last executing test programs: 2.620697382s ago: executing program 1 (id=1942): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x13, 0x1c, 0x0, 0x0, 0x4a, 0x2, 0x0, @remote, @multicast1}, {0x17, 0x0, 0x0, @broadcast}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x4040884) 2.456214375s ago: executing program 1 (id=1947): r0 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.24397111s ago: executing program 0 (id=1950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) gettid() ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendmsg$unix(r3, 0x0, 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000ff", @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) 2.243609647s ago: executing program 1 (id=1951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xf4, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xf}}, [@TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x34, 0x40, 0xdbdc, 0x8000, 0x2, 0x80000000, 0x3, 0x4}}, {0xc, 0x2, [0xa80, 0x80, 0x60, 0x8]}}, {{0x1c, 0x1, {0xb, 0xe, 0x6, 0x581, 0x1, 0x7f, 0x7f, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}, {{0x1c, 0x1, {0x7, 0x4, 0xc, 0x7, 0x2, 0x3, 0xd, 0x2}}, {0x8, 0x2, [0xd, 0x6]}}, {{0x1c, 0x1, {0x73, 0x9, 0x1000, 0x91e8, 0x3, 0x4, 0x54a88b8e, 0x6}}, {0x10, 0x2, [0x5, 0x6, 0x1ff, 0x4, 0x9, 0x9]}}, {{0x1c, 0x1, {0x5, 0xe, 0x3, 0x1000, 0x0, 0x0, 0x6, 0x8}}, {0x14, 0x2, [0x566d, 0xddb, 0x983, 0x101, 0x53d3, 0xd, 0xfffc, 0xd460]}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040845}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r9, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) setsockopt(r7, 0xff, 0x0, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x3, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.203400478s ago: executing program 2 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002ec0)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x10) 1.999625696s ago: executing program 0 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 1.999075203s ago: executing program 2 (id=1956): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) sendmmsg$inet_sctp(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) 1.87641616s ago: executing program 2 (id=1957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xb72d664872eea099}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048000}, 0x4001) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xb72d664872eea099}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048000}, 0x4001) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r3, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) (async) 1.734987968s ago: executing program 0 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvmsg(r3, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/84, 0x54}, {&(0x7f0000001b40)=""/136, 0x88}, {&(0x7f0000001c00)=""/211, 0xd3}], 0x8}, 0x100) recvfrom$inet6(r3, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000580)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.732409616s ago: executing program 2 (id=1960): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x5c}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, 0x0, 0x4044884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800900010068617368000000002400028008000640000000000800074000230001080002400000000008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.581717223s ago: executing program 4 (id=1961): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000d80)={{[0x5, 0xe9, 0x4, 0x8]}, 0x0, 0x1, 0x55, 0x0, &(0x7f0000000c00)=[{{@_ha_fsid={[0x0, 0x8]}, {0xfff8, 0x6d}}, 0xfffff6f2, 0x0, '$]%\\\xca$/*\xdf}-$g!:\x00'}, {{@_ha_fsid={[0xcebf, 0x10]}, {0x4, 0x1, 0x100, 0x7fffffff}}, 0x7, 0x0, 'gact\x00'}, {{@_ha_fsid={[0x52, 0x3]}, {0xd, 0x3, 0xf8, 0xa6}}, 0x5, 0x0, '\x00'}, {{@_ha_fsid={[0x2, 0x752]}, {0x1000, 0x0, 0x0, 0x9f24}}, 0x5, 0x0, '{\x00'}, {{@_ha_fsid={[0x530a, 0x7]}, {0x1200, 0x0, 0x1ff, 0x1}}, 0x5, 0x0, '@-%*@-/\x00'}, {{@align=0x446, {0xa000, 0x1, 0x7, 0x6}}, 0x80000001, 0x0, '\x00'}, {{@_ha_fsid={[0x40, 0x5]}, {0x0, 0x7f, 0x0, 0xbe29}}, 0x2, 0x0, '\xa7\x00'}, {{@align=0x8, {0x2, 0x6, 0x8}}, 0x5, 0x0, 'gact\x00'}, {{@align=0xc3, {0x6a, 0x0, 0x31, 0x6}}, 0x25c, 0x0, 'gact\x00'}, {{@_ha_fsid={[0x1, 0x4]}, {0xec32, 0x938c, 0x9, 0x2}}, 0x7, 0x0, ')\x00'}]}) (async) r2 = openat$tun(0xffffffffffffff9c, 0xfffffffffffffffe, 0x636143, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000200)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="eba08f6578f85e419c829f1cb694593967ac388d8810653664c475650436c602636d9418e145", 0x26}, {&(0x7f0000000400)="4c32d41fa0161c5522d9a9426fef116aac38f9744cc8a74ca839f8325ab79b0ee1181a0f8a3db067e6858729815839a5dd0afc1def8d14ee6d11ed97d6e0c8687c840b6e0741beddf74e77860ac876d1a5430bdce9a480e2c107889cb7716b1538c19b95d8dd758ea466c4ac0617c9e7015620e252619f491f2198b3a548053ad769dbddc6beb69987e72538bf11d84636", 0x91}], 0x3, &(0x7f0000000780)=[{0x88, 0x18, 0x6, "a78d6f34b70c4cf8afb89d7ff132c02cad49597dfd0596ec4d2d3613b1c570d6e19fcc5d418dbe9458afb113b54a676f81675f0cba0fd297720fb846cd200c593b643066dd91925609555e295e3af0ccacac06c7552bd38274c073aada589799119cc996bbac28d68145710b8340aa78bb094b"}, {0xd0, 0x0, 0x6, "6c4967b63f9265e9611ea3e55a4692260626c08e55fb09a07592f125deee9704f8f879859f6bcda4d37ba01df4f379cde6f8fb3f81c95809a3286a0dda23226b521072961c2eccd85b6c93eba87ccc84dedc60df8632ad537a26a4a694e699d8d6deea9e8b1602cb486b0dfa5ae7709de2a6d2c5db771216be6efa89ace66532bff7a2d8d7341723925108666f17eb5fb8519be4f20954789705d60bd1800c34675f6a1a9a8f7a8a889255a645d140224276f01e9538dd016bff74cb"}, {0xe0, 0x114, 0x0, "1d5c0837b77ea94c27065942c1574ccab41ae674e1b5d2d364eb1b51ade76aa17868f60c75be49f5e2d24f9d348e6468707723bea6c0150dd25c4f2fef822899b7ff107e2151c0e27e45e357e9f71bb78ac42bfea0420111daec606dd3f91cde0b6fd6da57668be2255e065c660e9d81b1cc7d65c8d2f113938fea3b1ad4e9c438481b0dd4a2074f70ea129fb9ac8e4e898474694eac06b707093546c2e567b0b3068d1f03afa3b1d527edc44bfb8b22ece394b1e89206c9efb15bc09e213d6281da8c8f143d9588cf0ab3a2"}, {0x100, 0x10c, 0x7, "c8d446f502a89e106b427e072d2cb4d26ed4b07e8bb34e34c390c26abe822297ffd9dbfdd743cdf8eedab136fb094d8a5ee3a3fe4a3d17454dffb0cb212629f2e98675c735feda39e8d1f2c1da648b71e3dc4d12da94b4faf665fca2620b762cf583140e0a700334cdb8b07d3a18c4bee5129a975e038ff8c3ba1f51b9c3d09bc5130364433280e7f1a2bc90f74c5770044a9b5ea0a5c8e5d3c401aed9db4b56d0385ff3ff20394b48872a8d9e5437849f122be69390f21078386c36b06c620cdd347955f83ef438eaa2184fa9f299de0e30f6d418e1705129987e44e19e3ab5ce206649eb6759c7c05f35cedc867f"}, {0x38, 0x112, 0x3, "03f69def61b7f3211a2639d5d82d4c46f522933246cd89cea534267c3456f28a91e6259b"}], 0x370}, 0x88) (async) r3 = socket(0x400000000010, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0x4}, {0xa, 0x1}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x840, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0xc7a8}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xd, 0xffffffffffffffff, 0x3, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff0d, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYBLOB="7278b092e3f921b9abffb86e7e4ff5d46a39a8950401891f741e7eb7eff46ebdff5b6f741355332b7c84e750bcd496894f70526b6c235556e25f08d0003ebd2f9162471f81c06996586db7066608d6782d77177be910266f768176f439b78001e39be6096a65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x488d4) 1.468255351s ago: executing program 3 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x3, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 1.468083203s ago: executing program 4 (id=1963): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x20000051) 1.38535074s ago: executing program 1 (id=1964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) gettid() ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, 0x0) sendmsg$unix(r3, 0x0, 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000ff", @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) 1.237134018s ago: executing program 4 (id=1965): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) (rerun: 64) 1.079839993s ago: executing program 1 (id=1966): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x667}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c000100240001"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.051186969s ago: executing program 4 (id=1967): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @private0}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x140d, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1.003221745s ago: executing program 3 (id=1968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0284ff000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 865.259758ms ago: executing program 1 (id=1969): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) close(0x3) 756.024871ms ago: executing program 0 (id=1970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x84, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff20000000007e000aac14140ce000000d49e832f0", 0x0, 0xf, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000180)={0x24, @short}, 0xb) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100)=0x2, 0x4) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20009054}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 755.902184ms ago: executing program 3 (id=1971): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000106467cf0000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"], 0x48) 549.965203ms ago: executing program 3 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 451.603069ms ago: executing program 4 (id=1973): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc98, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xbc8, 0xffffffff, 0xffffffff, 0xbc8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}], 0xfe}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x24, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcf8) 393.179094ms ago: executing program 2 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x560b}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4d}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3e, 0x10}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xc5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x7b}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000b7e8dec700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c8bb18c49bbb641abcdf01b8c73b33a04000000d647588b73a1420a4997ac81516f1d620c3463c4131367782bdacd86a2f9d5a9fc025631cb7ea88301cd420551c8d4fab1c142590493d1ca85421ec1939bdf7ee8532044b49dc9353539f7ab4608c1f90be3c5e560aac0585f40dce8dcf93a676e9df361a7ad235c8823fe50a9f6312433bdac9ddffb78dc6db024511f15b55f28ceac86d6d607713c8614320617c5420254823f529a58b87e17c2f4989a807b57f826a35f7738e731490fff54ba230ddd3d6d70aa0309e2cdbe73d4fec6c18b45f2aff551edf821642b38ad3c2fc9120fcd50045170c8a8d100"/253, @ANYRES32=0x0, @ANYBLOB="14000200fc00"/20], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 386.345655ms ago: executing program 0 (id=1975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="fffffff0000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) 386.111379ms ago: executing program 3 (id=1976): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) (async, rerun: 64) socket(0x2c, 0x3, 0x40) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 55.699218ms ago: executing program 4 (id=1977): close(0xffffffffffffffff) r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1ac3960cd4f1bad36a8a24cac537e8d67fd2e27a8c8f8c222f69aa94320b0590282e26466371b5d75b15a1c319478225eba7bc169d85423b595c9ff9aa5f5b58b96b5c9c9d", 0x45}, {&(0x7f0000000140)="e5f7f772bdb5783b5ee4f0acae3c7c4635007a064cb0ebceaa3375a1701f4ca492073145b9870b1ac6ed4320298837fa40a777ce96007875e5c1d637ade377138ffd2f5f57049335c2225bca", 0x4c}], 0x2, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x200000c0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8}, 0x0) write(r1, &(0x7f0000000040)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0xffffffffffffffe7) 44.010259ms ago: executing program 3 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) writev(r3, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x39}, 0x1, 0x0, 0x0, 0x15}, 0x1040) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000) pipe(0x0) r8 = socket(0x14, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x400, 0x3, 0x203, 0x6, 0x3, 0x0, 0x775c, 0x1, r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x61d0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32], 0xa4}, 0x1, 0x0, 0x0, 0x24008805}, 0x801) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000408010200000000000000000000000006000240000000000500030000000000a1ecc25546129e75c2a85fce8e0cc215fd7a758ba829f7b2af9305cb1ae1bf96f35ecdf468772e7f8a5581416465cd1a00897e"], 0x24}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r9) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r11, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 41.980459ms ago: executing program 0 (id=1979): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="e1ff78d514905fc08d1f4a0300005dde7f1b62b377ffff01000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) ioctl$sock_netdev_private(r10, 0x89f1, &(0x7f0000000000)) ioctl$XFS_IOC_FSGROWFSDATA(r10, 0x4010586e, &(0x7f0000000080)={0x83, 0x7}) 0s ago: executing program 2 (id=1980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000037000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 83.727736][ T343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.737697][ T343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.768551][ T343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.788899][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.803445][ T5833] veth0_vlan: entered promiscuous mode [ 83.888929][ T5833] veth1_vlan: entered promiscuous mode [ 83.986688][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.996532][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.054509][ T5824] veth0_vlan: entered promiscuous mode [ 84.080706][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.100115][ T5824] veth1_vlan: entered promiscuous mode [ 84.106109][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.156763][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.166546][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.184661][ T5833] veth0_macvtap: entered promiscuous mode [ 84.204451][ T5833] veth1_macvtap: entered promiscuous mode [ 84.222759][ T5837] veth0_vlan: entered promiscuous mode [ 84.245309][ T51] Bluetooth: hci0: command tx timeout [ 84.268847][ T343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.272326][ T5837] veth1_vlan: entered promiscuous mode [ 84.282377][ T343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.300644][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.333932][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.366623][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.406032][ T51] Bluetooth: hci2: command tx timeout [ 84.406511][ T5835] Bluetooth: hci4: command tx timeout [ 84.414965][ T51] Bluetooth: hci1: command tx timeout [ 84.418338][ T5835] Bluetooth: hci3: command tx timeout [ 84.435045][ T5824] veth0_macvtap: entered promiscuous mode [ 84.472117][ T343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.502031][ T343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.540747][ T5824] veth1_macvtap: entered promiscuous mode [ 84.567030][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.586569][ T343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.604955][ T343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.637931][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 84.679703][ T5837] veth0_macvtap: entered promiscuous mode [ 84.733130][ T5837] veth1_macvtap: entered promiscuous mode [ 84.753253][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.810752][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.867643][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.875229][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.879259][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.883074][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.916341][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.937392][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.947751][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.961772][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.007731][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.017489][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.027831][ T5954] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.070904][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.108250][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.269069][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.269937][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 85.298845][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.356529][ T5965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10'. [ 85.384794][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.410544][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.560771][ T5968] netlink: 7991 bytes leftover after parsing attributes in process `syz.1.11'. [ 85.581940][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.605893][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.625493][ T5971] Zero length message leads to an empty skb [ 85.661529][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.687614][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.782740][ T343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.823344][ T343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.982558][ T5982] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.046207][ T5982] xt_SECMARK: invalid mode: 9 [ 86.156773][ T5985] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 86.214516][ T5985] syzkaller1: entered promiscuous mode [ 86.223685][ T5985] syzkaller1: entered allmulticast mode [ 86.329052][ T5835] Bluetooth: hci0: command tx timeout [ 86.331891][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 86.376676][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 86.468650][ T5997] delete_channel: no stack [ 86.486800][ T5835] Bluetooth: hci3: command tx timeout [ 86.486810][ T5831] Bluetooth: hci1: command tx timeout [ 86.486840][ T5831] Bluetooth: hci4: command tx timeout [ 86.492438][ T5835] Bluetooth: hci2: command tx timeout [ 86.676317][ T6004] ip6erspan0: entered allmulticast mode [ 86.791503][ T6013] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 87.017149][ T6023] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 87.060908][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 87.282677][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 87.802393][ T6042] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 87.901173][ T1322] bond0: (slave bond_slave_0): interface is now down [ 87.932307][ T1322] bond0: (slave bond_slave_1): interface is now down [ 87.980863][ T1322] bond0: (slave bond_slave_0): interface is now down [ 88.018895][ T1322] bond0: (slave bond_slave_1): interface is now down [ 88.085793][ T1322] bond0: (slave bond_slave_0): interface is now down [ 88.095978][ T1322] bond0: (slave bond_slave_1): interface is now down [ 88.125045][ T144] bond0: (slave bond_slave_0): interface is now down [ 88.142008][ T144] bond0: (slave bond_slave_1): interface is now down [ 88.170035][ T144] bond0: now running without any active interface! [ 88.234088][ T6073] netlink: 104 bytes leftover after parsing attributes in process `syz.1.38'. [ 88.462532][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.636450][ T6093] FAULT_INJECTION: forcing a failure. [ 88.636450][ T6093] name failslab, interval 1, probability 0, space 0, times 1 [ 88.677662][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) [ 88.677690][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.677700][ T6093] Call Trace: [ 88.677708][ T6093] [ 88.677715][ T6093] dump_stack_lvl+0xe8/0x150 [ 88.677749][ T6093] should_fail_ex+0x412/0x560 [ 88.677792][ T6093] should_failslab+0xa8/0x100 [ 88.677820][ T6093] __kmalloc_noprof+0xe8/0x760 [ 88.677841][ T6093] ? ip_options_get+0x51/0x4c0 [ 88.677868][ T6093] ip_options_get+0x51/0x4c0 [ 88.677896][ T6093] ip_cmsg_send+0x591/0xa70 [ 88.677935][ T6093] udp_sendmsg+0xc8b/0x22f0 [ 88.677970][ T6093] ? udp_lib_get_port+0x17ee/0x1cf0 [ 88.677996][ T6093] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 88.678022][ T6093] ? __pfx_udp_sendmsg+0x10/0x10 [ 88.678076][ T6093] ? inet_sendmsg+0x14f/0x370 [ 88.678099][ T6093] ? inet_sendmsg+0x14f/0x370 [ 88.678121][ T6093] ? __local_bh_enable_ip+0xd0/0x130 [ 88.678146][ T6093] ? lockdep_hardirqs_on+0x7a/0x110 [ 88.678169][ T6093] ? inet_sendmsg+0x14f/0x370 [ 88.678190][ T6093] ? __local_bh_enable_ip+0xd0/0x130 [ 88.678213][ T6093] ? inet_sendmsg+0x29c/0x370 [ 88.678240][ T6093] ____sys_sendmsg+0x80a/0x9f0 [ 88.678274][ T6093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.678307][ T6093] ? import_iovec+0x73/0xa0 [ 88.678332][ T6093] ___sys_sendmsg+0x2a5/0x360 [ 88.678361][ T6093] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.678420][ T6093] ? __fget_files+0x2a/0x420 [ 88.678436][ T6093] ? __fget_files+0x3a0/0x420 [ 88.678463][ T6093] __x64_sys_sendmsg+0x1bd/0x2a0 [ 88.678488][ T6093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.678521][ T6093] ? __pfx_ksys_write+0x10/0x10 [ 88.678555][ T6093] do_syscall_64+0x14d/0xf80 [ 88.678577][ T6093] ? trace_irq_disable+0x3b/0x150 [ 88.678593][ T6093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.678613][ T6093] ? clear_bhb_loop+0x40/0x90 [ 88.678635][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.678654][ T6093] RIP: 0033:0x7f525899c819 [ 88.678672][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.678685][ T6093] RSP: 002b:00007f525980a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.678705][ T6093] RAX: ffffffffffffffda RBX: 00007f5258c15fa0 RCX: 00007f525899c819 [ 88.678717][ T6093] RDX: 0000000000000000 RSI: 00002000000052c0 RDI: 0000000000000003 [ 88.678727][ T6093] RBP: 00007f525980a090 R08: 0000000000000000 R09: 0000000000000000 [ 88.678737][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.678746][ T6093] R13: 00007f5258c16038 R14: 00007f5258c15fa0 R15: 00007ffd1d1f2728 [ 88.678785][ T6093] [ 89.370623][ T6113] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.892973][ T6134] __nla_validate_parse: 3 callbacks suppressed [ 89.892994][ T6134] netlink: 104 bytes leftover after parsing attributes in process `syz.2.60'. [ 90.117459][ T6138] syzkaller1: entered promiscuous mode [ 90.133410][ T6138] syzkaller1: entered allmulticast mode [ 90.239419][ T6146] xt_SECMARK: invalid mode: 9 [ 90.360575][ T6148] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.68'. [ 90.628500][ T6164] syzkaller1: entered promiscuous mode [ 90.634024][ T6164] syzkaller1: entered allmulticast mode [ 90.793804][ T6170] netlink: 104 bytes leftover after parsing attributes in process `syz.4.76'. [ 91.025977][ T6178] netlink: 'syz.3.79': attribute type 4 has an invalid length. [ 91.046561][ T6181] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 91.182766][ T6184] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.83'. [ 91.593578][ T6203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.91'. [ 91.623043][ T36] bond0: (slave bond_slave_0): interface is now down [ 91.643602][ T36] bond0: (slave bond_slave_1): interface is now down [ 91.676348][ T36] bond0: now running without any active interface! [ 91.896403][ T6214] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 91.996237][ T6214] vlan2: entered allmulticast mode [ 92.003469][ T6214] veth1_to_batadv: entered allmulticast mode [ 92.026418][ T24] cfg80211: failed to load regulatory.db [ 92.136327][ T6218] netlink: 284 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.164447][ T6220] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.98'. [ 92.550209][ T6233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.104'. [ 92.703428][ T6242] FAULT_INJECTION: forcing a failure. [ 92.703428][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.748459][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 92.748488][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 92.748499][ T6242] Call Trace: [ 92.748507][ T6242] [ 92.748515][ T6242] dump_stack_lvl+0xe8/0x150 [ 92.748549][ T6242] should_fail_ex+0x412/0x560 [ 92.748594][ T6242] _copy_to_user+0x31/0xb0 [ 92.748620][ T6242] simple_read_from_buffer+0xe1/0x170 [ 92.748653][ T6242] proc_fail_nth_read+0x1bb/0x230 [ 92.748686][ T6242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.748716][ T6242] ? rw_verify_area+0x2a6/0x4d0 [ 92.748736][ T6242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.748765][ T6242] vfs_read+0x20c/0xa70 [ 92.748785][ T6242] ? fdget_pos+0x246/0x320 [ 92.748809][ T6242] ? __pfx___mutex_lock+0x10/0x10 [ 92.748835][ T6242] ? __pfx_vfs_read+0x10/0x10 [ 92.748857][ T6242] ? __fget_files+0x2a/0x420 [ 92.748880][ T6242] ? __fget_files+0x3a0/0x420 [ 92.748896][ T6242] ? __fget_files+0x2a/0x420 [ 92.748921][ T6242] ksys_read+0x150/0x270 [ 92.748943][ T6242] ? __pfx_ksys_read+0x10/0x10 [ 92.748976][ T6242] do_syscall_64+0x14d/0xf80 [ 92.749000][ T6242] ? trace_irq_disable+0x3b/0x150 [ 92.749017][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.749036][ T6242] ? clear_bhb_loop+0x40/0x90 [ 92.749060][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.749079][ T6242] RIP: 0033:0x7f3e3935d04e [ 92.749097][ T6242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.749113][ T6242] RSP: 002b:00007f3e3a321fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.749134][ T6242] RAX: ffffffffffffffda RBX: 00007f3e3a3226c0 RCX: 00007f3e3935d04e [ 92.749148][ T6242] RDX: 000000000000000f RSI: 00007f3e3a3220a0 RDI: 0000000000000004 [ 92.749159][ T6242] RBP: 00007f3e3a322090 R08: 0000000000000000 R09: 0000000000000000 [ 92.749170][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.749181][ T6242] R13: 00007f3e39616038 R14: 00007f3e39615fa0 R15: 00007ffc19112fb8 [ 92.749214][ T6242] [ 93.019971][ T6247] netlink: 'syz.0.110': attribute type 15 has an invalid length. [ 93.344501][ T6260] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.111'. [ 93.423882][ T6263] Bluetooth: MGMT ver 1.23 [ 93.441022][ T6263] batadv1: entered allmulticast mode [ 93.546419][ T6270] xt_SECMARK: invalid mode: 9 [ 93.777597][ T6280] syzkaller1: entered promiscuous mode [ 93.780055][ T6279] netlink: 104 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.783177][ T6280] syzkaller1: entered allmulticast mode [ 94.064588][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.072984][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.255105][ T6293] syzkaller1: entered promiscuous mode [ 94.260737][ T6293] syzkaller1: entered allmulticast mode [ 94.531367][ T6303] vlan2: entered allmulticast mode [ 94.555248][ T6303] bridge0: entered allmulticast mode [ 94.562946][ T6303] bridge0: port 3(vlan2) entered blocking state [ 94.586264][ T6303] bridge0: port 3(vlan2) entered disabled state [ 94.604187][ T6309] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 94.631790][ T6309] !: entered promiscuous mode [ 94.643155][ T6309] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 94.651647][ T6309] !: left promiscuous mode [ 94.657280][ T6310] netlink: 'syz.2.137': attribute type 4 has an invalid length. [ 94.988975][ T12] bond0: (slave bond_slave_0): interface is now down [ 95.000104][ T12] bond0: (slave bond_slave_1): interface is now down [ 95.017948][ T6325] team_slave_1: mtu less than device minimum [ 95.048438][ T144] bond0: (slave bond_slave_0): interface is now down [ 95.084669][ T144] bond0: (slave bond_slave_1): interface is now down [ 95.113280][ T144] bond0: now running without any active interface! [ 95.265062][ T6335] __nla_validate_parse: 1 callbacks suppressed [ 95.265082][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'. [ 95.289839][ T6336] netlink: 104 bytes leftover after parsing attributes in process `syz.2.148'. [ 95.313233][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'. [ 95.396054][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 95.708510][ T6348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.737045][ T6348] syz.1.153: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.794830][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT(full) [ 95.794860][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.794871][ T6348] Call Trace: [ 95.794880][ T6348] [ 95.794889][ T6348] dump_stack_lvl+0xe8/0x150 [ 95.794923][ T6348] warn_alloc+0x249/0x340 [ 95.794949][ T6348] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 95.794976][ T6348] ? __pfx_warn_alloc+0x10/0x10 [ 95.795007][ T6348] ? kasan_save_track+0x4f/0x80 [ 95.795027][ T6348] ? kasan_save_track+0x3e/0x80 [ 95.795044][ T6348] ? __kasan_kmalloc+0x93/0xb0 [ 95.795062][ T6348] ? __kmalloc_cache_noprof+0x31c/0x660 [ 95.795082][ T6348] ? xskq_create+0x56/0x170 [ 95.795102][ T6348] ? xsk_setsockopt+0x54c/0x990 [ 95.795120][ T6348] ? do_sock_setsockopt+0x17c/0x1b0 [ 95.795141][ T6348] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 95.795162][ T6348] ? do_syscall_64+0x14d/0xf80 [ 95.795191][ T6348] __vmalloc_node_range_noprof+0x132/0x1730 [ 95.795247][ T6348] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.795273][ T6348] ? __kasan_kmalloc+0x93/0xb0 [ 95.795300][ T6348] vmalloc_user_noprof+0xad/0xe0 [ 95.795324][ T6348] ? xskq_create+0xbf/0x170 [ 95.795345][ T6348] xskq_create+0xbf/0x170 [ 95.795372][ T6348] xsk_init_queue+0x8a/0xe0 [ 95.795395][ T6348] xsk_setsockopt+0x54c/0x990 [ 95.795419][ T6348] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.795439][ T6348] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.795471][ T6348] ? aa_sock_opt_perm+0xff/0x1a0 [ 95.795513][ T6348] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 95.795534][ T6348] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.795557][ T6348] do_sock_setsockopt+0x17c/0x1b0 [ 95.795587][ T6348] __x64_sys_setsockopt+0x13d/0x1b0 [ 95.795618][ T6348] do_syscall_64+0x14d/0xf80 [ 95.795642][ T6348] ? trace_irq_disable+0x3b/0x150 [ 95.795659][ T6348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.795678][ T6348] ? clear_bhb_loop+0x40/0x90 [ 95.795703][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.795722][ T6348] RIP: 0033:0x7f32c7b9c819 [ 95.795741][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.795755][ T6348] RSP: 002b:00007f32c8afb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.795778][ T6348] RAX: ffffffffffffffda RBX: 00007f32c7e15fa0 RCX: 00007f32c7b9c819 [ 95.795790][ T6348] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 95.795802][ T6348] RBP: 00007f32c7c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 95.795813][ T6348] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.795825][ T6348] R13: 00007f32c7e16038 R14: 00007f32c7e15fa0 R15: 00007ffc057f0b28 [ 95.795863][ T6348] [ 95.795942][ T6348] Mem-Info: [ 95.933427][ T6361] netlink: 256 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.986123][ T6348] active_anon:5955 inactive_anon:0 isolated_anon:0 [ 95.986123][ T6348] active_file:2510 inactive_file:39931 isolated_file:0 [ 95.986123][ T6348] unevictable:768 dirty:437 writeback:0 [ 95.986123][ T6348] slab_reclaimable:10576 slab_unreclaimable:94420 [ 95.986123][ T6348] mapped:29119 shmem:1358 pagetables:1190 [ 95.986123][ T6348] sec_pagetables:0 bounce:0 [ 95.986123][ T6348] kernel_misc_reclaimable:0 [ 95.986123][ T6348] free:1330011 free_pcp:15783 free_cma:0 [ 96.089355][ T6361] unsupported nlmsg_type 40 [ 96.144324][ T6348] Node 0 active_anon:23952kB inactive_anon:0kB active_file:10040kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116416kB dirty:1732kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11884kB pagetables:4620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.253637][ T6348] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 96.297943][ T6368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.161'. [ 96.312808][ T6348] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.397887][ T6348] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 96.462443][ T6348] Node 0 DMA32 free:1364008kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23852kB inactive_anon:0kB active_file:10040kB inactive_file:159512kB unevictable:1536kB writepending:1732kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:57736kB local_pcp:30464kB free_cma:0kB [ 96.560554][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 96.575624][ T6348] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 96.681931][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 96.694664][ T6348] Node 1 Normal free:3946408kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.792430][ T6387] xt_SECMARK: invalid mode: 9 [ 96.823645][ T6348] lowmem_reserve[]: 0 0 0 0 0 [ 96.839128][ T6348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.904721][ T6348] Node 0 DMA32: 1542*4kB (UM) 326*8kB (UM) 66*16kB (UME) 18*32kB (UME) 3*64kB (E) 5*128kB (UME) 3*256kB (ME) 3*512kB (UME) 3*1024kB (UM) 4*2048kB (UM) 327*4096kB (M) = 1364200kB [ 96.972529][ T6348] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.994077][ T6391] syzkaller1: entered promiscuous mode [ 96.999847][ T6391] syzkaller1: entered allmulticast mode [ 97.007789][ T6348] Node 1 Normal: 8*4kB (U) 15*8kB (UM) 7*16kB (UM) 5*32kB (UM) 10*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (M) = 3946408kB [ 97.029528][ T6348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.040619][ T6348] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.050279][ T6348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.060646][ T6348] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.070379][ T6348] 43795 total pagecache pages [ 97.082953][ T6348] 0 pages in swap cache [ 97.145704][ T6348] Free swap = 124996kB [ 97.149928][ T6348] Total swap = 124996kB [ 97.182184][ T6348] 2097051 pages RAM [ 97.191402][ T6397] netlink: 104 bytes leftover after parsing attributes in process `syz.3.174'. [ 97.234785][ T6348] 0 pages HighMem/MovableOnly [ 97.239635][ T6348] 427062 pages reserved [ 97.243819][ T6348] 0 pages cma reserved [ 97.641924][ T6421] syzkaller1: entered promiscuous mode [ 97.649033][ T6421] syzkaller1: entered allmulticast mode [ 97.870095][ T6427] trusted_key: syz.2.186 sent an empty control message without MSG_MORE. [ 97.918190][ T6431] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 98.065002][ T6436] netlink: 104 bytes leftover after parsing attributes in process `syz.3.190'. [ 98.474148][ T77] bond0: (slave bond_slave_0): interface is now down [ 98.505791][ T77] bond0: (slave bond_slave_1): interface is now down [ 98.534724][ T77] bond0: now running without any active interface! [ 98.821282][ T6468] netlink: 104 bytes leftover after parsing attributes in process `syz.0.202'. [ 99.270557][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 99.873162][ T6518] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 100.049399][ T6524] xt_SECMARK: invalid mode: 9 [ 100.116646][ T6520] bond2: (slave bridge1): making interface the new active one [ 100.139122][ T6520] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 100.218664][ T6532] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 100.261896][ T6529] syzkaller1: entered promiscuous mode [ 100.284706][ T6529] syzkaller1: entered allmulticast mode [ 100.646466][ T6547] __nla_validate_parse: 3 callbacks suppressed [ 100.646495][ T6547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.233'. [ 100.887867][ T6563] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 100.902138][ T6561] syzkaller1: entered promiscuous mode [ 100.918329][ T6561] syzkaller1: entered allmulticast mode [ 101.653065][ T6591] netlink: 104 bytes leftover after parsing attributes in process `syz.3.252'. [ 102.017710][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 102.037490][ T6609] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 102.053897][ T6609] netlink: 'syz.1.259': attribute type 2 has an invalid length. [ 102.326459][ T6620] delete_channel: no stack [ 102.350017][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 102.639395][ T6631] netlink: 104 bytes leftover after parsing attributes in process `syz.4.266'. [ 103.052202][ T6648] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.275'. [ 103.120968][ T6654] xt_SECMARK: invalid mode: 9 [ 103.361201][ T6666] netlink: 104 bytes leftover after parsing attributes in process `syz.1.283'. [ 103.375344][ T6667] syzkaller1: entered promiscuous mode [ 103.380876][ T6667] syzkaller1: entered allmulticast mode [ 103.516519][ T6671] netlink: 156 bytes leftover after parsing attributes in process `syz.0.286'. [ 103.662822][ T6679] netlink: 'syz.1.287': attribute type 4 has an invalid length. [ 103.937800][ T6685] syzkaller1: entered promiscuous mode [ 103.943338][ T6685] syzkaller1: entered allmulticast mode [ 104.020727][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 104.311193][ T6703] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 104.373718][ T6705] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.300'. [ 104.555923][ T6709] bond1: (slave gretap1): making interface the new active one [ 104.607618][ T6709] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 105.409386][ T6745] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 105.495094][ T6750] netlink: 'syz.3.318': attribute type 12 has an invalid length. [ 105.503223][ T6750] netlink: 'syz.3.318': attribute type 11 has an invalid length. [ 106.043449][ T6767] __nla_validate_parse: 3 callbacks suppressed [ 106.043469][ T6767] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.326'. [ 106.211408][ T6777] xt_SECMARK: invalid mode: 9 [ 106.463623][ T6785] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 106.521152][ T6787] syzkaller1: entered promiscuous mode [ 106.538850][ T6787] syzkaller1: entered allmulticast mode [ 106.576537][ T6789] netlink: 'syz.0.336': attribute type 4 has an invalid length. [ 107.226805][ T6819] syzkaller1: entered promiscuous mode [ 107.232346][ T6819] syzkaller1: entered allmulticast mode [ 107.282367][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 107.307961][ T6826] syzkaller0: entered promiscuous mode [ 107.313629][ T6826] syzkaller0: entered allmulticast mode [ 107.323737][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 108.213084][ T6865] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.363'. [ 109.672574][ T6893] xt_SECMARK: invalid mode: 9 [ 110.100742][ T6908] netlink: 'syz.2.380': attribute type 4 has an invalid length. [ 110.453767][ T6923] syzkaller1: entered promiscuous mode [ 110.478377][ T6923] syzkaller1: entered allmulticast mode [ 110.869158][ T6940] syzkaller1: entered promiscuous mode [ 110.896085][ T6940] syzkaller1: entered allmulticast mode [ 110.915943][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 110.928766][ T77] bond0: (slave bond_slave_0): interface is now down [ 110.948686][ T77] bond0: (slave bond_slave_1): interface is now down [ 110.967794][ T77] bond0: now running without any active interface! [ 110.989526][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 111.735004][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 112.366006][ T7008] xt_SECMARK: invalid mode: 9 [ 112.650183][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.823288][ T7032] netlink: 'syz.3.430': attribute type 4 has an invalid length. [ 113.204580][ T7046] syzkaller1: entered promiscuous mode [ 113.226940][ T7046] syzkaller1: entered allmulticast mode [ 114.099738][ T7083] syzkaller1: entered promiscuous mode [ 114.120978][ T7083] syzkaller1: entered allmulticast mode [ 114.858178][ T7117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.461'. [ 115.041181][ T7132] FAULT_INJECTION: forcing a failure. [ 115.041181][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.070400][ T7134] netlink: 104 bytes leftover after parsing attributes in process `syz.4.467'. [ 115.120639][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT(full) [ 115.120666][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.120677][ T7132] Call Trace: [ 115.120697][ T7132] [ 115.120706][ T7132] dump_stack_lvl+0xe8/0x150 [ 115.120738][ T7132] should_fail_ex+0x412/0x560 [ 115.120771][ T7132] _copy_from_user+0x2d/0xb0 [ 115.120793][ T7132] ___sys_sendmsg+0x1c6/0x360 [ 115.120823][ T7132] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.120879][ T7132] ? __fget_files+0x2a/0x420 [ 115.120896][ T7132] ? __fget_files+0x3a0/0x420 [ 115.120923][ T7132] __x64_sys_sendmsg+0x1bd/0x2a0 [ 115.120947][ T7132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.120977][ T7132] ? __pfx_ksys_write+0x10/0x10 [ 115.121009][ T7132] do_syscall_64+0x14d/0xf80 [ 115.121033][ T7132] ? trace_irq_disable+0x3b/0x150 [ 115.121048][ T7132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.121066][ T7132] ? clear_bhb_loop+0x40/0x90 [ 115.121089][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.121107][ T7132] RIP: 0033:0x7f525899c819 [ 115.121127][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.121142][ T7132] RSP: 002b:00007f525980a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.121163][ T7132] RAX: ffffffffffffffda RBX: 00007f5258c15fa0 RCX: 00007f525899c819 [ 115.121177][ T7132] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 115.121189][ T7132] RBP: 00007f525980a090 R08: 0000000000000000 R09: 0000000000000000 [ 115.121201][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.121212][ T7132] R13: 00007f5258c16038 R14: 00007f5258c15fa0 R15: 00007ffd1d1f2728 [ 115.121244][ T7132] [ 115.434122][ T7142] xt_SECMARK: invalid mode: 9 [ 115.810320][ T7153] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.475'. [ 115.887485][ T7165] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 116.143949][ T7177] syzkaller1: entered promiscuous mode [ 116.203391][ T7177] syzkaller1: entered allmulticast mode [ 116.601118][ T7192] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.491'. [ 116.808476][ T7201] syzkaller1: entered promiscuous mode [ 116.841637][ T7201] syzkaller1: entered allmulticast mode [ 117.516944][ T7234] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.506'. [ 117.611685][ T7240] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 117.639214][ T7242] netlink: 104 bytes leftover after parsing attributes in process `syz.3.510'. [ 117.661932][ T7240] netlink: 'syz.4.508': attribute type 3 has an invalid length. [ 117.715265][ T7240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.508'. [ 117.798948][ T7246] netlink: 104 bytes leftover after parsing attributes in process `syz.0.511'. [ 117.981389][ T7258] FAULT_INJECTION: forcing a failure. [ 117.981389][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 117.998860][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.4.515 Not tainted syzkaller #0 PREEMPT(full) [ 117.998888][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.998899][ T7258] Call Trace: [ 117.998907][ T7258] [ 117.998915][ T7258] dump_stack_lvl+0xe8/0x150 [ 117.998946][ T7258] should_fail_ex+0x412/0x560 [ 117.998978][ T7258] should_failslab+0xa8/0x100 [ 117.999004][ T7258] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 117.999025][ T7258] ? __alloc_skb+0x186/0x7d0 [ 117.999046][ T7258] ? __alloc_skb+0x1d0/0x7d0 [ 117.999065][ T7258] ? __local_bh_enable_ip+0xd0/0x130 [ 117.999094][ T7258] __alloc_skb+0x1d0/0x7d0 [ 117.999112][ T7258] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 117.999139][ T7258] netlink_sendmsg+0x5d4/0xb40 [ 117.999170][ T7258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.999192][ T7258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.999222][ T7258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.999246][ T7258] ____sys_sendmsg+0x972/0x9f0 [ 117.999278][ T7258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.999310][ T7258] ? import_iovec+0x73/0xa0 [ 117.999335][ T7258] ___sys_sendmsg+0x2a5/0x360 [ 117.999364][ T7258] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.999423][ T7258] ? __fget_files+0x2a/0x420 [ 117.999440][ T7258] ? __fget_files+0x3a0/0x420 [ 117.999466][ T7258] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.999491][ T7258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.999523][ T7258] ? __pfx_ksys_write+0x10/0x10 [ 117.999554][ T7258] do_syscall_64+0x14d/0xf80 [ 117.999578][ T7258] ? trace_irq_disable+0x3b/0x150 [ 117.999594][ T7258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.999612][ T7258] ? clear_bhb_loop+0x40/0x90 [ 117.999634][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.999650][ T7258] RIP: 0033:0x7fee28b9c819 [ 117.999669][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.999690][ T7258] RSP: 002b:00007fee29a77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.999710][ T7258] RAX: ffffffffffffffda RBX: 00007fee28e15fa0 RCX: 00007fee28b9c819 [ 117.999723][ T7258] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 117.999734][ T7258] RBP: 00007fee29a77090 R08: 0000000000000000 R09: 0000000000000000 [ 117.999744][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.999755][ T7258] R13: 00007fee28e16038 R14: 00007fee28e15fa0 R15: 00007ffe7c8d3928 [ 117.999794][ T7258] [ 118.691348][ T7279] xt_SECMARK: invalid mode: 9 [ 118.848859][ T7284] netlink: 'syz.0.522': attribute type 72 has an invalid length. [ 119.083619][ T7295] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 119.568917][ T7316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.672469][ T7311] syzkaller1: entered promiscuous mode [ 119.690672][ T7311] syzkaller1: entered allmulticast mode [ 119.804979][ T7324] netlink: 'syz.1.538': attribute type 72 has an invalid length. [ 120.321390][ T7350] syzkaller1: entered promiscuous mode [ 120.329031][ T7350] syzkaller1: entered allmulticast mode [ 120.517441][ T7357] tipc: Enabling of bearer rejected, media not registered [ 120.691706][ T7364] netlink: 'syz.2.551': attribute type 72 has an invalid length. [ 120.801031][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 120.894559][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 121.077195][ T7383] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 121.219474][ T7383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.320195][ T7380] bond3: (slave gretap2): making interface the new active one [ 121.385637][ T7380] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 121.488236][ T7396] netlink: 104 bytes leftover after parsing attributes in process `syz.2.563'. [ 121.642371][ T7402] xt_SECMARK: invalid mode: 9 [ 121.733362][ T7404] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.566'. [ 122.026074][ T7419] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 122.563802][ T7439] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.582'. [ 122.641179][ T7443] syzkaller1: entered promiscuous mode [ 122.667847][ T7443] syzkaller1: entered allmulticast mode [ 122.947689][ T7461] syzkaller1: entered promiscuous mode [ 122.963312][ T7461] syzkaller1: entered allmulticast mode [ 123.075065][ T7469] netlink: 'syz.4.592': attribute type 142 has an invalid length. [ 123.098151][ T7471] netlink: 'syz.4.592': attribute type 142 has an invalid length. [ 123.233629][ T7469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.455836][ T7469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.568266][ T7486] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.598'. [ 123.624566][ T7490] netlink: 104 bytes leftover after parsing attributes in process `syz.2.600'. [ 123.638480][ T7469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.745029][ T7469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.838517][ T7497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.603'. [ 123.912188][ T7500] netlink: 104 bytes leftover after parsing attributes in process `syz.0.605'. [ 124.021343][ T1343] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.091846][ T7506] FAULT_INJECTION: forcing a failure. [ 124.091846][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.133055][ T343] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.147152][ T7506] CPU: 0 UID: 0 PID: 7506 Comm: syz.3.607 Not tainted syzkaller #0 PREEMPT(full) [ 124.147178][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.147189][ T7506] Call Trace: [ 124.147197][ T7506] [ 124.147205][ T7506] dump_stack_lvl+0xe8/0x150 [ 124.147239][ T7506] should_fail_ex+0x412/0x560 [ 124.147273][ T7506] _copy_from_iter+0x1d3/0x1670 [ 124.147297][ T7506] ? rcu_is_watching+0x15/0xb0 [ 124.147331][ T7506] ? __pfx__copy_from_iter+0x10/0x10 [ 124.147358][ T7506] ? netlink_sendmsg+0x650/0xb40 [ 124.147377][ T7506] ? skb_put+0x11b/0x210 [ 124.147403][ T7506] netlink_sendmsg+0x6c0/0xb40 [ 124.147432][ T7506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.147455][ T7506] ? aa_sock_msg_perm+0xf1/0x1b0 [ 124.147486][ T7506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 124.147510][ T7506] ____sys_sendmsg+0x972/0x9f0 [ 124.147545][ T7506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.147578][ T7506] ? import_iovec+0x73/0xa0 [ 124.147604][ T7506] ___sys_sendmsg+0x2a5/0x360 [ 124.147634][ T7506] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.147695][ T7506] ? __fget_files+0x2a/0x420 [ 124.147712][ T7506] ? __fget_files+0x3a0/0x420 [ 124.147739][ T7506] __x64_sys_sendmsg+0x1bd/0x2a0 [ 124.147775][ T7506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.147806][ T7506] ? __pfx_ksys_write+0x10/0x10 [ 124.147840][ T7506] do_syscall_64+0x14d/0xf80 [ 124.147863][ T7506] ? trace_irq_disable+0x3b/0x150 [ 124.147880][ T7506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.147899][ T7506] ? clear_bhb_loop+0x40/0x90 [ 124.147923][ T7506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.147939][ T7506] RIP: 0033:0x7fea4279c819 [ 124.147957][ T7506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.147972][ T7506] RSP: 002b:00007fea43591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.147992][ T7506] RAX: ffffffffffffffda RBX: 00007fea42a15fa0 RCX: 00007fea4279c819 [ 124.148004][ T7506] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 124.148016][ T7506] RBP: 00007fea43591090 R08: 0000000000000000 R09: 0000000000000000 [ 124.148026][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.148037][ T7506] R13: 00007fea42a16038 R14: 00007fea42a15fa0 R15: 00007ffc5be7f968 [ 124.148068][ T7506] [ 124.181512][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.609'. [ 124.200605][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.344950][ T7513] xt_SECMARK: invalid mode: 9 [ 124.383995][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.436823][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.609'. [ 125.004347][ T7537] netlink: 'syz.3.619': attribute type 4 has an invalid length. [ 125.292660][ T7550] netlink: 'syz.0.625': attribute type 3 has an invalid length. [ 125.340490][ T7550] netlink: 'syz.0.625': attribute type 3 has an invalid length. [ 125.916307][ T7581] syzkaller1: entered promiscuous mode [ 125.942208][ T7581] syzkaller1: entered allmulticast mode [ 125.967568][ T7584] netlink: 216 bytes leftover after parsing attributes in process `syz.3.637'. [ 125.979168][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 125.991327][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.637'. [ 126.441795][ T7594] syzkaller1: entered promiscuous mode [ 126.459678][ T7594] syzkaller1: entered allmulticast mode [ 127.044021][ T7623] bond2: (slave bond_slave_1): Device is not our slave [ 127.056516][ T7623] bond2: option active_slave: invalid value (bond_slave_1) [ 127.100936][ T7623] bond2 (unregistering): Released all slaves [ 127.116172][ T7634] IPv6: Can't replace route, no match found [ 127.135171][ T7634] IPv6: Can't replace route, no match found [ 127.446857][ T7642] syzkaller1: entered promiscuous mode [ 127.452702][ T7642] syzkaller1: entered allmulticast mode [ 127.456120][ T7644] x_tables: duplicate underflow at hook 3 [ 127.981662][ T7669] __nla_validate_parse: 1 callbacks suppressed [ 127.981681][ T7669] netlink: 144 bytes leftover after parsing attributes in process `syz.0.670'. [ 128.225751][ T7674] syzkaller1: entered promiscuous mode [ 128.248342][ T7674] syzkaller1: entered allmulticast mode [ 128.631629][ T7693] syz.4.684 uses old SIOCAX25GETINFO [ 128.991155][ T7705] syzkaller1: entered promiscuous mode [ 129.037106][ T7705] syzkaller1: entered allmulticast mode [ 129.256198][ T7720] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 129.329024][ T7720] netlink: 88 bytes leftover after parsing attributes in process `syz.4.693'. [ 129.350968][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 129.380269][ T7720] netlink: 1 bytes leftover after parsing attributes in process `syz.4.693'. [ 129.398467][ T7720] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 129.416143][ T7720] netlink: 634 bytes leftover after parsing attributes in process `syz.4.693'. [ 129.547715][ T7722] netlink: 'syz.0.694': attribute type 39 has an invalid length. [ 129.558822][ T7731] netlink: 104 bytes leftover after parsing attributes in process `syz.3.696'. [ 129.684132][ T7722] hsr_slave_1 (unregistering): left promiscuous mode [ 129.910182][ T7746] syzkaller1: entered promiscuous mode [ 129.932796][ T7746] syzkaller1: entered allmulticast mode [ 130.252995][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 130.282559][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 130.317222][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 130.390979][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.418598][ T7767] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 130.473844][ T7767] bond0: (slave gre0): Error -95 calling set_mac_address [ 130.490722][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.989804][ T7793] syzkaller1: entered promiscuous mode [ 131.024186][ T7793] syzkaller1: entered allmulticast mode [ 131.255747][ T7809] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 131.268487][ T7797] pim6reg1: entered promiscuous mode [ 131.273881][ T7797] pim6reg1: entered allmulticast mode [ 131.574296][ T7820] netlink: 164 bytes leftover after parsing attributes in process `syz.3.727'. [ 131.963016][ T7828] bond2 (unregistering): Released all slaves [ 132.269894][ T7846] syzkaller1: entered promiscuous mode [ 132.309563][ T7846] syzkaller1: entered allmulticast mode [ 132.975377][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982060][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.219536][ T7888] syzkaller1: entered promiscuous mode [ 133.234949][ T7888] syzkaller1: entered allmulticast mode [ 133.449014][ T7899] __nla_validate_parse: 6 callbacks suppressed [ 133.449039][ T7899] netlink: 104 bytes leftover after parsing attributes in process `syz.1.753'. [ 134.025355][ T7921] syzkaller1: entered promiscuous mode [ 134.047398][ T7921] syzkaller1: entered allmulticast mode [ 134.511345][ T7939] xt_SECMARK: invalid mode: 9 [ 134.836866][ T7952] netlink: 104 bytes leftover after parsing attributes in process `syz.4.770'. [ 135.020977][ T7962] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 135.047474][ T7962] netlink: 16147 bytes leftover after parsing attributes in process `syz.0.774'. [ 135.171465][ T7962] netlink: 104 bytes leftover after parsing attributes in process `syz.0.774'. [ 135.417934][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.780'. [ 135.706311][ T7995] netlink: 104 bytes leftover after parsing attributes in process `syz.3.785'. [ 136.012116][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 136.324523][ T8022] netlink: 'syz.0.799': attribute type 10 has an invalid length. [ 136.353892][ T8022] netlink: 224 bytes leftover after parsing attributes in process `syz.0.799'. [ 136.412805][ T8026] xt_SECMARK: invalid mode: 9 [ 136.505503][ T8030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.802'. [ 136.522160][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 136.608180][ T8032] netlink: 'syz.4.803': attribute type 21 has an invalid length. [ 136.877069][ T8049] FAULT_INJECTION: forcing a failure. [ 136.877069][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 136.915122][ T8049] CPU: 0 UID: 0 PID: 8049 Comm: syz.0.809 Not tainted syzkaller #0 PREEMPT(full) [ 136.915151][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.915162][ T8049] Call Trace: [ 136.915170][ T8049] [ 136.915178][ T8049] dump_stack_lvl+0xe8/0x150 [ 136.915212][ T8049] should_fail_ex+0x412/0x560 [ 136.915248][ T8049] should_failslab+0xa8/0x100 [ 136.915272][ T8049] ? skb_clone+0x212/0x3a0 [ 136.915297][ T8049] kmem_cache_alloc_noprof+0x87/0x650 [ 136.915328][ T8049] skb_clone+0x212/0x3a0 [ 136.915398][ T8049] __netlink_deliver_tap+0x404/0x850 [ 136.915434][ T8049] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.915455][ T8049] netlink_deliver_tap+0x19c/0x1b0 [ 136.915476][ T8049] netlink_sendskb+0x68/0x140 [ 136.915507][ T8049] netlink_unicast+0x3a3/0x9b0 [ 136.915544][ T8049] ? __pfx_netlink_unicast+0x10/0x10 [ 136.915582][ T8049] netlink_rcv_skb+0x2b6/0x4b0 [ 136.915601][ T8049] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 136.915629][ T8049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.915665][ T8049] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.915684][ T8049] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.915707][ T8049] xfrm_netlink_rcv+0x79/0x90 [ 136.915734][ T8049] netlink_unicast+0x80f/0x9b0 [ 136.915772][ T8049] ? __pfx_netlink_unicast+0x10/0x10 [ 136.915802][ T8049] ? netlink_sendmsg+0x650/0xb40 [ 136.915818][ T8049] ? skb_put+0x11b/0x210 [ 136.915843][ T8049] netlink_sendmsg+0x813/0xb40 [ 136.915874][ T8049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.915898][ T8049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.915931][ T8049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.915957][ T8049] ____sys_sendmsg+0x972/0x9f0 [ 136.915992][ T8049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.916026][ T8049] ? import_iovec+0x73/0xa0 [ 136.916053][ T8049] ___sys_sendmsg+0x2a5/0x360 [ 136.916083][ T8049] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.916145][ T8049] ? __fget_files+0x2a/0x420 [ 136.916162][ T8049] ? __fget_files+0x3a0/0x420 [ 136.916192][ T8049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 136.916218][ T8049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.916254][ T8049] ? __pfx_ksys_write+0x10/0x10 [ 136.916290][ T8049] do_syscall_64+0x14d/0xf80 [ 136.916313][ T8049] ? trace_irq_disable+0x3b/0x150 [ 136.916330][ T8049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.916360][ T8049] ? clear_bhb_loop+0x40/0x90 [ 136.916384][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.916402][ T8049] RIP: 0033:0x7f525899c819 [ 136.916422][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.916436][ T8049] RSP: 002b:00007f525980a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.916457][ T8049] RAX: ffffffffffffffda RBX: 00007f5258c15fa0 RCX: 00007f525899c819 [ 136.916471][ T8049] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 136.916483][ T8049] RBP: 00007f525980a090 R08: 0000000000000000 R09: 0000000000000000 [ 136.916495][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.916506][ T8049] R13: 00007f5258c16038 R14: 00007f5258c15fa0 R15: 00007ffd1d1f2728 [ 136.916538][ T8049] [ 137.524103][ T8061] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 137.552578][ T8055] syzkaller1: entered promiscuous mode [ 137.585201][ T8055] syzkaller1: entered allmulticast mode [ 137.833141][ T8074] syzkaller1: entered promiscuous mode [ 137.841780][ T8074] syzkaller1: entered allmulticast mode [ 137.970673][ T8079] xt_SECMARK: invalid mode: 9 [ 138.494055][ T8097] netem: change failed [ 138.705750][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.838412][ T8119] xt_SECMARK: invalid mode: 9 [ 138.983127][ T8128] syzkaller1: entered promiscuous mode [ 138.993770][ T8128] syzkaller1: entered allmulticast mode [ 139.039806][ T8131] __nla_validate_parse: 3 callbacks suppressed [ 139.039820][ T8131] netlink: 104 bytes leftover after parsing attributes in process `syz.4.840'. [ 139.105113][ T8117] nbd0: detected capacity change from 0 to 63 [ 139.136119][ T5145] block nbd0: Receive control failed (result -32) [ 139.137313][ T5829] block nbd0: Send control failed (result -32) [ 139.155697][ T5835] block nbd0: Receive control failed (result -32) [ 139.159965][ T5829] block nbd0: Request send failed, requeueing [ 139.196753][ T5829] block nbd0: Dead connection, failed to find a fallback [ 139.203869][ T5829] block nbd0: shutting down sockets [ 139.212716][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.227469][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 139.254750][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.265890][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 139.273987][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.283781][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 139.293229][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.303148][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 139.313293][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.322944][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 139.330933][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.351291][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 139.382437][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.426125][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 139.433982][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.501832][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 139.543620][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.576518][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 139.609034][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.646005][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 139.654559][ T5829] ldm_validate_partition_table(): Disk read failed. [ 139.669410][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.850'. [ 139.670556][ T5829] Dev nbd0: unable to read RDB block 0 [ 139.684470][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 139.688890][ T8153] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 139.742502][ T8155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.851'. [ 139.753600][ T5829] nbd0: unable to read partition table [ 139.791155][ T5829] ldm_validate_partition_table(): Disk read failed. [ 139.821743][ T8157] xt_SECMARK: invalid mode: 9 [ 139.826102][ T5829] Dev nbd0: unable to read RDB block 0 [ 139.832758][ T5829] nbd0: unable to read partition table [ 139.984950][ T8164] syzkaller1: entered promiscuous mode [ 139.997525][ T8164] syzkaller1: entered allmulticast mode [ 140.107675][ T8167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.856'. [ 140.128586][ T8171] syzkaller1: entered promiscuous mode [ 140.134120][ T8171] syzkaller1: entered allmulticast mode [ 140.208671][ T8173] openvswitch: netlink: Key type 31 is not supported [ 140.544122][ T8188] netlink: 'syz.4.863': attribute type 4 has an invalid length. [ 140.678912][ T8176] syzkaller1: entered promiscuous mode [ 140.684642][ T8176] syzkaller1: entered allmulticast mode [ 140.774251][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'. [ 140.936238][ T8202] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 141.002189][ T8192] netlink: 104 bytes leftover after parsing attributes in process `syz.0.867'. [ 141.106436][ T8205] netlink: 104 bytes leftover after parsing attributes in process `syz.0.872'. [ 141.202096][ T8208] syzkaller1: entered promiscuous mode [ 141.232197][ T8208] syzkaller1: entered allmulticast mode [ 141.609816][ T8223] netlink: 'syz.2.877': attribute type 4 has an invalid length. [ 141.723417][ T8216] syzkaller1: entered promiscuous mode [ 141.729235][ T8216] syzkaller1: entered allmulticast mode [ 142.240653][ T8244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.884'. [ 142.417814][ T8252] netlink: 'syz.4.886': attribute type 7 has an invalid length. [ 142.682396][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.760041][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.841261][ T8265] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 143.299470][ T8276] syzkaller1: entered promiscuous mode [ 143.313244][ T8276] syzkaller1: entered allmulticast mode [ 143.358608][ T8278] syzkaller1: entered promiscuous mode [ 143.384362][ T8278] syzkaller1: entered allmulticast mode [ 143.609597][ T8286] xt_SECMARK: invalid mode: 9 [ 143.861336][ T8293] bond1: entered promiscuous mode [ 143.871580][ T8302] netlink: 'syz.4.907': attribute type 9 has an invalid length. [ 143.873713][ T8293] bond1: entered allmulticast mode [ 143.881656][ T8302] netlink: 'syz.4.907': attribute type 11 has an invalid length. [ 143.889506][ T8293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.893107][ T8302] netlink: 'syz.4.907': attribute type 12 has an invalid length. [ 143.908724][ T8303] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 143.936651][ T8302] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.907'. [ 143.986365][ T8306] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 144.284466][ T8319] syzkaller1: entered promiscuous mode [ 144.306175][ T8319] syzkaller1: entered allmulticast mode [ 144.317968][ T8324] __nla_validate_parse: 1 callbacks suppressed [ 144.317987][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.916'. [ 144.477938][ T8332] xt_SECMARK: invalid mode: 9 [ 144.751667][ T8343] netlink: 104 bytes leftover after parsing attributes in process `syz.3.922'. [ 144.899209][ T8351] netlink: 'syz.2.923': attribute type 4 has an invalid length. [ 145.522801][ T8373] netlink: 104 bytes leftover after parsing attributes in process `syz.0.929'. [ 145.564754][ T8360] nbd1: detected capacity change from 0 to 63 [ 145.594275][ T5835] block nbd1: Receive control failed (result -104) [ 145.594725][ T5145] block nbd1: Receive control failed (result -32) [ 145.789344][ T8377] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.932'. [ 145.831918][ T8377] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 145.916066][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 145.936427][ T8381] netlink: 14 bytes leftover after parsing attributes in process `syz.0.934'. [ 145.980375][ T8381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.045166][ T8381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.067940][ T8381] bond0 (unregistering): Released all slaves [ 146.127716][ T8386] syzkaller1: entered promiscuous mode [ 146.154345][ T8386] syzkaller1: entered allmulticast mode [ 146.343159][ T8396] netlink: 'syz.1.939': attribute type 4 has an invalid length. [ 146.858602][ T8411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.930823][ T8416] netlink: 104 bytes leftover after parsing attributes in process `syz.0.947'. [ 147.014982][ T8420] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 147.054728][ T8420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.948'. [ 147.174424][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 147.191251][ T8420] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 147.899239][ T8450] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.048893][ T8454] netlink: 104 bytes leftover after parsing attributes in process `syz.3.960'. [ 148.389104][ T8464] xt_SECMARK: invalid mode: 9 [ 148.814476][ T8468] syzkaller1: entered promiscuous mode [ 148.820607][ T8468] syzkaller1: entered allmulticast mode [ 149.013681][ T8486] netlink: 'syz.4.972': attribute type 4 has an invalid length. [ 149.050104][ T8488] syz_tun: entered allmulticast mode [ 149.091962][ T8487] syz_tun: left allmulticast mode [ 149.217563][ T8492] syzkaller1: entered promiscuous mode [ 149.223202][ T8492] syzkaller1: entered allmulticast mode [ 149.515016][ T8494] nbd2: detected capacity change from 0 to 63 [ 149.528768][ T5145] block nbd2: Receive control failed (result -32) [ 149.536269][ T5835] block nbd2: Receive control failed (result -32) [ 149.570223][ T8506] __nla_validate_parse: 2 callbacks suppressed [ 149.570242][ T8506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.980'. [ 149.619171][ T5841] block nbd2: Dead connection, failed to find a fallback [ 149.637686][ T5841] block nbd2: shutting down sockets [ 149.655336][ T5841] blk_print_req_error: 138 callbacks suppressed [ 149.655355][ T5841] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 149.685366][ T5841] buffer_io_error: 138 callbacks suppressed [ 149.685383][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 149.734727][ T5841] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 149.744269][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 149.796807][ T5841] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 149.801608][ T8520] netlink: 'syz.4.986': attribute type 4 has an invalid length. [ 149.834678][ T5841] Buffer I/O error on dev nbd2, logical block 2, async page read [ 149.842543][ T5841] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 149.925169][ T5841] Buffer I/O error on dev nbd2, logical block 3, async page read [ 149.933623][ T5841] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 149.953460][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 149.997923][ T5841] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.026622][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 150.057735][ T5841] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.071676][ T8529] syzkaller1: entered promiscuous mode [ 150.072161][ T8528] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 150.086424][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 150.097081][ T5841] Buffer I/O error on dev nbd2, logical block 2, async page read [ 150.105835][ T8529] syzkaller1: entered allmulticast mode [ 150.114360][ T5841] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.134744][ T5841] Buffer I/O error on dev nbd2, logical block 3, async page read [ 150.156294][ T5841] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.173800][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.224970][ T5841] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.234509][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 150.281955][ T5841] ldm_validate_partition_table(): Disk read failed. [ 150.325414][ T5841] Dev nbd2: unable to read RDB block 0 [ 150.331802][ T5841] nbd2: unable to read partition table [ 150.361837][ T5841] ldm_validate_partition_table(): Disk read failed. [ 150.378832][ T5841] Dev nbd2: unable to read RDB block 0 [ 150.388260][ T5841] nbd2: unable to read partition table [ 150.637332][ T8555] netlink: 104 bytes leftover after parsing attributes in process `syz.3.999'. [ 150.728183][ T8557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1001'. [ 150.771787][ T8560] xt_SECMARK: invalid mode: 9 [ 150.816384][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 150.865418][ T8562] netlink: 'syz.0.1004': attribute type 5 has an invalid length. [ 151.020825][ T8570] syzkaller1: entered promiscuous mode [ 151.041821][ T8570] syzkaller1: entered allmulticast mode [ 151.709492][ T8608] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1016'. [ 151.718745][ T8588] nbd3: detected capacity change from 0 to 63 [ 151.747173][ T5835] block nbd3: Receive control failed (result -32) [ 151.756932][ T5145] block nbd3: Receive control failed (result -32) [ 151.757880][ T5841] block nbd3: Send control failed (result -32) [ 151.774130][ T8600] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1017'. [ 151.831990][ T5841] block nbd3: Request send failed, requeueing [ 151.854962][ T5841] block nbd3: Dead connection, failed to find a fallback [ 151.862306][ T11] block nbd3: Dead connection, failed to find a fallback [ 151.892583][ T11] block nbd3: shutting down sockets [ 151.902240][ T5841] ldm_validate_partition_table(): Disk read failed. [ 151.926461][ T5841] Dev nbd3: unable to read RDB block 0 [ 151.934533][ T5841] nbd3: unable to read partition table [ 151.947146][ T5841] ldm_validate_partition_table(): Disk read failed. [ 151.954301][ T5841] Dev nbd3: unable to read RDB block 0 [ 151.962440][ T5841] nbd3: unable to read partition table [ 152.047870][ T5907] IPVS: starting estimator thread 0... [ 152.079632][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 152.146764][ T8620] IPVS: using max 28 ests per chain, 67200 per kthread [ 152.227736][ T8626] syzkaller1: entered promiscuous mode [ 152.233307][ T8626] syzkaller1: entered allmulticast mode [ 152.398609][ T8637] xt_SECMARK: invalid mode: 9 [ 152.590863][ T8640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1032'. [ 152.831586][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.840986][ T8643] nbd4: detected capacity change from 0 to 63 [ 152.849369][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.865861][ T8657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1037'. [ 152.877337][ T5835] block nbd4: Receive control failed (result -104) [ 152.889384][ T5145] block nbd4: Receive control failed (result -32) [ 152.912106][ T8659] netlink: 'syz.2.1038': attribute type 16 has an invalid length. [ 152.949714][ T8659] netlink: 'syz.2.1038': attribute type 17 has an invalid length. [ 153.023486][ T8659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.297564][ T8671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.399533][ T8678] xt_SECMARK: invalid mode: 9 [ 153.476275][ T8680] syzkaller1: entered promiscuous mode [ 153.481822][ T8680] syzkaller1: entered allmulticast mode [ 153.508205][ T8682] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.528132][ T8682] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 153.592827][ T8682] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 154.578547][ T8721] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 154.603702][ T8721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.613310][ T8726] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 154.625988][ T8724] __nla_validate_parse: 1 callbacks suppressed [ 154.626008][ T8724] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1064'. [ 154.722613][ T8730] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 154.859161][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1068'. [ 154.900596][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 154.909100][ T8739] syzkaller1: entered promiscuous mode [ 154.915887][ T8735] openvswitch: netlink: Flow key attr not present in new flow. [ 154.944076][ T8739] syzkaller1: entered allmulticast mode [ 155.179590][ T8750] syzkaller1: entered promiscuous mode [ 155.201218][ T8751] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.225210][ T8750] syzkaller1: entered allmulticast mode [ 155.423620][ T8765] syzkaller1: entered promiscuous mode [ 155.434820][ T8765] syzkaller1: entered allmulticast mode [ 155.756566][ T8778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1084'. [ 155.785018][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 155.893911][ T8784] syzkaller1: entered promiscuous mode [ 155.929157][ T8784] syzkaller1: entered allmulticast mode [ 156.037981][ T8794] netlink: 'syz.3.1090': attribute type 4 has an invalid length. [ 156.356849][ T8815] xt_SECMARK: invalid mode: 9 [ 156.786206][ T8834] netlink: 'syz.0.1102': attribute type 4 has an invalid length. [ 157.042007][ T8847] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1108'. [ 157.122179][ T8849] xt_SECMARK: invalid mode: 9 [ 157.207413][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 157.237003][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 157.318756][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 157.656711][ T8877] netlink: 'syz.0.1120': attribute type 5 has an invalid length. [ 157.692271][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 158.338941][ T8919] GUP no longer grows the stack in syz.3.1133 (8919): 200000003000-20000000a000 (200000001000) [ 158.365024][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT(full) [ 158.365054][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.365066][ T8919] Call Trace: [ 158.365074][ T8919] [ 158.365083][ T8919] dump_stack_lvl+0xe8/0x150 [ 158.365120][ T8919] __get_user_pages+0x2453/0x29d0 [ 158.365153][ T8919] ? __lock_acquire+0x6b5/0x2cf0 [ 158.365202][ T8919] ? __gup_longterm_locked+0xc4e/0x1630 [ 158.365233][ T8919] ? down_read_killable+0x1bb/0x340 [ 158.365270][ T8919] __gup_longterm_locked+0xdcf/0x1630 [ 158.365328][ T8919] gup_fast_fallback+0x1d82/0x22e0 [ 158.365396][ T8919] ? __pfx_gup_fast_fallback+0x10/0x10 [ 158.365425][ T8919] ? futex_unqueue+0x22/0x240 [ 158.365450][ T8919] ? futex_unqueue+0x22/0x240 [ 158.365473][ T8919] ? is_valid_gup_args+0x11f/0x200 [ 158.365505][ T8919] ? get_user_pages_fast+0x4d/0xb0 [ 158.365537][ T8919] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 158.365579][ T8919] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 158.365606][ T8919] iov_iter_get_pages2+0x5e/0xa0 [ 158.365635][ T8919] __se_sys_vmsplice+0x7b3/0x1490 [ 158.365677][ T8919] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 158.365698][ T8919] ? __pfx_futex_wait+0x10/0x10 [ 158.365740][ T8919] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.365832][ T8919] do_syscall_64+0x14d/0xf80 [ 158.365857][ T8919] ? trace_irq_disable+0x3b/0x150 [ 158.365875][ T8919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.365896][ T8919] ? clear_bhb_loop+0x40/0x90 [ 158.365921][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.365941][ T8919] RIP: 0033:0x7fea4279c819 [ 158.365961][ T8919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.365977][ T8919] RSP: 002b:00007fea43591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 158.365999][ T8919] RAX: ffffffffffffffda RBX: 00007fea42a15fa0 RCX: 00007fea4279c819 [ 158.366013][ T8919] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 158.366026][ T8919] RBP: 00007fea42832c91 R08: 0000000000000000 R09: 0000000000000000 [ 158.366037][ T8919] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 158.366049][ T8919] R13: 00007fea42a16038 R14: 00007fea42a15fa0 R15: 00007ffc5be7f968 [ 158.366083][ T8919] [ 158.815216][ T8931] netlink: 'syz.1.1136': attribute type 62 has an invalid length. [ 158.862010][ T8920] netlink: 'syz.4.1132': attribute type 5 has an invalid length. [ 158.935507][ T8935] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 159.012224][ T8942] xt_SECMARK: invalid mode: 9 [ 159.463895][ T8965] erspan0: entered promiscuous mode [ 159.480451][ T8967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.508231][ T8968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.651732][ T8970] netlink: 'syz.3.1149': attribute type 4 has an invalid length. [ 159.661092][ T8970] __nla_validate_parse: 3 callbacks suppressed [ 159.661111][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1149'. [ 159.787295][ T8984] xt_SECMARK: invalid mode: 9 [ 160.004457][ T8990] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 160.154242][ T8990] bond1: entered promiscuous mode [ 160.173986][ T8990] bond1: entered allmulticast mode [ 160.189211][ T8990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.901831][ T9005] Driver unsupported XDP return value 0 on prog (id 95) dev N/A, expect packet loss! [ 160.989472][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 161.097595][ T9014] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.377322][ T9029] xt_SECMARK: invalid mode: 9 [ 163.122125][ T8996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.368271][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 163.453017][ T9042] syzkaller1: entered promiscuous mode [ 163.464755][ T9042] syzkaller1: entered allmulticast mode [ 163.524089][ T9046] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1174'. [ 163.552219][ T9046] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1174'. [ 163.728932][ T9057] netlink: 'syz.2.1178': attribute type 4 has an invalid length. [ 163.940857][ T9065] tipc: Started in network mode [ 163.972095][ T9065] tipc: Node identity 010000000000000001, cluster identity 4711 [ 164.184077][ T9076] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 164.249168][ T9078] netlink: 'syz.0.1188': attribute type 51 has an invalid length. [ 164.403172][ T9078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.415208][ T9078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.668093][ T9094] netlink: 'syz.1.1192': attribute type 4 has an invalid length. [ 165.038318][ T9113] syzkaller0: entered promiscuous mode [ 165.051274][ T9113] syzkaller0: entered allmulticast mode [ 165.157524][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 165.261209][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 165.294109][ T9127] syzkaller0: entered promiscuous mode [ 165.295783][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 165.333863][ T9127] syzkaller0: entered allmulticast mode [ 165.616875][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 165.808429][ T9156] IPv6: sit1: Disabled Multicast RS [ 165.815374][ T9156] sit1: entered allmulticast mode [ 165.999103][ T9161] netlink: 'syz.1.1216': attribute type 4 has an invalid length. [ 166.286582][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1223'. [ 166.453548][ T9185] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 166.501991][ T9185] bond2 (unregistering): Released all slaves [ 166.551224][ T9194] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 166.568063][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 166.588115][ T9197] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 166.693810][ T9194] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 166.698942][ T9200] netlink: 'syz.2.1231': attribute type 4 has an invalid length. [ 166.723082][ T9204] gtp0: entered promiscuous mode [ 167.051447][ T9217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'. [ 167.369082][ T9236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1241'. [ 167.405627][ T9237] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1243'. [ 167.427084][ T9238] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 167.434858][ T9237] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1243'. [ 167.475594][ T9240] xt_SECMARK: invalid mode: 9 [ 167.902976][ T9263] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.932544][ T9263] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 168.160662][ T9269] netlink: 'syz.1.1258': attribute type 4 has an invalid length. [ 168.226131][ T9276] Bluetooth: MGMT ver 1.23 [ 168.350063][ T9282] SET target dimension over the limit! [ 168.633782][ T9295] bond6: entered promiscuous mode [ 168.644319][ T9295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.791525][ T9295] bond6: (slave bridge2): making interface the new active one [ 168.800442][ T9295] bridge2: entered promiscuous mode [ 168.808813][ T9295] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 168.814861][ T9294] nbd5: detected capacity change from 0 to 63 [ 168.842166][ T5831] block nbd5: Receive control failed (result -104) [ 168.851570][ T5145] block nbd5: Receive control failed (result -32) [ 168.867856][ T9299] macvtap1: entered allmulticast mode [ 169.039622][ T9321] syzkaller1: entered promiscuous mode [ 169.064829][ T9321] syzkaller1: entered allmulticast mode [ 169.904324][ T9378] syzkaller1: entered promiscuous mode [ 169.910430][ T9378] syzkaller1: entered allmulticast mode [ 169.935776][ T9369] nbd6: detected capacity change from 0 to 63 [ 169.949681][ T5145] block nbd6: Receive control failed (result -104) [ 169.958138][ T5831] block nbd6: Receive control failed (result -32) [ 170.143582][ T9385] syzkaller0: entered promiscuous mode [ 170.155599][ T9385] syzkaller0: entered allmulticast mode [ 170.248891][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 170.256095][ T5831] Bluetooth: hci2: command 0x0401 tx timeout [ 170.257862][ T9394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.276618][ T9387] __nla_validate_parse: 11 callbacks suppressed [ 170.276636][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.307279][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 170.327327][ T9391] bridge1: entered promiscuous mode [ 170.342892][ T9391] bridge1: entered allmulticast mode [ 170.372379][ T9395] sctp: [Deprecated]: syz.0.1297 (pid 9395) Use of int in maxseg socket option. [ 170.372379][ T9395] Use struct sctp_assoc_value instead [ 170.402914][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.413156][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.422260][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1297'. [ 170.441539][ T9395] geneve2: entered promiscuous mode [ 170.447714][ T9395] geneve2: entered allmulticast mode [ 170.481675][ T9399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 170.758623][ T9414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.800864][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 170.846093][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1307'. [ 170.898486][ T9423] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 170.963223][ T9423] IPVS: Error connecting to the multicast addr [ 171.542263][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1321'. [ 171.644160][ T9458] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 171.711358][ T9462] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1325'. [ 172.186608][ T9486] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1335'. [ 172.207664][ T9486] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 172.245439][ T9485] vlan2: entered allmulticast mode [ 172.251353][ T9485] bridge2: entered allmulticast mode [ 172.260015][ T9485] bridge2: port 1(erspan0) entered blocking state [ 172.266969][ T9485] bridge2: port 1(erspan0) entered disabled state [ 172.273707][ T9485] erspan0: entered allmulticast mode [ 172.301824][ T9485] erspan0: entered promiscuous mode [ 172.308947][ T9485] bridge2: port 1(erspan0) entered blocking state [ 172.315576][ T9485] bridge2: port 1(erspan0) entered forwarding state [ 172.334851][ T9480] nbd7: detected capacity change from 0 to 63 [ 172.347362][ T5831] block nbd7: Receive control failed (result -104) [ 172.356148][ T5835] block nbd7: Receive control failed (result -32) [ 172.843665][ T9517] validate_nla: 3 callbacks suppressed [ 172.843687][ T9517] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 173.098668][ T9517] bond2: entered promiscuous mode [ 173.109057][ T9517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.130201][ T9522] vlan2: entered promiscuous mode [ 173.256288][ T9535] netlink: 'syz.2.1347': attribute type 4 has an invalid length. [ 173.513026][ T9547] netem: incorrect gi model size [ 173.530737][ T9547] netem: change failed [ 173.805865][ T9564] xt_SECMARK: invalid mode: 9 [ 174.663401][ T9615] xt_SECMARK: invalid mode: 9 [ 175.102991][ T30] audit: type=1800 audit(1775191776.814:2): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1380" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1385 res=0 errno=0 [ 175.309760][ T9648] delete_channel: no stack [ 175.325142][ T9651] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 175.350571][ T9651] __nla_validate_parse: 8 callbacks suppressed [ 175.350592][ T9651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1385'. [ 175.415474][ T9654] xt_SECMARK: invalid mode: 9 [ 175.521942][ T9659] syzkaller1: entered promiscuous mode [ 175.533900][ T9659] syzkaller1: entered allmulticast mode [ 175.848245][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 175.857306][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 175.865422][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 175.872943][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 175.880491][ T5181] block nbd1: Dead connection, failed to find a fallback [ 175.888923][ T5181] block nbd1: shutting down sockets [ 175.894169][ T5181] blk_print_req_error: 286 callbacks suppressed [ 175.894183][ T5181] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 175.912254][ T5181] buffer_io_error: 286 callbacks suppressed [ 175.912274][ T5181] Buffer I/O error on dev nbd1, logical block 2, async page read [ 175.926419][ T5181] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 175.936317][ T5181] Buffer I/O error on dev nbd1, logical block 1, async page read [ 175.944205][ T5181] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 175.953774][ T5181] Buffer I/O error on dev nbd1, logical block 0, async page read [ 175.962184][ T5181] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 175.972891][ T5181] Buffer I/O error on dev nbd1, logical block 3, async page read [ 175.982297][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 175.993024][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.001796][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.011969][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 176.020613][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.031068][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read [ 176.039095][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.048725][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read [ 176.057002][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.066760][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.075452][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 176.086117][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read [ 176.094920][ T5829] ldm_validate_partition_table(): Disk read failed. [ 176.102133][ T5829] Dev nbd1: unable to read RDB block 0 [ 176.108819][ T5829] nbd1: unable to read partition table [ 176.118816][ T5829] ldm_validate_partition_table(): Disk read failed. [ 176.126201][ T5829] Dev nbd1: unable to read RDB block 0 [ 176.132341][ T5829] nbd1: unable to read partition table [ 176.156040][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 176.179508][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 176.189317][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 176.763310][ T9721] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1408'. [ 176.779086][ T9721] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1408'. [ 177.068213][ T9733] veth0: entered promiscuous mode [ 177.152593][ T9733] syzkaller0: entered promiscuous mode [ 177.197182][ T9733] syzkaller0: entered allmulticast mode [ 177.339389][ T9732] veth0: left promiscuous mode [ 177.705480][ T9760] netlink: 'syz.4.1420': attribute type 2 has an invalid length. [ 177.714119][ T9760] netlink: 'syz.4.1420': attribute type 11 has an invalid length. [ 177.722569][ T9760] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1420'. [ 178.452003][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 178.461831][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1428'. [ 178.707006][ T9793] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1433'. [ 178.877228][ T9801] syzkaller1: entered promiscuous mode [ 178.898915][ T9801] syzkaller1: entered allmulticast mode [ 179.193996][ T9817] xt_SECMARK: invalid mode: 9 [ 179.286203][ T9824] netlink: 'syz.0.1447': attribute type 11 has an invalid length. [ 179.373068][ T9824] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 179.393123][ T9824] netlink: 'syz.0.1447': attribute type 7 has an invalid length. [ 179.413727][ T9824] netlink: 'syz.0.1447': attribute type 8 has an invalid length. [ 179.441914][ T9824] NCSI netlink: No device for ifindex 65584 [ 179.689914][ T9848] netlink: 'syz.0.1451': attribute type 2 has an invalid length. [ 179.694404][ T9846] syzkaller1: entered promiscuous mode [ 179.707148][ T9846] syzkaller1: entered allmulticast mode [ 179.773619][ T9851] : entered promiscuous mode [ 180.342017][ T9874] syzkaller1: entered promiscuous mode [ 180.348361][ T9874] syzkaller1: entered allmulticast mode [ 180.910416][ T9904] netlink: 'syz.1.1475': attribute type 4 has an invalid length. [ 181.121106][ T9909] syzkaller1: entered promiscuous mode [ 181.132527][ T9909] syzkaller1: entered allmulticast mode [ 181.961612][ T9964] __nla_validate_parse: 4 callbacks suppressed [ 181.961635][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 182.072722][ T9966] bridge5: entered promiscuous mode [ 182.080110][ T9966] bridge5: entered allmulticast mode [ 182.090652][ T9966] team0: Port device bridge5 added [ 182.145768][ T9971] bridge0: port 3(team0) entered blocking state [ 182.162337][ T9971] bridge0: port 3(team0) entered disabled state [ 182.168150][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 182.209181][ T9971] team0: entered allmulticast mode [ 182.225129][ T9971] team_slave_0: entered allmulticast mode [ 182.236878][ T9971] team_slave_1: entered allmulticast mode [ 182.265947][ T9971] team0: entered promiscuous mode [ 182.271044][ T9971] team_slave_0: entered promiscuous mode [ 182.297141][ T9966] Can't find ip_set type bitmap:ip,mac [ 182.303777][ T9971] team_slave_1: entered promiscuous mode [ 182.313778][ T9971] bridge0: port 3(team0) entered blocking state [ 182.320806][ T9971] bridge0: port 3(team0) entered forwarding state [ 182.399922][ T9987] syzkaller1: entered promiscuous mode [ 182.413047][ T9987] syzkaller1: entered allmulticast mode [ 182.659955][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 182.891391][ T5181] block nbd4: Connection timed out, retrying (0/2 alive) [ 182.898842][ T5181] block nbd4: Connection timed out, retrying (0/2 alive) [ 182.906073][ T9681] block nbd4: Dead connection, failed to find a fallback [ 182.913144][ T9681] block nbd4: shutting down sockets [ 182.920812][ T5181] block nbd4: Connection timed out, retrying (0/2 alive) [ 182.928737][ T9681] blk_print_req_error: 138 callbacks suppressed [ 182.928753][ T9681] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.946707][ T5181] block nbd4: Connection timed out, retrying (0/2 alive) [ 182.954368][ T9681] buffer_io_error: 138 callbacks suppressed [ 182.954385][ T9681] Buffer I/O error on dev nbd4, logical block 0, async page read [ 182.974562][ T9681] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 182.984169][ T9681] Buffer I/O error on dev nbd4, logical block 3, async page read [ 182.992433][ T9681] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.002036][ T9681] Buffer I/O error on dev nbd4, logical block 2, async page read [ 183.009876][ T9681] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.020145][ T9681] Buffer I/O error on dev nbd4, logical block 1, async page read [ 183.028111][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.039053][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 183.053215][ T5841] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.063013][ T5841] Buffer I/O error on dev nbd4, logical block 1, async page read [ 183.073478][ T5841] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.083578][ T5841] Buffer I/O error on dev nbd4, logical block 2, async page read [ 183.092581][ T5841] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.102166][ T5841] Buffer I/O error on dev nbd4, logical block 3, async page read [ 183.110248][ T5841] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.119834][ T5841] Buffer I/O error on dev nbd4, logical block 0, async page read [ 183.132875][ T5841] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 183.143641][ T5841] Buffer I/O error on dev nbd4, logical block 1, async page read [ 183.152200][ T5841] ldm_validate_partition_table(): Disk read failed. [ 183.175255][ T5841] Dev nbd4: unable to read RDB block 0 [ 183.181469][ T5841] nbd4: unable to read partition table [ 183.200329][ T5841] ldm_validate_partition_table(): Disk read failed. [ 183.239636][ T5841] Dev nbd4: unable to read RDB block 0 [ 183.257886][ T5841] nbd4: unable to read partition table [ 183.450631][T10043] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1520'. [ 183.453907][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 183.472535][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 183.504780][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1522'. [ 183.534262][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1522'. [ 183.829831][T10051] nbd8: detected capacity change from 0 to 63 [ 183.854796][ T5835] block nbd8: Receive control failed (result -32) [ 183.861947][ T5831] block nbd8: Receive control failed (result -32) [ 183.883908][ T9664] block nbd8: Dead connection, failed to find a fallback [ 183.915739][ T9664] block nbd8: shutting down sockets [ 183.921975][ T9664] ldm_validate_partition_table(): Disk read failed. [ 183.929797][ T9664] Dev nbd8: unable to read RDB block 0 [ 183.937097][ T9664] nbd8: unable to read partition table [ 183.947177][ T9664] ldm_validate_partition_table(): Disk read failed. [ 183.959061][ T9664] Dev nbd8: unable to read RDB block 0 [ 183.965275][ T9664] nbd8: unable to read partition table [ 184.053291][T10057] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 184.128106][T10057] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1526'. [ 184.153346][T10081] bond3: entered promiscuous mode [ 184.158901][T10081] bond3: entered allmulticast mode [ 184.175747][T10081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.182803][T10057] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1526'. [ 185.182976][T10143] netdevsim netdevsim3: Direct firmware load for >. failed with error -2 [ 185.200355][T10143] netdevsim netdevsim3: Falling back to sysfs fallback for: >. [ 185.287060][T10137] nbd9: detected capacity change from 0 to 63 [ 185.290403][T10148] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 185.309466][ T5831] block nbd9: Receive control failed (result -104) [ 185.318350][ T5835] block nbd9: Receive control failed (result -32) [ 185.380658][T10148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.427438][T10157] bond4: (slave geneve2): making interface the new active one [ 185.437454][T10157] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 185.472875][T10151] vlan2: entered allmulticast mode [ 185.479424][T10151] bond4: entered allmulticast mode [ 185.485109][T10151] geneve2: entered allmulticast mode [ 185.777596][T10178] xt_SECMARK: invalid mode: 9 [ 186.006006][T10144] netdevsim netdevsim3: Direct firmware load for >. failed with error -2 [ 186.031322][T10144] netdevsim netdevsim3: Falling back to sysfs fallback for: >. [ 186.524845][T10212] nbd10: detected capacity change from 0 to 63 [ 186.547417][ T5835] block nbd10: Receive control failed (result -32) [ 186.547417][ T5831] block nbd10: Receive control failed (result -32) [ 186.582429][ T5829] block nbd10: Dead connection, failed to find a fallback [ 186.630777][ T5829] block nbd10: shutting down sockets [ 186.687555][ T5829] ldm_validate_partition_table(): Disk read failed. [ 186.715534][ T5829] Dev nbd10: unable to read RDB block 0 [ 186.722893][ T5829] nbd10: unable to read partition table [ 186.768164][ T5829] ldm_validate_partition_table(): Disk read failed. [ 186.818938][ T5829] Dev nbd10: unable to read RDB block 0 [ 186.841695][ T5829] nbd10: unable to read partition table [ 188.039705][ T5835] block nbd11: Receive control failed (result -32) [ 188.039753][ T5831] block nbd11: Receive control failed (result -32) [ 188.234152][T10273] __nla_validate_parse: 8 callbacks suppressed [ 188.234167][T10273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1589'. [ 188.277734][T10257] nbd11: detected capacity change from 0 to 63 [ 188.305909][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 188.326132][ T5841] block nbd11: Dead connection, failed to find a fallback [ 188.333394][ T5841] block nbd11: shutting down sockets [ 188.375339][ T5841] blk_print_req_error: 434 callbacks suppressed [ 188.375361][ T5841] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.425859][ T5841] buffer_io_error: 434 callbacks suppressed [ 188.425878][ T5841] Buffer I/O error on dev nbd11, logical block 0, async page read [ 188.467789][T10275] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 188.474936][ T5841] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.489168][T10280] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1591'. [ 188.506660][ T5841] Buffer I/O error on dev nbd11, logical block 1, async page read [ 188.540661][ T5841] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.552655][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 188.594916][ T5841] Buffer I/O error on dev nbd11, logical block 2, async page read [ 188.602845][ T5841] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.647640][ T5841] Buffer I/O error on dev nbd11, logical block 3, async page read [ 188.685180][ T5841] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.719879][ T5841] Buffer I/O error on dev nbd11, logical block 0, async page read [ 188.747468][ T5841] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.776689][ T5841] Buffer I/O error on dev nbd11, logical block 1, async page read [ 188.805400][ T5841] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.832947][ T5841] Buffer I/O error on dev nbd11, logical block 2, async page read [ 188.874730][ T5841] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.914663][ T5841] Buffer I/O error on dev nbd11, logical block 3, async page read [ 188.939681][ T5841] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 188.970303][ T5841] Buffer I/O error on dev nbd11, logical block 0, async page read [ 189.016464][ T5841] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 189.053426][ T5841] Buffer I/O error on dev nbd11, logical block 1, async page read [ 189.086018][ T5841] ldm_validate_partition_table(): Disk read failed. [ 189.116920][ T5841] Dev nbd11: unable to read RDB block 0 [ 189.146614][ T5841] nbd11: unable to read partition table [ 189.186626][ T5841] ldm_validate_partition_table(): Disk read failed. [ 189.212679][ T5841] Dev nbd11: unable to read RDB block 0 [ 189.247075][ T5841] nbd11: unable to read partition table [ 189.505400][T10321] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1606'. [ 190.208287][T10355] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1613'. [ 190.591287][T10380] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1619'. [ 190.642745][T10383] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 190.707234][T10383] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 191.035034][T10412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1624'. [ 191.101898][T10409] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1626'. [ 191.587196][T10441] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1633'. [ 191.745330][T10446] netlink: 'syz.1.1634': attribute type 21 has an invalid length. [ 191.763729][T10446] netlink: 'syz.1.1634': attribute type 5 has an invalid length. [ 191.901698][T10454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.918683][T10454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.118273][T10463] sctp: [Deprecated]: syz.0.1642 (pid 10463) Use of int in maxseg socket option. [ 192.118273][T10463] Use struct sctp_assoc_value instead [ 192.928993][T10505] IPVS: Error joining to the multicast group [ 193.199173][T10518] syzkaller0: entered promiscuous mode [ 193.205198][T10518] syzkaller0: entered allmulticast mode [ 193.317551][T10524] netlink: 'syz.4.1662': attribute type 10 has an invalid length. [ 193.327610][T10518] Bluetooth: MGMT ver 1.23 [ 193.498291][T10524] team0: Device ipvlan1 failed to register rx_handler [ 193.923536][T10549] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 193.945293][T10549] __nla_validate_parse: 7 callbacks suppressed [ 193.945313][T10549] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1665'. [ 193.972496][T10564] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1668'. [ 194.281550][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1672'. [ 194.340272][T10576] netlink: 'syz.1.1672': attribute type 3 has an invalid length. [ 194.350383][T10576] netlink: 'syz.1.1672': attribute type 3 has an invalid length. [ 194.411815][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.850445][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1682'. [ 194.908547][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1684'. [ 194.982919][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.992391][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1684'. [ 195.020637][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.031407][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.318810][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 195.339300][T10625] syzkaller0: entered promiscuous mode [ 195.368775][T10625] syzkaller0: entered allmulticast mode [ 195.380646][T10630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1688'. [ 195.407479][T10632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.419045][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 195.434823][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.440834][T10630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1688'. [ 195.586375][T10638] 8021q: VLANs not supported on gre0 [ 195.882239][T10652] bond0: entered promiscuous mode [ 195.897327][T10652] bond0: entered allmulticast mode [ 195.927885][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.143437][T10663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.229376][T10669] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 196.279987][T10669] netlink: 'syz.3.1703': attribute type 2 has an invalid length. [ 196.609106][T10684] sctp: [Deprecated]: syz.0.1708 (pid 10684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.609106][T10684] Use struct sctp_sack_info instead [ 196.714859][T10691] bond0: entered promiscuous mode [ 196.723565][T10691] bond_slave_0: entered promiscuous mode [ 196.745993][T10691] bond_slave_1: entered promiscuous mode [ 196.756137][T10691] bond0: entered allmulticast mode [ 196.786188][T10691] bond_slave_0: entered allmulticast mode [ 196.791984][T10691] bond_slave_1: entered allmulticast mode [ 196.957001][T10704] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 197.032162][T10704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.129663][T10704] bond3: (slave geneve2): making interface the new active one [ 197.151302][T10704] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 197.180799][ T77] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.215763][ T77] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.241530][T10717] lo: MTU too low for tipc bearer [ 197.255005][T10717] tipc: Enabling of bearer rejected, failed to enable media [ 197.271207][ T77] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.310686][ T131] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.383049][T10721] xt_SECMARK: invalid mode: 9 [ 197.545357][T10716] nbd12: detected capacity change from 0 to 63 [ 197.559273][ T5831] block nbd12: Receive control failed (result -32) [ 197.559273][ T5835] block nbd12: Receive control failed (result -32) [ 197.563719][ T5829] block nbd12: Send control failed (result -32) [ 197.604982][ T5829] block nbd12: Request send failed, requeueing [ 197.612710][ T9681] block nbd12: Dead connection, failed to find a fallback [ 197.620640][ T9681] block nbd12: shutting down sockets [ 197.629662][ T9681] blk_print_req_error: 138 callbacks suppressed [ 197.629681][ T9681] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.646184][ T9681] buffer_io_error: 138 callbacks suppressed [ 197.646202][ T9681] Buffer I/O error on dev nbd12, logical block 0, async page read [ 197.661018][ T5829] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.672165][ T5829] Buffer I/O error on dev nbd12, logical block 1, async page read [ 197.681313][ T5829] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.699646][ T5829] Buffer I/O error on dev nbd12, logical block 2, async page read [ 197.708587][ T5829] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.719269][ T5829] Buffer I/O error on dev nbd12, logical block 3, async page read [ 197.727629][ T5829] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.738085][ T5829] Buffer I/O error on dev nbd12, logical block 0, async page read [ 197.746581][ T5829] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.756877][ T5829] Buffer I/O error on dev nbd12, logical block 1, async page read [ 197.765793][ T5829] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.776636][ T5829] Buffer I/O error on dev nbd12, logical block 2, async page read [ 197.786306][ T5829] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.798610][T10735] bond0: entered promiscuous mode [ 197.804948][ T5829] Buffer I/O error on dev nbd12, logical block 3, async page read [ 197.812886][ T5829] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.831147][T10735] bond_slave_0: entered promiscuous mode [ 197.845045][T10735] bond_slave_1: entered promiscuous mode [ 197.851395][T10735] bond0: entered allmulticast mode [ 197.854726][ T5829] Buffer I/O error on dev nbd12, logical block 0, async page read [ 197.865977][ T5829] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 197.867727][T10735] bond_slave_0: entered allmulticast mode [ 197.881504][ T5829] Buffer I/O error on dev nbd12, logical block 1, async page read [ 197.882253][ T5829] ldm_validate_partition_table(): Disk read failed. [ 197.897213][T10735] bond_slave_1: entered allmulticast mode [ 197.952941][ T5829] Dev nbd12: unable to read RDB block 0 [ 197.965063][ T5829] nbd12: unable to read partition table [ 197.976776][ T5829] ldm_validate_partition_table(): Disk read failed. [ 197.985348][ T5829] Dev nbd12: unable to read RDB block 0 [ 197.991585][ T5829] nbd12: unable to read partition table [ 198.479864][T10763] xt_SECMARK: invalid mode: 9 [ 198.896550][ T9681] block nbd5: Connection timed out, retrying (0/2 alive) [ 198.903710][ T9681] block nbd5: Connection timed out, retrying (0/2 alive) [ 198.915970][T10017] block nbd5: Dead connection, failed to find a fallback [ 198.923060][T10017] block nbd5: shutting down sockets [ 198.928878][T10776] bond0: entered promiscuous mode [ 198.928902][T10776] bond_slave_0: entered promiscuous mode [ 198.929171][T10776] bond_slave_1: entered promiscuous mode [ 198.934458][ T9681] block nbd5: Connection timed out, retrying (0/2 alive) [ 198.953644][ T9681] block nbd5: Connection timed out, retrying (0/2 alive) [ 198.961894][ T8514] ldm_validate_partition_table(): Disk read failed. [ 198.985170][ T8514] Dev nbd5: unable to read RDB block 0 [ 198.991432][ T8514] nbd5: unable to read partition table [ 199.002661][T10776] bond0: entered allmulticast mode [ 199.009899][ T8514] ldm_validate_partition_table(): Disk read failed. [ 199.017435][ T8514] Dev nbd5: unable to read RDB block 0 [ 199.023601][ T8514] nbd5: unable to read partition table [ 199.045141][T10776] bond_slave_0: entered allmulticast mode [ 199.065760][T10776] bond_slave_1: entered allmulticast mode [ 199.125626][T10783] __nla_validate_parse: 2 callbacks suppressed [ 199.125646][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 199.204763][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.321754][T10792] xt_SECMARK: invalid mode: 9 [ 199.725980][T10812] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1757'. [ 200.011809][T10828] xt_SECMARK: invalid mode: 9 [ 200.068534][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 200.165166][T10017] block nbd6: Connection timed out, retrying (0/2 alive) [ 200.172342][T10017] block nbd6: Connection timed out, retrying (0/2 alive) [ 200.180219][ T9681] block nbd6: Dead connection, failed to find a fallback [ 200.188792][ T9681] block nbd6: shutting down sockets [ 200.194240][T10017] block nbd6: Connection timed out, retrying (0/2 alive) [ 200.202868][T10017] block nbd6: Connection timed out, retrying (0/2 alive) [ 200.211430][ T5842] ldm_validate_partition_table(): Disk read failed. [ 200.219012][ T5842] Dev nbd6: unable to read RDB block 0 [ 200.227018][ T5842] nbd6: unable to read partition table [ 200.269388][ T5842] ldm_validate_partition_table(): Disk read failed. [ 200.288799][T10844] Cannot find set identified by id 0 to match [ 200.303609][ T5842] Dev nbd6: unable to read RDB block 0 [ 200.317731][T10844] syz_tun: entered allmulticast mode [ 200.351524][ T5842] nbd6: unable to read partition table [ 200.392297][T10843] syz_tun: left allmulticast mode [ 200.592356][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1774'. [ 200.611280][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 200.753772][T10865] xt_SECMARK: invalid mode: 9 [ 200.843250][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.049309][T10881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.076533][T10881] x_tables: duplicate underflow at hook 3 [ 201.492503][T10902] xt_SECMARK: invalid mode: 9 [ 201.607179][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 201.607545][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 201.613419][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 201.619923][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 201.628138][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 201.713379][T10914] batman_adv: batadv0: Adding interface: dummy0 [ 201.719919][T10914] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.753360][T10914] batman_adv: batadv0: Interface activated: dummy0 [ 201.852603][T10915] batadv0: mtu less than device minimum [ 201.860458][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.872888][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.884946][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.897162][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.909282][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.921293][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.933366][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.944613][T10915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 202.129642][T10923] netlink: 'syz.0.1800': attribute type 2 has an invalid length. [ 202.282497][T10934] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 202.385912][T10943] xt_SECMARK: invalid mode: 9 [ 202.439634][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 202.539534][T10919] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 202.724978][T10017] block nbd7: Connection timed out, retrying (0/2 alive) [ 202.732192][T10017] block nbd7: Connection timed out, retrying (0/2 alive) [ 202.739650][ T9681] block nbd7: Dead connection, failed to find a fallback [ 202.749126][ T9681] block nbd7: shutting down sockets [ 202.754795][ T9681] blk_print_req_error: 434 callbacks suppressed [ 202.754815][ T9681] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.770878][ T9681] buffer_io_error: 434 callbacks suppressed [ 202.770897][ T9681] Buffer I/O error on dev nbd7, logical block 0, async page read [ 202.784997][ T9681] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.792598][T10959] sit0: entered promiscuous mode [ 202.796556][ T9681] Buffer I/O error on dev nbd7, logical block 3, async page read [ 202.809359][ T9681] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.819827][ T9681] Buffer I/O error on dev nbd7, logical block 2, async page read [ 202.826417][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 202.827684][ T9681] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.846800][ T9681] Buffer I/O error on dev nbd7, logical block 1, async page read [ 202.854936][ T7019] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.864110][T10959] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 202.864436][ T7019] Buffer I/O error on dev nbd7, logical block 0, async page read [ 202.880958][ T7019] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.896605][ T7019] Buffer I/O error on dev nbd7, logical block 1, async page read [ 202.905378][ T7019] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.915195][ T7019] Buffer I/O error on dev nbd7, logical block 2, async page read [ 202.923018][ T7019] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.932844][ T7019] Buffer I/O error on dev nbd7, logical block 3, async page read [ 202.935558][T10959] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1813'. [ 202.940721][ T7019] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.959706][ T7019] Buffer I/O error on dev nbd7, logical block 0, async page read [ 202.967830][ T7019] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.977421][ T7019] Buffer I/O error on dev nbd7, logical block 1, async page read [ 202.986232][ T7019] ldm_validate_partition_table(): Disk read failed. [ 202.993384][ T7019] Dev nbd7: unable to read RDB block 0 [ 202.999593][ T7019] nbd7: unable to read partition table [ 203.002672][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 203.036290][ T7019] ldm_validate_partition_table(): Disk read failed. [ 203.055758][ T7019] Dev nbd7: unable to read RDB block 0 [ 203.065391][ T7019] nbd7: unable to read partition table [ 203.105149][T10961] nbd13: detected capacity change from 0 to 63 [ 203.113697][T10966] netlink: 'syz.3.1812': attribute type 2 has an invalid length. [ 203.128700][ T5826] block nbd13: Receive control failed (result -32) [ 203.129583][ T5831] block nbd13: Receive control failed (result -32) [ 203.145858][ T5829] block nbd13: Dead connection, failed to find a fallback [ 203.173478][ T5829] block nbd13: shutting down sockets [ 203.191978][ T5829] ldm_validate_partition_table(): Disk read failed. [ 203.192467][T10966] 9: entered promiscuous mode [ 203.205220][ T5829] Dev nbd13: unable to read RDB block 0 [ 203.222221][ T5829] nbd13: unable to read partition table [ 203.250545][ T5829] ldm_validate_partition_table(): Disk read failed. [ 203.265568][ T5829] Dev nbd13: unable to read RDB block 0 [ 203.282176][ T5829] nbd13: unable to read partition table [ 203.354134][T10974] bond0: left promiscuous mode [ 203.359869][T10974] bond_slave_0: left promiscuous mode [ 203.374907][T10974] bond_slave_1: left promiscuous mode [ 203.384409][T10974] bond0: left allmulticast mode [ 203.389780][T10974] bond_slave_0: left allmulticast mode [ 203.395656][T10974] bond_slave_1: left allmulticast mode [ 203.427490][T10951] syzkaller1: entered promiscuous mode [ 203.445691][T10951] syzkaller1: entered allmulticast mode [ 203.461712][T10979] xt_SECMARK: invalid mode: 9 [ 203.545974][T10982] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 203.638802][T10982] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 203.647233][T10982] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1820'. [ 203.665810][T10982] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 203.689055][T10990] SET target dimension over the limit! [ 203.897162][ T131] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.911344][ T131] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.924421][T11000] xt_hashlimit: size too large, truncated to 1048576 [ 203.937190][ T131] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.955373][ T131] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.225907][T11002] nbd14: detected capacity change from 0 to 63 [ 204.240976][ T5831] block nbd14: Receive control failed (result -32) [ 204.241266][ T5826] block nbd14: Receive control failed (result -32) [ 204.310099][ T5829] block nbd14: Dead connection, failed to find a fallback [ 204.343395][ T5829] block nbd14: shutting down sockets [ 204.360881][ T5829] ldm_validate_partition_table(): Disk read failed. [ 204.378295][ T5829] Dev nbd14: unable to read RDB block 0 [ 204.398089][ T5829] nbd14: unable to read partition table [ 204.415455][ T5829] ldm_validate_partition_table(): Disk read failed. [ 204.429831][ T5829] Dev nbd14: unable to read RDB block 0 [ 204.448359][ T5829] nbd14: unable to read partition table [ 204.470393][T11010] syzkaller0: entered promiscuous mode [ 204.472051][T11023] x_tables: duplicate underflow at hook 2 [ 204.483917][T11010] syzkaller0: entered allmulticast mode [ 206.008771][T11039] tipc: Enabled bearer , priority 0 [ 206.018559][T11041] +: renamed from syzkaller0 [ 206.058054][T11041] tipc: Disabling bearer [ 206.258616][T11054] erspan0: entered allmulticast mode [ 206.791147][T11090] __nla_validate_parse: 3 callbacks suppressed [ 206.791167][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 206.974430][T11099] netlink: 189240 bytes leftover after parsing attributes in process `syz.4.1856'. [ 207.317535][T11114] xt_SECMARK: invalid mode: 9 [ 207.545516][T11119] vlan4: entered promiscuous mode [ 207.552788][T11119] bridge0: entered promiscuous mode [ 207.592570][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 207.844782][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.925627][T11131] nbd15: detected capacity change from 0 to 63 [ 207.945535][ T5831] block nbd15: Receive control failed (result -104) [ 207.950401][ T5826] block nbd15: Receive control failed (result -32) [ 208.163967][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 208.192872][T11153] net_ratelimit: 11 callbacks suppressed [ 208.192892][T11153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.342553][T11150] syzkaller0: entered promiscuous mode [ 208.353868][T11150] syzkaller0: entered allmulticast mode [ 208.751889][T11195] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1885'. [ 208.817409][T11202] netlink: 'syz.3.1886': attribute type 39 has an invalid length. [ 208.947867][T11202] hsr_slave_1 (unregistering): left promiscuous mode [ 209.024516][T11216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.063275][T11216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.315439][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 209.359042][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 209.365751][T11230] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 209.383946][T11233] netlink: 'syz.3.1891': attribute type 3 has an invalid length. [ 209.418271][T11239] netlink: 'syz.1.1895': attribute type 4 has an invalid length. [ 209.427581][T11238] netlink: 'syz.1.1895': attribute type 4 has an invalid length. [ 209.517731][T11230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.855020][T11254] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 210.223721][T11267] netlink: 'syz.1.1904': attribute type 83 has an invalid length. [ 210.240908][T11266] syzkaller1: entered promiscuous mode [ 210.252122][T11266] syzkaller1: entered allmulticast mode [ 210.262832][T11271] netlink: 'syz.1.1904': attribute type 83 has an invalid length. [ 210.460977][T11277] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 210.499133][T11277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.603760][T11277] bond5: entered allmulticast mode [ 210.633798][T11283] bond5: (slave ip6gretap1): making interface the new active one [ 210.666680][T11283] ip6gretap1: entered allmulticast mode [ 210.697451][T11283] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 210.744639][T11288] lo: entered promiscuous mode [ 210.756421][T11288] netlink: 'syz.4.1913': attribute type 2 has an invalid length. [ 210.777378][T11288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.036126][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 211.067039][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 211.233270][T11319] netlink: 'syz.3.1919': attribute type 21 has an invalid length. [ 211.264985][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 211.767880][ T5907] IPVS: starting estimator thread 0... [ 211.865009][T11346] IPVS: using max 25 ests per chain, 60000 per kthread [ 211.882996][T11351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.282125][T11362] xt_SECMARK: invalid mode: 9 [ 212.353484][T11364] syzkaller1: entered promiscuous mode [ 212.368011][T11364] syzkaller1: entered allmulticast mode [ 212.493468][T11371] __nla_validate_parse: 2 callbacks suppressed [ 212.493487][T11371] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1938'. [ 212.507465][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 212.554209][T11373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.592377][T11373] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 212.629620][T11373] team0: Failed to send options change via netlink (err -105) [ 212.646144][T11373] team0: Port device batadv0 added [ 213.155253][T11401] syzkaller1: entered promiscuous mode [ 213.167068][T11401] syzkaller1: entered allmulticast mode [ 213.251057][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'. [ 213.274124][T11408] pim6reg1: entered promiscuous mode [ 213.282169][T11408] pim6reg1: entered allmulticast mode [ 213.547505][T11427] bridge0: port 4(ipvlan2) entered blocking state [ 213.554445][T11427] bridge0: port 4(ipvlan2) entered disabled state [ 213.561719][T11427] ipvlan2: entered allmulticast mode [ 213.567203][T11427] bridge0: entered allmulticast mode [ 213.574230][T11427] ipvlan2: left allmulticast mode [ 213.580717][T11427] bridge0: left allmulticast mode [ 213.662292][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 213.676105][T11429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1959'. [ 213.931035][T11451] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 213.987018][T11446] nftables ruleset with unbound set [ 214.076419][T11451] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 214.222747][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'. [ 214.231991][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'. [ 214.264237][T11466] syzkaller1: entered promiscuous mode [ 214.271929][T11466] syzkaller1: entered allmulticast mode [ 214.340419][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1967'. [ 214.470063][ T5826] block nbd16: Receive control failed (result -1) [ 214.960088][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.122303][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 215.305946][T11497] [ 215.308340][T11497] ====================================================== [ 215.315464][T11497] WARNING: possible circular locking dependency detected [ 215.322507][T11497] syzkaller #0 Not tainted [ 215.326943][T11497] ------------------------------------------------------ [ 215.333983][T11497] syz.0.1979/11497 is trying to acquire lock: [ 215.340160][T11497] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 215.349533][T11497] [ 215.349533][T11497] but task is already holding lock: [ 215.356987][T11497] ffffffff8f17cfc8 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 215.365872][T11497] [ 215.365872][T11497] which lock already depends on the new lock. [ 215.365872][T11497] [ 215.376274][T11497] [ 215.376274][T11497] the existing dependency chain (in reverse order) is: [ 215.385305][T11497] [ 215.385305][T11497] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 215.392545][T11497] __mutex_lock+0x19f/0x1300 [ 215.397676][T11497] get_device_parent+0x16f/0x3a0 [ 215.403144][T11497] device_add+0x2e1/0xb70 [ 215.408002][T11497] device_create+0x269/0x300 [ 215.413120][T11497] msr_device_create+0x33/0x50 [ 215.418403][T11497] cpuhp_invoke_callback+0x445/0x860 [ 215.424221][T11497] cpuhp_thread_fun+0x36b/0x780 [ 215.429600][T11497] smpboot_thread_fn+0x541/0xa50 [ 215.435075][T11497] kthread+0x388/0x470 [ 215.439766][T11497] ret_from_fork+0x51e/0xb90 [ 215.444898][T11497] ret_from_fork_asm+0x1a/0x30 [ 215.450207][T11497] [ 215.450207][T11497] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 215.457790][T11497] cpuhp_thread_fun+0x127/0x780 [ 215.463171][T11497] smpboot_thread_fn+0x541/0xa50 [ 215.468641][T11497] kthread+0x388/0x470 [ 215.473239][T11497] ret_from_fork+0x51e/0xb90 [ 215.478356][T11497] ret_from_fork_asm+0x1a/0x30 [ 215.483647][T11497] [ 215.483647][T11497] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 215.491385][T11497] cpus_read_lock+0x42/0x160 [ 215.496502][T11497] static_key_slow_inc+0x12/0x30 [ 215.501973][T11497] setup_udp_tunnel_sock+0x343/0x550 [ 215.507781][T11497] l2tp_tunnel_register+0xda0/0x1460 [ 215.513591][T11497] pppol2tp_connect+0x8b7/0x17c0 [ 215.519322][T11497] __sys_connect+0x312/0x450 [ 215.524449][T11497] __x64_sys_connect+0x7a/0x90 [ 215.529738][T11497] do_syscall_64+0x14d/0xf80 [ 215.534856][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.541275][T11497] [ 215.541275][T11497] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 215.549101][T11497] lock_sock_nested+0x48/0x100 [ 215.554582][T11497] inet_shutdown+0x6a/0x390 [ 215.559700][T11497] nbd_mark_nsock_dead+0x2e9/0x560 [ 215.565610][T11497] recv_work+0x1c7f/0x1d90 [ 215.570559][T11497] process_scheduled_works+0xb6e/0x18c0 [ 215.576629][T11497] worker_thread+0xa53/0xfc0 [ 215.581756][T11497] kthread+0x388/0x470 [ 215.586618][T11497] ret_from_fork+0x51e/0xb90 [ 215.591832][T11497] ret_from_fork_asm+0x1a/0x30 [ 215.597129][T11497] [ 215.597129][T11497] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 215.604801][T11497] __mutex_lock+0x19f/0x1300 [ 215.610025][T11497] nbd_queue_rq+0x37b/0x1100 [ 215.615147][T11497] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 215.621301][T11497] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 215.628154][T11497] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 215.634672][T11497] blk_mq_run_hw_queue+0x348/0x4f0 [ 215.640315][T11497] blk_mq_dispatch_list+0xd16/0xe10 [ 215.646039][T11497] blk_mq_flush_plug_list+0x48d/0x570 [ 215.652368][T11497] __blk_flush_plug+0x3ed/0x4d0 [ 215.657744][T11497] __submit_bio+0x28d/0x580 [ 215.662775][T11497] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 215.669043][T11497] block_read_full_folio+0x599/0x830 [ 215.674949][T11497] filemap_read_folio+0x137/0x3b0 [ 215.680504][T11497] do_read_cache_folio+0x358/0x590 [ 215.686139][T11497] read_part_sector+0xb6/0x2b0 [ 215.691425][T11497] adfspart_check_ICS+0xa5/0xa40 [ 215.696889][T11497] bdev_disk_changed+0x7ba/0x1550 [ 215.702438][T11497] blkdev_get_whole+0x380/0x510 [ 215.707837][T11497] bdev_open+0x31e/0xd30 [ 215.712720][T11497] blkdev_open+0x470/0x610 [ 215.717663][T11497] do_dentry_open+0x785/0x14e0 [ 215.722961][T11497] vfs_open+0x3b/0x340 [ 215.727560][T11497] path_openat+0x2e08/0x3860 [ 215.732680][T11497] do_file_open+0x23e/0x4a0 [ 215.737708][T11497] do_sys_openat2+0x113/0x200 [ 215.742999][T11497] __x64_sys_openat+0x138/0x170 [ 215.748494][T11497] do_syscall_64+0x14d/0xf80 [ 215.753614][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.760028][T11497] [ 215.760028][T11497] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 215.767257][T11497] __mutex_lock+0x19f/0x1300 [ 215.772380][T11497] nbd_queue_rq+0xc6/0x1100 [ 215.777407][T11497] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 215.783479][T11497] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 215.790423][T11497] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 215.796932][T11497] blk_mq_run_hw_queue+0x348/0x4f0 [ 215.802573][T11497] blk_mq_dispatch_list+0xd16/0xe10 [ 215.808325][T11497] blk_mq_flush_plug_list+0x48d/0x570 [ 215.814228][T11497] __blk_flush_plug+0x3ed/0x4d0 [ 215.819620][T11497] __submit_bio+0x28d/0x580 [ 215.824652][T11497] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 215.830819][T11497] block_read_full_folio+0x599/0x830 [ 215.836630][T11497] filemap_read_folio+0x137/0x3b0 [ 215.842182][T11497] do_read_cache_folio+0x358/0x590 [ 215.847823][T11497] read_part_sector+0xb6/0x2b0 [ 215.853114][T11497] adfspart_check_ICS+0xa5/0xa40 [ 215.858578][T11497] bdev_disk_changed+0x7ba/0x1550 [ 215.864129][T11497] blkdev_get_whole+0x380/0x510 [ 215.869506][T11497] bdev_open+0x31e/0xd30 [ 215.874284][T11497] blkdev_open+0x470/0x610 [ 215.879227][T11497] do_dentry_open+0x785/0x14e0 [ 215.884530][T11497] vfs_open+0x3b/0x340 [ 215.889163][T11497] path_openat+0x2e08/0x3860 [ 215.894293][T11497] do_file_open+0x23e/0x4a0 [ 215.899340][T11497] do_sys_openat2+0x113/0x200 [ 215.904578][T11497] __x64_sys_openat+0x138/0x170 [ 215.909982][T11497] do_syscall_64+0x14d/0xf80 [ 215.915109][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.921535][T11497] [ 215.921535][T11497] -> #3 (set->srcu){.+.+}-{0:0}: [ 215.928673][T11497] __synchronize_srcu+0xca/0x300 [ 215.934137][T11497] elevator_switch+0x1e8/0x7a0 [ 215.939426][T11497] elevator_change+0x2cc/0x450 [ 215.944725][T11497] elevator_set_default+0x36c/0x430 [ 215.950508][T11497] blk_register_queue+0x366/0x430 [ 215.956084][T11497] __add_disk+0x677/0xd50 [ 215.960948][T11497] add_disk_fwnode+0xfb/0x480 [ 215.966161][T11497] nbd_dev_add+0x72c/0xb50 [ 215.971112][T11497] nbd_init+0x168/0x1f0 [ 215.975814][T11497] do_one_initcall+0x250/0x8d0 [ 215.981214][T11497] do_initcall_level+0x104/0x190 [ 215.986782][T11497] do_initcalls+0x59/0xa0 [ 215.991642][T11497] kernel_init_freeable+0x2a6/0x3e0 [ 215.997367][T11497] kernel_init+0x1d/0x1d0 [ 216.002325][T11497] ret_from_fork+0x51e/0xb90 [ 216.007525][T11497] ret_from_fork_asm+0x1a/0x30 [ 216.012821][T11497] [ 216.012821][T11497] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 216.020736][T11497] __mutex_lock+0x19f/0x1300 [ 216.025874][T11497] elevator_change+0x1b3/0x450 [ 216.031167][T11497] elevator_set_none+0xb5/0x140 [ 216.036539][T11497] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 216.042875][T11497] nbd_start_device+0x17f/0xb10 [ 216.048251][T11497] nbd_genl_connect+0x165b/0x1cf0 [ 216.053903][T11497] genl_family_rcv_msg_doit+0x22a/0x330 [ 216.060000][T11497] genl_rcv_msg+0x61c/0x7a0 [ 216.065123][T11497] netlink_rcv_skb+0x232/0x4b0 [ 216.070411][T11497] genl_rcv+0x28/0x40 [ 216.074925][T11497] netlink_unicast+0x80f/0x9b0 [ 216.080314][T11497] netlink_sendmsg+0x813/0xb40 [ 216.085607][T11497] ____sys_sendmsg+0x972/0x9f0 [ 216.090894][T11497] ___sys_sendmsg+0x2a5/0x360 [ 216.096219][T11497] __x64_sys_sendmsg+0x1bd/0x2a0 [ 216.101693][T11497] do_syscall_64+0x14d/0xf80 [ 216.106832][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.113251][T11497] [ 216.113251][T11497] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 216.121869][T11497] blk_alloc_queue+0x546/0x680 [ 216.127162][T11497] __blk_mq_alloc_disk+0x197/0x390 [ 216.132800][T11497] nbd_dev_add+0x499/0xb50 [ 216.137746][T11497] nbd_init+0x168/0x1f0 [ 216.142461][T11497] do_one_initcall+0x250/0x8d0 [ 216.147763][T11497] do_initcall_level+0x104/0x190 [ 216.153241][T11497] do_initcalls+0x59/0xa0 [ 216.158115][T11497] kernel_init_freeable+0x2a6/0x3e0 [ 216.163841][T11497] kernel_init+0x1d/0x1d0 [ 216.168694][T11497] ret_from_fork+0x51e/0xb90 [ 216.173813][T11497] ret_from_fork_asm+0x1a/0x30 [ 216.179110][T11497] [ 216.179110][T11497] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 216.186327][T11497] __lock_acquire+0x15a5/0x2cf0 [ 216.191724][T11497] lock_acquire+0xf0/0x2e0 [ 216.196666][T11497] fs_reclaim_acquire+0x71/0x100 [ 216.202212][T11497] __kmalloc_cache_noprof+0x40/0x660 [ 216.208022][T11497] get_device_parent+0x255/0x3a0 [ 216.213493][T11497] device_add+0x2e1/0xb70 [ 216.218350][T11497] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 216.224338][T11497] wakeup_source_register+0x18a/0x380 [ 216.230253][T11497] ep_insert+0xf34/0x1a40 [ 216.235105][T11497] do_epoll_ctl+0x7f4/0xe80 [ 216.240136][T11497] __x64_sys_epoll_ctl+0x165/0x1b0 [ 216.245766][T11497] do_syscall_64+0x14d/0xf80 [ 216.250900][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.257316][T11497] [ 216.257316][T11497] other info that might help us debug this: [ 216.257316][T11497] [ 216.267624][T11497] Chain exists of: [ 216.267624][T11497] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 216.267624][T11497] [ 216.279734][T11497] Possible unsafe locking scenario: [ 216.279734][T11497] [ 216.287205][T11497] CPU0 CPU1 [ 216.292574][T11497] ---- ---- [ 216.297941][T11497] lock(gdp_mutex); [ 216.301843][T11497] lock(cpuhp_state-up); [ 216.308702][T11497] lock(gdp_mutex); [ 216.315118][T11497] lock(fs_reclaim); [ 216.319116][T11497] [ 216.319116][T11497] *** DEADLOCK *** [ 216.319116][T11497] [ 216.327261][T11497] 2 locks held by syz.0.1979/11497: [ 216.332460][T11497] #0: ffff8880559a9c68 (&ep->mtx){+.+.}-{4:4}, at: do_epoll_ctl+0x3c9/0xe80 [ 216.341267][T11497] #1: ffffffff8f17cfc8 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 216.350595][T11497] [ 216.350595][T11497] stack backtrace: [ 216.356576][T11497] CPU: 1 UID: 0 PID: 11497 Comm: syz.0.1979 Not tainted syzkaller #0 PREEMPT(full) [ 216.356595][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.356605][T11497] Call Trace: [ 216.356611][T11497] [ 216.356618][T11497] dump_stack_lvl+0xe8/0x150 [ 216.356640][T11497] print_circular_bug+0x2e1/0x300 [ 216.356664][T11497] check_noncircular+0x12e/0x150 [ 216.356686][T11497] __lock_acquire+0x15a5/0x2cf0 [ 216.356707][T11497] ? lockdep_unlock+0x5d/0xd0 [ 216.356722][T11497] ? __lock_acquire+0x146e/0x2cf0 [ 216.356744][T11497] lock_acquire+0xf0/0x2e0 [ 216.356761][T11497] ? __kmalloc_cache_noprof+0x40/0x660 [ 216.356781][T11497] fs_reclaim_acquire+0x71/0x100 [ 216.356798][T11497] ? __kmalloc_cache_noprof+0x40/0x660 [ 216.356813][T11497] __kmalloc_cache_noprof+0x40/0x660 [ 216.356829][T11497] ? get_device_parent+0x255/0x3a0 [ 216.356846][T11497] ? do_raw_spin_unlock+0xf5/0x210 [ 216.356862][T11497] get_device_parent+0x255/0x3a0 [ 216.356882][T11497] device_add+0x2e1/0xb70 [ 216.356899][T11497] ? device_initialize+0x26a/0x460 [ 216.356918][T11497] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 216.356940][T11497] wakeup_source_register+0x18a/0x380 [ 216.356959][T11497] ep_insert+0xf34/0x1a40 [ 216.356976][T11497] ? __pfx_ep_insert+0x10/0x10 [ 216.356993][T11497] ? bpf_lsm_capable+0x9/0x20 [ 216.357015][T11497] do_epoll_ctl+0x7f4/0xe80 [ 216.357039][T11497] __x64_sys_epoll_ctl+0x165/0x1b0 [ 216.357053][T11497] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 216.357071][T11497] do_syscall_64+0x14d/0xf80 [ 216.357089][T11497] ? trace_irq_disable+0x3b/0x150 [ 216.357102][T11497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.357116][T11497] ? clear_bhb_loop+0x40/0x90 [ 216.357138][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.357153][T11497] RIP: 0033:0x7f525899c819 [ 216.357169][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.357181][T11497] RSP: 002b:00007f525980a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 216.357198][T11497] RAX: ffffffffffffffda RBX: 00007f5258c15fa0 RCX: 00007f525899c819 [ 216.357209][T11497] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000009 [ 216.357218][T11497] RBP: 00007f5258a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 216.357227][T11497] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 216.357237][T11497] R13: 00007f5258c16038 R14: 00007f5258c15fa0 R15: 00007ffd1d1f2728 [ 216.357252][T11497] [ 216.674496][ T25] nbd_xmit_timeout: 2 callbacks suppressed [ 216.674522][ T25] block nbd9: Connection timed out, retrying (0/2 alive) [ 216.687574][ T25] block nbd9: Connection timed out, retrying (0/2 alive) [ 216.694794][ T25] block nbd9: Connection timed out, retrying (0/2 alive) [ 216.701885][ T25] block nbd9: Connection timed out, retrying (0/2 alive) [ 216.709005][ T25] block nbd9: Dead connection, failed to find a fallback [ 216.716171][ T25] block nbd9: shutting down sockets [ 216.721482][ T25] blk_print_req_error: 434 callbacks suppressed [ 216.721499][ T25] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.737722][ T25] buffer_io_error: 434 callbacks suppressed [ 216.737741][ T25] Buffer I/O error on dev nbd9, logical block 3, async page read [ 216.751652][ T25] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.761303][ T25] Buffer I/O error on dev nbd9, logical block 2, async page read [ 216.769157][ T25] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.778685][ T25] Buffer I/O error on dev nbd9, logical block 1, async page read [ 216.786471][ T25] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.796001][ T25] Buffer I/O error on dev nbd9, logical block 0, async page read [ 216.804153][ T9664] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.821692][ T9664] Buffer I/O error on dev nbd9, logical block 0, async page read [ 216.845264][ T9664] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.854988][ T9664] Buffer I/O error on dev nbd9, logical block 1, async page read [ 216.862951][ T9664] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.872622][ T9664] Buffer I/O error on dev nbd9, logical block 2, async page read [ 216.908567][ T9664] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.926419][ T9664] Buffer I/O error on dev nbd9, logical block 3, async page read [ 216.938158][ T9664] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.948283][ T9664] Buffer I/O error on dev nbd9, logical block 0, async page read [ 216.956683][ T9664] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 216.966533][ T9664] Buffer I/O error on dev nbd9, logical block 1, async page read [ 216.975381][ T9664] ldm_validate_partition_table(): Disk read failed. [ 216.982318][ T9664] Dev nbd9: unable to read RDB block 0 [ 216.988599][ T9664] nbd9: unable to read partition table [ 216.997514][ T9664] ldm_validate_partition_table(): Disk read failed. [ 217.004487][ T9664] Dev nbd9: unable to read RDB block 0 [ 217.010591][ T9664] nbd9: unable to read partition table [ 225.125306][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!