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.809268][T30684] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.068468][T30400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.105287][T30400] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.351333][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.358736][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.525524][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.532784][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.591554][ T6266] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.600965][ T6266] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.636120][ T151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.667246][ T6266] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.737739][T30809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.768066][T30809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6407'. [ 724.909313][T30812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6405'. [ 725.568037][T30838] netlink: 'syz.1.6409': attribute type 1 has an invalid length. [ 725.588996][T30837] netlink: 'syz.2.6410': attribute type 1 has an invalid length. [ 725.611126][T30838] netlink: 'syz.1.6409': attribute type 12 has an invalid length. [ 725.620099][T30837] netlink: 'syz.2.6410': attribute type 12 has an invalid length. [ 725.744168][T30400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.044187][T30847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6411'. [ 726.314373][T30400] veth0_vlan: entered promiscuous mode [ 726.345548][T30400] veth1_vlan: entered promiscuous mode [ 726.375380][T30400] veth0_macvtap: entered promiscuous mode [ 726.420990][T30400] veth1_macvtap: entered promiscuous mode [ 726.575545][T30400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.601063][T30867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.633695][T30400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.669836][ T6266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.693214][ T6266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.713919][T30877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6414'. [ 726.746713][ T6266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.796862][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6414'. [ 726.969399][ T6266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.240697][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.275168][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.392464][ T6274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.400312][ T6274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.665026][T30903] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 727.790441][T30907] xfrm0 speed is unknown, defaulting to 1000 [ 727.901397][T30907] lo speed is unknown, defaulting to 1000 [ 727.908763][T30905] xfrm0 speed is unknown, defaulting to 1000 [ 727.959403][T30905] lo speed is unknown, defaulting to 1000 [ 728.687704][T30931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6429'. [ 728.820587][T30912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6422'. [ 729.005220][T30942] netlink: 'syz.1.6432': attribute type 4 has an invalid length. [ 729.339758][T30944] syzkaller1: entered promiscuous mode [ 729.345281][T30944] syzkaller1: entered allmulticast mode [ 729.568522][T30952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.592914][T30952] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6434'. [ 729.972772][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.985566][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.994699][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.006129][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.014066][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.362521][T30973] xt_hashlimit: size too large, truncated to 1048576 [ 730.548246][T30975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6441'. [ 731.362514][T30956] xfrm0 speed is unknown, defaulting to 1000 [ 731.411868][T30956] lo speed is unknown, defaulting to 1000 [ 731.736838][T31026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.790508][T31029] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6449'. [ 732.157960][ T5631] Bluetooth: hci0: command tx timeout [ 732.292962][T31042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.425325][T31048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6455'. [ 732.442243][T31044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6454'. [ 732.466714][T31044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'. [ 732.512525][T31048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6455'. [ 732.601070][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'. [ 732.657158][T31048] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.674664][T31048] bridge_slave_1 (unregistering): left allmulticast mode [ 732.682224][T31048] bridge_slave_1 (unregistering): left promiscuous mode [ 732.689715][T31048] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.228942][T31084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.242417][T30956] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.250845][T30956] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.306074][T30956] bridge_slave_0: entered allmulticast mode [ 733.313891][T30956] bridge_slave_0: entered promiscuous mode [ 733.321656][T30956] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.328790][T30956] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.336019][T30956] bridge_slave_1: entered allmulticast mode [ 733.343487][T30956] bridge_slave_1: entered promiscuous mode [ 733.381139][T30956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.392764][T30956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.442184][T30956] team0: Port device team_slave_0 added [ 733.452796][T30956] team0: Port device team_slave_1 added [ 733.497857][T30956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.505236][T30956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.536555][T30956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.550197][T30956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.557158][T30956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.591228][T30956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.727522][T30956] hsr_slave_0: entered promiscuous mode [ 733.736173][T30956] hsr_slave_1: entered promiscuous mode [ 733.745141][T30956] debugfs: 'hsr0' already exists in 'hsr' [ 733.751594][T30956] Cannot create hsr debugfs directory [ 734.187097][T30956] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.198643][ T5631] Bluetooth: hci0: command tx timeout [ 734.374864][T31113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.396418][T31113] __nla_validate_parse: 2 callbacks suppressed [ 734.396438][T31113] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6465'. [ 735.099880][T30956] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.208602][T31142] gretap0: entered promiscuous mode [ 735.224674][T31142] vlan2: entered promiscuous mode [ 735.350496][T31152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6472'. [ 735.519642][T31161] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6474'. [ 735.528722][T31161] nbd: couldn't find a device at index 1275068416 [ 735.607276][T31164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6475'. [ 735.803814][T30956] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.863943][T31174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6477'. [ 735.877516][T31174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6477'. [ 735.904918][T31175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6477'. [ 736.027640][T30956] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.060958][T31184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.070747][T31184] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6478'. [ 736.282612][ T5631] Bluetooth: hci0: command tx timeout [ 736.385285][T30956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 736.405430][T30956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.415852][T30956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.444268][T30956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.468887][T30956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 736.487849][T30956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.505681][T30956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 736.531107][T30956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.893440][T30956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.024905][T30956] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.025870][T31210] netlink: 'syz.2.6482': attribute type 1 has an invalid length. [ 737.066647][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.073845][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.150493][T31212] gretap1: entered promiscuous mode [ 737.191088][T31210] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 737.204764][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.220245][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.812480][T31244] netlink: 'syz.1.6488': attribute type 1 has an invalid length. [ 737.954701][T31244] macsec2: entered promiscuous mode [ 737.997887][T31244] bridge0: entered promiscuous mode [ 738.359036][ T5631] Bluetooth: hci0: command tx timeout [ 738.525317][T31267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6490'. [ 738.642657][T31279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.661487][T31280] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 738.669711][T31280] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 738.679078][T31279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6491'. [ 739.081752][T31296] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 739.112693][T30956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.376381][T30956] veth0_vlan: entered promiscuous mode [ 739.408341][T30956] veth1_vlan: entered promiscuous mode [ 739.500131][T31308] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 739.508409][T30956] veth0_macvtap: entered promiscuous mode [ 739.516192][T31308] __nla_validate_parse: 4 callbacks suppressed [ 739.516208][T31308] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6497'. [ 739.531853][T30956] veth1_macvtap: entered promiscuous mode [ 739.591231][T30956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.615692][T30956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.683206][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.727979][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.777738][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.817760][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.167266][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.225536][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.334783][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.342628][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.819743][T31352] xt_check_table_hooks: 56 callbacks suppressed [ 740.819837][T31352] x_tables: duplicate underflow at hook 3 [ 740.866612][T31355] netlink: 'syz.2.6505': attribute type 1 has an invalid length. [ 740.986924][T31365] netlink: 'syz.2.6505': attribute type 12 has an invalid length. [ 741.153154][T31373] netlink: 'syz.0.6507': attribute type 8 has an invalid length. [ 741.219603][T31377] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 741.247149][T31377] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 741.661418][T31355] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 741.951943][T31410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6509'. [ 742.039154][T31411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6510'. [ 742.072826][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 742.085569][T31412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6509'. [ 742.836996][T31436] syzkaller0: entered promiscuous mode [ 742.842599][T31436] syzkaller0: entered allmulticast mode [ 742.859139][T31436] tipc: Started in network mode [ 742.864063][T31436] tipc: Node identity 0a514f4adaa2, cluster identity 4711 [ 742.871471][T31436] tipc: Enabled bearer , priority 0 [ 742.918928][ T5631] Bluetooth: hci0: command 0x0401 tx timeout [ 742.934816][T31436] tipc: Resetting bearer [ 742.948533][T31433] tipc: Resetting bearer [ 742.997052][T31433] tipc: Disabling bearer [ 743.132874][T31449] only policy match revision 0 supported [ 743.132894][T31449] unable to load match [ 743.304826][T31457] netlink: 'syz.2.6519': attribute type 1 has an invalid length. [ 743.365389][T31460] netlink: 'syz.2.6519': attribute type 12 has an invalid length. [ 743.718166][T31475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6521'. [ 744.068247][T31457] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 744.344455][T31501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 744.394526][T31500] xt_CT: No such helper "snmp_trap" [ 744.643752][T31508] netlink: 'syz.3.6530': attribute type 49 has an invalid length. [ 745.149943][T31536] gre1: entered promiscuous mode [ 745.322430][ T5631] Bluetooth: hci0: command 0x0401 tx timeout [ 745.449290][T31541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6542'. [ 745.906052][T31560] block nbd2: not configured, cannot reconfigure [ 746.560383][ T5009] block nbd0: Possible stuck request ffff8880b3755080: control (read@0,1024B). Runtime 120 seconds [ 746.571142][ T5009] block nbd0: Possible stuck request ffff8880b3755240: control (read@1024,1024B). Runtime 120 seconds [ 746.582191][ T5009] block nbd0: Possible stuck request ffff8880b3755400: control (read@2048,1024B). Runtime 120 seconds [ 746.593158][ T5009] block nbd0: Possible stuck request ffff8880b37555c0: control (read@3072,1024B). Runtime 120 seconds [ 747.100777][T31604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6560'. [ 747.177984][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.212403][T31607] xt_hashlimit: size too large, truncated to 1048576 [ 747.381935][T31613] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 747.410867][T31613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6559'. [ 747.679797][T31619] xt_hashlimit: size too large, truncated to 1048576 [ 747.785209][T31626] netlink: 'syz.3.6568': attribute type 10 has an invalid length. [ 747.827818][T31626] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.863474][T31626] bond0: (slave team0): Enslaving as an active interface with an up link [ 748.021605][T31634] netlink: 'syz.2.6572': attribute type 1 has an invalid length. [ 748.029394][T31634] netlink: 'syz.2.6572': attribute type 2 has an invalid length. [ 748.046138][T31634] netlink: 'syz.2.6572': attribute type 1 has an invalid length. [ 748.066217][T31637] x_tables: duplicate entry at hook 2 [ 748.873406][T31681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6581'. [ 748.909780][T31683] netlink: 'syz.1.6581': attribute type 3 has an invalid length. [ 748.925775][T31683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6581'. [ 748.982489][T31687] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 748.998025][T31674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6580'. [ 749.330446][T31704] netlink: 'syz.4.6585': attribute type 1 has an invalid length. [ 749.450142][T31708] netlink: 'syz.4.6585': attribute type 12 has an invalid length. [ 749.585024][T31722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 749.593315][T31722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 749.601585][T31722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.091341][T31704] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 751.398738][ T5631] Bluetooth: hci0: command 0x0401 tx timeout [ 752.239753][ T4997] udevd[4997]: worker [5637] /devices/virtual/block/nbd0 is taking a long time [ 752.286386][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 753.042861][T31767] gre1: entered promiscuous mode [ 753.111831][T31779] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 753.118776][T31779] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 753.295611][T31790] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6604'. [ 753.590981][T31812] netlink: 'syz.4.6608': attribute type 2 has an invalid length. [ 753.654226][T31815] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6610'. [ 753.697572][T31815] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.705184][T31815] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.742545][T31815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6610'. [ 753.785753][T31815] vlan2: entered promiscuous mode [ 754.125552][T31826] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.133288][T31826] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.226310][T31833] netlink: 840 bytes leftover after parsing attributes in process `syz.3.6615'. [ 754.435647][T31826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.462806][T31826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.720188][ T6275] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.729773][ T6275] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.740537][T31843] tipc: Invalid UDP bearer configuration [ 754.740586][T31843] tipc: Enabling of bearer rejected, failed to enable media [ 754.755427][ T6275] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.765810][ T6275] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.811338][T31832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.234645][T31866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6625'. [ 755.283178][T31867] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 755.300650][T31867] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 755.826121][T31896] syzkaller0: entered promiscuous mode [ 755.835120][T31896] syzkaller0: entered allmulticast mode [ 755.989712][T31892] xfrm0 speed is unknown, defaulting to 1000 [ 755.997647][T31892] lo speed is unknown, defaulting to 1000 [ 756.269837][T31911] syzkaller0: entered promiscuous mode [ 756.275436][T31911] syzkaller0: entered allmulticast mode [ 756.287296][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6637'. [ 756.860824][T31930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6639'. [ 757.022907][T31952] netlink: 'syz.1.6645': attribute type 8 has an invalid length. [ 757.082493][T31955] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 757.090607][T31955] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 757.625224][T31970] bridge_slave_0: left allmulticast mode [ 757.713866][T31970] bridge_slave_0: left promiscuous mode [ 757.719689][T31970] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.734480][T31970] bridge_slave_1: left allmulticast mode [ 757.747160][T31970] bridge_slave_1: left promiscuous mode [ 757.764043][T31970] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.834109][T31970] bond0: (slave bond_slave_0): Releasing backup interface [ 757.867323][T31970] bond0: (slave bond_slave_1): Releasing backup interface [ 757.968148][T31970] team0: Failed to send options change via netlink (err -105) [ 757.991931][T31970] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 758.012116][T31970] team0: Port device team_slave_0 removed [ 758.062998][T31970] team0: Failed to send options change via netlink (err -105) [ 758.091117][T31970] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 758.100915][T31970] team0: Port device team_slave_1 removed [ 758.107786][T31970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.115324][T31970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.158303][T31970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.165775][T31970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.180150][T31970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 758.203094][T31967] team0: Failed to send options change via netlink (err -105) [ 758.215354][T31967] team0: Mode changed to "activebackup" [ 758.420677][T31988] syzkaller0: entered promiscuous mode [ 758.426331][T31988] syzkaller0: entered allmulticast mode [ 758.787342][T32018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.801945][T32023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.811800][T32023] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6654'. [ 761.817953][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6661'. [ 761.842630][T32047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6661'. [ 761.982772][T32047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.991517][T32047] bond1: (slave bond0): making interface the new active one [ 762.022619][T32047] bond1: (slave bond0): Enslaving as an active interface with an up link [ 762.204412][T32078] Bluetooth: MGMT ver 1.23 [ 762.331842][T32055] xfrm0 speed is unknown, defaulting to 1000 [ 762.351118][T32055] lo speed is unknown, defaulting to 1000 [ 763.303648][T32098] syzkaller0: entered promiscuous mode [ 763.309237][T32098] syzkaller0: entered allmulticast mode [ 764.095586][T32139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.916903][T32146] ip6erspan0: entered allmulticast mode [ 767.434916][T32175] Bluetooth: MGMT ver 1.23 [ 767.453081][T32175] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 767.469218][T32175] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 767.579417][T32182] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 767.925925][T32194] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 767.975634][T32194] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 768.327238][T32203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6696'. [ 768.349662][T32207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6697'. [ 768.596092][T32223] netlink: 'syz.4.6698': attribute type 13 has an invalid length. [ 768.657374][T32223] netlink: 'syz.4.6698': attribute type 17 has an invalid length. [ 768.713086][T32223] netlink: 'syz.4.6698': attribute type 27 has an invalid length. [ 768.764854][T32229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6698'. [ 768.843943][T32232] netlink: 'syz.1.6703': attribute type 11 has an invalid length. [ 768.851808][T32232] netlink: 'syz.1.6703': attribute type 4 has an invalid length. [ 768.854488][T32209] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.893949][T32232] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.6703'. [ 769.073342][T32209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.086239][T32240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6705'. [ 769.099173][T32209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.289243][T32248] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 769.378249][T32230] ip6tnl2: entered allmulticast mode [ 769.385212][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.393486][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.408596][ T5824] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.425162][ T6264] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.451930][ T6264] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.463898][ T6264] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.473713][ T6264] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.505810][T32241] xfrm0 speed is unknown, defaulting to 1000 [ 769.537686][T32241] lo speed is unknown, defaulting to 1000 [ 769.610209][T32258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6710'. [ 770.199853][T15378] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 770.278856][T15378] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 770.565268][T32288] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6718'. [ 770.578783][T32285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.598521][T32285] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.652974][T32285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.732765][T32285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.748121][T32285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.786052][T32285] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 770.803741][T32287] netlink: 'syz.1.6718': attribute type 3 has an invalid length. [ 770.830233][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.837501][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.864161][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.871405][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.975450][T32295] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 771.117259][T32300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6721'. [ 771.131514][T32295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6720'. [ 771.233520][T32295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6720'. [ 772.382287][T32328] xt_hashlimit: invalid rate [ 773.000106][T32342] xfrm0 speed is unknown, defaulting to 1000 [ 773.086803][T32342] lo speed is unknown, defaulting to 1000 [ 773.167505][T32354] Bluetooth: MGMT ver 1.23 [ 773.263202][T32352] geneve2: entered promiscuous mode [ 773.292737][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.357794][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.366558][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.431364][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.638658][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 773.919890][T32370] __nla_validate_parse: 1 callbacks suppressed [ 773.919910][T32370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6740'. [ 774.190566][T32387] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6741'. [ 775.619776][T32427] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 776.212287][T32460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6757'. [ 776.320070][T32460] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 776.680733][ T5009] block nbd0: Possible stuck request ffff8880b3755080: control (read@0,1024B). Runtime 150 seconds [ 776.692284][ T5009] block nbd0: Possible stuck request ffff8880b3755240: control (read@1024,1024B). Runtime 150 seconds [ 776.703269][ T5009] block nbd0: Possible stuck request ffff8880b3755400: control (read@2048,1024B). Runtime 150 seconds [ 776.714323][ T5009] block nbd0: Possible stuck request ffff8880b37555c0: control (read@3072,1024B). Runtime 150 seconds [ 777.327188][T32506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6766'. [ 778.857882][T32531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.914784][T32531] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6771'. [ 779.012510][T32536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6772'. [ 779.306611][T32547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6775'. [ 779.524527][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'. [ 779.592836][T32547] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6775'. [ 779.615006][T32554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.656314][T32547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6775'. [ 779.670108][T32554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.682600][T32561] netlink: zone id is out of range [ 779.702357][T32564] netlink: 'syz.0.6779': attribute type 1 has an invalid length. [ 779.745934][T32554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.754662][T32554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.890766][T32569] netlink: 'syz.1.6780': attribute type 1 has an invalid length. [ 779.928848][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6781'. [ 779.950000][T32575] FAULT_INJECTION: forcing a failure. [ 779.950000][T32575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.998336][T32569] bond3: entered promiscuous mode [ 780.003884][T32569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 780.004410][T32575] CPU: 1 UID: 0 PID: 32575 Comm: syz.4.6782 Not tainted syzkaller #0 PREEMPT(full) [ 780.004433][T32575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.004444][T32575] Call Trace: [ 780.004452][T32575] [ 780.004460][T32575] dump_stack_lvl+0xe8/0x150 [ 780.004490][T32575] should_fail_ex+0x40c/0x560 [ 780.004524][T32575] _copy_from_user+0x2d/0xb0 [ 780.004545][T32575] ___sys_recvmsg+0x173/0x590 [ 780.004572][T32575] ? __pfx____sys_recvmsg+0x10/0x10 [ 780.004596][T32575] ? __fget_files+0x2a/0x420 [ 780.004635][T32575] ? __fget_files+0x3a2/0x420 [ 780.004664][T32575] do_recvmmsg+0x329/0x810 [ 780.004692][T32575] ? __pfx_do_recvmmsg+0x10/0x10 [ 780.004722][T32575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 780.004762][T32575] __x64_sys_recvmmsg+0x198/0x250 [ 780.004784][T32575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 780.004811][T32575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.004831][T32575] do_syscall_64+0x174/0x580 [ 780.004850][T32575] ? trace_irq_disable+0x3b/0x140 [ 780.004875][T32575] ? clear_bhb_loop+0x40/0x90 [ 780.004895][T32575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.004913][T32575] RIP: 0033:0x7feed579ce59 [ 780.004931][T32575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.004945][T32575] RSP: 002b:00007feed6719028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 780.004965][T32575] RAX: ffffffffffffffda RBX: 00007feed5a15fa0 RCX: 00007feed579ce59 [ 780.004978][T32575] RDX: 0000000000000001 RSI: 0000200000001a00 RDI: 0000000000000004 [ 780.004989][T32575] RBP: 00007feed6719090 R08: 0000000000000000 R09: 0000000000000000 [ 780.005000][T32575] R10: 0000000040010110 R11: 0000000000000246 R12: 0000000000000001 [ 780.005012][T32575] R13: 00007feed5a16038 R14: 00007feed5a15fa0 R15: 00007ffdd7a65a08 [ 780.005041][T32575] [ 780.301435][T32576] vlan3: entered allmulticast mode [ 780.318543][T32576] bond3: entered allmulticast mode [ 780.352144][T32584] bond3: (slave bridge3): making interface the new active one [ 780.359663][T32584] bridge3: entered promiscuous mode [ 780.365048][T32584] bridge3: entered allmulticast mode [ 780.373472][T32584] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 780.391088][T32585] bridge3: entered allmulticast mode [ 780.939925][T32624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 780.960868][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6794'. [ 781.002099][T32629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6795'. [ 781.663758][T27140] IPVS: starting estimator thread 0... [ 781.758639][T32650] IPVS: using max 30 ests per chain, 72000 per kthread [ 781.982219][T32656] bond1: option lacp_active: invalid value (8) [ 782.046087][T32656] bond1 (unregistering): Released all slaves [ 782.358558][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 782.865794][T32689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6808'. [ 783.426767][T32717] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.631287][T32727] openvswitch: netlink: Flow key attr not present in new flow. [ 783.821844][T32735] team0: Device vlan0 is up. Set it down before adding it as a team port [ 784.119755][T32746] __nla_validate_parse: 1 callbacks suppressed [ 784.119774][T32746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6821'. [ 784.202957][T32750] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 784.211524][T32750] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 784.852867][ T308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6828'. [ 784.862877][ T309] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6827'. [ 784.935133][ T308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6828'. [ 785.045230][T32766] xfrm0 speed is unknown, defaulting to 1000 [ 785.057033][T32766] lo speed is unknown, defaulting to 1000 [ 785.293498][ T321] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6830'. [ 786.106055][ T346] bond4: Removing last arp target with arp_interval on [ 786.185880][ T356] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 786.194381][ T355] netlink: 'syz.4.6839': attribute type 2 has an invalid length. [ 786.202186][ T356] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 786.211067][ T355] netlink: 119 bytes leftover after parsing attributes in process `syz.4.6839'. [ 787.469316][ T392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6846'. [ 787.506729][ T392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6846'. [ 788.095059][ T423] syzkaller1: entered promiscuous mode [ 788.104434][ T423] syzkaller1: entered allmulticast mode [ 788.121018][ T423] vxcan1: tx drop: invalid da for name 0x00000000000000c7 [ 788.529746][ T440] netlink: 'syz.3.6860': attribute type 10 has an invalid length. [ 788.572114][ T440] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6860'. [ 788.602479][ T444] netlink: 516 bytes leftover after parsing attributes in process `syz.3.6860'. [ 788.949974][ T459] netlink: 'syz.0.6866': attribute type 1 has an invalid length. [ 789.128973][ T468] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 789.175860][ T468] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 790.149133][ T492] __nla_validate_parse: 4 callbacks suppressed [ 790.149171][ T492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6871'. [ 790.246863][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 790.984019][ T477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.045852][ T492] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 791.048239][ T6275] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.068323][ T6275] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.079076][ T6275] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.158953][ T499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6872'. [ 791.180178][ T6275] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.316312][ T504] FAULT_INJECTION: forcing a failure. [ 791.316312][ T504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.355241][ T504] CPU: 1 UID: 0 PID: 504 Comm: syz.4.6875 Not tainted syzkaller #0 PREEMPT(full) [ 791.355267][ T504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.355278][ T504] Call Trace: [ 791.355286][ T504] [ 791.355294][ T504] dump_stack_lvl+0xe8/0x150 [ 791.355320][ T504] should_fail_ex+0x40c/0x560 [ 791.355353][ T504] _copy_to_user+0x31/0xb0 [ 791.355376][ T504] simple_read_from_buffer+0xe1/0x170 [ 791.355404][ T504] proc_fail_nth_read+0x1bb/0x230 [ 791.355431][ T504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 791.355457][ T504] ? rw_verify_area+0x24a/0x4c0 [ 791.355483][ T504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 791.355505][ T504] vfs_read+0x213/0xa80 [ 791.355534][ T504] ? __pfx___mutex_lock+0x10/0x10 [ 791.355558][ T504] ? __pfx_vfs_read+0x10/0x10 [ 791.355583][ T504] ? __fget_files+0x2a/0x420 [ 791.355609][ T504] ? __fget_files+0x3a2/0x420 [ 791.355629][ T504] ? __fget_files+0x2a/0x420 [ 791.355659][ T504] ksys_read+0x150/0x270 [ 791.355685][ T504] ? __pfx_ksys_read+0x10/0x10 [ 791.355717][ T504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.355737][ T504] do_syscall_64+0x174/0x580 [ 791.355757][ T504] ? trace_irq_disable+0x3b/0x140 [ 791.355781][ T504] ? clear_bhb_loop+0x40/0x90 [ 791.355803][ T504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.355821][ T504] RIP: 0033:0x7feed575d68e [ 791.355838][ T504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 791.355853][ T504] RSP: 002b:00007feed6718fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 791.355873][ T504] RAX: ffffffffffffffda RBX: 00007feed67196c0 RCX: 00007feed575d68e [ 791.355886][ T504] RDX: 000000000000000f RSI: 00007feed67190a0 RDI: 0000000000000005 [ 791.355918][ T504] RBP: 00007feed6719090 R08: 0000000000000000 R09: 0000000000000000 [ 791.355929][ T504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.355940][ T504] R13: 00007feed5a16038 R14: 00007feed5a15fa0 R15: 00007ffdd7a65a08 [ 791.355972][ T504] [ 791.856985][ T527] netlink: 'syz.0.6880': attribute type 2 has an invalid length. [ 791.864765][ T527] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6880'. [ 791.958613][ T527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6880'. [ 791.964541][ T530] syzkaller1: entered promiscuous mode [ 791.967605][ T527] netlink: 'syz.0.6880': attribute type 7 has an invalid length. [ 791.973132][ T530] syzkaller1: entered allmulticast mode [ 791.980834][ T527] netlink: 'syz.0.6880': attribute type 8 has an invalid length. [ 792.154457][ T527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6880'. [ 792.611321][ T557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6886'. [ 792.797545][ T565] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 792.818877][ T565] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 793.301121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 793.414862][ T585] tipc: Started in network mode [ 793.419790][ T585] tipc: Node identity fe80000000000000001000000000001, cluster identity 4711 [ 793.428600][ T585] tipc: Enabling of bearer rejected, failed to enable media [ 793.493788][ T589] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6891'. [ 793.613567][ T591] xfrm0 speed is unknown, defaulting to 1000 [ 793.621351][ T591] lo speed is unknown, defaulting to 1000 [ 793.661732][ T595] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.671787][ T595] bridge0: port 2(bridge_slave_1) entered listening state [ 793.680438][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.688436][ T595] bridge0: port 1(bridge_slave_0) entered listening state [ 793.945849][ T595] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6893'. [ 793.963471][ T599] syzkaller0: entered promiscuous mode [ 793.968963][ T599] syzkaller0: entered allmulticast mode [ 794.065457][ T603] xfrm0 speed is unknown, defaulting to 1000 [ 794.073078][ T603] lo speed is unknown, defaulting to 1000 [ 794.270152][ T621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6897'. [ 794.422637][ T624] bridge3: port 1(veth5) entered blocking state [ 794.429113][ T624] bridge3: port 1(veth5) entered disabled state [ 794.487132][ T624] veth5: entered allmulticast mode [ 794.494406][ T624] veth5: entered promiscuous mode [ 794.620992][ T621] bridge3: port 2(veth0_to_bond) entered blocking state [ 794.628061][ T621] bridge3: port 2(veth0_to_bond) entered disabled state [ 794.635471][ T621] veth0_to_bond: entered allmulticast mode [ 794.641327][ T635] netlink: 'syz.3.6900': attribute type 1 has an invalid length. [ 794.649065][ T635] netlink: 'syz.3.6900': attribute type 2 has an invalid length. [ 794.656790][ T635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6900'. [ 794.678070][ T621] veth0_to_bond: entered promiscuous mode [ 794.706010][ T624] bridge3: port 3(veth7) entered blocking state [ 794.716641][ T624] bridge3: port 3(veth7) entered disabled state [ 794.723160][ T624] veth7: entered allmulticast mode [ 794.750880][ T624] veth7: entered promiscuous mode [ 795.169387][ T653] netlink: 'syz.0.6904': attribute type 3 has an invalid length. [ 795.177160][ T653] netlink: 'syz.0.6904': attribute type 1 has an invalid length. [ 795.184891][ T653] NCSI netlink: No device for ifindex 4294967295 [ 796.261800][ T684] __nla_validate_parse: 1 callbacks suppressed [ 796.261819][ T684] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6907'. [ 796.282621][ T688] FAULT_INJECTION: forcing a failure. [ 796.282621][ T688] name failslab, interval 1, probability 0, space 0, times 0 [ 796.296424][ T688] CPU: 0 UID: 0 PID: 688 Comm: syz.3.6908 Not tainted syzkaller #0 PREEMPT(full) [ 796.296450][ T688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.296460][ T688] Call Trace: [ 796.296468][ T688] [ 796.296476][ T688] dump_stack_lvl+0xe8/0x150 [ 796.296503][ T688] should_fail_ex+0x40c/0x560 [ 796.296534][ T688] should_failslab+0xa8/0x100 [ 796.296556][ T688] __kmalloc_cache_noprof+0x88/0x660 [ 796.296583][ T688] ? unix_prepare_fpl+0xe3/0x590 [ 796.296711][ T688] ? __kmalloc_cache_noprof+0x157/0x660 [ 796.296740][ T688] unix_prepare_fpl+0xe3/0x590 [ 796.296767][ T688] unix_scm_to_skb+0x28a/0x3f0 [ 796.296791][ T688] unix_dgram_sendmsg+0x502/0x17b0 [ 796.296824][ T688] ? __might_fault+0xaf/0x130 [ 796.296854][ T688] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 796.296881][ T688] ? aa_sock_msg_perm+0xda/0x1b0 [ 796.296910][ T688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.296933][ T688] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 796.296956][ T688] ____sys_sendmsg+0x9b9/0xa20 [ 796.296977][ T688] ? __might_fault+0xaf/0x130 [ 796.297003][ T688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.297031][ T688] ? import_iovec+0x73/0xa0 [ 796.297054][ T688] ___sys_sendmsg+0x2a5/0x360 [ 796.297074][ T688] ? __lock_acquire+0x683/0x2cd0 [ 796.297097][ T688] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.297151][ T688] ? __fget_files+0x2a/0x420 [ 796.297173][ T688] ? __fget_files+0x3a2/0x420 [ 796.297204][ T688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 796.297225][ T688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.297251][ T688] ? __pfx_ksys_write+0x10/0x10 [ 796.297281][ T688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.297300][ T688] do_syscall_64+0x174/0x580 [ 796.297320][ T688] ? clear_bhb_loop+0x40/0x90 [ 796.297341][ T688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.297356][ T688] RIP: 0033:0x7fdc6eb9ce59 [ 796.297381][ T688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.297396][ T688] RSP: 002b:00007fdc6f9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.297414][ T688] RAX: ffffffffffffffda RBX: 00007fdc6ee15fa0 RCX: 00007fdc6eb9ce59 [ 796.297427][ T688] RDX: 0000000000000810 RSI: 0000200000000840 RDI: 0000000000000003 [ 796.297439][ T688] RBP: 00007fdc6f9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 796.297449][ T688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.297460][ T688] R13: 00007fdc6ee16038 R14: 00007fdc6ee15fa0 R15: 00007ffeb21b2538 [ 796.297486][ T688] [ 797.124726][ T706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.504127][ T715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6914'. [ 797.536181][ T715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6914'. [ 797.699570][ T720] vlan2: entered promiscuous mode [ 797.704640][ T720] bond_slave_1: entered promiscuous mode [ 797.904786][ T732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6917'. [ 798.109263][ T740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6918'. [ 798.135726][ T743] tipc: Started in network mode [ 798.140629][ T743] tipc: Node identity ac1414aa, cluster identity 4711 [ 798.180913][ T743] tipc: Enabled bearer , priority 26 [ 798.313825][ T749] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.6918'. [ 798.363108][ T749] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.6918'. [ 798.420802][ T754] openvswitch: netlink: Missing valid actions attribute. [ 798.428135][ T754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.456940][ T754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6923'. [ 798.741293][ T772] netlink: 'syz.3.6926': attribute type 1 has an invalid length. [ 798.756827][ T771] netlink: 'syz.4.6923': attribute type 1 has an invalid length. [ 798.764603][ T771] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6923'. [ 798.787448][ T771] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6923'. [ 798.800457][ T771] netlink: 'syz.4.6923': attribute type 1 has an invalid length. [ 798.808379][ T771] netlink: 'syz.4.6923': attribute type 8 has an invalid length. [ 798.834052][ T779] netlink: 'syz.3.6926': attribute type 12 has an invalid length. [ 798.840774][ T778] netlink: 'syz.1.6927': attribute type 1 has an invalid length. [ 798.873624][ T778] bond4: entered promiscuous mode [ 798.879256][ T778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.269084][ T5731] tipc: Node number set to 2886997162 [ 799.306717][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.315557][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.333249][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.358515][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.499912][ T772] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 799.712616][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 799.789401][ T824] xfrm0 speed is unknown, defaulting to 1000 [ 799.846529][ T824] lo speed is unknown, defaulting to 1000 [ 800.224568][ T845] xfrm0 speed is unknown, defaulting to 1000 [ 800.232486][ T845] lo speed is unknown, defaulting to 1000 [ 800.519121][ T860] netlink: 'syz.4.6943': attribute type 1 has an invalid length. [ 800.615981][ T860] bond1: entered promiscuous mode [ 800.621501][ T860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.840578][ T5633] Bluetooth: hci0: command 0x0401 tx timeout [ 800.950860][ T860] bond1: (slave bridge4): making interface the new active one [ 800.958363][ T860] bridge4: entered promiscuous mode [ 800.965516][ T860] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 801.010302][ T861] bond1: (slave bridge5): Enslaving as a backup interface with an up link [ 801.505615][ T905] netlink: 'syz.4.6953': attribute type 10 has an invalid length. [ 801.565566][ T905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.635493][ T905] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 801.725720][ T916] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 802.601501][ T941] __nla_validate_parse: 3 callbacks suppressed [ 802.601519][ T941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6960'. [ 802.626209][ T941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6960'. [ 802.689207][ T950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6962'. [ 802.755065][ T947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6961'. [ 802.805977][ T941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6960'. [ 802.958656][ T947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.978442][ T950] macsec1: entered allmulticast mode [ 802.983772][ T950] bond0: entered allmulticast mode [ 802.988902][ T950] bond_slave_0: entered allmulticast mode [ 802.994645][ T950] bond_slave_1: entered allmulticast mode [ 803.000446][ T950] bond_slave_0: entered promiscuous mode [ 803.006591][ T950] bond_slave_1: entered promiscuous mode [ 803.064318][ T950] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 803.081030][ T950] bond0: left allmulticast mode [ 803.085941][ T950] bond_slave_0: left allmulticast mode [ 803.189847][ T950] bond_slave_1: left allmulticast mode [ 803.349388][T15378] bond_slave_0: left promiscuous mode [ 803.355248][T15378] bond_slave_1: left promiscuous mode [ 803.360700][ T947] bond2: option mode: unable to set because the bond device is up [ 803.565831][ T991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6965'. [ 803.668379][ T991] bridge3: port 1(vlan3) entered blocking state [ 803.674864][ T991] bridge3: port 1(vlan3) entered disabled state [ 803.681357][ T991] vlan3: entered allmulticast mode [ 803.686495][ T991] bridge3: entered allmulticast mode [ 803.729077][ T991] vlan3: left allmulticast mode [ 803.733964][ T991] bridge3: left allmulticast mode [ 804.563067][ T1037] netlink: 'syz.3.6972': attribute type 1 has an invalid length. [ 804.629240][ T1036] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6975'. [ 804.639698][ T1042] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 804.647792][ T1042] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 804.720607][ T1036] 0·: renamed from hsr0 (while UP) [ 804.759614][ T1036] 0·: entered allmulticast mode [ 804.764523][ T1036] hsr_slave_0: entered allmulticast mode [ 804.770428][ T1036] hsr_slave_1: entered allmulticast mode [ 804.836382][ T1036] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 804.851919][ T1047] netlink: 'syz.3.6972': attribute type 12 has an invalid length. [ 804.992201][ T1057] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 805.000309][ T1057] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 805.305766][ T1037] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 805.669145][ T1075] geneve2: entered promiscuous mode [ 805.733888][ T1076] dummy0: mtu less than device minimum [ 806.088402][ T1103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6985'. [ 806.130573][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.149357][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.383916][ T4997] udevd[4997]: worker [5637] /devices/virtual/block/nbd0 timeout; kill it [ 806.402327][ T4997] udevd[4997]: seq 28256 '/devices/virtual/block/nbd0' killed [ 806.521789][ T1096] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.531003][ T1096] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.539988][ T1096] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.548886][ T1096] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.616443][ T1132] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 806.624558][ T1132] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 806.729951][ T5633] Bluetooth: hci0: command 0x0401 tx timeout [ 806.798181][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6992'. [ 806.952496][ T1160] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 806.960614][ T1160] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 807.376899][ T5009] block nbd0: Possible stuck request ffff8880b3755080: control (read@0,1024B). Runtime 180 seconds [ 807.387637][ T5009] block nbd0: Possible stuck request ffff8880b3755240: control (read@1024,1024B). Runtime 180 seconds [ 807.398603][ T5009] block nbd0: Possible stuck request ffff8880b3755400: control (read@2048,1024B). Runtime 180 seconds [ 807.409563][ T5009] block nbd0: Possible stuck request ffff8880b37555c0: control (read@3072,1024B). Runtime 180 seconds [ 808.137819][ T1216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.219041][ T1222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7006'. [ 808.283138][ T1226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7004'. [ 808.463486][ T1222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7006'. [ 808.610737][ T1244] netlink: 'syz.3.7007': attribute type 6 has an invalid length. [ 808.618510][ T1244] netlink: 'syz.3.7007': attribute type 7 has an invalid length. [ 808.629208][ T1244] netlink: 'syz.3.7007': attribute type 8 has an invalid length. [ 808.636966][ T1244] netlink: 'syz.3.7007': attribute type 15 has an invalid length. [ 808.713606][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.918703][ T5633] Bluetooth: hci0: command 0x0401 tx timeout [ 809.069588][ T1270] netlink: 'syz.2.7011': attribute type 12 has an invalid length. [ 809.575791][ T1265] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 809.992123][ T1163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.026303][ T1258] netlink: 'syz.2.7011': attribute type 1 has an invalid length. [ 810.506713][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'. [ 810.515764][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'. [ 810.524747][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'. [ 810.533715][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'. [ 810.542690][ T1326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'. [ 810.595466][ T1330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7017'. [ 810.608148][ T1330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7017'. [ 810.617133][ T1330] netlink: 'syz.3.7017': attribute type 7 has an invalid length. [ 810.832655][ T1337] netlink: 'syz.1.7020': attribute type 9 has an invalid length. [ 811.120697][ T5633] Bluetooth: hci0: command 0x0401 tx timeout [ 811.362626][ T1096] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.371380][ T1096] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.380101][ T1096] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.388817][ T1096] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.417067][ T1374] openvswitch: netlink: Missing valid actions attribute. [ 811.424157][ T1374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.623201][ T1374] netlink: 'syz.2.7027': attribute type 1 has an invalid length. [ 811.630986][ T1374] netlink: 'syz.2.7027': attribute type 1 has an invalid length. [ 811.638721][ T1374] netlink: 'syz.2.7027': attribute type 8 has an invalid length. [ 811.780428][ T1396] geneve2: entered promiscuous mode [ 811.786742][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.795533][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.813883][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.823019][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.832008][ T1381] syzkaller0: entered promiscuous mode [ 811.837493][ T1381] syzkaller0: entered allmulticast mode [ 812.511005][ T1433] vxcan6: entered promiscuous mode [ 812.516153][ T1433] vxcan6: entered allmulticast mode [ 813.034933][ T1454] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.163786][ T1459] openvswitch: netlink: Missing valid actions attribute. [ 813.170868][ T1459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.303178][ T1459] __nla_validate_parse: 10 callbacks suppressed [ 813.303198][ T1459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7042'. [ 813.793959][ T1459] netlink: 'syz.4.7042': attribute type 1 has an invalid length. [ 813.801737][ T1459] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7042'. [ 813.828078][ T1459] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7042'. [ 813.836976][ T1459] netlink: 'syz.4.7042': attribute type 1 has an invalid length. [ 813.844702][ T1459] netlink: 'syz.4.7042': attribute type 8 has an invalid length. [ 813.852429][ T1459] netlink: 606 bytes leftover after parsing attributes in process `syz.4.7042'. [ 813.915918][ T1489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7048'. [ 813.972262][ T1491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7048'. [ 814.261698][ T1514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7053'. [ 814.330169][ T1505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7052'. [ 814.603659][ T1530] openvswitch: netlink: Tunnel attr 270 out of range max 16 [ 814.633373][ T1530] openvswitch: netlink: Tunnel attr 270 out of range max 16 [ 814.720631][ T1539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 814.817103][ T1544] openvswitch: netlink: Missing valid actions attribute. [ 814.824199][ T1544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.841957][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7061'. [ 814.913058][ T1552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7060'. [ 815.015011][ T1544] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 815.234893][ T1559] syzkaller0: entered promiscuous mode [ 815.241662][ T1559] syzkaller0: entered allmulticast mode [ 815.477255][ T1585] validate_nla: 2 callbacks suppressed [ 815.477274][ T1585] netlink: 'syz.3.7070': attribute type 1 has an invalid length. [ 815.490482][ T1585] netlink: 'syz.3.7070': attribute type 1 has an invalid length. [ 815.667756][ T1591] syzkaller0: entered promiscuous mode [ 815.673273][ T1591] syzkaller0: entered allmulticast mode [ 815.902317][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 815.938523][ T1601] can: request_module (can-proto-0) failed. [ 816.040875][ T1609] openvswitch: netlink: Message has 8 unknown bytes. [ 816.047612][ T1609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.189351][ T1615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.841611][ T1641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.063026][ T1645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 817.123894][ T1645] batman_adv: batadv0: Adding interface: gretap2 [ 817.134395][ T1645] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.160322][ T1645] batman_adv: batadv0: Interface activated: gretap2 [ 817.206007][ T1657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.463648][ T1672] syzkaller1: entered promiscuous mode [ 817.502604][ T1672] syzkaller1: entered allmulticast mode [ 817.677200][ T1679] syzkaller0: entered allmulticast mode [ 818.277256][ T1712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.288093][ T1712] __nla_validate_parse: 8 callbacks suppressed [ 818.288110][ T1712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7096'. [ 818.838753][ T1738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7104'. [ 819.038549][ T1742] : entered promiscuous mode [ 819.082463][ T1747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7105'. [ 819.104921][ T1750] FAULT_INJECTION: forcing a failure. [ 819.104921][ T1750] name failslab, interval 1, probability 0, space 0, times 0 [ 819.118956][ T1750] CPU: 1 UID: 0 PID: 1750 Comm: syz.3.7107 Not tainted syzkaller #0 PREEMPT(full) [ 819.118979][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.118990][ T1750] Call Trace: [ 819.118998][ T1750] [ 819.119005][ T1750] dump_stack_lvl+0xe8/0x150 [ 819.119032][ T1750] should_fail_ex+0x40c/0x560 [ 819.119063][ T1750] should_failslab+0xa8/0x100 [ 819.119080][ T1750] ? dst_alloc+0x105/0x170 [ 819.119179][ T1750] kmem_cache_alloc_noprof+0x87/0x650 [ 819.119209][ T1750] dst_alloc+0x105/0x170 [ 819.119234][ T1750] ip_route_input_rcu+0x20ca/0x3190 [ 819.119334][ T1750] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 819.119358][ T1750] ? __lock_acquire+0x683/0x2cd0 [ 819.119399][ T1750] ? ipt_do_table+0x137f/0x15d0 [ 819.119449][ T1750] ? ktime_get+0x45/0x220 [ 819.119476][ T1750] ? ip_route_input_noref+0xad/0x270 [ 819.119502][ T1750] ip_route_input_noref+0x17c/0x270 [ 819.119529][ T1750] ? __pfx_ip_route_input_noref+0x10/0x10 [ 819.119560][ T1750] ? ipt_do_table+0x2b9/0x15d0 [ 819.119579][ T1750] ? __pfx_ipt_do_table+0x10/0x10 [ 819.119602][ T1750] ip_rcv_finish_core+0x593/0x1c00 [ 819.119636][ T1750] ip_rcv_finish+0x14c/0x2a0 [ 819.119661][ T1750] NF_HOOK+0x336/0x3c0 [ 819.119679][ T1750] ? irqentry_exit+0x218/0x8e0 [ 819.119699][ T1750] ? trace_irq_disable+0x3b/0x140 [ 819.119723][ T1750] ? __pfx_ip_rcv_finish+0x10/0x10 [ 819.119742][ T1750] ? NF_HOOK+0x9e/0x3c0 [ 819.119761][ T1750] ? __pfx_NF_HOOK+0x10/0x10 [ 819.119782][ T1750] ? __pfx_ip_rcv_finish+0x10/0x10 [ 819.119808][ T1750] ? netif_receive_skb+0x102/0xbf0 [ 819.119833][ T1750] ? __pfx_ip_rcv_finish+0x10/0x10 [ 819.119852][ T1750] ? ip_rcv+0x5a/0x90 [ 819.119873][ T1750] ? netif_receive_skb+0x102/0xbf0 [ 819.119895][ T1750] ? __pfx_ip_rcv+0x10/0x10 [ 819.119915][ T1750] netif_receive_skb+0x45b/0xbf0 [ 819.119944][ T1750] ? __pfx_netif_receive_skb+0x10/0x10 [ 819.119972][ T1750] ? tun_rx_batched+0x185/0x790 [ 819.120031][ T1750] tun_rx_batched+0x1de/0x790 [ 819.120055][ T1750] ? __pfx_tun_rx_batched+0x10/0x10 [ 819.120073][ T1750] ? tun_get_user+0x26ca/0x4350 [ 819.120091][ T1750] ? tun_get_user+0x26ca/0x4350 [ 819.120110][ T1750] ? tun_get_user+0x2373/0x4350 [ 819.120127][ T1750] ? tun_get_user+0x2373/0x4350 [ 819.120144][ T1750] ? __local_bh_enable_ip+0xd0/0x130 [ 819.120169][ T1750] tun_get_user+0x2b04/0x4350 [ 819.120192][ T1750] ? tun_get_user+0x718/0x4350 [ 819.120216][ T1750] ? tun_get_user+0x26ca/0x4350 [ 819.120238][ T1750] ? aa_file_perm+0x4ed/0x15f0 [ 819.120256][ T1750] ? __pfx_tun_get_user+0x10/0x10 [ 819.120275][ T1750] ? __lock_acquire+0x683/0x2cd0 [ 819.120307][ T1750] ? ref_tracker_alloc+0x341/0x4b0 [ 819.120327][ T1750] ? get_pid_task+0x20/0x1f0 [ 819.120352][ T1750] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 819.120373][ T1750] ? tun_get+0x1c/0x2f0 [ 819.120391][ T1750] ? tun_get+0x1c/0x2f0 [ 819.120414][ T1750] ? tun_get+0x1c/0x2f0 [ 819.120430][ T1750] ? tun_get+0x1c/0x2f0 [ 819.120452][ T1750] tun_chr_write_iter+0x113/0x200 [ 819.120507][ T1750] vfs_write+0x612/0xba0 [ 819.120540][ T1750] ? __pfx_vfs_write+0x10/0x10 [ 819.120576][ T1750] ? __fget_files+0x2a/0x420 [ 819.120607][ T1750] ksys_write+0x150/0x270 [ 819.120634][ T1750] ? __pfx_ksys_write+0x10/0x10 [ 819.120667][ T1750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.120688][ T1750] do_syscall_64+0x174/0x580 [ 819.120710][ T1750] ? clear_bhb_loop+0x40/0x90 [ 819.120733][ T1750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.120750][ T1750] RIP: 0033:0x7fdc6eb5d68e [ 819.120768][ T1750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.120784][ T1750] RSP: 002b:00007fdc6f9f3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.120811][ T1750] RAX: ffffffffffffffda RBX: 00007fdc6f9f46c0 RCX: 00007fdc6eb5d68e [ 819.120825][ T1750] RDX: 0000000000000068 RSI: 0000200000000380 RDI: 00000000000000c8 [ 819.120837][ T1750] RBP: 00007fdc6f9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 819.120847][ T1750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.120858][ T1750] R13: 00007fdc6ee16038 R14: 00007fdc6ee15fa0 R15: 00007ffeb21b2538 [ 819.120890][ T1750] [ 819.124514][ T1752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7108'. [ 819.246290][ T1755] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 819.535632][ T1765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7110'. [ 819.951955][ T1780] netlink: 'syz.2.7118': attribute type 11 has an invalid length. [ 820.026184][ T1786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7116'. [ 820.044056][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7118'. [ 820.063876][ T1786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7116'. [ 820.206495][ T1795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.227089][ T1795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7119'. [ 820.434658][ T1800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7121'. [ 820.930504][ T1841] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 820.939752][ T1841] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 821.067697][ T1850] syz_tun: mtu less than device minimum [ 821.175167][ T1857] FAULT_INJECTION: forcing a failure. [ 821.175167][ T1857] name failslab, interval 1, probability 0, space 0, times 0 [ 821.188236][ T1857] CPU: 1 UID: 0 PID: 1857 Comm: syz.0.7133 Not tainted syzkaller #0 PREEMPT(full) [ 821.188259][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.188270][ T1857] Call Trace: [ 821.188278][ T1857] [ 821.188287][ T1857] dump_stack_lvl+0xe8/0x150 [ 821.188315][ T1857] should_fail_ex+0x40c/0x560 [ 821.188349][ T1857] should_failslab+0xa8/0x100 [ 821.188370][ T1857] __kmalloc_noprof+0xe8/0x750 [ 821.188395][ T1857] ? metadata_dst_alloc+0x2e/0x430 [ 821.188426][ T1857] metadata_dst_alloc+0x2e/0x430 [ 821.188453][ T1857] ip_tun_rx_dst+0xf9/0x4d0 [ 821.188599][ T1857] __ipgre_rcv+0x3b7/0x5e0 [ 821.188623][ T1857] ? net_generic+0x1e/0x240 [ 821.188653][ T1857] gre_rcv+0x31e/0x540 [ 821.188676][ T1857] ? __pfx_gre_rcv+0x10/0x10 [ 821.188696][ T1857] ? gre_rcv+0xf8/0x4b0 [ 821.188725][ T1857] ? gre_rcv+0xf8/0x4b0 [ 821.188748][ T1857] ? raw_local_deliver+0x345/0x1010 [ 821.188805][ T1857] ? gre_rcv+0xf8/0x4b0 [ 821.188824][ T1857] gre_rcv+0x214/0x4b0 [ 821.188844][ T1857] ? __pfx_gre_rcv+0x10/0x10 [ 821.188865][ T1857] ip_protocol_deliver_rcu+0x2dc/0x440 [ 821.188887][ T1857] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 821.188910][ T1857] ip_local_deliver_finish+0x3bb/0x6f0 [ 821.188940][ T1857] NF_HOOK+0x336/0x3c0 [ 821.188959][ T1857] ? __pfx_ipt_do_table+0x10/0x10 [ 821.188978][ T1857] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 821.188998][ T1857] ? NF_HOOK+0x9e/0x3c0 [ 821.189017][ T1857] ? __pfx_NF_HOOK+0x10/0x10 [ 821.189040][ T1857] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 821.189068][ T1857] ? ip_local_deliver+0x113/0x190 [ 821.189092][ T1857] NF_HOOK+0x336/0x3c0 [ 821.189114][ T1857] ? __pfx_ip_rcv_finish+0x10/0x10 [ 821.189133][ T1857] ? NF_HOOK+0x9e/0x3c0 [ 821.189151][ T1857] ? __pfx_NF_HOOK+0x10/0x10 [ 821.189174][ T1857] ? __pfx_ip_rcv_finish+0x10/0x10 [ 821.189202][ T1857] ? netif_receive_skb+0x102/0xbf0 [ 821.189224][ T1857] ? __pfx_ip_rcv+0x10/0x10 [ 821.189243][ T1857] netif_receive_skb+0x45b/0xbf0 [ 821.189272][ T1857] ? __pfx_netif_receive_skb+0x10/0x10 [ 821.189300][ T1857] ? tun_rx_batched+0x185/0x790 [ 821.189321][ T1857] tun_rx_batched+0x1de/0x790 [ 821.189346][ T1857] ? __pfx_tun_rx_batched+0x10/0x10 [ 821.189364][ T1857] ? tun_get_user+0x26ca/0x4350 [ 821.189383][ T1857] ? tun_get_user+0x26ca/0x4350 [ 821.189402][ T1857] ? tun_get_user+0x2373/0x4350 [ 821.189419][ T1857] ? tun_get_user+0x2373/0x4350 [ 821.189437][ T1857] ? __local_bh_enable_ip+0xd0/0x130 [ 821.189461][ T1857] tun_get_user+0x2b04/0x4350 [ 821.189484][ T1857] ? tun_get_user+0x718/0x4350 [ 821.189509][ T1857] ? tun_get_user+0x26ca/0x4350 [ 821.189531][ T1857] ? aa_file_perm+0x4ed/0x15f0 [ 821.189549][ T1857] ? __pfx_tun_get_user+0x10/0x10 [ 821.189569][ T1857] ? __lock_acquire+0x683/0x2cd0 [ 821.189605][ T1857] ? ref_tracker_alloc+0x341/0x4b0 [ 821.189622][ T1857] ? get_pid_task+0x20/0x1f0 [ 821.189647][ T1857] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 821.189668][ T1857] ? tun_get+0x1c/0x2f0 [ 821.189686][ T1857] ? tun_get+0x1c/0x2f0 [ 821.189709][ T1857] ? tun_get+0x1c/0x2f0 [ 821.189733][ T1857] ? tun_get+0x1c/0x2f0 [ 821.189756][ T1857] tun_chr_write_iter+0x113/0x200 [ 821.189786][ T1857] vfs_write+0x612/0xba0 [ 821.189821][ T1857] ? __pfx_vfs_write+0x10/0x10 [ 821.189857][ T1857] ? __fget_files+0x2a/0x420 [ 821.189889][ T1857] ksys_write+0x150/0x270 [ 821.189917][ T1857] ? __pfx_ksys_write+0x10/0x10 [ 821.189951][ T1857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.189972][ T1857] do_syscall_64+0x174/0x580 [ 821.189993][ T1857] ? trace_irq_disable+0x3b/0x140 [ 821.190019][ T1857] ? clear_bhb_loop+0x40/0x90 [ 821.190042][ T1857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.190060][ T1857] RIP: 0033:0x7f108155d68e [ 821.190078][ T1857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 821.190092][ T1857] RSP: 002b:00007f10824fbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.190112][ T1857] RAX: ffffffffffffffda RBX: 00007f10824fc6c0 RCX: 00007f108155d68e [ 821.190125][ T1857] RDX: 0000000000000068 RSI: 0000200000000380 RDI: 00000000000000c8 [ 821.190136][ T1857] RBP: 00007f10824fc090 R08: 0000000000000000 R09: 0000000000000000 [ 821.190148][ T1857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.190158][ T1857] R13: 00007f1081816038 R14: 00007f1081815fa0 R15: 00007ffd0b4c4f38 [ 821.190192][ T1857] [ 821.933379][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.007623][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.015611][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.023556][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.031485][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.153403][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.161384][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.192304][ T1885] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 822.216596][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.224582][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.233270][ T1869] netlink: 'syz.0.7137': attribute type 1 has an invalid length. [ 822.780773][ T1922] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.788627][ T1922] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.889652][ T1922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.901166][ T1922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.150311][ T1937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.273566][ T1953] netlink: 'syz.2.7156': attribute type 11 has an invalid length. [ 823.438195][ T1953] mac80211_hwsim hwsim114 wlan0: entered promiscuous mode [ 823.445362][ T1953] mac80211_hwsim hwsim114 wlan0: entered allmulticast mode [ 823.771981][ T1976] __nla_validate_parse: 4 callbacks suppressed [ 823.772000][ T1976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7159'. [ 823.787122][ T1976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7159'. [ 824.192534][ T1994] sctp: [Deprecated]: syz.3.7165 (pid 1994) Use of int in max_burst socket option deprecated. [ 824.192534][ T1994] Use struct sctp_assoc_value instead [ 825.576225][ T2060] xt_hashlimit: size too large, truncated to 1048576 [ 825.699693][ T2056] syzkaller1: entered promiscuous mode [ 825.708767][ T2056] syzkaller1: entered allmulticast mode [ 826.133494][ T2083] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7180'. [ 826.240575][ T2089] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 826.290190][ T2091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7183'. [ 826.345553][ T2091] bond2: entered promiscuous mode [ 826.351408][ T2091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 826.681109][ T2109] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 826.729137][ T2109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7187'. [ 830.136851][ T2150] validate_nla: 24 callbacks suppressed [ 830.136868][ T2150] netlink: 'syz.2.7195': attribute type 16 has an invalid length. [ 830.150249][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7195'. [ 830.178737][ T2150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.194572][ T2156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7194'. [ 830.290504][ T2142] syzkaller0: entered promiscuous mode [ 830.296014][ T2142] syzkaller0: entered allmulticast mode [ 830.559576][ T2169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7198'. [ 831.218254][ T2197] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7202'. [ 831.302620][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 831.584835][ T2218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7207'. [ 831.593737][ T2218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7207'. [ 831.894290][ T488] IPVS: starting estimator thread 0... [ 831.929958][ T2225] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 832.097026][ T2242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7212'. [ 832.172304][ T151] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.188323][ T6274] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.196616][ T151] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.197317][ T2237] IPVS: using max 32 ests per chain, 76800 per kthread [ 832.204792][ T151] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.289788][ T2242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7212'. [ 832.446577][ T2254] netlink: 'syz.4.7214': attribute type 21 has an invalid length. [ 832.476981][ T2254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7214'. [ 832.632299][ T2264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.643161][ T2264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7215'. [ 832.897011][ T2274] netlink: 'syz.4.7220': attribute type 20 has an invalid length. [ 832.954883][ T2274] netlink: 'syz.4.7220': attribute type 20 has an invalid length. [ 832.992950][ T2274] netlink: 'syz.4.7220': attribute type 20 has an invalid length. [ 833.001041][ T2274] netlink: 'syz.4.7220': attribute type 20 has an invalid length. [ 833.450348][ T2306] netlink: 'syz.4.7227': attribute type 10 has an invalid length. [ 833.459158][ T2306] bond0: (slave wlan2): Opening slave failed [ 833.627350][ T2312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.644248][ T2312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.667462][ T2312] batman_adv: batadv0: Interface deactivated: gretap2 [ 833.674291][ T2312] batman_adv: batadv0: Removing interface: gretap2 [ 836.486200][ T2400] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 837.106081][ T2411] netlink: 'syz.3.7237': attribute type 4 has an invalid length. [ 837.250248][ T2427] __nla_validate_parse: 4 callbacks suppressed [ 837.250266][ T2427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7241'. [ 837.302816][ T2433] xfrm0 speed is unknown, defaulting to 1000 [ 837.310479][ T2433] lo speed is unknown, defaulting to 1000 [ 837.532656][ T2447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7240'. [ 837.556758][ T29] audit: type=1800 audit(1781643127.293:13): pid=2445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7244" name=205A91C83729BE524DC536ECA73FFD2409 dev="tmpfs" ino=1257 res=0 errno=0 [ 837.603367][ T5009] block nbd0: Possible stuck request ffff8880b3755080: control (read@0,1024B). Runtime 210 seconds [ 837.614110][ T5009] block nbd0: Possible stuck request ffff8880b3755240: control (read@1024,1024B). Runtime 210 seconds [ 837.615337][ T2448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7245'. [ 837.625069][ T5009] block nbd0: Possible stuck request ffff8880b3755400: control (read@2048,1024B). Runtime 210 seconds [ 837.633911][ T2448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7245'. [ 837.644819][ T5009] block nbd0: Possible stuck request ffff8880b37555c0: control (read@3072,1024B). Runtime 210 seconds [ 837.660350][ T2448] vxlan0: entered promiscuous mode [ 837.671738][ T29] audit: type=1800 audit(1781643127.403:14): pid=2443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7243" name="memory.events" dev="tmpfs" ino=1000 res=0 errno=0 [ 837.977242][ T2443] netlink: 'syz.2.7243': attribute type 26 has an invalid length. [ 838.187217][ T2472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7248'. [ 838.331686][ T2472] syzkaller0: refused to change device tx_queue_len [ 838.672234][ T2491] openvswitch: netlink: Missing valid actions attribute. [ 838.679326][ T2491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.737206][ T2491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7253'. [ 838.957170][ T2504] --map-set only usable from mangle table [ 839.061029][ T2497] netlink: 'syz.1.7253': attribute type 1 has an invalid length. [ 839.068802][ T2497] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7253'. [ 839.077751][ T2497] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7253'. [ 839.186686][ T2497] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7253'. [ 839.603498][ T2525] syzkaller1: entered promiscuous mode [ 839.609009][ T2525] syzkaller1: entered allmulticast mode [ 840.073257][ T2557] netlink: 'syz.2.7266': attribute type 1 has an invalid length. [ 840.520485][ T2583] 0·: left allmulticast mode [ 840.539590][ T2583] hsr_slave_0: left allmulticast mode [ 840.545017][ T2583] hsr_slave_1: left allmulticast mode [ 840.553176][ T2583] mac80211_hwsim hwsim114 wlan0: left promiscuous mode [ 840.560073][ T2583] mac80211_hwsim hwsim114 wlan0: left allmulticast mode [ 840.567309][ T2583] gre1: left promiscuous mode [ 840.573005][ T2583] ip6tnl2: left allmulticast mode [ 840.578307][ T2583] vlan2: left promiscuous mode [ 840.583095][ T2583] bond_slave_1: left promiscuous mode [ 840.645697][ T2588] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 840.712330][ T2583] geneve2: left promiscuous mode [ 840.742685][ T2583] bond2: left promiscuous mode [ 840.770475][ T6264] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.779393][ T6264] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.788283][ T6264] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.804731][ T6264] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.971425][ T2607] syzkaller0: entered promiscuous mode [ 840.976927][ T2607] syzkaller0: entered allmulticast mode [ 841.413826][ T2642] netlink: 'syz.1.7275': attribute type 1 has an invalid length. [ 845.378274][ T2718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.598215][ T2728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.720383][ T2732] netlink: 'syz.1.7287': attribute type 1 has an invalid length. [ 845.776560][ T2736] xt_TCPMSS: Only works on TCP SYN packets [ 845.782871][ T2734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.796871][ T2732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7287'. [ 845.886017][ T2728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.075851][ T2747] netlink: 'syz.1.7291': attribute type 4 has an invalid length. [ 846.341582][ T2767] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 846.400734][ T2767] syzkaller0: entered promiscuous mode [ 846.406245][ T2767] syzkaller0: entered allmulticast mode [ 847.098333][ T2800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7300'. [ 849.897432][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7305'. [ 849.918071][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7305'. [ 850.132889][ T2821] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.7309'. [ 850.175744][ T2823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.364559][ T2844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7313'. [ 850.453804][ T2844] hsr_slave_0: left promiscuous mode [ 850.463846][ T2844] hsr_slave_1: left promiscuous mode [ 850.541275][ T2848] xfrm0 speed is unknown, defaulting to 1000 [ 850.548950][ T2848] lo speed is unknown, defaulting to 1000 [ 851.700506][ T2916] macsec1: entered promiscuous mode [ 851.721172][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 851.727310][ T2916] mac80211_hwsim hwsim126 wlan1: entered promiscuous mode [ 851.875564][ T2918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7322'. [ 851.885488][ T2916] mac80211_hwsim hwsim126 wlan1: left promiscuous mode [ 851.911265][ T2913] team0: entered allmulticast mode [ 851.916414][ T2913] team_slave_0: entered allmulticast mode [ 851.922141][ T2913] team_slave_1: entered allmulticast mode [ 851.945767][ T2919] team0: left allmulticast mode [ 851.950659][ T2919] team_slave_0: left allmulticast mode [ 851.956677][ T2919] team_slave_1: left allmulticast mode [ 852.120338][ T2925] syzkaller1: entered promiscuous mode [ 852.126648][ T2925] syzkaller1: entered allmulticast mode [ 852.137229][ T2931] xt_hashlimit: size too large, truncated to 1048576 [ 852.414324][ T2944] netlink: 'syz.3.7334': attribute type 21 has an invalid length. [ 852.422179][ T2944] netlink: 'syz.3.7334': attribute type 22 has an invalid length. [ 852.429995][ T2944] netlink: 'syz.3.7334': attribute type 23 has an invalid length. [ 852.437811][ T2944] netlink: 'syz.3.7334': attribute type 25 has an invalid length. [ 852.445706][ T2944] netlink: 'syz.3.7334': attribute type 26 has an invalid length. [ 852.460180][ T2944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7334'. [ 852.899996][ T2960] syzkaller0: entered promiscuous mode [ 852.905516][ T2960] syzkaller0: entered allmulticast mode [ 852.916047][ T2960] tipc: Enabled bearer , priority 0 [ 852.940603][ T2960] tipc: Resetting bearer [ 853.002605][ T2959] tipc: Resetting bearer [ 853.029822][ T2959] tipc: Disabling bearer [ 853.182616][ T2969] syzkaller0: entered promiscuous mode [ 853.188123][ T2969] syzkaller0: entered allmulticast mode [ 853.196729][ T2969] 0: reclassify loop, rule prio 0, protocol 800 [ 853.401015][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7345'. [ 853.994907][ T2997] ip6tnl1: entered allmulticast mode [ 854.029335][ T2997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7350'. [ 854.056010][ T3000] netlink: 'syz.2.7353': attribute type 1 has an invalid length. [ 854.072116][ T3000] netlink: 'syz.2.7353': attribute type 2 has an invalid length. [ 854.079872][ T3000] netlink: 'syz.2.7353': attribute type 1 has an invalid length. [ 854.087609][ T3000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7353'. [ 854.785170][ T3011] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 854.875957][ T3011] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7356'. [ 854.886460][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7356'. [ 854.896130][ T3011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7356'. [ 855.007569][ T3018] team0: entered allmulticast mode [ 855.012737][ T3018] team_slave_0: entered allmulticast mode [ 855.018477][ T3018] team_slave_1: entered allmulticast mode [ 855.641260][ T3012] team0: left allmulticast mode [ 855.647059][ T3012] team_slave_0: left allmulticast mode [ 855.664261][ T3012] team_slave_1: left allmulticast mode [ 855.735576][ T3048] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 855.755585][ T3048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7364'. [ 855.789994][ T3050] openvswitch: netlink: Missing valid actions attribute. [ 855.797918][ T3050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.809392][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7366'. [ 855.819315][ T3051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.049194][ T3059] netlink: 'syz.0.7366': attribute type 1 has an invalid length. [ 857.023426][ T3090] __nla_validate_parse: 4 callbacks suppressed [ 857.023445][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7374'. [ 857.051432][ T3089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7375'. [ 857.576620][ T3107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.596472][ T3107] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7381'. [ 857.861794][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7382'. [ 857.872628][ T996] IPVS: starting estimator thread 0... [ 857.898720][ T3115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7383'. [ 857.924534][ T3116] macvlan1: entered allmulticast mode [ 857.930053][ T3116] veth1_vlan: entered allmulticast mode [ 857.938950][ T3116] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 858.120028][ T3114] IPVS: using max 31 ests per chain, 74400 per kthread [ 858.634107][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7388'. [ 858.644347][ T3134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7388'. [ 858.686266][ T3150] xt_hashlimit: size too large, truncated to 1048576 [ 858.745961][ T3155] netlink: 'syz.4.7392': attribute type 1 has an invalid length. [ 858.820872][ T3159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7395'. [ 858.893963][ T3162] netlink: 'syz.4.7392': attribute type 12 has an invalid length. [ 859.236841][ T3177] netlink: 'syz.0.7399': attribute type 6 has an invalid length. [ 859.442578][ T3155] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 859.514752][ T3187] netlink: 'syz.4.7403': attribute type 26 has an invalid length. [ 859.636973][ T5633] block nbd2: Receive control failed (result -32) [ 859.643253][ T3197] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 859.652128][ T3197] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 859.856556][ T6265] batadv1: left allmulticast mode [ 859.863506][ T6265] batadv1: left promiscuous mode [ 859.871395][ T6265] bridge0: port 3(batadv1) entered disabled state [ 859.905876][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7407'. [ 860.278988][T32182] IPVS: ip_vs_send_async error -101 [ 860.428246][ T3223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7411'. [ 860.448448][ T6265] team0: Port device xfrm0 removed [ 860.652914][ T6265] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 860.662552][ T6265] bridge5 (unregistering): left promiscuous mode [ 860.672859][ T6265] bridge5 (unregistering): left allmulticast mode [ 860.713912][ T6265] bond1 (unregistering): Released all slaves [ 860.753891][ T6265] bond2 (unregistering): Released all slaves [ 860.785133][ T6265] bond3 (unregistering): (slave veth3): Releasing backup interface [ 860.815370][ T6265] bond3 (unregistering): Released all slaves [ 860.838844][ T6265] bond0 (unregistering): (slave veth5): Releasing backup interface [ 860.849202][ T6265] bond0 (unregistering): Released all slaves [ 860.868103][ T6265] bond4 (unregistering): Released all slaves [ 860.919461][ T5633] Bluetooth: hci0: command 0x0401 tx timeout [ 860.935180][ T6265] bond5 (unregistering): (slave batadv2): Releasing active interface [ 860.943294][ T6265] batadv2: left promiscuous mode [ 860.948384][ T6265] batadv2: left allmulticast mode [ 860.954912][ T6265] bond5 (unregistering): Released all slaves [ 860.967761][ T6265] bond6 (unregistering): Released all slaves [ 860.987078][ T6265] bond7 (unregistering): Released all slaves [ 861.005838][ T6265] bond8 (unregistering): Released all slaves [ 861.030770][ T1096] tipc: Resetting bearer [ 861.046934][ T3241] pim6reg: entered allmulticast mode [ 861.072779][ T3242] pim6reg: left allmulticast mode [ 861.230600][ T3252] xfrm0 speed is unknown, defaulting to 1000 [ 861.253065][ T3252] lo speed is unknown, defaulting to 1000 [ 861.293117][ T3250] netlink: 'syz.2.7422': attribute type 1 has an invalid length. [ 861.357896][ T3250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.372713][ T3250] vlan3: entered promiscuous mode [ 861.377791][ T3250] bond3: entered promiscuous mode [ 861.382997][ T3250] vlan3: entered allmulticast mode [ 861.388125][ T3250] bond3: entered allmulticast mode [ 861.442884][ T3257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.745597][ T6265] hmó3)ó: left promiscuous mode [ 861.963222][ T3264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.061330][ T3274] netlink: 'syz.0.7428': attribute type 1 has an invalid length. [ 862.069105][ T3274] netlink: 'syz.0.7428': attribute type 2 has an invalid length. [ 862.078270][ T3274] netlink: 'syz.0.7428': attribute type 1 has an invalid length. [ 862.086024][ T3274] netlink: 'syz.0.7428': attribute type 2 has an invalid length. [ 862.097830][ T3274] netlink: Conntrack attr has 4 unknown bytes [ 862.105048][ T3274] netlink: 'syz.0.7428': attribute type 16 has an invalid length. [ 862.217445][ T6265] tipc: Disabling bearer [ 862.249993][ T6265] tipc: Disabling bearer [ 862.255994][ T6265] tipc: Left network mode [ 862.468540][ T3283] tipc: Started in network mode [ 862.473478][ T3283] tipc: Node identity c2329b5e8a8, cluster identity 4711 [ 862.480688][ T3283] tipc: Enabled bearer , priority 0 [ 862.568014][ T3283] tipc: Resetting bearer [ 862.600578][ T3282] tipc: Disabling bearer [ 862.811310][ T3295] bridge_slave_0: left allmulticast mode [ 862.818114][ T3295] bridge_slave_0: left promiscuous mode [ 862.823963][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.841197][ T3295] veth0_to_bond: left allmulticast mode [ 862.846793][ T3295] veth0_to_bond: left promiscuous mode [ 862.853175][ T3295] bridge3: port 2(veth0_to_bond) entered disabled state [ 862.863433][ T3295] bond0: (slave bond_slave_0): Releasing backup interface [ 862.872293][ T3295] bond0: (slave bond_slave_1): Releasing backup interface [ 862.881247][ T3295] team0: Port device team_slave_0 removed [ 862.946039][ T3295] team0: Port device team_slave_1 removed [ 862.968920][ T3295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 862.994821][ T3302] __nla_validate_parse: 6 callbacks suppressed [ 862.994841][ T3302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7437'. [ 863.408385][ T3320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7441'. [ 863.500996][ T3327] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.577079][ T3332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7441'. [ 863.627722][ T3329] dvmrp8: entered allmulticast mode [ 863.863567][ T3343] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7449'. [ 863.966545][ T3332] bond5: (slave bridge4): making interface the new active one [ 863.987337][ T3332] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 864.026011][ T3320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7441'. [ 864.035934][ T3320] bond5: entered promiscuous mode [ 864.040988][ T3320] bridge4: entered promiscuous mode [ 864.046490][ T3320] bond5: entered allmulticast mode [ 864.051594][ T3320] bridge4: entered allmulticast mode [ 864.057767][ T3320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 864.076112][ T3337] xfrm0 speed is unknown, defaulting to 1000 [ 864.084681][ T3320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.108494][ T3341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7450'. [ 864.128100][ T3337] lo speed is unknown, defaulting to 1000 [ 864.144944][ T3348] veth1_to_batadv: entered promiscuous mode [ 864.151054][ T3348] veth1_to_batadv: entered allmulticast mode [ 864.166603][ T3350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7453'. [ 864.192529][ T3350] validate_nla: 2 callbacks suppressed [ 864.192545][ T3350] netlink: 'syz.4.7453': attribute type 3 has an invalid length. [ 864.206202][ T3350] netlink: 'syz.4.7453': attribute type 1 has an invalid length. [ 864.214278][ T3350] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7453'. [ 864.246832][ T3350] NCSI netlink: No device for ifindex 0 [ 864.307944][ T3352] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7454'. [ 864.372402][ T3357] netlink: 'syz.4.7456': attribute type 1 has an invalid length. [ 864.450975][ T3357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.681788][ T3357] bond3: (slave geneve3): making interface the new active one [ 864.691129][ T3357] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 864.702196][ T3364] netlink: 'syz.3.7459': attribute type 11 has an invalid length. [ 864.812144][ T3370] netlink: 'syz.3.7461': attribute type 3 has an invalid length. [ 864.819908][ T3370] netlink: 'syz.3.7461': attribute type 16 has an invalid length. [ 864.827724][ T3370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7461'. [ 864.836931][ T3372] netlink: 'syz.4.7462': attribute type 1 has an invalid length. [ 865.027944][ T3369] batadv0: entered promiscuous mode [ 865.051298][ T3369] batadv0: entered allmulticast mode [ 865.056765][ T3369] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 865.095351][ T6265] hsr_slave_0: left promiscuous mode [ 865.141493][ T6265] hsr_slave_1: left promiscuous mode [ 865.152418][ T6265] veth1_macvtap: left promiscuous mode [ 865.157938][ T6265] veth0_macvtap: left promiscuous mode [ 865.163514][ T6265] veth1_vlan: left promiscuous mode [ 865.168896][ T6265] veth0_vlan: left promiscuous mode [ 865.749832][ T3383] netlink: 'syz.1.7466': attribute type 2 has an invalid length. [ 865.757588][ T3383] tipc: Cannot configure node identity twice [ 865.904787][ T3404] bond4: entered promiscuous mode [ 865.910284][ T3404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 865.928601][ T3411] mac80211_hwsim hwsim125 wlan0: entered promiscuous mode [ 865.935756][ T3411] mac80211_hwsim hwsim125 wlan0: entered allmulticast mode [ 866.083555][ T3416] erspan0: left promiscuous mode [ 866.157738][ T3416] bridge0: left promiscuous mode [ 866.164332][ T3416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.172511][ T3416] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.181930][ T3416] [ 866.184280][ T3416] ============================================ [ 866.190509][ T3416] WARNING: possible recursive locking detected [ 866.196788][ T3416] syzkaller #0 Not tainted [ 866.201268][ T3416] -------------------------------------------- [ 866.207454][ T3416] syz.1.7477/3416 is trying to acquire lock: [ 866.213421][ T3416] ffff8880304dce18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 866.224691][ T3416] [ 866.224691][ T3416] but task is already holding lock: [ 866.232041][ T3416] ffff8880304dce18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 866.241704][ T3416] and the lock comparison function returns 0: [ 866.247762][ T3416] [ 866.247762][ T3416] other info that might help us debug this: [ 866.255815][ T3416] Possible unsafe locking scenario: [ 866.255815][ T3416] [ 866.263313][ T3416] CPU0 [ 866.266591][ T3416] ---- [ 866.269853][ T3416] lock(&dev_instance_lock_key#3); [ 866.275088][ T3416] lock(&dev_instance_lock_key#3); [ 866.280286][ T3416] [ 866.280286][ T3416] *** DEADLOCK *** [ 866.280286][ T3416] [ 866.288472][ T3416] May be due to missing lock nesting notation [ 866.288472][ T3416] [ 866.296787][ T3416] 2 locks held by syz.1.7477/3416: [ 866.301882][ T3416] #0: ffffffff8fdbd5c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 866.310960][ T3416] #1: ffff8880304dce18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 866.321055][ T3416] [ 866.321055][ T3416] stack backtrace: [ 866.326943][ T3416] CPU: 0 UID: 0 PID: 3416 Comm: syz.1.7477 Not tainted syzkaller #0 PREEMPT(full) [ 866.326967][ T3416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.326977][ T3416] Call Trace: [ 866.326986][ T3416] [ 866.326995][ T3416] dump_stack_lvl+0xe8/0x150 [ 866.327018][ T3416] print_deadlock_bug+0x279/0x290 [ 866.327046][ T3416] __lock_acquire+0x24bf/0x2cd0 [ 866.327063][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.327078][ T3416] ? rtnl_newlink+0x148e/0x1bd0 [ 866.327101][ T3416] ? rtnetlink_rcv_msg+0x802/0xc00 [ 866.327122][ T3416] ? netlink_rcv_skb+0x226/0x4a0 [ 866.327138][ T3416] ? netlink_unicast+0x7bb/0x940 [ 866.327159][ T3416] ? netlink_sendmsg+0x813/0xb40 [ 866.327174][ T3416] ? ____sys_sendmsg+0x9b9/0xa20 [ 866.327189][ T3416] ? ___sys_sendmsg+0x2a5/0x360 [ 866.327204][ T3416] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.327218][ T3416] ? do_syscall_64+0x174/0x580 [ 866.327236][ T3416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.327255][ T3416] ? __ethtool_get_link_ksettings+0x109/0x250 [ 866.327274][ T3416] lock_acquire+0x106/0x350 [ 866.327289][ T3416] ? __ethtool_get_link_ksettings+0x109/0x250 [ 866.327313][ T3416] __mutex_lock+0x19d/0x1590 [ 866.327331][ T3416] ? __ethtool_get_link_ksettings+0x109/0x250 [ 866.327350][ T3416] ? lockdep_hardirqs_on+0x7a/0x110 [ 866.327367][ T3416] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 866.327383][ T3416] ? __wake_up_common_lock+0x195/0x1f0 [ 866.327406][ T3416] ? __ethtool_get_link_ksettings+0x109/0x250 [ 866.327426][ T3416] ? __pfx___mutex_lock+0x10/0x10 [ 866.327446][ T3416] ? igmp_group_added+0x238/0x910 [ 866.327463][ T3416] ? igmpv3_del_delrec+0x204/0x710 [ 866.327479][ T3416] __ethtool_get_link_ksettings+0x109/0x250 [ 866.327501][ T3416] bond_netdev_event+0x643/0xf80 [ 866.327686][ T3416] ? __pfx_bond_netdev_event+0x10/0x10 [ 866.327712][ T3416] ? ipmr_device_event+0x1f6/0x220 [ 866.327767][ T3416] notifier_call_chain+0x1a5/0x3d0 [ 866.327790][ T3416] __dev_notify_flags+0x1aa/0x310 [ 866.327808][ T3416] ? __pfx___dev_notify_flags+0x10/0x10 [ 866.327822][ T3416] ? __dev_change_flags+0x5f1/0x820 [ 866.327839][ T3416] ? __pfx___dev_change_flags+0x10/0x10 [ 866.327856][ T3416] netif_change_flags+0xde/0x1b0 [ 866.327873][ T3416] dev_change_flags+0x128/0x260 [ 866.327897][ T3416] vlan_device_event+0x1b4e/0x1f00 [ 866.328089][ T3416] ? packet_notifier+0xf1b/0xf70 [ 866.328168][ T3416] ? br_device_event+0x282/0x9c0 [ 866.328214][ T3416] ? __pfx_phonet_device_notify+0x10/0x10 [ 866.328256][ T3416] ? __pfx_vlan_device_event+0x10/0x10 [ 866.328273][ T3416] ? bcm_notifier+0xa9/0x890 [ 866.328319][ T3416] ? raw_notifier+0x9d/0x7d0 [ 866.328363][ T3416] ? cgw_notifier+0x314/0x380 [ 866.328380][ T3416] notifier_call_chain+0x1a5/0x3d0 [ 866.328403][ T3416] __dev_notify_flags+0x1aa/0x310 [ 866.328420][ T3416] ? __pfx___dev_notify_flags+0x10/0x10 [ 866.328433][ T3416] ? __dev_change_flags+0x5f1/0x820 [ 866.328450][ T3416] ? __pfx___dev_change_flags+0x10/0x10 [ 866.328466][ T3416] ? __local_bh_enable_ip+0xd0/0x130 [ 866.328482][ T3416] netif_change_flags+0xde/0x1b0 [ 866.328499][ T3416] do_setlink+0xdd6/0x4670 [ 866.328522][ T3416] ? __pfx_do_setlink+0x10/0x10 [ 866.328537][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.328562][ T3416] ? __mutex_trylock_common+0x15f/0x270 [ 866.328582][ T3416] ? __pfx___mutex_trylock_common+0x10/0x10 [ 866.328602][ T3416] ? rcu_is_watching+0x15/0xb0 [ 866.328621][ T3416] ? trace_contention_end+0x3d/0x140 [ 866.328640][ T3416] ? __mutex_lock+0x30f/0x1590 [ 866.328662][ T3416] ? rtnl_newlink+0x8a3/0x1bd0 [ 866.328685][ T3416] ? __pfx___mutex_lock+0x10/0x10 [ 866.328706][ T3416] ? ns_capable+0x89/0xe0 [ 866.328721][ T3416] ? rtnl_link_get_net_capable+0xd3/0x310 [ 866.328738][ T3416] rtnl_newlink+0x148e/0x1bd0 [ 866.328765][ T3416] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.328800][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.328817][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.328837][ T3416] ? unwind_next_frame+0x8f/0x2550 [ 866.328858][ T3416] ? is_bpf_text_address+0x26/0x2b0 [ 866.328879][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.328896][ T3416] ? kernel_text_address+0xa5/0xe0 [ 866.328917][ T3416] ? __kernel_text_address+0xd/0x30 [ 866.328937][ T3416] ? unwind_get_return_address+0x4d/0x90 [ 866.328954][ T3416] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 866.328976][ T3416] ? arch_stack_walk+0xfb/0x150 [ 866.329004][ T3416] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 866.329027][ T3416] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.329053][ T3416] ? __pfx_rtnl_newlink+0x10/0x10 [ 866.329074][ T3416] rtnetlink_rcv_msg+0x802/0xc00 [ 866.329096][ T3416] ? kasan_save_track+0x3e/0x80 [ 866.329117][ T3416] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 866.329139][ T3416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.329161][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.329180][ T3416] netlink_rcv_skb+0x226/0x4a0 [ 866.329197][ T3416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 866.329220][ T3416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.329240][ T3416] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.329255][ T3416] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.329272][ T3416] netlink_unicast+0x7bb/0x940 [ 866.329298][ T3416] netlink_sendmsg+0x813/0xb40 [ 866.329318][ T3416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.329335][ T3416] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.329357][ T3416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.329376][ T3416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.329393][ T3416] ____sys_sendmsg+0x9b9/0xa20 [ 866.329409][ T3416] ? __might_fault+0xaf/0x130 [ 866.329430][ T3416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.329449][ T3416] ? import_iovec+0x73/0xa0 [ 866.329472][ T3416] ___sys_sendmsg+0x2a5/0x360 [ 866.329487][ T3416] ? __lock_acquire+0x683/0x2cd0 [ 866.329505][ T3416] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.329523][ T3416] ? futex_wake+0x4d7/0x5b0 [ 866.329558][ T3416] ? __fget_files+0x2a/0x420 [ 866.329576][ T3416] ? __fget_files+0x3a2/0x420 [ 866.329598][ T3416] __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.329614][ T3416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.329633][ T3416] ? rcu_is_watching+0x15/0xb0 [ 866.329652][ T3416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.329669][ T3416] do_syscall_64+0x174/0x580 [ 866.329686][ T3416] ? trace_irq_disable+0x3b/0x140 [ 866.329708][ T3416] ? clear_bhb_loop+0x40/0x90 [ 866.329724][ T3416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.329744][ T3416] RIP: 0033:0x7f56b8f9ce59 [ 866.329760][ T3416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.329775][ T3416] RSP: 002b:00007f56b9e49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.329793][ T3416] RAX: ffffffffffffffda RBX: 00007f56b9215fa0 RCX: 00007f56b8f9ce59 [ 866.329805][ T3416] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 866.329816][ T3416] RBP: 00007f56b9032d6f R08: 0000000000000000 R09: 0000000000000000 [ 866.329826][ T3416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.329835][ T3416] R13: 00007f56b9216038 R14: 00007f56b9215fa0 R15: 00007ffe245363d8 [ 866.329853][ T3416] [ 867.267296][ T3433] block nbd0: reconnected socket [ 867.267326][ T5633] block nbd0: Receive control failed (result -107) [ 868.119880][ T5009] block nbd0: Possible stuck request ffff8880b3755080: control (read@0,1024B). Runtime 240 seconds [ 868.132305][ T5009] block nbd0: Possible stuck request ffff8880b3755240: control (read@1024,1024B). Runtime 240 seconds [ 868.144136][ T5009] block nbd0: Possible stuck request ffff8880b3755400: control (read@2048,1024B). Runtime 240 seconds [ 868.155889][ T11] block nbd0: Dead connection, failed to find a fallback [ 868.164342][ T11] block nbd0: shutting down sockets [ 868.170019][ T5009] block nbd0: Possible stuck request ffff8880b37555c0: control (read@3072,1024B). Runtime 240 seconds [ 868.181844][ T11] blk_print_req_error: 138 callbacks suppressed [ 868.181872][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.199151][ T11] buffer_io_error: 138 callbacks suppressed [ 868.199179][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 868.213706][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.224060][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 868.232575][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.242238][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 868.251412][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.260977][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 868.269314][ T5637] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.279827][ T5637] Buffer I/O error on dev nbd0, logical block 0, async page read [ 868.288350][ T5637] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.297924][ T5637] Buffer I/O error on dev nbd0, logical block 1, async page read [ 868.306400][ T5637] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.317084][ T5637] Buffer I/O error on dev nbd0, logical block 2, async page read [ 868.325506][ T5637] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.335212][ T5637] Buffer I/O error on dev nbd0, logical block 3, async page read [ 868.344453][ T5637] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.354009][ T5637] Buffer I/O error on dev nbd0, logical block 0, async page read [ 868.362395][ T5637] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.372786][ T5637] Buffer I/O error on dev nbd0, logical block 1, async page read [ 868.383859][ T5637] ldm_validate_partition_table(): Disk read failed. [ 868.392983][ T5637] Dev nbd0: unable to read RDB block 0 [ 868.401830][ T5637] nbd0: unable to read partition table [ 868.420705][ T4997] udevd[4997]: worker [5637] terminated by signal 9 (Killed) [ 868.428793][ T4997] udevd[4997]: worker [5637] failed while handling '/devices/virtual/block/nbd0' [ 870.042626][ T1318] ieee802154 phy1 wpan1: encryption failed: -22